last executing test programs: 8m19.106428912s ago: executing program 32 (id=569): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)) setregid(0xffffffffffffffff, 0xee00) 7m53.794090716s ago: executing program 33 (id=772): socket$netlink(0x10, 0x3, 0x8000000004) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x90102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0xa000, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = creat(0x0, 0xa8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x5, 0x0, 0x100, 0x0, r2}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001fc0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000026c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf25280000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4c000}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r7, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) sendmsg$nl_route_sched(r5, 0x0, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(0x0, r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r10, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x1a}}}}}, 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8) r11 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r11, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) connect$inet(r11, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x12, r1, 0x86c36000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x20, 0x4, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x89}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x880) 7m46.795556789s ago: executing program 6 (id=825): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x7399, 0x0, 0x1, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x10, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703008d4fe503bc396494222bedca940000000000850000000c000000b70000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) syz_clone(0x25804400, &(0x7f0000009000)="01ca878e776646e80521a1e55cbde88a5ffd98f92e33e5a51aefa4b01fedfe2ae00abf2526abf6b3f77f9118", 0x2c, 0x0, &(0x7f00000090c0), &(0x7f0000009100)="95a195933713") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x1f3ea855875a761f, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0xc1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000100004000000001300000000000000000037b4dac1e8"], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002c0007010100000000000000037c00000a0001803422ade7d66300007509308da93b44ed5a7d62f7543f5bebb434"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000614010026bd7000fe"], 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x40) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) r4 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="180000002500010323bd7045caac98da"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044010) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 7m45.645614766s ago: executing program 6 (id=831): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x6, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)}, 0xb}], 0x1, 0x40000021, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = shmget$private(0x0, 0x13000, 0x2, &(0x7f0000fed000/0x13000)=nil) shmat(r3, &(0x7f0000b33000/0x2000)=nil, 0x1000) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xc0000, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x224061, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 7m45.431923602s ago: executing program 6 (id=833): set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x2000, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 7m45.413138793s ago: executing program 6 (id=834): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68190, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x2, 0x1c}, 0x10c1e8, 0x7, 0x0, 0x3, 0x6, 0x6, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x2a00845, &(0x7f00000002c0)=ANY=[], 0x0, 0x2b7, &(0x7f0000000580)="$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") ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x2000006, 0xffffffffffffffff, 0x20000040000005}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_elf32(r5, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xf5, 0xf0, 0x14, 0x8ab, 0x2, 0x0, 0x80000001, 0x19a, 0x38, 0x8008b, 0x6, 0x4, 0x20, 0xffffffffffffff87, 0x5, 0x6, 0x20}}, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x12, r5, 0x94628000) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0}}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$pokeuser(0x6, r6, 0x388, 0x7a092814) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000004c0)='./file0\x00', 0x1000c00, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES32, @ANYRES32=r0], 0xff, 0x248, &(0x7f0000000880)="$eJzs2k9rXFUYB+D3pqmpielE/EcL4kEX6ubSZO2iQVoQA4o2QhWkt+ZGh1xnwtwhMCJ2Vrr1I7gWl+4E6dJNNn4CF+6yybIL8cp0Uu2UiVKiTrXPs5kXzv3NOYc5czhczsErX368s13n20U/5rIs5i7GMG5lsRJzcccwXn7x6g/Pvn313dfXNzYuvZXS5fUrq2sppbPPff/ep988f7O/9M63Z79biP2V9w8O137ef3r/3MGvVz5q16ldp063n4p0vdvtF9erMm216508pTersqjL1O7UZW+ifbvq7u4OUtHZWl7c7ZV1nYrOIO2Ug9Tvpn5vkIoPi3Yn5XmelheDk9j8+lbTxGFz+lo0TfPoV7F0M5Z/ilZkj6fsiYvZU9eyZ4bZucOmac16qPwj/P4Pt7s29TMR1Rd7m3ub489x+/p2tKOKMi5EK36J0TI5Mq4vv7Zx6UK6bSU+r24c5W/sbZ6azK9GK1am51fH+TSZX4jFiNMRR/m1aMWT0/NrU/Nn4qUX7uo/j1b8+EF0o4qtGGX/yH+2mtKrb2zckz9/+zkAgP+bPP1u6vktz49rH+fv43x4z/lqPs7Pz3buRNSDT3aKqip7MynuvGM69pnHTt7X6PtnMcH5P5uX4mTFQtxXKosYjtbBAzH4Rx6Iv95fFUsz25L4F03ukwAAAAAAAAAAAPxX/O2XB09Nv4ELAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwnN8CAAD//1uOxe4=") r7 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)=ANY=[@ANYBLOB="f2ff0000914d784314d31b0cf282a640d9da375b58c20fb2124420d29be26246e4977e029fdb94bbff74b844d5acd96b471c5a680077a560a1927b5f487552f864624f583002c2ce9ae8be8477de5e90153f6a811bbf8b5273c790daeb5d7fc42bea534b2507821eed0b93fff51a5b4b5b6d07629d8448d116d94d32d6df2ccb3f7836f92690fb50bae2cb819712be7fc35894c69149c2ab6dc5cc68cba7585be294ced1d5df6d0d6adb42f3000000003e7784b00f8e044a390668a243465ca1afb6a35c4a0dffed9cf26762d9f4d8d40e54e1aa067a393adb4bcf23788daabf616eacb2b67e0aa42646b5cede68713d7ae17cf2c2128ed36ecdeaf190fd86c0869a7c6409eafe7f59bfefd4313b5fc151d0e4e4f3512728b115a1086ade26d01518e8e15d84fc8d52626a6e1a9c60f8337b39dab6f7ea6966927bacd7db0e0c5ef737014c764efb77b8cff4c723f65c5dd895d78c2b24cf91471a143e095c1f270d148f04103580bdc4a44a982c97e7a11a133be55c7d93c266f267ae046be906bb6333d80cc39b2f9c1dbb4efc1181370b94be4271f6bc2ea261928e987e9967f3be907145112cdb5c644e127b6fca1cc62c72feb02cdb89040d7e0654c2b4c12345466edf549d333f7fa51d50442142c1e9c02775f7f7a16b5bee3be20569e16b344f5afce7f463e9d912d3ac6c494bf03bcb2ed80944c3cda5cef49f479d9ef480ba4f74b1f3e75d04d0258fb3472be1717db82996b3caa10fc0cfbc88e4edbff0e1f2576b31e1a672b40bbec0abf61afee19e77db26ae80533ac881060b44c9f83f3adbbb23aa266e6d", @ANYRES16=r9, @ANYBLOB="010000000000000000000600000911000200200100000000000000000000000000020f000700756e636f6e66696e6564000014000300ff010000000000000000000000000001"], 0x4c}, 0x2, 0x34005, 0x0, 0x4000000}, 0x20008000) io_setup(0x200, &(0x7f0000000140)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x782f9abb}, 0x28) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) io_submit(r10, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r7, &(0x7f0000000000), 0x4000}]) 7m43.383254138s ago: executing program 6 (id=845): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080003000200"], 0x78}}, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000000)=']\x00', 0x10000, &(0x7f0000000100)={@_ha_fsid={[0x5, 0xff]}, {0x6, 0x6, 0x10000}}, 0xfffffe00, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x7}) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000240)) 7m43.178370854s ago: executing program 6 (id=849): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000004000000000000000001000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100002000000000000ffff0000ff8000001c250800000000000500040000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e9f000005350000020001002000000000000000480003006465666c6174"], 0x140}}, 0x844) 7m43.028385128s ago: executing program 34 (id=849): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000004000000000000000001000004d46c000000fc010000000000000000000000000001fe0000000000000092010000000000100002000000000000ffff0000ff8000001c250800000000000500040000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffff9030000000000007e9f000005350000020001002000000000000000480003006465666c6174"], 0x140}}, 0x844) 6m29.909221004s ago: executing program 4 (id=1410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x8}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)=""/160, 0x16d, 0xa0, 0x0, 0x5}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0xb, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) recvmmsg(r6, &(0x7f00000069c0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0, 0x38}, {&(0x7f0000000600)=""/164, 0xa4}], 0x2}, 0x9}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20800, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0xd000, 0x80, 0x4, 0x7, 0x6c8, 0x800000a, 0x4, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000340), 0x1a, 0x426042) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r7, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 6m28.875622717s ago: executing program 4 (id=1418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="7fbe5d3987efa065c16799be760e637907b1c711bbddd092b926754c228a940ff45331f0df2587e2e6bd31", 0x2b, 0x8810, 0x0, 0x0) 6m28.77629618s ago: executing program 4 (id=1421): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x1d, 0x1, 0xd, &(0x7f00000004c0), 0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="bcb355ac13684bc9016db9af491e444aa7db9f1088d47634a627518fe9c948242c85d4166c51bd814eb06b3133bc4b1b9768a12919c629344449414d93dd734f881c10b8efd5a81870fb6c3fa9d4560dabaf57dd3f118ad909db87bff71406520c39048bae002cea3f39dd6a22761a3c25eb6360c5a035a9ed788c4c996ce9"], 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff8400000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc0200000000000000000000000000006401010200"], 0x184}, 0x1, 0x0, 0x0, 0x10000}, 0x0) 6m28.671511193s ago: executing program 4 (id=1423): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x20020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair(0x22, 0x0, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) socketpair(0x21, 0x2, 0x2, 0x0) recvmsg(r1, 0x0, 0x100) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0x8, 0x4}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) memfd_secret(0x0) 6m28.621224495s ago: executing program 4 (id=1424): r0 = socket(0x26, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) socket$inet(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x4, 0x1297, &(0x7f0000002e40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000002400)) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000240)=0x9, 0x4) connect$inet6(r4, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) mlockall(0x1) sendfile(r2, r3, 0x0, 0xe3aa6ea) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000280), 0x0, 0x5) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000040a030000000000000000000100000a0900010073797a31000000a27633331ee3605c001c00048008000140000059f50800014000000eb7080001400000000606000240883e0000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4048004) 6m26.27426283s ago: executing program 4 (id=1447): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fsopen(&(0x7f0000000000)='hfs\x00', 0x0) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x3ec0) 6m26.218871602s ago: executing program 35 (id=1447): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fsopen(&(0x7f0000000000)='hfs\x00', 0x0) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x3ec0) 3m55.246602853s ago: executing program 8 (id=2478): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000740), &(0x7f0000000340)='./file0\x00', 0x3800014, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f646f74732c747a3d5554432c646f74732c666c7573682c6e66732c6e66733d6e6f7374616c655f726f2c644673636172642c6e6f646f74732c6e6f646f74732c646f7474f90b9b74732c646f733178666c6f7070792c646f74732c6e6f646f74732c73700b79735f696d6d757461626c652c646f74732c646f74732c6e6f646f74732c6e6f636173652c636f6465706167653d3933362c646f74732c646f733178666c6f7070792c00"], 0x0, 0x224, &(0x7f0000000fc0)="$eJzs3T2LE10UAOAz2Y9M3uZNp4jCgI2FLGqpzYqsIAZEZQstRGG12RXBbaLNbulP8AdaWMpWQZCR3clk8u2SuMmqz1MkZ86Ze+fe4ZJMk5uXl9/u7rzbf/PlwudI0yRqm7EZnSSaUYvSYUxUm1wCAM6rTp7Ht7zQl06Gz1vtRWuLGhoAcEYmfP/3+zGleTL6pAAAnHdPnz1/eLfV2nqSZWnEUf5/kT5sbxfB/QetrRtZlmVfHzerVkft9vZKr34zG352OK6vxX/d+q2sMFhfj2tX41PZ6b1HraF6PXbGjrhRvKUnr8155w8AAAAAAAAAAAAAAAAAAAAAAMtwJbJSM+L6nSJb7e+zsdFfj+7+O8f14qi3P9DI/j6rcancNLjaHig/WNTEAAAAAAAAAAAAAAAAAAAA4A+y/+Hj7qu9vdfvq6AeEYOZqUGj21M3k3QPT85ZKYNT9LOE4MXF3VqUmfKOzN3zPFOu92fqZ38T0nELoArWx5ca01uNBI1frKjkdy+SbObm3+P24Hqeazwzzms9Iua6em1yqZPn+SmXcam+wM8jAAAAAAAAAAAAAAAAAAD4l1U/+h2tpcsYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsQfX//zMEBxFRZpKYeHLvYo2lThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/2M8AAAD//6YfILQ=") r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001d40)={{0xffffffffffffffff, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0}, 0x0, &(0x7f0000001c40)}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x56}, 0x1c) io_uring_enter(r7, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0xb1, 0x2, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r8, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x332a}], 0x1}}], 0x400000000000292, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x400000, 0x0, 0x0, 0x80000001, 0x8000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xb) 3m54.226172335s ago: executing program 8 (id=2485): r0 = socket$inet(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) capget(&(0x7f0000000200)={0x20080522}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f00000001c0)='cgroup2\x00', 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$tipc(r3, &(0x7f0000000100)=@id, &(0x7f0000000180)=0x10, 0x800) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x7, 0x1, 0x2, 0xad15, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x4, 0x2f, 0x0, @empty, @remote}}}}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000780)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}) r1 = dup(r0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r4, &(0x7f0000003000)=@file={0x1, './file0/file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001c66432e27f165b5d4bf79d4ee732c75b5f67ecb54da2ebb127efa3182f5d5631d6b83e30e6e1f7f186f3084892001080ebe5c2c20a669f2", @ANYRES16=r7, @ANYBLOB="010000400000feffffff14000000180001801400020073797a5f74756e000000000000000000"], 