last executing test programs: 8m18.009408376s ago: executing program 32 (id=226): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x3, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0xfffffff8}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 8m6.207238422s ago: executing program 33 (id=180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 7m23.493096343s ago: executing program 34 (id=1109): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000003c0)={0x40004042, 0xfffffff8}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) close(0x3) 7m19.789374026s ago: executing program 35 (id=1154): syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0xc2) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x82002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffffc6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x6e02, 0xc000, 0x1, 0x1d7}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m5.941417775s ago: executing program 36 (id=1433): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58f8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc1e}, 0x94) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) 6m39.36812436s ago: executing program 37 (id=1880): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17"], 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={0x0}) 6m31.145130864s ago: executing program 38 (id=2043): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000300)={0x2, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0xfffffffffffffc60, 0x0, 0x100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x68, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x1, 0x4e24, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0xe6}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 4m50.245920764s ago: executing program 39 (id=4122): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0xffffc000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x4000004}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 4m31.289549522s ago: executing program 2 (id=4505): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000000040)=[{r2, 0x8080}], 0x1, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 4m31.152192664s ago: executing program 2 (id=4509): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r0, r4, 0x8f5, 0x100000000000000) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, 0x0) write(r2, 0x0, 0x0) 4m30.943785546s ago: executing program 2 (id=4515): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m30.812597668s ago: executing program 2 (id=4517): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chdir(0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 4m30.752722988s ago: executing program 2 (id=4520): r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0xa000000c, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) tkill(r2, 0x7) wait4(r2, 0x0, 0x0, 0x0) 4m30.355874653s ago: executing program 2 (id=4521): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x5d985000) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x2001, 0x1) getdents(r0, &(0x7f0000000300)=""/56, 0x38) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x20000840) 4m30.352330433s ago: executing program 40 (id=4521): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x5d985000) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x2001, 0x1) getdents(r0, &(0x7f0000000300)=""/56, 0x38) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x20000840) 4m28.510009504s ago: executing program 4 (id=4555): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 4m27.98089617s ago: executing program 4 (id=4562): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2c008800) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) statx(0xffffffffffffffff, 0x0, 0x6000, 0x400, 0x0) 4m27.838957942s ago: executing program 4 (id=4564): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x220, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a1", 0x4}], 0x1}, 0xff00) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008454) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 4m27.741944633s ago: executing program 4 (id=4565): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chdir(0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 4m27.711707523s ago: executing program 4 (id=4567): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002400018006000f004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 4m27.486712016s ago: executing program 4 (id=4570): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 4m27.442767036s ago: executing program 41 (id=4570): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 4m14.983616389s ago: executing program 3 (id=4764): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 4m14.380869556s ago: executing program 3 (id=4769): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xffe0}, {0x0, 0xffff}, {0xffe0}}}, 0x24}}, 0x10) 4m14.03849743s ago: executing program 3 (id=4770): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x4c032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4m13.816274443s ago: executing program 3 (id=4785): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 4m13.484639177s ago: executing program 3 (id=4789): syz_emit_ethernet(0x6a, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x82, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xffffffff}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x420003}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x10) 4m13.116260011s ago: executing program 3 (id=4792): r0 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@noload}]}, 0xff, 0x491, &(0x7f0000000340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x9a, 0x77a2ef10, 0x800005, 0x10}) fstat(r0, &(0x7f0000000800)) 4m13.116141481s ago: executing program 42 (id=4792): r0 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@noload}]}, 0xff, 0x491, &(0x7f0000000340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x9a, 0x77a2ef10, 0x800005, 0x10}) fstat(r0, &(0x7f0000000800)) 2m15.404186954s ago: executing program 6 (id=6678): socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x4, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = semget$private(0x0, 0x3, 0x282) semctl$GETVAL(r2, 0x1, 0xc, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000340)=0xf1, r1, 0x0, 0x0, 0x1}}, 0x20) 2m15.142459557s ago: executing program 6 (id=6682): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r3, 0x1, r2, 0x80003}) 2m14.168503798s ago: executing program 6 (id=6701): socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m14.116301249s ago: executing program 6 (id=6702): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 2m14.072128779s ago: executing program 6 (id=6704): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000000), 0x8, 0x800) bpf$MAP_GET_NEXT_KEY(0x3, 0x0, 0x0) mkdir(0x0, 0x2c) 2m13.684173954s ago: executing program 6 (id=6711): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1}, {0x2, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 2m13.644121254s ago: executing program 43 (id=6711): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1}, {0x2, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 1m53.547298055s ago: executing program 5 (id=6959): socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) socket$kcm(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m51.976367483s ago: executing program 5 (id=6966): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000000100)=@assoc_value, &(0x7f0000000340)=0x8) 1m51.885298984s ago: executing program 5 (id=6968): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80080, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) 1m51.672158077s ago: executing program 5 (id=6971): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$eJzs3c1rHGUYAPBnNps0bapJoRT1IIUerNRuvvyoILQeRYsFvdcl2YaQTbdkN6WJBduDvXgrgogF8Sp491j8B/wrClooUoIeRIjMZjZN0t3NR5Numv39YJL33ZnZd56ded59Z2aXDaBrnUz/5CJejehPi4Nr5uUjm3lyZbmlxzcn0imJ5eXP/koiyR5rLJ9k/weyyisR8dvXEWdyT7dbXVicKZbLpbmsPlybvTZcXVg8Oz1bnCpNla6OjY+fe2d87P333t21WN+89M/3n97/6Nw3p5a+++XhsbtJXIij2by1cTyDW2srJ4v/ZaXeuLBhwdFdaGw/STq9AexIT5bnvZH2AYPRk2U9cPB9FRHLQJdK5D90qcY4oHFuv0vnwS+MRx+unADVY+9bG39+5dpI9NfPjY4sJevOjNLz3aFdaD9t49c/791Np2h/HeLwJnWAbbl1OyJG8vmn+/8k6/92bqR+8bi9jW102/sPdNL9dPzzVrPxX251/BNNxj8DTXJ3JzbP/9zDXWimpXT890HT8e9q1zXUk9Veqo/5epMrA+XSSES8HBGnI+LKdLk02r9yDb2Zc0sPllu1v3b8l05p+42xYLYdD/OH1q8zWawVI6LvWWNPPbod8Vq+WfzJ6v5Pmuz/9PW4tMU2TpTuvd5q3ubx763lnyLeaLr/n9zRStrfnxxO9//Iyt+mbfx958TvrdrvdPzp/j/SPv6hZO392ur22/ix/99Sq3kt41892Jof/33J5/VyIwluFGu1udGIvuSTpx8fe7Juo95YPo3/9Kn2/V+z4z89+fpii/HfOX6n5aL7Yf9Pbmv/byykr0SLWVnhwcdf/tCq/a31f2/XS6ezR7L+r7nsWGmzOesKz/r6AQAAAAAAwH6Si4ijkeQKq+VcrlBY+XzH8TiSK1eqtTNXKvNXJ6P+Xdmh6M017nQPNj4PMV0ujWafh23UxzbUxyPiWER823O4Xi9MVMqTnQ4eAAAAAAAAAAAAAAAAAAAA9omBFt//T/3R0+mtA/Zc/YcNDnV6K4BO2PQn/3fjl56AfWnT/AcOrHX5n3RuO4Dnz/s/dC/5D91L/kP3kv/QveQ/dK+t5P+F57AdAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEBcungxnZaXHt+cSOuT1xfmZyrXz06WqjOF2fmJwkRl7lphqlKZKpcKE5XZiBhs93zlSuXa6FjM3xiulaq14erC4uXZyvzV2uXp2eJU6XKp97lFBgAAAAAAAAAAAAAAAAAAAC+O6sLiTLFcLs0diMLP+b145vPR6bj2uHA+4lZ6MOxo9fx+iUKhReF2luvbW6uz/RIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArPV/AAAA///HtTBf") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, 0x0, 0x0}, 0x94) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae55ddfbd1ce7d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc90500000000000039d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) getdents(r0, 0x0, 0x0) 1m51.225926422s ago: executing program 5 (id=6978): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 1m50.464183371s ago: executing program 5 (id=6984): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet(0x2, 0xa, 0xfffff7fd) getpid() setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1m50.442078341s ago: executing program 44 (id=6984): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet(0x2, 0xa, 0xfffff7fd) getpid() setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 12.111197221s ago: executing program 8 (id=8226): syz_open_dev$loop(0x0, 0x6d3ce776, 0x2e8801) socket$kcm(0x21, 0x2, 0x2) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f2435f0100088000000000950800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) syncfs(r0) r3 = socket$nl_route(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x40000005, 0x5) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x1}) 11.556883757s ago: executing program 8 (id=8232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) syz_genetlink_get_family_id$smc(&(0x7f0000000b80), r3) 11.455639348s ago: executing program 8 (id=8233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) close(0x3) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) process_vm_readv(r3, &(0x7f0000001900)=[{0x0}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/66, 0x42}, {0x0}], 0x4, &(0x7f0000002100)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001e40)=""/190, 0xbe}, {&(0x7f0000002000)=""/240, 0xf0}], 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11.412611889s ago: executing program 8 (id=8234): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22060, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='.\x02\x00', 0x4) 11.34892279s ago: executing program 8 (id=8236): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) unshare(0x62000000) syz_emit_ethernet(0x3e, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sync() socket(0xa, 0x5, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000004001000"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 10.394570111s ago: executing program 8 (id=8266): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r0], 0x38}}, 0x10) 10.343298361s ago: executing program 45 (id=8266): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r0], 0x38}}, 0x10) 6.207843459s ago: executing program 9 (id=8288): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 6.207626769s ago: executing program 1 (id=8289): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) migrate_pages(0x0, 0xfff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000020000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a000000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 6.207425189s ago: executing program 0 (id=8290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000300)=r3) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 6.207267069s ago: executing program 7 (id=8291): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f00000001c0)=ANY=[], 0x200002e6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x40108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085e, &(0x7f0000000100)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@noinit_itable}]}, 0x1, 0x548, &(0x7f00000008c0)="$eJzs3c9vI1cdAPDvOLGT3U2bbekBELRLW1jQap2Nt11VPUA5IYQqIXoEaRsSbxTFjqPYKU1YifTMFYlKnODIH8C5J+5cENy4lAMSPyJQg8Rh0IwnWSexk7SbxJH9+WhHnjdjz/e9Tea98dfxvADG1q2I2ImISkS8GxGzxfakWOKt7pI975Pdx4t7u48Xk0jTd/6Z5PuzbdHzmsyN4pjTEfGD70T8ODket721vbrQaNQ3ivJcp7k+197avrvSXFiuL9fXarUH8w/uvXH/9dqnaM30iXtfalaKtS9//Iedb/w0q9ZMsaW3Heep2/TyQZzMZER87yKCDcFE0Z7KsCvCZ1KKiOcj4uX8/J+NifynCQCMsjSdjXS2twwAjLpuDiwpVYtcwEyUStVqN4f3QlwvNVrtzp1Hrc21pW6u7GaUS49WGvV7Ra7wZpSTrDyfrz8p146U70fEcxHxi6nIy9XFVmNpmBc+ADDGbhwZ//8z1R3/AYARd/KfzQAAo8j4DwDjx/gPAOPH+A8A46c7/l/7tC9L0/RnF1EdAOAS5ON/n5t0AQCjS/4fAMbK999+O1vSveL+10vvbW2utt67u1Rvr1abm4vVxdbGenW51VrO79nTPO14jVZrff612Hz/5jfX25259tb2w2Zrc63zML+v98N6OX/WziW0DAAY5LmXPvpzko3Ib17Ll+iZy6E81JoBF6007AoAQzNxfJNPA2BMdGf78rc/MI6evMcfNOwPnNlRegBGxGlXANP9viCUpml6cVUCLtjtL8j/w7gq8v+T8n4wfvrk/w/J5wb2ISGMpMlhVwAYmjRNzjrnf5z1iQDA1XZCjv/mZV6HAMMz4PP/54vH3xYfDvxo6egzPrzIWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDVtj//b7WY5ncmSqVqNeKZfAKgcvJopVG/FxHPRsSfpspTWXl+yHUGAJ5W6W9JMf/X7dlXZw7tevHGwWolIn7yq3d++f5Cp7Pxx4hK8q+p/e2dD4vttVODTV9ECwCAk+2P0/ljzxv5T3YfL+4vl1mfv3+7e1WQxd3brcTeQfzJmMwfp6McEdf/nRTlrqQnd/E0dj6IiM/3a38SM3kOpHvJcjR+FvuZc4o/cab4pUPxS8UEzaXi/+Jz51AXGDcfZf3PW/3Ov1Lcyh/7n//TeQ/19Ir+LzvU4l7eBz6Jv9//TQzo/24dP9xU3xiv/f673bVrx/d9EPHFyYj92Hs9/c/+HPHJgPivnrGNf/nSiy8P2pf+OuJ29I/fG2uu01yfa29t311pLizXl+trtdqD+Qf33rj/em0uz1HPDR4N/vHmnWePbCr3tv/6gPjdn/x0DGr/VweNQUfe5f7mf+/+8CsD6pbF//or/eKX4oUT4mcN+NrAFh+2cP13A993Z/GXjrc/yf5NntL+O2eM//Fft49NGw4ADE97a3t1odGob1gZ0ZXK1ajG+axkv7JXoBp9V751WbEq0X/Xz1/pntNHdqXpiQesRN9XNQb1GOeRdQOugoOTPiL+O+zKAAAAAAAAAAAAAAAAfV3GN5aG3UYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG1/8DAAD//6XW2Bk=") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 5.165939851s ago: executing program 9 (id=8292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[], 0x0, 0x56, 0x0, 0x8}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003}, 0x38) sendto$inet6(r1, &(0x7f0000000000)="836bb66f", 0xfdef, 0x0, 0x0, 0xfffffffffffffec8) sendmsg$NFT_BATCH(r0, 0x0, 0x40000) 5.165670791s ago: executing program 1 (id=8293): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 5.16546836s ago: executing program 0 (id=8294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf25140000"], 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x50) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x190ec) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="64000000030101010000000000000000020000000c001980080002000d08000044000280140001800800010000000000080002007f0000010c000280050001003a"], 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1586dd6003136c00188700fc0200000000000000000000000000fdff020000000000000000000000000001"], 0x0) 5.1653057s ago: executing program 7 (id=8295): bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r0 = open_tree(0xffffffffffffffff, 0x0, 0x0) r1 = fspick(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000410) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="d1cc67"], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) 4.041044044s ago: executing program 9 (id=8296): socket$inet_udp(0x2, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write$binfmt_format(r2, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb3", 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 4.040644474s ago: executing program 1 (id=8297): ioperm(0x6, 0x9, 0x824) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 4.040525874s ago: executing program 0 (id=8298): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0xa) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x0, 0x0) 4.040346014s ago: executing program 7 (id=8299): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r5, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 2.829497427s ago: executing program 9 (id=8300): bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={0x0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xebd53000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x0, @perf_config_ext={0x3, 