last executing test programs: 6m30.769453165s ago: executing program 32 (id=19): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) 6m5.157759929s ago: executing program 33 (id=711): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 5m48.345745145s ago: executing program 34 (id=1658): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000180), 0x4) 5m34.606081969s ago: executing program 35 (id=2123): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x80082102, &(0x7f0000000100)={r1, 0x0, r0, 0x0, 0x80000}) 5m20.72227163s ago: executing program 36 (id=2522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x0, @mcast2, 0x8558}}, 0x0, 0x0, 0x6, 0x0, "39bcf5aba7f959ddcdc8da1b2b41a983ef92a3a5d4ef67a6e5aaa42e5f36f75694a26955afb25c6451572175a16395b9de4ea9879d10962a16a1b56803e7ebf5564c5054c4a398fd30f351751fa9f118"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x2, @empty, 0x7}}, 0x0, 0x0, 0x2f, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 4m52.190050569s ago: executing program 37 (id=2873): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f0000000400)=0xa1, &(0x7f00000004c0)=r1}, 0x20) close(r2) 4m40.246489937s ago: executing program 38 (id=3386): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x343b8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x3, 0x9, 0x0, 0x6}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x300, 0x0, 0x3, 0xa, 0x3, 0x6}, 0x20) 3m56.134926002s ago: executing program 39 (id=3939): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 3m18.246369384s ago: executing program 40 (id=5192): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2m36.939664818s ago: executing program 41 (id=6239): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x1280, 0x0, 0x0, 0x1, 0x4, 0x0, 0x8, 0x0, 0x40000008, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}]}, &(0x7f0000000080)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e1b, @broadcast}}, 0xfff9, 0x4}, 0x90) 2m12.939500224s ago: executing program 42 (id=6841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000001c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 2m10.929310505s ago: executing program 7 (id=6880): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000002040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a25406, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000180)=""/65, 0x41}], 0x2, 0x0, 0x0, 0x41}, 0x20040001) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2m10.873782497s ago: executing program 7 (id=6884): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x95, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}, 0x80}, 0x1c) 2m10.82504401s ago: executing program 7 (id=6885): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x81) 2m10.772958633s ago: executing program 7 (id=6887): mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x20031, 0xffffffffffffffff, 0x3b762000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x7, 0x37, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) 2m10.713584426s ago: executing program 7 (id=6890): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 2m10.653873169s ago: executing program 7 (id=6893): r0 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) 1m55.589583725s ago: executing program 43 (id=6893): r0 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) 36.416448031s ago: executing program 4 (id=9178): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/4104, 0x1008}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 34.637608611s ago: executing program 4 (id=9203): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x200) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000008}) epoll_wait(r2, &(0x7f0000000080)=[{}], 0x1, 0xffffff90) close(r0) 34.502236387s ago: executing program 4 (id=9205): r0 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4, 0x8], 0x0, 0x0, 0x100000, 0x1, r2}}, 0x40) 34.149974995s ago: executing program 4 (id=9208): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 34.112253077s ago: executing program 4 (id=9211): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1}, 0x2}], 0x1, 0x10160, 0x0) 33.933947786s ago: executing program 4 (id=9219): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e1d, 0x80000, @mcast1, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@pktinfo={{0x24, 0x29, 0x32, {@private0}}}], 0x28}, 0x80) 33.900276617s ago: executing program 44 (id=9219): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e1d, 0x80000, @mcast1, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@pktinfo={{0x24, 0x29, 0x32, {@private0}}}], 0x28}, 0x80) 21.287071721s ago: executing program 5 (id=9608): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xe, 0x10}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x0) 21.194720495s ago: executing program 5 (id=9611): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x6, 0xd, "85de"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 21.150262648s ago: executing program 5 (id=9612): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x10, 0x0, 0x8, 0x820a4, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x10000004000}, 0xc072, 0x200000000000c8, 0x806, 0x9, 0xfffffffffffffffb, 0x80000000, 0xfffb, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a200806"], 0xfdef) 21.132796589s ago: executing program 5 (id=9613): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84000, 0x0) 21.11454608s ago: executing program 5 (id=9614): r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x2, &(0x7f0000000040)={0x0, 0x15, 0x4, @tid=r0}, &(0x7f0000000240)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 20.689840671s ago: executing program 5 (id=9622): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300", @ANYRESDEC], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 20.678876422s ago: executing program 45 (id=9622): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300", @ANYRESDEC], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 9.265341055s ago: executing program 8 (id=9879): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x8000}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) setresuid(0x0, 0xee00, 0x0) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710ffffff03ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 9.234438886s ago: executing program 8 (id=9880): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='t'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 8.985871069s ago: executing program 8 (id=9885): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 8.838222486s ago: executing program 8 (id=9890): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 8.786262129s ago: executing program 8 (id=9892): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f0000000440)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r1, 0x3516, 0x483, 0x0, 0x0, 0x0) 8.56786238s ago: executing program 8 (id=9898): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r2, 0x7fff, 0x30, 0xfffffffffffffbff, 0x1ff}, &(0x7f0000000100)=0x18) 8.56771008s ago: executing program 46 (id=9898): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r2, 0x7fff, 0x30, 0xfffffffffffffbff, 0x1ff}, &(0x7f0000000100)=0x18) 4.234824627s ago: executing program 0 (id=10015): r0 = socket(0x2, 0x80805, 0x0) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000300)=[{&(0x7f0000000100)=@in6={0xa, 0x4e24, 0xdf, @ipv4={'\x00', '\xff\xff', @loopback}, 0x101}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000001480)="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", 0xb81}], 0x1, 0x0, 0x0, 0x20000044}], 0x1, 0x0) 4.107801174s ago: executing program 0 (id=10019): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x5, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000100)='Q', 0x1}], 0x1}, 0x4000) 3.898214714s ago: executing program 0 (id=10024): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 3.878277495s ago: executing program 0 (id=10026): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x89901) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x1000, &(0x7f0000000200)={0x84, 0x70, 0x0, {r0}}, 0x20) 3.853945796s ago: executing program 0 (id=10027): unshare(0x22020400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) recvmsg$can_raw(r1, 0x0, 0x2) 3.645739297s ago: executing program 0 (id=10033): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x550, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x8}, 0x106200, 0x10004, 0x2, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 3.645567807s ago: executing program 47 (id=10033): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x550, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x8}, 0x106200, 0x10004, 0x2, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 1.445871877s ago: executing program 3 (id=10077): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') exit(0xf) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 1.374152691s ago: executing program 6 (id=10079): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4601f5f014ab0800000000000002003e00010000809a010000380000008b0000000600000005002000020001000100200000f2ffff04"], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x10012, r0, 0x0) 1.338271123s ago: executing program 6 (id=10082): r0 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x54}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80101, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x23456}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0x5}, 0x0) io_uring_enter(r0, 0x6f58, 0x0, 0x0, 0x0, 0x0) 1.328463884s ago: executing program 1 (id=10083): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf000000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x0, 0x5, 0x2002a}, 0x2c) 1.209151679s ago: executing program 6 (id=10087): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)=',\xea\x02', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) 1.178610021s ago: executing program 1 (id=10088): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x4, 0x746, 0x6, 0x8, 0x6, 0x6, 0x20000000ffe, 0xf64, 0xffeffffc}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) stat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000500)='./file1\x00', r0, 0x0) 1.126087164s ago: executing program 2 (id=10089): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 958.073772ms ago: executing program 6 (id=10093): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @control={0x3, 0x5a, 0x93}}, {0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xffeffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$msr(r1, 0x0, 0x300) read$rfkill(r1, 0x0, 0x0) 957.903502ms ago: executing program 9 (id=10094): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x44050}, 0x40400c0) sendfile(r0, r1, 0x0, 0xffffffff000) 912.857994ms ago: executing program 1 (id=10095): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x5, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 736.314073ms ago: executing program 2 (id=10096): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x7, 0x43a1bd74, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 513.997654ms ago: executing program 3 (id=10097): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) 513.698694ms ago: executing program 9 (id=10098): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r1, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x4400, 0x8002}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) 513.548794ms ago: executing program 2 (id=10099): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4ba}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 467.878397ms ago: executing program 3 (id=10100): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0x918c, 0x2, 0xfffffffe, 0x181}) close_range(r0, r0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 410.347979ms ago: executing program 1 (id=10101): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 409.731839ms ago: executing program 2 (id=10111): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 336.868023ms ago: executing program 1 (id=10102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000acc000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000009e000c0046723040dcf851353d80428b66c4a5c76fdd086344be5b4b365b030000000000000098b7647dd42e1f003e993562f77b29872355e30839152ef602e4e7b1a25f4123ba0b4f5889c3681c221c0b96e521524250432d6063a60098490ece73ddd10f0030be88fed0a90e3ad8f6863296818bb85f56f7ce8ea7f57bd1a124d9398abb1f83e8205bc2cc80e9577a02dd7f0018c1ac994fbb855ea542000014000000110001"], 0xf4}, 0x1, 0x0, 0x0, 0x4000855}, 0x24000840) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000040a0102"], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x24008000) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0) 312.577144ms ago: executing program 9 (id=10103): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) socket(0x11, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="2700000014000707030e0000120f0a0011000100f5fe0012744600000000000075080039000500", 0x27) 267.707976ms ago: executing program 3 (id=10104): socket(0x2, 0x80805, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x401, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r0, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 253.711487ms ago: executing program 9 (id=10105): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="0203000920020000ff0e00000000000002000900100000009d09000000000000030006000000000002000000e0000002000000000000000002000100000004d300000503010000c0030005003c00000002000000ac141400000000000000000005001a0020010000000000000000000000000000ff0200000000000000000000000000011d0000000102080000800000ee3fbec9e0cba133f73ad299ee34924bb6b5c04db2a97c180d06c141adabeaa25c5ee4137122f693be294184847f7d563c13823746e4251def213156c092a66441d2697b70d242dd373ce5466db1e3233022b28735c1f63b6f94cd9a3dc02ed595ab0f4920ba149f9e2b776a673cba6fd1b1a0b7afc324c7415f9f10bc0e1b9be3ecdd4ee2dafc8920be27da28fd485d760193bfd14753cfeda8980e9d7b5d309e7135f18873dec0e1aac30a5e0fb3e76837c966d2beb0a6ca532718688b10d1522993460d48e51400a4db815306c563cd51273f67fc2b5f354bd2f9b5399f98d22e303c2d7a73be0710637c0ba3ab300cff9eaaf1308e0993b337ca704b62a06332c76baf4146cc34343f935bdde85add31c6f41057628282e78bff38e1afe16c2de8da167421a725c57c3018248b7ddef4538a0486aaac0fac9a0d6f1128da0c93736f1f690a226c4576c07d139e011e88769db1963d7006505155656da5f0001f15cf7f98a3f19ac5dfa9a9f46abec62127968c754599bfb172a7c232f4036a42dd16b4e8be8269f62df816406b3168c4e731d572422201f89d4508222bb22a35326a3cc5249d2f0c30c949678a10c9a89e496fdde1b9d0d435806e9e7b87e1867922c6fa0edb4a1354039d6d24ee6208c43d657ef8c4037ac83d97b40e35514ad749bd7532becf06a9cb74e5fcca8eaf30563a3dffb41a9972a373f27c30184e1b0b2aec02af308904cebfa1f0e10a293353707fd5712dfd5eb6f71cea4603a2e7285c11dc4810897a1fff4698fb7c411a5655271a80e1d56fd43ee43cdd49ae6b4382a4e074f6f2f2054e42b865ae13f819a2be2c58cf0acb03c9e3988d41dc51566953ca34abd8ea4089f7b95ba5c06cc879fcb1b0f75c068c549397c61dab3599b9830903c20135f7263f893116ec7a24fada06ada39a4ded8abca5ac03d2405804184f7a5fe73f0af7ec465bd5dcbc682c33009331fca66e8a783c20bbd9f1be03847d80e5473e9cbd280d4d38813e29e5eac24f3be9241011b908076d6419af18620819822a55f03adf118437e50aa89111441f6768154747d1169a3cc3a1b8ca19fee05fdda3d1b226dae467e2b5eecada92cc0257a26c5ad073420a9d6f409b5694d616087eb2bcbd80b7982be14f2487711294e38330599fde6b29ad7e47d0c8e5219145517a78e91448dde7585d7310ad74282dbd6350b1e21c97757ea85be98a618d0f9d27e0b23e76be07d062aeccd54c1c36d8222139d925898e9b833c9ba3d676738c1fb0df1175ba70353a20633019af5c0ea4084f1a95c5895c998d04fd72f31a5aca0128bdc4357970f2ef428956cab03ca4789cdc467beaac3c00cf249b5910a55062f4370341e3707e34481d3c3157ee01cfb22c778f1697f311a46c2c4568e13a517ceb71ccc1722c195b850a111f705d1365913cb9694f476eb6ae732b97325faed2e2df43db0d1096abd3ceb5955e126f2eaebc6ae1057be9d8b6dddf575a40d97ebed64bcfdbd5bf941a9750de451566cbf3d1026f749fc4574641183daff715556a6d1a5a04b885cf7d00ba04e8c56df4192d97f8f3834975bfdd7d2cfc7d054192ed45cac9ef27305ab75eebc59543caf84218a62f2d748b14e5d69756d869ba345567a4e4f0aa561c85ace548ca03ecbd5a2325b3b8df00d8260ba2625ce7c0b4c8a9bea3ff57ba5dcc7cbe1d24ae9ab5ffa186d0d945b976342eb4f0c69c31f88207e7b22638b27f1cf75f9cfae3fabb54af777d29023d4cdf3d674f154158e34264093b92cd185210c792566bf7f729ee440d1a764569d5e4f1512a674959c1671876d27c7a6e4adf6fd205bdd7ebf29db8349a1195132cb816f3311b3a7d7be73da80aea65ab27f1c603676bf9e2869817a276f437c8ad9cc2a5ce80f578502bb70d1806b00877ada92e84f7c82bf0a731bc13ced283b0dddd5ed59bec47d881104ce6be5edc42c2359f99564d79839c8ab50b6445bb0670c0dd9d8253c482906df9f554b4e59da8c959c7af7748255e03e5ebb5b98f78adcafd60c1b418359a427c8227c88c740053c906b20ecadc4b3e2766fee8e21cebdc1ae6fdd6ec10730671e97fa51b06936a07d712ff75578210a36aeec1dc89f690847e4cdaf56f75c5e4b29d8d3256fc3c4c0c58645beea9ccc1a3c897cb8a452a215d5894b5bb5e68b4ff09b8cebfa0952ef5a20426a03c51c4b3d34b9f0aa3ef152268b10eee348129b3ce59b24f5e1005f501cd67f50bfdd59c1c8ed2d86d5aa83eb9e7e454525a89cf8f4fbdd2bfbc3303e1e686b40a94075486bc5e7ca345dc8d32c9aa0b34823ecca97aa65265723b7044c99a04436315c7d09614b9211990df72d50c4fce6b668acbf95f53574f06f3044e47958500e299baacfb27b5e67850dc05e1b540b8089e7085378f33b2b3c2ceb5cd45cd933600cc9c886a722d50470bf3a0b7221607168d2f439a7bd7a1b02ac8cf2f2819369e5d0aba01dc2ac0df41cc33cbbf26f5931445dd6135dcd94e8