last executing test programs: 5m21.879058332s ago: executing program 32 (id=551): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @private0, 0x9}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x7ab}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 5m21.662861339s ago: executing program 33 (id=560): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) socket(0x1d, 0x2, 0x6) socket(0x2, 0x3, 0xff) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 5m17.4065417s ago: executing program 34 (id=598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001100)=@deltclass={0x24, 0x29, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x5}, {0xc}, {0x4, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 5m8.950228911s ago: executing program 35 (id=730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000001400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) 5m8.621357421s ago: executing program 36 (id=739): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000140)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000200)=0x90) 5m5.334565142s ago: executing program 37 (id=760): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x70bd26, 0x255fdbfd, {0x0, 0x0, 0x0, 0x0, 0x155a, 0x4c901}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x24048044) 5m2.834446899s ago: executing program 38 (id=786): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1cb1, 0x1c080, 0xa, 0x20002fb}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) io_uring_enter(r0, 0x2219, 0x7721, 0x3c, 0x0, 0x0) 5m0.802479972s ago: executing program 39 (id=803): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113) r0 = open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9fe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) 4m59.479188773s ago: executing program 40 (id=826): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) 4m26.042201833s ago: executing program 41 (id=1353): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)={0xb, 0x102, 0xfffffffe, 0x80, 0xe, "00e47903000000000000000000001800"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000002680)=[&(0x7f0000000a40)={0x0, 0x0, 0x2, 0x0, 0x0, r1, &(0x7f0000000240)='\t', 0x1, 0x5fc}]) 4m4.602943423s ago: executing program 0 (id=1560): ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x400, 0xde0b, 0x3, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$hidraw(0x0, 0x0, 0xbb42) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r0, &(0x7f0000002c00)=""/4082, 0xff2, 0x7) 4m4.326252772s ago: executing program 0 (id=1563): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m3.452137559s ago: executing program 0 (id=1566): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd59", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="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", 0x222}], 0x1}}], 0x2, 0x42054) 4m3.40161204s ago: executing program 0 (id=1569): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) 4m3.306482213s ago: executing program 0 (id=1573): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0x18, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x2c}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m3.142084768s ago: executing program 0 (id=1577): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2003, @empty, 0x2}, 0x1c) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x0, 0xf}, {0x8, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r1 = syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x2) 3m47.633091776s ago: executing program 42 (id=1577): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2003, @empty, 0x2}, 0x1c) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x0, 0xf}, {0x8, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r1 = syz_clone(0x800, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x2) 3m31.885057781s ago: executing program 2 (id=1791): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000020000000000000000850000007b00000095"], &(0x7f0000002100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendto$inet6(r0, &(0x7f0000000040)="ea", 0x1, 0x4000000, 0x0, 0x0) 3m31.823669973s ago: executing program 2 (id=1784): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 3m31.482497254s ago: executing program 2 (id=1786): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m31.147707474s ago: executing program 2 (id=1792): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xacdd, 0x1000, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000000008000", [0x4, 0x4]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 3m30.430472946s ago: executing program 2 (id=1806): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@inlinecrypt}, {@nobarrier}, {@debug}, {@oldalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") r1 = syz_clone(0x2000000, 0x0, 0x46, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x3, 0x0) 3m29.31021771s ago: executing program 2 (id=1818): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m29.310103501s ago: executing program 43 (id=1818): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m0.626708363s ago: executing program 8 (id=2954): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000440)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x412, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 2m0.313092373s ago: executing program 8 (id=2957): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x20, 0x4, 0x4a, 0x2, 0x7, @remote}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) 2m0.212880616s ago: executing program 8 (id=2961): r0 = socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x82) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) 2m0.001177172s ago: executing program 8 (id=2966): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m59.941932754s ago: executing program 8 (id=2968): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002540)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xf}, {}, {0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m59.048236992s ago: executing program 8 (id=2979): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x5, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r0, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000340)=""/190, 0xbe}], 0x1}, 0x1}], 0x1, 0x20, 0x0) shutdown(r0, 0x0) 1m59.048099742s ago: executing program 44 (id=2979): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x5, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r0, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000340)=""/190, 0xbe}], 0x1}, 0x1}], 0x1, 0x20, 0x0) shutdown(r0, 0x0) 1m36.326663292s ago: executing program 1 (id=3262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) 1m36.183139596s ago: executing program 1 (id=3267): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 1m35.934898894s ago: executing program 1 (id=3272): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000cf08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x250, 0xc8, 0x8, 0x250, 0x5803, 0x340, 0x2e8, 0x2e8, 0x340, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xff], [], 'batadv0\x00', 'wlan0\x00', {0xff}, {}, 0x11, 0x1, 0x2}, 0x0, 0x230, 0x250, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'gre0\x00', {0x1, 0x1, 0x0, 0x5, 0x7ff, 0x7, 0x6, 0xfffffffd, 0x40, 0x20}, {0x100000000}}}, @common=@inet=@udp={{0x30}, {[0x4e24, 0x4e23], [0x4e23, 0x4e24]}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0xfffffffc, 0x800, 'snmp_trap\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x9, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) 1m35.75032364s ago: executing program 1 (id=3276): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x981046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) 1m35.642294193s ago: executing program 1 (id=3277): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x41, 0x788, &(0x7f0000000980)="$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") lseek(r2, 0x3, 0x0) 1m34.850688567s ago: executing program 1 (id=3288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003200)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0x5}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x6, 0x31, 0x1ff, 0xfffff371, 0x8d, 0x1002, 0x804, 0x7ff, 0x6, 0x7, 0x6, 0x6, 0xa, 0x74, 0x7, 0x8, 0x4, 0x4, 0x3, 0x9, 0x401, 0x400, 0x4, 0x8, 0x0, 0x7, 0x7fffffff, 0x9, 0x7, 0x80, 0x5, 0x4, 0x8, 0xa, 0x74ad, 0x3, 0x4, 0x4, 0x8001, 0xffff, 0x2, 0x5, 0xfffff000, 0x0, 0x200, 0x41, 0x4, 0x7, 0x7, 0x0, 0x800, 0x4da, 0x5, 0x8e, 0x1, 0x1, 0x96, 0x800, 0x4, 0x8, 0x4, 0xdf69f4, 0x56, 0xef, 0x60, 0x4, 0x9, 0x800, 0x1ff, 0x3, 0x4, 0x5, 0x1a, 0x100, 0x8, 0x3, 0xa, 0x60, 0x7, 0xce, 0xa000, 0x1, 0x1, 0x34, 0x9, 0x4, 0x5, 0x8, 0x7, 0x7f, 0x9, 0xf58, 0x5, 0x400, 0x9, 0xe, 0x3, 0x3, 0x279, 0x6, 0x9, 0x1, 0x2, 0x994, 0x2, 0x0, 0xe304, 0xc00000, 0x96, 0x8, 0xb, 0x1, 0x40000, 0x64f6, 0x3cb, 0x2, 0x3, 0xd5, 0x5, 0x1, 0x9, 0x10000, 0x401, 0x7, 0x7, 0xfffffff8, 0x3, 0x1, 0xaba8, 0xfffffff7, 0x9, 0xfffffffb, 0xffffff80, 0x1000, 0x1, 0xfff, 0x1, 0xd51, 0x5, 0x9, 0x1050c0, 0x10001, 0x8, 0x7, 0x7, 0xbf81, 0xc2b0, 0x1ff, 0x101, 0x5, 0x1, 0x2, 0x3, 0x5, 0x0, 0x7fffffff, 0xffff, 0x5, 0x4, 0x7ff, 0x891, 0x401, 0x8, 0x6, 0x40, 0x5, 0x9, 0x0, 0x1000008, 0x5, 0xebc, 0x4, 0x3, 0x9, 0xb5, 0x7, 0x6, 0x6, 0x80000000, 0x1, 0x0, 0x9, 0x9, 0x7fffffff, 0x5, 0x6, 0x4, 0x200, 0x7, 0xc, 0x7f, 0x80009, 0x1, 0x7, 0x0, 0x5, 0x3, 0x4, 0x7fff, 0x8, 0x1, 0x4, 0x1eb0, 0x0, 0x1, 0x7, 0x1000, 0x2, 0xc4, 0x7, 0x1, 0x5, 0x5, 0x0, 0x9, 0x5, 0x0, 0xda0, 0x9, 0x0, 0xffffffff, 0x8, 0x6, 0x0, 0x4, 0x2, 0xff, 0x2, 0x100, 0x7, 0x1, 0x1, 0x1, 0xb, 0x2, 0x0, 0x4, 0x10001, 0x2, 0x81, 0xfffffffd, 0x6, 0x0, 0x7, 0x7, 0x1ff, 0x1, 0x3ff, 0x7f, 0x4, 0x80000001, 0x5, 0x6, 0x3ff, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x100, 0x8, 0x9, 0x401, 0x1, 0x1, 0x7, 0x3, 0xb84d, 0x6, 0x2, 0x0, 0x8, 0x9, 0x3, 0x3, 0x2, 0xc, 0xb, 0x9a, 0x8, 0xfffffff7, 0x1, 0x74, 0x6, 0x6, 0x0, 0x401, 0x1, 0x83, 0xffff, 0x90000000, 0x3564, 0x0, 0x992, 0xd, 0x7, 0xf2, 0x2ba6, 0x8, 0x12, 0x1b5b, 0x5, 0x6, 0x800, 0x2, 0x1, 0x40, 0xfffffff8, 0x86, 0x3, 0x7, 0x3, 0x10, 0x90d4, 0x10000, 0x9, 0x5, 0x6, 0x5, 0x400, 0xa6, 0x6, 0x7, 0x7, 0x7fff, 0x81, 0x2, 0x5, 0x5, 0x40, 0xfffffff7, 0xb3, 0x2, 0x2, 0xa, 0x9, 0x10, 0x158, 0x5, 0x7fffffff, 0x7ff, 0x97, 0x8, 0x4, 0xd5, 0xffff, 0x2, 0x6, 0x9, 0x8, 0x6, 0x1, 0x401, 0x289, 0x5, 0x800, 0xf35, 0x7f, 0x9, 0x6, 0x1, 0x800, 0xd90, 0x9, 0x26b, 0x6217, 0x1009, 0x4, 0x7, 0x6, 0x2, 0x3, 0xf, 0x1, 0x4, 0x5, 0x4, 0x3, 0x7, 0x3, 0x7, 0x9, 0x400, 0x8, 0xffffff01, 0x9, 0x8, 0x7f1, 0x6, 0xc, 0x4, 0x5, 0x4, 0xb, 0x80000000, 0x7f, 0x3c, 0x5158, 0x3, 0x448, 0x9, 0x80, 0x4, 0x81, 0xf744, 0xd, 0x0, 0x3, 0x1, 0x9, 0xd3e, 0x4, 0x2, 0xd6d, 0x476cf286, 0x2, 0x105, 0xd6, 0x80000000, 0x6, 0x3, 0x6, 0x2, 0x5, 0x8, 0x0, 0x9, 0xf8, 0x0, 0x5, 0x800, 0x3, 0x3, 0xff, 0x6, 0x6, 0x6, 0x8b9d, 0x4104, 0x8000, 0x0, 0x6, 0x3, 0x56, 0x0, 0x2, 0x893e, 0x2, 0x3ff, 0x8, 0x1, 0x0, 0x80, 0x2, 0x8, 0x7f, 0x5, 0xa54, 0x2, 0x1, 0x2, 0x8, 0x97, 0x2e, 0x4023, 0x7, 0x9, 0x9, 0x20, 0x9, 0x2, 0x80000000, 0x100, 0x5, 0x1df, 0x9, 0x40e4, 0x7, 0x3, 0x609, 0x7, 0xd5c, 0xfffffffe, 0xfffffff9, 0x6, 0x19bd, 0x885, 0x7, 0x5, 0x9, 0xbe000000, 0xe9, 0x4, 0x61bf, 0x1, 0x100, 0x77, 0x81, 0x0, 0x0, 0x9, 0x8, 0x6, 0x4, 0x4, 0xfffffffc, 0x4, 0x5, 0x3, 0x0, 0x1, 0x7, 0x401, 0x69]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x4, 0x5, 0x3, 0x2, {0x2, 0x1, 0x3e, 0x0, 0xffff, 0x800}, {0x4, 0x1, 0x10, 0x9, 0x2, 0x2}, 0x7, 0x7, 0x800}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) 1m34.783022359s ago: executing program 45 (id=3288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003200)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0x5}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x6, 0x31, 0x1ff, 0xfffff371, 0x8d, 0x1002, 0x804, 0x7ff, 0x6, 0x7, 0x6, 0x6, 0xa, 0x74, 0x7, 0x8, 0x4, 0x4, 0x3, 0x9, 0x401, 0x400, 0x4, 0x8, 0x0, 0x7, 0x7fffffff, 0x9, 0x7, 0x80, 0x5, 0x4, 0x8, 0xa, 0x74ad, 0x3, 0x4, 0x4, 0x8001, 0xffff, 0x2, 0x5, 0xfffff000, 0x0, 0x200, 0x41, 0x4, 0x7, 0x7, 0x0, 0x800, 0x4da, 0x5, 0x8e, 0x1, 0x1, 0x96, 0x800, 0x4, 0x8, 0x4, 0xdf69f4, 0x56, 0xef, 0x60, 0x4, 0x9, 0x800, 0x1ff, 0x3, 0x4, 0x5, 0x1a, 0x100, 0x8, 0x3, 0xa, 0x60, 0x7, 0xce, 0xa000, 0x1, 0x1, 0x34, 0x9, 0x4, 0x5, 0x8, 0x7, 0x7f, 0x9, 0xf58, 0x5, 0x400, 0x9, 0xe, 0x3, 0x3, 0x279, 0x6, 0x9, 0x1, 0x2, 0x994, 0x2, 0x0, 0xe304, 0xc00000, 0x96, 0x8, 0xb, 0x1, 0x40000, 0x64f6, 0x3cb, 0x2, 0x3, 0xd5, 0x5, 0x1, 0x9, 0x10000, 0x401, 0x7, 0x7, 0xfffffff8, 0x3, 0x1, 0xaba8, 0xfffffff7, 0x9, 0xfffffffb, 0xffffff80, 0x1000, 0x1, 0xfff, 0x1, 0xd51, 0x5, 0x9, 0x1050c0, 0x10001, 0x8, 0x7, 0x7, 0xbf81, 0xc2b0, 0x1ff, 0x101, 0x5, 0x1, 0x2, 0x3, 0x5, 0x0, 0x7fffffff, 0xffff, 0x5, 0x4, 0x7ff, 0x891, 0x401, 0x8, 0x6, 0x40, 0x5, 0x9, 0x0, 0x1000008, 0x5, 0xebc, 0x4, 0x3, 0x9, 0xb5, 0x7, 0x6, 0x6, 0x80000000, 0x1, 0x0, 0x9, 0x9, 0x7fffffff, 0x5, 0x6, 0x4, 0x200, 0x7, 0xc, 0x7f, 0x80009, 0x1, 0x7, 0x0, 0x5, 0x3, 0x4, 0x7fff, 0x8, 0x1, 0x4, 0x1eb0, 0x0, 0x1, 0x7, 0x1000, 0x2, 0xc4, 0x7, 0x1, 0x5, 0x5, 0x0, 0x9, 0x5, 0x0, 0xda0, 0x9, 0x0, 0xffffffff, 0x8, 0x6, 0x0, 0x4, 0x2, 0xff, 0x2, 0x100, 0x7, 0x1, 0x1, 0x1, 0xb, 0x2, 0x0, 0x4, 0x10001, 0x2, 0x81, 0xfffffffd, 0x6, 0x0, 0x7, 0x7, 0x1ff, 0x1, 0x3ff, 0x7f, 0x4, 0x80000001, 0x5, 0x6, 0x3ff, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x100, 0x8, 0x9, 0x401, 0x1, 0x1, 0x7, 0x3, 0xb84d, 0x6, 0x2, 0x0, 0x8, 0x9, 0x3, 0x3, 0x2, 0xc, 0xb, 0x9a, 0x8, 0xfffffff7, 0x1, 0x74, 0x6, 0x6, 0x0, 0x401, 0x1, 0x83, 0xffff, 0x90000000, 0x3564, 0x0, 0x992, 0xd, 0x7, 0xf2, 0x2ba6, 0x8, 0x12, 0x1b5b, 0x5, 0x6, 0x800, 0x2, 0x1, 0x40, 0xfffffff8, 0x86, 0x3, 0x7, 0x3, 0x10, 0x90d4, 0x10000, 0x9, 0x5, 0x6, 0x5, 0x400, 0xa6, 0x6, 0x7, 0x7, 0x7fff, 0x81, 0x2, 0x5, 0x5, 0x40, 0xfffffff7, 0xb3, 0x2, 0x2, 0xa, 0x9, 0x10, 0x158, 0x5, 0x7fffffff, 0x7ff, 0x97, 0x8, 0x4, 0xd5, 0xffff, 0x2, 0x6, 0x9, 0x8, 0x6, 0x1, 0x401, 0x289, 0x5, 0x800, 0xf35, 0x7f, 0x9, 0x6, 0x1, 0x800, 0xd90, 0x9, 0x26b, 0x6217, 0x1009, 0x4, 0x7, 0x6, 0x2, 0x3, 0xf, 0x1, 0x4, 0x5, 0x4, 0x3, 0x7, 0x3, 0x7, 0x9, 0x400, 0x8, 0xffffff01, 0x9, 0x8, 0x7f1, 0x6, 0xc, 0x4, 0x5, 0x4, 0xb, 0x80000000, 0x7f, 0x3c, 0x5158, 0x3, 0x448, 0x9, 0x80, 0x4, 0x81, 0xf744, 0xd, 0x0, 0x3, 0x1, 0x9, 0xd3e, 0x4, 0x2, 0xd6d, 0x476cf286, 0x2, 0x105, 0xd6, 0x80000000, 0x6, 0x3, 0x6, 0x2, 0x5, 0x8, 0x0, 0x9, 0xf8, 0x0, 0x5, 0x800, 0x3, 0x3, 0xff, 0x6, 0x6, 0x6, 0x8b9d, 0x4104, 0x8000, 0x0, 0x6, 0x3, 0x56, 0x0, 0x2, 0x893e, 0x2, 0x3ff, 0x8, 0x1, 0x0, 0x80, 0x2, 0x8, 0x7f, 0x5, 0xa54, 0x2, 0x1, 0x2, 0x8, 0x97, 0x2e, 0x4023, 0x7, 0x9, 0x9, 0x20, 0x9, 0x2, 0x80000000, 0x100, 0x5, 0x1df, 0x9, 0x40e4, 0x7, 0x3, 0x609, 0x7, 0xd5c, 0xfffffffe, 0xfffffff9, 0x6, 0x19bd, 0x885, 0x7, 0x5, 0x9, 0xbe000000, 0xe9, 0x4, 0x61bf, 0x1, 0x100, 0x77, 0x81, 0x0, 0x0, 0x9, 0x8, 0x6, 0x4, 0x4, 0xfffffffc, 0x4, 0x5, 0x3, 0x0, 0x1, 0x7, 0x401, 0x69]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x4, 0x5, 0x3, 0x2, {0x2, 0x1, 0x3e, 0x0, 0xffff, 0x800}, {0x4, 0x1, 0x10, 0x9, 0x2, 0x2}, 0x7, 0x7, 0x800}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) 1m15.499617833s ago: executing program 6 (id=3553): socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0x30) syz_usb_connect$cdc_ecm(0x0, 0x5a, 0x0, 0x0) 1m14.787550096s ago: executing program 6 (id=3571): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) 1m13.765046687s ago: executing program 6 (id=3580): fsopen(&(0x7f0000000340)='overlay\x00', 0x1) write$9p(0xffffffffffffffff, &(0x7f0000000340)="d5e8", 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x5a, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000340)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) 1m13.68576149s ago: executing program 6 (id=3581): socket$inet6(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m13.3497362s ago: executing program 6 (id=3585): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0x0, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 1m12.256019313s ago: executing program 6 (id=3602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r1, 0xfdef, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="c3", 0x1}]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 56.920173946s ago: executing program 46 (id=3602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r1, 0xfdef, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="c3", 0x1}]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 3.682346576s ago: executing program 5 (id=4427): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) write$UHID_INPUT(r0, &(0x7f0000001000)={0x8, {"3ebf97c34416197ea22eac73e66d21b5048a05d8edec87c8af646bc5e5fde0f4653fd5c0151ec73de23d4024d01fb8878dbc9db497f6b4d3433cd72083cca932b76d275449482998fc459009d80249ea1b9e9395668319c99aa0a3577257d1570c0c1705a8a45aaf1f990f8ac2356be23844c7fd6fc735915485580acbc5814f867017916935c5696a27ccc3f21445912f171dce7ba8c125c641f615b1f11e39155f00c4bb0e6eff6335d86f022ae1c76a6c2c8f421dafc8d45617a88ff9ac014d8c7b94c9719af41e6cf8495439824893012022dfafe910d43eb09ea82bb382cc2499f9362aa129997515b2cc00c3f7eedfd474a6ce6b4457e236cde0d75df84906eff2f5fa6c2fb7a23e85fe088af109d37ca818b3715486fdaca7c3435b5ecfd686d8cbffbad6038f36e5e6ae9092bcd895fb0280858c1abfd01da66777127fb2d9645c67608ed8e17ec0ceb3263eac4d2301f0644dd5c04f0352613e7a50320c32742f61908c72ce9ece8a2bd9e25193754404101f15c44472d0cfa312f36f1a31cbcb2d260b7328736f5ef498fc06cf533f0c7db7ef284fe85a1507379e695c9ec9ff6cc1d78d68add67fab5c21cf87ae35691bbf562dbaa316ad1b014f5b44cc88519dc9e52ca0025750b2146564d8a58f35a4f13a50f47e7eb0d7aa64783d27c212d5bceca7c6c0ff5d0148cbfc4a5992bbf748d92a2e36197439cd1e8af70206790cab4a40478b4d50d8688cf2c4f75533793df943c14b3d1274d6e7f5e58d164017a14bc06df9ac71530498563e8af3eba6658136f276d4f56014cc555df363fe38b97c78abc7400b5f7fd32245957eb48bd2aa6bac0160638dc064fe431068170ae2ef036dc2e9c083f47edb38e51f61b62940f1de9384cb6b1f3f2127538b62cc4e0252046943ef882ba0b00dcec8c1800169484a49f63c0826506a2e249c873616b435b858c05c5ef2523dfdf1054c19365c7831c01f2d5102692de78c56d9c3cadff03c45654b19fe399323413c50872f1e6a85aacd1cd1029ad57b6a0ec4fb0e5b611cb87193f668d97b960ba26ad4fb822d9ddc71f07b3a5d2bfd0e14a12af7ab0f039e38435500378ab786452429d47fa157f01b47fcdab6196e58c1c7cd6d5b653c0b9f7794bd6ae915076dc529287689710ca2d725d5d0bcf038c11e8dd0fff74ca542d5b95702ac2ad29a326a7c105eaf79a7176857c9da11388a7820ba894ca932ff68ed7fc9387bec291b895e68edaf15852d1be1c3556110b01e1b8d2dd028c37a325bfddc18b622550be85968c1232210ab679baa5389712b2f220ed94bc60b18aa6246d29d8e2f1501d40bd603380abaffd7af245f6f722167dda6a82b17ff4b4a073354fca22b9167f8d98f23630c15095e0d6e54c5ee0d6a7692a247ddf509c2b5ce096a29bb778b7bea36aa4a77cd79ca94d2361a5f0b0f2cac89ebda745b1d4d9d0ae5d932773060802466b3194c5444a45c7c5740d8e3ee0e011fa3ae41cd5c623e8ebefd8e65b807be4fe4babb7721f836a710d71a438215cf3c497069a420f0d11a1583f4b86666fb2e2d65197ca2d7e2faaf314ca7ddb4bc57e9fdc9807ff54a8ed1676b04b519fd4b98e744733fd474aec5912c40bdd41fd6e75c87d831b33801e054fb57849dc42047fcb9da4728533a0c1a208ec464d21389632d6f2b3abdf0e80826b601cd7a864c276ea66ac74516aef64720e3c40f43c622ca3df3568a5c448fd3d8901d9786bf9bcab76a47547b4f2d8e5db5fa2c938da7fc9e34febd7c238db08d6be0dbed90d43111e90539378fc542ada22f20ee020bd42c6b1dd2d02820ac25458824baabfaa2ad1fb6caf171300b3bfb3f7060ac186565537e387fbd949160120c7887ca71cb12d0f637baf8cdc289731369da07564eb1dffa74ccb3b342ef3e04436d19bb61e5df7e1cce292a241eaf1276ffcc66a96f7dda629980f455757c5c5514480445c55a350eb8e7932e3971107f3956385ed831a9bd89b632575569335e91e28934acad0170293aa1738828849410c58ad272324ad47d0ca74c8a0bd4c2818d317b96c6f515cf29738047708b1923b94c8f5b2534ffc002d712d07e4cb1bf594c4fe61fb6aceb6df4aeef65beeebf4a39ce26b4465f0b9da53976b61ebc4fb59d526339de5147ed4ebdd29c452ba1f9a97f9458bca3c767a4c717b9783359f8bd0aacdb907c4242498789cbedb43bb9f744a9e074b36d1c029804148a63d46dc221c373c1d2fd6ecbfe07f3b554567cd33380e1da61607570593d74a9beb452d5cf1846b2318f2cbfc26e9bc7f01ee274d8ae82e963f601a15a859ed478291819bbee13d956bad959d844847e7cf9c289d2a12899c4cdb675f8e6412f6063f412af7fd16751ce61d175da6b3970a8024c2d559d7f1c86ac2e5ad9ef24b2c276df06754a144484ae594e2a3ec72cac7f56b1fb8c1083e736947736606ed7b20bfdc0cf3099e3c4522e18d0a59e23981ce025819a58b88c40694c338c2ade35bc0414154e08806b26be34fedb883245b3e30c7d9ef7cf3a4f1405bf9f17cc78c9684fe95b9dd251bdaec5aadbc9bcfa7bc3fafe0265ecc0d1162118a6627473d683aeaff035f0029baa604dff401ef07b696055c2303df68b1e586ae8cea3e52baee41c861a12f026b81dfb6d9498c1bf27013b35188259afd8e407f7bf829c188421f8654ddad5270ddc56c50f3525427e7e0e6c4b59144e6ab9eb50fd05466a8e9ca3976053bd9b78fe6cfaab0a68b942c48f7a45340481a3c0b4deafa7896463320cd3b94e46b1d14c0aec66237e29204e8350adaec57904cecb8794dc75b0c41c0c319ac96a7a64cee947e0a82eea69d6f178ee2399f7aa84820303300522508cd3830b81f22eb3f274b7213aa3bf8f77475f23868d1272483fd39e0abf762e79d373b3c6f8aed05b764bb93b85c458c4741e5a5ed429d07f44f78d881546cba91ab5af505ab5800587d69522bfada4a963f650408ea8d521166bbb90d48ecdcd9a3414782b4548f0f5af14709c8eaa423cd829e17995eed0d773a1ed917ecad3dccbb25bc5a23761aff5abfb3b935d2e026d18baf7d8bf11f1e028e3a2e76441f2cf3f49c7df4c72aca0a55482199e0e7d7df9c0c92df4b67216b85f5d3d895b0b41abd560c344125b7ccfcd89fe3d12b5f636b04fe70b56eade648f3c97e40e625da667881e51485349038d9efe836544a6f5687fe0724b1019a8439c409ae8a758cabd856a6d84f0bb74ac325250a529529f912e21888de29969e4b083c604c15ba4a735e7619c8707004a8915282905e3f69afc8c2606bce4236c46838528f40e011fb00342a024e21a26a5f56b4d44726d3b91c301b491b1b5cadfc3c2baf86b77bc664cdcd3fd9f9d0143b79a4b6b91034fc73f4a08900c7c8d3904dd949ddaab7b9f285a98aba0309b695478c8d642b7732cdbc45008126a1fd1bf420c1f375d1b56a2380c1032ff195e0b48ba04230d35d4e538b65b7a448a7f30feba95988feae7824bef2406ae791e843fc49124c3048539a74c0a1bfe6be60e20357702d00bd75cc3611bfa138ad2ba16f37baeb6bbb5f3d73c99504f4af72c9b26fda4f9b303f8dedf45bb2410fddf052963ed8cce3e282b21639f62fe1096845c79e3a0e542ff6d927948bce80dd1d14a556f0a692039b52d231be375fb4d31355aa0ac6114615b104d9c8d5157af5976a1e3319a175b87c4a428122048f5813fd04ff3606a44b6766bb2ec588a6e3a091a1bf104ced9941ca69ba95c7872316dbe1f57fbfd979bc0534a47015292c852b2f8387fa56fa89e8f392945e235fe937d85931228ade04c269d3529cc7669a5027078ebc42bc44f78ccc2d3a72cd8e2ee189b387a1cd62d666feae0192a723a93be7a097fd5522363c5f43ff7e9571c8f437f89a7bc9b5742b5163aff433d22a390bdc8e4966eb54244ddb57236fb09c3baf77d9a026583dd3ea4d163953b18a3f665c3e1f8ae50f6fe1a814e863b106b0ec2ed92833b879e326decfc4da83a52af94f0cc4e565871ded8f880f2df34a7fbd692877182097627a882747eb375db50092c4187ac6b29f5e02a92f19800ce6ba0b60584df788018d54472989bab916fe12281f2d2980fd5969ddb5173fc65bec226eb30761c23a7e63272a19b3751b5b95388249e57a576b68d84d7babd60b318e982e710cd81aa5fcf3b4e824205ebc124d52a6171fedb6814ed8f316110792cdf38a1fec1ee16ce068a41774474f2676278c425663ae2fc23e5f6be10153e3a1a32da6efec494615e9470b22d5e47b6ac646c0ca36aacd5e8f9414f5c5a00ab136b1ca37fe7415d3cc1baf0002cd0f0cb62d2b9c1fe21c924026150d0b133e14d452ce7d257a57739068d4acc342e1347263acf45a29c9e53fa1c83203c23bb6b4d90b072528468aab297e55ae25db68c855fad1c59c671a0af0fa4b01ad5040d252067f2264e06dd09971bfbed5b39dfdf31a64217e216e6daf7f5148f32552422ee854be1cbbea46ead9bc86b6f27e360a15d9a37061ce180a3d6f6d8fe16ceb5e334ecf332c80d3dde4d5ba0914e2f440aacb4f593caa8c4bd8d5292f84b2b698ba0cd24ea34f38327984b7d027efbb8cdbda55d98724678bbaf3663cbee65fa138579b182e44eb5ae4871094ebedf8ada79fe37eed9439393032fb3f159df5944b933419fd5a25f62e652cdd2ec6f3e2f6b1b4ba91504689a9ddf18c7096ae838001f30e801e24e759ce48f2b3d602398504b984ce56f235da9d910b3b7bb04c19111fbb9d69d97373f26b0faec9f02bb45f3b7303adbe0aea0a815dada518febe28b5bfe98d536ea2848a77f99e505d4715df041cf546344a7860ab048cb621bb8447585cf1333833148c4232322727846f629b9c43e964ee142c44201af54e3abd4c2e088915f3319b147e12b5856614f5ee1d35c5affd5de1cc7404854b324822ccdcbd83c4060681fc2731bcc1d3b24b0a2bb881044f623fe093f296a2b2fe9e14c43cbe5e714f201eb1d1f7689986a2bef67106925706ba925213840c79aa7faa897bd159115d6081b74152f09bbb6b70faab4c33190c4f7ccf9b124113df15a3119af9f46e0de12d28029822f0d9f3a022d0ce7d90d85b223c9456f3b919614dff9aa79dfd58b0821c65f1c281165fcbdd0a2d0dee79499275c0d57bca53a2d35146cfb96d1aecc7905a53d2348ace1ac24229a3786bbd97c88cddf12eda7c802677bd6e2ae11dcb51ef76e0531605be013d9c930b7a36e6b808e70b323eb997b926476d57ca9c49f7bcf870e02ff049a348138a004e433874bee5078bd5375ace8b166f21ad0cc77001f278559669a0fe3b1b3343675f75117983dbba387057c6060f6bedfbf8f6d31228a0c89c921e869244b88be0acaff02ebd45abd845e5eb8754d4773cb0c3a73507c4b734e9d8e733f82d21f686801669f7fbbaa88dba2449d37eacadc41fa4af46af1cee24ef2a460275bf61642ddc0e52495b58650bce77bc295227e8f00e1a9cf49b490ce02b93c3d0ce3043ff97aa6b960e145a79b93720232c539616c13cc4c8628c186d64a19d59533b1c79383708e762468ddc9ae07710fd46b4b04b9e9f07762383f15e7d79e338c8821906cd9fc3097435b14b7b070016fde5468581f912cf917a2c9b56d44257624be9e7acc5e73f18d5b033309b722c84d8cb32030f324e91a43b77c3d15ab9aa0db7dbfcc82423d9edc1fdef7e537667e391a75390bb60299b1be409ff744a02284d16fe177", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000600) 2.828961842s ago: executing program 5 (id=4443): socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000884000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000150000/0x1000)=nil, &(0x7f0000b21000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f000069c000/0x2000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000200)}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\''], 0x50) io_uring_enter(r0, 0x2219, 0x1adf, 0x16, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 1.9413158s ago: executing program 5 (id=4456): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec774000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) 1.738099097s ago: executing program 5 (id=4458): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0xe}, {}, {0x16, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.649046829s ago: executing program 5 (id=4461): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r2 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) sendfile(r2, r2, 0x0, 0x2000000000006) 1.572649221s ago: executing program 5 (id=4465): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) fsopen(0x0, 0x0) 1.246735191s ago: executing program 4 (id=4470): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @local, 0x97}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c) 1.204533493s ago: executing program 4 (id=4472): socket$l2tp6(0xa, 0x2, 0x73) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\r'], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc07e, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x50) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x20) 1.158379454s ago: executing program 4 (id=4474): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountstats\x00') pread64(r0, &(0x7f00000024c0)=""/239, 0xef, 0x35) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r2, 0x30, 0x0}, 0x10) 1.054846027s ago: executing program 4 (id=4479): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004041) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.012315349s ago: executing program 4 (id=4482): unshare(0x6a040000) unshare(0x40000) syz_usb_disconnect(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x8b}, 0x15, 0x3, 'rr\x00', 0x11, 0x80, 0x8}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e21, 0x3, 'sh\x00', 0x11, 0x81, 0x1e}, {@multicast2, 0x4e25, 0x0, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6b74000000000000000000000000000000000000000000000000000000000004"], &(0x7f0000000080)=0x2c) 904.066772ms ago: executing program 7 (id=4486): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 870.563983ms ago: executing program 7 (id=4487): r0 = io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x80001f8a, 0x10000, 0x3, 0x1aa}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3, 0x8, 0x5, 0xa, 0x101, 0x10, 0x597, 0x2, 0xfffffffb, 0x1, 0xd, 0x16, 0xb, 0x2, 0x7f56, 0xffffffff}}, @TCA_GRED_STAB={0x104, 0x2, "d54980019a3af63407c996657f98b063bd003e6d8cc514fc91d30f46949c10e978cbb3ab218cb197b62f3be01567f5d3c6d73dfb5425f186be0f9f29d8e627e397ace37ee4568f12bc3aa442c977284aa6eaa9eefc2d1ebbda6a8de559bb7b3c4efeb7cac921c20a916d934f354a8b762fb4ddcccdf2dec858fe058f5657e3f1a07fdb064ab734cdf24dc6fa6491024102b196d9617206b98ba44f37ba9a1ad865bb9bc30acff0465d6922c8ac1af3b77da7bbb7ec2341be38703c282f6b0755dd103f848dc92c1d0c29c38208bfd8d48d8d930ad89be311a03134bb71fa7152eb0821940d49f65bbab3cce07639d33a1e5726fe43324355b057c95dadc6eae5"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x40098}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 734.542637ms ago: executing program 7 (id=4491): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000380)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 732.644047ms ago: executing program 9 (id=4500): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) open(0x0, 0x0, 0x2) open(0x0, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0x1, 0x58c, &(0x7f0000001540)="$eJzs3U9sHFcZAPBvdh0ndU3ThEZqyiGBRKR/lNjtSk4DB8IBDhT1UiRUqRysZGOHrJNgu6I2F/fGiQoEAlRRNeKABBKxxAE4VBQkDkgECYEQFmolEAf+tIBwD7QBFs3urLPxzppt7Xjczu8nbfbNm+d87+3me9p9b+IJoLQOp38kEaMRcS0i9rYPb25wuP303dry9NXa8nQSzeZjf09a7a7Ulqc7TTs/d3tELEXE3RHxk3MRZ3b1xp1bWLww2WjUZ7PjsfmZy2NzC4vHz89MTtWn6hdrtYdPTUycOjkx/iZGk2x49pOXX9n/2+lHp54/9O/HT858829JnG6NO9aNYyvl9WgoiTh9K4IVoJqOJyJGBmx/oP7MC7e4Swzoy/tXxtL37q6IONrK/71Rbb2bER967ol/7o0PXu/3s9dWnvvzdvYVANg6zdTujU9329NbBbxNVSL97p9UTkREu1ypnDjR/g5/V4xUGpfm5h84d+nJi2fbawR3xq7KufON+ni2VnBn7ErS4wdb5RvHD607rkXEvoj4fPW21vGJM5caZ7d1pgM6RiNe/t5nzgzfvi7//1Rt5z/wzpXm/69/+oMfpeXXqkX3BthOaf5/+7WZR0L+Q+nIfygv+Q/lsT7F5T+Ul/yH8pL/UF7yH8pL/kN5yX8oL/kP5dWd/9IfymnfoRdXkohY+sBtrUdqODuX82t7gHeQZjPxP/qhpHz2h/IaKroDQGHWvuN/qdh+AMXZ+DdnR+zpd+Ly1vcF2B6VojsAFObYQft/UFbW/6G8rP9DefmMD1j/h/Kx/g/lNdrn/l/v6rp313hE3BERP6/u2t251xfw9jUa8fKz177/RETlL0n2+f/Y3qOjk6+89OPudsPJv1pbBMMR8dlnH/vqU5Pz87MPpvX/WKuf/1pW/1BRowEG0cnTTh4D5TW3sHhhstGozyq8qcIbzR3RDYUdW+isqO+U/uQXOvPAldrydOexXXPPM/dHvPrh9kUIadyr2aN9dihbm9zT2qMcWU1uulYh2YK9yy8cj1h6OiLuzht/kt3vvL3zMbJa7Yn/7uw5fRzM1k/SNgcGjF+9Y3Px7+mKf6gr/nsGjL/yiQEb3iL7vlNs/Od/l73+40NDea//Zq+N2f9/zj/yrU0G2KQ//qHY+EcPFRv/K5ciXkznn/G8/Kukabm287l+/hntuk76rfrcsRvz39We+a+yNv9V+8x/hweM87PH65/Kq6/+IuLVpyPuyY3fibenFWtktdIT/0jX/HPvBvH/+vFfXcirP/1SRPNKxLHIj98da2x+5vLY3MLi8fMzk1P1qfrFWu3hUxMTp05OjI+11qjHOivVvR69fuAjefVHvtEe/0if+J3x93v9mxuMudvi1z89+t6c+l8ebMe/90j++78/i99+/Yd64r8ve07/nfwnu5Y3bfN6ROzO6u+LiB++sO/+vH597Ho7/tk+46/cFL93/A8MOP4v/v6/T+bVP/XRAf8CAGBL9V8aKLpnAADAVtuOncaixwjkG1kdju5t4GSpa19h6ca+Qlr/era/UF2KeCPbY0jr78t2ydJy7kYDsOMcWHz/b4ruAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDZzS0sXphsNOqzc0X3BNhu/wsAAP//NOr9bw==") fstat(r0, &(0x7f00000006c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)={0x14, r2, 0xa8152f1cd40047d5, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 474.362325ms ago: executing program 9 (id=4492): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000200)=',', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 453.703586ms ago: executing program 9 (id=4493): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x10ff2, 0x5, 0x98, 0x6, 0x2, 0x1, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r3, r4, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r5, r6, 0x4, r3}, 0x10) 370.534628ms ago: executing program 3 (id=4494): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000040)=0x6, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_batadv\x00', 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x5, @private2, 0x1}], 0x1c) 370.117948ms ago: executing program 3 (id=4495): socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x1, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 304.57488ms ago: executing program 3 (id=4496): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000030000000000000000000000850000006d0000001801006e4c00000000000000002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000d1ba850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x3, 0x0, 0x0, 0x7}, 0x94) 234.597223ms ago: executing program 3 (id=4497): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x31, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 204.188144ms ago: executing program 9 (id=4498): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x4, 0x0, &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) unshare(0x6020400) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8012}, 0x20008804) 178.297944ms ago: executing program 7 (id=4499): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r3, 0xcf}, 0x8) 130.251926ms ago: executing program 3 (id=4501): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 129.793416ms ago: executing program 7 (id=4502): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) ioctl$PPPIOCSMRU(r4, 0x40047452, 0x0) 66.683718ms ago: executing program 9 (id=4503): ioperm(0x7, 0x81, 0xfffffffffffffffe) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0xc}, 0x18) r0 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xad511, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0xa88, 0x8406, 0x6, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x165, 0x1700) flock(0xffffffffffffffff, 0x2) timer_getoverrun(r1) 66.282058ms ago: executing program 3 (id=4504): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a9968100000005"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.49661ms ago: executing program 7 (id=4505): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x83, &(0x7f0000001000)={r3}, 0x8) 5.200239ms ago: executing program 9 (id=4506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x147) write(r2, &(0x7f0000000340)="6b53acc1a6df", 0x6) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 0s ago: executing program 4 (id=4507): r0 = getpid() syz_pidfd_open(r0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x20000000101}, 0x0, 0xc8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x2284, &(0x7f00000003c0)) kernel console output (not intermixed with test programs): 306.317577][T15882] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 306.334288][T15882] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 306.357617][T15882] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 306.398050][T15882] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 306.536879][T15882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.567636][T15882] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.590019][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.598427][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.637028][T16084] netlink: 'syz.7.3331': attribute type 1 has an invalid length. [ 