0x8001}, 0x2000, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.828551177s ago: executing program 1 (id=8301): waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00'}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r5, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.828156117s ago: executing program 0 (id=8302): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000), 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000240)={r3, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x40}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x204, 0x4, 0x18000, r4}, 0x10) 2.827951427s ago: executing program 7 (id=8303): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 1.510999823s ago: executing program 9 (id=8304): socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00003f9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x10c89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xa, 0xfff0}, {0x0, 0xffff}}}, 0x24}}, 0x20000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.510749693s ago: executing program 1 (id=8305): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x80, &(0x7f0000000240)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) 1.510628673s ago: executing program 0 (id=8306): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00003d6000/0x8000)=nil, 0x8000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.510460193s ago: executing program 7 (id=8307): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01000300000000000000000000000800", @ANYRES32=0x0, @ANYBLOB="060004"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 54.696879ms ago: executing program 9 (id=8308): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x894c, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8984662b0254d78d, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$cgroup(r0, 0x0, 0x200002, 0x0) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x38, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 53.90813ms ago: executing program 1 (id=8309): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%+9llu \x00'}, 0x20) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 309.76µs ago: executing program 0 (id=8310): mremap(&(0x7f0000780000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f00004fe000/0x3000)=nil) fsmount(0xffffffffffffffff, 0x1, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000041) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 0s ago: executing program 7 (id=8311): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in=@empty, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001000000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) kernel console output (not intermixed with test programs): batadv0: Interface activated: batadv_slave_0 [ 414.488695][T22542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.595928][T22619] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6713'. [ 414.606002][T22619] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6713'. [ 414.618885][T22619] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6713'. [ 415.224250][T22649] loop7: detected capacity change from 0 to 256 [ 415.367301][T22651] tipc: Started in network mode [ 415.385001][T22651] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 415.409827][T22651] tipc: Enabled bearer , priority 10 [ 415.420340][T22652] openvswitch: netlink: Message has 4 unknown bytes. [ 415.868115][T22656] netlink: 'syz.9.6742': attribute type 4 has an invalid length. [ 415.903404][T22656] netlink: 'syz.9.6742': attribute type 4 has an invalid length. [ 416.407747][T17135] tipc: Node number set to 8432298 [ 416.649253][T22678] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6752'. [ 416.659317][T22678] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6752'. [ 416.762803][T22678] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6752'. [ 416.785856][T22678] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6752'. [ 418.041303][T22719] netlink: 'syz.8.6767': attribute type 1 has an invalid length. [ 418.122444][T22719] bond2: entered promiscuous mode [ 418.165177][T22719] 8021q: adding VLAN 0 to HW filter on device bond2 [ 418.503498][T22741] netlink: 1348 bytes leftover after parsing attributes in process `syz.7.6770'. [ 418.573002][T22741] loop7: detected capacity change from 0 to 512 [ 418.621128][T22741] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.648011][T22741] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.672878][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 418.672893][ T28] audit: type=1400 audit(1778405506.628:3835): avc: denied { write } for pid=22740 comm="syz.7.6770" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 418.922548][ T28] audit: type=1326 audit(1778405506.878:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22760 comm="syz.1.6772" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536b3fcdd9 code=0x7fc00000 [ 419.045461][ T28] audit: type=1326 audit(1778405506.878:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22760 comm="syz.1.6772" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f536b3fcdd9 code=0x7fc00000 [ 419.138587][T22542] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.164028][T22728] bond2: (slave bridge6): making interface the new active one [ 419.182877][T22728] bridge6: entered promiscuous mode [ 419.209231][T22728] bond2: (slave bridge6): Enslaving as an active interface with an up link [ 419.495156][T22794] syzkaller0: delete flow: hash 1827433207 index 1 [ 419.731790][T22816] batadv_slave_1: entered promiscuous mode [ 420.280844][T22821] __nla_validate_parse: 1 callbacks suppressed [ 420.280861][T22821] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6780'. [ 420.296432][T22821] tc_dump_action: action bad kind [ 420.303043][T22822] batadv_slave_1: left promiscuous mode [ 421.001205][ T28] audit: type=1326 audit(1778405508.958:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22853 comm="syz.8.6793" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab8a7cdd9 code=0x7fc00000 [ 421.072653][ T28] audit: type=1326 audit(1778405508.958:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22853 comm="syz.8.6793" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdab8a7cdd9 code=0x7fc00000 [ 421.315418][T22876] loop5: detected capacity change from 0 to 512 [ 421.357997][T22876] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.6804: inode has both inline data and extents flags [ 421.411530][T22876] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 421.411819][T22876] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.6804: couldn't read orphan inode 15 (err -117) [ 421.421151][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 421.421168][ C0] EXT4-fs (loop5): initial error at time 1778405509: ext4_orphan_get:1397: inode 15 [ 421.421193][ C0] EXT4-fs (loop5): last error at time 1778405509: ext4_orphan_get:1397: inode 15 [ 421.582286][T22876] loop5: lost filesystem error report for type 5 error -117 [ 421.609083][T22876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.664912][ T28] audit: type=1400 audit(1778405509.618:3840): avc: denied { write } for pid=22875 comm="syz.5.6804" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 421.774222][T22883] netlink: 14 bytes leftover after parsing attributes in process `syz.8.6806'. [ 421.915621][T16337] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.991141][ T28] audit: type=1400 audit(1778405509.948:3841): avc: denied { ioctl } for pid=22891 comm="syz.5.6809" path="socket:[87641]" dev="sockfs" ino=87641 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 422.238310][T22915] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6823'. [ 422.269069][T22904] bond3: (slave veth11): Enslaving as an active interface with a down link [ 422.295421][ T28] audit: type=1400 audit(1778405510.248:3842): avc: denied { write } for pid=22894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.334538][T22915] bond3: entered promiscuous mode [ 422.352101][T22915] bond3: entered allmulticast mode [ 422.367616][T22915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 422.389522][T22924] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6816'. [ 422.410241][ T28] audit: type=1400 audit(1778405510.368:3843): avc: denied { write } for pid=22923 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 422.946160][ T28] audit: type=1400 audit(1778405510.908:3844): avc: denied { write } for pid=22929 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.725140][T22972] sctp: [Deprecated]: syz.5.6825 (pid 22972) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.725140][T22972] Use struct sctp_sack_info instead [ 424.861273][T23008] netlink: 'syz.1.6837': attribute type 16 has an invalid length. [ 424.903572][T23008] netlink: 'syz.1.6837': attribute type 17 has an invalid length. [ 424.999221][T23008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.029709][T23008] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.064500][T23008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.764637][T23028] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6841'. [ 426.329629][T23008] veth1_macvtap: left promiscuous mode [ 426.335911][T23008] veth0_macvtap: left promiscuous mode [ 426.342176][T23008] veth0_macvtap: entered promiscuous mode [ 426.349755][T23008] veth1_macvtap: entered promiscuous mode [ 426.358620][T23008] geneve0: entered promiscuous mode [ 426.366095][T23008] geneve1: left promiscuous mode [ 426.372440][T23008] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.381035][T23008] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.389317][T23008] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.397975][T23008] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 426.477644][T23008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.498313][T23008] 8021q: adding VLAN 0 to HW filter on device bond2 [ 426.518526][T23008] 8021q: adding VLAN 0 to HW filter on device bond3 [ 426.544396][T23008] bridge0: port 3(vlan0) entered blocking state [ 426.550748][T23008] bridge0: port 3(vlan0) entered listening state [ 426.567244][T23008] geneve1: entered promiscuous mode [ 426.621311][T23008] 8021q: adding VLAN 0 to HW filter on device bond4 [ 426.635828][T23008] 8021q: adding VLAN 0 to HW filter on device bond5 [ 426.649740][T23008] bond6: left promiscuous mode [ 426.651731][T23040] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6846'. [ 426.656061][T23008] 8021q: adding VLAN 0 to HW filter on device bond6 [ 426.707555][T23010] syzkaller0: entered promiscuous mode [ 426.713081][T23010] syzkaller0: entered allmulticast mode [ 426.773373][ T3444] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.782332][ T3444] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.789804][T23045] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.6848'. [ 426.791855][ T3444] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 426.810019][ T3444] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.819877][ T3444] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.829744][ T3444] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 426.839895][T23032] bridge0: port 1(syz_tun) entered blocking state [ 426.847284][T23032] bridge0: port 1(syz_tun) entered disabled state [ 426.854000][T23032] syz_tun: entered allmulticast mode [ 426.861160][T23047] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6849'. [ 426.870423][T23032] syz_tun: entered promiscuous mode [ 426.880439][T23040] bridge_slave_1: left allmulticast mode [ 426.886574][T23040] bridge_slave_1: left promiscuous mode [ 426.892417][T23040] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.902244][T23040] bridge_slave_0: left allmulticast mode [ 426.915461][T23040] bridge_slave_0: left promiscuous mode [ 426.921220][T23040] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.993506][ T3444] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.003304][ T3444] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.012465][ T3444] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 427.043044][ T3444] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.052626][ T3444] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.061607][ T3444] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 427.101906][T15342] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.116452][T15342] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.125667][T13793] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.208819][T23065] bond2: left promiscuous mode [ 427.222350][T23065] bridge6: left promiscuous mode [ 427.350055][T23065] bond3: left promiscuous mode [ 427.355180][T23065] bond3: left allmulticast mode [ 427.601218][T23093] loop7: detected capacity change from 0 to 8192 [ 427.671084][T23102] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6872'. [ 427.695500][T13797] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.746130][T23107] xt_hashlimit: size too large, truncated to 1048576 [ 427.872108][T23116] syz_tun: entered allmulticast mode [ 427.882280][T23116] lo: entered allmulticast mode [ 427.893696][T23115] syz_tun: left allmulticast mode [ 427.926587][T17135] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.965696][T23119] netlink: 'syz.7.6879': attribute type 1 has an invalid length. [ 427.996269][T23119] bond1: entered promiscuous mode [ 428.007154][T23119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 428.503080][T23119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 428.520376][T23119] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 428.545465][T23119] bond1: (slave sit1): Setting fail_over_mac to active for active-backup mode [ 428.584422][T23119] bond1: (slave sit1): making interface the new active one [ 428.592283][T23119] sit1: entered promiscuous mode [ 428.599527][T23119] bond1: (slave sit1): Enslaving as an active interface with an up link [ 428.610320][T23123] all: renamed from bridge_slave_1 (while UP) [ 429.135963][T23162] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6896'. [ 429.154165][T23162] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6896'. [ 429.300069][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 429.300085][ T28] audit: type=1400 audit(1778405517.258:3848): avc: denied { relabelfrom } for pid=23168 comm="syz.8.6899" name="NETLINK" dev="sockfs" ino=90050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 429.367315][ T28] audit: type=1400 audit(1778405517.288:3849): avc: denied { relabelto } for pid=23168 comm="syz.8.6899" name="NETLINK" dev="sockfs" ino=90050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:chkpwd_exec_t tclass=netlink_xfrm_socket permissive=1 [ 430.017269][T23175] loop7: detected capacity change from 0 to 1764 [ 430.424472][ T28] audit: type=1400 audit(1778405518.378:3850): avc: denied { nlmsg_write } for pid=23198 comm="syz.1.6910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 431.055374][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 431.139701][T23225] loop7: detected capacity change from 0 to 2048 [ 431.181841][T23225] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.257295][ T28] audit: type=1400 audit(1778405519.218:3851): avc: denied { write } for pid=23224 comm="syz.7.6920" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 431.635629][T23239] loop5: detected capacity change from 0 to 512 [ 431.647802][T23238] bond7: entered allmulticast mode [ 431.665753][T23239] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.687489][T23238] bridge5: entered promiscuous mode [ 431.698083][T23238] bridge5: entered allmulticast mode [ 431.698692][T23239] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.720641][T23238] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 431.731127][T23244] netlink: 'syz.9.6924': attribute type 1 has an invalid length. [ 431.747311][ T28] audit: type=1400 audit(1778405519.708:3852): avc: denied { write } for pid=23245 comm="syz.8.6925" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 431.786920][T23244] 8021q: adding VLAN 0 to HW filter on device bond3 [ 431.797059][T23249] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6926'. [ 431.838521][T23250] vlan2: entered allmulticast mode [ 431.855304][T23250] bond3: entered allmulticast mode [ 431.868165][T23244] bond3: (slave geneve0): making interface the new active one [ 431.875836][T23244] geneve0: entered allmulticast mode [ 431.882878][T23244] bond3: (slave geneve0): Enslaving as an active interface with an up link [ 