last executing test programs: 5m49.334437155s ago: executing program 2 (id=1161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) io_setup(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e21, @local}, {0x6, @local}, 0x30, {0x2, 0x4e20, @remote}, 'ip6erspan0\x00'}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 5m48.363882137s ago: executing program 2 (id=1167): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r2, 0x3405f8c17b4743e3, 0x70bd28, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0xc000000) fchdir(r0) ioprio_set$pid(0x3, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) sendfile(r3, r3, 0x0, 0x7f03) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000001980)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@dots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@fat=@debug}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_setup(0x1, &(0x7f00000001c0)) 5m44.217731251s ago: executing program 2 (id=1175): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}, 0xffffffff}}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x4011) syz_emit_ethernet(0x7a, &(0x7f0000000700)={@random="bb6233c1eb87", @random="35e855ae3f7e", @void, {@ipv6={0x86dd, @gre_packet={0x4, 0x6, '\x00', 0x44, 0x2f, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1}, {0xdd86, 0x88be, 0x8000002, {{0xc, 0x1, 0x9, 0x0, 0x0, 0x2, 0x4, 0xa0}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x1, {{0x6, 0x2, 0x8, 0x3, 0x0, 0x2, 0x2}, 0x2, {0x1, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, 0x0, 0x4008000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioprio_get$pid(0x1, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x27e, &(0x7f0000000440)="$eJzs3c9qa0UcB/Dfyb+mushduBLBA7pwY7m9T5AiVxC7UrJQF3qxLUgSCi0EWsVQEHwCX8ONz+HGnUsfQHCn0MrI6UmapA2apH8ivZ/PpkNnvjO/TOa0q0y+eKPf3Ts8Pjj75rd4t5lFpR3t7PzHGNsIAOCx+Sul+COVlkvWKvdVEwBwvxb8/7/5gCUBAPfs408+/XBnd/f5R3nejOh/P+hkUf4s+3cO4qvoxX48jVZcRKQrZfv9D3afRy0vPIm3+8NBp0j2P/95NP/O7xGX+e1oxZP5+e28NMr/PR7wymj9dpF/Fq14bX7+2Wy+WH8YnUa889ZU/VvRil++jMPoxV4U2Un+2+08fy/98OfXnxUVF/lsOOhsXI6bSNUHf3MAAAAAAAAAAAAAAAAAAAAAAHi0tvI8z1P6KaWUhlP35ww61YvL/q08r8SN+32Gs/cD1YvmzP1Aw6n7dZ4WS2Tl+Em+Fq/XorbGlw4AAAAAAAAAAAAAAAAAAAD/G8cnp90Xvd7+0e0aWcz8phblx/1nxmyOllxpiXH4tqVGdTxRFrHaPPWFtm5z0VKbo3qWK6Ox4ia8uexa7SWXiMrJaXd8urovsv96u5tx7SDd4pBMN9L143d0fFK9MThtlI3GHTwF5ymlxqs3usZ7sdLMxXbUrzbz3wZXon5Hz/L4SZnju1/v7i8PAAAAAAAAAAAAAAAAAABw3eRDv3M6z9ZQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsweT7/5doDEfhBVNrfokAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8BP4JAAD//7BTcDU=") openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) timer_create(0x1, &(0x7f0000000a40)={0x0, 0x25, 0x4}, &(0x7f0000000a80)) getsockopt(r0, 0x98, 0x1, &(0x7f00000002c0)=""/60, &(0x7f0000000300)=0x3c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 5m43.867281843s ago: executing program 2 (id=1176): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xf21e4000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x40) 5m43.544464813s ago: executing program 2 (id=1178): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) io_setup(0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e21, @local}, {0x6, @local}, 0x30, {0x2, 0x4e20, @remote}, 'ip6erspan0\x00'}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x12, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 5m43.267566492s ago: executing program 2 (id=1181): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x86, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000942000/0x2000)=nil) move_pages(r0, 0x1, &(0x7f0000000040)=[&(0x7f000047e000/0x1000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0], 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000340)=""/104, 0x68}], 0x1, 0x5b, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 5m43.256278663s ago: executing program 32 (id=1181): bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x86, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000942000/0x2000)=nil) move_pages(r0, 0x1, &(0x7f0000000040)=[&(0x7f000047e000/0x1000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0], 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000340)=""/104, 0x68}], 0x1, 0x5b, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 11.196606476s ago: executing program 0 (id=2789): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0) sync() sync() r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, r6, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) 9.681596255s ago: executing program 0 (id=2797): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x25dfdbfe, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0xa}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) recvmmsg(r7, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12112, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 9.048759616s ago: executing program 1 (id=2799): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x25dfdbfe, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0xa}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) recvmmsg(r7, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12112, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 7.316120342s ago: executing program 5 (id=2804): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = shmget(0x2, 0x4000, 0x54000000, &(0x7f0000c2e000/0x4000)=nil) socket$can_bcm(0x1d, 0x2, 0x2) write(0xffffffffffffffff, 0x0, 0x0) shmctl$IPC_RMID(r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) mremap(&(0x7f0000e9b000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x1d, 0x2, 0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x24, 0x2, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4040844) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 7.239710715s ago: executing program 3 (id=2805): socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x181080) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) 7.227729095s ago: executing program 5 (id=2806): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0x10, 0x0, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b001e00080002007ca636fa89e8b379a3000000040000ffff01000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r1}, 0x38) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r2 = socket(0x2d, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x5}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0xe, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4004804) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0007000000000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff00000000fdffffff8500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000040000850000007b00000095"], 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x5, 0xe, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd0d, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) 7.181759487s ago: executing program 0 (id=2807): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) unshare(0x40400) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000000), 0xff8a) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r5, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000002}, {0x3, 0x3, 0x3, 0xa, 0xa, 0xfff8}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 7.180871457s ago: executing program 4 (id=2808): socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x181080) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x5, 0x5, 0x6, 0x0, 0x0, 0xd2dfd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x25c8, 0xe}, 0x180a, 0x0, 0x3, 0x0, 0x7, 0x101, 0x3, 0x0, 0xc, 0x0, 0x400000000005}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) 7.062038591s ago: executing program 5 (id=2809): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x0, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff010000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000003200000000000000000000000000ffffac14142900000000000000000000000000000000000012000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000a00"/176], 0xf8}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, 0x0, 0xf, 0x0) set_mempolicy_home_node(&(0x7f000027a000/0xc00000)=nil, 0xc00000, 0x2, 0x0) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000100)=""/125, 0x7d, 0x20, &(0x7f0000000180)={0x1a, 0x30a, 0x6, 0x5, 0x1, 0x1, @random="35e4d214ffc1"}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000181100", @ANYRES32, @ANYBLOB], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 5.647177297s ago: executing program 3 (id=2810): io_uring_setup(0x2628, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x805, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) gettid() timerfd_create(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3fe, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000006}, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg$sock(r1, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000003800)=[{0x0}, {&(0x7f0000002780)="9832", 0x2}], 0x2}}], 0x1, 0x80) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_config_ext={0x4b, 0x4168}, 0x10c8ea, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000011c0)={&(0x7f0000001080), 0x10, &(0x7f0000001180)={&(0x7f0000001100)={0x4, 0x800, 0x8, {}, {r2, r3/1000+10000}, {0x0, 0x1}, 0x1, @can={{}, 0x2, 0x2, 0x0, 0x0, "f8a7dbb4a01b9db7"}}, 0x48}, 0x1, 0x0, 0x0, 0x8980}, 0x40) r4 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) write$sndseq(r5, &(0x7f0000000080)=[{0x23, 0x0, 0x0, 0xfd, @time, {}, {}, @result={0x0, 0x7a120}}], 0x1c) sendmsg$L2TP_CMD_SESSION_DELETE(r4, 0x0, 0x200040c0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820f522e5bab4e21000fff0058006f543bc2945f640094f96a0325010ebc000000000014008000f0fffeff0180004000fff5dd0000000a0002000400080004000000224e0000", 0x58}], 0x1) 5.415286494s ago: executing program 1 (id=2811): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x25dfdbfe, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0xa}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) recvmmsg(r7, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12112, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 5.351772346s ago: executing program 3 (id=2812): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x25dfdbfe, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0xa}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) recvmmsg(r7, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12112, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 5.259562499s ago: executing program 0 (id=2813): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xe, 0xa60}, 0x106200, 0x10004, 0x5a, 0x5, 0xa, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x10d042, 0xc2) msync(&(0x7f0000420000/0x1000)=nil, 0x1000, 0x0) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='!pu&00\t&&') 3.148721498s ago: executing program 1 (id=2814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x24044084) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r7, 0x701, 0x0, 0xffffffff, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$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") 3.148279278s ago: executing program 5 (id=2815): r0 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd900, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0xffff888237d05000, 0x1}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x800) r2 = openat$incfs(0xffffffffffffff9c, 0x0, 0x10000, 0x100) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000}, 0x1c) r3 = perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x8, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107f7e, 0x2, @perf_bp={0x0, 0x1}, 0x9c90, 0x32, 0x8, 0x2, 0x9, 0x7, 0x9, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x81, 0xcf57, 0xff42, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0x300}, 0x8000, 0x8000, 0x8, 0x1}}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) fdatasync(r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)='\x00\x00', 0x2, 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000004) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='L', 0x1, 0xffffffffffffffff) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) preadv(r6, 0x0, 0x0, 0x176, 0x402) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.147953698s ago: executing program 4 (id=2816): socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x5, 0x5, 0x6, 0x0, 0x0, 0xd2dfd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x25c8, 0xe}, 0x180a, 0x0, 0x3, 0x0, 0x7, 0x101, 0x3, 0x0, 0xc, 0x0, 0x400000000005}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) 3.147066028s ago: executing program 0 (id=2824): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xd}, {0x4}}}, 0x24}}, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f00000001c0), 0x4003) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) close(r6) openat$hwrng(0xffffffffffffff9c, 0x0, 0x200, 0x0) r8 = socket(0x2a, 0x2, 0x803) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000500)={[{@noblock_validity}, {@abort}, {@mb_optimize_scan}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") 3.08088358s ago: executing program 5 (id=2817): r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) io_destroy(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x8001, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000180)="10", 0x1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006"], 0xa0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000280), 0x7, 0x0) ioctl$MON_IOCG_STATS(r6, 0x80089203, &(0x7f0000000240)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x30}}, 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00', {}, 0x2}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x10d, 0x70bd2a, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 2.078680852s ago: executing program 3 (id=2818): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x25dfdbfe, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0xa}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) recvmmsg(r7, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12112, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 1.475738872s ago: executing program 4 (id=2819): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xffffffff, 0x6, 0x4, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listns(&(0x7f0000000b80)={0x20, 0x0, 0x0, 0x8000000}, &(0x7f0000000bc0)=[0x0], 0x1, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000500)={{0x80, 0x9}, 'port0\x00', 0x57, 0x40800, 0x9, 0x10, 0x0, 0x800, 0x8, 0x0, 0x3, 0x7f}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace(0x11, r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x2}, 'port0\x00', 0x80, 0x100816, 0x4, 0x9, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) unshare(0x100000) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ptrace(0x10, 0x0) r3 = socket(0xa, 0x3, 0x87) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x60030000, {0x0, 0xff000000}, [@common=@icmp6={{}, {0x10, "3e8e", 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x8}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xffffff00], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0x100}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x50, 0x8, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x441) getpgid(0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r4, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "a7d43e88fc61c0504fb2dfc95a30f2762500f2"}) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x14, 0x0, 0x14) 1.345049426s ago: executing program 1 (id=2820): socket$rxrpc(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10d4c9, 0x0, 0x3, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x10, 0x8200) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$BLKRRPART(r0, 0x125f, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r2, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) lseek(r2, 0x0, 0x4) sendfile(r2, r2, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xff, 0x105}, 0x10000, 