0x2c}}, 0x0) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f00000000c0)) shutdown(r9, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x78) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r12 = open_tree(r11, &(0x7f0000000640)='\x00', 0x89901) syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') move_mount(r12, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 3m53.998750392s ago: executing program 8 (id=2495): bpf$PROG_LOAD(0x5, 0x0, 0xffffff87) flock(0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x2a1d1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/igmp\x00') r3 = socket(0xa, 0x801, 0x0) getsockopt(r3, 0x0, 0x1fd, 0x0, &(0x7f0000001ffc)) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000ac0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000010}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(0x0, r3) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000680)={&(0x7f0000000540), 0xc, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012bbd7000fcdbdf250e000000680003800500080006000000140002006772653000000000000000000000000008000100020000000600040009000000060007004e2400000000000000000000000000000000000000060007004e24000075bcc2129ed7c4bed13bc3f5a924555339c05a7f6a70ae25715705aabe5ecd879a028cc97d251f458c62ff954f13854cc7de622bce9ce94e682758221f49f1c4fdb3c4304d00b924e414fe4a9f3258658e033101cfc25eb6c9d225490b75eeaa46760ffa5c73f088982951790026edb0e0e516ff2db9d3d7e92998d5a11e98577085ded622ce7037411e7a711c94ee631c6f00"/257], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r3) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3e18000000000}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfff}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x80) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000029"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="07000000000000f8ae21ea27b4d29f00", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000030200"/24], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=@gettaction={0x130, 0x32, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb2}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x130}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x2000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x4000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x1e, 0x8, 0x3, 0x2, 0x41, r2, 0xd26, '\x00', r8, r2, 0x1, 0x3, 0x3}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000380)=[{&(0x7f0000000180)="2dce", 0x2}, {&(0x7f0000000300)="c2172926", 0x4}, {&(0x7f00000004c0)="8cd391a732", 0x5}, {&(0x7f00000005c0)="b1446ddbfe", 0x5}, {&(0x7f0000000680)="883273e8", 0x4}], 0x5, 0x0) ioctl$TCFLSH(r9, 0x541b, 0x7ffffffffffffffe) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000040)) 3m38.927429262s ago: executing program 36 (id=2495): bpf$PROG_LOAD(0x5, 0x0, 0xffffff87) flock(0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x2a1d1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/igmp\x00') r3 = socket(0xa, 0x801, 0x0) getsockopt(r3, 0x0, 0x1fd, 0x0, &(0x7f0000001ffc)) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000ac0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000010}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(0x0, r3) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000680)={&(0x7f0000000540), 0xc, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012bbd7000fcdbdf250e000000680003800500080006000000140002006772653000000000000000000000000008000100020000000600040009000000060007004e2400000000000000000000000000000000000000060007004e24000075bcc2129ed7c4bed13bc3f5a924555339c05a7f6a70ae25715705aabe5ecd879a028cc97d251f458c62ff954f13854cc7de622bce9ce94e682758221f49f1c4fdb3c4304d00b924e414fe4a9f3258658e033101cfc25eb6c9d225490b75eeaa46760ffa5c73f088982951790026edb0e0e516ff2db9d3d7e92998d5a11e98577085ded622ce7037411e7a711c94ee631c6f00"/257], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) pread64(r2, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r3) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3e18000000000}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfff}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x80) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000029"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="07000000000000f8ae21ea27b4d29f00", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000030200"/24], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=@gettaction={0x130, 0x32, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb2}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x130}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x4}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x2000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x4000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x1e, 0x8, 0x3, 0x2, 0x41, r2, 0xd26, '\x00', r8, r2, 0x1, 0x3, 0x3}, 0x50) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000380)=[{&(0x7f0000000180)="2dce", 0x2}, {&(0x7f0000000300)="c2172926", 0x4}, {&(0x7f00000004c0)="8cd391a732", 0x5}, {&(0x7f00000005c0)="b1446ddbfe", 0x5}, {&(0x7f0000000680)="883273e8", 0x4}], 0x5, 0x0) ioctl$TCFLSH(r9, 0x541b, 0x7ffffffffffffffe) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000040)) 3m15.330762762s ago: executing program 7 (id=2831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240"], 0xc4}, 0x1, 0x0, 0x0, 0x2400}, 0x40) 3m15.207943926s ago: executing program 7 (id=2832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="6000000003080500000000000000000005000005050003001100000044000480080002"], 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="68000000100037040000800000000f0000000000", @ANYRES32=r3, @ANYBLOB="c3040500000000004800128008000100677470003c00028005000500", @ANYRES32=r2, @ANYBLOB='\b\x00'], 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 3m15.014539052s ago: executing program 7 (id=2835): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) prlimit64(0x0, 0xe, 0x0, 0x0) io_setup(0x4, 0x0) io_submit(0x0, 0x0, 0x0) socket(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000006c0)='.\x00', 0xaa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(r4, r5, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) readv(r5, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf25eeff7700", @ANYRES32=0x0, @ANYBLOB="390902000360000008001b0000000000080004"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) socket$nl_netfilter(0x10, 0x3, 0xc) 3m13.859850109s ago: executing program 7 (id=2840): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x8005, 0xffffffffffffffff, 0x0, 0x0, 0x2c}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1aa) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1004001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x80) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0xc0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x2200892, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='\x00', 0x89901) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) 3m12.055738657s ago: executing program 7 (id=2846): socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa3b"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2202"], 0xfdef) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x15}, 0x880, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) flock(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x82) flock(r5, 0x1) flock(r5, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0100001900010025bd700000000000fc020000000000000000ff01000000000000000000000000000900000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000000420d0000000000000000000000000000dd0200000000000000000000c06b6e000000000000000000c4000500ff020000000000000000000000000001000000002b00000002000000ac1414bb000000000000000000000000000000000103000000000000000000000000000000000000000000000000ffff6401010100000000320000000200000000000000000000000000000000000000ffffffff0000000003000000000000000000000020010000000000000000000000000001000000003200000000000000ffffffff00000000000000000000000000000000040000000000000000000000feffffff"], 0x17c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100001f000000000000000000", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000300)={0xfffe, 0x0, 0x2}, 0xc) 3m10.806640496s ago: executing program 7 (id=2851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)={0x28, 0x12, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x4f}, @nested={0x14, 0x72, 0x0, 0x1, [@typed={0x4, 0x68}, @nested={0xc, 0xc1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @pid}]}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x48000}, 0x8880) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r3, r4, 0x25, 0x4, @val=@tcx}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0x2000000000000033, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000646c6c2500000000002008207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a35000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) close_range(r2, 0xffffffffffffffff, 0x0) 3m10.69710614s ago: executing program 37 (id=2851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)={0x28, 0x12, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x4f}, @nested={0x14, 0x72, 0x0, 0x1, [@typed={0x4, 0x68}, @nested={0xc, 0xc1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @pid}]}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x48000}, 0x8880) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r3, r4, 0x25, 0x4, @val=@tcx}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0x2000000000000033, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000646c6c2500000000002008207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a35000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) close_range(r2, 0xffffffffffffffff, 0x0) 21.995002638s ago: executing program 0 (id=4364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {0x0, 0x0, 0x8}, {0x2}, {0x6, 0x0, 0x0, 0x10000000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000300)=0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 21.91822829s ago: executing program 0 (id=4365): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) unshare(0x2c020400) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7e6b, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 21.812094964s ago: executing program 0 (id=4368): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) syz_emit_ethernet(0x3f, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @loopback}, '\x00'}}}}}, 0x0) 21.739839356s ago: executing program 0 (id=4370): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f00000011c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRESHEX, @ANYBLOB="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", @ANYRES32], 0x1, 0x26c, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x1, 0x0) 21.693429577s ago: executing program 0 (id=4372): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x8090, 0x8000, 0x2, 0x2, {{0x5, 0x4, 0x2, 0x38, 0x14, 0x65, 0x0, 0x8, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}}}}}) 20.219938484s ago: executing program 0 (id=4399): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x5c, r2, 0x1, 0x70bd2b, 0x25dfdc06, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0x400000000000000}, 0x0) 20.219703264s ago: executing program 38 (id=4399): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x5c, r2, 0x1, 0x70bd2b, 0x25dfdc06, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0x400000000000000}, 0x0) 7.281145268s ago: executing program 1 (id=4682): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xff, 0x0, 0x100000000000, 0x0, 0x3ffd, 0xa462}, 0x0, &(0x7f0000000100)={0x8, 0x1, 0x6d, 0x1, 0x3, 0x2, 0x100000000, 0x40000000000}, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x0) fchdir(r2) creat(&(0x7f0000000040)='./bus\x00', 0x0) 6.422713855s ago: executing program 1 (id=4693): io_uring_setup(0x1b52, &(0x7f0000000100)={0x0, 0x3ae2, 0x20, 0x0, 0x2c1}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0], 0x3, 0x242, &(0x7f0000000300)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='truste'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) 6.349748077s ago: executing program 1 (id=4695): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000006, 0x110, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x65) 5.047963469s ago: executing program 1 (id=4711): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000ec0)=ANY=[], 0x0) 5.03598649s ago: executing program 1 (id=4712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 4.970843842s ago: executing program 1 (id=4713): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x20040000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x60000, 0x11) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 2.174852921s ago: executing program 9 (id=4785): sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dfe, 0x8, "00b300"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 1.400010795s ago: executing program 5 (id=4814): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_timedreceive(r0, &(0x7f0000000500)=""/4096, 0x1000, 0x6, &(0x7f0000000240)={0x77359400}) 1.399875166s ago: executing program 5 (id=4815): syz_read_part_table(0x105f, &(0x7f0000008a40)="$eJzszitSBDEUhtE/3U0/HIaFsBg0AgeLoA07YhOsBIHAjM9U5lXjW8yIc0yS+irJDTdVxry/9iXJkmRNnabrPNSSlJbXhyTf/5fSndfH35YzPh/PP2/J7rDr24tzMtWTz6yZ8/XULUPSvulear9t/L+PbfcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4C7sAwAA///bnhVl") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68840}, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.26787422s ago: executing program 9 (id=4818): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 1.26770401s ago: executing program 5 (id=4819): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x24, 0x28, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10}, {0x11, 0xffff}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x14000080) 1.173511993s ago: executing program 5 (id=4821): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendfile(r1, r2, 0x0, 0x10ffff) 680.012529ms ago: executing program 2 (id=4835): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 669.438619ms ago: executing program 2 (id=4836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004080}, 0x4008000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 471.299366ms ago: executing program 3 (id=4840): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x167) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000300)=ANY=[], 0x0) 448.551476ms ago: executing program 3 (id=4841): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) close(r1) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000003c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 411.593147ms ago: executing program 2 (id=4842): r0 = io_uring_setup(0x1006, &(0x7f0000000100)={0x0, 0x5f3d, 0x40, 0x1, 0x13b}) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close_range(r0, 0xffffffffffffffff, 0x0) 339.971929ms ago: executing program 3 (id=4843): r0 = fsopen(&(0x7f0000000180)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x82) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x100000006) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x40, 0x0) 339.85564ms ago: executing program 2 (id=4844): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x24, 0x28, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10}, {0x11, 0xffff}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x14000080) 317.226321ms ago: executing program 9 (id=4845): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e26, 0x69ed155a, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1}, r1}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 302.566201ms ago: executing program 3 (id=4846): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 241.187613ms ago: executing program 9 (id=4847): bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file1\x00', &(0x7f0000000100)=[0xd], 0x0, 0xc5, 0x1, 0x1}}, 0x40) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 240.774003ms ago: executing program 2 (id=4848): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff5644f, 0x5011, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 204.187814ms ago: executing program 3 (id=4849): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 193.027424ms ago: executing program 2 (id=4850): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 138.982976ms ago: executing program 9 (id=4851): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x167) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000300)=ANY=[], 0x0) 138.671356ms ago: executing program 3 (id=4852): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 130.220187ms ago: executing program 5 (id=4853): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1a"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 61.947198ms ago: executing program 9 (id=4854): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ftruncate(r0, 0x0) 0s ago: executing program 5 (id=4855): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) kernel console output (not intermixed with test programs): ), stripe is disabled [ 522.551156][T17050] JBD2: no valid journal superblock found [ 522.551171][T17050] EXT4-fs (loop9): Could not load journal inode [ 522.815404][T17052] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.982749][T17052] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.106143][T17052] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.165023][T17052] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.246071][T10457] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.326550][T10457] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.353635][T10457] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.371801][T17061] netlink: 'syz.9.3476': attribute type 29 has an invalid length. [ 523.385829][T10457] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.402592][T17061] netlink: 'syz.9.3476': attribute type 29 has an invalid length. [ 523.418189][T17061] netlink: 500 bytes leftover after parsing attributes in process `syz.9.3476'. [ 524.042984][T17076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3480'. [ 524.052822][T17076] raw_sendmsg: syz.2.3480 forgot to set AF_INET. Fix it! [ 524.102197][T17079] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 524.157061][T17081] netlink: 'syz.1.3482': attribute type 3 has an invalid length. [ 524.170634][T17081] netlink: 'syz.1.3482': attribute type 3 has an invalid length. [ 526.112544][T17097] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 526.310647][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 526.310669][ T28] audit: type=1400 audit(526.101:3383): avc: denied { relabelto } for pid=17087 comm="syz.9.3485" name="bus" dev="tmpfs" ino=793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 526.357063][T17099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17099 comm=syz.1.3488 [ 526.394291][ T28] audit: type=1400 audit(526.101:3384): avc: denied { associate } for pid=17087 comm="syz.9.3485" name="bus" dev="tmpfs" ino=793 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmp_t:s0" [ 526.443968][T17104] tmpfs: Bad value for 'mpol' [ 526.469360][T17106] loop9: detected capacity change from 0 to 512 [ 526.489263][T17106] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 527.530781][T17106] EXT4-fs (loop9): 1 truncate cleaned up [ 527.541144][T17106] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.565421][ T28] audit: type=1400 audit(527.761:3385): avc: denied { write } for pid=17105 comm="syz.9.3492" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 530.770833][T13229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.905101][T17132] loop9: detected capacity change from 0 to 512 [ 530.935467][T17132] EXT4-fs (loop9): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 530.970607][T17138] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 531.003947][T17132] tipc: Can't bind to reserved service type 2 [ 531.294471][T17147] netlink: 'syz.9.3498': attribute type 10 has an invalid length. [ 531.401271][T17149] tipc: Started in network mode [ 531.434347][T17149] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 531.456493][T17147] loop9: detected capacity change from 0 to 1024 [ 531.472389][T17149] tipc: Enabled bearer , priority 10 [ 531.508578][T17147] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.565489][ T28] audit: type=1400 audit(531.541:3386): avc: denied { write } for pid=17141 comm="syz.9.3498" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 531.646386][T13229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.710136][T17157] xt_bpf: check failed: parse error [ 532.480739][ T3407] tipc: Node number set to 8432298 [ 532.955771][T17181] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 534.101642][T17192] rdma_op ffff8881c8fe6980 conn xmit_rdma 0000000000000000 [ 534.568701][T17203] x_tables: duplicate underflow at hook 2 [ 534.581824][T17209] netlink: 'syz.1.3517': attribute type 1 has an invalid length. [ 534.642125][T17209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 534.756587][T17218] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 535.030360][T17235] loop2: detected capacity change from 0 to 764 [ 535.055867][T17235] rock: directory entry would overflow storage [ 535.057959][T17238] gtp0: entered allmulticast mode [ 535.085159][T17235] rock: sig=0x4654, size=5, remaining=4 [ 535.350615][T17245] x_tables: duplicate underflow at hook 2 [ 535.881971][T17238] team0: Device gtp0 is of different type [ 537.554471][T17308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3543'. [ 537.711778][T17312] loop0: detected capacity change from 0 to 2048 [ 537.772716][T17312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.793941][ T28] audit: type=1400 audit(537.771:3387): avc: denied { write } for pid=17306 comm="syz.0.3543" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 538.068884][T15241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.183801][T17327] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 538.464959][T17336] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3551'. [ 538.740155][T17336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.017152][T17336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.319348][T17336] bond0 (unregistering): Released all slaves [ 540.586520][T17356] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17356 comm=syz.1.3556 [ 540.606880][T17354] tc_dump_action: action bad kind [ 540.650152][T17356] sctp: [Deprecated]: syz.1.3556 (pid 17356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 540.650152][T17356] Use struct sctp_sack_info instead [ 540.652904][ T28] audit: type=1400 audit(540.621:3388): avc: denied { audit_write } for pid=17355 comm="syz.1.3556" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 540.670415][T17356] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3556'. [ 540.718932][T17358] loop2: detected capacity change from 0 to 1024 [ 540.755846][T17358] EXT4-fs: test_dummy_encryption option not supported [ 540.786458][ T28] audit: type=1107 audit(540.621:3389): pid=17355 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 541.042217][T17359] loop2: detected capacity change from 0 to 512 [ 541.083631][T17359] EXT4-fs: Ignoring removed orlov option [ 541.105742][T17359] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 541.171542][T17359] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3557: invalid indirect mapped block 32768 (level 2) [ 541.189813][T17359] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 541.190841][T17359] EXT4-fs (loop2): 1 orphan inode deleted [ 541.192388][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 541.192769][ C0] EXT4-fs (loop2): initial error at time 541: ext4_free_branches:1023: inode 16 [ 541.193728][ C0] EXT4-fs (loop2): last error at time 541: ext4_free_branches:1023: inode 16 [ 541.215822][T17366] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 541.280392][T17359] EXT4-fs (loop2): 1 truncate cleaned up [ 541.280826][T17359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.410430][T17369] x_tables: duplicate underflow at hook 2 [ 541.562582][T17376] netlink: 'syz.0.3563': attribute type 3 has an invalid length. [ 541.663361][T14232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.357189][T17396] loop2: detected capacity change from 0 to 512 [ 542.797400][T17391] loop0: detected capacity change from 0 to 1024 [ 542.813655][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3567'. [ 543.792228][T17391] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 543.825860][T17391] JBD2: no valid journal superblock found [ 543.982098][T17391] EXT4-fs (loop0): Could not load journal inode [ 543.990913][T17386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3567'. [ 544.061987][T17386] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3567'. [ 544.211116][T17409] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 544.494823][T17423] loop0: detected capacity change from 0 to 512 [ 544.552416][T17423] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3577: bg 0: block 169: padding at end of block bitmap is not set [ 544.567414][T17423] loop0: lost filesystem error report for type 5 error -117 [ 544.570305][T17423] Quota error (device loop0): write_blk: dquota write failed [ 544.577694][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 544.577714][ C0] EXT4-fs (loop0): initial error at time 544: ext4_validate_block_bitmap:441 [ 544.577737][ C0] EXT4-fs (loop0): last error at time 544: ext4_validate_block_bitmap:441 [ 544.609431][T17423] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 544.619674][T17423] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.3577: Failed to acquire dquot type 0 [ 544.631032][T17423] loop0: lost filesystem error report for type 5 error -117 [ 544.631635][T17423] EXT4-fs (loop0): 1 truncate cleaned up [ 544.645571][T17423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.754353][T17434] netlink: 'syz.9.3578': attribute type 3 has an invalid length. [ 544.767764][T15241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.347924][T17456] sg_write: data in/out 28672/136 bytes for SCSI command 0x0-- guessing data in; [ 545.347924][T17456] program syz.9.3585 not setting count and/or reply_len properly [ 545.386857][T17456] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3585'. [ 545.403411][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3582'. [ 545.464494][T17462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3582'. [ 545.484668][T17465] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 545.486001][T17462] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3582'. [ 545.513789][T17464] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3588'. [ 545.540410][T17464] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3588'. [ 545.550432][T17469] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) ! [ 545.613873][T17472] loop0: detected capacity change from 0 to 512 [ 545.635108][T17472] msdos: Bad value for 'check' [ 545.743688][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3591'. [ 546.010926][T10463] Bluetooth: hci0: Frame reassembly failed (-84) [ 546.695336][T17469] team0: Port device team_slave_0 removed [ 547.136551][T17487] loop2: detected capacity change from 0 to 128 [ 547.251464][T17487] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 547.366368][T17487] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 547.641013][T17489] loop5: detected capacity change from 0 to 764 [ 547.835239][T17489] rock: directory entry would overflow storage [ 547.917298][T17489] rock: sig=0x4654, size=5, remaining=4 [ 548.060794][ T3736] Bluetooth: hci0: command 0x1003 tx timeout [ 548.066906][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 548.262709][T17516] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 548.348628][T17521] netlink: 'syz.0.3606': attribute type 21 has an invalid length. [ 548.357378][T17522] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3603'. [ 548.403389][T17525] loop0: detected capacity change from 0 to 512 [ 548.423785][T17525] EXT4-fs: Ignoring removed nobh option [ 548.454632][T17525] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 548.479418][T17525] EXT4-fs (loop0): 1 truncate cleaned up [ 548.495035][T17525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.624523][T10459] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 548.643948][T15241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.654378][T17533] x_tables: duplicate underflow at hook 2 [ 548.881054][T17552] x_tables: duplicate underflow at hook 2 [ 548.895269][T17555] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 548.985745][T17559] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3619'. [ 549.030428][T17559] netlink: 'syz.1.3619': attribute