431.926433][T16337] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.986414][T22542] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.274036][T13800] Process accounting resumed [ 432.306261][T23287] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 432.957168][T23320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6951'. [ 433.080181][T23331] loop5: detected capacity change from 0 to 512 [ 433.094598][T23331] EXT4-fs: Ignoring removed mblk_io_submit option [ 433.103116][T23331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 433.119194][T23331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.133267][T23331] ext4 filesystem being mounted at /451/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 433.147238][T23331] bond6: left allmulticast mode [ 433.175360][T16337] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.301895][T23342] loop7: detected capacity change from 0 to 8192 [ 434.757512][T23354] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6974'. [ 434.782574][T23358] loop7: detected capacity change from 0 to 512 [ 434.786366][T23354] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 434.799654][T23354] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 434.821467][T23358] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.852344][T23362] macvlan3: entered promiscuous mode [ 434.859319][T23358] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.870358][T23362] macvlan3: entered allmulticast mode [ 434.876240][T23362] bond4: (slave macvlan3): Error -98 calling set_mac_address [ 435.020755][T23372] team1: left promiscuous mode [ 435.038380][T23372] team1: left allmulticast mode [ 435.044357][T23375] loop5: detected capacity change from 0 to 1024 [ 435.056964][T23372] team2: left promiscuous mode [ 435.073259][T23372] team2: left allmulticast mode [ 435.080737][T23375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.093971][T23372] vlan2: left allmulticast mode [ 435.102463][T23372] bond3: left allmulticast mode [ 435.112569][T23372] geneve0: left allmulticast mode [ 435.126308][ T28] audit: type=1400 audit(1778405523.088:3853): avc: denied { write } for pid=23374 comm="syz.5.6971" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 435.196456][T23375] loop5: detected capacity change from 1024 to 0 [ 435.207236][T23375] EXT4-fs error (device loop5): ext4_get_inode_loc:5023: inode #2: block 5: comm syz.5.6971: unable to read itable block [ 435.224479][ T28] audit: type=1400 audit(1778405523.118:3854): avc: denied { mounton } for pid=23374 comm="syz.5.6971" path="/455/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 435.266423][T23375] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 435.275172][T22542] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.287005][T23375] EXT4-fs (loop5): I/O error while writing superblock [ 435.304189][T23375] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6383: IO failure [ 435.323904][T23375] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 435.341609][T23375] EXT4-fs (loop5): I/O error while writing superblock [ 435.373643][T23375] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #2: comm syz.5.6971: mark_inode_dirty error [ 435.409015][T23375] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 435.442662][T23375] EXT4-fs (loop5): I/O error while writing superblock [ 435.509623][T13533] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:5008: inode #2: block 5: comm kworker/u8:30: unable to read itable block [ 435.536487][T13533] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 435.565373][T13533] EXT4-fs (loop5): I/O error while writing superblock [ 435.588036][T16337] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.625665][T23393] netlink: 'syz.7.6980': attribute type 1 has an invalid length. [ 435.640218][T16337] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 435.659999][T23393] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.670431][T16337] EXT4-fs (loop5): I/O error while writing superblock [ 435.683528][T23395] vlan2: entered allmulticast mode [ 435.693783][T23377] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 435.704024][T23395] bond2: entered allmulticast mode [ 435.719055][T16337] syz_tun (unregistering): left allmulticast mode [ 435.742835][T16337] syz_tun (unregistering): left promiscuous mode [ 435.756550][T16337] bridge0: port 1(syz_tun) entered disabled state [ 435.797829][T23393] bond2: (slave geneve2): making interface the new active one [ 435.822060][T23393] geneve2: entered allmulticast mode [ 435.854626][T23393] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 436.080000][T23402] xt_hashlimit: size too large, truncated to 1048576 [ 436.387436][T15330] bond0 (unregistering): Released all slaves [ 436.413204][T15330] bond1 (unregistering): Released all slaves [ 436.433014][T15330] bond2 (unregistering): Released all slaves [ 436.453730][T15330] bond3 (unregistering): (slave veth7): Releasing active interface [ 436.470677][T15330] batadv0: entered promiscuous mode [ 436.483335][T15330] bond3 (unregistering): (slave batadv0): Releasing active interface [ 436.492384][T15330] bond3 (unregistering): Released all slaves [ 436.501675][T15330] bond4 (unregistering): Released all slaves [ 436.510664][T15330] bond5 (unregistering): Released all slaves [ 436.519950][T15330] bond6 (unregistering): Released all slaves [ 436.580168][T15330] IPVS: stopping backup sync thread 21912 ... [ 436.848233][T23411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6986'. [ 437.061297][T15330] IPVS: stop unused estimator thread 0... [ 437.068103][T23430] loop7: detected capacity change from 0 to 128 [ 437.320091][T23436] bio_check_eod: 41 callbacks suppressed [ 437.320147][T23436] syz.7.6990: attempt to access beyond end of device [ 437.320147][T23436] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 437.342332][T23407] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.358344][T23407] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.378842][T23407] bridge_slave_0: entered allmulticast mode [ 437.386316][T23436] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 437.402887][T23407] bridge_slave_0: entered promiscuous mode [ 437.422384][T23430] syz.7.6990: attempt to access beyond end of device [ 437.422384][T23430] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 437.442173][T23407] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.462321][T23407] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.470354][T23430] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 437.486504][T23407] bridge_slave_1: entered allmulticast mode [ 437.504718][T23407] bridge_slave_1: entered promiscuous mode [ 437.578176][T23407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.599991][T23407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.680294][T23407] team0: Port device team_slave_0 added [ 437.699867][T23407] team0: Port device team_slave_1 added [ 437.720505][T23407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.728079][T23407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.755201][T23407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.768577][T23407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.776490][T23407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.803954][T23407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.831125][T13796] team_slave_0: entered promiscuous mode [ 437.836812][T13796] team_slave_1: entered promiscuous mode [ 437.860766][T23471] geneve3: entered promiscuous mode [ 437.866228][T23471] geneve3: entered allmulticast mode [ 437.877447][T23407] hsr_slave_0: entered promiscuous mode [ 437.883562][T23407] hsr_slave_1: entered promiscuous mode [ 437.890371][T23407] debugfs: 'hsr0' already exists in 'hsr' [ 437.896684][T23407] Cannot create hsr debugfs directory [ 437.902979][T23475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7007'. [ 437.918612][T23475] ip6gre3: entered promiscuous mode [ 437.928242][T23475] ip6gre3: entered allmulticast mode [ 437.958319][T13796] team_slave_0: left promiscuous mode [ 437.963771][T13796] team_slave_1: left promiscuous mode [ 437.974012][T23475] netlink: 'syz.1.7007': attribute type 6 has an invalid length. [ 437.982289][T23475] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7007'. [ 438.144544][T23407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.184922][T23407] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.204819][T13533] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.211955][T13533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.227751][T13533] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.234898][T13533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.448596][T23528] netlink: 1319 bytes leftover after parsing attributes in process `syz.7.7024'. [ 438.496431][T23407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.541864][T13800] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 438.561007][T13800] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 438.705031][T23407] veth0_vlan: entered promiscuous mode [ 438.734219][T23407] veth1_vlan: entered promiscuous mode [ 438.758334][T23407] veth0_macvtap: entered promiscuous mode [ 438.770377][T23407] veth1_macvtap: entered promiscuous mode [ 438.784977][T23407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.794684][T23407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.893772][T23558] loop0: detected capacity change from 0 to 512 [ 438.922465][T23558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.969428][T23558] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.236987][T23407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.365368][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 441.170634][T23644] netlink: 'syz.7.7059': attribute type 16 has an invalid length. [ 441.194639][T23640] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.201939][T23644] netlink: 'syz.7.7059': attribute type 17 has an invalid length. [ 441.216217][T23640] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.369560][T23644] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.376760][T23644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.390465][T23644] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.397610][T23644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.488057][T23644] bond1: left promiscuous mode [ 441.492970][T23644] sit1: left promiscuous mode [ 441.507136][T23644] vlan2: left allmulticast mode [ 441.512090][T23644] bond2: left allmulticast mode [ 441.517386][T23644] geneve2: left allmulticast mode [ 441.663598][T23648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7062'. [ 441.784885][ T28] audit: type=1400 audit(1778405529.738:3855): avc: denied { getopt } for pid=23657 comm="syz.7.7064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 442.177677][T23685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7073'. [ 442.285080][ T3379] kernel read not supported for file inotify (pid: 3379 comm: kworker/1:4) [ 442.862224][ T28] audit: type=1326 audit(1778405530.818:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23699 comm="syz.1.7079" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f536b3fcdd9 code=0x0 [ 442.891101][T23696] loop0: detected capacity change from 0 to 512 [ 442.987160][T23696] EXT4-fs: Ignoring removed oldalloc option [ 443.017805][T23696] EXT4-fs (loop0): filesystem is read-only [ 443.038435][T23696] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 443.108026][T23696] EXT4-fs (loop0): filesystem is read-only [ 443.122179][T23696] EXT4-fs (loop0): orphan cleanup on readonly fs [ 443.152775][T23696] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7077: bg 0: block 64: padding at end of block bitmap is not set [ 443.182687][T23696] loop0: lost filesystem error report for type 5 error -117 [ 443.185014][T23696] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 443.192725][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 443.192832][ C1] EXT4-fs (loop0): initial error at time 1778405531: ext4_validate_block_bitmap:441 [ 443.192944][ C1] EXT4-fs (loop0): last error at time 1778405531: ext4_validate_block_bitmap:441 [ 443.243492][T23696] loop0: lost filesystem error report for type 5 error -117 [ 443.250391][T23696] EXT4-fs (loop0): 1 orphan inode deleted [ 443.335717][T23696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 443.376491][T23721] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7086'. [ 443.419696][T23407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.487393][T23725] tipc: Failed to remove unknown binding: 66,0,0/0:3715959240/3715959241 [ 445.133290][T23766] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7103'. [ 445.397599][T23772] loop0: detected capacity change from 0 to 128 [ 445.405284][T23772] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 445.418194][T23772] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 445.504999][T15330] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 445.760662][T23788] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7113'. [ 445.951791][T23796] bond8: (slave veth13): Enslaving as an active interface with a down link [ 445.976397][T23800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7116'. [ 446.010627][T23800] 8021q: adding VLAN 0 to HW filter on device bond8 [ 446.234074][T23810] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7121'. [ 446.471930][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7124'. [ 446.606440][T23821] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 447.290123][T23836] bridge0: port 3(vlan0) entered disabled state [ 448.260340][T23836] bond1: (slave bridge2): Releasing active interface [ 448.273388][T23836] bond3: (slave geneve2): Releasing active interface [ 448.284166][T23836] vlan0: left allmulticast mode [ 448.289940][T23836] geneve0: left allmulticast mode [ 448.295225][T23836] bridge0: port 3(vlan0) entered disabled state [ 448.338520][T23836] bond5: (slave vxcan3): Releasing backup interface [ 448.348551][T23836] bond5: (slave vxcan5): making interface the new active one [ 448.360753][T23836] bond5: (slave vxcan5): Releasing backup interface [ 448.377073][T23836] bond7: (slave bridge5): Releasing backup interface [ 448.403343][T23836] bond8: (slave veth13): Releasing active interface [ 448.443804][T15330] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.462534][T15330] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.489217][T15330] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 448.515317][T15330] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.541518][T15330] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.554534][T15330] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 448.582507][T15330] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.602177][T15330] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.611953][T15330] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 448.637942][T15330] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.675847][T15330] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.715046][T15330] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 448.749575][T23902] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7151'. [ 449.009175][T23917] netlink: 'syz.8.7156': attribute type 1 has an invalid length. [ 449.038583][T23917] 8021q: adding VLAN 0 to HW filter on device bond4 [ 449.058119][T23917] bond4: (slave ip6erspan0): making interface the new active one [ 449.074035][T23917] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 449.100451][T23921] bond0: (slave team0): Releasing backup interface [ 449.124749][T23921] bridge_slave_1: left allmulticast mode [ 449.140932][T23921] bridge_slave_1: left promiscuous mode [ 449.155159][T23921] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.175009][T23921] bond0: (slave bond_slave_0): Releasing backup interface [ 449.194827][T23921] bond0: (slave bond_slave_1): Releasing backup interface [ 449.215132][T23921] team0: Port device team_slave_0 removed [ 449.226867][T23921] team0: Port device team_slave_1 removed [ 449.242926][T23921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.255433][T23921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.274591][T23921] bond1: (slave bridge8): Releasing backup interface [ 449.295094][T23921] bond3: (slave geneve0): Releasing active interface [ 449.514266][T23936] loop0: detected capacity change from 0 to 2048 [ 449.527163][T23936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.573949][T23936] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.586903][ T28] audit: type=1400 audit(1778405537.548:3857): avc: denied { write } for pid=23935 comm="syz.0.7162" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 449.612796][ T28] audit: type=1400 audit(1778405537.578:3858): avc: denied { create } for pid=23935 comm="syz.0.7162" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 449.855817][T23923] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.863027][T23923] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.013589][T23923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.024956][T23923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.137725][T23407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.189677][T23956] netlink: 172 bytes leftover after parsing attributes in process `syz.7.7169'. [ 450.220498][T23956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7169'. [ 450.235072][T23956] netlink: 172 bytes leftover after parsing attributes in process `syz.7.7169'. [ 450.255065][T23961] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7171'. [ 450.264801][T23956] netlink: 100 bytes leftover after parsing attributes in process `syz.7.7169'. [ 450.281172][T23956] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7169'. [ 450.367778][T23971] loop0: detected capacity change from 0 to 512 [ 450.422715][T23971] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.7167: bad orphan inode 13 [ 450.445991][T23971] loop0: lost filesystem error report for type 5 error -117 [ 450.446227][T23971] ext4_test_bit(bit=12, block=4) = 1 [ 450.458917][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 450.458938][ C1] EXT4-fs (loop0): initial error at time 1778405538: ext4_orphan_get:1423 [ 450.458982][ C1] EXT4-fs (loop0): last error at time 1778405538: ext4_orphan_get:1423 [ 450.486683][T23971] is_bad_inode(inode)=0 [ 450.490884][T23971] NEXT_ORPHAN(inode)=0 [ 450.495010][T23971] max_ino=32 [ 450.498313][T23971] i_nlink=1 [ 450.501853][T23971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.534312][T23963] EXT4-fs warning (device loop0): dx_probe:813: inode #2: comm syz.0.7167: Hash code is SIPHASH, but hash not in dirent [ 450.577316][T23963] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.7167: Corrupt directory, running e2fsck is recommended [ 450.615754][ T28] audit: type=1400 audit(1778405538.568:3859): avc: denied { write } for pid=23962 comm="syz.0.7167" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 450.639524][T23963] EXT4-fs warning (device loop0): dx_probe:813: inode #2: comm syz.0.7167: Hash code is SIPHASH, but hash not in dirent [ 450.662860][T23963] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.7167: Corrupt directory, running e2fsck is recommended [ 450.699481][T23407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.687392][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7188'. [ 451.805963][T24020] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7192'. [ 451.815383][T24020] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7192'. [ 452.582981][ T28] audit: type=1326 audit(1778405540.538:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24067 comm="syz.0.7209" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 452.662561][ T28] audit: type=1326 audit(1778405540.538:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24067 comm="syz.0.7209" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 452.730800][T24077] netlink: 'syz.0.7213': attribute type 1 has an invalid length. [ 452.745149][ T28] audit: type=1326 audit(1778405540.538:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24067 comm="syz.0.7209" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 452.843650][T24080] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.850563][ T28] audit: type=1326 audit(1778405540.538:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24067 comm="syz.0.7209" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 452.887685][ T28] audit: type=1326 audit(1778405540.538:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24067 comm="syz.0.7209" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f609e95cb42 code=0x7ffc0000 [ 452.914341][ T28] audit: type=1326 audit(1778405540.538:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24067 comm="syz.0.7209" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f609e95cb42 code=0x7ffc0000 [ 452.940007][ T28] audit: type=1326 audit(1778405540.538:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24067 comm="syz.0.7209" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 452.969062][T24080] bond1: (slave bond2): making interface the new active one [ 452.976937][T24080] bond1: (slave bond2): Enslaving as an active interface with an up link [ 453.023546][T24077] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 453.068234][T24083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.300475][T24110] netlink: 'syz.1.7225': attribute type 11 has an invalid length. [ 455.136530][T24157] __nla_validate_parse: 2 callbacks suppressed [ 455.136556][T24157] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7245'. [ 455.771190][T24176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7250'. [ 455.783971][T24176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7250'. [ 455.795834][T24176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7250'. [ 455.807477][T24176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7250'. [ 455.818981][T24176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7250'. [ 455.832880][T24176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7250'. [ 455.842433][T24176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7250'. [ 455.853606][T24176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7250'. [ 455.891128][T24176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7250'. [ 457.146211][T24206] pimreg: entered allmulticast mode [ 457.175611][T24206] pimreg: left allmulticast mode [ 457.259991][T24211] syzkaller0: entered promiscuous mode [ 457.276978][T24211] syzkaller0: entered allmulticast mode [ 457.289420][T24211] tipc: Started in network mode [ 457.306880][T24211] tipc: Node identity ee619130343e, cluster identity 4711 [ 457.314368][T24211] tipc: Enabled bearer , priority 0 [ 457.337643][T24210] tipc: Resetting bearer [ 457.348511][T24210] tipc: Disabling bearer [ 457.462997][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 457.463014][ T28] audit: type=1400 audit(1778405545.418:3895): avc: denied { bind } for pid=24222 comm="syz.7.7268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 457.883708][T24255] loop7: detected capacity change from 0 to 512 [ 458.025732][T24255] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.065562][T24255] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.162046][T22542] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.545645][T24297] netlink: 'syz.8.7296': attribute type 1 has an invalid length. [ 458.699028][T24297] 8021q: adding VLAN 0 to HW filter on device bond5 [ 458.719417][T24298] bond5: entered promiscuous mode [ 459.265113][T24302] bond5 (unregistering): left promiscuous mode [ 459.291222][T24302] bond5 (unregistering): Released all slaves [ 459.313795][ T28] audit: type=1400 audit(1778405547.268:3896): avc: denied { mounton } for pid=24305 comm="syz.0.7299" path="/file0" dev="autofs" ino=95241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 459.355347][T13533] bridge_slave_1: left allmulticast mode [ 459.360545][ T28] audit: type=1400 audit(1778405547.308:3897): avc: denied { remount } for pid=24305 comm="syz.0.7299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 459.363433][T13533] bridge_slave_1: left promiscuous mode [ 459.430124][T13533] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.549240][T13533] bridge_slave_0: left allmulticast mode [ 459.565398][T13533] bridge_slave_0: left promiscuous mode [ 459.611466][T13533] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.269144][T13533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.289246][T13533] bond0 (unregistering): Released all slaves [ 460.559305][T13533] hsr_slave_0: left promiscuous mode [ 460.577386][T13533] hsr_slave_1: left promiscuous mode [ 460.589132][T13533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.613710][T13533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.632328][T13533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.641120][T13533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.654205][T13533] veth1_macvtap: left promiscuous mode [ 460.661107][T13533] veth0_macvtap: left promiscuous mode [ 460.667465][T13533] veth1_vlan: left promiscuous mode [ 460.672870][T13533] veth0_vlan: left promiscuous mode [ 460.772261][T13533] team0 (unregistering): Port device team_slave_1 removed [ 460.786499][T13533] team0 (unregistering): Port device team_slave_0 removed [ 460.824815][T24354] Failed to initialize the IGMP autojoin socket (err -2) [ 460.840185][T24363] netlink: 'syz.0.7319': attribute type 3 has an invalid length. [ 460.844444][T24360] Failed to initialize the IGMP autojoin socket (err -2) [ 460.850546][T24363] netlink: 'syz.0.7319': attribute type 3 has an invalid length. [ 460.902771][T24367] ref_ctr increment failed for inode: 0x148 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811a270000 [ 460.954002][T24375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.421318][T24405] __nla_validate_parse: 30 callbacks suppressed [ 461.421408][T24405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7347'. [ 461.789091][T24423] netlink: 'syz.8.7345': attribute type 10 has an invalid length. [ 462.770331][T24440] netlink: 'syz.0.7354': attribute type 1 has an invalid length. [ 462.812934][T24440] 8021q: adding VLAN 0 to HW filter on device bond3 [ 462.834609][T24440] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 462.859590][T24440] bond3: entered allmulticast mode [ 462.901563][T24440] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 462.956119][T24448] Failed to initialize the IGMP autojoin socket (err -2) [ 463.084621][T24455] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 463.115988][T24455] bond3 (unregistering): Released all slaves [ 463.122350][T24458] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7360'. [ 463.174524][T24460] netlink: 'syz.9.7361': attribute type 11 has an invalid length. [ 463.194762][T24455] netlink: 'syz.7.7360': attribute type 30 has an invalid length. [ 463.280130][ T28] audit: type=1326 audit(1778405551.238:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24446 comm="syz.1.7357" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f536b3fcdd9 code=0x0 [ 463.603234][T24477] loop0: detected capacity change from 0 to 512 [ 463.631818][T24477] EXT4-fs: Ignoring removed bh option [ 463.638960][T24477] EXT4-fs: Ignoring removed mblk_io_submit option [ 463.654813][T24477] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 463.668557][T24477] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 463.678132][T24477] EXT4-fs (loop0): orphan cleanup on readonly fs [ 463.689664][T24477] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 463.699830][T24477] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 463.710778][T24477] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.7367: Failed to acquire dquot type 1 [ 463.723118][T24477] loop0: lost filesystem error report for type 5 error -5 [ 463.725370][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 463.740730][ C0] EXT4-fs (loop0): last error at time 1778405551: ext4_acquire_dquot:7034 [ 463.754661][T24477] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.7367: Invalid block bitmap block 0 in block_group 0 [ 463.802791][T24477] loop0: lost filesystem error report for type 5 error -117 [ 463.803171][T24477] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.7367: Invalid block bitmap block 0 in block_group 0 [ 463.856193][T24477] loop0: lost filesystem error report for type 5 error -117 [ 463.857645][T24477] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.7367: Invalid block bitmap block 0 in block_group 0 [ 463.887478][T24477] loop0: lost filesystem error report for type 5 error -117 [ 463.890860][T24477] Quota error (device loop0): write_blk: dquota write failed [ 463.911729][T24477] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 463.925103][T24477] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.7367: Failed to acquire dquot type 1 [ 463.937521][T24477] loop0: lost filesystem error report for type 5 error -28 [ 463.944540][T24477] Quota error (device loop0): write_blk: dquota write failed [ 463.961260][T24477] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 463.972299][T24477] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.7367: Failed to acquire dquot type 1 [ 463.985339][T24477] loop0: lost filesystem error report for type 5 error -28 [ 463.988067][T24477] EXT4-fs (loop0): 1 orphan inode deleted [ 464.019262][T24477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 464.079763][T23407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.173412][T24489] netlink: 220 bytes leftover after parsing attributes in process `syz.8.7370'. [ 464.188436][T24489] netlink: 120 bytes leftover after parsing attributes in process `syz.8.7370'. [ 464.198591][T24489] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7370'. [ 464.416620][T24500] tipc: Failed to remove unknown binding: 66,0,0/0:4174906308/4174906309 [ 464.438243][T24500] tipc: Failed to remove unknown binding: 66,0,0/0:4174906308/4174906309 [ 464.523208][T24506] loop0: detected capacity change from 0 to 128 [ 464.548303][T24506] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 464.583129][T24506] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 464.627762][ T28] audit: type=1400 audit(1778405552.588:3899): avc: denied { write } for pid=24505 comm="syz.0.7377" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.655761][ T28] audit: type=1400 audit(1778405552.618:3900): avc: denied { write } for pid=24505 comm="syz.0.7377" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.686730][ T28] audit: type=1400 audit(1778405552.648:3901): avc: denied { write } for pid=24505 comm="syz.0.7377" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.958977][T23407] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 465.199979][T24541] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7389'. [ 465.214918][T24541] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7389'. [ 465.366708][T24549] Failed to initialize the IGMP autojoin socket (err -2) [ 467.843153][T24624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.871500][T24624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.121301][T24635] Failed to initialize the IGMP autojoin socket (err -2) [ 468.426238][T24660] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7430'. [ 468.481884][T24666] loop7: detected capacity change from 0 to 512 [ 468.497678][T24666] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 468.571064][T24672] loop0: detected capacity change from 0 to 128 [ 469.047592][T24683] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7440'. [ 469.154193][T24689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7441'. [ 469.184781][T24689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7441'. [ 469.219672][T24693] Failed to initialize the IGMP autojoin socket (err -2) [ 469.635292][T24713] loop7: detected capacity change from 0 to 512 [ 469.654955][T24713] EXT4-fs: Ignoring removed bh option [ 469.665459][T24713] EXT4-fs: Ignoring removed mblk_io_submit option [ 469.689222][T24713] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 469.737725][T24713] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 469.770797][T24713] EXT4-fs (loop7): orphan cleanup on readonly fs [ 469.832836][T24713] __quota_error: 1 callbacks suppressed [ 469.833021][T24713] Quota error (device loop7): do_insert_tree: Free block already used in tree: block 4 [ 469.883040][T24713] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota [ 469.904038][T24713] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.7451: Failed to acquire dquot type 1 [ 469.923534][T24713] loop7: lost filesystem error report for type 5 error -5 [ 469.925300][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 469.938920][ C1] EXT4-fs (loop7): last error at time 1778405813: ext4_acquire_dquot:7034 [ 469.951183][T24713] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.7451: Invalid block bitmap block 0 in block_group 0 [ 469.972394][T24713] loop7: lost filesystem error report for type 5 error -117 [ 469.976700][T24713] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.7451: Invalid block bitmap block 0 in block_group 0 [ 470.005459][T24713] loop7: lost filesystem error report for type 5 error -117 [ 470.008293][T24713] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.7451: Invalid block bitmap block 0 in block_group 0 [ 470.032441][T24713] loop7: lost filesystem error report for type 5 error -117 [ 470.039163][T24713] Quota error (device loop7): write_blk: dquota write failed [ 470.055365][T24713] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 470.068506][T24713] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.7451: Failed to acquire dquot type 1 [ 470.081715][T24713] loop7: lost filesystem error report for type 5 error -28 [ 470.085092][T24713] Quota error (device loop7): write_blk: dquota write failed [ 470.106647][T24713] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 470.117991][T24713] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.7451: Failed to acquire dquot type 1 [ 470.130687][T24713] loop7: lost filesystem error report for type 5 error -28 [ 470.132775][T24713] EXT4-fs (loop7): 1 orphan inode deleted [ 470.171183][T24713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 470.197008][T24713] syz.7.7451 (24713) used greatest stack depth: 7552 bytes left [ 470.217307][T22542] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.523559][T24747] tipc: Failed to remove unknown binding: 66,1,1/0:1147209385/1147209387 [ 470.532084][T24747] tipc: Failed to remove unknown binding: 66,1,1/0:1147209385/1147209387 [ 470.603188][T24760] ref_ctr increment failed for inode: 0x35a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881253cca40 [ 470.931546][ T28] audit: type=1326 audit(3925889462.894:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24784 comm="syz.8.7476" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab8a7cdd9 code=0x7ffc0000 [ 471.008490][ T28] audit: type=1326 audit(3925889462.924:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24784 comm="syz.8.7476" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab8a7cdd9 code=0x7ffc0000 [ 471.034937][ T28] audit: type=1326 audit(3925889462.934:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24784 comm="syz.8.7476" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdab8a7cdd9 code=0x7ffc0000 [ 471.062338][T24792] ref_ctr increment failed for inode: 0x10b9 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811a270000 [ 471.077490][ T28] audit: type=1326 audit(3925889462.934:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24784 comm="syz.8.7476" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab8a7cdd9 code=0x7ffc0000 [ 471.474151][T24804] Failed to initialize the IGMP autojoin socket (err -2) [ 471.503724][T24806] tipc: Failed to remove unknown binding: 66,0,0/10070698:3404866706/3404866708 [ 471.513741][T24806] tipc: Failed to remove unknown binding: 66,0,0/10070698:3404866706/3404866707 [ 471.523576][T24806] tipc: Failed to remove unknown binding: 66,0,0/10070698:3404866706/3404866708 [ 471.532751][T24806] tipc: Failed to remove unknown binding: 66,0,0/10070698:3404866706/3404866707 [ 471.707268][T24817] netlink: 'syz.0.7489': attribute type 1 has an invalid length. [ 471.723988][T24817] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7489'. [ 471.855418][T24822] loop0: detected capacity change from 0 to 1024 [ 471.884479][T24822] EXT4-fs: Ignoring removed orlov option [ 471.922759][T24822] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 471.962736][T24822] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 472.008216][T24822] EXT4-fs (loop0): invalid journal inode [ 472.028094][T24822] EXT4-fs (loop0): can't get journal size [ 472.046434][T24822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 472.085839][T24822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.459446][T24842] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7497'. [ 472.502310][T24846] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7499'. [ 472.583368][T24846] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7499'. [ 474.808988][T24881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7510'. [ 474.834846][T24881] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24881 comm=syz.0.7510 [ 474.891350][T24895] Failed to initialize the IGMP autojoin socket (err -2) [ 474.920955][T24899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7513'. [ 474.953091][T24899] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24899 comm=syz.1.7513 [ 475.120138][T24907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7515'. [ 475.181544][T24910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7517'. [ 475.323699][T24900] loop0: detected capacity change from 0 to 8192 [ 475.367301][T24900] loop0: p1 < > p2 p4 < p5 > [ 475.372619][T24900] loop0: partition table partially beyond EOD, truncated [ 475.380829][T24900] loop0: p1 start 134217728 is beyond EOD, truncated [ 475.388784][T24900] loop0: p2 size 591360 extends beyond EOD, truncated [ 475.401140][T24900] loop0: p5 size 591360 extends beyond EOD, truncated [ 475.628805][T24924] loop0: detected capacity change from 0 to 512 [ 475.663422][T24924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.677649][T24924] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.717317][T23407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.735755][T24933] netlink: 96 bytes leftover after parsing attributes in process `syz.7.7532'. [ 475.857070][T24933] loop7: detected capacity change from 0 to 2048 [ 475.902699][T24933] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.950167][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 475.950184][ T28] audit: type=1400 audit(3925889467.914:3921): avc: denied { write } for pid=24932 comm="syz.7.7532" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 476.042093][T22542] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.144017][T24949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.170780][T24949] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.197429][T24949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.228490][T24949] wireguard: wg0: Could not create IPv4 socket [ 476.249502][T24949] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 476.326232][T24953] Failed to initialize the IGMP autojoin socket (err -2) [ 476.873024][T24955] loop7: detected capacity change from 0 to 8192 [ 476.926427][T24955] loop7: p1 < > p2 p4 < p5 > [ 476.934533][T24955] loop7: partition table partially beyond EOD, truncated [ 476.947123][T24955] loop7: p1 start 134217728 is beyond EOD, truncated [ 476.954292][T24955] loop7: p2 size 591360 extends beyond EOD, truncated [ 476.966194][T24955] loop7: p5 size 591360 extends beyond EOD, truncated [ 477.074810][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 477.077552][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 477.096764][T21524] udevd[21524]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 477.258247][T24969] netlink: 'syz.7.7541': attribute type 1 has an invalid length. [ 477.283774][T24969] 8021q: adding VLAN 0 to HW filter on device bond4 [ 477.298925][T24969] bond4: entered allmulticast mode [ 477.316513][T24973] Failed to initialize the IGMP autojoin socket (err -2) [ 477.335348][T24969] bond4: (slave ip6gretap1): making interface the new active one [ 477.355285][T24969] ip6gretap1: entered allmulticast mode [ 477.366752][T24969] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 478.217040][T24994] ref_ctr increment failed for inode: 0xb36 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104bce540 [ 478.949016][ T28] audit: type=1400 audit(3925889470.914:3922): avc: denied { create } for pid=25015 comm="syz.0.7556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 478.953668][T25016] netlink: 'syz.0.7556': attribute type 11 has an invalid length. [ 479.134231][T25026] Failed to initialize the IGMP autojoin socket (err -2) [ 479.554867][T25034] netlink: 60 bytes leftover after parsing attributes in process `syz.9.7562'. [ 480.344483][T25054] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7572'. [ 480.532156][T25068] netlink: 'syz.9.7578': attribute type 46 has an invalid length. [ 481.544788][T25101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7589'. [ 481.736374][T25109] Failed to initialize the IGMP autojoin socket (err -2) [ 481.922721][T25116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7595'. [ 482.035709][T25121] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 482.042986][T25121] IPv6: NLM_F_CREATE should be set when creating new route [ 482.050317][T25121] IPv6: NLM_F_CREATE should be set when creating new route [ 482.068879][T25116] bond10: entered promiscuous mode [ 482.114747][T25116] 8021q: adding VLAN 0 to HW filter on device bond10 [ 482.184673][T25118] 8021q: adding VLAN 0 to HW filter on device bond10 [ 482.192217][T25121] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 482.218795][T25118] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 482.264087][T25118] bond10: (slave wireguard0): Error -95 calling set_mac_address [ 482.317827][T25121] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 482.354820][T25121] bond10: (slave wireguard0): Error -95 calling set_mac_address [ 482.931867][T25134] Failed to initialize the IGMP autojoin socket (err -2) [ 483.087467][T25158] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7607'. [ 483.127147][T25158] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25158 comm=syz.8.7607 [ 484.002860][T25188] loop0: detected capacity change from 0 to 512 [ 484.029581][T25188] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 484.117954][T25188] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 484.145249][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 484.151755][ C1] EXT4-fs (loop0): initial error at time 3925889476: ext4_mb_generate_buddy:1317 [ 484.160932][ C1] EXT4-fs (loop0): last error at time 3925889476: ext4_mb_generate_buddy:1317 [ 484.181819][T25188] Quota error (device loop0): write_blk: dquota write failed [ 484.196755][T25188] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 484.206148][T25188] Quota error (device loop0): write_blk: dquota write failed [ 484.225408][T25188] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 484.245296][T25188] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.7619: Failed to acquire dquot type 1 [ 484.265282][T25188] loop0: lost filesystem error report for type 5 error -28 [ 484.266963][T25188] EXT4-fs (loop0): 1 truncate cleaned up [ 484.292420][T25188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.470853][T25188] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.7619'. [ 484.499375][T25207] Failed to initialize the IGMP autojoin socket (err -2) [ 485.024448][T23407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.094237][T25217] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7628'. [ 485.344179][T25225] loop0: detected capacity change from 0 to 512 [ 485.363145][ T28] audit: type=1326 audit(3925889477.324:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25222 comm="syz.1.7633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536b3fcdd9 code=0x7ffc0000 [ 485.468850][ T28] audit: type=1326 audit(3925889477.324:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25222 comm="syz.1.7633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536b3fcdd9 code=0x7ffc0000 [ 485.569180][ T28] audit: type=1326 audit(3925889477.324:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25222 comm="syz.1.7633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536b3fcdd9 code=0x7ffc0000 [ 485.647891][ T28] audit: type=1326 audit(3925889477.324:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25222 comm="syz.1.7633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f536b3fcdd9 code=0x7ffc0000 [ 485.725744][ T28] audit: type=1326 audit(3925889477.374:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25222 comm="syz.1.7633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536b3fcdd9 code=0x7ffc0000 [ 485.800492][ T28] audit: type=1326 audit(3925889477.374:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25222 comm="syz.1.7633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f536b3bd60e code=0x7ffc0000 [ 486.082237][T25245] netlink: 'syz.1.7641': attribute type 9 has an invalid length. [ 486.151894][T25248] tipc: Failed to remove unknown binding: 66,2,2/0:1941946036/1941946040 [ 486.277338][T25254] netlink: 'syz.0.7645': attribute type 21 has an invalid length. [ 487.378827][ T3528] page_pool_release_retry() stalled pool shutdown: id 233, 1 inflight 60 sec [ 489.017587][T25313] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7665'. [ 489.082342][T25316] netlink: 200 bytes leftover after parsing attributes in process `syz.0.7667'. [ 490.817612][T25368] netlink: 200 bytes leftover after parsing attributes in process `syz.8.7685'. [ 490.900510][T25372] tipc: Failed to remove unknown binding: 66,1,1/0:2054445799/2054445801 [ 491.095586][T25387] netlink: 'syz.0.7691': attribute type 46 has an invalid length. [ 491.103616][T25388] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7702'. [ 491.167668][T25388] bond5: entered promiscuous mode [ 491.189626][T25388] 8021q: adding VLAN 0 to HW filter on device bond5 [ 491.212187][T25393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.219566][T25393] IPv6: NLM_F_CREATE should be set when creating new route [ 491.226811][T25393] IPv6: NLM_F_CREATE should be set when creating new route [ 491.263238][T25390] 8021q: adding VLAN 0 to HW filter on device bond5 [ 491.280643][T25390] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 491.284085][T25393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.304101][T25390] bond5: (slave wireguard0): Error -95 calling set_mac_address [ 491.344831][T25393] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 491.367097][T25393] bond5: (slave wireguard0): Error -95 calling set_mac_address [ 491.551254][T25407] netlink: 'syz.0.7698': attribute type 83 has an invalid length. [ 491.657688][T25412] team0: Caught tx_queue_len zero misconfig [ 491.808109][T25425] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7708'. [ 491.841888][T25425] 8021q: adding VLAN 0 to HW filter on device bond5 [ 491.885426][T25425] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 491.916684][T25425] bond5: (slave batadv2): Enslaving as an active interface with an up link [ 491.931499][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 491.931514][ T28] audit: type=1400 audit(3925889483.894:3995): avc: denied { create } for pid=25423 comm="syz.8.7708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 492.026777][T25425] bond5 (unregistering): (slave batadv2): Releasing backup interface [ 492.027373][ T28] audit: type=1400 audit(3925889483.964:3996): avc: denied { write } for pid=25423 comm="syz.8.7708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 492.099717][T25425] bond5 (unregistering): Released all slaves [ 492.217424][T25436] netlink: 'syz.9.7711': attribute type 21 has an invalid length. [ 492.230454][T25436] netlink: 132 bytes leftover after parsing attributes in process `syz.9.7711'. [ 492.808615][T25460] netlink: 'syz.7.7719': attribute type 1 has an invalid length. [ 492.831589][T25460] 8021q: adding VLAN 0 to HW filter on device bond5 [ 492.845392][T25460] macvlan2: entered promiscuous mode [ 492.850821][T25460] macvlan2: entered allmulticast mode [ 492.859883][T25460] bond5: entered promiscuous mode [ 492.865562][T25460] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 492.874046][T25460] bond5: left promiscuous mode [ 492.983122][T25475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7723'. [ 493.047738][ T28] audit: type=1400 audit(3925889485.014:3997): avc: denied { mounton } for pid=25477 comm="syz.9.7726" path=2F3837322FE91F7189591E9233614B dev="tmpfs" ino=4505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 493.399849][T25487] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7730'. [ 493.502153][T25490] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25490 comm=syz.8.7730 [ 496.207275][T25508] netlink: 'syz.8.7738': attribute type 39 has an invalid length. [ 496.322937][T25518] loop0: detected capacity change from 0 to 512 [ 496.330547][T25518] ext3: Unknown parameter 'lazytime"errors' [ 497.261448][ T28] audit: type=1326 audit(3925889489.224:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.0.7752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 497.300182][ T28] audit: type=1326 audit(3925889489.224:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.0.7752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 497.420546][ T28] audit: type=1326 