0x400000, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB="73657373696f6e3d3078303030303030303030303030303030342c636865636b3d7374726963742c636865636b3d7374726963742c73657373696f6e1549935ad795b21e50d93886c01fd6b73d30fe78303030303030303030303030303034382c646d6f64d0d69574653d3078303030303030303030303030303030342c6d61703d61636f726e2c757466382c696f636861727365743d69736f383835392d372c6d61703d6f66662c6e6f636f6d70726573732c6d6f64653d3078303030303030303030303030303030302c686964652c6e6f6a6f6c6962fced236c17923b"], 0x0, 0x3f1, &(0x7f0000000840)="$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") getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0xffffffff}, &(0x7f0000000100)=0x8) 1.298575068s ago: executing program 4 (id=2821): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETNOCSUM(r1, 0x894c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8984662b0254d78d, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xab}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80242) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) write$evdev(r3, 0x0, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080), 0x2) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r4, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000340)="89", 0x1}], 0x2}}], 0x1, 0x0) 1.104747544s ago: executing program 4 (id=2822): r0 = socket(0x10, 0x3, 0x0) getresuid(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xc, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x4, 0x0, 0xd, 0x6, 0x5, 0x10, 0x8}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xd0}]}, 0x0, 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x0, {0x4000000031, 0x100000000}}, 0x1) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x800000, 0x5a6c903, 0x1000000000000001, 0xec, 0xfffffffffffffffe, 0x8, 0x0, 0x1, 0x1}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) write$selinux_create(0xffffffffffffffff, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) r3 = socket(0x2, 0x3, 0xff) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) 958.959258ms ago: executing program 4 (id=2823): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x25dfdbfe, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0xa}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) recvmmsg(r7, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12112, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 497.009724ms ago: executing program 1 (id=2825): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x70, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x8007, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet(0xa, 0x801, 0x84) timer_create(0x4, &(0x7f0000000800)={0x0, 0x2, 0x2, @thr={&(0x7f0000000840)="9a4680f1700d8eae8127592f052262880656418fcf7b59e6f940929082e9c8f9e19a995cede7068950463745c8fd5c99a666c4d713f3cdf1bba9e81f9726aa92e71dc922725e1c8bcb60e9fc3b40b5bb2d518fce132e09afe04abcd677774565fd58adf9a8e1ca5276e3ca690b775acfab01115f892fbffb4fb537825187f2f605c3e2b2534fc4a308f48f03b78f0953568c28340fa7a7c38f41966cdbecff6043a353ed1dad46ea3ce28f50376e8a325e22c020dec0d97ff9602ff2af7ebe45bb0dec15a39a", &(0x7f0000000740)="c60c62c991244fac6b6d06e84e21df882045cf8b3f14ec26ba1a8e148988bfc071e2fcea6df3d079e304e223c9d90f209ecde3f0c53afdd01bc976ea2d1f69408b07433c2382804ddd20554298294d5a8d29b796288accdbc0b78a2ba2f0b6cff188f1953242d51347249f36a7bf47f227ff3c3bc731eedbfef94b491f3ebb5f2e2a4e9b337f7f300f399ed8c615da8efeb006cb17fccb66d31b46aee030285982f037aaacda8ac9bbd5f52ba41eb89c716d4e"}}, &(0x7f0000000280)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) listen(r1, 0x0) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x48002010}) connect$inet(r0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="20001501800000040002800600120100020000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) ioctl$TCFLSH(r3, 0x540b, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000600)={'batadv0\x00', &(0x7f0000000500)=@ethtool_rxnfc={0x2d, 0xb, 0x5, {0x11, @udp_ip6_spec={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x41}, 0x4e22, 0x4e23, 0x8}, {0x0, @multicast, 0x7, 0x4, [0xff, 0x4a]}, @tcp_ip6_spec={@private0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e21, 0x4e23, 0x8}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 0x9, 0x0, [0x8, 0x2]}, 0x9e94, 0x77}}}) getsockopt$inet6_tcp_int(r3, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000002c0)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 404.772287ms ago: executing program 0 (id=2826): r0 = socket$igmp(0x2, 0x3, 0x2) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@other={'decodes', ' ', 'mem'}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x202002, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r3, 0x400455c8, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x8e0}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x1, 0x10, 0x0, @vifc_lcl_addr=@multicast1, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @empty, 0x0, "614afa85791a63abd0f993af8096b504000000000000003fdc3fd440829c98ae", 0x3, 0xffffffff}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x2}, 0x94) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000580)={&(0x7f00000000c0)=0x5, 0x4, &(0x7f0000000300)=[{}, {}], &(0x7f0000000540)}) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) close(0x3) 348.879239ms ago: executing program 1 (id=2827): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x25dfdbfe, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0xa}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) recvmmsg(r7, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12112, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 323.69204ms ago: executing program 3 (id=2828): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10e, &(0x7f0000000780)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$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") r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) getsockname$packet(r2, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000840)=0x14) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendfile(r5, r4, &(0x7f0000000000)=0x9, 0x100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r6 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRESOCT=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r7, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(r7, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 322.77171ms ago: executing program 5 (id=2838): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x10, 0x5}, {0xc, 0x3}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c090}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1000002}, 0x1101, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setresuid(0xee01, 0x0, 0x0) getegid() write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x4e, 0x2, {0x3, 0x6, 0x80}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4c840) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000)=0x3, 0x4) close(0x3) 0s ago: executing program 3 (id=2829): ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x2020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, 0x0, 0x0) poll(0x0, 0x0, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b003a05142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x44000) kernel console output (not intermixed with test programs): slave_1 removed [ 412.846984][ T9912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.855008][ T9912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.864899][ T9912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.872916][ T9912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.887279][ T9912] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 413.000610][ T9913] team0: Mode changed to "loadbalance" [ 414.560019][ T9959] netlink: 'syz.5.1660': attribute type 8 has an invalid length. [ 414.567897][ T9959] netlink: 'syz.5.1660': attribute type 7 has an invalid length. [ 414.575744][ T9959] netlink: 194488 bytes leftover after parsing attributes in process `syz.5.1660'. [ 414.887914][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 414.887930][ T28] audit: type=1400 audit(2000000683.396:1298): avc: denied { ioctl } for pid=9966 comm="syz.4.1664" path="socket:[25611]" dev="sockfs" ino=25611 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 415.756213][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 415.897927][T10001] netlink: 'syz.3.1676': attribute type 13 has an invalid length. [ 415.919738][T10001] netlink: 'syz.3.1676': attribute type 17 has an invalid length. [ 415.944075][T10001] 0ªî{X¹¦: left allmulticast mode [ 416.028585][T10001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.192152][T10001] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 416.237322][T10001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 416.510956][T10001] veth1_vlan: left promiscuous mode [ 416.554507][T10001] veth0_vlan: left promiscuous mode [ 416.589805][T10001] veth0_vlan: left allmulticast mode [ 416.636979][T10001] veth0_vlan: entered promiscuous mode [ 416.716283][T10001] veth1_vlan: entered promiscuous mode [ 416.862241][T10001] veth1_macvtap: left promiscuous mode [ 417.141068][T10001] veth0_macvtap: left promiscuous mode [ 417.163671][T10001] veth0_macvtap: entered promiscuous mode [ 417.265928][T10001] veth1_macvtap: entered promiscuous mode [ 417.313227][T10001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 417.354840][T10001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.388230][T10001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 417.421112][T10001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 417.470269][T10001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.499973][T10001] gretap0: entered promiscuous mode [ 417.533207][T10001] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.558541][ T36] bridge0: port 1(veth1_virt_wifi) entered blocking state [ 417.565993][ T36] bridge0: port 1(veth1_virt_wifi) entered forwarding state [ 417.710622][ T4280] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.731304][ T4280] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 417.760329][ T4280] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.793069][ T4280] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 417.828205][ T49] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 417.947061][ T4280] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.054226][ T4280] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 418.063311][ T4280] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.072591][ T4280] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 418.106223][ T28] audit: type=1400 audit(2000000690.396:1299): avc: denied { read } for pid=10014 comm="syz.0.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 418.333369][T10023] loop5: detected capacity change from 0 to 1024 [ 418.353396][T10023] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 418.453518][T10023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.610900][ T28] audit: type=1400 audit(2000000690.752:1300): avc: denied { setattr } for pid=10012 comm="syz.5.1679" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 419.285127][ T28] audit: type=1400 audit(2000000693.499:1301): avc: denied { create } for pid=10033 comm="syz.1.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 419.826779][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.052611][T10056] loop5: detected capacity change from 0 to 1024 [ 420.069385][T10056] EXT4-fs: Ignoring removed nomblk_io_submit option [ 420.119044][T10056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 420.133335][T10056] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.268863][ T28] audit: type=1400 audit(2000000698.334:1302): avc: denied { write } for pid=10047 comm="syz.5.1688" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 420.310945][ T28] audit: type=1400 audit(2000000698.343:1303): avc: denied { append } for pid=10047 comm="syz.5.1688" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 420.337231][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 420.349009][ T28] audit: type=1400 audit(2000000698.352:1304): avc: denied { ioctl } for pid=10047 comm="syz.5.1688" path="/80/file1/file1" dev="loop5" ino=15 ioctlcmd=0x6629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 420.376821][ T28] audit: type=1400 audit(2000000698.362:1305): avc: denied { write } for pid=10047 comm="syz.5.1688" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 421.315569][T10072] netlink: 'syz.4.1701': attribute type 13 has an invalid length. [ 421.350874][T10072] netlink: 'syz.4.1701': attribute type 17 has an invalid length. [ 421.384697][T10072] 0ªî{X¹¦: left allmulticast mode [ 421.720848][T10088] loop5: detected capacity change from 0 to 512 [ 421.744194][T10088] EXT4-fs: Ignoring removed nobh option [ 421.790659][T10089] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1714'. [ 421.858283][T10088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.891663][T10088] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 422.341950][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 424.176780][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.179820][T10072] bridge1: left promiscuous mode [ 424.191319][T10072] bridge1: left allmulticast mode [ 424.197904][T10072] bridge2: left promiscuous mode [ 424.222274][T10072] bridge2: left allmulticast mode [ 424.288955][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 424.402630][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 424.507790][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1709'. [ 424.514130][T10117] bridge_slave_0: left allmulticast mode [ 424.532550][T10117] bridge_slave_0: left promiscuous mode [ 424.558010][T10117] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.646754][ T28] audit: type=1400 audit(2000000706.512:1306): avc: denied { create } for pid=10104 comm="syz.4.1709" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 424.863262][ T28] audit: type=1400 audit(2000000706.559:1307): avc: denied { ioctl } for pid=10104 comm="syz.4.1709" path="socket:[25930]" dev="sockfs" ino=25930 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 426.290533][T10117] bridge_slave_1: left promiscuous mode [ 426.296975][T10117] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.316729][T10117] bond0: (slave bond_slave_0): Releasing backup interface [ 426.327235][T10117] bond0: (slave bond_slave_1): Releasing backup interface [ 426.341461][T10117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.350071][T10117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.358893][T10117] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 426.897087][T10158] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 426.904649][T10158] bridge0: entered allmulticast mode [ 426.926248][T10158] veth1_virt_wifi: left allmulticast mode [ 426.939533][T10158] veth1_virt_wifi: left promiscuous mode [ 426.952570][T10158] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 427.092335][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1728'. [ 427.650716][ T3402] hid_parser_main: 38 callbacks suppressed [ 427.650755][ T3402] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.743575][ T3402] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 427.772428][ T28] audit: type=1400 audit(2000000712.337:1308): avc: denied { read write } for pid=10171 comm="syz.5.1732" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 428.047638][ T28] audit: type=1400 audit(2000000712.337:1309): avc: denied { open } for pid=10171 comm="syz.5.1732" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 428.670423][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 429.344105][T10200] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1739'. [ 429.353245][T10200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1739'. [ 429.793329][ T28] audit: type=1400 audit(2000000715.326:1310): avc: denied { read write } for pid=10201 comm="syz.5.1744" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 429.874171][ T28] audit: type=1400 audit(2000000715.326:1311): avc: denied { open } for pid=10201 comm="syz.5.1744" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 430.792963][ T28] audit: type=1400 audit(2000000718.277:1312): avc: denied { write } for pid=10223 comm="syz.3.1751" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 430.860326][ T28] audit: type=1400 audit(2000000718.277:1313): avc: denied { write } for pid=10223 comm="syz.3.1751" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 430.912073][ T28] audit: type=1400 audit(2000000718.277:1314): avc: denied { write } for pid=10223 comm="syz.3.1751" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 430.965997][T10235] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 431.983493][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 432.266509][T10253] loop5: detected capacity change from 0 to 512 [ 432.282214][T10253] EXT4-fs: dax option not supported [ 432.509900][T10267] loop5: detected capacity change from 0 to 512 [ 432.520070][T10267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 432.530896][T10267] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 432.551578][T10267] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 432.588359][T10265] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 432.593304][T10267] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.1777: inode #0: comm syz.5.1777: iget: illegal inode # [ 432.602379][T10265] bridge0: entered allmulticast mode [ 432.622378][T10267] loop5: lost filesystem error report for type 5 error -117 [ 432.622553][T10267] EXT4-fs (loop5): Remounting filesystem read-only [ 432.622571][T10267] EXT4-fs (loop5): get orphan inode failed [ 432.625866][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 432.625886][ C0] EXT4-fs (loop5): initial error at time 2000000722: ext4_init_orphan_info:583 [ 432.625912][ C0] EXT4-fs (loop5): last error at time 2000000722: ext4_init_orphan_info:583 [ 432.685800][T10267] EXT4-fs (loop5): mount failed [ 432.696409][T10268] veth1_virt_wifi: left allmulticast mode [ 432.781351][T10268] veth1_virt_wifi: left promiscuous mode [ 432.791129][T10268] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 433.030203][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1768'. [ 433.061273][T10283] xt_hashlimit: max too large, truncated to 1048576 [ 433.070062][T10283] ipt_REJECT: TCP_RESET invalid for non-tcp [ 433.352218][ T28] audit: type=1400 audit(2000000724.661:1315): avc: denied { accept } for pid=10286 comm="syz.5.