type 8 has an invalid length. [ 549.088866][T17565] loop0: detected capacity change from 0 to 1024 [ 549.111831][T17565] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 549.123244][T17565] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 549.133037][T17565] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.3621: Failed to acquire dquot type 0 [ 549.156520][T17565] loop0: lost filesystem error report for type 5 error -5 [ 549.158557][T17565] EXT4-fs (loop0): 1 truncate cleaned up [ 549.165763][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 549.165792][ C0] EXT4-fs (loop0): initial error at time 549: ext4_acquire_dquot:7034 [ 549.165818][ C0] EXT4-fs (loop0): last error at time 549: ext4_acquire_dquot:7034 [ 549.204266][T17565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.223704][T17575] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3624'. [ 549.309304][T15241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.349959][T17587] x_tables: duplicate underflow at hook 2 [ 549.404150][T17591] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 549.460396][ T28] audit: type=1400 audit(549.431:3390): avc: denied { kexec_image_load } for pid=17592 comm="syz.9.3633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 549.720609][ T28] audit: type=1326 audit(549.691:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.5.3635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8e0ce59 code=0x7ffc0000 [ 549.774327][ T28] audit: type=1326 audit(549.701:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.5.3635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8e0ce59 code=0x7ffc0000 [ 549.823090][ T28] audit: type=1326 audit(549.701:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.5.3635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8e0ce59 code=0x7ffc0000 [ 549.881385][ T28] audit: type=1326 audit(549.701:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.5.3635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f79f8e0ce59 code=0x7ffc0000 [ 549.932688][T17612] loop2: detected capacity change from 0 to 512 [ 549.939038][ T28] audit: type=1326 audit(549.751:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.5.3635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8e0ce59 code=0x7ffc0000 [ 549.982487][T17612] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 550.018782][T17612] EXT4-fs (loop2): 1 truncate cleaned up [ 550.026469][ T28] audit: type=1326 audit(549.751:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.5.3635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8e0ce59 code=0x7ffc0000 [ 550.038182][T17612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.051842][ T28] audit: type=1326 audit(549.751:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.5.3635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8e0ce59 code=0x7ffc0000 [ 550.094067][ T28] audit: type=1326 audit(549.751:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.5.3635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8e0ce59 code=0x7ffc0000 [ 550.094106][ T28] audit: type=1326 audit(549.751:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.5.3635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8e0ce59 code=0x7ffc0000 [ 550.094139][ T28] audit: type=1326 audit(549.751:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.5.3635" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f79f8e0cbc2 code=0x7ffc0000 [ 550.095283][T17622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3640'. [ 550.280544][T17631] x_tables: duplicate underflow at hook 2 [ 550.592378][T17638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.638511][T17638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.766253][T17647] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 550.774869][T17640] loop9: detected capacity change from 0 to 4096 [ 550.811413][T17640] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.925850][T17640] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.033885][T17658] loop9: detected capacity change from 0 to 512 [ 551.068828][T17658] EXT4-fs (loop9): orphan cleanup on readonly fs [ 551.101988][T17655] 8021q: adding VLAN 0 to HW filter on device eth0 [ 551.112504][T17655] 8021q: adding VLAN 0 to HW filter on device eth1 [ 551.123750][T17655] 8021q: adding VLAN 0 to HW filter on device eth2 [ 551.125538][T17658] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.3651: Failed to acquire dquot type 1 [ 551.132789][T17655] 8021q: adding VLAN 0 to HW filter on device eth3 [ 551.189649][T17658] loop9: lost filesystem error report for type 5 error -5 [ 551.190520][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 551.204305][ C0] EXT4-fs (loop9): last error at time 2000000001: ext4_acquire_dquot:7034 [ 551.219840][T17658] EXT4-fs (loop9): 1 truncate cleaned up [ 551.229080][T17658] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 551.264893][T17658] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3651'. [ 551.276610][T17664] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.3652'. [ 551.327388][T17665] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 551.350962][T17667] loop0: detected capacity change from 0 to 512 [ 551.361800][T17665] EXT4-fs warning (device loop9): read_mmp_block:111: Error -117 while reading MMP block 8 [ 551.372421][T17667] EXT4-fs: Ignoring removed nomblk_io_submit option [ 551.382496][T17667] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 551.409870][T17658] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3651'. [ 551.437265][T17667] EXT4-fs (loop0): 1 truncate cleaned up [ 551.468122][T17667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.508846][T13229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.544730][T14232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.829859][T17684] loop2: detected capacity change from 0 to 1024 [ 551.854567][T17684] EXT4-fs: Ignoring removed nomblk_io_submit option [ 551.886859][T17684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.899723][T17684] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.912649][T17684] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3660: bg 0: block 112: padding at end of block bitmap is not set [ 551.940349][T17684] EXT4-fs (loop2): Remounting filesystem read-only [ 552.179350][T17689] loop5: detected capacity change from 0 to 1024 [ 552.226093][T17689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 552.264966][T17689] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.297930][T14232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 552.325221][T17689] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.362450][T17689] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3661: bg 0: block 112: padding at end of block bitmap is not set [ 552.429009][T17689] EXT4-fs (loop5): Remounting filesystem read-only [ 552.525316][T16138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 552.623290][T17709] x_tables: duplicate underflow at hook 2 [ 552.733720][T17717] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3670'. [ 552.824973][T17726] loop9: detected capacity change from 0 to 128 [ 552.847629][T17724] bridge_slave_0: left allmulticast mode [ 552.847660][T17724] bridge_slave_0: left promiscuous mode [ 552.847767][T17724] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.856493][T17726] /dev/loop9: Can't open blockdev [ 552.863717][T17724] bridge_slave_1: left allmulticast mode [ 552.895875][T17724] bridge_slave_1: left promiscuous mode [ 552.904556][T17724] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.932892][T17724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.961742][T17724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.971238][T17724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.978768][T17724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.990154][T17724] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 553.032596][T17741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3676'. [ 553.606213][T15241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.825910][T17792] loop0: detected capacity change from 0 to 8192 [ 554.008244][T17810] loop9: detected capacity change from 0 to 764 [ 554.024355][T17814] netlink: 'syz.2.3684': attribute type 3 has an invalid length. [ 554.062260][T17810] rock: directory entry would overflow storage [ 554.093978][T17810] rock: sig=0x4654, size=5, remaining=4 [ 554.362075][T17825] loop5: detected capacity change from 0 to 1024 [ 554.369981][T17825] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 554.409497][ T3407] IPVS: starting estimator thread 0... [ 554.412178][T17825] JBD2: no valid journal superblock found [ 554.447890][T17825] EXT4-fs (loop5): Could not load journal inode [ 554.482106][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3689'. [ 554.521046][T17838] IPVS: using max 2592 ests per chain, 129600 per kthread [ 554.530634][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3689'. [ 554.562848][T17843] netlink: 'syz.9.3689': attribute type 14 has an invalid length. [ 554.735188][T17855] vhci_hcd vhci_hcd.0: default hub control req: 4003 v0004 i0008 l0 [ 554.745515][T17854] vhci_hcd vhci_hcd.0: default hub control req: 4003 v0004 i0008 l0 [ 554.757699][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 554.757759][ T28] audit: type=1326 audit(2000000004.730:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.3691" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f776ce59 code=0x7ffc0000 [ 554.811996][ T28] audit: type=1326 audit(2000000004.770:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.3691" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd1f776ce59 code=0x7ffc0000 [ 554.846464][ T28] audit: type=1326 audit(2000000004.770:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.3691" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f776ce59 code=0x7ffc0000 [ 554.881583][ T28] audit: type=1326 audit(2000000004.770:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.3691" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f776ce59 code=0x7ffc0000 [ 554.920586][ T28] audit: type=1326 audit(2000000004.770:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.3691" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f776ce59 code=0x7ffc0000 [ 554.971109][ T28] audit: type=1326 audit(2000000004.770:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.3691" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f776ce59 code=0x7ffc0000 [ 555.007071][ T28] audit: type=1326 audit(2000000004.770:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.3691" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f776ce59 code=0x7ffc0000 [ 555.091449][ T28] audit: type=1326 audit(2000000004.770:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.3691" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f776ce59 code=0x7ffc0000 [ 555.135567][ T28] audit: type=1326 audit(2000000004.770:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.3691" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fd1f776ce59 code=0x7ffc0000 [ 555.194977][ T28] audit: type=1326 audit(2000000004.770:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17853 comm="syz.9.3691" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f776ce59 code=0x7ffc0000 [ 555.249561][T17871] loop2: detected capacity change from 0 to 512 [ 555.263325][T17871] EXT4-fs: Ignoring removed nobh option [ 555.273563][T17871] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 555.295996][T17873] netlink: 'syz.1.3698': attribute type 3 has an invalid length. [ 555.306606][T17871] EXT4-fs (loop2): 1 truncate cleaned up [ 555.314090][T17871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.371256][T17871] gtp0: entered promiscuous mode [ 555.386832][T17871] gtp0: entered allmulticast mode [ 555.402896][T17877] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3699'. [ 555.440579][T17877] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.605188][T17891] x_tables: duplicate underflow at hook 2 [ 555.619587][T10446] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.649729][T10446] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.677912][T10446] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.705328][T10446] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.810739][T17898] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3706'. [ 556.047004][T17912] loop9: detected capacity change from 0 to 764 [ 556.110992][T17912] rock: directory entry would overflow storage [ 556.126179][T17912] rock: sig=0x4654, size=5, remaining=4 [ 556.132101][T14232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.147272][T17914] netlink: 'syz.1.3711': attribute type 3 has an invalid length. [ 556.275109][T17919] loop9: detected capacity change from 0 to 1024 [ 556.319095][T17919] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 556.346987][T17919] JBD2: no valid journal superblock found [ 556.360638][T17919] EXT4-fs (loop9): Could not load journal inode [ 556.416675][T17922] loop2: detected capacity change from 0 to 764 [ 556.435269][T17922] rock: directory entry would overflow storage [ 556.455880][T17922] rock: sig=0x4654, size=5, remaining=4 [ 556.618368][T17921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 556.626193][T17921] IPv6: NLM_F_CREATE should be set when creating new route [ 556.759045][T17935] x_tables: duplicate underflow at hook 2 [ 557.038413][T17950] loop9: detected capacity change from 0 to 512 [ 557.066249][T17950] EXT4-fs warning (device loop9): dx_probe:801: inode #2: comm syz.9.3725: Unrecognised inode hash code 255 [ 557.084282][T17949] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 557.100366][T17949] EXT4-fs (loop2): 1 truncate cleaned up [ 557.106719][T17949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.119923][T17950] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.3725: Corrupt directory, running e2fsck is recommended [ 557.171635][T17950] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 557.186099][T17950] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.3725: corrupted in-inode xattr: e_name out of bounds [ 557.209410][T17950] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 557.209613][T17950] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.3725: couldn't read orphan inode 15 (err -117) [ 557.218922][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 557.218947][ C0] EXT4-fs (loop9): initial error at time 2000000007: ext4_iget_extra_inode:5128: inode 15 [ 557.218981][ C0] EXT4-fs (loop9): last error at time 2000000007: ext4_iget_extra_inode:5128: inode 15 [ 557.270695][T17950] loop9: lost filesystem error report for type 5 error -117 [ 557.273064][T17950] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.375918][T13229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.452416][T17973] x_tables: duplicate underflow at hook 2 [ 557.583070][T17968] set_capacity_and_notify: 2 callbacks suppressed [ 557.583090][T17968] loop9: detected capacity change from 0 to 8192 [ 557.706664][T17976] loop0: detected capacity change from 0 to 1756 [ 557.930382][T17976] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 558.045109][ T3407] IPVS: starting estimator thread 0... [ 558.165797][T17984] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 558.190307][T17981] IPVS: using max 2640 ests per chain, 132000 per kthread [ 558.216787][T17985] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 558.607820][ T3736] Bluetooth: hci0: sending frame failed (-49) [ 558.614149][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 559.674932][T17988] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 559.844301][T14232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.547534][T18008] loop0: detected capacity change from 0 to 1024 [ 560.564075][T18008] EXT4-fs: Invalid want_extra_isize 125 [ 561.215291][T18020] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 562.767822][T18033] loop2: detected capacity change from 0 to 8192 [ 562.835761][T18033] loop2: p1 < > p2 p4 < p5 > [ 562.850925][T18033] loop2: partition table partially beyond EOD, truncated [ 562.873905][T18033] loop2: p1 start 134217728 is beyond EOD, truncated [ 562.896518][T18033] loop2: p2 size 591360 extends beyond EOD, truncated [ 562.905139][T18039] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 562.925669][T18033] loop2: p5 size 591360 extends beyond EOD, truncated [ 563.384506][T18052] loop0: detected capacity change from 0 to 1024 [ 564.529859][T18089] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 564.541122][T18085] bond1: option lp_interval: invalid value (0) [ 564.553733][T18085] bond1: option lp_interval: allowed values 1 - 2147483647 [ 564.619484][T18085] bond1 (unregistering): Released all slaves [ 564.719654][T18093] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3771'. [ 565.073918][T18107] loop9: detected capacity change from 0 to 512 [ 565.113914][T18107] EXT4-fs: Ignoring removed orlov option [ 565.216529][T18107] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.244910][T18107] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.463921][T13229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.773727][T18151] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 566.827465][T18151] veth0_virt_wifi: entered promiscuous mode [ 566.844835][T18151] veth0_virt_wifi: left promiscuous mode [ 566.904774][T18151] loop9: detected capacity change from 0 to 512 [ 566.905643][T18154] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3791'. [ 566.969964][T18151] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #2: comm syz.9.3790: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 5, max 4(4), depth 0(0) [ 567.056475][T18151] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 567.057803][T18151] EXT4-fs (loop9): get root inode failed [ 567.066944][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 567.066968][ C0] EXT4-fs (loop9): initial error at time 2000000017: ext4_ext_check_inode:521: inode 2 [ 567.067000][ C0] EXT4-fs (loop9): last error at time 2000000017: ext4_ext_check_inode:521: inode 2 [ 567.098675][T18151] EXT4-fs (loop9): mount failed [ 567.188373][T18165] loop9: detected capacity change from 0 to 512 [ 567.239869][T18165] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.270611][T18165] ext4 filesystem being mounted at /218/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 567.426064][T18174] loop2: detected capacity change from 0 to 1024 [ 567.820366][T18174] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 567.989813][T18174] JBD2: no valid journal superblock found [ 568.286853][T18174] EXT4-fs (loop2): Could not load journal inode [ 568.353023][T13229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.552089][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 571.552183][ T28] audit: type=1400 audit(2000000021.530:3558): avc: denied { setopt } for pid=18204 comm="syz.2.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 571.695223][T18211] loop2: detected capacity change from 0 to 512 [ 571.761034][T18211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.774206][T18211] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.840241][T18222] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3810'. [ 572.079709][T18220] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 572.133152][T18223] team0 (unregistering): Port device team_slave_1 removed [ 572.216576][ T28] audit: type=1400 audit(2000000022.190:3559): avc: denied { write } for pid=18210 comm="syz.2.3809" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 572.579619][T10446] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 572.625506][T18236] loop9: detected capacity change from 0 to 128 [ 572.645898][T10446] EXT4-fs (loop2): This should not happen!! Data will be lost [ 572.645898][T10446] [ 572.673077][T18236] EXT4-fs: test_dummy_encryption option not supported [ 572.679545][T10446] EXT4-fs (loop2): Total free blocks count 0 [ 572.681654][T17135] udevd[17135]: incorrect ext4 checksum on /dev/loop9 [ 572.698122][T10446] EXT4-fs (loop2): Free/Dirty block details [ 572.717976][T10446] EXT4-fs (loop2): free_blocks=65280 [ 572.736309][T10446] EXT4-fs (loop2): dirty_blocks=10111 [ 572.756755][T10446] EXT4-fs (loop2): Block reservation details [ 572.777439][T10446] EXT4-fs (loop2): i_reserved_data_blocks=10111 [ 572.827050][T10446] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 572.874520][T18240] loop5: detected capacity change from 0 to 764 [ 572.887608][T14232] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 572.954193][T18240] rock: directory entry would overflow storage [ 572.974966][T18240] rock: sig=0x4654, size=5, remaining=4 [ 573.695505][T18249] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3822'. [ 573.752616][T18267] loop5: detected capacity change from 0 to 512 [ 573.773238][T18267] EXT4-fs: dax option not supported [ 573.800652][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3824'. [ 574.002172][T18254] loop0: detected capacity change from 0 to 8192 [ 574.026107][T18277] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 574.071912][T18254] loop0: p1 < > p2 p4 < p5 > [ 574.092695][T18254] loop0: partition table partially beyond EOD, truncated [ 574.118822][T18254] loop0: p1 start 134217728 is beyond EOD, truncated [ 574.133986][T18254] loop0: p2 size 591360 extends beyond EOD, truncated [ 574.155711][T18254] loop0: p5 size 591360 extends beyond EOD, truncated [ 574.182918][ T2981] loop0: p1 < > p2 p4 < p5 > [ 574.195677][ T2981] loop0: partition table partially beyond EOD, truncated [ 574.214418][ T2981] loop0: p1 start 134217728 is beyond EOD, truncated [ 574.234505][ T2981] loop0: p2 size 591360 extends beyond EOD, truncated [ 574.257738][ T2981] loop0: p5 size 591360 extends beyond EOD, truncated [ 574.570391][T17135] udevd[17135]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 574.573951][T17126] udevd[17126]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 574.594682][T17148] udevd[17148]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 574.643134][T17148] udevd[17148]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 574.645988][T17135] udevd[17135]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 574.663130][T17126] udevd[17126]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 574.737453][T18303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3838'. [ 575.347384][T18316] loop2: detected capacity change from 0 to 512 [ 575.764789][T18323] syzkaller0: create flow: hash 3298973636 index 1 [ 575.801696][T18322] syzkaller0: delete flow: hash 3298973636 index 1 [ 575.812187][T18303] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3838'. [ 575.869763][T18323] loop0: detected capacity change from 0 to 1024 [ 575.902763][T18323] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 575.927406][T18323] System zones: 0-1, 3-8 [ 576.146223][T18328] bridge0: port 3(team0) entered disabled state [ 576.166894][T18328] team0 (unregistering): left allmulticast mode [ 576.181459][T18328] team_slave_0: left allmulticast mode [ 576.197751][T18328] team_slave_1: left allmulticast mode [ 576.208945][T18328] team0 (unregistering): left promiscuous mode [ 576.220712][T18328] team_slave_0: left promiscuous mode [ 576.232299][T18328] team_slave_1: left promiscuous mode [ 576.248348][T18328] bridge0: port 3(team0) entered disabled state [ 576.272204][T18328] team0 (unregistering): Port device team_slave_0 removed [ 576.299033][T18328] team0 (unregistering): Port device team_slave_1 removed [ 576.313154][T18323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 576.331067][T18316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.363008][T18328] team0 (unregistering): Port device bridge2 removed [ 576.380415][T18323] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.397923][T18316] ext4 filesystem being mounted at /202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 576.456926][T18322] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.3843: Freeing blocks not in datazone - block = 0, count = 16 [ 576.474255][ T28] audit: type=1400 audit(2000000026.420:3560): avc: denied { write } for pid=18321 comm="syz.0.3843" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 576.574078][ T12] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 112: padding at end of block bitmap is not set [ 576.731275][T14232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.740550][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 576.753595][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 576.753595][ T12] [ 577.069001][ T12] EXT4-fs (loop0): Total free blocks count 0 [ 577.093319][T18335] loop2: detected capacity change from 0 to 1024 [ 577.272629][ T12] EXT4-fs (loop0): Free/Dirty block details [ 577.287095][T18335] EXT4-fs: test_dummy_encryption option not supported [ 577.296959][ T12] EXT4-fs (loop0): free_blocks=16 [ 577.309888][ T12] EXT4-fs (loop0): dirty_blocks=16 [ 577.413704][ T12] EXT4-fs (loop0): Block reservation details [ 577.419795][ T12] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 577.426632][T15241] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 577.438351][T15241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 577.573960][T18340] loop2: detected capacity change from 0 to 512 [ 577.584652][T18340] EXT4-fs: Invalid want_extra_isize 1023 [ 578.096472][T18359] loop0: detected capacity change from 0 to 764 [ 578.141067][T18359] rock: directory entry would overflow storage [ 578.169637][T18359] rock: sig=0x4654, size=5, remaining=4 [ 578.285252][T18366] loop9: detected capacity change from 0 to 512 [ 578.302876][T18366] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.321482][T18366] ext4 filesystem being mounted at /234/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 578.426209][T13229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.487092][T18373] loop0: detected capacity change from 0 to 512 [ 578.519296][T18375] loop9: detected capacity change from 0 to 1024 [ 578.530359][T18373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 578.542710][T18375] EXT4-fs: Ignoring removed nomblk_io_submit option [ 578.556148][T18373] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.728390][T18375] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.741588][T18375] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.763200][ T28] audit: type=1400 audit(2000000028.740:3561): avc: denied { write } for pid=18374 comm="syz.9.3858" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 578.796938][T18375] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3858: bg 0: block 112: padding at end of block bitmap is not set [ 578.798355][ T28] audit: type=1400 audit(2000000028.740:3562): avc: denied { write } for pid=18374 comm="syz.9.3858" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 578.841482][ T28] audit: type=1400 audit(2000000028.820:3563): avc: denied { write } for pid=18372 comm="syz.0.3859" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 578.890959][T18375] EXT4-fs (loop9): Remounting filesystem read-only [ 578.919600][ T28] audit: type=1400 audit(2000000028.880:3564): avc: denied { write } for pid=18372 comm="syz.0.3859" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 578.941762][ T28] audit: type=1400 audit(2000000028.880:3565): avc: denied { rmdir } for pid=18372 comm="syz.0.3859" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 579.027336][T18388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18388 comm=syz.1.3861 [ 579.332736][T18404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3863'. [ 579.485920][T15241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 579.759881][T18410] veth1_to_bond: entered allmulticast mode [ 579.925464][T18406] veth1_to_bond: left allmulticast mode [ 580.063814][T18419] x_tables: duplicate underflow at hook 2 [ 580.126954][ T28] audit: type=1326 audit(2000000030.100:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18423 comm="syz.5.3870" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79f8e0ce59 code=0x0 [ 580.179615][T18426] ipvlan2: entered allmulticast mode [ 580.186011][T18426] batadv_slave_1: entered allmulticast mode [ 580.195194][ T28] audit: type=1400 audit(2000000030.160:3567): avc: denied { write } for pid=18429 comm="syz.9.3858" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 580.284840][T18434] netlink: 'syz.2.3871': attribute type 1 has an invalid length. [ 580.330412][T13229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 580.349531][T18434] bond0: entered promiscuous mode [ 580.379126][T18434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.422596][T18439] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3872'. [ 580.447585][T18437] bond0: (slave bridge3): making interface the new active one [ 580.467990][T18437] bridge3: entered promiscuous mode [ 580.489783][T18437] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 580.856095][T18431] loop0: detected capacity