239974f939b789d919d6558629e9ea9f3181824976770c0fb83f598070447460bf249b45ce5388d45c32f03ee5585f492d4fda9a72404eaec85cbbb02038c0f06636c639dabfe52b50ca6918dc5601a365ab0aa591439686934e1e39fffb01435b010d3985f74ff14f925a1c310e69a4d3ba7edcc816783cff5063eec754b99651ebb48c3681c4f61bca75f6859a456abc2458142ec6e002d7cbe06802581fcd9555ba46671e25ac293a6fc16fc1d87e87c9e724c9218e849c223a9d1e36b6f1908f588e7fcccd671f435146d92874eae168d4f561a7af45ea8de4aa011c6a79484773c42d7226c5b4936b45b59752404ee4a609c220f8b5343a763ca36f2705689f191cfa511aa4da4be8b2b333c9a029a6f3292101e9f651e1266ab2ca551b7bdf56462bfcd6fa9dd9fe07421ea451df802bdbbceceb83360c9c36df52c97f3072b7fb94a8ef3acc80ec14b8682d9eafbd2e228825e9cdfe762a2cedad1b87f92485a771bb701ff35bf260dc15d08a8ea6c6f3b4d5f7eb8e3b8c536f106899f73dbe43f91343ace6fffaa2e0197b44b730cefcaed1ceba9140c05706e4fa52313b7507f18888b8f00542b6029633ae3bea9aeffef4072a97f6566b84900ff6d6f30a80754e79fa5a83fc6efad719e38c413290b26c9755117469b87a903cc18491ad1b26ce14a8a7362006430f1387ca0d446a8a861ed65bb9d8d03614c79724b84cf607ebbc9374f6a5d494286ce75383f314ad743822f8534f23ddef60b4fd0e03dc6c810ea3ced898493fc73b0455774187b6ad55b9fec781bb715d2140ded272bd7f16d2cc2ed61a6ed2ed46d6327d3eaa5afdea3388a2a449d25d40413824b667da120ef3a453fc5416c83c5d197b6e0c2e7dbb385f4cdc62a550768fbf29fc85474daa441e8e6a61abce6985d9c1d8308437c21c09a2a02aeba119e17b8d7aa9bc93fd1f750a69acbd08885ffd4bd1165b880f2c070e3f32b113d99ebf491420e74ef556bcf2129769ee44d3a155dfd2a6ed7b794ace72b3b3a46d6bcf30dd79228752a32f876aff52bffaf8e5dcb5cbd206c0fc64979e326e52ccb8ed8453ab88a0224800cb7b48a21e935f510bdd1627967058c5af93b41b5b1a0d76bc1262d16aeb5776599a184c52da521dd1f365740bc6e931b38299659a30835bc94b7ef9dd631a5d5a1d3742c39d603584dc44de77dc16f6a502bdcdf9e2af755b8a28fb7592c48f7155677dabfd79e82b4dd769b40850d4cabebf2e6be3a82c7fc19a09056849125d541e8159a2561feb05a97222c0e040bab549c4754d9a0881bd7cd973628eacf5b76883094fb9aea9aff2df9651fb95af274749d880817482f342c1dba80277f96f0b4881ae6845763cd8f6df2a8392494581b7c2783c115f99c8f5fa9a6269457152dd3ee914ac9e3d7c4af131f3f3efee61e44d123c245ae4a7445acfb0f1a74d90c8a2010893786442af9fcaca3e67270fd8b2056a426b9c52549180daecb20e8e8b253ea64ea94cc4cf68c00ccbe00214b889145ee3caed1a2388a47e1f51c9c5a88921fa909033d5f518a3bed4263a435c1a6ac218728ae4309b0b411dac79a6e63ae14633786037ad33a88b17ce953356de60ea77fc07ba686867d7396d13ee765970392f7df778376ebf67109408d57ba29a7128829874c044eeefb66b2998370b5b8007373c186ac3a6fb31413f99b5d35a77ee65017a04de89f64f91f34e1f7625a9fce29f11c07d04075f445c145bcf115d82320b8416a11349020cbaf140115851fde9802df0b806940519605d03f72064921747ea004810a70e5d9c9b7a6c9d0f880571303f5376c6bf20ea0eb4a230b051b7a94b81a4f687bc50fe90fe2d85b6c0224e333fc00adb995f75c222f890fde71c127f5c221bef8436df64d4b3720a3b9986bf20f4851905bd94282865320f7ef44bbc861750b48a4f7eec51ef69cbddf588a28aa0e3d0e0a16084f2004857f245db41a2888b1ed4b1e6e18621307ebc6b517bb62f51999abc067988a6eccc027aecf155aa791cb12dcb5ba91902dff604d766fc9c6be584c928f79229bac0db9160379dfd88266c86b8bd45b34d42a33c3c7b3e1d3f6eb10e4121a9f32e5219ce8c981738c61654a362ed6e0e25213897eb7da6d78163f3c7467f668dbb50e3bb5669916346a389cc81e35643b0cf0e321a17805233a64635a4d6740afe11927b48330be755eeb02e3c3280530a86369e80902abc2888c0f1d2a6637669a71659eb442dda2274210ab252f11c0d3d9c14986d708e260fdf7298c3a1e6efa6551040db09e0a576c0535e5cda297dd577e336fb4c50e19f1ba15f579e6749bc276a57dd341b7bd092ff2ffbba30a687014f1aaaaa6285570ee6c69f6a9a801449998585046a9d70fb5481aef2aaa17d6c4640e20a09594d42fb71176603db2b4270e90801f7dd79820e601f22836fee393bd90d7b4688aff4f1ca0f9ba69dc53eaae694e3a5f468dbc4fcc77b2a3c5dc01146c3f6d69fe6aa6d88ee80087f4db3c11cabc295c747df1d6f8d7ab20db2982fd3b13d485e87f4c95647b6a0bb9f241fbc1ef60a5883384973b45c99a4fb04219d08b01feea5331c4287f1a1a09cc83212a7414df53a858a35e015abc85780a687ec0c346e378d9157b64a2180af54d40e98a58125246d6c1e03204ef777abc650702e80a76497ba5202ff1ad9cf8d113ec89032d89de01a324d75242e09de75ad97ad4ee7152008c152e44b3e8da323be66dcc642198dee5b9b42eca4cbbdc048a6798983a32e8f8caa1424aa2061b7f2c6f96abdd39cb1d7d2f6cfcfa920cb2373b8e5d8ce1ae283621f6aeb5234147d7b9606655d51ebd34020cc155a3090169cc4453f8f24e24e756e67f63ec8bd029c6e6ff3411475b921f792d875428b3809382e7b5c00f814f1a72582d954086761bec57ebb0ead769bfb03e35ecb609afa3c35791991896b2db78aebceb980b9b44176263358a5f9a09626c2e924a3afc98ed2b1f901dbfb59a0731cac12e710195f52d7f7f41f84bdf9fae08ee16efb8efad9276b5a0242821e2e6088f2f4096c67747f6792c3ecd2560991106e1db16984c8cba99fc2c0a5b3decb4463b9b9db61cfc3182fd25bc26ef178caa23b812ee4f2c6219c26a1fd823282f9ebfeab52972ef043f67cec56c3820a1213a8a34f17eb09d984fc09664a407bf71378a8578f24b66bcd4ade3d92c5f1ec915ecf27de1b5d6444287b4deab0e05ee3b6151b001001400030000000d00180009065c"], 0x1100}, 0x1, 0x7}, 0x0) 143.445813ms ago: executing program 1 (id=10106): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 142.995073ms ago: executing program 3 (id=10107): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xb}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 122.933194ms ago: executing program 2 (id=10108): unshare(0x2c020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='&'], 0x10) 58.203997ms ago: executing program 6 (id=10109): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}], 0x1, 0x500f4) 57.932427ms ago: executing program 2 (id=10110): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x2f, 0x0, 0x80000}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0xb, 0x2}}}}]}, 0x40}}, 0x4000010) 45.318068ms ago: executing program 9 (id=10112): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES32], 0x1, 0x36e, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000580)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000000)='./file1\x00') 40.657968ms ago: executing program 6 (id=10113): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 593.99µs ago: executing program 3 (id=10114): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x3514, 0x9141, 0x69, 0x0, 0x0) 0s ago: executing program 9 (id=10115): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0), 0xfffffffffffffe92, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): sadm_t pid=25998 comm="syz.9.8186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 373.738112][ T28] audit: type=1326 audit(2000001062.519:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25998 comm="syz.9.8186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 373.763781][ T28] audit: type=1326 audit(2000001062.539:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25998 comm="syz.9.8186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 373.789833][ T28] audit: type=1326 audit(2000001062.539:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25998 comm="syz.9.8186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 374.001816][T26011] syzkaller1: entered promiscuous mode [ 374.007664][T26011] syzkaller1: entered allmulticast mode [ 374.043718][T25882] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 374.253724][T26027] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0002:7d01 with DS=0x1 [ 374.451870][T26043] ip6_vti0 speed is unknown, defaulting to 1000 [ 374.501495][T26049] netlink: 'syz.4.8206': attribute type 16 has an invalid length. [ 374.509977][T26049] netlink: 'syz.4.8206': attribute type 17 has an invalid length. [ 374.539783][T26049] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.547050][T26049] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.637577][T26049] macvlan2: left promiscuous mode [ 374.645108][T26049] ip6erspan0: left allmulticast mode [ 374.651513][T26049] gtp0: left promiscuous mode [ 374.656530][T26049] gtp0: left allmulticast mode [ 374.698470][T26051] bridge0: left promiscuous mode [ 374.713189][T26051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.735656][T26051] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.744827][T26051] bridge0: port 3(vlan2) entered blocking state [ 374.751189][T26051] bridge0: port 3(vlan2) entered forwarding state [ 374.762737][T26051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.793181][T21681] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.811708][ T6886] ip6_vti0 speed is unknown, defaulting to 1000 [ 374.820139][T21681] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.828989][ T6886] syz2: Port: 1 Link ACTIVE [ 374.833898][T21681] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.842629][ T6886] ip6_vti0 speed is unknown, defaulting to 1000 [ 374.861361][T21681] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.354861][ T28] kauditd_printk_skb: 165 callbacks suppressed [ 375.354873][ T28] audit: type=1400 audit(2000001064.149:4428): avc: denied { create } for pid=26095 comm="syz.9.8224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 375.403960][T26096] ip6_vti0 speed is unknown, defaulting to 1000 [ 375.422936][T26100] netlink: 'syz.5.8222': attribute type 16 has an invalid length. [ 375.431213][T26100] netlink: 'syz.5.8222': attribute type 17 has an invalid length. [ 375.439328][ T28] audit: type=1400 audit(2000001064.169:4429): avc: denied { create } for pid=26093 comm="syz.2.8225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 375.529988][ T28] audit: type=1400 audit(2000001064.169:4430): avc: denied { open } for pid=26090 comm="syz.4.8223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 375.557858][T26100] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.565057][T26100] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.589957][ T28] audit: type=1400 audit(2000001064.169:4431): avc: denied { kernel } for pid=26090 comm="syz.4.8223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 375.618885][ T28] audit: type=1400 audit(2000001064.169:4432): avc: denied { setopt } for pid=26093 comm="syz.2.8225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 375.638744][ T28] audit: type=1400 audit(2000001064.169:4433): avc: denied { ioctl } for pid=26093 comm="syz.2.8225" path="socket:[80984]" dev="sockfs" ino=80984 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 375.664420][ T28] audit: type=1400 audit(2000001064.169:4434): avc: denied { write } for pid=26093 comm="syz.2.8225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 375.684426][ T28] audit: type=1400 audit(2000001064.189:4435): avc: denied { write } for pid=26095 comm="syz.9.8224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 375.705896][ T28] audit: type=1400 audit(2000001064.219:4436): avc: denied { write } for pid=26090 comm="syz.4.8223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 375.725958][ T28] audit: type=1400 audit(2000001064.269:4437): avc: denied { setopt } for pid=26106 comm="syz.3.8228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 375.834529][T26100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.875811][T26100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.962993][T26108] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.011422][T26108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.052920][T21681] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.075944][T21681] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.107840][T21681] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.136893][T21681] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.314323][T26122] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8234'. [ 376.371396][T26122] bond1: option primary_reselect: invalid value (8) [ 376.382531][T26122] bond1 (unregistering): Released all slaves [ 376.642566][T26132] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8237'. [ 376.745334][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 377.230794][T26138] loop9: detected capacity change from 0 to 512 [ 377.265050][T26138] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.8241: inode has both inline data and extents flags [ 377.285390][T26138] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 377.285586][T26138] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.8241: couldn't read orphan inode 15 (err -117) [ 377.306646][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 377.306665][ C0] EXT4-fs (loop9): initial error at time 2000001066: ext4_orphan_get:1391: inode 15 [ 377.306703][ C0] EXT4-fs (loop9): last error at time 2000001066: ext4_orphan_get:1391: inode 15 [ 377.343046][T26138] loop9: lost filesystem error report for type 5 error -117 [ 377.345487][T26138] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.398141][T23174] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.499421][T26158] syzkaller1: entered promiscuous mode [ 377.520618][T26163] loop4: detected capacity change from 0 to 1764 [ 377.541083][T26158] syzkaller1: entered allmulticast mode [ 377.596733][T26170] loop4: detected capacity change from 0 to 164 [ 377.623988][T26170] sock: sock_set_timeout: `syz.4.8254' (pid 26170) tries to set negative timeout [ 377.762183][T26178] loop4: detected capacity change from 0 to 1024 [ 377.782628][T26178] EXT4-fs: inline encryption not supported [ 377.803188][T26168] loop5: detected capacity change from 0 to 2048 [ 377.818758][T26178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.018898][T26168] Alternate GPT is invalid, using primary GPT. [ 378.061560][T26168] loop5: p2 p3 p7 [ 378.137544][T26186] tipc: Started in network mode [ 378.156252][T26186] tipc: Node identity ac14142f, cluster identity 4711 [ 378.193626][T26186] tipc: New replicast peer: 0.0.0.0 [ 378.212198][T26186] tipc: Enabled bearer , priority 10 [ 378.248670][T26187] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 378.490587][T15174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.533869][T26200] ip6_vti0 speed is unknown, defaulting to 1000 [ 378.686622][T26215] netlink: 'syz.3.8273': attribute type 21 has an invalid length. [ 378.698681][T26215] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8273'. [ 378.960508][T26231] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8280'. [ 379.000523][T26231] loop5: detected capacity change from 0 to 512 [ 379.007914][T26231] EXT4-fs: Ignoring removed mblk_io_submit option [ 379.014427][T26231] EXT4-fs: inline encryption not supported [ 379.021488][T26231] EXT4-fs: test_dummy_encryption option not supported [ 379.050006][T26231] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8280'. [ 379.215315][ T6895] tipc: Node number set to 2886997039 [ 379.432840][T26269] loop5: detected capacity change from 0 to 512 [ 379.451095][T26267] syzkaller1: entered promiscuous mode [ 379.466898][T26267] syzkaller1: entered allmulticast mode [ 379.485197][T26269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.510200][T26269] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 379.564205][T22135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.717506][T26288] ip6_vti0 speed is unknown, defaulting to 1000 [ 380.143062][T26306] Invalid argument reading file caps for ./file0 [ 380.191063][T26309] loop5: detected capacity change from 0 to 1024 [ 380.207354][T26309] EXT4-fs: Ignoring removed bh option [ 380.239338][T26309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.394833][T22135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.623840][T26325] ip6_vti0 speed is unknown, defaulting to 1000 [ 380.659692][ T28] kauditd_printk_skb: 108 callbacks suppressed [ 380.659708][ T28] audit: type=1400 audit(2000001069.459:4546): avc: denied { mount } for pid=26329 comm="syz.9.8319" name="/" dev="configfs" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 381.011791][ T28] audit: type=1326 audit(2000001069.809:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26336 comm="syz.9.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 381.066225][ T28] audit: type=1326 audit(2000001069.809:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26336 comm="syz.9.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 381.091955][ T28] audit: type=1326 audit(2000001069.809:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26336 comm="syz.9.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 381.092770][T26339] sctp: [Deprecated]: syz.5.8321 (pid 26339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.092770][T26339] Use struct sctp_sack_info instead [ 381.118016][ T28] audit: type=1326 audit(2000001069.849:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26336 comm="syz.9.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 381.156614][ T28] audit: type=1326 audit(2000001069.849:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26336 comm="syz.9.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 381.273663][ T28] audit: type=1326 audit(2000001069.849:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26336 comm="syz.9.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 381.304588][ T28] audit: type=1326 audit(2000001069.849:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26336 comm="syz.9.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 381.340833][ T28] audit: type=1326 audit(2000001069.849:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26336 comm="syz.9.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 381.435473][ T28] audit: type=1326 audit(2000001069.849:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26336 comm="syz.9.