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 433.550658][ T28] audit: type=1400 audit(2000000725.856:1316): avc: denied { name_bind } for pid=10292 comm="syz.4.1773" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 434.175908][ T28] audit: type=1400 audit(2000000726.436:1317): avc: denied { bind } for pid=10308 comm="syz.5.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 435.672245][T10331] loop5: detected capacity change from 0 to 512 [ 435.706111][T10331] EXT4-fs: Ignoring removed nomblk_io_submit option [ 435.752936][T10331] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 435.784433][T10331] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 435.818313][T10331] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.1786: inode #0: comm syz.5.1786: iget: illegal inode # [ 435.854722][T10331] loop5: lost filesystem error report for type 5 error -117 [ 435.854983][T10331] EXT4-fs (loop5): Remounting filesystem read-only [ 435.862652][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 435.862769][ C1] EXT4-fs (loop5): initial error at time 2000000729: ext4_init_orphan_info:583 [ 435.862993][ C1] EXT4-fs (loop5): last error at time 2000000729: ext4_init_orphan_info:583 [ 435.972626][T10331] EXT4-fs (loop5): get orphan inode failed [ 436.019255][T10331] EXT4-fs (loop5): mount failed [ 436.449500][T10354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1789'. [ 436.481328][T10354] xt_hashlimit: max too large, truncated to 1048576 [ 436.491005][T10354] ipt_REJECT: TCP_RESET invalid for non-tcp [ 438.078226][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 438.183397][T10385] syz_tun: entered allmulticast mode [ 438.211834][ T28] audit: type=1400 audit(2000000733.219:1318): avc: denied { mount } for pid=10386 comm="syz.4.1803" name="/" dev="hugetlbfs" ino=27119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 438.308273][ T28] audit: type=1326 audit(2000000733.275:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.0.1802" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10e46ace59 code=0x0 [ 440.370903][T10433] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1820'. [ 440.465668][ T28] audit: type=1400 audit(2000000737.324:1320): avc: denied { getopt } for pid=10435 comm="syz.1.1821" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 440.822667][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 441.367289][T10448] SELinux: policydb string does not match my string SE Linux [ 441.381308][T10448] SELinux: failed to load policy [ 441.581459][T10455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1827'. [ 441.661794][T10458] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1825'. [ 441.671114][T10458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1825'. [ 441.988334][ T28] audit: type=1400 audit(2000000740.733:1321): avc: denied { write } for pid=10460 comm="syz.5.1830" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 442.149513][T10464] pim6reg: entered allmulticast mode [ 442.704816][ T28] audit: type=1326 audit(2000000742.414:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.4.1838" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 442.773967][ T28] audit: type=1326 audit(2000000742.414:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.4.1838" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 442.934925][ T28] audit: type=1326 audit(2000000742.414:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.4.1838" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 443.054476][ T28] audit: type=1326 audit(2000000742.442:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.4.1838" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 443.080245][ T28] audit: type=1326 audit(2000000742.442:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.4.1838" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 443.121077][ T28] audit: type=1326 audit(2000000742.442:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.4.1838" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 443.148557][ T28] audit: type=1326 audit(2000000742.442:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.4.1838" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 443.174565][ T28] audit: type=1326 audit(2000000742.442:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.4.1838" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 443.253488][T10463] loop5: detected capacity change from 0 to 1024 [ 443.695671][T10463] EXT4-fs: Ignoring removed bh option [ 444.124396][T10506] batadv_slave_1: entered promiscuous mode [ 444.241924][T10502] batadv_slave_1: left promiscuous mode [ 444.286579][T10463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.727737][T10463] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.883324][T10501] lo speed is unknown, defaulting to 1000 [ 444.888882][T10521] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1848'. [ 444.915520][T10522] syz_tun: entered allmulticast mode [ 445.249679][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1850'. [ 445.276830][T10537] xt_hashlimit: max too large, truncated to 1048576 [ 445.295748][T10537] ipt_REJECT: TCP_RESET invalid for non-tcp [ 446.581305][T10546] SELinux: policydb string does not match my string SE Linux [ 446.597313][T10546] SELinux: failed to load policy [ 447.484464][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 447.484480][ T28] audit: type=1400 audit(2000000751.882:1420): avc: denied { setattr } for pid=10559 comm="syz.4.1859" name="file0" dev="tmpfs" ino=2004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 447.749442][T10582] syz_tun: entered allmulticast mode [ 447.805859][ T28] audit: type=1326 audit(2000000753.183:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10581 comm="syz.1.1866" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8071a5ce59 code=0x0 [ 447.862742][T10586] loop5: detected capacity change from 0 to 512 [ 447.883582][T10586] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 447.905214][T10586] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.971488][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1864'. [ 448.001962][T10591] xt_hashlimit: max too large, truncated to 1048576 [ 448.012554][T10591] ipt_REJECT: TCP_RESET invalid for non-tcp [ 448.755661][T10593] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1867'. [ 448.764868][T10593] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1867'. [ 449.121325][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 449.629358][T10617] loop5: detected capacity change from 0 to 512 [ 449.942163][T10617] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.1874: corrupted xattr block 95: invalid header [ 449.998867][T10617] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 449.999950][T10617] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 450.009461][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 450.009694][ C1] EXT4-fs (loop5): initial error at time 2000000757: ext4_expand_extra_isize_ea:2810: inode 11 [ 450.009890][ C1] EXT4-fs (loop5): last error at time 2000000757: ext4_expand_extra_isize_ea:2810: inode 11 [ 450.510677][T10617] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1874: bg 0: block 7: invalid block bitmap [ 450.905281][T10634] syz_tun: entered allmulticast mode [ 450.921792][T10617] loop5: lost filesystem error report for type 5 error -117 [ 450.934969][T10617] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 451.028162][ T28] audit: type=1326 audit(2000000758.178:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.3.1879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f988863ce59 code=0x0 [ 451.078038][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 451.093584][T10617] loop5: lost filesystem error report for type 5 error -117 [ 451.098298][T10617] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.1874: corrupted xattr block 95: invalid header [ 451.180402][T10617] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 451.186730][T10617] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 451.241357][T10617] EXT4-fs (loop5): 1 orphan inode deleted [ 451.313245][T10617] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.936365][ T28] audit: type=1326 audit(2000000759.057:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10656 comm="syz.3.1886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988863ce59 code=0x7ffc0000 [ 451.981480][ T28] audit: type=1326 audit(2000000759.085:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10656 comm="syz.3.1886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988863ce59 code=0x7ffc0000 [ 452.045994][ T28] audit: type=1326 audit(2000000759.085:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10656 comm="syz.3.1886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988863ce59 code=0x7ffc0000 [ 452.123671][ T28] audit: type=1326 audit(2000000759.085:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10656 comm="syz.3.1886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988863ce59 code=0x7ffc0000 [ 452.156529][ T28] audit: type=1326 audit(2000000759.085:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10656 comm="syz.3.1886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f988863ce59 code=0x7ffc0000 [ 452.182427][ T28] audit: type=1326 audit(2000000759.085:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10656 comm="syz.3.1886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988863ce59 code=0x7ffc0000 [ 452.209100][ T28] audit: type=1326 audit(2000000759.094:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10656 comm="syz.3.1886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988863ce59 code=0x7ffc0000 [ 452.878590][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.082865][T10678] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 454.885711][T10682] syz_tun: entered allmulticast mode [ 454.968709][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 454.968798][ T28] audit: type=1326 audit(2000000761.882:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10680 comm="syz.4.1893" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x0 [ 455.004884][T10685] ref_ctr increment failed for inode: 0x836 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888105280d80 [ 455.046625][T10687] loop5: detected capacity change from 0 to 512 [ 455.055395][T10681] uprobe: syz.1.1903:10681 failed to unregister, leaking uprobe [ 455.287909][T10687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.308010][T10687] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.376137][ T28] audit: type=1400 audit(2000000762.275:1522): avc: denied { write } for pid=10684 comm="syz.5.1894" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.527791][ T28] audit: type=1400 audit(2000000762.275:1523): avc: denied { write } for pid=10684 comm="syz.5.1894" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.867324][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 455.986552][T10706] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 456.129253][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.233110][T10710] loop5: detected capacity change from 0 to 512 [ 456.267971][T10710] EXT4-fs: Ignoring removed nomblk_io_submit option [ 456.319711][T10710] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 456.334377][T10710] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 456.361944][T10710] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.1900: inode #0: comm syz.5.1900: iget: illegal inode # [ 456.377124][T10710] loop5: lost filesystem error report for type 5 error -117 [ 456.377344][T10710] EXT4-fs (loop5): Remounting filesystem read-only [ 456.384979][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 456.385152][ C1] EXT4-fs (loop5): initial error at time 2000000763: ext4_init_orphan_info:583 [ 456.385429][ C1] EXT4-fs (loop5): last error at time 2000000763: ext4_init_orphan_info:583 [ 456.422682][T10710] EXT4-fs (loop5): get orphan inode failed [ 456.434393][T10710] EXT4-fs (loop5): mount failed [ 456.566063][T10720] loop5: detected capacity change from 0 to 1024 [ 456.628459][T10720] EXT4-fs: Mount option(s) incompatible with ext3 [ 456.871100][T10720] loop5: detected capacity change from 0 to 512 [ 457.029269][T10720] EXT4-fs: test_dummy_encryption option not supported [ 457.121312][ T28] audit: type=1400 audit(2000000763.902:1524): avc: denied { write } for pid=10721 comm="syz.1.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 458.332832][T10755] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1911'. [ 458.503500][T10746] loop5: detected capacity change from 0 to 512 [ 458.567036][T10752] pim6reg: entered allmulticast mode [ 458.587665][T10746] msdos: Unknown parameter 's' [ 458.793734][ T28] audit: type=1400 audit(2000000766.463:1525): avc: denied { bind } for pid=10763 comm="syz.5.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 458.866729][T10774] 9pnet_fd: p9_fd_create_unix (10774): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 458.936461][T10774] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.150707][T10787] loop5: detected capacity change from 0 to 512 [ 459.180088][T10787] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 459.308965][T10787] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.1924: corrupted xattr entries [ 459.354569][T10787] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 459.356280][T10787] EXT4-fs (loop5): Remounting filesystem read-only [ 459.365593][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 459.365617][ C1] EXT4-fs (loop5): initial error at time 2000000001: xattr_find_entry:337: inode 15 [ 459.365658][ C1] EXT4-fs (loop5): last error at time 2000000001: xattr_find_entry:337: inode 15 [ 459.511932][T10787] EXT4-fs (loop5): 1 truncate cleaned up [ 459.538790][T10787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.125308][T10810] pim6reg: entered allmulticast mode [ 460.204413][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1930'. [ 460.248046][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.304441][T10813] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 460.314131][ T28] audit: type=1400 audit(2000000002.337:1526): avc: denied { setopt } for pid=10815 comm="syz.5.