change from 0 to 1764 [ 581.210755][T18462] loop5: detected capacity change from 0 to 512 [ 581.290599][T18462] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e098, mo2=0002] [ 581.313904][T18459] netlink: 'syz.2.3878': attribute type 5 has an invalid length. [ 581.325137][T18462] System zones: 0-2, 18-18, 34-34 [ 582.001530][T18459] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3878'. [ 582.040144][T18462] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 582.060493][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 582.066968][ C1] EXT4-fs (loop5): initial error at time 2000000032: ext4_mb_generate_buddy:1317 [ 582.076265][ C1] EXT4-fs (loop5): last error at time 2000000032: ext4_mb_generate_buddy:1317 [ 582.306200][T18462] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.3879: corrupted inode contents [ 582.322102][T18462] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 582.323917][T18462] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #16: comm syz.5.3879: mark_inode_dirty error [ 582.425558][T18462] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 582.425867][T18462] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.3879: corrupted inode contents [ 582.496256][T18462] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 582.496443][T18462] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.3879: mark_inode_dirty error [ 582.587723][T18462] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 582.587954][T18462] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.3879: corrupted inode contents [ 582.687284][T18462] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 582.687573][T18462] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.3879: mark_inode_dirty error [ 582.783938][T18462] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 582.784259][T18462] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.3879: corrupted inode contents [ 582.874499][T18462] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 582.874749][T18462] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 582.970141][T18462] loop5: lost filesystem error report for type 5 error -117 [ 582.970370][T18462] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.3879: corrupted inode contents [ 583.069348][T18462] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 583.069649][T18462] EXT4-fs error (device loop5): ext4_truncate:4690: inode #16: comm syz.5.3879: mark_inode_dirty error [ 583.129972][T18462] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 583.131889][T18462] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 583.203801][T18462] loop5: lost filesystem error report for type 5 error -117 [ 583.207966][T18462] EXT4-fs (loop5): 1 truncate cleaned up [ 583.222130][T10459] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 583.252077][T10459] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:17: Failed to release dquot type 1 [ 583.266302][T18462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.302107][T10459] loop5: lost filesystem error report for type 5 error -117 [ 583.302329][T18462] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.356639][T18462] SELinux: policydb version -90245332 does not match my version range 15-35 [ 583.370736][T18462] SELinux: failed to load policy [ 583.416186][T16138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.270537][T18521] loop9: detected capacity change from 0 to 256 [ 585.013149][T18533] loop5: detected capacity change from 0 to 512 [ 585.057054][T18533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.109699][T18533] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.206339][T16138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.427723][T18542] x_tables: duplicate underflow at hook 2 [ 586.483836][T18556] loop0: detected capacity change from 0 to 128 [ 586.484305][T18518] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004 [ 586.512621][T18555] loop5: detected capacity change from 0 to 1024 [ 586.522864][T18555] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 586.533910][T18555] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 586.543695][T18555] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: comm syz.5.3902: inode #1: comm syz.5.3902: iget: illegal inode # [ 586.556894][T18555] loop5: lost filesystem error report for type 5 error -117 [ 586.557129][T18555] EXT4-fs (loop5): no journal found [ 586.564569][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 586.564592][ C0] EXT4-fs (loop5): initial error at time 2000000037: ext4_get_journal_inode:5896 [ 586.564644][ C0] EXT4-fs (loop5): last error at time 2000000037: ext4_get_journal_inode:5896 [ 586.567089][ T28] audit: type=1400 audit(2000000037.535:3568): avc: denied { read } for pid=18553 comm="syz.0.3903" dev="sockfs" ino=53970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 586.569976][T18555] EXT4-fs (loop5): can't get journal size [ 586.571021][T18555] EXT4-fs (loop5): failed to initialize system zone (-22) [ 586.629507][T18555] EXT4-fs (loop5): mount failed [ 586.976208][T18569] loop9: detected capacity change from 0 to 764 [ 586.999707][T18569] rock: directory entry would overflow storage [ 587.008549][T18569] rock: sig=0x4654, size=5, remaining=4 [ 587.410042][ T28] audit: type=1326 audit(2000000038.385:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.9.3914" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f776ce59 code=0x7ffc0000 [ 587.413147][T18593] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 587.450524][ T28] audit: type=1326 audit(2000000038.385:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.9.3914" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f776ce59 code=0x7ffc0000 [ 587.537236][ T28] audit: type=1326 audit(2000000038.385:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.9.3914" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f776ce59 code=0x7ffc0000 [ 587.705638][ T28] audit: type=1326 audit(2000000038.385:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.9.3914" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fd1f776ce59 code=0x7ffc0000 [ 587.934799][ T28] audit: type=1326 audit(2000000038.385:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.9.3914" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f776ce59 code=0x7ffc0000 [ 587.974163][T18599] loop2: detected capacity change from 0 to 136 [ 587.983779][T18599] iso9660: Unknown parameter 'sessionI“Zו²PÙ8†ÀÖ·' [ 588.003886][ T28] audit: type=1326 audit(2000000038.395:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.9.3914" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f776ce59 code=0x7ffc0000 [ 588.045467][ T28] audit: type=1326 audit(2000000038.395:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.9.3914" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f776ce59 code=0x7ffc0000 [ 588.081032][T18599] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3916'. [ 588.097839][ T28] audit: type=1326 audit(2000000038.395:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.9.3914" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd1f776ce59 code=0x7ffc0000 [ 588.129725][T18599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3916'. [ 588.141122][T18599] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3916'. [ 588.155102][ T28] audit: type=1326 audit(2000000038.395:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.9.3914" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f776ce59 code=0x7ffc0000 [ 588.243756][T18592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45584 sclass=netlink_route_socket pid=18592 comm=syz.9.3914 [ 588.282344][T18609] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3920'. [ 588.539541][T18629] loop0: detected capacity change from 0 to 2048 [ 588.551665][T18625] loop2: detected capacity change from 0 to 512 [ 588.560831][T18625] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 588.583183][T18629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.585637][T18625] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3923: bg 0: block 425: padding at end of block bitmap is not set [ 588.611523][T18631] x_tables: duplicate underflow at hook 2 [ 588.626803][T18625] loop2: lost filesystem error report for type 5 error -117 [ 588.627023][T18625] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 588.634414][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 588.634435][ C0] EXT4-fs (loop2): initial error at time 2000000039: ext4_validate_block_bitmap:441 [ 588.634462][ C0] EXT4-fs (loop2): last error at time 2000000039: ext4_validate_block_bitmap:441 [ 588.692639][T18629] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.699998][T18629] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.719224][T18625] loop2: lost filesystem error report for type 5 error -117 [ 588.719447][T18625] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.3923: attempt to clear invalid blocks 983260 len 1 [ 588.749013][T18629] bridge0: entered allmulticast mode [ 588.755547][T18625] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 588.756252][T18625] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.3923: Invalid inode table block 0 in block_group 0 [ 588.782588][T18625] loop2: lost filesystem error report for type 5 error -117 [ 588.792125][T18625] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 588.808985][T18625] loop2: lost filesystem error report for type 5 error -117 [ 588.809606][T18625] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 588.832017][T18625] loop2: lost filesystem error report for type 5 error -117 [ 588.833947][T15241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.834403][T18625] EXT4-fs error (device loop2): __ext4_get_inode_loc:4885: comm syz.2.3923: Invalid inode table block 0 in block_group 0 [ 588.869298][T18625] loop2: lost filesystem error report for type 5 error -117 [ 588.882808][T18625] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 588.963109][T18648] loop5: detected capacity change from 0 to 1024 [ 588.989033][T18625] loop2: lost filesystem error report for type 5 error -117 [ 588.996183][T18625] EXT4-fs error (device loop2): ext4_truncate:4690: inode #11: comm syz.2.3923: mark_inode_dirty error [ 589.035271][T18625] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 589.035753][T18625] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 589.067126][T18653] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3933'. [ 589.079059][T18648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 589.093323][T18625] loop2: lost filesystem error report for type 5 error -117 [ 589.094034][T18625] EXT4-fs (loop2): 1 truncate cleaned up [ 589.112827][T18648] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.126850][T18625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.146672][T18648] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 3: comm syz.5.3934: lblock 3 mapped to illegal pblock 3 (length 3) [ 589.234073][T18648] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 589.283632][T18648] EXT4-fs (loop5): This should not happen!! Data will be lost [ 589.283632][T18648] [ 589.298881][T18650] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 7: comm syz.5.3934: lblock 7 mapped to illegal pblock 7 (length 9) [ 589.313778][T18650] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 589.327656][T18650] EXT4-fs (loop5): This should not happen!! Data will be lost [ 589.327656][T18650] [ 589.350375][T16138] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 589.362642][T16138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 589.417588][T14232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.551179][T18672] x_tables: duplicate underflow at hook 2 [ 589.588279][T18675] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 589.916605][T18688] loop0: detected capacity change from 0 to 4096 [ 590.666766][T18693] netlink: 'syz.1.3946': attribute type 1 has an invalid length. [ 590.693581][T18695] loop5: detected capacity change from 0 to 2048 [ 590.798518][T18693] bond2: entered promiscuous mode [ 590.818244][T18693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 591.655550][T18698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3946'. [ 591.673488][T18698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3946'. [ 591.949303][T18695] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.235509][T18688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.398927][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 592.398953][ T28] audit: type=1400 audit(2000000043.375:3678): avc: denied { write } for pid=18694 comm="syz.5.3947" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 592.430864][T18695] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 592.454109][T18693] bond2: (slave bridge3): making interface the new active one [ 592.462609][T18693] bridge3: entered promiscuous mode [ 592.469683][T18693] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 592.480842][T18704] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3948'. [ 592.483632][T18695] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 592.556051][T15241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.560768][T18695] EXT4-fs (loop5): This should not happen!! Data will be lost [ 592.560768][T18695] [ 592.576709][T18703] FAULT_INJECTION: forcing a failure. [ 592.576709][T18703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.610214][T18703] CPU: 0 UID: 0 PID: 18703 Comm: syz.9.3948 Tainted: G W syzkaller #0 PREEMPT(full) [ 592.610255][T18703] Tainted: [W]=WARN [ 592.610265][T18703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 592.610279][T18703] Call Trace: [ 592.610286][T18703] [ 592.610296][T18703] __dump_stack+0x1d/0x30 [ 592.610326][T18703] dump_stack_lvl+0x95/0xd0 [ 592.610347][T18703] dump_stack+0x15/0x1b [ 592.610419][T18703] should_fail_ex+0x263/0x280 [ 592.610451][T18703] should_fail+0xb/0x20 [ 592.610534][T18703] should_fail_usercopy+0x1a/0x20 [ 592.610569][T18703] _copy_from_user+0x1c/0xb0 [ 592.610615][T18703] ____sys_sendmsg+0x1e2/0x5b0 [ 592.610661][T18703] ___sys_sendmsg+0x195/0x1e0 [ 592.610686][T18703] ? path_openat+0x1b01/0x2050 [ 592.610783][T18703] __sys_sendmmsg+0x185/0x320 [ 592.610822][T18703] __x64_sys_sendmmsg+0x57/0x70 [ 592.610898][T18703] x64_sys_call+0x27aa/0x3020 [ 592.610929][T18703] do_syscall_64+0x12c/0x3b0 [ 592.610973][T18703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.611069][T18703] RIP: 0033:0x7fd1f776ce59 [ 