306.655361][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.667011][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.718954][T16085] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3331'. [ 306.757094][T16084] bond0: entered promiscuous mode [ 306.761386][T16085] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3331'. [ 306.782000][ T28] audit: type=1400 audit(1782116110.407:1577): avc: denied { write } for pid=16071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.784832][T16084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.847274][T15882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.982952][T16094] bond0: (slave bridge3): making interface the new active one [ 307.043160][T16094] bridge3: entered promiscuous mode [ 307.055210][T16094] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 307.243204][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 307.243224][ T28] audit: type=1400 audit(1782116110.867:1579): avc: denied { write } for pid=16099 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.381517][ T28] audit: type=1400 audit(1782116110.997:1580): avc: denied { write } for pid=16122 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.591055][T15882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.670921][ T28] audit: type=1400 audit(1782116111.287:1581): avc: denied { write } for pid=16127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.759781][ T28] audit: type=1400 audit(1782116111.377:1582): avc: denied { write } for pid=16146 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.170103][T15882] veth0_vlan: entered promiscuous mode [ 308.200941][ T28] audit: type=1400 audit(1782116111.817:1583): avc: denied { write } for pid=16153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.225530][T15882] veth1_vlan: entered promiscuous mode [ 308.315472][T15882] veth0_macvtap: entered promiscuous mode [ 308.340207][T15882] veth1_macvtap: entered promiscuous mode [ 308.349295][ T28] audit: type=1400 audit(1782116111.957:1584): avc: denied { write } for pid=16175 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.406477][T15882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.455155][T15882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.522162][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.546749][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.597628][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.633235][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.684393][ T28] audit: type=1400 audit(1782116112.307:1585): avc: denied { write } for pid=16177 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.802914][ T28] audit: type=1400 audit(1782116112.417:1586): avc: denied { write } for pid=16195 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.164321][ T28] audit: type=1400 audit(1782116112.777:1587): avc: denied { write } for pid=16202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.248610][ T28] audit: type=1400 audit(1782116112.867:1588): avc: denied { write } for pid=16232 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.785025][T16276] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3359'. [ 310.386193][T16317] loop9: detected capacity change from 0 to 128 [ 311.000958][T16370] loop7: detected capacity change from 0 to 512 [ 311.051365][T16370] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 311.134002][T16370] EXT4-fs (loop7): 1 truncate cleaned up [ 311.147422][T16370] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.361687][T10300] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.703369][T16405] netlink: 'syz.4.3389': attribute type 1 has an invalid length. [ 311.757488][T16405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 311.790238][T16411] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 311.793540][T16407] Invalid option length (287) for dns_resolver key [ 311.832674][T16405] netlink: 'syz.4.3389': attribute type 10 has an invalid length. [ 311.843430][T16405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3389'. [ 311.854218][T16405] dummy0: entered promiscuous mode [ 311.862656][T10197] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 311.881413][T16405] bond2: (slave dummy0): Removing an active aggregator [ 311.881471][T10197] bond2: (slave dummy0): link status up again after 0 ms [ 311.899807][T16405] bond2: (slave dummy0): Releasing backup interface [ 312.145180][T16428] loop5: detected capacity change from 0 to 128 [ 312.164366][T16428] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 312.186000][T16428] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 312.424217][T15882] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 312.464987][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 312.465452][ T28] audit: type=1400 audit(1782116116.087:1605): avc: denied { read } for pid=16436 comm="syz.7.3400" path="socket:[50976]" dev="sockfs" ino=50976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 312.541662][ T28] audit: type=1400 audit(1782116116.147:1606): avc: denied { create } for pid=16440 comm="syz.9.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 312.577385][ T28] audit: type=1400 audit(1782116116.157:1607): avc: denied { ioctl } for pid=16440 comm="syz.9.3402" path="socket:[49902]" dev="sockfs" ino=49902 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 312.785588][T16457] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3409'. [ 312.813802][T16457] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3409'. [ 312.859318][T16464] loop9: detected capacity change from 0 to 128 [ 312.873718][T16464] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 312.889436][T16464] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.914874][ T28] audit: type=1400 audit(1782116116.527:1608): avc: denied { write } for pid=16463 comm="syz.9.3413" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.942929][T14895] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 312.994221][ T28] audit: type=1400 audit(1782116116.537:1609): avc: denied { write } for pid=16463 comm="syz.9.3413" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 313.031205][ T28] audit: type=1400 audit(1782116116.597:1610): avc: denied { read } for pid=16470 comm="syz.7.3415" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 313.075666][ T28] audit: type=1400 audit(1782116116.597:1611): avc: denied { open } for pid=16470 comm="syz.7.3415" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 313.120801][ T28] audit: type=1400 audit(1782116116.607:1612): avc: denied { ioctl } for pid=16470 comm="syz.7.3415" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 313.171630][T16478] program syz.6.3418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.218791][T16480] loop9: detected capacity change from 0 to 1024 [ 313.276547][T16480] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 313.322078][T16480] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.338644][ T28] audit: type=1400 audit(1782116116.967:1613): avc: denied { write } for pid=16479 comm="syz.9.3419" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 313.421546][T14895] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.752510][T16498] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3425'. [ 313.833931][T16501] loop5: detected capacity change from 0 to 4096 [ 313.871257][T16501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.933301][ T28] audit: type=1400 audit(1782116117.557:1614): avc: denied { write } for pid=16500 comm="syz.5.3427" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.110856][T15882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.229563][T16522] netlink: 'syz.7.3433': attribute type 1 has an invalid length. [ 314.250310][T16522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.294926][T16522] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 314.323682][T16522] netlink: 'syz.7.3433': attribute type 10 has an invalid length. [ 314.344745][T16522] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3433'. [ 314.362198][ T49] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 314.379739][T16522] dummy0: entered promiscuous mode [ 314.427103][T16522] bond1: (slave dummy0): Removing an active aggregator [ 314.448002][T16522] bond1: (slave dummy0): Releasing backup interface [ 315.364599][T16559] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3447'. [ 315.473733][T16561] syzkaller0: entered promiscuous mode [ 315.496687][T16561] syzkaller0: entered allmulticast mode [ 315.913172][T16583] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3457'. [ 316.329500][T16601] loop7: detected capacity change from 0 to 8192 [ 316.384584][T16601] loop7: p1 p2 p3 [ 316.410227][T16601] loop7: p1 size 67111168 extends beyond EOD, truncated [ 316.426291][T16601] loop7: p2 size 8388608 extends beyond EOD, truncated [ 316.472941][T16601] loop7: p3 start 4294901760 is beyond EOD, truncated [ 316.523940][ T2985] loop7: p1 p2 p3 [ 316.535672][ T2985] loop7: p1 size 67111168 extends beyond EOD, truncated [ 316.558303][ T2985] loop7: p2 size 8388608 extends beyond EOD, truncated [ 316.583759][ T2985] loop7: p3 start 4294901760 is beyond EOD, truncated [ 316.646167][T16639] loop9: detected capacity change from 0 to 512 [ 316.727698][T16639] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.754034][T16639] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.927431][T10532] udevd[10532]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 316.942247][T10502] udevd[10502]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 317.420881][T14895] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.466347][T16687] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3495'. [ 317.485444][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 317.485464][ T28] audit: type=1400 audit(1782116121.107:1649): avc: denied { create } for pid=16688 comm="syz.9.3494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 317.515324][T16687] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3495'. [ 317.539020][T16691] netlink: 'syz.9.3496': attribute type 1 has an invalid length. [ 317.540908][ T28] audit: type=1400 audit(1782116121.137:1650): avc: denied { connect } for pid=16688 comm="syz.9.3494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 317.561910][T16691] netlink: 64851 bytes leftover after parsing attributes in process `syz.9.3496'. [ 317.991171][T16713] loop7: detected capacity change from 0 to 256 [ 318.071773][T16713] FAT-fs (loop7): data area starts beyond volume (32 > 0) [ 318.097247][T16713] FAT-fs (loop7): Can't find a valid FAT filesystem [ 318.514980][T16740] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 318.538864][ T28] audit: type=1400 audit(1782116122.157:1651): avc: denied { relabelto } for pid=16739 comm="syz.9.3517" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 318.595485][ T28] audit: type=1400 audit(1782116122.157:1652): avc: denied { associate } for pid=16739 comm="syz.9.3517" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=503 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ssh_exec_t:s0" [ 318.697101][ T28] audit: type=1400 audit(1782116122.157:1653): avc: denied { read } for pid=16739 comm="syz.9.3517" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 318.790479][ T28] audit: type=1400 audit(1782116122.157:1654): avc: denied { open } for pid=16739 comm="syz.9.3517" path="/94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 318.820017][T16749] netlink: 'syz.7.3519': attribute type 10 has an invalid length. [ 318.901813][ T28] audit: type=1400 audit(1782116122.267:1655): avc: denied { unlink } for pid=14895 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 319.002225][T16749] bond0 (unregistering): (slave bridge3): Releasing backup interface [ 319.040433][T16749] bridge3: left promiscuous mode [ 319.073592][T16749] bond0 (unregistering): Released all slaves [ 319.272349][ T28] audit: type=1400 audit(1782116122.857:1656): avc: denied { setattr } for pid=16753 comm="syz.5.3523" name="/" dev="configfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 319.489082][T16788] loop5: detected capacity change from 0 to 128 [ 319.596609][T16788] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 319.612844][T16788] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 319.663396][T15882] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.853796][T16799] netlink: 'syz.6.3538': attribute type 1 has an invalid length. [ 319.873751][T16799] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.893630][T16799] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 319.916509][T16799] bond2: entered promiscuous mode [ 319.924311][T16799] bond2: entered allmulticast mode [ 320.136187][ T28] audit: type=1326 audit(1782116123.757:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16811 comm="syz.7.3543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4b808ce59 code=0x7ffc0000 [ 320.247247][ T28] audit: type=1326 audit(1782116123.757:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16811 comm="syz.7.3543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4b808ce59 code=0x7ffc0000 [ 320.521587][T16827] IPv6: NLM_F_CREATE should be specified when creating new route [ 320.537856][T16827] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.546502][T16827] IPv6: NLM_F_CREATE should be set when creating new route [ 321.361055][T16910] netlink: 'syz.4.3567': attribute type 10 has an invalid length. [ 321.389696][T16910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.404685][T16910] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 321.438677][T16916] netlink: 2024 bytes leftover after parsing attributes in process `syz.9.3570'. [ 321.448224][T16910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.449989][T16916] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3570'. [ 321.487161][T16910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.498038][T16910] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 321.518889][T16910] bond0 (unregistering): Released all slaves [ 321.969735][T16888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.057652][T16923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=16923 comm=syz.5.3573 [ 322.162320][T16925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.192870][T16925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.768315][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 322.768334][ T28] audit: type=1400 audit(1782116126.387:1691): avc: denied { connect } for pid=16938 comm="syz.4.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 322.950196][ T28] audit: type=1400 audit(1782116126.567:1692): avc: denied { remount } for pid=16950 comm="syz.6.3585" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 323.058540][ T28] audit: type=1400 audit(1782116126.677:1693): avc: denied { write } for pid=16944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.151293][ T28] audit: type=1400 audit(1782116126.757:1694): avc: denied { write } for pid=16961 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.324422][T16967] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.333756][T16967] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.468430][T16967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.509536][T16967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.665222][ T2196] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.683338][ T2196] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.738630][ T2196] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.783036][ T55] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.910197][T16986] bridge_slave_0: left allmulticast mode [ 323.938964][T16986] bridge_slave_0: left promiscuous mode [ 323.958509][T16986] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.995434][T16986] bridge_slave_1: left allmulticast mode [ 324.016557][T16986] bridge_slave_1: left promiscuous mode [ 324.030184][T16986] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.091485][T16986] team0: Port device team_slave_0 removed [ 324.252947][T16986] team0: Port device team_slave_1 removed [ 324.260368][T16986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.270847][T16986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.300348][T16986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.343011][T16986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.387936][T16986] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 325.141683][T17014] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 325.259360][T17016] loop5: detected capacity change from 0 to 1024 [ 325.299700][T17016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.332808][ T28] audit: type=1400 audit(1782116128.947:1695): avc: denied { write } for pid=17015 comm="syz.5.3609" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 325.449714][T15882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.647209][T17033] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3614'. [ 325.689833][T17033] netlink: 'syz.4.3614': attribute type 7 has an invalid length. [ 325.702951][T17036] loop7: detected capacity change from 0 to 128 [ 325.722093][T17033] netlink: 'syz.4.3614': attribute type 8 has an invalid length. [ 