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 460.396793][T10816] lo speed is unknown, defaulting to 1000 [ 461.110762][T10837] loop5: detected capacity change from 0 to 512 [ 461.124704][T10837] EXT4-fs: Ignoring removed nomblk_io_submit option [ 461.136498][T10837] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 461.145819][T10837] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 461.165106][T10837] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.1937: inode #0: comm syz.5.1937: iget: illegal inode # [ 461.178610][T10837] loop5: lost filesystem error report for type 5 error -117 [ 461.179253][T10837] EXT4-fs (loop5): Remounting filesystem read-only [ 461.186928][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 461.187014][ C1] EXT4-fs (loop5): initial error at time 2000000005: ext4_init_orphan_info:583 [ 461.187260][ C1] EXT4-fs (loop5): last error at time 2000000005: ext4_init_orphan_info:583 [ 461.220667][T10837] EXT4-fs (loop5): get orphan inode failed [ 461.228250][T10837] EXT4-fs (loop5): mount failed [ 461.382866][ T28] audit: type=1326 audit(2000000007.336:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.4.1941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 461.414880][ T28] audit: type=1326 audit(2000000007.364:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.4.1941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 461.441428][ T28] audit: type=1326 audit(2000000007.364:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.4.1941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 461.467911][ T28] audit: type=1326 audit(2000000007.364:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.4.1941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 461.498371][ T28] audit: type=1326 audit(2000000007.364:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.4.1941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 461.524758][ T28] audit: type=1326 audit(2000000007.364:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.4.1941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 461.550756][ T28] audit: type=1326 audit(2000000007.364:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.4.1941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 461.576970][ T28] audit: type=1326 audit(2000000007.364:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.4.1941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 461.606424][ T28] audit: type=1326 audit(2000000007.364:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.4.1941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 461.642979][ T28] audit: type=1326 audit(2000000007.364:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.4.1941" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 463.581198][T10885] sctp: [Deprecated]: syz.3.1954 (pid 10885) Use of struct sctp_assoc_value in delayed_ack socket option. [ 463.581198][T10885] Use struct sctp_sack_info instead [ 464.663467][T10907] ref_ctr increment failed for inode: 0x2e4 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888105284380 [ 464.700357][T10906] uprobe: syz.5.1959:10906 failed to unregister, leaking uprobe [ 464.788879][T10912] loop5: detected capacity change from 0 to 512 [ 464.802633][T10912] EXT4-fs: Ignoring removed nomblk_io_submit option [ 464.829307][T10912] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 464.839109][T10912] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 464.895972][T10912] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.1961: inode #0: comm syz.5.1961: iget: illegal inode # [ 464.914592][T10912] loop5: lost filesystem error report for type 5 error -117 [ 464.915573][T10912] EXT4-fs (loop5): Remounting filesystem read-only [ 464.923556][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 464.923659][ C0] EXT4-fs (loop5): initial error at time 2000000016: ext4_init_orphan_info:583 [ 464.923766][ C0] EXT4-fs (loop5): last error at time 2000000016: ext4_init_orphan_info:583 [ 464.957396][T10912] EXT4-fs (loop5): get orphan inode failed [ 464.964451][T10912] EXT4-fs (loop5): mount failed [ 467.577255][T10973] loop5: detected capacity change from 0 to 512 [ 467.624757][ T28] kauditd_printk_skb: 407 callbacks suppressed [ 467.624792][ T28] audit: type=1326 audit(2000000023.176:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10978 comm="syz.3.1983" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988863ce59 code=0x7ffc0000 [ 467.687519][ T28] audit: type=1326 audit(2000000023.176:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10978 comm="syz.3.1983" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988863ce59 code=0x7ffc0000 [ 467.725779][ T28] audit: type=1326 audit(2000000023.176:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10978 comm="syz.3.1983" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988863ce59 code=0x7ffc0000 [ 467.763411][ T28] audit: type=1326 audit(2000000023.176:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10978 comm="syz.3.1983" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988863ce59 code=0x7ffc0000 [ 467.789672][ T28] audit: type=1326 audit(2000000023.176:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10978 comm="syz.3.1983" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f988863ce59 code=0x7ffc0000 [ 467.815952][ T28] audit: type=1326 audit(2000000023.176:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10978 comm="syz.3.1983" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988863ce59 code=0x7ffc0000 [ 467.842657][ T28] audit: type=1326 audit(2000000023.176:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10978 comm="syz.3.1983" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988863ce59 code=0x7ffc0000 [ 467.853947][T10973] Quota error (device loop5): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 467.868760][ T28] audit: type=1326 audit(2000000023.176:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10978 comm="syz.3.1983" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988863ce59 code=0x7ffc0000 [ 467.868798][ T28] audit: type=1326 audit(2000000023.176:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10978 comm="syz.3.1983" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988863ce59 code=0x7ffc0000 [ 467.949434][T10973] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.1981: Failed to acquire dquot type 1 [ 467.962302][T10973] loop5: lost filesystem error report for type 5 error -117 [ 467.980305][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 467.996642][ C0] EXT4-fs (loop5): initial error at time 2000000023: ext4_acquire_dquot:7034 [ 468.006916][ C0] EXT4-fs (loop5): last error at time 2000000023: ext4_acquire_dquot:7034 [ 468.029410][T10973] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1981: corrupted inode contents [ 468.045095][T10973] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 468.047175][T10973] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #16: comm syz.5.1981: mark_inode_dirty error [ 468.070123][T10973] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 468.074103][T10973] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1981: corrupted inode contents [ 468.100036][T10973] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 468.105964][T10973] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.1981: mark_inode_dirty error [ 468.137729][T10973] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 468.142318][T10973] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1981: corrupted inode contents [ 468.177681][T10973] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 468.208476][T10973] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 468.233366][T10973] loop5: lost filesystem error report for type 5 error -117 [ 468.241284][T10973] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1981: corrupted inode contents [ 468.264717][T10973] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 468.272969][T10973] EXT4-fs error (device loop5): ext4_truncate:4690: inode #16: comm syz.5.1981: mark_inode_dirty error [ 468.308554][T10973] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 468.319901][T10973] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 468.347196][T10973] loop5: lost filesystem error report for type 5 error -117 [ 468.379126][T10973] EXT4-fs (loop5): 1 truncate cleaned up [ 468.530403][T10973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.557097][T10973] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.676596][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.297324][T11015] 9pnet_fd: p9_fd_create_unix (11015): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 469.316570][T11015] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 469.408083][T11020] loop5: detected capacity change from 0 to 256 [ 472.881147][T11062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2003'. [ 472.998081][T11062] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 474.346848][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 478.623735][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2027'. [ 479.170444][T11139] SELinux: policydb magic number 0x746c6966 does not match expected magic number 0xf97cff8c [ 479.183014][T11139] SELinux: failed to load policy [ 479.188118][ T28] kauditd_printk_skb: 354 callbacks suppressed [ 479.188134][ T28] audit: type=1400 audit(2000000002.544:2306): avc: denied { read append } for pid=11148 comm="syz.5.2030" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 479.218484][ T28] audit: type=1400 audit(2000000002.544:2307): avc: denied { open } for pid=11148 comm="syz.5.2030" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 479.243066][ T28] audit: type=1400 audit(2000000002.544:2308): avc: denied { ioctl } for pid=11148 comm="syz.5.2030" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 479.364212][T11154] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2032'. [ 479.472191][T11154] 9p: Bad value for 'wfdno' [ 479.479356][ T28] audit: type=1400 audit(2000000002.815:2309): avc: denied { append } for pid=11153 comm="syz.5.2032" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 480.019915][ T28] audit: type=1400 audit(2000000003.330:2310): avc: denied { create } for pid=11180 comm="syz.0.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 480.040282][ T28] audit: type=1400 audit(2000000003.330:2311): avc: denied { connect } for pid=11180 comm="syz.0.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 480.323445][T11192] SELinux: policydb magic number 0x746c6966 does not match expected magic number 0xf97cff8c [ 480.323971][ T28] audit: type=1400 audit(2000000003.610:2312): avc: denied { remount } for pid=11190 comm="syz.1.2045" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 480.333883][T11192] SELinux: failed to load policy [ 480.625765][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 480.698390][T11203] netlink: 'syz.4.2049': attribute type 2 has an invalid length. [ 480.706555][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2049'. [ 482.097906][ T28] audit: type=1400 audit(2000000005.266:2313): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 482.541209][T11230] random: crng reseeded on system resumption [ 482.616604][T11229] xt_hashlimit: max too large, truncated to 1048576 [ 482.625518][T11229] ipt_REJECT: TCP_RESET invalid for non-tcp [ 482.642112][ T28] audit: type=1400 audit(2000000005.687:2314): avc: denied { read write } for pid=11222 comm="syz.5.2054" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 482.714820][ T28] audit: type=1400 audit(2000000005.687:2315): avc: denied { ioctl open } for pid=11222 comm="syz.5.2054" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 483.341293][T11247] netlink: 'syz.0.2062': attribute type 4 has an invalid length. [ 483.349681][T11247] netlink: 'syz.0.2062': attribute type 4 has an invalid length. [ 483.359968][ T3380] lo speed is unknown, defaulting to 1000 [ 483.366199][ T3380] syz2: Port: 1 Link ACTIVE [ 483.408517][ T3380] lo speed is unknown, defaulting to 1000 [ 483.414361][ T4274] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.424706][ T4274] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20003 - 0 [ 483.433899][ T3380] syz2: Port: 1 Link DOWN [ 483.443305][ T4274] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 483.452631][ T4274] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.461576][ T4274] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20003 - 0 [ 483.470995][ T4274] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 483.481963][ T4274] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.529878][ T4274] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20003 - 0 [ 483.547506][ T4274] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 483.560360][ T4274] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.574670][ T4274] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20003 - 0 [ 483.592327][ T4274] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 484.434975][T11267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2067'. [ 484.594159][T11276] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 485.439393][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2078'. [ 485.448558][T11286] loop5: detected capacity change from 0 to 2048 [ 485.502255][T11286] loop5: p4 < > [ 485.581779][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2073'. [ 486.518025][T11331] loop5: detected capacity change from 0 to 256 [ 486.587657][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2090'. [ 486.623618][T11333] loop5: detected capacity change from 0 to 1024 [ 486.746078][T11333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.772158][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 486.772175][ T28] audit: type=1400 audit(2000000017.641:2319): avc: denied { remount } for pid=11332 comm="syz.5.2093" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 486.800445][T11333] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 486.823734][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.470615][T11350] netlink: 'syz.3.2099': attribute type 2 has an invalid length. [ 487.481627][T11350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2099'. [ 488.014843][T11360] loop5: detected capacity change from 0 to 4096 [ 488.022262][T11360] EXT4-fs: inline encryption not supported [ 488.051559][T11360] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 488.178456][T11376] netlink: 'syz.5.2105': attribute type 4 has an invalid length. [ 488.255082][T11376] netlink: 'syz.5.2105': attribute type 4 has an invalid length. [ 488.956120][T11421] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2107'. [ 488.997478][ T4260] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.015530][ T4260] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 489.037986][ T4260] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.065895][ T4260] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 489.197542][T11397] tipc: Enabling of bearer rejected, failed to enable media [ 489.231787][T11416] lo speed is unknown, defaulting to 1000 [ 489.237806][ T4260] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.266183][ T4260] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 489.294883][ T4260] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.315982][ T4260] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 489.393078][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 489.507309][T11431] loop5: detected capacity change from 0 to 512 [ 489.528365][T11431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.582501][T11434] lo speed is unknown, defaulting to 1000 [ 489.927423][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.077352][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 490.207876][T11445] loop5: detected capacity change from 0 to 512 [ 490.251997][T11445] EXT4-fs: Ignoring removed nomblk_io_submit option [ 490.317611][T11445] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 490.357690][T11445] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 