audit(3925889489.224:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.0.7752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 497.479611][ T28] audit: type=1326 audit(3925889489.224:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.0.7752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 497.517890][ T28] audit: type=1326 audit(3925889489.224:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.0.7752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 497.549455][ T28] audit: type=1326 audit(3925889489.284:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.0.7752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f609e91d60e code=0x7ffc0000 [ 497.648705][ T28] audit: type=1326 audit(3925889489.284:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.0.7752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f609e91d60e code=0x7ffc0000 [ 497.676816][ T28] audit: type=1326 audit(3925889489.284:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.0.7752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f609e91d60e code=0x7ffc0000 [ 497.758539][ T28] audit: type=1326 audit(3925889489.284:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.0.7752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f609e91d60e code=0x7ffc0000 [ 497.846069][ T28] audit: type=1326 audit(3925889489.294:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25545 comm="syz.0.7752" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f609e91d60e code=0x7ffc0000 [ 498.118438][T25584] bridge0: entered allmulticast mode [ 498.926747][T25600] netlink: 'syz.7.7772': attribute type 1 has an invalid length. [ 498.973606][T25600] bond6: entered promiscuous mode [ 498.996728][T25600] 8021q: adding VLAN 0 to HW filter on device bond6 [ 499.054048][T25600] bond6: (slave bridge1): making interface the new active one [ 499.083425][T25600] bridge1: entered promiscuous mode [ 499.115156][T25600] bridge1: left promiscuous mode [ 499.661303][T25624] rdma_rxe: Failed to create IPv4 UDP tunnel [ 499.698709][T25624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.706750][T25624] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.717017][T25624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.727626][T25624] wireguard: wg0: Could not create IPv4 socket [ 499.733834][T25624] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 499.768941][T25627] bond11: option tlb_dynamic_lb: invalid value (255) [ 499.784679][T25627] bond11 (unregistering): Released all slaves [ 499.923944][T25640] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7785'. [ 499.946719][T25648] syzkaller0: entered promiscuous mode [ 499.959977][T25648] syzkaller0: entered allmulticast mode [ 499.976459][T25651] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7788'. [ 500.030240][T25652] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7788'. [ 500.286530][T25658] netlink: 'syz.8.7789': attribute type 10 has an invalid length. [ 500.305422][T25658] netlink: 16154 bytes leftover after parsing attributes in process `syz.8.7789'. [ 500.461745][T25676] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7797'. [ 500.507924][T25676] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7797'. [ 500.802197][T25698] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7805'. [ 501.520555][T25715] syzkaller0: entered promiscuous mode [ 501.526259][T25715] syzkaller0: entered allmulticast mode [ 501.568905][T25720] 6: renamed from wg2 [ 501.619229][T25724] loop7: detected capacity change from 0 to 1024 [ 501.627622][T25724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 501.647995][T25724] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 501.661016][T25724] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 501.674054][T25726] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7817'. [ 501.688291][T25724] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 501.699715][T25724] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 501.749209][T25729] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7818'. [ 501.768552][T22542] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.783435][T25729] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7818'. [ 501.892118][T25743] bond11: entered promiscuous mode [ 501.897594][T25743] 8021q: adding VLAN 0 to HW filter on device bond11 [ 501.925067][T25743] 8021q: adding VLAN 0 to HW filter on device bond11 [ 501.935748][T25743] bond11: (slave sit5): The slave device specified does not support setting the MAC address [ 501.949484][T25743] bond11: (slave sit5): Error -95 calling set_mac_address [ 502.182884][T25765] loop7: detected capacity change from 0 to 512 [ 502.216011][T25765] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #17: comm syz.7.7831: invalid orphan symlink nlink 1 [ 502.242542][T25765] loop7: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 502.243148][T25765] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.7831: couldn't read orphan inode 17 (err -117) [ 502.252470][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 502.252485][ C0] EXT4-fs (loop7): initial error at time 3925889494: ext4_orphan_get:1397: inode 17 [ 502.252543][ C0] EXT4-fs (loop7): last error at time 3925889494: ext4_orphan_get:1397: inode 17 [ 502.314470][T25765] loop7: lost filesystem error report for type 5 error -117 [ 502.316820][T25765] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.435783][T22542] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.499743][T25789] Failed to initialize the IGMP autojoin socket (err -2) [ 502.876986][T25789] loop7: detected capacity change from 0 to 2048 [ 502.907419][T25789] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.058963][T25804] Failed to initialize the IGMP autojoin socket (err -2) [ 503.135432][T25808] tipc: Failed to remove unknown binding: 66,0,0/0:133391716/133391718 [ 503.145859][T25808] tipc: Failed to remove unknown binding: 66,0,0/0:133391716/133391717 [ 503.155027][T25808] tipc: Failed to remove unknown binding: 66,0,0/0:133391716/133391718 [ 503.167367][T25808] tipc: Failed to remove unknown binding: 66,0,0/0:133391716/133391717 [ 503.191472][T25810] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25810 comm=syz.0.7843 [ 503.984315][T22542] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.411125][T25861] netlink: 'syz.7.7860': attribute type 11 has an invalid length. [ 506.396359][T25906] __nla_validate_parse: 8 callbacks suppressed [ 506.396377][T25906] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7876'. [ 506.466887][T25906] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7876'. [ 507.123362][T25932] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7886'. [ 507.155361][T25932] team3: entered promiscuous mode [ 507.166371][T25932] team3: entered allmulticast mode [ 507.174031][T25933] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7886'. [ 507.178756][T25932] 8021q: adding VLAN 0 to HW filter on device team3 [ 507.206440][T25933] team4 (uninitialized): Failed to send options change via netlink (err -105) [ 507.274181][T25933] team4: entered promiscuous mode [ 507.288618][T25933] team4: entered allmulticast mode [ 507.302929][T25933] 8021q: adding VLAN 0 to HW filter on device team4 [ 507.937440][T25960] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7896'. [ 507.989406][T25960] loop7: detected capacity change from 0 to 512 [ 508.007828][T25960] EXT4-fs (loop7): bad s_min_extra_isize: 2304 [ 508.034595][T25962] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7898'. [ 508.091685][T25962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25962 comm=syz.8.7898 [ 508.253730][ T28] kauditd_printk_skb: 104 callbacks suppressed [ 508.253748][ T28] audit: type=1400 audit(3925889500.214:4112): avc: denied { create } for pid=25971 comm="syz.1.7902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 508.282010][T25974] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7903'. [ 508.357756][T25974] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25974 comm=syz.9.7903 [ 508.570297][T25998] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7911'. [ 508.602401][T25998] 8021q: adding VLAN 0 to HW filter on device bond7 [ 508.658149][T25998] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 508.671741][T25998] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 508.719437][T25998] bond7 (unregistering): (slave batadv1): Releasing backup interface [ 508.752598][T25998] bond7 (unregistering): Released all slaves [ 509.526683][T26017] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: 1 [ 509.544662][T26017] ref_ctr increment failed for inode: 0x2150 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881253caf40 [ 509.562035][T26014] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: -1 [ 509.571870][T26014] ref_ctr decrement failed for inode: 0x2150 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881253caf40 [ 509.596042][T26014] uprobe: syz.1.7918:26014 failed to unregister, leaking uprobe [ 509.756137][T26034] netlink: 763 bytes leftover after parsing attributes in process `syz.1.7925'. [ 510.063880][T26052] netlink: 22 bytes leftover after parsing attributes in process `syz.9.7934'. [ 510.606506][T26073] 8021q: adding VLAN 0 to HW filter on device bond12 [ 510.673101][T26073] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 510.693688][T26073] bond12: (slave batadv1): Enslaving as an active interface with an up link [ 510.757788][T26083] bond12 (unregistering): (slave batadv1): Releasing backup interface [ 510.819606][T26083] bond12 (unregistering): Released all slaves [ 510.865705][T26093] loop7: detected capacity change from 0 to 512 [ 510.894668][T26093] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 510.968005][T26093] EXT4-fs (loop7): 1 truncate cleaned up [ 510.989534][T26105] syzkaller0: entered promiscuous mode [ 510.995141][T26105] syzkaller0: entered allmulticast mode [ 511.022372][T26093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.122143][T22542] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.372064][T26127] __nla_validate_parse: 3 callbacks suppressed [ 512.372083][T26127] netlink: 88 bytes leftover after parsing attributes in process `syz.8.7960'. [ 512.405317][T26127] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7960'. [ 512.701818][T26137] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7964'. [ 512.734201][T26137] 8021q: adding VLAN 0 to HW filter on device bond6 [ 512.782405][T26139] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 512.812122][T26139] bond6: (slave batadv2): Enslaving as an active interface with an up link [ 512.862482][T26137] bond6 (unregistering): (slave batadv2): Releasing backup interface [ 512.882510][T26141] loop0: detected capacity change from 0 to 128 [ 512.908441][T26137] bond6 (unregistering): Released all slaves [ 512.937171][T26141] loop0: detected capacity change from 0 to 512 [ 513.012258][T26141] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 513.035387][T26141] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 513.053143][T26152] netlink: 'syz.9.7968': attribute type 1 has an invalid length. [ 513.077063][T26152] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7968'. [ 513.086251][T26141] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.7962: Failed to acquire dquot type 1 [ 513.121322][T26154] netlink: 'syz.8.7969': attribute type 1 has an invalid length. [ 513.132188][T26141] loop0: lost filesystem error report for type 5 error -117 [ 513.135238][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 513.149042][ C0] EXT4-fs (loop0): last error at time 3925889505: ext4_acquire_dquot:7034 [ 513.167424][T26141] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 513.186385][T26154] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7969'. [ 513.196342][T26141] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 513.211138][T26154] 8021q: adding VLAN 0 to HW filter on device bond5 [ 513.230268][T26141] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.7962: Failed to acquire dquot type 1 [ 513.248004][T26141] loop0: lost filesystem error report for type 5 error -117 [ 513.248187][T26154] 8021q: adding VLAN 0 to HW filter on device bond5 [ 513.263084][T26154] bond5: (slave geneve3): Opening slave failed [ 513.274288][T26141] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7962: bg 0: block 248: padding at end of block bitmap is not set [ 513.307423][T26141] loop0: lost filesystem error report for type 5 error -117 [ 513.312277][T26141] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 513.339784][T26141] loop0: lost filesystem error report for type 5 error -117 [ 513.344955][T26141] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 513.386384][T26141] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 513.398632][T26141] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.7962: Failed to acquire dquot type 1 [ 513.413279][T26141] loop0: lost filesystem error report for type 5 error -117 [ 513.423903][ T28] audit: type=1326 audit(3925889505.384:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26169 comm="syz.8.7975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab8a7cdd9 code=0x7ffc0000 [ 513.443946][T26141] EXT4-fs (loop0): 1 orphan inode deleted [ 513.546752][ T28] audit: type=1326 audit(3925889505.384:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26169 comm="syz.8.7975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab8a7cdd9 code=0x7ffc0000 [ 513.547848][T26141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.618567][ T28] audit: type=1326 audit(3925889505.384:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26169 comm="syz.8.7975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab8a7cdd9 code=0x7ffc0000 [ 513.692296][T26141] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.703206][ T28] audit: type=1326 audit(3925889505.384:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26169 comm="syz.8.7975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdab8a7cdd9 code=0x7ffc0000 [ 513.703315][ T28] audit: type=1326 audit(3925889505.434:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26169 comm="syz.8.7975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab8a7cdd9 code=0x7ffc0000 [ 513.703358][ T28] audit: type=1326 audit(3925889505.434:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26169 comm="syz.8.7975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab8a7cdd9 code=0x7ffc0000 [ 513.703394][ T28] audit: type=1326 audit(3925889505.434:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26169 comm="syz.8.7975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdab8a7cb42 code=0x7ffc0000 [ 513.703478][ T28] audit: type=1326 audit(3925889505.434:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26169 comm="syz.8.7975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdab8a7cbd7 code=0x7ffc0000 [ 514.007586][T23407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.574277][T26217] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7990'. [ 515.583384][T26217] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7990'. [ 515.611725][T26219] netlink: 'syz.9.7991': attribute type 1 has an invalid length. [ 515.641863][T26219] 8021q: adding VLAN 0 to HW filter on device bond7 [ 515.650825][T26219] bond6: (slave bond7): making interface the new active one [ 515.658753][T26219] bond6: (slave bond7): Enslaving as an active interface with an up link [ 515.680902][T26219] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 516.334119][T26261] netlink: 276 bytes leftover after parsing attributes in process `syz.0.8007'. [ 516.411456][T26264] loop0: detected capacity change from 0 to 1024 [ 516.418624][T26264] EXT4-fs: inline encryption not supported [ 516.450799][T26264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 516.468127][T26264] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.531947][T26264] tipc: Started in network mode [ 516.547135][T26264] tipc: Node identity ac14140f, cluster identity 4711 [ 516.569584][T26264] tipc: Enabling of bearer rejected, failed to enable media [ 516.597782][T23407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 516.905457][T26297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8018'. [ 516.955050][T26300] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8019'. [ 516.971587][T26291] Failed to initialize the IGMP autojoin socket (err -2) [ 517.028303][T26305] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26305 comm=syz.1.8021 [ 518.132018][T26356] tipc: Enabling of bearer rejected, failed to enable media [ 518.297354][T26359] __nla_validate_parse: 1 