325.728094][T17036] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 325.741789][T17033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3614'. [ 325.754045][T17036] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 325.852016][T10300] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 326.258822][T17064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3628'. [ 326.282682][T17064] netlink: 'syz.4.3628': attribute type 7 has an invalid length. [ 326.310116][T17065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3628'. [ 326.313731][T17064] netlink: 'syz.4.3628': attribute type 8 has an invalid length. [ 326.338565][T17065] netlink: 'syz.4.3628': attribute type 7 has an invalid length. [ 326.374218][T17065] netlink: 'syz.4.3628': attribute type 8 has an invalid length. [ 326.403252][T17064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3628'. [ 326.411236][T17065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3628'. [ 326.474364][T17064] erspan0: entered promiscuous mode [ 326.504576][T17064] gretap0: entered promiscuous mode [ 326.535964][T17064] erspan0: left promiscuous mode [ 326.569910][T17064] gretap0: left promiscuous mode [ 326.620258][T17065] erspan0: entered promiscuous mode [ 326.644711][T17065] gretap0: entered promiscuous mode [ 326.671066][T17070] loop9: detected capacity change from 0 to 512 [ 326.702152][T17065] erspan0: left promiscuous mode [ 326.767925][T17065] gretap0: left promiscuous mode [ 326.782825][T17070] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 326.838656][T17070] ext4 filesystem being mounted at /121/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.925045][T17070] Quota error (device loop9): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 326.989070][T17070] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 327.039383][T17070] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.3630: Failed to acquire dquot type 0 [ 327.106332][T17070] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 327.268399][T17079] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3632'. [ 327.391225][T17084] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3634'. [ 327.411174][T17086] loop5: detected capacity change from 0 to 256 [ 327.650042][T17096] loop7: detected capacity change from 0 to 1024 [ 327.680852][T17096] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 327.726279][T17096] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 327.784252][T17096] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 327.814997][T17096] EXT4-fs (loop7): filesystem has both journal inode and journal device! [ 327.879995][T17100] bridge_slave_0: left allmulticast mode [ 327.890368][T17106] loop7: detected capacity change from 0 to 512 [ 327.898083][T17100] bridge_slave_0: left promiscuous mode [ 327.914164][T17106] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 327.942075][T17100] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.965926][T17106] EXT4-fs (loop7): 1 truncate cleaned up [ 327.978043][T17106] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.979173][T17100] bridge_slave_1: left allmulticast mode [ 327.997160][ T28] audit: type=1400 audit(1782116131.619:1696): avc: denied { write } for pid=17105 comm="syz.7.3644" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.024530][ T28] audit: type=1400 audit(1782116131.649:1697): avc: denied { write } for pid=17105 comm="syz.7.3644" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.056699][ T28] audit: type=1400 audit(1782116131.649:1698): avc: denied { create } for pid=17105 comm="syz.7.3644" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 328.078558][T17100] bridge_slave_1: left promiscuous mode [ 328.128777][T17100] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.155210][T10300] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.203748][T17100] bond0: (slave bond_slave_0): Releasing backup interface [ 328.239673][T17100] bond0: (slave bond_slave_1): Releasing backup interface [ 328.294991][T17100] team0: Port device team_slave_0 removed [ 328.325925][T17100] team0: Port device team_slave_1 removed [ 328.364052][T17100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.431959][T17100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.483832][T17100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.507336][T17100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.555730][T17100] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 339.533934][T17126] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.541056][T17126] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.548348][T17126] bridge_slave_0: entered allmulticast mode [ 339.554895][T17126] bridge_slave_0: entered promiscuous mode [ 339.561697][T17126] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.569537][T17126] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.577001][T17126] bridge_slave_1: entered allmulticast mode [ 339.583717][T17126] bridge_slave_1: entered promiscuous mode [ 339.600551][T17126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.611294][T17126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.629625][T17126] team0: Port device team_slave_0 added [ 339.636424][T17126] team0: Port device team_slave_1 added [ 339.653911][T17126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.661334][T17126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.687483][T17126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.698912][T17126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.706006][T17126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.732296][T17126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.758963][T17126] hsr_slave_0: entered promiscuous mode [ 339.765491][T17126] hsr_slave_1: entered promiscuous mode [ 339.772079][T17126] debugfs: 'hsr0' already exists in 'hsr' [ 339.777982][T17126] Cannot create hsr debugfs directory [ 339.942183][ T28] audit: type=1400 audit(1782116143.559:1699): avc: denied { write } for pid=17143 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.015907][ T28] audit: type=1400 audit(1782116143.639:1700): avc: denied { write } for pid=17167 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.052460][T17171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3659'. [ 340.073880][T17171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3659'. [ 340.116312][T17171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3659'. [ 340.122711][ T28] audit: type=1400 audit(1782116143.739:1701): avc: denied { write } for pid=17170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.159651][T17190] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3661'. [ 340.185422][ T28] audit: type=1400 audit(1782116143.799:1702): avc: denied { write } for pid=17191 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.289522][T17126] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 340.323169][T17126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.347224][T17126] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 340.365966][ T28] audit: type=1400 audit(1782116143.989:1703): avc: denied { write } for pid=17193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.402631][T17126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 340.419939][T17126] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 340.442179][T17126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 340.454274][ T28] audit: type=1400 audit(1782116144.079:1704): avc: denied { write } for pid=17217 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.493775][T17126] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 340.515318][T17126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 340.531104][ T28] audit: type=1400 audit(1782116144.139:1705): avc: denied { read } for pid=17229 comm="syz.7.3673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 340.574148][ T28] audit: type=1400 audit(1782116144.199:1706): avc: denied { write } for pid=17229 comm="syz.7.3673" path="socket:[54498]" dev="sockfs" ino=54498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 340.664325][T17126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.691355][T17255] netlink: 6 bytes leftover after parsing attributes in process `syz.9.3678'. [ 340.703057][T17255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.706117][ T28] audit: type=1400 audit(1782116144.329:1707): avc: denied { write } for pid=17231 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.750650][T17126] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.763525][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.771448][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.793895][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.801014][ T4397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.840552][T17126] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 340.851531][ T28] audit: type=1400 audit(1782116144.459:1708): avc: denied { write } for pid=17271 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.878773][T17126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.034042][T17294] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3684'. [ 341.071249][T17307] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3686'. [ 341.198820][T17126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.401231][T17126] veth0_vlan: entered promiscuous mode [ 341.435325][T17126] veth1_vlan: entered promiscuous mode [ 341.481586][T17126] veth0_macvtap: entered promiscuous mode [ 341.503537][T17126] veth1_macvtap: entered promiscuous mode [ 341.551716][T17126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.590670][T17126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.626165][ T55] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.644561][ T55] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.665682][ T55] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.684421][T17378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3701'. [ 341.697993][ T55] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.159352][ T23] IPVS: starting estimator thread 0... [ 342.238614][T17429] uprobe: syz.5.3714:17429 failed to unregister, leaking uprobe [ 342.253666][T17424] IPVS: using max 2400 ests per chain, 120000 per kthread [ 342.385868][T17445] loop3: detected capacity change from 0 to 512 [ 342.417710][T17445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.636436][T17126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.660781][ T23] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 342.671379][ T23] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 342.694113][ T23] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 342.732702][ T23] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 342.761064][ T23] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 342.785092][ T23] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 342.811441][ T23] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 342.834152][ T23] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 342.855020][ T23] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 342.879894][ T23] hid-generic 0103:0004:0000.0004: unknown main item tag 0x0 [ 342.907517][ T23] hid-generic 0103:0004:0000.0004: hidraw0: HID v0.05 Device [syz0] on syz1 [ 342.993622][T17496] fido_id[17496]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 343.665719][T17538] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3733'. [ 344.087045][T17563] loop3: detected capacity change from 0 to 1024 [ 344.131119][T17563] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.3741: Failed to acquire dquot type 0 [ 344.179077][T17563] loop3: lost filesystem error report for type 5 error -117 [ 344.179734][T17563] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, [ 344.187514][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 344.187542][ C0] EXT4-fs (loop3): initial error at time 1782116147: ext4_acquire_dquot:7041 [ 344.187589][ C0] EXT4-fs (loop3): last error at time 1782116147: ext4_acquire_dquot:7041 [ 344.220495][T17563] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 344.273382][T17563] EXT4-fs (loop3): 1 truncate cleaned up [ 344.279841][T17563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.335109][T17563] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.3741: Failed to acquire dquot type 0 [ 344.401968][T17126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.070253][T17595] loop7: detected capacity change from 0 to 256 [ 345.079180][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3754'. [ 345.100567][T17595] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 345.113015][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3754'. [ 345.165465][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 345.165496][ T28] audit: type=1400 audit(1782116148.789:1754): avc: denied { mounton } for pid=17594 comm="syz.7.3752" path="/397/bus/ytime,nobh,grpquota.." dev="loop7" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 345.221665][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3755'. [ 345.237356][ T39] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.240496][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3755'. [ 345.247090][ T39] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.267645][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3755'. [ 345.278075][ T39] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.287672][ T39] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.368534][T17608] loop5: detected capacity change from 0 to 1024 [ 345.423275][T17608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.479500][ T28] audit: type=1400 audit(1782116149.099:1755): avc: denied { write } for pid=17607 comm="syz.5.3758" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.536275][T15882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.571679][T17625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3764'. [ 345.583705][T17625] bond0: option arp_interval: invalid value (18446744071951403948) [ 345.592880][T17625] bond0: option arp_interval: allowed values 0 - 2147483647 [ 345.645885][T17631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3766'. [ 345.666693][T17631] team1: entered promiscuous mode [ 345.674188][T17631] team1: entered allmulticast mode [ 345.681427][T17631] 8021q: adding VLAN 0 to HW filter on device team1 [ 345.760193][T17637] loop7: detected capacity change from 0 to 512 [ 345.779500][T17637] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.797045][T17637] ext4 filesystem being mounted at /401/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.865306][ T28] audit: type=1400 audit(1782116149.489:1756): avc: denied { ioctl } for pid=17644 comm="syz.5.3771" path="socket:[55914]" dev="sockfs" ino=55914 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 345.945186][T10300] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.330813][T17670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3782'. [ 346.493595][T17683] loop5: detected capacity change from 0 to 512 [ 346.511532][T17683] EXT4-fs error (device loop5): ext4_free_inode:356: comm syz.5.3787: bit already cleared for inode 11 [ 346.524135][T17683] loop5: lost filesystem error report for type 5 error -117 [ 346.526416][T17683] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 346.537740][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 346.537765][ C1] EXT4-fs (loop5): initial error at time 1782116150: ext4_free_inode:356 [ 346.537795][ C1] EXT4-fs (loop5): last error at time 1782116150: ext4_free_inode:356 [ 346.576488][T17683] loop5: lost filesystem error report for type 5 error -117 [ 346.581206][T17683] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 346.603133][T17683] loop5: lost filesystem error report for type 5 error -117 [ 346.603936][T17683] EXT4-fs (loop5): 1 orphan inode deleted [ 346.621778][T17683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.667903][T15882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.914184][T17694] loop7: detected capacity change from 0 to 512 [ 346.944637][T17694] EXT4-fs: Ignoring removed nomblk_io_submit option [ 346.977028][T17694] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 347.011619][T17694] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.028761][T17692] loop5: detected capacity change from 0 to 4096 [ 347.038024][T17692] EXT4-fs: test_dummy_encryption option not supported [ 347.045559][T17694] ext4 filesystem being mounted at /405/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.066708][T17694] EXT4-fs (loop7): shut down requested (0) [ 347.075274][ T28] audit: type=1400 audit(1782116150.689:1757): avc: denied { accept } for pid=17693 comm="syz.7.3791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 347.200830][T17694] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 347.218848][T17694] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 347.228303][ T28] audit: type=1400 audit(1782116150.839:1758): avc: denied { write } for pid=17693 comm="syz.7.3791" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 347.251900][ T28] audit: type=1400 audit(1782116150.879:1759): avc: denied { link } for pid=17693 