490.472484][T11445] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.2113: inode #0: comm syz.5.2113: iget: illegal inode # [ 490.520890][T11445] loop5: lost filesystem error report for type 5 error -117 [ 490.526248][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 490.540207][ C1] EXT4-fs (loop5): initial error at time 2000000022: ext4_init_orphan_info:583 [ 490.549292][ C1] EXT4-fs (loop5): last error at time 2000000022: ext4_init_orphan_info:583 [ 490.562575][T11445] EXT4-fs (loop5): Remounting filesystem read-only [ 490.587357][T11445] EXT4-fs (loop5): get orphan inode failed [ 490.619986][T11445] EXT4-fs (loop5): mount failed [ 491.397810][ T28] audit: type=1400 audit(2000000023.969:2320): avc: denied { unlink } for pid=3305 comm="syz-executor" name="file1" dev="tmpfs" ino=2389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 491.721476][T11470] netlink: 'syz.1.2121': attribute type 4 has an invalid length. [ 491.750383][T11470] netlink: 'syz.1.2121': attribute type 4 has an invalid length. [ 491.861032][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2122'. [ 491.912468][T11478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2122'. [ 491.919242][ T4260] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 35392 - 0 [ 491.936971][ T4260] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 492.488066][ T4260] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 35392 - 0 [ 492.497357][ T4260] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 492.533464][ T4260] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 35392 - 0 [ 492.550892][ T4260] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 492.569130][ T4260] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 35392 - 0 [ 492.604184][ T4260] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 493.236515][T11489] netlink: 'syz.0.2125': attribute type 2 has an invalid length. [ 493.244665][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2125'. [ 493.492617][T11505] netlink: 'syz.4.2130': attribute type 13 has an invalid length. [ 493.784125][ T4274] netdevsim netdevsim4 ì: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.827109][ T4274] netdevsim netdevsim4 ì: unset [1, 1] type 2 family 0 port 20000 - 0 [ 493.852818][ T4274] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.870463][ T4274] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 493.887590][ T4274] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.903615][ T4274] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 493.919382][ T4274] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.935499][ T4274] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 495.104798][T11537] lo speed is unknown, defaulting to 1000 [ 495.197141][T11547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2142'. [ 495.221184][T11547] 9p: Bad value for 'wfdno' [ 496.446725][T11561] lo speed is unknown, defaulting to 1000 [ 496.563270][T11567] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2148'. [ 496.645392][T11567] pim6reg: entered allmulticast mode [ 496.659645][T11564] lo speed is unknown, defaulting to 1000 [ 497.650415][T11577] program syz.5.2151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 497.975967][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2155'. [ 500.442848][T11625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2165'. [ 500.597393][ T4281] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 500.605508][ T4281] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 500.629164][T11415] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 500.650468][T11415] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 500.725522][T11642] netlink: 'syz.1.2168': attribute type 2 has an invalid length. [ 500.734649][T11642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2168'. [ 501.035837][T11415] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 502.731524][T11659] loop5: detected capacity change from 0 to 128 [ 502.741431][T11659] FAT-fs (loop5): Directory bread(block 524322) failed [ 502.749452][T11659] FAT-fs (loop5): Directory bread(block 524323) failed [ 502.756704][T11659] FAT-fs (loop5): Directory bread(block 524324) failed [ 502.765491][T11659] FAT-fs (loop5): Directory bread(block 524325) failed [ 502.774651][T11659] FAT-fs (loop5): Directory bread(block 524326) failed [ 502.796510][T11659] FAT-fs (loop5): Directory bread(block 524327) failed [ 502.807140][T11659] FAT-fs (loop5): Directory bread(block 524328) failed [ 502.816036][T11659] FAT-fs (loop5): Directory bread(block 524329) failed [ 502.941778][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2174'. [ 502.956507][T11659] FAT-fs (loop5): FAT read failed (blocknr 128) [ 503.018864][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2174'. [ 503.048124][T11667] lo speed is unknown, defaulting to 1000 [ 503.236547][T11671] loop5: detected capacity change from 0 to 512 [ 503.258902][T11671] EXT4-fs: Ignoring removed nomblk_io_submit option [ 503.350242][T11671] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 503.436768][T11671] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 503.588639][T11671] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.2189: inode #0: comm syz.5.2189: iget: illegal inode # [ 503.625026][T11671] loop5: lost filesystem error report for type 5 error -117 [ 503.625284][T11671] EXT4-fs (loop5): Remounting filesystem read-only [ 503.632921][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 503.632945][ C1] EXT4-fs (loop5): initial error at time 2000000041: ext4_init_orphan_info:583 [ 503.632972][ C1] EXT4-fs (loop5): last error at time 2000000041: ext4_init_orphan_info:583 [ 503.722491][T11671] EXT4-fs (loop5): get orphan inode failed [ 503.997677][T11671] EXT4-fs (loop5): mount failed [ 505.001599][ T28] audit: type=1400 audit(2000000042.688:2321): avc: denied { setopt } for pid=11688 comm="syz.3.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 505.044129][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 505.055853][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2182'. [ 505.071296][ T28] audit: type=1400 audit(2000000042.688:2322): avc: denied { read } for pid=11688 comm="syz.3.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 505.195432][T11692] syz_tun (unregistering): left allmulticast mode [ 505.438837][T11706] SELinux: failed to load policy [ 505.711160][ T28] audit: type=1400 audit(2000000043.259:2323): avc: denied { kexec_image_load } for pid=11700 comm="syz.1.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 505.975446][ T28] audit: type=1400 audit(2000000043.596:2324): avc: denied { bind } for pid=11711 comm="syz.3.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 506.068009][T11712] netlink: 'syz.3.2188': attribute type 10 has an invalid length. [ 506.078677][ T28] audit: type=1400 audit(2000000043.661:2325): avc: denied { setopt } for pid=11711 comm="syz.3.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 506.656901][T11717] lo speed is unknown, defaulting to 1000 [ 506.831247][T11722] pimreg: entered allmulticast mode [ 506.849578][T11722] veth1_to_bond: entered allmulticast mode [ 506.865104][T11722] pimreg: left allmulticast mode [ 506.922177][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2194'. [ 506.963369][T11726] loop5: detected capacity change from 0 to 512 [ 507.005633][T11726] EXT4-fs: Ignoring removed nomblk_io_submit option [ 507.029455][T11727] veth1_to_bond: left allmulticast mode [ 507.040388][T11726] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 507.057234][T11726] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 507.096155][T11726] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.2195: inode #0: comm syz.5.2195: iget: illegal inode # [ 507.133903][T11726] loop5: lost filesystem error report for type 5 error -117 [ 507.134164][T11726] EXT4-fs (loop5): Remounting filesystem read-only [ 507.141790][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 507.141853][ C1] EXT4-fs (loop5): initial error at time 2000000045: ext4_init_orphan_info:583 [ 507.142303][ C1] EXT4-fs (loop5): last error at time 2000000045: ext4_init_orphan_info:583 [ 507.188205][T11726] EXT4-fs (loop5): get orphan inode failed [ 507.204553][T11726] EXT4-fs (loop5): mount failed [ 507.346670][T11734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2197'. [ 507.470598][ T28] audit: type=1326 audit(2000000045.996:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.4.2201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 507.653406][ T28] audit: type=1326 audit(2000000045.996:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.4.2201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 507.835615][ T28] audit: type=1326 audit(2000000046.005:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.4.2201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 507.994199][ T28] audit: type=1326 audit(2000000046.155:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.4.2201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 508.020269][ T28] audit: type=1326 audit(2000000046.155:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.4.2201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b463ace59 code=0x7ffc0000 [ 508.120967][T11744] loop5: detected capacity change from 0 to 512 [ 508.133105][T11744] EXT4-fs: Ignoring removed nomblk_io_submit option [ 508.165828][T11744] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 508.175436][T11744] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 508.255401][T11744] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.2210: inode #0: comm syz.5.2210: iget: illegal inode # [ 508.273935][T11744] loop5: lost filesystem error report for type 5 error -117 [ 508.281572][T11744] EXT4-fs (loop5): Remounting filesystem read-only [ 508.283331][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 508.294236][T11744] EXT4-fs (loop5): get orphan inode failed [ 508.296289][ C1] EXT4-fs (loop5): initial error at time 2000000046: ext4_init_orphan_info:583 [ 508.296319][ C1] EXT4-fs (loop5): last error at time 2000000046: ext4_init_orphan_info:583 [ 508.426797][T11744] EXT4-fs (loop5): mount failed [ 509.113365][T11773] loop5: detected capacity change from 0 to 1024 [ 509.131953][T11773] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 509.342403][T11773] loop5: detected capacity change from 0 to 512 [ 509.370657][T11773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.383594][T11773] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.622185][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.045884][T11804] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2215'. [ 512.074876][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2214'. [ 513.473499][T11828] loop5: detected capacity change from 0 to 256 [ 513.523071][T11828] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 513.948031][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 513.948049][ T28] audit: type=1400 audit(2000000053.059:2359): avc: denied { lock } for pid=11835 comm="syz.0.2225" path="socket:[31490]" dev="sockfs" ino=31490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 514.034990][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 515.044541][T11854] loop5: detected capacity change from 0 to 256 [ 515.081818][T11854] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 515.953572][T11860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.981323][T11860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.997191][T11858] xt_hashlimit: size too large, truncated to 1048576 [ 516.027367][T11860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2231'. [ 516.043701][T11867] lo speed is unknown, defaulting to 1000 [ 516.195408][T11875] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2235'. [ 516.421158][T11407] page_pool_release_retry() stalled pool shutdown: id 65, 51 inflight 60 sec [ 516.867724][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2239'. [ 517.013064][T11887] loop5: detected capacity change from 0 to 1024 [ 517.042840][T11887] EXT4-fs: Ignoring removed bh option [ 517.211257][T11887] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 517.256556][ T28] audit: type=1400 audit(2000000057.152:2360): avc: denied { write } for pid=11886 comm="syz.5.2239" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 517.538190][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 517.946405][ T28] audit: type=1400 audit(2000000058.796:2361): avc: denied { shutdown } for pid=11905 comm="syz.1.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 520.470442][T11923] lo speed is unknown, defaulting to 1000 [ 521.392247][T11926] loop5: detected capacity change from 0 to 256 [ 521.929559][T11928] lo speed is unknown, defaulting to 1000 [ 523.363992][T11954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2259'. [ 523.440507][T11958] lo speed is unknown, defaulting to 1000 [ 524.122455][ T28] audit: type=1400 audit(2000000066.202:2362): avc: denied { read } for pid=11959 comm="syz.0.2263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 524.204257][ T28] audit: type=1400 audit(2000000066.660:2363): avc: denied { listen } for pid=11966 comm="syz.4.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 524.273539][ T28] audit: type=1400 audit(2000000066.688:2364): avc: denied { read } for pid=11966 comm="syz.4.2265" path="socket:[31734]" dev="sockfs" ino=31734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 524.854646][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2270'. [ 525.010798][ T28] audit: type=1400 audit(2000000069.389:2365): avc: denied { write } for pid=11989 comm="syz.1.2272" name="cgroup.subtree_control" dev="cgroup2" ino=479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 525.042281][ T28] audit: type=1400 audit(2000000069.389:2366): avc: denied { open } for pid=11989 comm="syz.1.2272" path="" dev="cgroup2" ino=479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 525.123486][T11990] lo speed is unknown, defaulting to 1000 [ 525.488632][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2287'. [ 525.893049][T12016] lo speed is unknown, defaulting to 1000 [ 527.421571][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2285'. [ 527.571481][T12043] netlink: 'syz.1.2286': attribute type 10 has an invalid length. [ 527.590468][T12043] bond0: (slave netdevsim2): Releasing backup interface [ 528.284763][T12054] lo speed is unknown, defaulting to 1000 [ 529.032857][T12063] lo speed is unknown, defaulting to 1000 [ 530.467710][T12102] loop5: detected capacity change from 0 to 128 [ 530.668438][ T28] audit: type=1400 audit(2000000082.701:2367): avc: denied { validate_trans } for pid=12101 comm="syz.5.2308" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 531.134565][T12100] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12100 comm=syz.0.2307 [ 531.210799][T12126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.219905][T12126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.285270][ T28] audit: type=1400 audit(2000000085.280:2368): avc: denied { write } for pid=12117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.295782][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2314'. [ 531.486460][ T28] audit: type=1400 audit(2000000085.467:2369): avc: denied { write } for pid=12142 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.585203][T12147] lo speed is unknown, defaulting to 1000 [ 531.732529][ T28] audit: type=1400 audit(2000000085.701:2370): avc: denied { write } for pid=12150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.785610][ T28] audit: type=1400 audit(2000000085.748:2371): avc: denied { write } for pid=12166 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.820315][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 532.045685][T12175] loop5: detected capacity change from 0 to 512 [ 532.078734][T12175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 532.091957][T12175] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.471310][ T28] audit: type=1400 audit(2000000087.305:2372): avc: denied { write } for pid=12174 comm="syz.5.2322" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 