callbacks suppressed [ 518.297392][T26359] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8042'. [ 518.346430][T26359] loop7: detected capacity change from 0 to 512 [ 518.379604][T26359] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.441941][T22542] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.975399][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 518.975417][ T28] audit: type=1400 audit(3925889510.874:4154): avc: denied { accept } for pid=26369 comm="syz.1.8045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 519.203430][T26374] loop0: detected capacity change from 0 to 1024 [ 519.210945][T26374] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 519.210945][T26374] [ 519.224665][T26374] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 519.273384][T26380] loop0: detected capacity change from 0 to 512 [ 519.287247][T26380] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.336395][T26380] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 519.806865][T26397] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8055'. [ 519.841762][T26397] tipc: Started in network mode [ 519.858414][T26397] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 519.885583][T26397] tipc: Enabling of bearer rejected, failed to enable media [ 520.166288][T26408] loop7: detected capacity change from 0 to 8192 [ 520.177726][T26413] bridge0: entered allmulticast mode [ 520.194440][T26408] vfat filesystem being mounted at /256/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 520.277881][T26417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8064'. [ 520.425377][T26429] netlink: 'syz.1.8066': attribute type 3 has an invalid length. [ 520.649324][T23407] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.050795][T26454] syzkaller0: entered promiscuous mode [ 521.070673][T26454] syzkaller0: entered allmulticast mode [ 521.184671][T26463] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8077'. [ 521.915155][T26489] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 521.936305][ T28] audit: type=1400 audit(3925889513.894:4155): avc: denied { relabelto } for pid=26488 comm="syz.8.8085" name="683" dev="tmpfs" ino=3536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 521.967376][T26489] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8085'. [ 522.016630][ T28] audit: type=1400 audit(3925889513.894:4156): avc: denied { associate } for pid=26488 comm="syz.8.8085" name="683" dev="tmpfs" ino=3536 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 522.221564][ T28] audit: type=1400 audit(3925889514.184:4157): avc: denied { write } for pid=17049 comm="syz-executor" name="683" dev="tmpfs" ino=3536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 522.341914][ T28] audit: type=1400 audit(3925889514.184:4158): avc: denied { remove_name } for pid=17049 comm="syz-executor" name="binderfs" dev="tmpfs" ino=3540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 522.421332][ T28] audit: type=1400 audit(3925889514.184:4159): avc: denied { write } for pid=17049 comm="syz-executor" name="683" dev="tmpfs" ino=3536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 522.470335][T26500] loop7: detected capacity change from 0 to 256 [ 522.477483][ T28] audit: type=1400 audit(3925889514.184:4160): avc: denied { write } for pid=17049 comm="syz-executor" name="683" dev="tmpfs" ino=3536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 522.518601][T26500] vfat filesystem being mounted at /260/bus supports timestamps until 2107-12-31 (0x10391447e) [ 522.550512][ T28] audit: type=1400 audit(3925889514.184:4161): avc: denied { write } for pid=17049 comm="syz-executor" name="683" dev="tmpfs" ino=3536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 522.629137][ T28] audit: type=1400 audit(3925889514.184:4162): avc: denied { rmdir } for pid=17049 comm="syz-executor" name="683" dev="tmpfs" ino=3536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 522.661692][ T28] audit: type=1400 audit(3925889514.304:4163): avc: denied { getopt } for pid=26493 comm="syz.7.8087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 522.730394][T26516] loop0: detected capacity change from 0 to 512 [ 522.743544][T26516] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 522.950799][T26531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.976099][T26531] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.995888][T26531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.019523][T26531] wireguard: wg0: Could not create IPv4 socket [ 523.025876][T26531] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 523.056091][ T3528] syz1: Port: 1 Link ACTIVE [ 523.057867][T15342] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 523.594185][T26552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8109'. [ 523.620245][T26552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8109'. [ 523.653572][T26552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8109'. [ 524.186440][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 524.186455][ T28] audit: type=1400 audit(3925889516.154:4165): avc: denied { watch watch_reads } for pid=26573 comm="syz.1.8117" path="/file1" dev="ramfs" ino=101483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 525.468750][T26615] bridge_slave_0: left allmulticast mode [ 525.484681][T26615] bridge_slave_0: left promiscuous mode [ 525.498060][T26615] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.533108][T26615] bridge_slave_1: left allmulticast mode [ 525.546815][T26615] bridge_slave_1: left promiscuous mode [ 525.563435][T26615] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.590676][T26615] bond0: (slave bond_slave_0): Releasing backup interface [ 525.624906][T26615] bond0: (slave bond_slave_1): Releasing backup interface [ 525.669052][T26615] team0: Port device team_slave_0 removed [ 525.694521][T26615] team0: Port device team_slave_1 removed [ 525.713176][T26615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.737775][T26615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.762139][T26615] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 525.825101][ T3468] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.872363][ T3468] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.920553][T26640] netlink: 'syz.7.8140': attribute type 13 has an invalid length. [ 525.940837][T26640] netlink: 14581 bytes leftover after parsing attributes in process `syz.7.8140'. [ 525.957135][ T3468] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.995241][ T3468] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.138155][ T3468] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.193072][ T3468] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.330053][ T3468] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.409257][ T3468] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.878564][T26657] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8146'. [ 526.887791][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 526.941492][ T3468] bond6 (unregistering): (slave vti0): Releasing backup interface [ 526.949558][ T3468] vti0 (unregistering): left promiscuous mode [ 526.962873][ T3468] bond3 (unregistering): (slave gretap1): Releasing active interface [ 526.974918][ T3468] bond0 (unregistering): (slave gretap3): Releasing active interface [ 527.012309][ T3468] bond4 (unregistering): (slave geneve2): Releasing active interface [ 527.117620][ T3468]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.127671][ T3468]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.137250][ T3468]  (unregistering): Released all slaves [ 527.145634][ T3468] bond1 (unregistering): (slave bY4`Ҙ): Releasing backup interface [ 527.154613][ T3468] bond1 (unregistering): (slave bY4`Ҙ): last VLAN challenged slave left bond - VLAN blocking is removed [ 527.168049][ T3468] bond1 (unregistering): Released all slaves [ 527.178558][ T3468] bond2 (unregistering): Released all slaves [ 527.188955][ T3468] bond3 (unregistering): Released all slaves [ 527.198432][ T3468] bond0 (unregistering): Released all slaves [ 527.207371][ T3468] bond4 (unregistering): Released all slaves [ 527.218019][ T3468] bond5 (unregistering): Released all slaves [ 527.228769][ T3468] bond6 (unregistering): Released all slaves [ 527.244948][T26657] tipc: Enabling of bearer rejected, failed to enable media [ 527.358943][ T3468] hsr_slave_0: left promiscuous mode [ 527.368145][ T3468] hsr_slave_1: left promiscuous mode [ 527.382162][ T3468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.400263][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.422807][ T3468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.443271][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.474354][ T3468] veth1_macvtap: left promiscuous mode [ 527.487842][ T3468] veth0_macvtap: left promiscuous mode [ 527.539302][T26674] loop7: detected capacity change from 0 to 128 [ 527.616049][T26674] vfat filesystem being mounted at /272/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 527.698751][ T28] audit: type=1400 audit(3925889519.664:4166): avc: denied { write } for pid=26669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.800780][ T28] audit: type=1400 audit(3925889519.764:4167): avc: denied { write } for pid=26686 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 527.953583][T26670] bridge0: port 1(ip6gretap0) entered blocking state [ 527.997586][T26670] bridge0: port 1(ip6gretap0) entered disabled state [ 528.026734][T26670] ip6gretap0: entered allmulticast mode [ 528.059194][T26670] ip6gretap0: entered promiscuous mode [ 528.093121][T26670] bridge0: port 1(ip6gretap0) entered blocking state [ 528.100673][T26670] bridge0: port 1(ip6gretap0) entered listening state [ 528.144045][T26676] ip6gretap0: left allmulticast mode [ 528.150429][T26676] ip6gretap0: left promiscuous mode [ 528.161838][T26676] bridge0: port 1(ip6gretap0) entered disabled state [ 528.184788][T26697] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8156'. [ 528.265257][T26713] loop7: detected capacity change from 0 to 256 [ 528.277196][T26713] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 528.304376][T26713] vfat filesystem being mounted at /276/bus supports timestamps until 2107-12-31 (0x10391447e) [ 528.323638][T26713] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779264) [ 528.336991][T26713] FAT-fs (loop7): Filesystem has been set read-only [ 528.369587][ T3468] IPVS: stop unused estimator thread 0... [ 528.411725][ T28] audit: type=1400 audit(3925889520.374:4168): avc: denied { write } for pid=26710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.485217][ T28] audit: type=1400 audit(3925889520.444:4169): avc: denied { write } for pid=26726 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.829028][ T28] audit: type=1400 audit(3925889520.794:4170): avc: denied { write } for pid=26733 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 528.944460][ T28] audit: type=1400 audit(3925889520.904:4171): avc: denied { write } for pid=26748 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.537880][ T28] audit: type=1326 audit(3925889521.504:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26750 comm="syz.0.8165" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 529.568234][T26762] batman_adv: batadv0: Adding interface: dummy0 [ 529.591509][T26762] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.616847][ T28] audit: type=1326 audit(3925889521.504:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26750 comm="syz.0.8165" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 529.616918][ T28] audit: type=1326 audit(3925889521.504:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26750 comm="syz.0.8165" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 529.689750][ T28] audit: type=1326 audit(3925889521.504:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26750 comm="syz.0.8165" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 529.716839][ T28] audit: type=1326 audit(3925889521.534:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26750 comm="syz.0.8165" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 529.844062][T26762] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 529.867160][ T28] audit: type=1326 audit(3925889521.544:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26750 comm="syz.0.8165" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 529.920910][T26785] netlink: 'syz.9.8172': attribute type 1 has an invalid length. [ 529.978820][ T28] audit: type=1326 audit(3925889521.544:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26750 comm="syz.0.8165" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 529.979848][T26785] bond8: (slave bridge14): Enslaving as a backup interface with an up link [ 530.020043][T26785] macvlan3: entered promiscuous mode [ 530.034603][T26785] macvlan3: entered allmulticast mode [ 530.040609][T26785] bond8: entered promiscuous mode [ 530.045766][T26785] bridge14: entered promiscuous mode [ 530.051601][T26785] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 530.059574][ T28] audit: type=1326 audit(3925889521.544:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26750 comm="syz.0.8165" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 530.085469][ T28] audit: type=1326 audit(3925889521.544:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26750 comm="syz.0.8165" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 530.111058][ T28] audit: type=1326 audit(3925889521.554:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26750 comm="syz.0.8165" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f609e95cdd9 code=0x7ffc0000 [ 530.137773][T26792] loop7: detected capacity change from 0 to 1764 [ 530.154459][T26792] iso9660: Bad value for 'sbsector' [ 530.187387][T26785] bond8: left promiscuous mode [ 530.192264][T26785] bridge14: left promiscuous mode [ 530.904708][T26811] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8180'. [ 530.989730][T26811] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8180'. [ 531.349500][T26821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8183'. [ 531.459593][T26840] Failed to initialize the IGMP autojoin socket (err -2) [ 531.865113][T26877] ref_ctr_offset mismatch. inode: 0x1388 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 532.449281][T26907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8208'. [ 533.379212][T26926] loop7: detected capacity change from 0 to 128 [ 533.495676][T26926] vfat filesystem being mounted at /287/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 533.530976][T26926] netlink: 'syz.7.8216': attribute type 21 has an invalid length. [ 533.540016][T26926] netlink: 132 bytes leftover after parsing attributes in process `syz.7.8216'. [ 533.691366][T26943] netlink: 'syz.0.8220': attribute type 3 has an invalid length. [ 534.533817][T27002] netlink: 'syz.0.8225': attribute type 1 has an invalid length. [ 534.552926][T27002] 8021q: adding VLAN 0 to HW filter on device bond4 [ 534.575949][T27002] bond4: (slave geneve2): making interface the new active one [ 534.586366][T27002] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 534.661703][T27012] loop7: detected capacity change from 0 to 512 [ 534.670782][T27012] EXT4-fs: test_dummy_encryption option not supported [ 534.725415][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 534.734344][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 534.734408][ T28] audit: type=1404 audit(3925889526.694:4234): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 534.756894][ T28] audit: type=1400 audit(3925889526.724:4235): avc: denied { write } for pid=27011 comm="syz.7.8229" path="socket:[101152]" dev="sockfs" ino=101152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 534.834689][ T28] audit: type=1400 audit(3925889526.794:4236): avc: denied { prog_load } for pid=27018 comm="syz.0.8231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 534.854072][ T28] audit: type=1400 audit(3925889526.794:4237): avc: denied { prog_load } for pid=27018 comm="syz.0.8231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 534.873489][ T28] audit: type=1400 audit(3925889526.794:4238): avc: denied { open } for pid=27018 comm="syz.0.8231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 535.179083][ T28] audit: type=1400 audit(3925889527.144:4239): avc: denied { module_request } for pid=27023 comm="syz.8.8232" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 535.207043][T27024] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8232'. [ 535.233808][ T28] audit: type=1400 audit(3925889527.144:4240): avc: denied { sys_module } for pid=27023 comm="syz.8.8232" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 535.272296][ T28] audit: type=1400 audit(3925889527.174:4241): avc: denied { module_request } for pid=27023 comm="syz.8.8232" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 535.311717][ T28] audit: type=1400 audit(3925889527.174:4242): avc: denied { sys_module } for pid=27023 comm="syz.8.8232" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 535.344082][ T28] audit: type=1400 audit(3925889527.234:4243): avc: denied { create } for pid=27025 comm="syz.8.8233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 535.596786][T27047] lo: entered allmulticast mode [ 535.605989][T27048] netlink: 'syz.1.8244': attribute type 39 has an invalid length. [ 535.643525][T27047] bY4`Ҙ: renamed from lo [ 535.679244][T15346] smc: removing ib device syz1 [ 535.688026][ T3528] syz1: Port: 1 Link DOWN [ 535.743481][T27052] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8256'. [ 535.760369][T27052] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8256'. [ 535.813531][T27053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.820946][T27054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=27054 comm=syz.9.8256 [ 535.841670][T27053] batman_adv: batadv0: Interface activated: dummy0 [ 535.856970][T27053] batadv0: mtu less than device minimum [ 535.866610][T27053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 535.877674][T27053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 535.888703][T27053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 535.899527][T27053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 535.910706][T27053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 535.921662][T27053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 535.932863][T27053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 535.943786][T27053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 535.954716][T27053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 535.972985][T27053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.983017][T27053] wireguard: wg0: Could not create IPv4 socket [ 535.989325][T27052] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8256'. [ 536.000694][T27052] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8256'. [ 536.022081][T27052] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8256'. [ 536.054789][T27052] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8256'. [ 536.084820][T27060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8249'. [ 536.137270][T27060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8249'. [ 536.233104][T27082] futex_wake_op: syz.1.8260 tries to shift op by 32; fix this program [ 536.928977][T27110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8272'. [ 536.964157][T27110] bond12 (unregistering): Released all slaves [ 539.743593][ T28] kauditd_printk_skb: 208 callbacks suppressed [ 539.743608][ T28] audit: type=1400 audit(3925889531.704:4452): avc: denied { read write } for pid=22542 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 540.514180][ T28] audit: type=1400 audit(3925889532.474:4453): avc: denied { execmem } for pid=27150 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 540.536098][T27153] netlink: 'syz.9.8288': attribute type 1 has an invalid length. [ 540.552841][ T28] audit: type=1400 audit(3925889532.514:4454): avc: denied { create } for pid=27154 comm="syz.1.8289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 540.565575][T27153] 8021q: adding VLAN 0 to HW filter on device bond9 [ 540.580564][ T28] audit: type=1400 audit(3925889532.514:4455): avc: denied { create } for pid=27154 comm="syz.1.8289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 540.601944][ T28] audit: type=1400 audit(3925889532.564:4456): avc: denied { open } for pid=27152 comm="syz.7.8291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 540.619574][T27158] syzkaller0: entered promiscuous mode [ 540.627360][ T28] audit: type=1400 audit(3925889532.564:4457): avc: denied { map_create } for pid=27155 comm="syz.0.8290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 540.646697][T27158] syzkaller0: entered allmulticast mode [ 540.662921][T27153] vlan4: entered allmulticast mode [ 540.669982][T27153] veth0_to_bond: entered allmulticast mode [ 540.676700][ T28] audit: type=1400 audit(3925889532.564:4458): avc: denied { prog_load } for pid=27155 comm="syz.0.8290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 540.698648][T27153] bond9: (slave vlan4): Opening slave failed [ 540.706974][ T28] audit: type=1400 audit(3925889532.584:4459): avc: denied { create } for pid=27152 comm="syz.7.8291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 540.736596][ T28] audit: type=1400 audit(3925889532.584:4460): avc: denied { create } for pid=27152 comm="syz.7.8291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 540.760910][T27160] bond9: (slave veth21): Enslaving as an active interface with a down link [ 540.770649][ T28] audit: type=1400 audit(3925889532.594:4461): avc: denied { read write } for pid=27152 comm="syz.7.8291" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 541.335446][T13521] net_ratelimit: 31 callbacks suppressed [ 541.335461][T13521] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 541.355506][T13521] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 541.875361][T15331] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 541.889843][T15331] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 542.415354][T13521] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 542.429767][T13521] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 542.681815][T27178] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8299'. [ 542.945296][T15331] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 542.959686][T15331] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 543.475350][T15328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 543.489689][T15328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 545.210993][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 545.211013][ T28] audit: type=1400 audit(3925889537.174:4509): avc: denied { execmem } for pid=27192 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 545.222867][T27195] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 545.257791][ T28] audit: type=1400 audit(3925889537.204:4510): avc: denied { create } for pid=27194 comm="syz.9.8304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 545.261534][T27195] netlink: 'syz.7.8307': attribute type 2 has an invalid length. [ 545.278872][ T28] audit: type=1400 audit(3925889537.214:4511): avc: denied { allowed } for pid=27194 comm="syz.9.8304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 545.306687][ T28] audit: type=1400 audit(3925889537.214:4512): avc: denied { create } for pid=27194 comm="syz.9.8304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 545.329124][ T28] audit: type=1400 audit(3925889537.224:4513): avc: denied { create } for pid=27197 comm="syz.1.8305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 545.348862][ T28] audit: type=1400 audit(3925889537.274:4514): avc: denied { read write } for pid=23407 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 545.373270][ T28] audit: type=1400 audit(3925889537.274:4515): avc: denied { read write } for pid=22542 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 546.246744][T15331] bridge_slave_1: left allmulticast mode [ 546.252434][T15331] bridge_slave_1: left promiscuous mode [ 546.258270][T15331] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.266200][T15331] bridge_slave_0: left allmulticast mode [ 546.271939][T15331] bridge_slave_0: left promiscuous mode [ 546.277828][T15331] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.367260][T15331] bond2 (unregistering): Released all slaves [ 546.419089][T15331] hsr_slave_0: left promiscuous mode [ 546.424821][T15331] hsr_slave_1: left promiscuous mode [ 546.430609][T15331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.438007][T15331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.555782][T15346] net_ratelimit: 10 callbacks suppressed [ 546.555802][T15346] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 546.575863][T15346] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 546.649175][ T28] audit: type=1400 audit(3925889538.614:4516): avc: denied { open } for pid=27203 comm="syz.9.8308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 546.693646][ T28] audit: type=1400 audit(3925889538.614:4517): avc: denied { prog_load } for pid=27203 comm="syz.9.8308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 546.718680][ T28] audit: type=1400 audit(3925889538.614:4518): avc: denied { create } for pid=27203 comm="syz.9.8308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 547.105294][T15331] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 547.119722][T15331] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 547.470914][T27206] ================================================================== [ 547.479048][T27206] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 547.486016][T27206] [ 547.488345][T27206] read-write to 0xffff88811c219d24 of 4 bytes by task 27211 on cpu 1: [ 547.496525][T27206] fifo_open+0x86/0x5d0 [ 547.500696][T27206] do_dentry_open+0x4be/0xa90 [ 547.505407][T27206] vfs_open+0x37/0x1e0 [ 547.509486][T27206] path_openat+0x1b70/0x2050 [ 547.514118][T27206] do_file_open+0x16c/0x290 [ 547.518672][T27206] do_sys_openat2+0x94/0x130 [ 547.523296][T27206] __x64_sys_openat+0xf2/0x120 [ 547.528102][T27206] x64_sys_call+0x1e39/0x3020 [ 547.532856][T27206] do_syscall_64+0x12c/0x3b0 [ 547.537482][T27206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.543408][T27206] [ 547.545748][T27206] read to 0xffff88811c219d24 of 4 bytes by task 27206 on cpu 0: [ 547.553397][T27206] wait_for_partner+0xd5/0x1e0 [ 547.558200][T27206] fifo_open+0x462/0x5d0 [ 547.562475][T27206] do_dentry_open+0x4be/0xa90 [ 547.567176][T27206] vfs_open+0x37/0x1e0 [ 547.571280][T27206] path_openat+0x1b70/0x2050 [ 547.575991][T27206] do_file_open+0x16c/0x290 [ 547.580532][T27206] do_sys_openat2+0x94/0x130 [ 547.585143][T27206] __se_sys_openat2+0x193/0x1f0 [ 547.590021][T27206] __x64_sys_openat2+0x55/0x70 [ 547.594815][T27206] x64_sys_call+0x2170/0x3020 [ 547.599529][T27206] do_syscall_64+0x12c/0x3b0 [ 547.604240][T27206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.610164][T27206] [ 547.612504][T27206] value changed: 0x00000001 -> 0x00000002 [ 547.618239][T27206] [ 547.620578][T27206] Reported by Kernel Concurrency Sanitizer on: [ 547.626749][T27206] CPU: 0 UID: 0 PID: 27206 Comm: syz.0.8310 Tainted: G W syzkaller #0 PREEMPT(full) [ 547.637721][T27206] Tainted: [W]=WARN [ 547.641552][T27206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 547.651642][T27206] ================================================================== [ 547.660038][T13521] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 547.674466][T13521] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 548.205331][T15328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 548.219724][T15328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 548.562824][T15328] bond6 (unregistering): (slave gretap1): Releasing backup interface [ 548.735300][T15331] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 548.749627][T15331] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 549.156915][T15328] bond8 (unregistering): (slave bridge14): Releasing backup interface [ 549.196908][T15328] bond0 (unregistering): Released all slaves [ 549.204944][T15328] bond1 (unregistering): Released all slaves [ 549.213782][T15328] bond2 (unregistering): Released all slaves [ 549.224416][T15328] bond3 (unregistering): Released all slaves [ 549.233489][T15328] bond4 (unregistering): Released all slaves [ 549.242414][T15328] bond5 (unregistering): Released all slaves [ 549.251288][T15328] bond6 (unregistering): (slave bond7): Releasing backup interface [ 549.259817][T15328] bond6 (unregistering): Released all slaves [ 549.269094][T15328] bond7 (unregistering): Released all slaves [ 549.278673][T15328] bond8 (unregistering): Released all slaves [ 549.288247][T15328] bond9 (unregistering): (slave veth21): Releasing active interface [ 549.297109][T15328] bond9 (unregistering): Released all slaves [ 549.341978][T15328] tipc: Disabling bearer [ 549.348132][T15328] tipc: Left network mode [ 549.758763][T15328] IPVS: stop unused estimator thread 0... [ 549.808037][T15328] lo: left allmulticast mode [ 549.813521][T15328] bridge_slave_1: left allmulticast mode [ 549.819431][T15328] bridge_slave_1: left promiscuous mode [ 549.825173][T15328] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.833251][T15328] bridge_slave_0: left allmulticast mode [ 549.839212][T15328] bridge_slave_0: left promiscuous mode [ 549.844931][T15328] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.887472][T15328] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 549.895903][T15328] ip6gretap1 (unregistering): left allmulticast mode [ 549.908333][T15328] bond1 (unregistering): (slave sit1): Releasing backup interface [ 549.930399][T15328] bond2 (unregistering): (slave geneve2): Releasing active interface [ 550.047442][T15328] bond0 (unregistering): Released all slaves [ 550.055341][T15328] bond1 (unregistering): Released all slaves [ 550.065369][T15328] bond2 (unregistering): Released all slaves [ 550.073710][T15328] bond3 (unregistering): Released all slaves [ 550.082505][T15328] bond4 (unregistering): Released all slaves [ 550.091541][T15328] bond5 (unregistering): Released all slaves [ 550.100511][T15328] bond6 (unregistering): Released all slaves [ 550.109223][T15328] bond7 (unregistering): Released all slaves [ 550.121294][T15328] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 550.143937][T15328] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 550.157650][T15328] bond4 (unregistering): (slave geneve2): Releasing active interface [ 550.207787][T15328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.218346][T15328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.228141][T15328] bond0 (unregistering): Released all slaves [ 550.236575][T15328] bond1 (unregistering): (slave bond2): Releasing backup interface [ 550.244927][T15328] bond1 (unregistering): Released all slaves [ 550.254139][T15328] bond2 (unregistering): Released all slaves [ 550.263276][T15328] bond3 (unregistering): Released all slaves [ 550.272353][T15328] bond4 (unregistering): Released all slaves [ 550.301415][T15328] tipc: Left network mode [ 550.306723][T15328] tipc: Left network mode [ 550.314819][T15328] hsr_slave_0: left promiscuous mode [ 550.320655][T15328] hsr_slave_1: left promiscuous mode [ 550.328901][T15328] hsr_slave_0: left promiscuous mode [ 550.334703][T15328] hsr_slave_1: left promiscuous mode [ 550.340846][T15328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.348353][T15328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.356226][T15328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.363651][T15328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.374608][T15328] veth1_macvtap: left promiscuous mode [ 550.380336][T15328] veth0_macvtap: left promiscuous mode [ 550.386220][T15328] veth1_vlan: left promiscuous mode [ 550.391473][T15328] veth0_vlan: left promiscuous mode [ 550.520647][T15328] team0 (unregistering): Port device team_slave_1 removed [ 550.531269][T15328] team0 (unregistering): Port device team_slave_0 removed [ 550.725396][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 551.815337][T15328] net_ratelimit: 10 callbacks suppressed [ 551.815357][T15328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 551.835338][T15328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 552.355386][T15342] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 552.369789][T15342] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 552.885994][T15328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 552.900303][T15328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 553.415699][T15328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 553.430036][T15328] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 553.945310][T15342] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 553.959698][T15342] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 557.025337][T15346] net_ratelimit: 10 callbacks suppressed [ 557.025358][T15346] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 557.045347][T15346] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01