comm="syz.7.3791" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 347.319351][T10300] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.938559][T17750] syzkaller0: entered promiscuous mode [ 348.945612][T17750] syzkaller0: entered allmulticast mode [ 349.055327][T17756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3813'. [ 349.146243][T17771] loop7: detected capacity change from 0 to 128 [ 349.357279][ T28] audit: type=1400 audit(1782116152.979:1760): avc: denied { create } for pid=17793 comm="syz.9.3830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 349.676265][T17813] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 349.689742][T17813] batman_adv: batadv0: Adding interface: gretap3 [ 349.700568][T17813] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.726947][T17813] batman_adv: batadv0: Interface activated: gretap3 [ 352.495186][T17830] netlink: 'syz.3.3844': attribute type 1 has an invalid length. [ 352.521888][T17830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.545543][T17830] vlan2: entered allmulticast mode [ 352.557998][T17830] bond0: entered allmulticast mode [ 352.566714][T17830] bond_slave_0: entered allmulticast mode [ 352.573052][T17830] bond_slave_1: entered allmulticast mode [ 352.581328][T17830] bond1: (slave vlan2): making interface the new active one [ 352.589140][T17842] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.3846'. [ 352.598703][T17842] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3846'. [ 352.611437][T17830] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 352.679000][T17849] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 352.679000][T17849] The task syz.4.3849 (17849) triggered the difference, watch for misbehavior. [ 352.739265][T17846] Set syz1 is full, maxelem 6117 reached [ 353.385168][T17865] loop7: detected capacity change from 0 to 512 [ 353.405543][T17865] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.418303][T17865] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.434171][T17865] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3858: corrupted xattr block 33: invalid ea_ino [ 353.448009][T17865] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 353.468079][T17865] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3858: corrupted xattr block 33: invalid ea_ino [ 353.492727][T17865] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 353.507305][T17865] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3858: corrupted xattr block 33: invalid ea_ino [ 353.508560][ T28] audit: type=1400 audit(1782116157.129:1761): avc: denied { setattr } for pid=17864 comm="syz.7.3858" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 353.579807][T10300] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.880096][ T28] audit: type=1400 audit(1782116157.499:1762): avc: denied { listen } for pid=17894 comm="syz.3.3868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 353.926446][ T28] audit: type=1400 audit(1782116157.499:1763): avc: denied { accept } for pid=17894 comm="syz.3.3868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 353.965772][T17897] ref_ctr increment failed for inode: 0x28e offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810006d400 [ 354.116126][T17899] loop5: detected capacity change from 0 to 2048 [ 354.164104][T17899] Alternate GPT is invalid, using primary GPT. [ 354.170815][T17899] loop5: p1 p2 p3 [ 354.177627][T17899] loop5: partition table partially beyond EOD, truncated [ 354.296930][T17914] tipc: Started in network mode [ 354.307948][T17914] tipc: Node identity 0ed8762a6976, cluster identity 4711 [ 354.324223][T17135] udevd[17135]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 354.327168][T17765] udevd[17765]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 354.336781][T17914] tipc: Enabled bearer , priority 0 [ 354.348211][T17150] udevd[17150]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 354.500655][T17918] syzkaller0: entered promiscuous mode [ 354.514391][T17918] syzkaller0: entered allmulticast mode [ 354.542014][T17918] tipc: Resetting bearer [ 354.573750][ T55] tipc: Resetting bearer [ 354.618455][T17913] tipc: Resetting bearer [ 354.649472][T17913] tipc: Disabling bearer [ 355.171627][ T28] audit: type=1400 audit(1782116158.539:1764): avc: denied { read } for pid=17923 comm="syz.5.3880" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 355.249415][ T28] audit: type=1400 audit(1782116158.789:1765): avc: denied { open } for pid=17923 comm="syz.5.3880" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 355.582162][ T28] audit: type=1400 audit(1782116159.199:1766): avc: denied { setopt } for pid=17949 comm="syz.4.3888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 355.829436][T17961] loop5: detected capacity change from 0 to 512 [ 355.839766][T17961] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 355.864451][T17961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.878368][T17961] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.896070][T17961] EXT4-fs (loop5): shut down requested (1) [ 355.898170][ T28] audit: type=1400 audit(1782116159.519:1767): avc: denied { write } for pid=17960 comm="syz.5.3892" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 355.924885][ T28] audit: type=1400 audit(1782116159.519:1768): avc: denied { write } for pid=17960 comm="syz.5.3892" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 356.097895][T15882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.953489][T17993] netlink: 'syz.4.3905': attribute type 1 has an invalid length. [ 356.961698][T17993] netlink: 'syz.4.3905': attribute type 1 has an invalid length. [ 357.064261][T17999] all: renamed from lo (while UP) [ 357.412487][T18012] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3913'. [ 357.483771][T18016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3916'. [ 357.516426][T18019] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.535987][T18019] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.549208][T18019] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 357.692678][T18033] loop3: detected capacity change from 0 to 128 [ 357.709035][T18019] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.726468][T18019] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.739254][T18019] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 357.739355][T18033] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 357.742854][T18033] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 357.832520][T18019] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.844583][T18019] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.860059][T18019] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 357.911832][T18043] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3923'. [ 357.927372][ T28] audit: type=1400 audit(1782116161.549:1769): avc: denied { ioctl } for pid=18042 comm="syz.5.3923" path="socket:[64522]" dev="sockfs" ino=64522 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 358.064192][T18044] syzkaller0: entered promiscuous mode [ 358.081036][T18044] syzkaller0: entered allmulticast mode [ 358.090877][T18053] loop5: detected capacity change from 0 to 512 [ 358.141646][T18053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.184382][T18019] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.192898][T18053] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.195845][T18019] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.245480][T18019] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 358.247924][ T28] audit: type=1400 audit(1782116161.869:1770): avc: denied { write } for pid=18052 comm="syz.5.3926" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 358.329089][T15882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.372890][T17126] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 358.387562][T18059] netlink: 'syz.5.3927': attribute type 27 has an invalid length. [ 358.438554][T18059] team1: left promiscuous mode [ 358.455467][T18059] team1: left allmulticast mode [ 358.468007][ T55] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.477736][T18061] ref_ctr increment failed for inode: 0x12e offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810489e200 [ 358.500579][ T55] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.515867][T18060] uprobe: syz.3.3928:18060 failed to unregister, leaking uprobe [ 358.523693][ T28] audit: type=1400 audit(1782116162.139:1771): avc: denied { execmod } for pid=18060 comm="syz.3.3928" path="/55/memory.events" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 358.560203][T18066] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3930'. [ 358.578537][T18064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.590902][T18064] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.601924][T18064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.644411][T18064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.663787][T18064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.682726][T18064] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.693629][T18064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.706740][T18064] veth1_vlan: left promiscuous mode [ 358.713013][T18064] veth0_vlan: left promiscuous mode [ 358.718955][T18064] veth0_vlan: entered promiscuous mode [ 358.727491][T18064] veth1_vlan: entered promiscuous mode [ 358.737887][T18064] veth1_macvtap: left promiscuous mode [ 358.744265][T18064] veth0_macvtap: left promiscuous mode [ 358.751050][T18064] veth0_macvtap: entered promiscuous mode [ 358.758454][T18064] veth1_macvtap: entered promiscuous mode [ 358.768687][T18064] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 358.778986][T18064] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 358.788098][T18064] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 358.796723][T18064] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 358.817241][T18064] 8021q: adding VLAN 0 to HW filter on device team1 [ 358.832870][ T55] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.842889][ T55] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.869425][ T2196] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.876840][ T2196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.907172][ T2196] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.914738][ T2196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.978455][ T55] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.000146][ T55] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 359.042810][ T55] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 359.060436][ T55] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.070310][ T55] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.081232][ T55] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.099863][ T55] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.116528][ T55] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.128860][ T55] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 359.137864][ T55] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 359.149365][T18078] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.3934'. [ 359.160727][ T55] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.170516][ T55] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 359.180338][ T55] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 359.202752][ T55] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.216637][ T55] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 359.231317][ T55] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 359.332313][T18081] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3936'. [ 360.371812][T18099] loop7: detected capacity change from 0 to 512 [ 360.401249][T18099] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 360.451484][T18099] EXT4-fs (loop7): 1 truncate cleaned up [ 360.479707][T18099] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.559595][ T28] audit: type=1400 audit(1782116164.179:1772): avc: denied { write } for pid=18091 comm="syz.7.3941" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 360.786552][T18111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3947'. [ 360.973764][T18077] Set syz1 is full, maxelem 65536 reached [ 360.987834][T18119] syz.4.3951 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 361.322494][T10300] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.788108][ T3390] IPVS: starting estimator thread 0... [ 361.892784][T18146] IPVS: using max 3360 ests per chain, 168000 per kthread [ 362.032749][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 362.126102][ T28] audit: type=1400 audit(1782116165.749:1773): avc: denied { relabelfrom } for pid=18160 comm="syz.5.3970" name="SCTPv6" dev="sockfs" ino=63113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 362.182057][ T28] audit: type=1400 audit(1782116165.749:1774): avc: denied { relabelto } for pid=18160 comm="syz.5.3970" name="SCTPv6" dev="sockfs" ino=63113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=sctp_socket permissive=1 [ 362.213346][ T28] audit: type=1400 audit(1782116165.819:1775): avc: denied { write } for pid=18166 comm="syz.5.3972" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 363.010307][T18192] loop5: detected capacity change from 0 to 128 [ 363.055894][T18192] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 363.086688][T18192] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 363.165463][T18192] ext2 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.179481][ T28] audit: type=1400 audit(1782116166.799:1776): avc: denied { write } for pid=18191 comm="syz.5.3981" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 363.205733][ T28] audit: type=1400 audit(1782116166.829:1777): avc: denied { write } for pid=18191 comm="syz.5.3981" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 363.293497][ T28] audit: type=1400 audit(1782116166.909:1778): avc: denied { write } for pid=18191 comm="syz.5.3981" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 363.325093][T18200] loop3: detected capacity change from 0 to 512 [ 363.350995][T18200] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 363.359149][ T28] audit: type=1400 audit(1782116166.969:1779): avc: denied { setopt } for pid=18198 comm="syz.4.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 363.425184][ T28] audit: type=1400 audit(1782116167.019:1780): avc: denied { module_request } for pid=18198 comm="syz.4.3985" kmod="netdev-netdevsim0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 363.454773][T18200] EXT4-fs (loop3): 1 truncate cleaned up [ 363.476047][T18200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.532873][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 363.532893][ T28] audit: type=1400 audit(1782116167.159:1804): avc: denied { read write } for pid=18196 comm="syz.3.3984" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 363.670042][ T28] audit: type=1400 audit(1782116167.159:1805): avc: denied { open } for pid=18196 comm="syz.3.3984" path="/69/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 363.763131][ T28] audit: type=1400 audit(1782116167.389:1806): avc: denied { unmount } for pid=15882 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 363.792187][T15882] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 363.820568][ T28] audit: type=1400 audit(1782116167.409:1807): avc: denied { create } for pid=18220 comm="syz.4.