532.777490][T12184] tipc: Can't bind to reserved service type 0 [ 533.584477][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 533.635807][T12201] loop5: detected capacity change from 0 to 256 [ 533.661820][T12201] FAT-fs (loop5): Directory bread(block 64) failed [ 533.680974][T12201] FAT-fs (loop5): Directory bread(block 65) failed [ 533.699243][T12201] FAT-fs (loop5): Directory bread(block 66) failed [ 533.709050][T12201] FAT-fs (loop5): Directory bread(block 67) failed [ 533.719524][T12201] FAT-fs (loop5): Directory bread(block 68) failed [ 533.728301][T12201] FAT-fs (loop5): Directory bread(block 69) failed [ 533.735083][T12201] FAT-fs (loop5): Directory bread(block 70) failed [ 533.742851][T12201] FAT-fs (loop5): Directory bread(block 71) failed [ 533.750446][T12201] FAT-fs (loop5): Directory bread(block 72) failed [ 533.757292][T12201] FAT-fs (loop5): Directory bread(block 73) failed [ 533.773554][T12203] lo speed is unknown, defaulting to 1000 [ 534.451052][T12207] syz.5.2328: attempt to access beyond end of device [ 534.451052][T12207] loop5: rw=2049, sector=1224, nr_sectors = 76 limit=256 [ 534.489427][ T28] audit: type=1400 audit(2000000091.224:2373): avc: denied { module_load } for pid=12200 comm="syz.5.2328" path="/207/file1/bus" dev="loop5" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 537.567440][T12235] syz.5.2335 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 537.581898][T12235] CPU: 0 UID: 0 PID: 12235 Comm: syz.5.2335 Not tainted syzkaller #0 PREEMPT(lazy) [ 537.581974][T12235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 537.581985][T12235] Call Trace: [ 537.581991][T12235] [ 537.582005][T12235] __dump_stack+0x1d/0x30 [ 537.582029][T12235] dump_stack_lvl+0x95/0xd0 [ 537.582048][T12235] dump_stack+0x15/0x1b [ 537.582112][T12235] dump_header+0x80/0x240 [ 537.582145][T12235] oom_kill_process+0x295/0x350 [ 537.582174][T12235] out_of_memory+0x97d/0xb80 [ 537.582202][T12235] try_charge_memcg+0x62f/0xa10 [ 537.582245][T12235] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 537.582269][T12235] __alloc_frozen_pages_noprof+0x18a/0x350 [ 537.582293][T12235] alloc_pages_mpol+0xb3/0x260 [ 537.582316][T12235] alloc_pages_noprof+0x8f/0x140 [ 537.582347][T12235] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 537.582399][T12235] __kvmalloc_node_noprof+0x3d4/0x640 [ 537.582418][T12235] ? futex_hash_allocate+0x190/0x9a0 [ 537.582483][T12235] ? futex_hash_allocate+0x190/0x9a0 [ 537.582512][T12235] futex_hash_allocate+0x190/0x9a0 [ 537.582575][T12235] ? cap_task_prctl+0x13f/0x6b0 [ 537.582598][T12235] futex_hash_prctl+0xd8/0xf0 [ 537.582641][T12235] __se_sys_prctl+0x4f4/0x1400 [ 537.582667][T12235] __x64_sys_prctl+0x67/0x80 [ 537.582689][T12235] x64_sys_call+0x2533/0x3020 [ 537.582773][T12235] do_syscall_64+0x12c/0x3b0 [ 537.582803][T12235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.582824][T12235] RIP: 0033:0x7f3a6dcfce59 [ 537.582852][T12235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.582967][T12235] RSP: 002b:00007f3a6c70d028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 537.582988][T12235] RAX: ffffffffffffffda RBX: 00007f3a6df76180 RCX: 00007f3a6dcfce59 [ 537.583007][T12235] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 537.583020][T12235] RBP: 00007f3a6dd92d6f R08: 0000000000000000 R09: 0000000000000000 [ 537.583102][T12235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.583114][T12235] R13: 00007f3a6df76218 R14: 00007f3a6df76180 R15: 00007ffcdefac718 [ 537.583131][T12235] [ 537.583174][T12235] memory: usage 307200kB, limit 307200kB, failcnt 3544 [ 537.807400][T12235] memory+swap: usage 309116kB, limit 9007199254740988kB, failcnt 0 [ 537.815347][T12235] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 537.822653][T12235] Memory cgroup stats for /syz5: [ 537.822842][T12235] cache 0 [ 537.830717][T12235] rss 0 [ 537.833500][T12235] shmem 0 [ 537.836590][T12235] mapped_file 0 [ 537.840054][T12235] dirty 0 [ 537.843016][T12235] writeback 4096 [ 537.846572][T12235] workingset_refault_anon 279 [ 537.851245][T12235] workingset_refault_file 0 [ 537.855870][T12235] swap 1961984 [ 537.859239][T12235] swapcached 4087808 [ 537.863136][T12235] pgpgin 171011 [ 537.866613][T12235] pgpgout 171009 [ 537.870173][T12235] pgfault 185910 [ 537.873719][T12235] pgmajfault 119 [ 537.877276][T12235] inactive_anon 8192 [ 537.881255][T12235] active_anon 0 [ 537.884754][T12235] inactive_file 0 [ 537.888544][T12235] active_file 0 [ 537.892099][T12235] unevictable 0 [ 537.895677][T12235] hierarchical_memory_limit 314572800 [ 537.901095][T12235] hierarchical_memsw_limit 9223372036854771712 [ 537.907278][T12235] total_cache 0 [ 537.910820][T12235] total_rss 0 [ 537.914101][T12235] total_shmem 0 [ 537.917563][T12235] total_mapped_file 0 [ 537.921561][T12235] total_dirty 0 [ 537.925024][T12235] total_writeback 4096 [ 537.929224][T12235] total_workingset_refault_anon 279 [ 537.934421][T12235] total_workingset_refault_file 0 [ 537.939548][T12235] total_swap 1961984 [ 537.943444][T12235] total_swapcached 4087808 [ 537.947926][T12235] total_pgpgin 171013 [ 537.951966][T12235] total_pgpgout 171011 [ 537.956082][T12235] total_pgfault 185916 [ 537.960349][T12235] total_pgmajfault 119 [ 537.964461][T12235] total_inactive_anon 8192 [ 537.968916][T12235] total_active_anon 0 [ 537.973204][T12235] total_inactive_file 0 [ 537.977382][T12235] total_active_file 0 [ 537.981452][T12235] total_unevictable 0 [ 537.985658][T12235] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2335,pid=12225,uid=0 [ 538.000448][T12235] Memory cgroup out of memory: Killed process 12225 (syz.5.2335) total-vm:96348kB, anon-rss:1236kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 538.272969][ T28] audit: type=1400 audit(2000000096.801:2374): avc: denied { create } for pid=12245 comm="syz.0.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 538.293870][T12246] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2340'. [ 538.342409][ T28] audit: type=1400 audit(2000000096.810:2375): avc: denied { write } for pid=12245 comm="syz.0.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 538.419851][T12253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12253 comm=syz.0.2340 [ 538.475843][ T28] audit: type=1400 audit(2000000097.006:2376): avc: denied { wake_alarm } for pid=12245 comm="syz.0.2340" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 538.573689][T12257] loop5: detected capacity change from 0 to 1024 [ 538.593989][T12257] EXT4-fs: test_dummy_encryption option not supported [ 540.339440][T12272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2346'. [ 540.805075][ T28] audit: type=1400 audit(2000000099.177:2377): avc: denied { node_bind } for pid=12271 comm="syz.1.2346" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 541.755680][T12300] Invalid ELF header magic: != ELF [ 541.830562][ T28] audit: type=1400 audit(2000000100.065:2378): avc: denied { module_load } for pid=12295 comm="syz.3.2352" path="/470/bus" dev="tmpfs" ino=2526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 543.628327][ T28] audit: type=1400 audit(2000000101.824:2379): avc: denied { bind } for pid=12304 comm="syz.5.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 543.653080][ T28] audit: type=1400 audit(2000000102.855:2380): avc: denied { name_bind } for pid=12304 comm="syz.5.2355" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 543.674434][ T28] audit: type=1400 audit(2000000102.855:2381): avc: denied { node_bind } for pid=12304 comm="syz.5.2355" saddr=fc02:: src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 544.264488][ T28] audit: type=1400 audit(2000000103.416:2382): avc: denied { ioctl } for pid=12316 comm="syz.4.2358" path="socket:[33969]" dev="sockfs" ino=33969 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 544.294126][T12315] loop5: detected capacity change from 0 to 512 [ 544.302955][T12315] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 544.415835][ T4274] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 544.638824][T12331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2362'. [ 544.715980][T12331] tipc: Enabling of bearer rejected, failed to enable media [ 544.864199][ T28] audit: type=1400 audit(2000000103.968:2383): avc: denied { write } for pid=12332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.955551][ T28] audit: type=1400 audit(2000000105.062:2384): avc: denied { write } for pid=12348 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.431331][T12366] Invalid ELF header magic: != ELF [ 547.150921][ T28] audit: type=1400 audit(2000000107.120:2385): avc: denied { write } for pid=12352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.276606][ T28] audit: type=1400 audit(2000000107.242:2386): avc: denied { write } for pid=12381 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.766408][T12406] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.2377'. [ 549.787465][T12411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2379'. [ 549.811690][T12411] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2379'. [ 549.817810][ T28] audit: type=1400 audit(2000000110.531:2387): avc: denied { relabelfrom } for pid=12405 comm="syz.4.2377" name="NETLINK" dev="sockfs" ino=34072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 549.845832][ T28] audit: type=1400 audit(2000000110.559:2388): avc: denied { relabelto } for pid=12405 comm="syz.4.2377" name="NETLINK" dev="sockfs" ino=34072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 551.363504][T12424] Invalid ELF header magic: != ELF [ 556.315506][T12482] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12482 comm=syz.1.2398 [ 556.504337][T12486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2399'. [ 558.931227][T12509] loop5: detected capacity change from 0 to 512 [ 558.961139][T12509] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 559.090778][T12519] loop5: detected capacity change from 0 to 512 [ 559.116158][T12519] EXT4-fs: Ignoring removed nomblk_io_submit option [ 559.146617][T12519] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 559.160570][T12519] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 559.293959][T12528] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12528 comm=syz.0.2412 [ 559.330080][T12519] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.2408: inode #0: comm syz.5.2408: iget: illegal inode # [ 559.356433][T12519] loop5: lost filesystem error report for type 5 error -117 [ 559.359144][T12519] EXT4-fs (loop5): Remounting filesystem read-only [ 559.368733][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 559.368839][ C0] EXT4-fs (loop5): initial error at time 2000000122: ext4_init_orphan_info:583 [ 559.369450][ C0] EXT4-fs (loop5): last error at time 2000000122: ext4_init_orphan_info:583 [ 559.418474][T12519] EXT4-fs (loop5): get orphan inode failed [ 559.458172][T12519] EXT4-fs (loop5): mount failed [ 559.947313][T12548] serio: Serial port ttyS3 [ 560.136558][T12553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2420'. [ 560.183858][ T28] audit: type=1400 audit(2000000123.308:2389): avc: denied { read append } for pid=12554 comm="syz.4.2422" name="cgroup.controllers" dev="cgroup2" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 560.666798][ T28] audit: type=1400 audit(2000000124.755:2390): avc: denied { create } for pid=12566 comm="syz.0.2438" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 561.148170][T12574] 9pnet_fd: p9_fd_create_unix (12574): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 561.258249][T12578] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 563.488345][T12608] netlink: 'syz.4.2440': attribute type 10 has an invalid length. [ 563.512673][T12608] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2440'. [ 564.030517][ T28] audit: type=1400 audit(2000000128.900:2391): avc: denied { connect } for pid=12609 comm="syz.1.2441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 566.006381][T12636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2448'. [ 566.034122][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 566.080311][T12639] loop5: detected capacity change from 0 to 512 [ 566.119447][T12639] EXT4-fs: Ignoring removed nobh option [ 566.154687][T12639] EXT4-fs: Ignoring removed mblk_io_submit option [ 566.181530][T12639] EXT4-fs error (device loop5): __ext4_iget:5481: inode #11: block 1: comm syz.5.2448: invalid block [ 566.211549][T12639] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 566.214477][T12639] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2448: couldn't read orphan inode 11 (err -117) [ 566.223872][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 566.223897][ C0] EXT4-fs (loop5): initial error at time 2000000130: __ext4_iget:5481: inode 11: block 1 [ 566.223948][ C0] EXT4-fs (loop5): last error at time 2000000130: __ext4_iget:5481: inode 11: block 1 [ 566.266584][T12639] loop5: lost filesystem error report for type 5 error -117 [ 566.273731][T12639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.316629][T12639] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.483496][T12648] 9pnet_fd: p9_fd_create_unix (12648): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 566.519854][T12648] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 566.615949][T12650] loop5: detected capacity change from 0 to 256 [ 566.797750][T12652] loop5: detected capacity change from 0 to 512 [ 566.818046][T12652] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 566.832438][T12652] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.2451: bad orphan inode 131083 [ 566.843329][T12652] loop5: lost filesystem error report for type 5 error -117 [ 566.845363][T12652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.887078][T12652] netlink: zone id is out of range [ 566.892622][T12652] netlink: zone id is out of range [ 566.898141][T12652] netlink: zone id is out of range [ 566.903805][T12652] netlink: zone id is out of range [ 566.909350][T12652] netlink: zone id is out of range [ 566.915758][T12652] netlink: zone id is out of range [ 566.921267][T12652] netlink: zone id is out of range [ 566.926654][T12652] netlink: zone id is out of range [ 566.932261][T12652] netlink: zone id is out of range [ 566.937791][T12656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12656 comm=syz.0.2452 [ 566.952317][T12652] netlink: zone id is out of range [ 566.987397][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.329686][T12676] netlink: 'syz.0.2458': attribute type 10 has an invalid length. [ 567.338041][T12676] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2458'. [ 568.040081][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2459'. [ 568.106981][ T28] audit: type=1400 audit(2000000132.698:2392): avc: denied { firmware_load } for pid=12679 comm="syz.0.2459" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 569.155431][T12691] loop5: detected capacity change from 0 to 512 [ 569.210887][T12691] EXT4-fs: Ignoring removed nomblk_io_submit option [ 569.235672][T12691] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 569.269000][T12691] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 569.327616][T12691] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.2463: inode #0: comm syz.5.2463: iget: illegal inode # [ 569.350686][T12691] loop5: lost filesystem error report for type 5 error -117 [ 569.350886][T12691] EXT4-fs (loop5): Remounting filesystem read-only [ 569.359373][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 569.360053][ C1] EXT4-fs (loop5): initial error at time 2000000133: ext4_init_orphan_info:583 [ 569.360586][ C1] EXT4-fs (loop5): last error at time 2000000133: ext4_init_orphan_info:583 [ 569.403506][T12691] EXT4-fs (loop5): get orphan inode failed [ 569.412820][T12691] EXT4-fs (loop5): mount failed [ 569.607572][T12706] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12706 comm=syz.4.2466 [ 569.693592][T12710] loop5: detected capacity change from 0 to 128 [ 569.800293][T12710] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 569.826950][T12710] ext4 filesystem being mounted at /233/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 569.888453][ T28] audit: type=1400 