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 381.671776][T26374] netlink: 336 bytes leftover after parsing attributes in process `syz.9.8339'. [ 381.683904][T26374] netlink: 336 bytes leftover after parsing attributes in process `syz.9.8339'. [ 382.131376][T26395] ip6_vti0 speed is unknown, defaulting to 1000 [ 382.456061][T26416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8358'. [ 382.495365][T26416] hsr_slave_0: left promiscuous mode [ 382.511068][T26416] hsr_slave_1: left promiscuous mode [ 382.529824][T26424] loop5: detected capacity change from 0 to 128 [ 383.261373][T26454] SELinux: failed to load policy [ 383.445181][T26458] ip6_vti0 speed is unknown, defaulting to 1000 [ 383.586855][T26464] loop4: detected capacity change from 0 to 1024 [ 383.602607][T26466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.623822][T26466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.638214][T26464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.755478][T15174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.926281][T26481] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8387'. [ 383.945942][T26481] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8387'. [ 384.267889][T26518] 9p: Bad value for 'wfdno' [ 384.519147][T26551] loop5: detected capacity change from 0 to 128 [ 384.545482][T26551] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 384.559878][T26551] ext4 filesystem being mounted at /278/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 384.591035][T22135] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 384.681569][T26566] loop5: detected capacity change from 0 to 512 [ 384.697326][T26566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.718346][T26566] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 384.735097][T26566] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.8425: corrupted inode contents [ 384.754751][T26566] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #2: comm syz.5.8425: mark_inode_dirty error [ 384.766721][T26566] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #2: comm syz.5.8425: corrupted inode contents [ 384.778921][T26566] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.8425: mark_inode_dirty error [ 384.790898][T26577] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #2: comm syz.5.8425: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 384.790898][T26577] [ 384.830337][T22135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.978010][T26588] loop4: detected capacity change from 0 to 2048 [ 384.990821][T26588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8433'. [ 385.018919][T26588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8433'. [ 385.283468][T26620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8448'. [ 385.370907][T26625] ip6_vti0 speed is unknown, defaulting to 1000 [ 385.676538][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 385.676554][ T28] audit: type=1400 audit(2000001074.479:4614): avc: denied { bind } for pid=26645 comm="syz.9.8459" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 385.707801][ T28] audit: type=1400 audit(2000001074.479:4615): avc: denied { name_bind } for pid=26645 comm="syz.9.8459" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 385.729020][ T28] audit: type=1400 audit(2000001074.479:4616): avc: denied { node_bind } for pid=26645 comm="syz.9.8459" saddr=fe80::aa src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 385.797069][T26654] ip6_vti0 speed is unknown, defaulting to 1000 [ 385.839448][T26658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8463'. [ 386.196484][ T28] audit: type=1400 audit(2000001074.999:4617): avc: denied { ioctl } for pid=26651 comm="syz.9.8472" path="socket:[82154]" dev="sockfs" ino=82154 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 386.269042][ T28] audit: type=1400 audit(2000001075.069:4618): avc: denied { read } for pid=26670 comm="syz.3.8467" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 386.326118][ T28] audit: type=1400 audit(2000001075.069:4619): avc: denied { map } for pid=26670 comm="syz.3.8467" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 386.395486][ T28] audit: type=1400 audit(2000001075.069:4620): avc: denied { execute } for pid=26670 comm="syz.3.8467" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 386.449217][ T28] audit: type=1400 audit(2000001075.129:4621): avc: denied { create } for pid=26672 comm="syz.3.8468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 386.489301][ T28] audit: type=1400 audit(2000001075.159:4622): avc: denied { connect } for pid=26672 comm="syz.3.8468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 386.534789][ T28] audit: type=1400 audit(2000001075.169:4623): avc: denied { write } for pid=26674 comm="syz.9.8469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 386.720001][T26692] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 386.735399][T26692] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0005 l2 [ 386.809327][T26706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8486'. [ 386.820201][T26706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8486'. [ 386.879046][T26713] loop5: detected capacity change from 0 to 512 [ 386.886054][T26713] EXT4-fs: Ignoring removed i_version option [ 386.892135][T26713] EXT4-fs: Ignoring removed bh option [ 386.913489][T26713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.926669][T26713] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 386.938794][T26713] EXT4-fs (loop5): shut down requested (2) [ 386.955516][T22135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.052294][T26727] loop5: detected capacity change from 0 to 128 [ 387.198300][T26739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8500'. [ 387.237189][T26743] loop5: detected capacity change from 0 to 128 [ 387.771302][T26774] loop3: detected capacity change from 0 to 164 [ 387.908842][T26778] loop3: detected capacity change from 0 to 512 [ 387.915786][T26778] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 387.926999][T26778] EXT4-fs (loop3): 1 truncate cleaned up [ 387.933271][T26778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.995755][T26781] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8518'. [ 388.009721][T26781] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8518'. [ 388.021480][T26781] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8518'. [ 388.035403][T26781] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8518'. [ 388.054531][T20437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.186818][T26798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8527'. [ 388.293936][T26813] netlink: 'syz.2.8533': attribute type 10 has an invalid length. [ 388.302764][T26813] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.8533'. [ 388.493735][T21677] Bluetooth: hci0: Frame reassembly failed (-84) [ 388.554020][T26831] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8540'. [ 388.622428][T26839] IPVS: Error connecting to the multicast addr [ 388.631525][T26840] loop4: detected capacity change from 0 to 512 [ 388.652747][T26842] loop3: detected capacity change from 0 to 1024 [ 388.659736][T26840] EXT4-fs: Ignoring removed i_version option [ 388.679519][T26840] EXT4-fs: Ignoring removed bh option [ 388.756521][T26842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.769520][T26840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.793395][T20437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.805927][T26840] ext4 filesystem being mounted at /835/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 388.848597][T26840] EXT4-fs (loop4): shut down requested (2) [ 388.883668][T15174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.376102][T26916] hsr0: entered promiscuous mode [ 389.382102][T26915] hsr0: left promiscuous mode [ 389.425596][T26921] loop4: detected capacity change from 0 to 164 [ 389.457385][T26921] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 389.477511][T26921] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 389.499437][T26921] Symlink component flag not implemented [ 389.513855][T26921] Symlink component flag not implemented [ 389.531913][T26921] Symlink component flag not implemented (7) [ 389.543616][T26921] Symlink component flag not implemented (116) [ 390.505318][T18052] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 390.710873][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 390.710899][ T28] audit: type=1400 audit(2000001079.509:4646): avc: denied { bind } for pid=26970 comm="syz.5.8594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 390.903191][T26994] bond0: ARP target 8.4.0.0 is already present [ 390.913668][T26994] bond0: option arp_ip_target: invalid value (1032) [ 390.946031][ T28] audit: type=1400 audit(2000001079.739:4647): avc: denied { bind } for pid=26998 comm="syz.9.8606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 390.979516][ T28] audit: type=1400 audit(2000001079.769:4648): avc: denied { mounton } for pid=26991 comm="syz.5.8604" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 391.011154][ T28] audit: type=1400 audit(2000001079.769:4649): avc: denied { mount } for pid=26991 comm="syz.5.8604" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 391.107227][T27011] loop4: detected capacity change from 0 to 128 [ 391.141283][T27011] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 391.155837][T27011] ext4 filesystem being mounted at /857/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.172131][ T28] audit: type=1400 audit(2000001079.969:4650): avc: denied { rename } for pid=27009 comm="syz.4.8611" name="bus" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 391.204663][ T28] audit: type=1400 audit(2000001079.969:4651): avc: denied { rmdir } for pid=27009 comm="syz.4.8611" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 391.253563][T15174] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 391.449375][T27033] loop5: detected capacity change from 0 to 512 [ 391.492163][T27033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.554427][ T28] audit: type=1400 audit(2000001080.349:4652): avc: denied { append } for pid=27032 comm="syz.5.8621" path="/314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/blkio.bfq.avg_queue_size" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 391.618150][ T28] audit: type=1400 audit(2000001080.409:4653): avc: denied { map } for pid=27032 comm="syz.5.8621" path="/314/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/blkio.bfq.avg_queue_size" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 391.670114][T22135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.738989][T27047] ip6_vti0 speed is unknown, defaulting to 1000 [ 391.768777][T27054] loop3: detected capacity change from 0 to 128 [ 391.825720][T27054] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 391.882470][T27054] ext4 filesystem being mounted at /469/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 391.907158][ T28] audit: type=1400 audit(2000001080.699:4654): avc: denied { append } for pid=27053 comm="syz.3.8629" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 391.953779][T20437] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 391.972076][ T28] audit: type=1400 audit(2000001080.729:4655): avc: denied { unmount } for pid=20437 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 392.113642][T27088] loop5: detected capacity change from 0 to 128 [ 392.252260][T27094] loop3: detected capacity change from 0 to 1024 [ 392.259325][T27094] EXT4-fs: Ignoring removed bh option [ 392.277052][T27094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.289924][T27094] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.365162][T27102] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.8647: lblock 0 mapped to illegal pblock 0 (length 6) [ 392.390025][T27102] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 392.402588][T27102] EXT4-fs (loop3): This should not happen!! Data will be lost [ 392.402588][T27102] [ 392.427714][T27102] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8647: bg 0: block 112: padding at end of block bitmap is not set [ 392.457940][T21674] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 392.475470][T21674] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 392.487836][T21674] EXT4-fs (loop3): This should not happen!! Data will be lost [ 392.487836][T21674] [ 392.549405][T27119] __nla_validate_parse: 5 callbacks suppressed [ 392.549467][T27119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8657'. [ 392.573552][T20437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 392.584556][T27119] bond1: Invalid ad_actor_system MAC address. [ 392.592755][T27119] bond1: option ad_actor_system: invalid value (4294967295) [ 392.602995][T27119] bond1 (unregistering): Released all slaves [ 392.809546][T27142] loop5: detected capacity change from 0 to 1024 [ 392.845795][T27142] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.892996][T22135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.947502][T27150] loop5: detected capacity change from 0 to 512 [ 393.008201][T27156] loop4: detected capacity change from 0 to 1024 [ 393.017520][T27156] EXT4-fs: inline encryption not supported [ 393.023943][T27156] EXT4-fs: Ignoring removed bh option [ 393.055752][T27156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.161593][T15174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.197611][T27163] ip6_vti0 speed is unknown, defaulting to 1000 [ 393.284886][T27167] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8674'. [ 393.464862][T27175] team0 (unregistering): Port device team_slave_0 removed [ 393.507556][T27178] xt_hashlimit: size too large, truncated to 1048576 [ 393.514647][T27175] team0 (unregistering): Port device team_slave_1 removed [ 393.596868][T27185] loop3: detected capacity change from 0 to 512 [ 393.616140][T27185] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 393.642743][T27185] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (6000000) [ 393.666155][T27185] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 393.749644][T27193] netlink: 'syz.3.8685': attribute type 3 has an invalid length. [ 393.860801][T27202] loop3: detected capacity change from 0 to 512 [ 393.906623][T27202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.966321][T27202] ext4 filesystem being mounted at /481/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 394.007681][T20437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.031166][T27217] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8693'. [ 394.060801][T27219] ip6_vti0 speed is unknown, defaulting to 1000 [ 394.073523][T27217] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8693'. [ 394.363343][T27263] team0 (unregistering): Port device C removed [ 394.375942][T27263] team0 (unregistering): Port device team_slave_1 removed [ 394.402850][T27267] ip6_vti0 speed is unknown, defaulting to 1000 [ 394.463086][T27274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8718'. [ 394.486759][T27274] bond2: Invalid ad_actor_system MAC address. [ 394.493082][T27274] bond2: option ad_actor_system: invalid value (4294967295) [ 394.507749][T27274] bond2 (unregistering): Released all slaves [ 394.635741][T27286] loop4: detected capacity change from 0 to 1024 [ 394.646227][T27288] loop5: detected capacity change from 0 to 2048 [ 394.654887][T27286] EXT4-fs: inline encryption not supported [ 394.698383][T27290] netlink: 63503 bytes leftover after parsing attributes in process `syz.9.8725'. [ 394.728084][T27286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 394.766800][T27286] ext4 filesystem being mounted at /877/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.811811][T27286] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 3: comm syz.4.8724: lblock 3 mapped to illegal pblock 3 (length 3) [ 394.845189][T27288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.857887][T27286] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 394.871321][T27286] EXT4-fs (loop4): This should not happen!! Data will be lost [ 394.871321][T27286] [ 394.875369][T27306] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8724: bg 0: block 112: padding at end of block bitmap is not set [ 394.912312][T27306] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 394.927396][T27306] EXT4-fs (loop4): This should not happen!! Data will be lost [ 394.927396][T27306] [ 394.956073][T22135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.003903][T21681] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:13: lblock 8 mapped to illegal pblock 8 (length 8) [ 395.029544][T21681] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 395.052783][T21681] EXT4-fs (loop4): This should not happen!! Data will be lost [ 395.052783][T21681] [ 395.076754][T15174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 395.121619][T27328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8735'. [ 395.164080][T27328] smc: adding net device bond0 with user defined pnetid SYZ2 [ 395.175732][T27328] bond0: Invalid ad_actor_system MAC address. [ 395.181946][T27328] bond0: option ad_actor_system: invalid value (4294967295) [ 395.209283][T27328] smc: removing net device bond0 with user defined pnetid SYZ2 [ 395.217259][T27328] bond0 (unregistering): Released all slaves [ 395.479754][T27383] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8744'. [ 395.518557][T27383] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8744'. [ 395.747672][T27435] xt_hashlimit: size too large, truncated to 1048576 [ 396.036911][T27444] 9pnet: p9_errstr2errno: server reported unknown error  [ 396.136039][T27457] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8759'. [ 396.165916][T27457] bridge0: port 3(vlan2) entered disabled state [ 396.325296][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 396.325313][ T28] audit: type=1326 audit(2000001085.119:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27480 comm="syz.4.8770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f3e0c799 code=0x7ffc0000 [ 396.352051][T27479] xt_hashlimit: size too large, truncated to 1048576 [ 396.399559][ T2966] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 396.627240][ T28] audit: type=1326 audit(2000001085.119:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27480 comm="syz.4.8770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f3e0c799 code=0x7ffc0000 [ 396.652562][ T28] audit: type=1326 audit(2000001085.119:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27480 comm="syz.4.8770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f3e0c799 code=0x7ffc0000 [ 396.677245][ T28] audit: type=1326 audit(2000001085.119:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27480 comm="syz.4.8770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f97f3e0c799 code=0x7ffc0000 [ 396.716801][ T28] audit: type=1326 audit(2000001085.169:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27480 comm="syz.4.8770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f3e0c799 code=0x7ffc0000 [ 396.753551][ T28] audit: type=1326 audit(2000001085.169:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27480 comm="syz.4.8770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f97f3dccfce code=0x7ffc0000 [ 396.788574][ T28] audit: type=1326 audit(2000001085.169:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27480 comm="syz.4.8770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f97f3dccfce code=0x7ffc0000 [ 396.831854][ T28] audit: type=1326 audit(2000001085.169:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27480 comm="syz.4.8770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f97f3dccfce code=0x7ffc0000 [ 396.856432][ T28] audit: type=1326 audit(2000001085.169:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27480 comm="syz.4.8770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f97f3dccfce code=0x7ffc0000 [ 396.880231][ T28] audit: type=1326 audit(2000001085.169:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27480 comm="syz.4.8770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f97f3dccfce code=0x7ffc0000 [ 396.946863][T27512] xt_hashlimit: size too large, truncated to 1048576 [ 397.428999][T27561] loop4: detected capacity change from 0 to 128 [ 397.746241][T27605] __nla_validate_parse: 3 callbacks suppressed [ 397.746259][T27605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8825'. [ 397.818974][T27605] netlink: 'syz.2.8825': attribute type 30 has an invalid length. [ 397.833756][T21681] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.842407][T21681] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.850985][T21681] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.862171][T27605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8825'. [ 397.871512][T21687] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.871657][T27605] netlink: 'syz.2.8825': attribute type 30 has an invalid length. [ 398.058270][T27633] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8835'. [ 398.070348][T27633] macsec1: entered promiscuous mode [ 398.075864][T27633] dummy0: entered promiscuous mode [ 398.081246][T27633] macsec1: entered allmulticast mode [ 398.117663][T27635] blktrace: Concurrent blktraces are not allowed on loop4 [ 398.125204][T27633] dummy0: entered allmulticast mode [ 398.134164][T27633] dummy0: left allmulticast mode [ 398.148592][T27633] dummy0: left promiscuous mode [ 398.440898][T27652] netlink: 48 bytes leftover after parsing attributes in process `syz.9.8842'. [ 399.153264][T27715] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8873'. [ 399.551184][T27755] loop5: detected capacity change from 0 to 1024 [ 399.563116][T27755] EXT4-fs: Ignoring removed orlov option [ 399.591023][T27755] EXT4-fs: Ignoring removed mblk_io_submit option [ 399.629786][T27755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.680581][T22135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.868758][T27770] netlink: 83 bytes leftover after parsing attributes in process `syz.9.8895'. [ 399.896845][T27772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8896'. [ 399.908076][T27772] netlink: 'syz.2.8896': attribute type 1 has an invalid length. [ 399.924358][T27772] netlink: 'syz.2.8896': attribute type 2 has an invalid length. [ 400.311316][T27815] ip6_vti0 speed is unknown, defaulting to 1000 [ 401.044517][ T912] kernel write not supported for file /sg0 (pid: 912 comm: kworker/0:2) [ 401.107168][T27863] loop3: detected capacity change from 0 to 2048 [ 401.187144][T27873] syzkaller1: entered promiscuous mode [ 401.192810][T27873] syzkaller1: entered allmulticast mode [ 401.403776][T27893] sctp: [Deprecated]: syz.5.8947 (pid 27893) Use of int in maxseg socket option. [ 401.403776][T27893] Use struct sctp_assoc_value instead [ 401.419039][ T28] kauditd_printk_skb: 106 callbacks suppressed [ 401.419057][ T28] audit: type=1400 audit(2000001090.199:4795): avc: denied { getopt } for pid=27890 comm="syz.5.8947" lport=53723 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 401.450948][ T28] audit: type=1400 audit(2000001090.249:4796): avc: denied { nlmsg_write } for pid=27894 comm="syz.9.8948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 401.481726][ T28] audit: type=1400 audit(2000001090.249:4797): avc: denied { audit_write } for pid=27894 comm="syz.9.8948" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 401.503333][ T28] audit: type=1107 audit(2000001090.249:4798): pid=27894 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 401.532235][T27903] IPVS: Error connecting to the multicast addr [ 401.576164][ T28] audit: type=1400 audit(2000001090.369:4799): avc: denied { read } for pid=27906 comm="syz.3.8953" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 401.605898][ T28] audit: type=1400 audit(2000001090.369:4800): avc: denied { open } for pid=27906 comm="syz.3.8953" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 401.632285][ T28] audit: type=1400 audit(2000001090.399:4801): avc: denied { ioctl } for pid=27906 comm="syz.3.8953" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 401.818493][T27923] ip6_vti0 speed is unknown, defaulting to 1000 [ 401.945363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.987063][ T28] audit: type=1326 audit(2000001090.789:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27937 comm="syz.5.8968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6389c799 code=0x7ffc0000 [ 402.035308][ T28] audit: type=1326 audit(2000001090.789:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27937 comm="syz.5.8968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6389c799 code=0x7ffc0000 [ 402.070884][ T28] audit: type=1326 audit(2000001090.789:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27937 comm="syz.5.8968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f1e6389c799 code=0x7ffc0000 [ 402.449971][T27977] loop5: detected capacity change from 0 to 512 [ 402.529410][T27977] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.8986: corrupted inode contents [ 402.587896][T27977] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 402.594198][T27977] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #3: comm syz.5.8986: mark_inode_dirty error [ 402.603347][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 402.603364][ C0] EXT4-fs (loop5): initial error at time 2000001091: ext4_do_update_inode:5569: inode 3 [ 402.603394][ C0] EXT4-fs (loop5): last error at time 2000001091: ext4_do_update_inode:5569: inode 3 [ 402.642774][T27977] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 402.643391][T27977] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #3: comm syz.5.8986: corrupted inode contents [ 402.674261][T27977] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 402.674526][T27977] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.8986: mark_inode_dirty error [ 402.696822][T27977] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 402.697248][T27977] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.8986: Failed to acquire dquot type 0 [ 402.721556][T27977] loop5: lost filesystem error report for type 5 error -117 [ 402.722236][T27977] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.8986: corrupted inode contents [ 402.742116][T27977] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 402.742342][T27977] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #16: comm syz.5.8986: mark_inode_dirty error [ 402.764300][T27977] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 402.764523][T27977] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.8986: corrupted inode contents [ 402.799213][T27977] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 402.799450][T27977] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.8986: mark_inode_dirty error [ 402.822900][T27977] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 402.823101][T27977] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.8986: corrupted inode contents [ 402.851931][T27977] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 402.852177][T27977] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 402.881443][T27977] loop5: lost filesystem error report for type 5 error -117 [ 402.881694][T27977] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.8986: corrupted inode contents [ 402.901293][T27977] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 402.901916][T27977] EXT4-fs error (device loop5): ext4_truncate:4587: inode #16: comm syz.5.8986: mark_inode_dirty error [ 402.960125][T27977] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 402.991812][T27977] loop5: lost filesystem error report for type 5 error -117 [ 402.992370][T27977] EXT4-fs (loop5): 1 truncate cleaned up [ 403.026442][T27977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.048028][T27977] ext4 filesystem being mounted at /403/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.083517][T27977] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #3: comm syz.5.8986: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 403.083517][T27977] [ 403.125467][T22135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.228717][T28031] 9pnet: p9_errstr2errno: server reported unknown error [ 403.306601][T28050] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9016'. [ 403.358030][T28054] xt_hashlimit: size too large, truncated to 1048576 [ 403.780962][T28101] loop4: detected capacity change from 0 to 256 [ 404.090940][T28115] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 404.098637][ T3374] IPVS: starting estimator thread 0... [ 404.185393][T28123] IPVS: using max 1872 ests per chain, 93600 per kthread [ 404.369768][T28157] loop5: detected capacity change from 0 to 512 [ 404.382163][T28157] EXT4-fs (loop5): 1 truncate cleaned up [ 404.402376][T28157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.568206][T22135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.692745][T28184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9074'. [ 404.873061][T28190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9074'. [ 405.065372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.339741][T28225] loop4: detected capacity change from 0 to 256 [ 405.352229][T28225] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 405.438788][T28230] ip6_vti0 speed is unknown, defaulting to 1000 [ 405.893131][T28250] loop4: detected capacity change from 0 to 1024 [ 405.941294][T28254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9103'. [ 405.951775][T28250] EXT4-fs: Ignoring removed bh option [ 406.013799][T28250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 406.034255][T28260] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 406.055111][T28250] ext4 filesystem being mounted at /953/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.070550][T28249] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.9101: lblock 0 mapped to illegal pblock 0 (length 1) [ 406.084814][T28269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9108'. [ 406.085540][T28267] loop5: detected capacity change from 0 to 256 [ 406.100310][T28249] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.9101: lblock 0 mapped to illegal pblock 0 (length 1) [ 406.100528][T28249] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.9101: lblock 0 mapped to illegal pblock 0 (length 1) [ 406.100996][T28249] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.9101: lblock 0 mapped to illegal pblock 0 (length 1) [ 406.154694][T28249] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.9101: lblock 0 mapped to illegal pblock 0 (length 1) [ 406.176691][T28249] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.9101: lblock 0 mapped to illegal pblock 0 (length 1) [ 406.217763][T28249] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.9101: lblock 0 mapped to illegal pblock 0 (length 1) [ 406.246508][T28249] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.9101: lblock 0 mapped to illegal pblock 0 (length 1) [ 406.262464][T28281] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9114'. [ 406.268891][T28249] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.9101: lblock 0 mapped to illegal pblock 0 (length 1) [ 406.293518][T28249] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #15: comm syz.4.9101: lblock 0 mapped to illegal pblock 0 (length 1) [ 406.380908][T28288] ip6_vti0 speed is unknown, defaulting to 1000 [ 406.410630][T15174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 406.552346][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 406.552360][ T28] audit: type=1326 audit(2000001095.349:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28303 comm="syz.2.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8edcc799 code=0x7ffc0000 [ 406.595472][ T28] audit: type=1326 audit(2000001095.389:4895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28303 comm="syz.2.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8edcc799 code=0x7ffc0000 [ 406.620518][ T28] audit: type=1326 audit(2000001095.389:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28303 comm="syz.2.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8edcc799 code=0x7ffc0000 [ 406.644443][ T28] audit: type=1326 audit(2000001095.389:4897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28303 comm="syz.2.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8edcc799 code=0x7ffc0000 [ 406.704337][ T28] audit: type=1326 audit(2000001095.389:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28303 comm="syz.2.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcc8edcc799 code=0x7ffc0000 [ 406.709003][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.736167][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.740920][ T28] audit: type=1326 audit(2000001095.389:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28303 comm="syz.2.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcc8edcc502 code=0x7ffc0000 [ 406.774280][ T28] audit: type=1326 audit(2000001095.389:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28303 comm="syz.2.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcc8ed8cfce code=0x7ffc0000 [ 406.799289][ T28] audit: type=1326 audit(2000001095.389:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28303 comm="syz.2.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcc8edcc5c7 code=0x7ffc0000 [ 406.823723][ T28] audit: type=1326 audit(2000001095.389:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28303 comm="syz.2.