592.611094][T18703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.611249][T18703] RSP: 002b:00007fd1f61c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 592.611276][T18703] RAX: ffffffffffffffda RBX: 00007fd1f79e5fa0 RCX: 00007fd1f776ce59 [ 592.611295][T18703] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000006 [ 592.611312][T18703] RBP: 00007fd1f61c7090 R08: 0000000000000000 R09: 0000000000000000 [ 592.611328][T18703] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 592.611423][T18703] R13: 00007fd1f79e6038 R14: 00007fd1f79e5fa0 R15: 00007fff73090da8 [ 592.611443][T18703] [ 592.789023][ T28] audit: type=1400 audit(2000000043.595:3679): avc: denied { ioctl } for pid=18707 comm="syz.2.3950" path="socket:[54235]" dev="sockfs" ino=54235 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 592.794925][T18695] EXT4-fs (loop5): Total free blocks count 0 [ 592.814487][T18693] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3946'. [ 592.875956][T18695] EXT4-fs (loop5): Free/Dirty block details [ 592.893598][T18695] EXT4-fs (loop5): free_blocks=2415919104 [ 592.909771][T18695] EXT4-fs (loop5): dirty_blocks=64 [ 592.915302][T18695] EXT4-fs (loop5): Block reservation details [ 592.921472][T18695] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 592.966194][T18714] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3951'. [ 593.038886][T10491] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 593.191882][T16138] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 593.216695][T18731] loop0: detected capacity change from 0 to 512 [ 593.311975][T18731] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 593.732631][T18731] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 593.825072][ T28] audit: type=1400 audit(2000000044.805:3680): avc: denied { write } for pid=18751 comm="syz.9.3965" name="cgroup.subtree_control" dev="cgroup2" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 593.852777][ T28] audit: type=1400 audit(2000000044.805:3681): avc: denied { open } for pid=18751 comm="syz.9.3965" path="" dev="cgroup2" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 594.757735][ T28] audit: type=1326 audit(2000000045.735:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18800 comm="syz.5.3985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8e0ce59 code=0x7ffc0000 [ 594.806206][ T28] audit: type=1326 audit(2000000045.735:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18800 comm="syz.5.3985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8e0ce59 code=0x7ffc0000 [ 594.833485][ T28] audit: type=1326 audit(2000000045.765:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18800 comm="syz.5.3985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8e0ce59 code=0x7ffc0000 [ 594.859745][ T28] audit: type=1326 audit(2000000045.765:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18800 comm="syz.5.3985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f79f8e0ce59 code=0x7ffc0000 [ 594.886312][ T28] audit: type=1326 audit(2000000045.765:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18800 comm="syz.5.3985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8e0ce59 code=0x7ffc0000 [ 594.969763][ T28] audit: type=1326 audit(2000000045.765:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18800 comm="syz.5.3985" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8e0ce59 code=0x7ffc0000 [ 595.840589][T18868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=18868 comm=syz.5.4016 [ 595.959539][T18881] gretap0: entered promiscuous mode [ 595.976481][T18881] gretap0: left promiscuous mode [ 596.494132][T18911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=18911 comm=syz.9.4034 [ 596.700089][T18932] netlink: 'syz.9.4044': attribute type 11 has an invalid length. [ 596.776825][T18940] loop2: detected capacity change from 0 to 512 [ 596.829595][T18940] EXT4-fs (loop2): 1 truncate cleaned up [ 596.835457][T18944] loop9: detected capacity change from 0 to 512 [ 596.869845][T18940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.888552][T18944] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 596.913993][T18944] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 596.930523][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 596.937000][ C1] EXT4-fs (loop9): initial error at time 2000000047: ext4_mb_generate_buddy:1317 [ 596.940848][T18944] EXT4-fs (loop9): 1 truncate cleaned up [ 596.946174][ C1] EXT4-fs (loop9): last error at time 2000000047: ext4_mb_generate_buddy:1317 [ 596.963101][T18940] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4046: bg 0: block 465: padding at end of block bitmap is not set [ 597.002220][T18944] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.020639][T18940] EXT4-fs (loop2): Remounting filesystem read-only [ 597.040688][T14232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.098241][T13229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.680134][T18968] sctp: [Deprecated]: syz.5.4054 (pid 18968) Use of int in max_burst socket option deprecated. [ 597.680134][T18968] Use struct sctp_assoc_value instead [ 597.866311][T18989] loop5: detected capacity change from 0 to 128 [ 597.884660][T18989] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 597.903476][T18989] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.962614][T16138] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 598.020769][T18998] loop5: detected capacity change from 0 to 2048 [ 598.052986][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 598.053006][ T28] audit: type=1326 audit(2000000049.035:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19005 comm="syz.1.4071" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2402dcce59 code=0x0 [ 598.101114][T18998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.129622][T18998] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 598.144722][T18998] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1 with error 28 [ 598.163167][T18998] EXT4-fs (loop5): This should not happen!! Data will be lost [ 598.163167][T18998] [ 598.171096][T19017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.173392][T18998] EXT4-fs (loop5): Total free blocks count 0 [ 598.186050][ T28] audit: type=1400 audit(2000000049.105:3704): avc: denied { write } for pid=18997 comm="syz.5.4067" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 598.187754][T18998] EXT4-fs (loop5): Free/Dirty block details [ 598.215336][T19017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.225653][T18998] EXT4-fs (loop5): free_blocks=2415919504 [ 598.234541][T18998] EXT4-fs (loop5): dirty_blocks=32 [ 598.241950][T18998] EXT4-fs (loop5): Block reservation details [ 598.248043][T18998] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 598.266485][T10459] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 598.279360][T16138] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 598.312041][ T28] audit: type=1400 audit(2000000049.295:3705): avc: denied { setopt } for pid=19024 comm="syz.5.4078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 598.342101][T19026] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 598.342101][T19026] The task syz.2.4076 (19026) triggered the difference, watch for misbehavior. [ 598.759916][T19030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.770298][T19030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.121847][T19044] syzkaller0: entered promiscuous mode [ 599.127720][T19044] syzkaller0: entered allmulticast mode [ 599.165010][T19050] loop9: detected capacity change from 0 to 512 [ 599.193415][T19050] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 599.227523][T19050] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.261035][T19050] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 599.284066][T19050] EXT4-fs (loop9): shut down requested (2) [ 599.290186][ T28] audit: type=1400 audit(2000000050.265:3706): avc: denied { write } for pid=19048 comm="syz.9.4089" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 599.338407][T19064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.349045][T19064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.362010][T13229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.362987][T19066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4096'. [ 599.397644][T19068] loop9: detected capacity change from 0 to 512 [ 599.406820][T19068] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.4097: EA inode hash validation failed [ 599.420189][T19068] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #15: comm syz.9.4097: corrupted inode contents [ 599.434306][T19068] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 599.434466][T19068] EXT4-fs (loop9): Remounting filesystem read-only [ 599.443769][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 599.443791][ C0] EXT4-fs (loop9): initial error at time 2000000050: ext4_do_update_inode:5690: inode 15 [ 599.443834][ C0] EXT4-fs (loop9): last error at time 2000000050: ext4_do_update_inode:5690: inode 15 [ 599.479550][T19068] EXT4-fs warning (device loop9): ext4_evict_inode:287: xattr delete (err -30) [ 599.488818][T19068] EXT4-fs (loop9): 1 orphan inode deleted [ 599.495389][T19068] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.507655][T19075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.517422][T19067] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.527379][T19075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.612767][T19086] loop5: detected capacity change from 0 to 1764 [ 599.718721][T19101] loop5: detected capacity change from 0 to 1024 [ 599.721315][T19099] xt_hashlimit: size too large, truncated to 1048576 [ 599.736225][T19101] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 599.758049][T19101] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.791563][T16138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 599.817898][T19107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.827341][T19107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.895650][ T28] audit: type=1400 audit(2000000050.875:3707): avc: denied { map } for pid=19109 comm="syz.0.4115" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 600.395360][T19130] loop2: detected capacity change from 0 to 512 [ 600.452451][T19132] loop9: detected capacity change from 0 to 164 [ 600.483052][T19130] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.4123: corrupted in-inode xattr: e_value size too large [ 600.643839][T19130] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 600.648125][T19130] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.4123: couldn't read orphan inode 15 (err -117) [ 600.657585][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 600.657613][ C0] EXT4-fs (loop2): initial error at time 2000000051: ext4_iget_extra_inode:5128: inode 15 [ 600.657660][ C0] EXT4-fs (loop2): last error at time 2000000051: ext4_iget_extra_inode:5128: inode 15 [ 600.696505][T19130] loop2: lost filesystem error report for type 5 error -117 [ 600.697924][T19130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.733557][T19130] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 600.753559][T14232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.865080][T19150] syzkaller0: entered promiscuous mode [ 600.876133][T19150] syzkaller0: entered allmulticast mode [ 600.973982][T19152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.004620][ T28] audit: type=1400 audit(2000000051.985:3708): avc: denied { write } for pid=19151 comm="syz.2.4133" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 601.027152][ T28] audit: type=1400 audit(2000000051.995:3709): avc: denied { write } for pid=19151 comm="syz.2.4133" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 601.049925][ T28] audit: type=1400 audit(2000000051.995:3710): avc: denied { add_name } for pid=19151 comm="syz.2.4133" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 601.138789][T14232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.579146][T19173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.606138][T19173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.628524][T19180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.641101][T19180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.750640][ T28] audit: type=1400 audit(2000000052.725:3711): avc: denied { remount } for pid=19186 comm="syz.0.4147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 601.787086][T19198] set_capacity_and_notify: 3 callbacks suppressed [ 601.787107][T19198] loop2: detected capacity change from 0 to 512 [ 601.801594][T19198] EXT4-fs: test_dummy_encryption option not supported [ 601.840863][T19204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4155'. [ 601.853878][ T28] audit: type=1400 audit(2000000052.835:3712): avc: denied { nlmsg_write } for pid=19205 comm="syz.1.4157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 601.892884][T19208] loop2: detected capacity change from 0 to 512 [ 601.922426][T19208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.935564][T19208] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.954382][T19208] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #18: comm syz.2.4158: corrupted inode contents [ 601.971111][T19208] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 601.971347][T19208] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #18: comm syz.2.4158: mark_inode_dirty error [ 601.992520][T19208] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 601.992731][T19208] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #18: comm syz.2.4158: corrupted inode contents [ 602.041232][T19208] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 602.101499][T19208] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3001: inode #18: comm syz.2.4158: mark_inode_dirty error [ 602.223625][T19208] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 602.225742][T19208] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3004: inode #18: comm syz.2.4158: mark inode dirty (error -117) [ 602.475072][T19208] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 602.475256][T19208] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 602.554146][T19241] loop5: detected capacity change from 0 to 512 [ 602.599513][T19241] EXT4-fs: Ignoring removed orlov option [ 602.652215][T19241] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 602.666042][T19246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.684333][T14232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.709869][T19241] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 