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 363.873786][ T28] audit: type=1400 audit(1782116167.419:1808): avc: denied { connect } for pid=18220 comm="syz.4.3991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 363.894258][ T28] audit: type=1400 audit(1782116167.429:1809): avc: denied { name_connect } for pid=18220 comm="syz.4.3991" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 363.914820][ T28] audit: type=1400 audit(1782116167.459:1810): avc: denied { listen } for pid=18220 comm="syz.4.3991" lport=59278 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 363.940221][ T28] audit: type=1400 audit(1782116167.459:1811): avc: denied { accept } for pid=18220 comm="syz.4.3991" lport=59278 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 363.963743][ T28] audit: type=1400 audit(1782116167.459:1812): avc: denied { write } for pid=18220 comm="syz.4.3991" lport=59278 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 363.989524][ T28] audit: type=1400 audit(1782116167.459:1813): avc: denied { setopt } for pid=18220 comm="syz.4.3991" lport=59278 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 364.036722][T18232] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.3993'. [ 364.092139][T18234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3997'. [ 364.575230][T17126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.980835][T18277] bond0: entered allmulticast mode [ 366.014314][T18279] wireguard0: entered promiscuous mode [ 366.029962][T18279] wireguard0: entered allmulticast mode [ 366.047399][T18279] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 366.084599][T18279] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 366.515225][T18296] syz_tun: entered allmulticast mode [ 366.649772][T18303] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.702668][T18303] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 366.722465][T18303] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 366.804918][T18303] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.816565][T18303] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 366.841096][T18303] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 366.884842][T18313] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4025'. [ 366.920576][T18303] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.930813][T18303] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 366.938549][T18313] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4025'. [ 366.943440][T18303] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 367.006444][T18303] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.027751][T18303] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 367.038375][T18303] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 367.092999][ T2196] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.102233][ T2196] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.111053][ T2196] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 367.131763][ T2196] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.140384][ T2196] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.156135][ T2196] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 367.190249][ T4397] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.204602][ T4397] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.217245][ T4397] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 367.237245][T18336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4034'. [ 367.246845][ T4397] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.269600][ T4397] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 367.287996][ T4397] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 367.383358][T18346] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4040'. [ 367.644880][T18361] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4046'. [ 368.105490][T18385] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4054'. [ 368.124443][T18385] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4054'. [ 368.388824][T18401] loop5: detected capacity change from 0 to 512 [ 368.416601][T18401] ext4: Unknown parameter 'mask' [ 368.652973][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 368.653002][ T28] audit: type=1400 audit(1782116172.269:1879): avc: denied { name_bind } for pid=18403 comm="syz.5.4063" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 368.720240][ T28] audit: type=1400 audit(1782116172.279:1880): avc: denied { node_bind } for pid=18403 comm="syz.5.4063" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 368.783718][ T28] audit: type=1400 audit(1782116172.279:1881): avc: denied { create } for pid=18407 comm="syz.3.4065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 368.883631][T18415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4068'. [ 369.210665][ T28] audit: type=1400 audit(1782116172.829:1882): avc: denied { name_bind } for pid=18429 comm="syz.7.4074" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 369.265035][T18434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4075'. [ 369.281178][ T28] audit: type=1400 audit(1782116172.899:1883): avc: denied { read write } for pid=18435 comm="syz.7.4077" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 369.290513][T18434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4075'. [ 369.330030][ T28] audit: type=1400 audit(1782116172.899:1884): avc: denied { open } for pid=18435 comm="syz.7.4077" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 369.482069][ T28] audit: type=1400 audit(1782116173.099:1885): avc: denied { bind } for pid=18443 comm="syz.4.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 369.521770][ T28] audit: type=1400 audit(1782116173.129:1886): avc: denied { listen } for pid=18443 comm="syz.4.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 369.588279][ T28] audit: type=1400 audit(1782116173.129:1887): avc: denied { read } for pid=18443 comm="syz.4.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 370.440941][T18465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4087'. [ 370.462781][T18469] loop7: detected capacity change from 0 to 164 [ 370.472548][T18465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4087'. [ 370.483548][T18469] rock: directory entry would overflow storage [ 370.486834][T18471] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4089'. [ 370.490053][T18469] rock: sig=0x5252, size=5, remaining=3 [ 370.503240][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4089'. [ 370.517655][ T28] audit: type=1400 audit(1782116174.139:1888): avc: denied { mount } for pid=18468 comm="syz.7.4085" name="/" dev="loop7" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 370.531891][T18469] 9p: Bad value for 'rfdno' [ 370.541271][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4089'. [ 370.588281][T18473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4091'. [ 370.610816][T18477] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4093'. [ 370.628167][T18477] syzkaller1: entered promiscuous mode [ 370.669444][T18482] netlink: 'syz.4.4096': attribute type 39 has an invalid length. [ 370.677586][T18477] syzkaller1: entered allmulticast mode [ 370.687968][T18479] loop7: detected capacity change from 0 to 512 [ 370.771124][T18479] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.812444][T10300] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.215024][T18508] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4105'. [ 371.506268][T18516] loop5: detected capacity change from 0 to 1024 [ 371.531502][T18516] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 371.559589][T18516] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 371.568294][T18516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.028508][T18527] loop3: detected capacity change from 0 to 1024 [ 372.052463][T18527] EXT4-fs: Ignoring removed bh option [ 372.072128][T18527] EXT4-fs: Ignoring removed oldalloc option [ 372.110635][T18527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.187416][T17126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.202748][T15882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.536016][T18556] loop7: detected capacity change from 0 to 512 [ 372.543458][T18556] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 372.560001][T18556] EXT4-fs (loop7): 1 truncate cleaned up [ 372.566557][T18556] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.591514][T18559] tipc: Enabled bearer , priority 10 [ 372.684789][T18563] loop5: detected capacity change from 0 to 1024 [ 372.694960][T18563] EXT4-fs: Ignoring removed bh option [ 372.701016][T18563] EXT4-fs: Ignoring removed oldalloc option [ 372.752712][T18563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.857756][T15882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.285171][T18553] syz.7.4122 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 373.311915][T18553] CPU: 0 UID: 0 PID: 18553 Comm: syz.7.4122 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 373.312063][T18553] Tainted: [W]=WARN [ 373.312072][T18553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 373.312087][T18553] Call Trace: [ 373.312094][T18553] [ 373.312102][T18553] __dump_stack+0x1d/0x30 [ 373.312127][T18553] dump_stack_lvl+0x95/0xd0 [ 373.312171][T18553] dump_stack+0x15/0x1b [ 373.312189][T18553] dump_header+0x80/0x240 [ 373.312278][T18553] oom_kill_process+0x295/0x350 [ 373.312422][T18553] out_of_memory+0x981/0xbc0 [ 373.312452][T18553] try_charge_memcg+0x621/0xa00 [ 373.312507][T18553] charge_memcg+0x6d/0x120 [ 373.312541][T18553] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 373.312579][T18553] swap_cache_alloc_folio+0x47b/0x5e0 [ 373.312644][T18553] swap_cluster_readahead+0x2b1/0x460 [ 373.312693][T18553] swapin_readahead+0xd8/0x8a0 [ 373.312720][T18553] ? _raw_spin_unlock+0x9/0x30 [ 373.312744][T18553] ? swap_put_entries_cluster+0x49c/0x4c0 [ 373.312779][T18553] ? wake_page_function+0x11a/0x1f0 [ 373.312893][T18553] ? __wake_up_locked_key+0x3d/0x60 [ 373.312919][T18553] ? __rcu_read_unlock+0x4e/0x70 [ 373.313028][T18553] ? swap_cache_get_folio+0x1f7/0x200 [ 373.313056][T18553] do_swap_page+0x2a2/0x1ec0 [ 373.313090][T18553] ? __css_rstat_updated+0xbb/0x280 [ 373.313123][T18553] ? __rcu_read_lock+0x36/0x50 [ 373.313231][T18553] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 373.313262][T18553] handle_mm_fault+0xb3c/0x2da0 [ 373.313363][T18553] do_user_addr_fault+0x634/0x1060 [ 373.313393][T18553] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 373.313432][T18553] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 373.313467][T18553] ? trace_page_fault_user+0x1f/0xa0 [ 373.313497][T18553] exc_page_fault+0x62/0xa0 [ 373.313555][T18553] asm_exc_page_fault+0x26/0x30 [ 373.313575][T18553] RIP: 0033:0x7fa4b7f5a80c [ 373.313593][T18553] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 373.313671][T18553] RSP: 002b:00007ffec2d3c930 EFLAGS: 00010206 [ 373.313691][T18553] RAX: 0000000000000000 RBX: 00007fa4b8305fa0 RCX: 0000555585eeb808 [ 373.313706][T18553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 373.313722][T18553] RBP: 00007fa4b8307da0 R08: 0000000000000000 R09: 0000000000000000 [ 373.313739][T18553] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000005b219 [ 373.313755][T18553] R13: 00007fa4b830618c R14: 000000000005b031 R15: 00007ffec2d3ca30 [ 373.313779][T18553] [ 373.612610][T18553] memory: usage 19376kB, limit 307200kB, failcnt 1256 [ 373.619554][T18553] memory+swap: usage 87148kB, limit 9007199254740988kB, failcnt 0 [ 373.627673][T18553] kmem: usage 21464kB, limit 9007199254740988kB, failcnt 0 [ 373.636116][T18553] Memory cgroup stats for /syz7: [ 373.636586][T18553] cache 8192 [ 373.644954][T18553] rss 0 [ 373.647823][T18553] shmem 0 [ 373.650832][T18553] mapped_file 0 [ 373.654494][T18553] dirty 0 [ 373.657463][T18553] writeback 4096 [ 373.661095][T18553] workingset_refault_anon 177 [ 373.665849][T18553] workingset_refault_file 55 [ 373.670517][T18553] swap 67825664 [ 373.679160][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 373.679213][ T28] audit: type=1326 audit(1782116177.299:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18586 comm="syz.9.4130" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323f5dce59 code=0x7ffc0000 [ 373.686421][T18553] swapcached 84418560 [ 373.715495][ T3382] tipc: Node number set to 1739486762 [ 373.750841][ T28] audit: type=1326 audit(1782116177.299:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18586 comm="syz.9.4130" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323f5dce59 code=0x7ffc0000 [ 373.780478][ T28] audit: type=1326 audit(1782116177.299:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18586 comm="syz.9.4130" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323f5dce59 code=0x7ffc0000 [ 373.807111][T18553] pgpgin 190977 [ 373.808134][ T28] audit: type=1326 audit(1782116177.299:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18586 comm="syz.9.4130" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f323f5dce59 code=0x7ffc0000 [ 373.820640][T18553] pgpgout 190974 [ 373.841359][ T28] audit: type=1326 audit(1782116177.349:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18586 comm="syz.9.4130" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f323f59d68e code=0x7ffc0000 [ 373.905066][ T28] audit: type=1326 audit(1782116177.349:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18586 comm="syz.9.4130" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f323f59d68e code=0x7ffc0000 [ 373.934719][ T28] audit: type=1326 audit(1782116177.349:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18586 comm="syz.9.4130" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323f5dce59 code=0x7ffc0000 [ 373.937531][T18553] pgfault 180112 [ 373.963990][ T28] audit: type=1326 audit(1782116177.349:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18586 comm="syz.9.4130" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323f5dce59 code=0x7ffc0000 [ 373.964026][ T28] audit: type=1326 audit(1782116177.369:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18586 comm="syz.9.4130" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f323f59d68e code=0x7ffc0000 [ 373.964060][ T28] audit: type=1326 audit(1782116177.399:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18586 comm="syz.9.4130" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f323f59d68e code=0x7ffc0000 [ 374.007506][T18553] pgmajfault 6749 [ 374.060808][T18553] inactive_anon 0 [ 374.125503][T18553] active_anon 0 [ 374.140767][T18553] inactive_file 0 [ 374.158764][T18553] active_file 8192 [ 374.174753][T18553] unevictable 0 [ 374.195225][T18553] hierarchical_memory_limit 314572800 [ 374.210089][T18553] hierarchical_memsw_limit 9223372036854771712 [ 374.236537][T18553] total_cache 8192 [ 374.264578][T18553] total_rss 0 [ 374.275497][T18553] total_shmem 0 [ 374.284632][T18553] total_mapped_file 0 [ 374.296186][T18553] total_dirty 0 [ 374.304996][T18553] total_writeback 4096 [ 374.322052][T18553] total_workingset_refault_anon 177 [ 374.334611][T18553] total_workingset_refault_file 55 [ 374.347394][T18553] total_swap 67825664 [ 374.357105][T18553] total_swapcached 84418560 [ 374.377588][T18553] total_pgpgin 190978 [ 374.387821][T18553] total_pgpgout 190975 [ 374.397416][T18553] total_pgfault 180135 [ 374.420878][T18553] total_pgmajfault 6749 [ 374.443953][T18553] total_inactive_anon 0 [ 374.457448][T18553] total_active_anon 0 [ 374.465630][T18553] total_inactive_file 0 [ 374.475339][T18553] total_active_file 8192 [ 374.485673][T18553] total_unevictable 0 [ 374.510598][T18553] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4122,pid=18553,uid=0 [ 374.583847][T18553] Memory cgroup out of memory: Killed process 18553 (syz.7.4122) total-vm:96348kB, anon-rss:1236kB, file-rss:22428kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 374.679949][T10300] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.708351][T18616] __nla_validate_parse: 2 callbacks suppressed [ 374.708487][T18616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4143'. [ 374.871306][T18624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4146'. [ 375.069805][T18635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4151'. [ 375.299953][T18627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4147'. [ 375.516421][T18661] loop5: detected capacity change from 0 to 512 [ 375.622455][T18661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.653825][T18661] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.810708][T18656] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.4159: corrupted xattr block 33: invalid ea_ino [ 375.862204][T18656] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 375.887836][T18676] loop7: detected capacity change from 0 to 512 [ 375.905763][T18656] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.4159: corrupted xattr block 33: invalid ea_ino [ 375.947793][T18676] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 375.969883][T18676] EXT4-fs (loop7): 1 truncate cleaned up [ 375.982366][T18676] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.998023][T18656] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 376.062098][T18656] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.4159: corrupted xattr block 33: invalid ea_ino [ 376.074945][T10300] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.197177][T15882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.427299][T18704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.469412][T18704] team0: Port device bond0 added [ 376.474760][T18707] bridge0: port 3(team0) entered blocking state [ 376.500743][T18707] bridge0: port 3(team0) entered disabled state [ 376.516030][T18707] team0: entered allmulticast mode [ 376.532605][T18707] team_slave_0: entered allmulticast mode [ 376.538455][T18707] team_slave_1: entered allmulticast mode [ 376.556139][T18707] bond0: entered allmulticast mode [ 376.561955][T18707] bond_slave_0: entered allmulticast mode [ 376.568511][T18707] bond_slave_1: entered allmulticast mode [ 376.577293][T18707] team0: entered promiscuous mode [ 376.583486][T18707] team_slave_0: entered promiscuous mode [ 376.589530][T18707] team_slave_1: entered promiscuous mode [ 376.595830][T18707] bond0: entered promiscuous mode [ 376.611345][T18707] bond_slave_0: entered promiscuous mode [ 376.619150][T18707] bond_slave_1: entered promiscuous mode [ 376.628949][T18707] bridge0: port 3(team0) entered blocking state [ 376.635371][T18707] bridge0: port 3(team0) entered forwarding state [ 376.655951][T18716] netlink: 'syz.7.4181': attribute type 12 has an invalid length. [ 376.944212][T18728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4194'. [ 377.542944][T18754] loop7: detected capacity change from 0 to 1024 [ 377.559677][T18754] ext4: Unknown parameter 'nojournal' [ 377.682237][T18748] loop3: detected capacity change