audit(2000000134.391:2393): avc: denied { write } for pid=12709 comm="syz.5.2468" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 569.931038][ T8117] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 570.918305][T12733] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.2476'. [ 573.718811][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2491'. [ 573.751733][T12780] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2491'. [ 574.219419][T12789] loop5: detected capacity change from 0 to 764 [ 574.500069][T12789] Symlink component flag not implemented [ 574.513445][T12789] Symlink component flag not implemented (116) [ 574.651440][ T28] audit: type=1400 audit(2000000140.850:2394): avc: denied { mounton } for pid=12788 comm="syz.5.2494" path="/239/file1" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 574.682946][T12789] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2494'. [ 574.820554][ T28] audit: type=1400 audit(2000000142.000:2395): avc: denied { shutdown } for pid=12804 comm="syz.5.2499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 574.881001][T12805] bond2: entered allmulticast mode [ 574.888687][T12805] 8021q: adding VLAN 0 to HW filter on device bond2 [ 578.056692][T12840] Invalid ELF header magic: != ELF [ 579.405612][T12845] loop5: detected capacity change from 0 to 512 [ 579.424256][T12845] EXT4-fs: Ignoring removed nomblk_io_submit option [ 579.767311][T12845] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 579.784503][T12845] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 579.856421][ T28] audit: type=1400 audit(2000000148.710:2396): avc: denied { mount } for pid=12851 comm=04 name="/" dev="configfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 579.902752][ T28] audit: type=1400 audit(2000000148.738:2397): avc: denied { search } for pid=12851 comm=04 name="/" dev="configfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 579.931927][ T28] audit: type=1400 audit(2000000148.738:2398): avc: denied { search } for pid=12851 comm=04 name="/" dev="configfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 579.973863][ T28] audit: type=1400 audit(2000000148.738:2399): avc: denied { read } for pid=12851 comm=04 name="/" dev="configfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 579.995599][ T28] audit: type=1400 audit(2000000148.738:2400): avc: denied { read open } for pid=12851 comm=04 path="/" dev="configfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 579.999291][T12845] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.2510: inode #0: comm syz.5.2510: iget: illegal inode # [ 580.036075][T12845] loop5: lost filesystem error report for type 5 error -117 [ 580.036248][T12845] EXT4-fs (loop5): Remounting filesystem read-only [ 580.044398][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 580.045316][ C1] EXT4-fs (loop5): initial error at time 2000000148: ext4_init_orphan_info:583 [ 580.045585][ C1] EXT4-fs (loop5): last error at time 2000000148: ext4_init_orphan_info:583 [ 580.094025][T12862] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2515'. [ 580.098875][T12845] EXT4-fs (loop5): get orphan inode failed [ 580.117787][T12845] EXT4-fs (loop5): mount failed [ 580.182388][T12869] loop5: detected capacity change from 0 to 1024 [ 580.205622][T12869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.218902][ T28] audit: type=1400 audit(2000000149.047:2401): avc: denied { write } for pid=12868 comm="syz.5.2517" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 580.676698][T12881] netlink: 'syz.1.2519': attribute type 10 has an invalid length. [ 580.685101][T12881] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2519'. [ 580.733749][T11407] page_pool_release_retry() stalled pool shutdown: id 65, 51 inflight 120 sec [ 580.786621][T12885] dns_resolver: Unsupported content type (152) [ 581.164470][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.105167][T12896] loop5: detected capacity change from 0 to 256 [ 582.141867][T12896] FAT-fs (loop5): Directory bread(block 64) failed [ 582.164031][T12896] FAT-fs (loop5): Directory bread(block 65) failed [ 582.176846][T12896] FAT-fs (loop5): Directory bread(block 66) failed [ 582.188479][T12896] FAT-fs (loop5): Directory bread(block 67) failed [ 582.195502][T12896] FAT-fs (loop5): Directory bread(block 68) failed [ 582.203422][T12896] FAT-fs (loop5): Directory bread(block 69) failed [ 582.211971][T12896] FAT-fs (loop5): Directory bread(block 70) failed [ 582.218752][T12896] FAT-fs (loop5): Directory bread(block 71) failed [ 582.251387][T12896] FAT-fs (loop5): Directory bread(block 72) failed [ 582.264736][T12896] FAT-fs (loop5): Directory bread(block 73) failed [ 583.110672][T12903] syz.5.2525: attempt to access beyond end of device [ 583.110672][T12903] loop5: rw=2049, sector=1224, nr_sectors = 76 limit=256 [ 585.200532][ T28] audit: type=1400 audit(2000000153.714:2402): avc: denied { setopt } for pid=12915 comm="syz.4.2531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 585.236152][T12919] loop5: detected capacity change from 0 to 512 [ 585.287859][T12921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2531'. [ 585.361955][T12919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.376623][T12919] ext4 filesystem being mounted at /249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 585.403722][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2531'. [ 585.509009][T12927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2533'. [ 586.427613][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2534'. [ 587.238762][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2536'. [ 588.099435][T12952] bond3: entered allmulticast mode [ 588.198187][T12952] macvlan0: entered promiscuous mode [ 588.239086][T12952] macvlan0: entered allmulticast mode [ 588.288304][T12952] bond3: (slave macvlan0): Opening slave failed [ 588.700239][T12967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2543'. [ 588.726646][T12967] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2543'. [ 588.969464][T12971] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12971 comm=syz.1.2545 [ 588.997332][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.199964][T12980] netlink: 'syz.0.2548': attribute type 1 has an invalid length. [ 589.273749][T12980] 8021q: adding VLAN 0 to HW filter on device bond5 [ 589.339427][T12982] bond5: (slave ip6erspan0): making interface the new active one [ 589.394562][T12982] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 589.421309][T12977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2547'. [ 590.254732][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2551'. [ 591.783616][T13007] loop5: detected capacity change from 0 to 8192 [ 591.909125][T13007] bond3: entered allmulticast mode [ 592.005218][T13016] macvlan0: entered promiscuous mode [ 592.021334][T13016] macvlan0: entered allmulticast mode [ 592.039503][T13016] bond3: (slave macvlan0): Opening slave failed [ 592.166091][T13021] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13021 comm=syz.3.2558 [ 592.217431][ T28] audit: type=1400 audit(2000000160.271:2403): avc: denied { read } for pid=13022 comm="syz.5.2559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 592.610424][T13031] loop5: detected capacity change from 0 to 256 [ 592.657640][T13031] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 593.739230][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2565'. [ 594.339948][T13054] loop5: detected capacity change from 0 to 512 [ 594.363533][T13054] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 594.393194][T13054] EXT4-fs (loop5): 1 orphan inode deleted [ 594.398871][T13058] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13058 comm=syz.3.2570 [ 594.403596][T13054] EXT4-fs (loop5): 1 truncate cleaned up [ 594.421126][T13054] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.452114][ T28] audit: type=1400 audit(2000000163.367:2404): avc: denied { write } for pid=13053 comm="syz.5.2568" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 594.509005][ T28] audit: type=1400 audit(2000000163.385:2405): avc: denied { mounton } for pid=13053 comm="syz.5.2568" path="/256/file0/bus" dev="loop5" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 594.570908][ T28] audit: type=1400 audit(2000000163.432:2406): avc: denied { write } for pid=13053 comm="syz.5.2568" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 594.595263][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.604993][ T28] audit: type=1400 audit(2000000163.432:2407): avc: denied { append } for pid=13053 comm="syz.5.2568" path="/256/file0/cpuset.effective_cpus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 594.629773][ T28] audit: type=1400 audit(2000000163.432:2408): avc: denied { lock } for pid=13053 comm="syz.5.2568" path="/256/file0/cpuset.effective_cpus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 594.649744][T13062] ip6t_srh: unknown srh match flags 5802 [ 594.660216][ T28] audit: type=1400 audit(2000000163.469:2409): avc: denied { unmount } for pid=8117 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 594.690777][ T28] audit: type=1400 audit(2000000163.469:2410): avc: denied { write } for pid=8117 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 594.719985][ T28] audit: type=1400 audit(2000000163.469:2411): avc: denied { unlink } for pid=8117 comm="syz-executor" name="bus" dev="loop5" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 594.743576][ T28] audit: type=1400 audit(2000000163.469:2412): avc: denied { write } for pid=8117 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 594.771110][T13068] loop5: detected capacity change from 0 to 256 [ 594.785768][T13068] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 594.884861][T13064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13064 comm=syz.4.2572 [ 594.905721][T13064] SELinux: Context : is not valid (left unmapped). [ 596.269552][T13098] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13098 comm=syz.3.2583 [ 597.288642][T13116] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2591'. [ 597.361284][T13121] dns_resolver: Unsupported content type (152) [ 597.377433][T13116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2591'. [ 597.422336][T13123] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13123 comm=syz.4.2594 [ 598.439939][T13147] loop5: detected capacity change from 0 to 256 [ 598.501947][T13147] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 598.851267][T13156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.861020][T13156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.879301][T13156] loop5: detected capacity change from 0 to 512 [ 598.881171][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 598.881203][ T28] audit: type=1400 audit(2000000168.500:2416): avc: denied { read append } for pid=13155 comm="syz.5.2606" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 598.917681][T13156] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 598.918876][ T28] audit: type=1400 audit(2000000168.500:2417): avc: denied { open } for pid=13155 comm="syz.5.2606" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 598.949303][T13156] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 598.969663][T13156] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2606: Corrupt directory, running e2fsck is recommended [ 598.980479][ T28] audit: type=1400 audit(2000000168.500:2418): avc: denied { ioctl } for pid=13155 comm="syz.5.2606" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 598.994414][T13156] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 599.017498][T13156] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.2606: corrupted in-inode xattr: e_name out of bounds [ 599.032268][T13156] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 599.033497][T13156] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2606: couldn't read orphan inode 15 (err -117) [ 599.043111][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 599.043166][ C1] EXT4-fs (loop5): initial error at time 2000000168: ext4_iget_extra_inode:5128: inode 15 [ 599.043269][ C1] EXT4-fs (loop5): last error at time 2000000168: ext4_iget_extra_inode:5128: inode 15 [ 599.083257][T13156] loop5: lost filesystem error report for type 5 error -117 [ 599.088442][T13156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.598281][T13160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13160 comm=syz.3.2607 [ 599.708196][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.043052][T13198] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13198 comm=syz.4.2618 [ 606.717947][T13250] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13250 comm=syz.3.2633 [ 606.870767][T13257] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2635'. [ 607.108830][T13264] loop5: detected capacity change from 0 to 256 [ 607.368819][T13264] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 607.872493][T13274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2639'. [ 607.941742][T13274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2639'. [ 609.555293][T13298] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13298 comm=syz.5.2646 [ 611.463228][ T28] audit: type=1400 audit(2000000187.281:2419): avc: denied { accept } for pid=13315 comm="syz.1.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 611.485132][T13327] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2650'. [ 611.648079][T13337] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2657'. [ 611.851768][T13341] xt_TCPMSS: Only works on TCP SYN packets [ 612.106624][ T28] audit: type=1400 audit(2000000188.880:2420): avc: denied { mount } for pid=13347 comm="syz.4.2659" name="/" dev="ramfs" ino=37046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 612.152654][T13323] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 612.915809][T13362] netlink: 'syz.3.2662': attribute type 1 has an invalid length. [ 612.941523][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2662'. [ 612.967997][T13362] netlink: 'syz.3.2662': attribute type 10 has an invalid length. [ 612.991511][T13365] netlink: 'syz.0.2663': attribute type 17 has an invalid length. [ 613.101579][T13365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.114181][T13365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.149864][T13365] bridge_slave_0: entered promiscuous mode [ 613.175372][T13365] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 613.186662][T13365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 613.203541][T13365] veth1_macvtap: left promiscuous mode [ 613.211239][T13365] veth0_macvtap: left promiscuous mode [ 613.219266][T13365] veth0_macvtap: entered promiscuous mode [ 613.227751][T13365] veth1_macvtap: entered promiscuous mode [ 613.243075][T13365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 613.253929][T13365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 613.264880][T13365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 613.276994][T13365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 613.290908][T13365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 613.303181][T13365] 8021q: adding VLAN 0 to HW filter on device bond2 [ 613.316010][T13365] net_ratelimit: 70 callbacks suppressed [ 613.316038][T13365] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 613.338490][T11407] lo speed is unknown, defaulting to 1000 [ 613.340601][ T49] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 613.345172][T11407] syz2: Port: 1 Link ACTIVE [ 613.352457][ T49] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 613.364131][T11388] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 613.381524][ T4281] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.420464][ T4281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.458551][ T4281] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.500191][ T4281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.524679][ T28] audit: type=1400 audit(2000000191.213:2421): avc: denied { map } for pid=13381 comm="syz.4.2669" path="socket:[37118]" dev="sockfs" ino=37118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 