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc8ed8cfce code=0x7ffc0000 [ 406.851238][ T28] audit: type=1326 audit(2000001095.389:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28303 comm="syz.2.9121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcc8ed8cfce code=0x7ffc0000 [ 406.877957][T28315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9126'. [ 406.887562][T28315] netlink: 'syz.5.9126': attribute type 29 has an invalid length. [ 406.895747][T28315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9126'. [ 406.954401][T28312] ip6_vti0 speed is unknown, defaulting to 1000 [ 407.075142][T28321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9130'. [ 407.115015][T28321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9130'. [ 407.507929][T28360] loop3: detected capacity change from 0 to 512 [ 407.527536][T28360] EXT4-fs (loop3): 1 truncate cleaned up [ 407.534972][T28360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.696346][T28381] bond0: entered promiscuous mode [ 407.716131][T28381] bond_slave_0: entered promiscuous mode [ 407.722688][T28381] bond_slave_1: entered promiscuous mode [ 407.792659][T28381] bond0: left promiscuous mode [ 407.797663][T28381] bond_slave_0: left promiscuous mode [ 407.810169][T20437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.825456][T28381] bond_slave_1: left promiscuous mode [ 407.978906][T28407] loop5: detected capacity change from 0 to 7 [ 408.118093][T28411] Invalid logical block size (-1) [ 408.160371][T28422] loop4: detected capacity change from 0 to 512 [ 408.178518][T28422] EXT4-fs (loop4): 1 truncate cleaned up [ 408.184624][T28422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.185535][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.268083][T28428] tipc: Enabling of bearer rejected, already enabled [ 408.387017][T15174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.421919][T28443] loop5: detected capacity change from 0 to 512 [ 408.433663][T28443] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.9180: corrupted in-inode xattr: invalid size in ea xattr [ 408.467307][T28443] fserror_report: 1 callbacks suppressed [ 408.467326][T28443] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 408.473367][T28443] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.9180: couldn't read orphan inode 15 (err -117) [ 408.482603][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 408.482625][ C0] EXT4-fs (loop5): initial error at time 2000001097: ext4_iget_extra_inode:5025: inode 15 [ 408.482655][ C0] EXT4-fs (loop5): last error at time 2000001097: ext4_iget_extra_inode:5025: inode 15 [ 408.522215][T28443] loop5: lost filesystem error report for type 5 error -117 [ 408.527546][T28443] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.553563][T28443] EXT4-fs (loop5): shut down requested (1) [ 408.575083][T22135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.158591][T28466] ip6_vti0 speed is unknown, defaulting to 1000 [ 409.506185][T28478] __nla_validate_parse: 2 callbacks suppressed [ 409.506200][T28478] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9192'. [ 410.625591][T28515] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9206'. [ 410.760735][T19673] team0: Port device syz_tun removed [ 410.811161][T28538] loop5: detected capacity change from 0 to 512 [ 410.838667][T28538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.857067][T28538] ext4 filesystem being mounted at /452/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 410.896948][T28547] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 410.933102][T28552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9222'. [ 410.963374][T28552] bond0: entered promiscuous mode [ 410.972291][T28552] bond_slave_0: entered promiscuous mode [ 410.978349][T28552] bond_slave_1: entered promiscuous mode [ 410.986586][T28552] bond0: left promiscuous mode [ 410.997156][T28552] bond_slave_0: left promiscuous mode [ 411.004775][T28552] bond_slave_1: left promiscuous mode [ 411.100738][T28553] ip6_vti0 speed is unknown, defaulting to 1000 [ 411.146038][T28569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9226'. [ 411.266533][T28553] chnl_net:caif_netlink_parms(): no params data found [ 411.305367][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.380294][T28598] loop3: detected capacity change from 0 to 512 [ 411.390024][T28553] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.394176][T28598] EXT4-fs: Ignoring removed i_version option [ 411.406685][T28598] EXT4-fs: Ignoring removed bh option [ 411.412252][T28553] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.419928][T28553] bridge_slave_0: entered allmulticast mode [ 411.426941][T28553] bridge_slave_0: entered promiscuous mode [ 411.434110][T28553] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.452224][T28553] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.464280][T28553] bridge_slave_1: entered allmulticast mode [ 411.471245][T28553] bridge_slave_1: entered promiscuous mode [ 411.489840][T28598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.494807][T28553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.513678][T28553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.528329][T28598] ext4 filesystem being mounted at /549/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 411.542391][T28553] team0: Port device team_slave_0 added [ 411.551703][T28538] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.552103][T28553] team0: Port device team_slave_1 added [ 411.575563][T28608] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9242'. [ 411.597530][T28608] chnl_net:caif_netlink_parms(): no params data found [ 411.636362][T28553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.653172][T28553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.680319][T28553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.699595][T28553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.707471][T28553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.739992][T28553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.820321][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 411.820409][ T28] audit: type=1400 audit(2000001100.619:4935): avc: denied { read } for pid=28623 comm="syz.5.9248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 411.864775][T28553] hsr_slave_0: entered promiscuous mode [ 411.874688][T28553] hsr_slave_1: entered promiscuous mode [ 411.905993][T28553] debugfs: 'hsr0' already exists in 'hsr' [ 411.911896][T28553] Cannot create hsr debugfs directory [ 411.983565][T20437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.994781][ T28] audit: type=1400 audit(2000001100.799:4936): avc: denied { ioctl } for pid=28643 comm="syz.9.9255" path="socket:[87920]" dev="sockfs" ino=87920 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 412.136807][ T28] audit: type=1400 audit(2000001100.919:4937): avc: denied { search } for pid=28657 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.175091][ T28] audit: type=1400 audit(2000001100.919:4938): avc: denied { search } for pid=28657 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.201170][ T28] audit: type=1400 audit(2000001100.919:4939): avc: denied { search } for pid=28657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.224690][ T28] audit: type=1400 audit(2000001100.919:4940): avc: denied { search } for pid=28657 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.249230][ T28] audit: type=1400 audit(2000001100.929:4941): avc: denied { read open } for pid=28660 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.286855][T28674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9264'. [ 412.292824][ T28] audit: type=1400 audit(2000001100.929:4942): avc: denied { getattr } for pid=28660 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.315049][T28674] netlink: 'syz.2.9264': attribute type 7 has an invalid length. [ 412.329449][T28674] netlink: 'syz.2.9264': attribute type 8 has an invalid length. [ 412.337628][T28674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9264'. [ 412.355695][ T28] audit: type=1400 audit(2000001100.929:4943): avc: denied { getattr } for pid=28660 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 412.384032][ T28] audit: type=1326 audit(2000001100.969:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28656 comm="syz.9.9260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 412.623392][T28553] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 412.662334][T28553] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 412.676786][T28553] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 412.685651][T28553] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 412.715076][T28731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9282'. [ 412.732800][T28731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9282'. [ 412.806584][T28553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.826248][T28553] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.867147][T21681] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.874329][T21681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.908016][T21687] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.915103][T21687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.959263][T28759] tap0: tun_chr_ioctl cmd 1074025675 [ 412.982112][T28759] tap0: persist disabled [ 412.993317][T28759] tap0: tun_chr_ioctl cmd 1074025675 [ 413.002294][T28759] tap0: persist disabled [ 413.135012][T28553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.289732][T28553] veth0_vlan: entered promiscuous mode [ 413.306309][T28553] veth1_vlan: entered promiscuous mode [ 413.331336][T28553] veth0_macvtap: entered promiscuous mode [ 413.341733][T28553] veth1_macvtap: entered promiscuous mode [ 413.359426][T28553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.385004][T28553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.409501][T21693] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.436194][T21693] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.458252][T21693] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.467392][T21693] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.493598][T28820] loop3: detected capacity change from 0 to 512 [ 413.566983][T28820] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9299: bg 0: block 393: padding at end of block bitmap is not set [ 413.606287][T28820] loop3: lost filesystem error report for type 5 error -117 [ 413.606463][T28820] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 413.622546][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 413.622586][ C1] EXT4-fs (loop3): initial error at time 2000001102: ext4_validate_block_bitmap:441 [ 413.622608][ C1] EXT4-fs (loop3): last error at time 2000001102: ext4_validate_block_bitmap:441 [ 413.648141][T28820] loop3: lost filesystem error report for type 5 error -117 [ 413.648621][T28820] EXT4-fs (loop3): 2 truncates cleaned up [ 413.662306][T28820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.782494][T20437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.886136][T28862] netlink: 2 bytes leftover after parsing attributes in process `syz.5.9306'. [ 413.984726][T17538] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 414.030257][T17538] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 414.066472][T28887] loop3: detected capacity change from 0 to 128 [ 414.099515][T28887] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 414.242033][T28905] sctp: [Deprecated]: syz.3.9320 (pid 28905) Use of int in max_burst socket option. [ 414.242033][T28905] Use struct sctp_assoc_value instead [ 414.425371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.578821][ T6895] IPVS: starting estimator thread 0... [ 414.586614][T28945] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 414.594807][T28949] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 414.685471][T28951] IPVS: using max 1872 ests per chain, 93600 per kthread [ 414.695558][T28966] __nla_validate_parse: 3 callbacks suppressed [ 414.695575][T28966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9337'. [ 414.768788][T28971] ip6_vti0 speed is unknown, defaulting to 1000 [ 414.902801][T28988] loop0: detected capacity change from 0 to 1024 [ 414.917936][T28988] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 414.944545][T28988] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 2: comm syz.0.9342: lblock 2 mapped to illegal pblock 2 (length 1) [ 414.965107][T28988] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 414.965318][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 414.980840][ C0] EXT4-fs (loop0): initial error at time 2000001103: ext4_map_blocks:776: inode 3: block 2 [ 414.990917][ C0] EXT4-fs (loop0): last error at time 2000001103: ext4_map_blocks:776: inode 3: block 2 [ 415.002660][T28988] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 48: comm syz.0.9342: lblock 0 mapped to illegal pblock 48 (length 1) [ 415.016997][T28988] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 415.017929][T28988] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.9342: Failed to acquire dquot type 0 [ 415.039266][T28988] loop0: lost filesystem error report for type 5 error -117 [ 415.043964][T28988] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 415.061544][T28988] loop0: lost filesystem error report for type 5 error -117 [ 415.065358][T28988] EXT4-fs error (device loop0): ext4_evict_inode:255: inode #11: comm syz.0.9342: mark_inode_dirty error [ 415.109460][T28988] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 415.109692][T28988] EXT4-fs warning (device loop0): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 415.165424][T28988] EXT4-fs (loop0): 1 orphan inode deleted [ 415.176043][T21677] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 415.183392][T28988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.205912][T21677] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 415.234723][T21677] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:11: Failed to release dquot type 0 [ 415.369693][T28553] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.394251][T28553] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 415.417376][T28553] loop0: lost filesystem error report for type 5 error -117 [ 415.417506][T28553] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 415.434919][T28553] loop0: lost filesystem error report for type 5 error -117 [ 415.435348][T28553] EXT4-fs error (device loop0): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 415.454475][T28553] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 415.543880][T29037] loop5: detected capacity change from 0 to 4096 [ 415.592877][T29037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.705528][T22135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.817167][T29066] bridge0: entered promiscuous mode [ 415.847550][T29073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.855848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.179312][T29102] netlink: 236 bytes leftover after parsing attributes in process `syz.3.9375'. [ 416.220354][T29102] netlink: 236 bytes leftover after parsing attributes in process `syz.3.9375'. [ 416.362608][T29111] loop0: detected capacity change from 0 to 512 [ 416.409751][T29111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.456725][T29111] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.490444][T28553] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.831019][T29132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9386'. [ 416.858937][T29132] vlan0: entered allmulticast mode [ 416.875488][T29132] macvtap0: entered allmulticast mode [ 416.886069][T29132] bridge0: port 3(vlan0) entered blocking state [ 416.892475][T29132] bridge0: port 3(vlan0) entered disabled state [ 416.900517][T29132] vlan0: entered promiscuous mode [ 416.915966][T29132] macvtap0: entered promiscuous mode [ 416.932282][T29134] ip6_vti0 speed is unknown, defaulting to 1000 [ 417.007601][T29138] sctp: [Deprecated]: syz.2.9388 (pid 29138) Use of int in max_burst socket option. [ 417.007601][T29138] Use struct sctp_assoc_value instead [ 417.280190][ T28] kauditd_printk_skb: 123 callbacks suppressed [ 417.280209][ T28] audit: type=1400 audit(2000001106.079:5065): avc: denied { bind } for pid=29153 comm="syz.0.9395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 417.545372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.626822][T29186] netlink: 792 bytes leftover after parsing attributes in process `syz.5.9410'. [ 417.637011][T29186] netlink: 792 bytes leftover after parsing attributes in process `syz.5.9410'. [ 417.646339][T29186] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9410'. [ 417.794388][ T28] audit: type=1400 audit(2000001106.589:5066): avc: denied { getopt } for pid=29193 comm="syz.3.9414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 417.917551][ T28] audit: type=1400 audit(2000001106.719:5067): avc: denied { bind } for pid=29207 comm="syz.9.9421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 417.980499][ T28] audit: type=1400 audit(2000001106.719:5068): avc: denied { name_bind } for pid=29207 comm="syz.9.9421" src=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 418.018041][ T28] audit: type=1400 audit(2000001106.719:5069): avc: denied { node_bind } for pid=29207 comm="syz.9.9421" src=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 418.071319][T29217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=29217 comm=syz.9.9425 [ 418.098892][ T28] audit: type=1326 audit(2000001106.899:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.2.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8edcc799 code=0x7ffc0000 [ 418.132289][ T28] audit: type=1326 audit(2000001106.899:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.2.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8edcc799 code=0x7ffc0000 [ 418.193810][ T28] audit: type=1326 audit(2000001106.899:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.2.