from 0 to 512 [ 377.891730][ T9265] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 377.910256][ T9265] CPU: 0 UID: 0 PID: 9265 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 377.910332][ T9265] Tainted: [W]=WARN [ 377.910340][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 377.910356][ T9265] Call Trace: [ 377.910364][ T9265] [ 377.910403][ T9265] __dump_stack+0x1d/0x30 [ 377.910431][ T9265] dump_stack_lvl+0x95/0xd0 [ 377.910453][ T9265] dump_stack+0x15/0x1b [ 377.910527][ T9265] dump_header+0x80/0x240 [ 377.910595][ T9265] oom_kill_process+0x295/0x350 [ 377.910631][ T9265] out_of_memory+0x981/0xbc0 [ 377.910668][ T9265] try_charge_memcg+0x621/0xa00 [ 377.910810][ T9265] ? should_fail_ex+0x30/0x270 [ 377.910846][ T9265] charge_memcg+0x6d/0x120 [ 377.910882][ T9265] __mem_cgroup_charge+0x28/0xb0 [ 377.910975][ T9265] filemap_add_folio+0x110/0x350 [ 377.911076][ T9265] __filemap_get_folio_mpol+0x32e/0x840 [ 377.911201][ T9265] filemap_fault+0x49b/0xba0 [ 377.911261][ T9265] handle_mm_fault+0x167a/0x2da0 [ 377.911330][ T9265] do_user_addr_fault+0x634/0x1060 [ 377.911367][ T9265] ? trace_page_fault_user+0x1f/0xa0 [ 377.911416][ T9265] exc_page_fault+0x62/0xa0 [ 377.911453][ T9265] asm_exc_page_fault+0x26/0x30 [ 377.911479][ T9265] RIP: 0033:0x7fc188cfae74 [ 377.911500][ T9265] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 [ 377.911522][ T9265] RSP: 002b:00007ffe6b56ead0 EFLAGS: 00010202 [ 377.911598][ T9265] RAX: 0000001b2f824000 RBX: 00000000000005f1 RCX: 000000000005c0a8 [ 377.911615][ T9265] RDX: 000000000c45282a RSI: 00007ffe6b56eb60 RDI: 0000000000000001 [ 377.911632][ T9265] RBP: 00007ffe6b56eb0c R08: 000000002ece9009 R09: 3fffffffffffffff [ 377.911650][ T9265] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 377.911695][ T9265] R13: 00000000000927c0 R14: 000000000005c26d R15: 00007ffe6b56eb60 [ 377.911718][ T9265] [ 377.911774][ T9265] memory: usage 307200kB, limit 307200kB, failcnt 1761 [ 378.115485][ T9265] memory+swap: usage 239508kB, limit 9007199254740988kB, failcnt 0 [ 378.123643][ T9265] kmem: usage 160816kB, limit 9007199254740988kB, failcnt 0 [ 378.133087][T18748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.187757][ T9265] Memory cgroup stats for /syz4: [ 378.188063][ T9265] cache 9277440 [ 378.209629][T18766] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4197'. [ 378.256137][ T9265] rss 798720 [ 378.262757][T18766] syzkaller1: entered promiscuous mode [ 378.276658][ T9265] shmem 8957952 [ 378.280177][ T9265] mapped_file 4096 [ 378.283944][ T9265] dirty 4096 [ 378.287419][T18766] syzkaller1: entered allmulticast mode [ 378.304406][ T9265] writeback 0 [ 378.307745][ T9265] workingset_refault_anon 1306 [ 378.312642][ T9265] workingset_refault_file 325 [ 378.321550][ T9265] swap 60612608 [ 378.326597][ T9265] swapcached 80248832 [ 378.335987][ T9265] pgpgin 322828 [ 378.342348][ T9265] pgpgout 320363 [ 378.350519][ T9265] pgfault 244333 [ 378.358372][ T9265] pgmajfault 24 [ 378.365107][ T9265] inactive_anon 8564736 [ 378.376585][ T9265] active_anon 1212416 [ 378.382208][ T9265] inactive_file 253952 [ 378.389375][ T9265] active_file 65536 [ 378.394423][ T9265] unevictable 0 [ 378.397938][ T9265] hierarchical_memory_limit 314572800 [ 378.398484][T17126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.404011][ T9265] hierarchical_memsw_limit 9223372036854771712 [ 378.419370][ T9265] total_cache 9277440 [ 378.423626][ T9265] total_rss 798720 [ 378.427389][ T9265] total_shmem 8957952 [ 378.431481][ T9265] total_mapped_file 4096 [ 378.435866][ T9265] total_dirty 4096 [ 378.460285][ T9265] total_writeback 0 [ 378.484834][ T9265] total_workingset_refault_anon 1306 [ 378.502896][ T9265] total_workingset_refault_file 325 [ 378.512906][ T9265] total_swap 60612608 [ 378.517148][ T9265] total_swapcached 80248832 [ 378.524656][ T9265] total_pgpgin 322828 [ 378.532998][ T9265] total_pgpgout 320363 [ 378.543946][ T9265] total_pgfault 244333 [ 378.556624][ T9265] total_pgmajfault 24 [ 378.566675][ T9265] total_inactive_anon 8564736 [ 378.571469][ T9265] total_active_anon 1212416 [ 378.584050][ T9265] total_inactive_file 253952 [ 378.588695][ T9265] total_active_file 65536 [ 378.603693][ T9265] total_unevictable 0 [ 378.613238][ T9265] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4178,pid=18706,uid=0 [ 378.636050][T18785] sctp: [Deprecated]: syz.5.4215 (pid 18785) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.636050][T18785] Use struct sctp_sack_info instead [ 378.651856][ T9265] Memory cgroup out of memory: OOM victim 18706 (syz.4.4178) is already exiting. Skip killing the task [ 378.739374][T18798] uprobe: syz.3.4210:18798 failed to unregister, leaking uprobe [ 378.747338][ T28] kauditd_printk_skb: 218 callbacks suppressed [ 378.747394][ T28] audit: type=1400 audit(1782116182.359:2134): avc: denied { cpu } for pid=18797 comm="syz.3.4210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 378.950631][T18812] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4216'. [ 378.959824][ T28] audit: type=1400 audit(1782116182.569:2135): avc: denied { nlmsg_read } for pid=18811 comm="syz.7.4216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 379.001823][ T28] audit: type=1400 audit(1782116182.619:2136): avc: denied { create } for pid=18813 comm="syz.5.4219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 379.101407][ T28] audit: type=1400 audit(1782116182.719:2137): avc: denied { read write } for pid=18823 comm="syz.5.4222" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 379.163984][ T28] audit: type=1400 audit(1782116182.719:2138): avc: denied { open } for pid=18823 comm="syz.5.4222" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 379.178930][ T3406] hid_parser_main: 14 callbacks suppressed [ 379.178951][ T3406] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 379.216926][T18818] syz.9.4220 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 379.237937][T18829] loop7: detected capacity change from 0 to 1024 [ 379.248680][T18829] EXT4-fs: Ignoring removed nomblk_io_submit option [ 379.249187][T18818] CPU: 1 UID: 0 PID: 18818 Comm: syz.9.4220 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 379.249303][T18818] Tainted: [W]=WARN [ 379.249311][T18818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 379.249325][T18818] Call Trace: [ 379.249333][T18818] [ 379.249341][T18818] __dump_stack+0x1d/0x30 [ 379.249398][T18818] dump_stack_lvl+0x95/0xd0 [ 379.249422][T18818] dump_stack+0x15/0x1b [ 379.249443][T18818] dump_header+0x80/0x240 [ 379.249545][T18818] oom_kill_process+0x295/0x350 [ 379.249606][T18818] out_of_memory+0x981/0xbc0 [ 379.249640][T18818] try_charge_memcg+0x621/0xa00 [ 379.249681][T18818] charge_memcg+0x6d/0x120 [ 379.249713][T18818] __mem_cgroup_charge+0x28/0xb0 [ 379.249804][T18818] shmem_get_folio_gfp+0x49f/0xd90 [ 379.249836][T18818] shmem_write_begin+0xfc/0x1f0 [ 379.249901][T18818] generic_perform_write+0x186/0x490 [ 379.249929][T18818] shmem_file_write_iter+0xc5/0xf0 [ 379.249959][T18818] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 379.249990][T18818] vfs_write+0x57d/0x990 [ 379.250095][T18818] __x64_sys_pwrite64+0xfd/0x150 [ 379.250186][T18818] x64_sys_call+0xa2a/0x3020 [ 379.250216][T18818] do_syscall_64+0x136/0x3c0 [ 379.250256][T18818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.250280][T18818] RIP: 0033:0x7f323f5dce59 [ 379.250298][T18818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.250319][T18818] RSP: 002b:00007f323e00e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 379.250387][T18818] RAX: ffffffffffffffda RBX: 00007f323f856090 RCX: 00007f323f5dce59 [ 379.250478][T18818] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000005 [ 379.250493][T18818] RBP: 00007f323f672e6f R08: 0000000000000000 R09: 0000000000000000 [ 379.250508][T18818] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000000 [ 379.250563][T18818] R13: 00007f323f856128 R14: 00007f323f856090 R15: 00007ffee7c23698 [ 379.250584][T18818] [ 379.250630][T18818] memory: usage 307200kB, limit 307200kB, failcnt 79 [ 379.291003][T18829] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 379.299292][ T3406] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 379.378362][T18829] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 379.530732][T18829] System zones: 0-1, 3-36 [ 379.540015][T18829] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.559743][T18818] memory+swap: usage 292640kB, limit 9007199254740988kB, failcnt 0 [ 379.568096][T18818] kmem: usage 225144kB, limit 9007199254740988kB, failcnt 0 [ 379.575617][T18818] Memory cgroup stats for /syz9: [ 379.575905][T18818] cache 68775936 [ 379.587185][T18818] rss 294912 [ 379.590485][T18818] shmem 68775936 [ 379.603290][T18818] mapped_file 0 [ 379.606833][T18818] dirty 0 [ 379.609824][T18818] writeback 0 [ 379.615194][T18818] workingset_refault_anon 0 [ 379.620272][T10300] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.661332][T18818] workingset_refault_file 0 [ 379.668845][T18837] netlink: 'syz.7.4226': attribute type 4 has an invalid length. [ 379.686686][T18818] swap 0 [ 379.701887][T18818] swapcached 0 [ 379.714337][T18818] pgpgin 105763 [ 379.724365][T18818] pgpgout 88900 [ 379.730973][T18818] pgfault 79399 [ 379.737098][T18818] pgmajfault 2 [ 379.743936][T18818] inactive_anon 0 [ 379.752580][T18818] active_anon 69070848 [ 379.758475][T18818] inactive_file 0 [ 379.786272][T18818] active_file 0 [ 379.798716][T18818] unevictable 0 [ 379.813026][T18818] hierarchical_memory_limit 314572800 [ 379.838293][T18818] hierarchical_memsw_limit 9223372036854771712 [ 379.867620][T18818] total_cache 68775936 [ 379.875043][T18845] bridge0: port 3(team0) entered blocking state [ 379.895243][T18818] total_rss 294912 [ 379.911160][T18818] total_shmem 68775936 [ 379.917015][T18845] bridge0: port 3(team0) entered disabled state [ 379.938902][T18818] total_mapped_file 0 [ 379.939642][T18845] team0: entered allmulticast mode [ 379.964530][T18818] total_dirty 0 [ 379.970301][T18845] team_slave_0: entered allmulticast mode [ 379.986338][T18818] total_writeback 0 [ 379.995302][T18845] team_slave_1: entered allmulticast mode [ 380.010358][T18818] total_workingset_refault_anon 0 [ 380.023951][T18845] team0: entered promiscuous mode [ 380.025983][T18818] total_workingset_refault_file 0 [ 380.045763][T18845] team_slave_0: entered promiscuous mode [ 380.053236][T18845] team_slave_1: entered promiscuous mode [ 380.057158][T18818] total_swap 0 [ 380.069235][T18845] bridge0: port 3(team0) entered blocking state [ 380.074449][T18818] total_swapcached 0 [ 380.076201][T18845] bridge0: port 3(team0) entered forwarding state [ 380.094777][T18818] total_pgpgin 105763 [ 380.109122][T18818] total_pgpgout 88900 [ 380.113348][T18818] total_pgfault 79399 [ 380.117464][T18818] total_pgmajfault 2 [ 380.118827][T18853] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4233'. [ 380.121528][T18818] total_inactive_anon 0 [ 380.135980][T18818] total_active_anon 69070848 [ 380.140796][T18818] total_inactive_file 0 [ 380.145752][T18818] total_active_file 0 [ 380.149859][T18818] total_unevictable 0 [ 380.154192][T18818] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.4220,pid=18815,uid=0 [ 380.169981][T18818] Memory cgroup out of memory: Killed process 18818 (syz.9.4220) total-vm:96348kB, anon-rss:1424kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:0 [ 380.175781][T18853] bridge0: port 3(team0) entered disabled state [ 380.193808][T18853] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.201064][T18853] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.228025][T18855] tipc: Enabling of bearer rejected, failed to enable media [ 380.300193][T18853] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4233'. [ 380.317019][T18853] bridge0: port 3(team0) entered blocking state [ 380.323642][T18853] bridge0: port 3(team0) entered forwarding state [ 380.330270][T18853] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.337450][T18853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.344893][T18853] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.352217][T18853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.362474][T18853] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4233'. [ 380.386492][T18853] bridge0: port 3(team0) entered disabled state [ 380.393149][T18853] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.400494][T18853] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.625483][T18879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4245'. [ 380.650074][T18879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.657626][T18879] IPv6: NLM_F_CREATE should be set when creating new route [ 380.664984][T18879] IPv6: NLM_F_CREATE should be set when creating new route [ 380.672226][T18879] IPv6: NLM_F_CREATE should be set when creating new route [ 380.702758][ T28] audit: type=1326 audit(1782116184.319:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18880 comm="syz.7.4246" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4b808ce59 code=0x7ffc0000 [ 380.769069][ T28] audit: type=1326 audit(1782116184.319:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18880 comm="syz.7.4246" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4b808ce59 code=0x7ffc0000 [ 380.807906][ T28] audit: type=1326 audit(1782116184.319:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18880 comm="syz.7.4246" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4b808ce59 code=0x7ffc0000 [ 380.836299][ T28] audit: type=1326 audit(1782116184.319:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18880 comm="syz.7.4246" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fa4b808ce59 code=0x7ffc0000 [ 380.875278][ T28] audit: type=1326 audit(1782116184.319:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18880 comm="syz.7.4246" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fa4b808ce59 code=0x7ffc0000 [ 381.484802][T18918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.556568][T18918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.818586][T18935] loop3: detected capacity change from 0 to 512 [ 381.838536][T18935] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 381.871547][T18939] netlink: 'syz.7.4268': attribute type 1 has an invalid length. [ 381.893029][T18935] EXT4-fs: error: could not find journal device path [ 381.895911][T18939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.958221][T18939] bond0: (slave geneve2): making interface the new active one [ 381.967898][T18939] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 382.119025][T18958] netlink: 'syz.4.4284': attribute type 1 has an invalid length. [ 382.146781][T18958] 8021q: adding VLAN 0 to HW filter on device bond3 [ 382.198439][T18958] bond3: (slave geneve3): making interface the new active one [ 382.224608][T18958] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 382.316131][T18975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.326023][T18975] team0: Port device bond0 added [ 382.367479][T18975] bridge0: port 3(team0) entered blocking state [ 382.374331][T18975] bridge0: port 3(team0) entered disabled state [ 382.401488][T18975] team0: entered allmulticast mode [ 382.411862][T18975] team_slave_0: entered allmulticast mode [ 382.418684][T18975] team_slave_1: entered allmulticast mode [ 382.428728][T18975] team0: entered promiscuous mode [ 382.434148][T18975] team_slave_0: entered promiscuous mode [ 382.440129][T18975] team_slave_1: entered promiscuous mode [ 382.462749][T18975] bond0: entered promiscuous mode [ 382.477655][T18975] bond_slave_0: entered promiscuous mode [ 382.490301][T18975] bond_slave_1: entered promiscuous mode [ 382.498441][T18975] bridge0: port 3(team0) entered blocking state [ 382.503610][T18990] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4285'. [ 382.505122][T18975] bridge0: port 3(team0) entered forwarding state [ 382.554860][T18990] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4285'. [ 382.665389][T19000] loop3: detected capacity change from 0 to 512 [ 382.822916][T19014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4295'. [ 382.895961][T19021] loop5: detected capacity change from 0 to 512 [ 382.955905][T19016] syz.5.4296 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 382.984922][T19026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.012850][T19026] team0: Port device bond0 added [ 383.027637][T19016] CPU: 1 UID: 0 PID: 19016 Comm: syz.5.4296 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 383.027677][T19016] Tainted: [W]=WARN [ 383.027685][T19016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 383.027701][T19016] Call Trace: [ 383.027709][T19016] [ 383.027806][T19016] __dump_stack+0x1d/0x30 [ 383.027835][T19016] dump_stack_lvl+0x95/0xd0 [ 383.027857][T19016] dump_stack+0x15/0x1b [ 383.027879][T19016] dump_header+0x80/0x240 [ 383.027903][T19016] oom_kill_process+0x295/0x350 [ 383.027969][T19016] out_of_memory+0x981/0xbc0 [ 383.027999][T19016] try_charge_memcg+0x621/0xa00 [ 383.028164][T19016] ? __rcu_read_unlock+0x4e/0x70 [ 383.028195][T19016] __memcg_kmem_charge_page+0x199/0x3a0 [ 383.028232][T19016] __alloc_frozen_pages_noprof+0x18a/0x350 [ 383.028324][T19016] alloc_pages_mpol+0xa9/0x1d0 [ 383.028357][T19016] alloc_pages_noprof+0x8f/0x140 [ 383.028385][T19016] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 383.028442][T19016] __kvmalloc_node_noprof+0x3d4/0x640 [ 383.028473][T19016] ? futex_hash_allocate+0x192/0x920 [ 383.028499][T19016] ? futex_hash_allocate+0x192/0x920 [ 383.028589][T19016] ? file_ioctl+0x14a/0x5b0 [ 383.028631][T19016] futex_hash_allocate+0x192/0x920 [ 383.028736][T19016] ? cap_task_prctl+0x13f/0x6b0 [ 383.028771][T19016] futex_hash_prctl+0xd8/0xf0 [ 383.028806][T19016] __se_sys_prctl+0x4f4/0x13b0 [ 383.028850][T19016] __x64_sys_prctl+0x67/0x80 [ 383.028881][T19016] x64_sys_call+0x2533/0x3020 [ 383.028912][T19016] do_syscall_64+0x136/0x3c0 [ 383.028939][T19016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.028963][T19016] RIP: 0033:0x7fbc9728ce59 [ 383.029065][T19016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.029092][T19016] RSP: 002b:00007fbc95ce7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 383.029120][T19016] RAX: ffffffffffffffda RBX: 00007fbc97505fa0 RCX: 00007fbc9728ce59 [ 383.029210][T19016] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 383.029226][T19016] RBP: 00007fbc97322e6f R08: 0000000000000000 R09: 0000000000000000 [ 383.029240][T19016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.029256][T19016] R13: 00007fbc97506038 R14: 00007fbc97505fa0 R15: 00007ffe71147108 [ 383.029304][T19016] [ 383.029351][T19021] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 383.085027][T19016] memory: usage 307000kB, limit 307200kB, failcnt 57 [ 383.108094][T19025] bridge0: port 1(team0) entered blocking state [ 383.183570][T19016] memory+swap: usage 213920kB, limit 9007199254740988kB, failcnt 0 [ 383.183593][T19016] kmem: usage 145540kB, limit 9007199254740988kB, failcnt 0 [ 383.183610][T19016] Memory cgroup stats for /syz5: [ 383.183856][T19016] cache 69726208 [ 383.183945][T19016] rss 131072 [ 383.184014][T19016] shmem 69722112 [ 383.184024][T19016] mapped_file 0 [ 383.184032][T19016] dirty 0 [ 383.184041][T19016] writeback 0 [ 383.184050][T19016] workingset_refault_anon 1300 [ 383.184060][T19016] workingset_refault_file 0 [ 383.184070][T19016] swap 0 [ 383.184077][T19016] swapcached 5324800 [ 383.184085][T19016] pgpgin 74466 [ 383.184094][T19016] pgpgout 57410 [ 383.184170][T19016] pgfault 61394 [ 383.184179][T19016] pgmajfault 4 [ 383.184188][T19016] inactive_anon 0 [ 383.184197][T19016] active_anon 69857280 [ 383.184207][T19016] inactive_file 0 [ 383.184217][T19016] active_file 0 [ 383.184267][T19016] unevictable 0 [ 383.184276][T19016] hierarchical_memory_limit 314572800 [ 383.282549][T19025] bridge0: port 1(team0) entered disabled state [ 383.326845][T19016] hierarchical_memsw_limit 9223372036854771712 [ 383.326863][T19016] total_cache 69726208 [ 383.326874][T19016] total_rss 131072 [ 383.326883][T19016] total_shmem 69722112 [ 383.326891][T19016] total_mapped_file 0 [ 383.361952][T19025] team0: entered allmulticast mode [ 383.385825][T19016] total_dirty 0 [ 383.385843][T19016] total_writeback 0 [ 383.385853][T19016] total_workingset_refault_anon 1300 [ 383.385865][T19016] total_workingset_refault_file 0 [ 383.385875][T19016] total_swap 0 [ 383.385885][T19016] total_swapcached 5324800 [ 383.385894][T19016] total_pgpgin 74466 [ 383.385924][T19016] total_pgpgout 57410 [ 383.385933][T19016] total_pgfault 61394 [ 383.385943][T19016] total_pgmajfault 4 [ 383.385953][T19016] total_inactive_anon 0 [ 383.385962][T19016] total_active_anon 69857280 [ 383.385970][T19016] total_inactive_file 0 [ 383.385980][T19016] total_active_file 0 [ 383.385989][T19016] total_unevictable 0 [ 383.385999][T19016] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4296,pid=19015,uid=0 [ 383.386115][T19016] Memory cgroup out of memory: Killed process 19015 (syz.5.4296) total-vm:96216kB, anon-rss:1356kB, file-rss:21644kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 383.386298][T19021] EXT4-fs: error -4 creating inode table initialization thread [ 383.386396][T19021] EXT4-fs (loop5): mount failed [ 383.595688][T19025] bond0: entered allmulticast mode [ 383.692494][T19034] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4302'. [ 383.783253][T19036] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4302'. [ 383.811101][T19025] team0: entered promiscuous mode [ 383.823042][T19025] bond0: entered promiscuous mode [ 384.300685][ T6301] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 384.324646][ T6301] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 384.465243][T19078] loop7: detected capacity change from 0 to 2048 [ 384.555384][T19078] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.609329][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 384.609347][ T28] audit: type=1400 audit(1782116188.229:2219): avc: denied { write } for pid=19077 comm="syz.7.4319" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 384.643595][T19085] sctp: [Deprecated]: syz.3.4320 (pid 19085) Use of int in max_burst socket option. [ 384.643595][T19085] Use struct sctp_assoc_value instead [ 384.726773][ T28] audit: type=1400 audit(1782116188.349:2220): avc: denied { map } for pid=19077 comm="syz.7.4319" path="/494/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 384.773564][T19077] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 384.802062][ T28] audit: type=1400 audit(1782116188.349:2221): avc: denied { execute } for pid=19077 comm="syz.7.4319" path="/494/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 384.804150][T19077] EXT4-fs (loop7): Remounting filesystem read-only [ 384.855453][T19089] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 384.872406][T10300] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.921489][T19094] loop7: detected capacity change from 0 to 2048 [ 384.964123][T19094] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 384.972782][T19094] System zones: 0-7 [ 384.977447][T19094] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.997544][T19094] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.4322: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 384.997916][ T28] audit: type=1400 audit(1782116188.619:2222): avc: denied { write } for pid=19093 comm="syz.7.4322" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 385.037211][T19094] EXT4-fs (loop7): Remounting filesystem read-only [ 385.050112][T19098] IPv6: sit2: Disabled Multicast RS [ 385.058561][T19094] xt_hashlimit: size too large, truncated to 1048576 [ 385.162230][ T28] audit: type=1400 audit(1782116188.779:2223): avc: denied { sqpoll } for pid=19104 comm="syz.5.4327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 385.186351][ T28] audit: type=1400 audit(1782116188.809:2224): avc: denied { accept } for pid=19104 comm="syz.5.4327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 385.238061][ T28] audit: type=1400 audit(1782116188.859:2225): avc: denied { ioctl } for pid=19108 comm="syz.4.4328" path="socket:[67101]" dev="sockfs" ino=67101 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 385.286760][T19114] netlink: 'syz.9.4330': attribute type 4 has an invalid length. [ 385.331414][T10300] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.380553][T19121] netlink: 'syz.9.4333': attribute type 1 has an invalid length. [ 385.418639][T19121] bond1: (slave veth5): Enslaving as an active interface with a down link [ 385.442047][T19121] bond1: (slave dummy0): making interface the new active one [ 385.450573][T19121] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 385.464551][T19121] netlink: 'syz.9.4333': attribute type 10 has an invalid length. [ 385.473385][T19121] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4333'. [ 385.496801][T19121] dummy0: entered promiscuous mode [ 385.497393][ T28] audit: type=1400 audit(1782116189.119:2226): avc: denied { getopt } for pid=19125 comm="syz.3.4335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 385.523700][T19121] bond1: (slave dummy0): Releasing active interface [ 385.580986][T19128] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4336'. [ 385.596622][T19128] syzkaller1: entered promiscuous mode [ 385.602917][T19128] syzkaller1: entered allmulticast mode [ 385.681668][ T28] audit: type=1400 audit(1782116189.239:2227): avc: denied { read } for pid=19129 comm="syz.7.4337" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 385.709451][ T28] audit: type=1400 audit(1782116189.299:2228): avc: denied { open } for pid=19129 comm="syz.7.4337" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 386.153532][T19167] tipc: Enabling of bearer rejected, failed to enable media [ 386.178925][T19169] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4351'. [ 386.804237][T19205] loop7: detected capacity change from 0 to 128 [ 386.839282][T19205] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 386.874183][T19205] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 386.921239][T19211] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4365'. [ 386.940330][T19205] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.306453][T19225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4373'. [ 387.574360][T19242] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.652587][T19242] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.753379][T19242] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.796253][T19242] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.896240][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.905988][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.929059][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.942895][T19256] loop7: detected capacity change from 0 to 256 [ 387.958202][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.195289][T19290] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.346959][T19290] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.377120][ T11] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 389.391880][ T11] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 389.466167][T19290] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.594977][T19290] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.702125][ T49] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.714113][ T49] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.764412][ T49] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.781186][ T49] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.852164][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 389.862961][T19319] Bluetooth: hci0: Frame reassembly failed (-90) [ 391.872652][ T4227] Bluetooth: hci0: command 0x1003 tx timeout [ 391.874691][ T8303] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 392.026897][T19361] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.061249][T19363] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 392.200721][T19361] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.377658][T19369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4419'. [ 392.467791][T19361] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.533978][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 392.533998][ T28] audit: type=1400 audit(1782116196.159:2244): avc: denied { ioctl } for pid=19373 comm="syz.9.4422" path="socket:[68102]" dev="sockfs" ino=68102 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 392.611910][T19361] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.662506][ T28] audit: type=1400 audit(1782116196.279:2245): avc: denied { mount } for pid=19388 comm="syz.7.4430" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 392.869467][ T28] audit: type=1400 audit(1782116196.489:2246): avc: denied { listen } for pid=19401 comm="syz.7.4434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 392.911689][ T4397] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.922928][ T4397] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.944195][T19402] IPv6: sit1: Disabled Multicast RS [ 392.982446][ T4397] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.991200][ T4397] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.122095][ T28] audit: type=1400 audit(1782116196.739:2247): avc: denied { bind } for pid=19413 comm="syz.3.4439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 393.157641][ T28] audit: type=1400 audit(1782116196.739:2248): avc: denied { name_bind } for pid=19413 comm="syz.3.4439" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 393.180510][ T28] audit: type=1400 audit(1782116196.739:2249): avc: denied { node_bind } for pid=19413 comm="syz.3.4439" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 393.402221][T19422] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.4442'. [ 393.471192][T19426] Unsupported ieee802154 address type: 0 [ 393.477625][ T28] audit: type=1400 audit(1782116197.089:2250): avc: denied { bind } for pid=19424 comm="syz.7.4444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 393.532454][ T28] audit: type=1326 audit(1782116197.129:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19424 comm="syz.7.4444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4b808ce59 code=0x7ffc0000 [ 393.564582][ T28] audit: type=1326 audit(1782116197.129:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19424 comm="syz.7.4444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4b808ce59 code=0x7ffc0000 [ 393.614044][ T28] audit: type=1326 audit(1782116197.129:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19424 comm="syz.7.4444" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4b808ce59 code=0x7ffc0000 [ 393.771839][T19437] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.785910][T19441] netlink: 'syz.7.4450': attribute type 1 has an invalid length. [ 393.810888][T19443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4451'. [ 393.843138][T19441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 393.874495][T19437] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.947287][T19447] bond2: (slave geneve3): making interface the new active one [ 393.981983][T19447] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 394.058889][T19437] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.200744][T19437] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.318093][T19459] loop5: detected capacity change from 0 to 164 [ 394.324772][ T4397] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.337920][ T4397] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.373628][ T49] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.388223][T19459] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 394.407173][ T4397] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.415852][T19459] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 395.391167][T19520] netlink: 448 bytes leftover after parsing attributes in process `syz.9.4483'. [ 396.001405][T19559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4497'. [ 396.037894][T19559] loop3: detected capacity change from 0 to 4096 [ 396.090566][T19559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.132780][T17126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.171911][T19567] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4502'. [ 397.002604][T19579] ================================================================== [ 397.011009][T19579] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 397.018691][T19579] [ 397.021219][T19579] write to 0xffff888101fd1968 of 4 bytes by task 19580 on cpu 1: [ 397.029044][T19579] touch_atime+0x1cb/0x300 [ 397.033768][T19579] shmem_file_read_iter+0x3ed/0x4b0 [ 397.038986][T19579] copy_splice_read+0x47a/0x6b0 [ 397.043872][T19579] splice_direct_to_actor+0x27c/0x680 [ 397.049260][T19579] do_splice_direct+0x119/0x1a0 [ 397.054136][T19579] do_sendfile+0x37d/0x640 [ 397.058591][T19579] __x64_sys_sendfile64+0x105/0x150 [ 397.063804][T19579] x64_sys_call+0x2dc4/0x3020 [ 397.068509][T19579] do_syscall_64+0x136/0x3c0 [ 397.073127][T19579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.079103][T19579] [ 397.081459][T19579] read to 0xffff888101fd1968 of 4 bytes by task 19579 on cpu 0: [ 397.089277][T19579] atime_needs_update+0x25f/0x3e0 [ 397.094413][T19579] touch_atime+0x4a/0x300 [ 397.098868][T19579] shmem_file_read_iter+0x3ed/0x4b0 [ 397.104294][T19579] copy_splice_read+0x47a/0x6b0 [ 397.109227][T19579] splice_direct_to_actor+0x27c/0x680 [ 397.114710][T19579] do_splice_direct+0x119/0x1a0 [ 397.119846][T19579] do_sendfile+0x37d/0x640 [ 397.124559][T19579] __x64_sys_sendfile64+0x105/0x150 [ 397.129791][T19579] x64_sys_call+0x2dc4/0x3020 [ 397.134498][T19579] do_syscall_64+0x136/0x3c0 [ 397.139209][T19579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.145124][T19579] [ 397.147483][T19579] value changed: 0x24f3c002 -> 0x258c5682 [ 397.153546][T19579] [ 397.155916][T19579] Reported by Kernel Concurrency Sanitizer on: [ 397.162459][T19579] CPU: 0 UID: 0 PID: 19579 Comm: syz.9.4506 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 397.173823][T19579] Tainted: [W]=WARN [ 397.177740][T19579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 397.188620][T19579] ==================================================================