613.549904][T13386] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 613.556717][T13386] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 613.565753][T13386] vhci_hcd vhci_hcd.0: Device attached [ 613.576559][T13374] netem: change failed [ 613.582856][T13386] vhci_hcd vhci_hcd.0: port 0 already used [ 613.589656][ T4281] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.604679][ T4281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.616517][T13398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2672'. [ 613.633593][ T4281] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.645403][ T4281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.657367][T13398] pim6reg: left allmulticast mode [ 613.746205][T13386] loop5: detected capacity change from 0 to 512 [ 613.754971][T13386] EXT4-fs: Ignoring removed nobh option [ 613.840354][T13386] EXT4-fs (loop5): orphan cleanup on readonly fs [ 613.852086][T13386] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.5.2671: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 613.867530][T11389] usb 12-1: SetAddress Request (2) to port 0 [ 613.875356][T11389] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 613.883660][T13386] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 613.884147][T13386] EXT4-fs (loop5): Remounting filesystem read-only [ 613.893688][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 613.893728][ C0] EXT4-fs (loop5): initial error at time 2000000191: ext4_xattr_inode_update_ref:1037: inode 11 [ 613.893885][ C0] EXT4-fs (loop5): last error at time 2000000191: ext4_xattr_inode_update_ref:1037: inode 11 [ 613.929754][T13386] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.5.2671: ea_inode dec ref err=-117 [ 613.950400][T13386] EXT4-fs (loop5): 1 orphan inode deleted [ 613.962970][T13386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 614.105942][T13388] vhci_hcd: connection reset by peer [ 614.111917][ T4276] vhci_hcd vhci_hcd.5: stop threads [ 614.118702][ T4276] vhci_hcd vhci_hcd.5: release socket [ 614.148499][ T4276] vhci_hcd vhci_hcd.5: disconnect device [ 614.169030][T13414] netlink: 'syz.4.2675': attribute type 3 has an invalid length. [ 614.189078][T13414] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2675'. [ 614.397847][T11388] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 614.405493][T11388] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 614.438520][T13416] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2676'. [ 614.681940][T13416] xt_CT: You must specify a L4 protocol and not use inversions on it [ 614.762583][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.509428][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 618.447804][ T28] audit: type=1400 audit(2000000197.807:2422): avc: denied { bind } for pid=13484 comm="syz.3.2697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 618.484970][T13480] SELinux: policydb version 0 does not match my version range 15-35 [ 618.495389][T13480] SELinux: failed to load policy [ 618.933126][T13480] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 619.152176][T13494] lo speed is unknown, defaulting to 1000 [ 619.314028][T11389] usb 12-1: device descriptor read/8, error -110 [ 619.490959][T11389] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 619.531490][T11389] usb 12-1: enqueue for inactive port 0 [ 619.538840][T11389] usb 12-1: enqueue for inactive port 0 [ 619.544734][T11389] usb 12-1: enqueue for inactive port 0 [ 620.919633][ T28] audit: type=1400 audit(2000000201.088:2423): avc: denied { read } for pid=13520 comm="syz.5.2706" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 620.948775][T13531] xt_TCPMSS: Only works on TCP SYN packets [ 620.967466][T13531] loop5: detected capacity change from 0 to 512 [ 620.974703][T13531] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 620.992035][ T28] audit: type=1400 audit(2000000201.088:2424): avc: denied { open } for pid=13520 comm="syz.5.2706" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 623.309749][T11389] usb usb12-port1: attempt power cycle [ 625.369605][T13576] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2717'. [ 625.453931][ T28] audit: type=1400 audit(2000000207.356:2425): avc: denied { ioctl } for pid=13577 comm="syz.5.2722" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 625.548762][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 626.372651][T13596] loop5: detected capacity change from 0 to 1024 [ 626.414136][T13596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 626.431439][T13596] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.450668][ T28] audit: type=1400 audit(2000000208.301:2426): avc: denied { write } for pid=13595 comm="syz.5.2727" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 626.477049][T13596] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 3: comm syz.5.2727: lblock 3 mapped to illegal pblock 3 (length 1) [ 626.495148][T13596] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 626.507996][T13596] EXT4-fs (loop5): This should not happen!! Data will be lost [ 626.507996][T13596] [ 626.524103][T13596] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.2727: Freeing blocks not in datazone - block = 3, count = 1 [ 626.540905][ T28] audit: type=1400 audit(2000000208.385:2427): avc: denied { watch watch_reads } for pid=13595 comm="syz.5.2727" path="/284/file1/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 626.681170][ T8117] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 626.693769][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 626.896313][T11389] usb usb12-port1: unable to enumerate USB device [ 627.421823][T13616] loop5: detected capacity change from 0 to 256 [ 627.447322][T13616] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 628.206492][T13622] netlink: 'syz.4.2733': attribute type 17 has an invalid length. [ 628.288950][T13622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.352834][T13622] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 628.365407][T13622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 628.381040][T13622] veth1_macvtap: left promiscuous mode [ 628.389506][T13622] veth0_macvtap: left promiscuous mode [ 628.409165][T13622] veth0_macvtap: entered promiscuous mode [ 628.444820][T13622] veth1_macvtap: entered promiscuous mode [ 628.460966][T13622] 8021q: adding VLAN 0 to HW filter on device ì [ 628.471229][T13622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 628.481762][T13622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 628.532247][T13622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 628.579663][T13631] loop5: detected capacity change from 0 to 512 [ 628.624677][T13622] 8021q: adding VLAN 0 to HW filter on device bond1 [ 628.723730][T13631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.738676][T13631] ext4 filesystem being mounted at /286/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 628.932903][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 628.995523][ T4274] netdevsim netdevsim4 ì: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.004617][ T4274] netdevsim netdevsim4 ì: set [1, 1] type 2 family 0 port 20000 - 0 [ 629.017646][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.027675][ T4274] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 629.038706][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.048242][ T4274] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 629.057605][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.066651][ T4274] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 629.088070][T13636] batadv_slave_1: entered promiscuous mode [ 629.109429][T13636] netlink: 'syz.1.2747': attribute type 21 has an invalid length. [ 629.120449][T13635] batadv_slave_1: left promiscuous mode [ 629.218209][T13644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2735'. [ 629.249649][ T28] audit: type=1400 audit(2000000210.920:2428): avc: denied { mount } for pid=13640 comm="syz.1.2737" name="/" dev="rpc_pipefs" ino=38049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 629.289978][ T8117] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.422244][T13651] loop5: detected capacity change from 0 to 512 [ 629.495007][T13651] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2739'. [ 629.744907][T13651] xt_CT: You must specify a L4 protocol and not use inversions on it [ 630.029583][T13663] openvswitch: netlink: EtherType 0 is less than min 600 [ 632.989328][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 634.017999][T13705] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13705 comm=syz.1.2767 [ 634.443273][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 635.486862][T13710] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2758'. [ 637.034470][T13727] loop5: detected capacity change from 0 to 512 [ 637.099918][T13727] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 638.472863][T13741] bridge0: port 1(batadv1) entered blocking state [ 638.480267][T13741] bridge0: port 1(batadv1) entered disabled state [ 638.489790][T13741] batadv1: entered allmulticast mode [ 638.498915][T13741] batadv1: entered promiscuous mode [ 639.008186][ T4268] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 639.017631][ T4268] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 639.052297][T13750] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2772'. [ 639.064253][T13750] xt_CT: You must specify a L4 protocol and not use inversions on it [ 640.307210][T13773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2778'. [ 641.295946][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 641.298559][T13789] netlink: 'syz.3.2782': attribute type 17 has an invalid length. [ 641.375747][T13789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 641.437095][T11412] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 641.619368][T13791] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2784'. [ 641.678528][T13791] xt_CT: You must specify a L4 protocol and not use inversions on it [ 641.873340][T11412] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 641.969445][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 642.596789][T13799] geneve1: entered promiscuous mode [ 643.889462][T13831] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2796'. [ 645.244447][T13848] loop5: detected capacity change from 0 to 256 [ 645.261314][T13848] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 645.650767][T11412] page_pool_release_retry() stalled pool shutdown: id 65, 51 inflight 181 sec [ 646.360721][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2803'. [ 646.793628][ T28] audit: type=1400 audit(2000000232.329:2429): avc: denied { write } for pid=13864 comm="syz.5.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 652.935255][ T28] audit: type=1400 audit(2000000239.070:2430): avc: denied { ioctl } for pid=13911 comm="syz.5.2817" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 653.522412][T13940] dvmrp1: entered allmulticast mode [ 653.546388][T13940] dvmrp1: left allmulticast mode [ 654.078819][T13944] ================================================================== [ 654.087135][T13944] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 654.094475][T13944] [ 654.096806][T13944] read-write to 0xffffc9000befbe30 of 8 bytes by task 13949 on cpu 0: [ 654.105055][T13944] shmem_writeout+0x2f1/0x920 [ 654.109836][T13944] shrink_folio_list+0x1f52/0x2840 [ 654.114964][T13944] evict_folios+0x285f/0x3370 [ 654.119745][T13944] try_to_shrink_lruvec+0x858/0xc20 [ 654.125308][T13944] shrink_lruvec+0x256/0x1bc0 [ 654.130171][T13944] shrink_node+0x697/0x20a0 [ 654.134870][T13944] do_try_to_free_pages+0x408/0xc90 [ 654.140172][T13944] try_to_free_mem_cgroup_pages+0x201/0x420 [ 654.146075][T13944] try_charge_memcg+0x373/0xa10 [ 654.151547][T13944] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 654.157187][T13944] __alloc_frozen_pages_noprof+0x18a/0x350 [ 654.163090][T13944] alloc_pages_mpol+0xb3/0x260 [ 654.167861][T13944] alloc_pages_noprof+0x8f/0x140 [ 654.172899][T13944] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 654.178902][T13944] __kvmalloc_node_noprof+0x3d4/0x640 [ 654.184391][T13944] futex_hash_allocate+0x190/0x9a0 [ 654.189781][T13944] futex_hash_prctl+0xd8/0xf0 [ 654.194484][T13944] __se_sys_prctl+0x4f4/0x1400 [ 654.199287][T13944] __x64_sys_prctl+0x67/0x80 [ 654.203905][T13944] x64_sys_call+0x2533/0x3020 [ 654.208599][T13944] do_syscall_64+0x12c/0x3b0 [ 654.213290][T13944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.219461][T13944] [ 654.221803][T13944] read to 0xffffc9000befbe30 of 8 bytes by task 13944 on cpu 1: [ 654.229461][T13944] shmem_fallocate+0x5c0/0x920 [ 654.234333][T13944] vfs_fallocate+0x3b6/0x400 [ 654.239029][T13944] __x64_sys_fallocate+0x7a/0xd0 [ 654.243986][T13944] x64_sys_call+0x298e/0x3020 [ 654.248770][T13944] do_syscall_64+0x12c/0x3b0 [ 654.253462][T13944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.259453][T13944] [ 654.261866][T13944] value changed: 0x00000000000004a8 -> 0x00000000000004ad [ 654.269060][T13944] [ 654.271385][T13944] Reported by Kernel Concurrency Sanitizer on: [ 654.277638][T13944] CPU: 1 UID: 0 PID: 13944 Comm: syz.5.2838 Not tainted syzkaller #0 PREEMPT(lazy) [ 654.287409][T13944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 654.297660][T13944] ================================================================== [ 654.389468][T13957] netlink: 'syz.3.2829': attribute type 27 has an invalid length. [ 654.398521][T13957] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2829'. [ 655.526997][T13949] ================================================================== [ 655.535118][T13949] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 655.542927][T13949] [ 655.545242][T13949] write to 0xffffea0005438398 of 8 bytes by task 13944 on cpu 0: [ 655.552998][T13949] __filemap_remove_folio+0x201/0x2e0 [ 655.558367][T13949] filemap_remove_folio+0x6d/0x1d0 [ 655.563570][T13949] truncate_inode_folio+0x42/0x50 [ 655.568704][T13949] shmem_undo_range+0x26d/0xb10 [ 655.573561][T13949] shmem_fallocate+0x881/0x920 [ 655.578337][T13949] vfs_fallocate+0x3b6/0x400 [ 655.582949][T13949] __x64_sys_fallocate+0x7a/0xd0 [ 655.587996][T13949] x64_sys_call+0x298e/0x3020 [ 655.592756][T13949] do_syscall_64+0x12c/0x3b0 [ 655.597359][T13949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.603247][T13949] [ 655.605649][T13949] read to 0xffffea0005438398 of 8 bytes by task 13949 on cpu 1: [ 655.613444][T13949] folio_mapping+0xa1/0xe0 [ 655.618053][T13949] move_folios_to_lru+0x204/0x810 [ 655.623077][T13949] evict_folios+0x2fdb/0x3370 [ 655.627837][T13949] try_to_shrink_lruvec+0x858/0xc20 [ 655.633038][T13949] shrink_lruvec+0x256/0x1bc0 [ 655.637710][T13949] shrink_node+0x697/0x20a0 [ 655.642210][T13949] do_try_to_free_pages+0x408/0xc90 [ 655.647405][T13949] try_to_free_mem_cgroup_pages+0x201/0x420 [ 655.653447][T13949] try_charge_memcg+0x373/0xa10 [ 655.658385][T13949] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 655.663947][T13949] __alloc_frozen_pages_noprof+0x18a/0x350 [ 655.670005][T13949] alloc_pages_mpol+0xb3/0x260 [ 655.674769][T13949] alloc_pages_noprof+0x8f/0x140 [ 655.679713][T13949] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 655.685616][T13949] __kvmalloc_node_noprof+0x3d4/0x640 [ 655.691069][T13949] futex_hash_allocate+0x190/0x9a0 [ 655.696437][T13949] futex_hash_prctl+0xd8/0xf0 [ 655.701110][T13949] __se_sys_prctl+0x4f4/0x1400 [ 655.705870][T13949] __x64_sys_prctl+0x67/0x80 [ 655.710453][T13949] x64_sys_call+0x2533/0x3020 [ 655.715210][T13949] do_syscall_64+0x12c/0x3b0 [ 655.719797][T13949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.725682][T13949] [ 655.727997][T13949] value changed: 0xffff88810bd7cf50 -> 0x0000000000000000 [ 655.735214][T13949] [ 655.737645][T13949] Reported by Kernel Concurrency Sanitizer on: [ 655.743871][T13949] CPU: 1 UID: 0 PID: 13949 Comm: syz.5.2838 Not tainted syzkaller #0 PREEMPT(lazy) [ 655.753241][T13949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 655.763293][T13949] ================================================================== [ 658.390271][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!