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8edcc799 code=0x7ffc0000 [ 418.286476][ T28] audit: type=1326 audit(2000001106.899:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.2.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8edcc799 code=0x7ffc0000 [ 418.339839][ T28] audit: type=1326 audit(2000001106.899:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29218 comm="syz.2.9426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcc8edcc799 code=0x7ffc0000 [ 419.186351][T29304] netlink: 792 bytes leftover after parsing attributes in process `syz.3.9465'. [ 419.200244][T29304] netlink: 792 bytes leftover after parsing attributes in process `syz.3.9465'. [ 419.219803][T29304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9465'. [ 419.315704][T29315] all (unregistering): Released all slaves [ 419.362229][T29322] loop3: detected capacity change from 0 to 1024 [ 419.405774][T29322] EXT4-fs: Ignoring removed bh option [ 419.443484][T29322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.466370][T29322] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 419.504920][T29322] EXT4-fs (loop3): Remounting filesystem read-only [ 419.548345][T20437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.641306][T29341] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29341 comm=syz.0.9481 [ 419.750762][T29356] loop3: detected capacity change from 0 to 512 [ 419.766803][T29356] EXT4-fs: Ignoring removed oldalloc option [ 419.817772][T29356] EXT4-fs (loop3): 1 truncate cleaned up [ 419.825122][T29356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.829929][T29363] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9492'. [ 419.848515][T29363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9492'. [ 419.943969][T20437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.204074][T29380] loop0: detected capacity change from 0 to 764 [ 420.271750][T29384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9500'. [ 420.344834][T29384] vlan0 (unregistering): left promiscuous mode [ 420.386571][T29384] macvtap0 (unregistering): left promiscuous mode [ 420.393176][T29384] bridge0: port 3(vlan0) entered disabled state [ 420.665351][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.742728][T29396] netlink: 236 bytes leftover after parsing attributes in process `syz.2.9506'. [ 420.785557][T29396] netlink: 236 bytes leftover after parsing attributes in process `syz.2.9506'. [ 420.974853][T26053] kernel write not supported for file bpf-prog (pid: 26053 comm: kworker/0:11) [ 421.105447][T29424] netlink: 'syz.2.9518': attribute type 2 has an invalid length. [ 421.128635][T29426] netlink: 132 bytes leftover after parsing attributes in process `syz.9.9519'. [ 421.212743][T29435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9523'. [ 421.234866][T29435] smc: adding net device bond0 with user defined pnetid SYZ2 [ 421.292335][T29446] loop5: detected capacity change from 0 to 1764 [ 421.299178][T29446] iso9660: Unknown parameter 'ÿ' [ 421.339280][T29449] netlink: 'syz.5.9529': attribute type 12 has an invalid length. [ 421.347432][T29449] netlink: 'syz.5.9529': attribute type 29 has an invalid length. [ 421.355324][T29449] netlink: 148 bytes leftover after parsing attributes in process `syz.5.9529'. [ 421.364478][T29449] netlink: 'syz.5.9529': attribute type 2 has an invalid length. [ 421.373062][T29449] netlink: 23 bytes leftover after parsing attributes in process `syz.5.9529'. [ 421.410417][T29454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.418788][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.499093][T29466] loop5: detected capacity change from 0 to 1024 [ 421.523332][T29466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 421.535696][T29466] ext4 filesystem being mounted at /521/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.561824][T22135] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 421.917236][T29492] loop3: detected capacity change from 0 to 512 [ 421.934738][T29492] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.9548: missing EA_INODE flag [ 421.955971][T29492] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 421.957686][T29492] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.9548: error while reading EA inode 12 err=-117 [ 421.966895][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 421.966922][ C1] EXT4-fs (loop3): initial error at time 2000001110: ext4_xattr_inode_iget:441: inode 12 [ 421.966986][ C1] EXT4-fs (loop3): last error at time 2000001110: ext4_xattr_inode_iget:441: inode 12 [ 422.005363][T29492] loop3: lost filesystem error report for type 5 error -117 [ 422.011764][T29492] EXT4-fs (loop3): 1 orphan inode deleted [ 422.025357][T29492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.052882][T20437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.237709][T29504] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.312613][T29504] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.356611][T29510] bond1: entered promiscuous mode [ 422.364968][T29504] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.443322][T29504] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.504138][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 422.504158][ T28] audit: type=1400 audit(2000001111.299:5132): avc: denied { read } for pid=29522 comm="syz.3.9561" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 422.536485][ T28] audit: type=1400 audit(2000001111.299:5133): avc: denied { ioctl } for pid=29522 comm="syz.3.9561" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 422.565377][T21693] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.589362][T21693] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.609446][T21693] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.635398][T21693] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.654721][ T28] audit: type=1400 audit(2000001111.449:5134): avc: denied { connect } for pid=29534 comm="syz.9.9567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 422.714218][T29539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9569'. [ 422.781276][T29546] loop0: detected capacity change from 0 to 1024 [ 422.857116][T29546] EXT4-fs: Ignoring removed oldalloc option [ 422.876222][T29546] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 424.322682][T29695] ip6_vti0 speed is unknown, defaulting to 1000 [ 424.454762][T29695] chnl_net:caif_netlink_parms(): no params data found [ 424.531095][T29695] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.557081][T29695] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.579991][T29695] bridge_slave_0: entered allmulticast mode [ 424.587124][T29695] bridge_slave_0: entered promiscuous mode [ 424.594037][T29695] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.601604][T29695] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.608925][T29695] bridge_slave_1: entered allmulticast mode [ 424.615576][T29695] bridge_slave_1: entered promiscuous mode [ 424.628170][T29753] loop0: detected capacity change from 0 to 256 [ 424.693146][T29695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.796455][T29695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.862584][T29695] team0: Port device team_slave_0 added [ 424.879710][T29695] team0: Port device team_slave_1 added [ 424.910518][T29695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.974533][T29695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.001791][T29695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.013769][T29695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.035139][T29695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.071553][T29695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.102400][T29695] hsr_slave_0: entered promiscuous mode [ 425.109415][T29695] hsr_slave_1: entered promiscuous mode [ 425.125714][ T28] audit: type=1326 audit(2000001113.919:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29800 comm="syz.0.9642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b1dc799 code=0x7ffc0000 [ 425.157388][T29695] debugfs: 'hsr0' already exists in 'hsr' [ 425.165340][T29695] Cannot create hsr debugfs directory [ 425.183441][ T28] audit: type=1326 audit(2000001113.919:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29800 comm="syz.0.9642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b1dc799 code=0x7ffc0000 [ 425.209306][T29804] loop3: detected capacity change from 0 to 2048 [ 425.226945][T29806] xt_hashlimit: size too large, truncated to 1048576 [ 425.279769][T29804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.294776][ T28] audit: type=1326 audit(2000001113.919:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29800 comm="syz.0.9642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b1dc799 code=0x7ffc0000 [ 425.364998][T29804] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 425.407796][ T28] audit: type=1326 audit(2000001113.919:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29800 comm="syz.0.9642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7d8b1dc799 code=0x7ffc0000 [ 425.432471][T29804] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 425.445554][ T28] audit: type=1326 audit(2000001113.919:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29800 comm="syz.0.9642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b1dc799 code=0x7ffc0000 [ 425.469915][T29804] EXT4-fs (loop3): This should not happen!! Data will be lost [ 425.469915][T29804] [ 425.486535][T29822] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 425.500074][ T28] audit: type=1326 audit(2000001113.919:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29800 comm="syz.0.9642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b1dc799 code=0x7ffc0000 [ 425.544305][T29804] EXT4-fs (loop3): Total free blocks count 0 [ 425.559087][T29822] EXT4-fs (loop3): This should not happen!! Data will be lost [ 425.559087][T29822] [ 425.571578][T29804] EXT4-fs (loop3): Free/Dirty block details [ 425.576909][ T28] audit: type=1326 audit(2000001113.919:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29800 comm="syz.0.9642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8b1dc799 code=0x7ffc0000 [ 425.606596][T29804] EXT4-fs (loop3): free_blocks=66060288 [ 425.625334][T29822] EXT4-fs (loop3): Total free blocks count 0 [ 425.646434][T29822] EXT4-fs (loop3): Free/Dirty block details [ 425.858358][T29695] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 425.897738][T29695] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 425.906986][T29695] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 425.937563][T29695] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 425.992687][T29876] netlink: 'syz.9.9662': attribute type 15 has an invalid length. [ 426.005339][T29876] __nla_validate_parse: 4 callbacks suppressed [ 426.007547][T29876] netlink: 132 bytes leftover after parsing attributes in process `syz.9.9662'. [ 426.143827][T29695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.174720][T29899] loop0: detected capacity change from 0 to 512 [ 426.198270][T29695] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.217227][T29899] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 426.238401][T21670] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.245619][T21670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.281123][T21689] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.288369][T21689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.298300][T29899] EXT4-fs (loop0): 1 truncate cleaned up [ 426.304459][T29899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.367874][T29695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 426.558766][T29695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.617063][T28553] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.761649][T29960] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 426.793778][T29960] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 426.835329][T29695] veth0_vlan: entered promiscuous mode [ 426.858018][T29975] bridge1: entered promiscuous mode [ 426.863268][T29975] bridge1: entered allmulticast mode [ 426.896400][T29695] veth1_vlan: entered promiscuous mode [ 426.912444][T29695] veth0_macvtap: entered promiscuous mode [ 426.937966][T29695] veth1_macvtap: entered promiscuous mode [ 426.951487][T29695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.973043][T29695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.020260][T29993] batadv_slave_1: entered promiscuous mode [ 427.026937][T29992] batadv_slave_1: left promiscuous mode [ 427.038780][ T50] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.057646][ T50] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.133078][ T50] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.160245][ T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.238751][T29980] ip6_vti0 speed is unknown, defaulting to 1000 [ 427.348832][T30019] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 427.383875][T30019] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 427.727964][T30056] netlink: 'syz.9.9696': attribute type 4 has an invalid length. [ 427.822328][T30059] loop0: detected capacity change from 0 to 2048 [ 427.861442][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 427.861455][ T28] audit: type=1326 audit(2000001116.659:5169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="syz.9.9701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 427.907276][ T28] audit: type=1326 audit(2000001116.659:5170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="syz.9.9701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 427.974253][ T28] audit: type=1326 audit(2000001116.659:5171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="syz.9.9701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 427.998369][ T28] audit: type=1326 audit(2000001116.659:5172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="syz.9.9701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 428.022974][ T28] audit: type=1326 audit(2000001116.659:5173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="syz.9.9701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 428.048223][ T28] audit: type=1326 audit(2000001116.659:5174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="syz.9.9701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 428.112677][T30086] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 428.117119][ T28] audit: type=1326 audit(2000001116.659:5175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="syz.9.9701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 428.135432][T30086] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 428.210744][ T28] audit: type=1326 audit(2000001116.659:5176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="syz.9.9701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 428.256382][ T28] audit: type=1326 audit(2000001116.659:5177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="syz.9.9701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 428.295258][ T28] audit: type=1326 audit(2000001116.969:5178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30064 comm="syz.9.9701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7d85acc799 code=0x7ffc0000 [ 428.689718][T30139] ip6_vti0 speed is unknown, defaulting to 1000 [ 428.798275][T30151] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9722'. [ 429.201993][T30186] ip6_vti0 speed is unknown, defaulting to 1000 [ 429.315915][T30188] ip6_vti0 speed is unknown, defaulting to 1000 [ 430.818145][T30276] process '/newroot/1381/file0' started with executable stack [ 431.086234][T30297] netlink: 9286 bytes leftover after parsing attributes in process `syz.8.9770'. [ 431.292456][T30302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30302 comm=syz.8.9772 [ 431.539073][T30306] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 431.581881][T30306] SELinux: failed to load policy [ 431.646874][ T3374] IPVS: starting estimator thread 0... [ 431.654279][T30315] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 431.704709][T30318] Invalid argument reading file caps for ./file0 [ 431.735628][T30316] IPVS: using max 1824 ests per chain, 91200 per kthread [ 431.839192][T30324] SET target dimension over the limit! [ 431.854615][T30327] loop0: detected capacity change from 0 to 256 [ 431.872114][T30328] syzkaller1: entered promiscuous mode [ 431.878401][T30328] syzkaller1: entered allmulticast mode [ 431.909645][T30327] FAT-fs (loop0): Directory bread(block 64) failed [ 431.929102][T30327] FAT-fs (loop0): Directory bread(block 65) failed [ 431.942435][T30327] FAT-fs (loop0): Directory bread(block 66) failed [ 432.006316][T30327] FAT-fs (loop0): Directory bread(block 67) failed [ 432.012964][T30327] FAT-fs (loop0): Directory bread(block 68) failed [ 432.023065][T30327] FAT-fs (loop0): Directory bread(block 69) failed [ 432.041214][T30327] FAT-fs (loop0): Directory bread(block 70) failed [ 432.075542][T30327] FAT-fs (loop0): Directory bread(block 71) failed [ 432.085625][T30327] FAT-fs (loop0): Directory bread(block 72) failed [ 432.092190][T30327] FAT-fs (loop0): Directory bread(block 73) failed [ 432.563040][T30372] netlink: 'syz.2.9800': attribute type 4 has an invalid length. [ 432.620738][T30376] loop8: detected capacity change from 0 to 256 [ 432.640176][T30376] FAT-fs (loop8): Directory bread(block 64) failed [ 432.655401][T30376] FAT-fs (loop8): Directory bread(block 65) failed [ 432.662099][T30376] FAT-fs (loop8): Directory bread(block 66) failed [ 432.684812][T30376] FAT-fs (loop8): Directory bread(block 67) failed [ 432.698286][T30376] FAT-fs (loop8): Directory bread(block 68) failed [ 432.715050][T30376] FAT-fs (loop8): Directory bread(block 69) failed [ 432.732419][T30376] FAT-fs (loop8): Directory bread(block 70) failed [ 432.772108][T30376] FAT-fs (loop8): Directory bread(block 71) failed [ 432.825329][T30376] FAT-fs (loop8): Directory bread(block 72) failed [ 432.832067][T30376] FAT-fs (loop8): Directory bread(block 73) failed [ 433.239093][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 433.239109][ T28] audit: type=1400 audit(2000001122.039:5184): avc: denied { create } for pid=30409 comm="syz.2.9820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 433.338050][T30416] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 433.365782][ T28] audit: type=1400 audit(2000001122.069:5185): avc: denied { write } for pid=30409 comm="syz.2.9820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 434.043473][T30457] netlink: 'syz.3.9837': attribute type 4 has an invalid length. [ 434.164445][T30470] loop3: detected capacity change from 0 to 512 [ 434.192435][T30470] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 434.200719][T30470] System zones: 0-2, 18-18, 34-34 [ 434.212520][T30470] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 434.231226][T30470] EXT4-fs (loop3): Remounting filesystem read-only [ 434.237821][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 434.237855][ C1] EXT4-fs (loop3): initial error at time 2000001123: ext4_mb_generate_buddy:1315 [ 434.237874][ C1] EXT4-fs (loop3): last error at time 2000001123: ext4_mb_generate_buddy:1315 [ 434.264352][T30470] EXT4-fs (loop3): 1 truncate cleaned up [ 434.270573][T30470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.283311][ T1625] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 434.283310][T30470] ext4 filesystem being mounted at /648/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.306560][ T1625] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 434.317456][T30470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.326551][ T1625] Quota error (device loop3): write_blk: dquota write failed [ 434.333964][ T1625] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 434.344094][ T1625] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 434.354732][ T1625] Quota error (device loop3): write_blk: dquota write failed [ 434.362178][ T1625] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 434.372141][ T1625] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 434.382478][ T1625] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 434.391283][ T1625] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 434.404005][ T1625] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 434.460166][T30481] loop0: detected capacity change from 0 to 512 [ 434.540894][T30485] ip6_vti0 speed is unknown, defaulting to 1000 [ 434.779326][T30501] ip6_vti0 speed is unknown, defaulting to 1000 [ 435.072900][T30527] loop3: detected capacity change from 0 to 256 [ 435.105916][T30527] FAT-fs (loop3): Directory bread(block 64) failed [ 435.112771][T30527] FAT-fs (loop3): Directory bread(block 65) failed [ 435.131505][T30527] FAT-fs (loop3): Directory bread(block 66) failed [ 435.140680][T30527] FAT-fs (loop3): Directory bread(block 67) failed [ 435.148752][T30527] FAT-fs (loop3): Directory bread(block 68) failed [ 435.155665][T30527] FAT-fs (loop3): Directory bread(block 69) failed [ 435.162550][T30527] FAT-fs (loop3): Directory bread(block 70) failed [ 435.169970][T30527] FAT-fs (loop3): Directory bread(block 71) failed [ 435.176818][T30527] FAT-fs (loop3): Directory bread(block 72) failed [ 435.183592][T30527] FAT-fs (loop3): Directory bread(block 73) failed [ 435.274060][T30545] netlink: 'syz.8.9872': attribute type 4 has an invalid length. [ 435.284751][T30546] futex_wake_op: syz.3.9874 tries to shift op by -1; fix this program [ 435.399428][T30549] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9876'. [ 435.411360][T30549] bond_slave_0: entered promiscuous mode [ 435.417062][T30549] bond_slave_1: entered promiscuous mode [ 435.440490][T30549] macvlan2: entered promiscuous mode [ 435.446021][T30549] bond0: entered promiscuous mode [ 435.452366][T30549] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 435.482344][T30553] ip6_vti0 speed is unknown, defaulting to 1000 [ 435.529233][T30556] loop3: detected capacity change from 0 to 8192 [ 435.584389][T30561] loop8: detected capacity change from 0 to 256 [ 435.612147][T30561] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 435.652857][T30561] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 436.000625][T30585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9891'. [ 436.126924][T30593] loop3: detected capacity change from 0 to 1024 [ 436.133668][T30593] EXT4-fs: inline encryption not supported [ 436.139680][T30593] EXT4-fs: Ignoring removed i_version option [ 436.160804][T30593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.200357][T30593] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.9895: Allocating blocks 497-513 which overlap fs metadata [ 436.217565][ T50] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.228837][T30592] EXT4-fs (loop3): pa ffff888107eb4310: logic 256, phys. 369, len 9 [ 436.236896][T30592] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 436.260317][T20437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.282828][T30602] loop3: detected capacity change from 0 to 512 [ 436.297955][ T50] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.351076][ T50] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.364685][T30609] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9901'. [ 436.400802][ T50] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.427300][T30600] ip6_vti0 speed is unknown, defaulting to 1000 [ 436.493843][ T50] bridge_slave_1: left allmulticast mode [ 436.501796][ T50] bridge_slave_1: left promiscuous mode [ 436.513191][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.530142][ T50] bridge_slave_0: left allmulticast mode [ 436.542060][ T50] bridge_slave_0: left promiscuous mode [ 436.553345][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.668066][ T50] bond0 (unregistering): left promiscuous mode [ 436.674707][ T50] bond_slave_0: left promiscuous mode [ 436.680394][ T50] bond_slave_1: left promiscuous mode [ 436.690088][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.701196][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.711235][ T50] bond0 (unregistering): Released all slaves [ 436.837026][ T50] hsr_slave_0: left promiscuous mode [ 436.862426][ T50] hsr_slave_1: left promiscuous mode [ 436.905655][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.928833][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.938280][T30662] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9912'. [ 436.966376][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.973875][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.045745][ T50] veth1_macvtap: left promiscuous mode [ 437.067423][ T50] veth0_macvtap: left promiscuous mode [ 437.073303][ T50] veth1_vlan: left promiscuous mode [ 437.081462][ T50] veth0_vlan: left promiscuous mode [ 437.173869][ T50] team0 (unregistering): Port device team_slave_1 removed [ 437.185812][ T50] team0 (unregistering): Port device team_slave_0 removed [ 437.249272][T30662] macvlan2: entered promiscuous mode [ 437.254618][T30662] bond0: entered promiscuous mode [ 437.260945][T30662] bond_slave_0: entered promiscuous mode [ 437.271253][T30662] bond_slave_1: entered promiscuous mode [ 437.277676][T30662] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 437.304165][T30600] chnl_net:caif_netlink_parms(): no params data found [ 437.441703][T30600] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.465169][T30600] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.502758][T30600] bridge_slave_0: entered allmulticast mode [ 437.513899][T30600] bridge_slave_0: entered promiscuous mode [ 437.520763][T30600] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.527908][T30600] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.535106][T30600] bridge_slave_1: entered allmulticast mode [ 437.543232][T30600] bridge_slave_1: entered promiscuous mode [ 437.581793][T30600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.601325][T30600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.639359][T30600] team0: Port device team_slave_0 added [ 437.694083][T30600] team0: Port device team_slave_1 added [ 437.734328][T30600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.750646][T30726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9929'. [ 437.755848][T30600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.761487][T30726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9929'. [ 437.792917][T30600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.815093][T30600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.822379][T30600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.850369][T30600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.932639][T30600] hsr_slave_0: entered promiscuous mode [ 437.943563][T30600] hsr_slave_1: entered promiscuous mode [ 437.955665][T30600] debugfs: 'hsr0' already exists in 'hsr' [ 437.961446][T30600] Cannot create hsr debugfs directory [ 438.113199][T30600] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.184070][T30765] ip6_vti0 speed is unknown, defaulting to 1000 [ 438.222303][T30600] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.232949][T30780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9944'. [ 438.252357][T30779] loop0: detected capacity change from 0 to 512 [ 438.285137][T30776] bridge0: left promiscuous mode [ 438.292455][T30776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.300025][T30779] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 438.308164][T30779] System zones: 0-2, 18-18, 34-34 [ 438.313550][T30776] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.330841][T30779] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 438.333725][T30780] macvlan2: entered promiscuous mode [ 438.350470][T30780] bond0: entered promiscuous mode [ 438.352997][T30779] EXT4-fs (loop0): Remounting filesystem read-only [ 438.355590][T30780] bond_slave_0: entered promiscuous mode [ 438.355606][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 438.355625][ C1] EXT4-fs (loop0): initial error at time 2000001127: ext4_mb_generate_buddy:1315 [ 438.355652][ C1] EXT4-fs (loop0): last error at time 2000001127: ext4_mb_generate_buddy:1315 [ 438.355659][T30780] bond_slave_1: entered promiscuous mode [ 438.355678][ C1] [ 438.357095][T30780] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 438.368425][T30779] EXT4-fs (loop0): 1 truncate cleaned up [ 438.414001][T30779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.422173][ T36] __quota_error: 3 callbacks suppressed [ 438.422214][ T36] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 438.427782][T30779] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.433547][ T36] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 438.452927][T30779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.454949][ T36] Quota error (device loop0): write_blk: dquota write failed [ 438.481922][ T36] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 438.491980][ T36] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 438.502637][ T36] Quota error (device loop0): write_blk: dquota write failed [ 438.510120][ T36] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 438.520395][ T36] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 438.530595][ T36] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 438.539411][ T36] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 438.541160][T30781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.551787][ T36] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 438.609771][T30600] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.659935][T30600] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.781636][T30600] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 438.792576][T30804] loop0: detected capacity change from 0 to 512 [ 438.803653][T30600] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 438.813861][T30600] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 438.822275][T30804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.859730][T30804] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 438.866486][T30600] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 438.906866][ T28] audit: type=1400 audit(2000001127.709:5189): avc: denied { bind } for pid=30803 comm="syz.0.9953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 438.926867][T30812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9954'. [ 438.954102][T28553] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.975965][T30807] ip6_vti0 speed is unknown, defaulting to 1000 [ 439.034171][T30600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.050922][T30600] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.060994][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.068189][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.089698][T30600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 439.100541][T30600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.120444][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.127706][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.250650][T30600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.348787][T30856] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.453425][ T28] audit: type=1400 audit(2000001128.249:5190): avc: denied { read } for pid=30868 comm="syz.0.9972" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 439.539040][T30600] veth0_vlan: entered promiscuous mode [ 439.550377][T30600] veth1_vlan: entered promiscuous mode [ 439.590518][T30600] veth0_macvtap: entered promiscuous mode [ 439.598813][T30600] veth1_macvtap: entered promiscuous mode [ 439.616536][T30600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.625892][T30600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.664223][T21672] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.685567][T21672] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.704719][T21672] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.731145][T21672] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.746860][T30894] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 439.857223][T30917] loop0: detected capacity change from 0 to 128 [ 439.865188][T30918] netlink: 15 bytes leftover after parsing attributes in process `syz.3.9991'. [ 439.954222][T30931] loop0: detected capacity change from 0 to 512 [ 439.968851][T30931] EXT4-fs (loop0): orphan cleanup on readonly fs [ 439.975887][T30931] EXT4-fs error (device loop0): ext4_quota_enable:7188: comm syz.0.9996: Bad quota inum: 2, type: 1 [ 439.986853][T30931] loop0: lost filesystem error report for type 5 error -117 [ 439.992929][T30931] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 440.000402][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 440.000426][ C0] EXT4-fs (loop0): last error at time 2000001128: ext4_quota_enable:7188 [ 440.035012][T30931] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 440.042368][T30931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 440.065857][T30931] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 440.092630][T30942] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 440.103828][T30941] loop3: detected capacity change from 0 to 4096 [ 440.106085][T30931] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 8 [ 440.145460][T30941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.202018][T28553] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.407538][T30965] openvswitch: netlink: Missing key (keys=40, expected=100) [ 440.440270][T20437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.492884][T30975] program syz.3.10011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.836734][T30999] loop3: detected capacity change from 0 to 128 [ 441.126418][T31016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10032'. [ 441.270711][T31020] ip6_vti0 speed is unknown, defaulting to 1000 [ 441.375640][T31020] chnl_net:caif_netlink_parms(): no params data found [ 441.425969][T31020] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.433269][T31020] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.441005][T31020] bridge_slave_0: entered allmulticast mode [ 441.447873][T31020] bridge_slave_0: entered promiscuous mode [ 441.455099][T31020] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.462474][T31020] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.470210][T31020] bridge_slave_1: entered allmulticast mode [ 441.476992][T31020] bridge_slave_1: entered promiscuous mode [ 441.499689][T31020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.510701][T31020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.533856][T31020] team0: Port device team_slave_0 added [ 441.541037][T31020] team0: Port device team_slave_1 added [ 441.562287][T31020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.569358][T31020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.595533][T31020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.607238][T31020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.614256][T31020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.640734][T31020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.674367][T31020] hsr_slave_0: entered promiscuous mode [ 441.680629][T31020] hsr_slave_1: entered promiscuous mode [ 441.686838][T31020] debugfs: 'hsr0' already exists in 'hsr' [ 441.692668][T31020] Cannot create hsr debugfs directory [ 441.997728][T31020] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 442.007451][T31020] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 442.016610][T31020] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 442.047023][T31020] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 442.133398][T31020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.148108][T31020] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.158909][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.166113][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.190166][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.197297][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.266243][T31020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.344906][T31020] veth0_vlan: entered promiscuous mode [ 442.358145][T31020] veth1_vlan: entered promiscuous mode [ 442.373486][T31020] veth0_macvtap: entered promiscuous mode [ 442.386181][T31020] veth1_macvtap: entered promiscuous mode [ 442.401090][T31020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.413284][T31020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.427167][T21689] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.436410][T21689] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.452246][T21689] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.467718][T21689] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.543547][T31134] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.687777][T31151] ip6_vti0 speed is unknown, defaulting to 1000 [ 442.734566][T31158] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10043'. [ 443.084329][T31205] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 443.199167][T31221] loop7: detected capacity change from 0 to 7 [ 443.359609][T31242] netlink: 32 bytes leftover after parsing attributes in process `syz.9.10076'. [ 443.542415][T10373] IPVS: starting estimator thread 0... [ 443.550269][T31264] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 443.634758][T31287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=31287 comm=syz.2.10089 [ 443.649130][T31273] IPVS: using max 2160 ests per chain, 108000 per kthread [ 443.668230][T31287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=31287 comm=syz.2.10089 [ 443.681185][T31287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=31287 comm=syz.2.10089 [ 443.714421][T31294] loop1: detected capacity change from 0 to 512 [ 443.719414][T31287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=31287 comm=syz.2.10089 [ 443.762105][T31294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.764329][T31287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=31287 comm=syz.2.10089 [ 443.785493][T31294] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.822611][T31287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=31287 comm=syz.2.10089 [ 443.836042][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 443.836057][ T28] audit: type=1400 audit(2000001132.619:5265): avc: denied { setattr } for pid=31290 comm="syz.1.10088" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 443.868857][T31287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=31287 comm=syz.2.10089 [ 443.886808][T31020] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.900061][T31287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=31287 comm=syz.2.10089 [ 443.952292][T31287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=31287 comm=syz.2.10089 [ 443.981050][T31287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=31287 comm=syz.2.10089 [ 444.073173][ T28] audit: type=1326 audit(2000001132.869:5266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31323 comm="syz.2.10096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8edcc799 code=0x7ffc0000 [ 444.125569][ T28] audit: type=1326 audit(2000001132.869:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31323 comm="syz.2.10096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8edcc799 code=0x7ffc0000 [ 444.160924][ T28] audit: type=1326 audit(2000001132.869:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31323 comm="syz.2.10096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8edcc799 code=0x7ffc0000 [ 444.196254][ T28] audit: type=1326 audit(2000001132.869:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31323 comm="syz.2.10096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8edcc799 code=0x7ffc0000 [ 444.233414][ T28] audit: type=1326 audit(2000001132.869:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31323 comm="syz.2.10096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcc8edcc799 code=0x7ffc0000 [ 444.300965][ T28] audit: type=1326 audit(2000001132.959:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31323 comm="syz.2.10096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8edcc799 code=0x7ffc0000 [ 444.356582][ T28] audit: type=1326 audit(2000001132.959:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31323 comm="syz.2.10096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcc8edcc502 code=0x7ffc0000 [ 444.393118][ T28] audit: type=1326 audit(2000001132.959:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31323 comm="syz.2.10096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcc8edcc597 code=0x7ffc0000 [ 444.418011][ T28] audit: type=1326 audit(2000001132.959:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31323 comm="syz.2.10096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcc8ed89491 code=0x7ffc0000 [ 444.488037][T31354] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10102'. [ 444.800667][T31395] ================================================================== [ 444.808807][T31395] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 444.816725][T31395] [ 444.819061][T31395] write to 0xffff88810fb5ba50 of 8 bytes by task 31396 on cpu 0: [ 444.826797][T31395] cpu_map_kthread_run+0x4fe/0x1680 [ 444.832019][T31395] kthread+0x22a/0x280 [ 444.836109][T31395] ret_from_fork+0x150/0x360 [ 444.840732][T31395] ret_from_fork_asm+0x1a/0x30 [ 444.845521][T31395] [ 444.847880][T31395] read to 0xffff88810fb5ba50 of 8 bytes by task 31395 on cpu 1: [ 444.855525][T31395] bq_flush_to_queue+0x124/0x360 [ 444.860481][T31395] __cpu_map_flush+0x47/0xa0 [ 444.865093][T31395] xdp_do_flush+0xf8/0x160 [ 444.869522][T31395] bpf_test_run_xdp_live+0xe8a/0x1360 [ 444.874930][T31395] bpf_prog_test_run_xdp+0x57b/0xa10 [ 444.880244][T31395] bpf_prog_test_run+0x204/0x340 [ 444.885248][T31395] __sys_bpf+0x52e/0x7e0 [ 444.889510][T31395] __x64_sys_bpf+0x41/0x50 [ 444.893974][T31395] x64_sys_call+0x10cb/0x3020 [ 444.898676][T31395] do_syscall_64+0x12c/0x370 [ 444.903279][T31395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.909202][T31395] [ 444.911533][T31395] value changed: 0xffff88816aec1070 -> 0x0000000000000000 [ 444.918647][T31395] [ 444.920995][T31395] Reported by Kernel Concurrency Sanitizer on: [ 444.927157][T31395] CPU: 1 UID: 0 PID: 31395 Comm: syz.6.10113 Tainted: G W syzkaller #0 PREEMPT(full) [ 444.938271][T31395] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 444.942086][T31395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 444.952161][T31395] ================================================================== [ 445.288198][T21670] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.336655][T21670] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.396345][T21670] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.466564][T21670] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.141107][T21670] bridge_slave_1: left allmulticast mode [ 446.147263][T21670] bridge_slave_1: left promiscuous mode [ 446.152962][T21670] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.160907][T21670] bridge_slave_0: left allmulticast mode [ 446.166713][T21670] bridge_slave_0: left promiscuous mode [ 446.172444][T21670] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.181505][T21670] bridge_slave_1: left allmulticast mode [ 446.188744][T21670] bridge_slave_1: left promiscuous mode [ 446.194425][T21670] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.202838][T21670] bridge_slave_0: left allmulticast mode [ 446.208874][T21670] bridge_slave_0: left promiscuous mode [ 446.214575][T21670] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.224111][T21670] bridge_slave_1: left allmulticast mode [ 446.229932][T21670] bridge_slave_1: left promiscuous mode [ 446.236006][T21670] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.243695][T21670] bridge_slave_0: left allmulticast mode [ 446.250368][T21670] bridge_slave_0: left promiscuous mode [ 446.256249][T21670] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.293112][T21670] erspan0 (unregistering): left promiscuous mode [ 446.302060][T21670] gretap0 (unregistering): left promiscuous mode [ 446.312247][T21670] dvmrp1 (unregistering): left allmulticast mode [ 446.387107][T21670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.396422][T21670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.405468][T21670] bond0 (unregistering): Released all slaves [ 446.476578][T21670] bond0 (unregistering): left promiscuous mode [ 446.482744][T21670] bond_slave_0: left promiscuous mode [ 446.488245][T21670] bond_slave_1: left promiscuous mode [ 446.496216][T21670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.505977][T21670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.515017][T21670] bond0 (unregistering): Released all slaves [ 446.522460][T21670] bond1 (unregistering): Released all slaves [ 446.606623][T21670] bond0 (unregistering): left promiscuous mode [ 446.613012][T21670] bond_slave_0: left promiscuous mode [ 446.618499][T21670] bond_slave_1: left promiscuous mode [ 446.626833][T21670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.636449][T21670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.645620][T21670] bond0 (unregistering): Released all slaves [ 446.653322][T21670] bond1 (unregistering): Released all slaves [ 446.705740][T21670] tipc: Disabling bearer [ 446.711784][T21670] tipc: Left network mode [ 446.716873][T21670] tipc: Disabling bearer [ 446.722380][T21670] tipc: Left network mode [ 446.731571][T21670] IPVS: stopping backup sync thread 28547 ... [ 446.798476][T21670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.809209][T21670] hsr_slave_0: left promiscuous mode [ 446.814877][T21670] hsr_slave_1: left promiscuous mode [ 446.820892][T21670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.829195][T21670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.838862][T21670] hsr_slave_0: left promiscuous mode [ 446.844475][T21670] hsr_slave_1: left promiscuous mode [ 446.850077][T21670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.857640][T21670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.874395][T21670] macvlan0 (unregistering): left allmulticast mode [ 446.914383][T21670] batadv0 (unregistering): left allmulticast mode [ 446.952976][T21670] team0 (unregistering): Port device team_slave_1 removed [ 446.963182][T21670] team0 (unregistering): Port device team_slave_0 removed [ 447.594182][T21670] IPVS: stop unused estimator thread 0... [ 447.601135][T21670] IPVS: stop unused estimator thread 0... [ 447.607898][T21670] IPVS: stop unused estimator thread 0... [ 447.670808][T21670] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.718104][T21670] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.769201][T21670] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.828090][T21670] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.899536][T21670] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.929903][T21670] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.978390][T21670] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.018724][T21670] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.091441][T21670] bridge_slave_1: left allmulticast mode [ 448.097321][T21670] bridge_slave_1: left promiscuous mode [ 448.103111][T21670] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.115668][T21670] bridge_slave_0: left allmulticast mode [ 448.121381][T21670] bridge_slave_0: left promiscuous mode [ 448.127648][T21670] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.138185][T21670] bridge_slave_1: left allmulticast mode [ 448.143938][T21670] bridge_slave_1: left promiscuous mode [ 448.149913][T21670] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.158272][T21670] bridge_slave_0: left allmulticast mode [ 448.164012][T21670] bridge_slave_0: left promiscuous mode [ 448.170162][T21670] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.278163][T21670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.288337][T21670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.298086][T21670] bond0 (unregistering): Released all slaves [ 448.368114][T21670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.377982][T21670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.387876][T21670] bond0 (unregistering): Released all slaves [ 448.485642][T21670] hsr_slave_0: left promiscuous mode [ 448.491407][T21670] hsr_slave_1: left promiscuous mode [ 448.499965][T21670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.507771][T21670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.515551][T21670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.522956][T21670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.532531][T21670] hsr_slave_0: left promiscuous mode [ 448.538305][T21670] hsr_slave_1: left promiscuous mode [ 448.544112][T21670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.551882][T21670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.559826][T21670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.567437][T21670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.582109][T21670] veth1_macvtap: left promiscuous mode [ 448.587697][T21670] veth0_macvtap: left promiscuous mode [ 448.593395][T21670] veth1_vlan: left promiscuous mode [ 448.598894][T21670] veth0_vlan: left promiscuous mode [ 448.604986][T21670] veth1_macvtap: left promiscuous mode [ 448.610730][T21670] veth0_macvtap: left promiscuous mode [ 448.616366][T21670] veth1_vlan: left promiscuous mode [ 448.621645][T21670] veth0_vlan: left promiscuous mode [ 448.726821][T21670] team0 (unregistering): Port device team_slave_1 removed [ 448.736738][T21670] team0 (unregistering): Port device team_slave_0 removed [ 448.796894][T21670] team0 (unregistering): Port device team_slave_1 removed [ 448.806838][T21670] team0 (unregistering): Port device team_slave_0 removed [ 449.281932][T21670] IPVS: stop unused estimator thread 0... [ 454.188606][ T50] bridge_slave_1: left allmulticast mode [ 454.194276][ T50] bridge_slave_1: left promiscuous mode [ 454.199944][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.207716][ T50] bridge_slave_0: left allmulticast mode [ 454.213356][ T50] bridge_slave_0: left promiscuous mode [ 454.219150][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.427310][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.437779][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.447399][ T50] bond0 (unregistering): Released all slaves [ 454.454959][ T50] bond1 (unregistering): Released all slaves [ 454.488402][ T50] IPVS: stopping master sync thread 18808 ... [ 454.511812][ T50] macvlan0: left promiscuous mode [ 454.517426][ T50] dummy0: left promiscuous mode [ 454.524201][ T50] hsr_slave_0: left promiscuous mode [ 454.530014][ T50] hsr_slave_1: left promiscuous mode [ 454.535739][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.543327][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.551760][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.559457][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.569526][ T50] veth1_macvtap: left promiscuous mode [ 454.575013][ T50] veth0_macvtap: left promiscuous mode [ 454.580671][ T50] veth1_vlan: left allmulticast mode [ 454.586303][ T50] veth1_vlan: left promiscuous mode [ 454.591645][ T50] veth0_vlan: left promiscuous mode [ 454.666334][ T50] team0 (unregistering): Port device team_slave_1 removed [ 454.676485][ T50] team0 (unregistering): Port device team_slave_0 removed