602.721715][T19246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.748502][T19241] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.4170: corrupted in-inode xattr: e_value size too large [ 602.769640][T19250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.788512][T19250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.802051][T19241] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 602.802358][T19241] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.4170: couldn't read orphan inode 15 (err -117) [ 602.811605][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 602.811622][ C1] EXT4-fs (loop5): initial error at time 2000000053: ext4_iget_extra_inode:5128: inode 15 [ 602.811655][ C1] EXT4-fs (loop5): last error at time 2000000053: ext4_iget_extra_inode:5128: inode 15 [ 602.901083][T19241] loop5: lost filesystem error report for type 5 error -117 [ 602.902869][T19241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.981574][T19229] loop9: detected capacity change from 0 to 32768 [ 602.992301][T16138] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.019850][T19254] loop2: detected capacity change from 0 to 512 [ 603.039187][T19229] loop9: p1 p3 < > [ 603.043385][T19254] EXT4-fs (loop2): 1 truncate cleaned up [ 603.110450][T19254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.139518][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 603.139578][ T28] audit: type=1400 audit(2000000054.115:3714): avc: denied { write } for pid=19253 comm="syz.2.4176" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 603.146084][T17135] udevd[17135]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 603.169681][T17126] udevd[17126]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 603.239922][T14232] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.242193][ T28] audit: type=1400 audit(2000000054.165:3715): avc: denied { create } for pid=19253 comm="syz.2.4176" name="\" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 603.282104][T19271] syz_tun: entered allmulticast mode [ 603.287950][T19270] syz_tun: left allmulticast mode [ 603.331981][T19280] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4181'. [ 603.354580][T19276] loop0: detected capacity change from 0 to 4096 [ 603.363116][T19276] EXT4-fs: test_dummy_encryption option not supported [ 603.402674][T19276] ISOFS: Unable to identify CD-ROM format. [ 603.433039][T19284] loop2: detected capacity change from 0 to 1024 [ 603.459083][T19284] EXT4-fs: inline encryption not supported [ 603.478803][T19295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.490324][T19295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.502879][T19284] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 603.502879][T19284] [ 603.574274][T19303] loop9: detected capacity change from 0 to 128 [ 603.595597][T19303] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 603.627271][T19303] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 603.648330][T13229] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 603.699404][T19320] loop0: detected capacity change from 0 to 512 [ 603.710393][T19320] EXT4-fs (loop0): 1 truncate cleaned up [ 603.726650][T19320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.740985][ T28] audit: type=1400 audit(2000000054.725:3716): avc: denied { write } for pid=19319 comm="syz.0.4203" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 603.774666][T15241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.948286][T19354] loop0: detected capacity change from 0 to 1764 [ 604.001503][T19358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.010970][T19358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.072316][T19367] netlink: 'syz.5.4223': attribute type 12 has an invalid length. [ 604.210742][ T28] audit: type=1400 audit(2000000055.185:3717): avc: denied { read } for pid=19381 comm="syz.1.4230" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 604.235692][ T28] audit: type=1400 audit(2000000055.195:3718): avc: denied { open } for pid=19381 comm="syz.1.4230" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 604.260660][ T28] audit: type=1400 audit(2000000055.195:3719): avc: denied { ioctl } for pid=19381 comm="syz.1.4230" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 604.855517][T19399] EXT4-fs error (device loop2): __ext4_fill_super:5596: inode #2: comm syz.2.4237: inode has both inline data and extents flags [ 604.876272][T19399] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 604.877318][T19399] EXT4-fs (loop2): get root inode failed [ 604.886453][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 604.886478][ C0] EXT4-fs (loop2): initial error at time 2000000055: __ext4_fill_super:5596: inode 2 [ 604.886512][ C0] EXT4-fs (loop2): last error at time 2000000055: __ext4_fill_super:5596: inode 2 [ 604.918211][T19399] EXT4-fs (loop2): mount failed [ 604.935340][T19401] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.967740][T19401] ext4 filesystem being mounted at /323/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 605.023587][ T28] audit: type=1400 audit(2000000056.005:3720): avc: denied { write } for pid=19398 comm="syz.9.4236" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 605.060332][T19416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 605.089319][T19416] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 605.092984][T13229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.116812][T19416] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 605.125263][T19416] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 605.135264][T19416] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 605.144626][T19416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 605.158234][T19416] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.4241: dx entry: limit 65535 != root limit 120 [ 605.159676][T19424] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.178043][T19424] bridge0: entered allmulticast mode [ 605.189663][T19424] bridge_slave_1: left allmulticast mode [ 605.195380][T19424] bridge_slave_1: left promiscuous mode [ 605.201295][T19424] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.209863][T19416] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4241: Corrupt directory, running e2fsck is recommended [ 605.250251][T15241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.264104][T19428] EXT4-fs: test_dummy_encryption option not supported [ 605.271672][T19426] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.302543][T19426] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.371283][T13229] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.544691][T19468] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4266'. [ 605.550159][T19467] EXT4-fs: quotafile must be on filesystem root [ 605.568722][T19468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4266'. [ 605.583746][T19471] EXT4-fs: Ignoring removed nomblk_io_submit option [ 605.636580][T19471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.655966][T19471] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.695447][T15241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 605.734452][T19493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.760821][T19493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.769791][T19496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.779337][T19493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.791049][T19496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.804480][T19493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.918141][T19515] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.4286: iget: bad i_size value: 38620345925642 [ 605.931192][T19515] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 605.934610][T19515] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.4286: couldn't read orphan inode 15 (err -117) [ 605.943934][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 605.943955][ C1] EXT4-fs (loop0): initial error at time 2000000056: ext4_orphan_get:1397: inode 15 [ 605.943988][ C1] EXT4-fs (loop0): last error at time 2000000056: ext4_orphan_get:1397: inode 15 [ 605.981772][T19515] loop0: lost filesystem error report for type 5 error -117 [ 605.982469][T19515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.006679][ T28] audit: type=1400 audit(2000000056.985:3721): avc: denied { write } for pid=19514 comm="syz.0.4286" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 606.083139][T19515] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4286: bg 0: block 5: invalid block bitmap [ 606.095978][T19515] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 606.108840][T19515] EXT4-fs (loop0): This should not happen!! Data will be lost [ 606.108840][T19515] [ 606.118528][T19515] EXT4-fs (loop0): Total free blocks count 0 [ 606.124561][T19515] EXT4-fs (loop0): Free/Dirty block details [ 606.130550][T19515] EXT4-fs (loop0): free_blocks=0 [ 606.135525][T19515] EXT4-fs (loop0): dirty_blocks=2148 [ 606.141165][T19515] EXT4-fs (loop0): Block reservation details [ 606.147281][T19515] EXT4-fs (loop0): i_reserved_data_blocks=2148 [ 606.163497][T10446] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 96 with error 28 [ 606.239743][ T28] audit: type=1400 audit(2000000057.215:3722): avc: denied { map } for pid=19514 comm="syz.0.4286" path="socket:[57710]" dev="sockfs" ino=57710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 606.263081][ T28] audit: type=1400 audit(2000000057.215:3723): avc: denied { read } for pid=19514 comm="syz.0.4286" path="socket:[57710]" dev="sockfs" ino=57710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 606.299966][T19530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.308980][T19530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.419983][T19542] sctp: [Deprecated]: syz.5.4297 (pid 19542) Use of int in max_burst socket option. [ 606.419983][T19542] Use struct sctp_assoc_value instead [ 606.438566][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4298'. [ 606.518891][T19552] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 606.653953][T19568] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4310'. [ 606.971841][T19606] set_capacity_and_notify: 11 callbacks suppressed [ 606.971862][T19606] loop0: detected capacity change from 0 to 1764 [ 607.487960][T19627] sctp: [Deprecated]: syz.1.4335 (pid 19627) Use of int in max_burst socket option deprecated. [ 607.487960][T19627] Use struct sctp_assoc_value instead [ 607.942709][T19650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4344'. [ 608.275731][T19662] loop0: detected capacity change from 0 to 128 [ 608.322505][T19667] loop5: detected capacity change from 0 to 256 [ 608.331539][T19662] FAT-fs (loop0): Directory bread(block 162) failed [ 608.372541][T19662] FAT-fs (loop0): Directory bread(block 163) failed [ 608.383494][T19667] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 608.431242][T19662] FAT-fs (loop0): Directory bread(block 164) failed [ 608.475293][T19662] FAT-fs (loop0): Directory bread(block 165) failed [ 608.515023][T19662] FAT-fs (loop0): Directory bread(block 166) failed [ 608.560552][T19662] FAT-fs (loop0): Directory bread(block 167) failed [ 608.584338][T19662] FAT-fs (loop0): Directory bread(block 168) failed [ 608.611622][T19662] FAT-fs (loop0): Directory bread(block 169) failed [ 608.626979][T19662] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 608.653635][T19662] FAT-fs (loop0): Directory bread(block 162) failed [ 608.678811][T19662] FAT-fs (loop0): Directory bread(block 163) failed [ 608.701064][T19662] bio_check_eod: 163 callbacks suppressed [ 608.701158][T19662] syz.0.4347: attempt to access beyond end of device [ 608.701158][T19662] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 608.720977][T19662] syz.0.4347: attempt to access beyond end of device [ 608.720977][T19662] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 608.739160][T19675] loop2: detected capacity change from 0 to 8192 [ 609.328836][T19710] x_tables: ip_tables: osf match: only valid for protocol 6 [ 609.351609][T19712] syzkaller0: entered promiscuous mode [ 609.361980][T19712] syzkaller0: entered allmulticast mode [ 609.367703][T19714] loop0: detected capacity change from 0 to 256 [ 609.376191][T19714] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 609.655712][T19731] loop9: detected capacity change from 0 to 256 [ 610.421091][T19741] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4382'. [ 610.443362][T19743] netlink: 83 bytes leftover after parsing attributes in process `syz.1.4383'. [ 610.508183][T19745] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4384'. [ 610.523831][T19747] loop9: detected capacity change from 0 to 2048 [ 610.552077][T19745] bond1: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 610.563295][T19745] bond1: (slave ip_vti0): Error -95 calling set_mac_address [ 610.585374][T19747] Alternate GPT is invalid, using primary GPT. [ 610.607495][T19747] loop9: p1 p2 p3 [ 610.620649][T19747] loop9: partition table partially beyond EOD, truncated [ 610.638157][ T28] audit: type=1400 audit(2000000061.615:3724): avc: denied { watch } for pid=19763 comm="syz.5.4392" path="/proc/604" dev="proc" ino=58025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 610.666124][ T2981] Alternate GPT is invalid, using primary GPT. [ 610.681009][ T28] audit: type=1400 audit(2000000061.665:3725): avc: denied { name_bind } for pid=19768 comm="syz.2.4394" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 610.687588][ T2981] loop9: p1 p2 p3 [ 610.713203][ T2981] loop9: partition table partially beyond EOD, truncated [ 610.747561][T19777] loop9: detected capacity change from 0 to 512 [ 610.763129][T19777] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 611.394890][T17135] udevd[17135]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 611.409714][T17148] udevd[17148]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 611.412956][T17126] udevd[17126]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 611.439977][T19798] loop9: detected capacity change from 0 to 256 [ 611.475455][T17126] udevd[17126]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 611.475704][T17148] udevd[17148]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 611.488298][T17135] udevd[17135]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 611.508799][T19803] netlink: 'syz.9.4406': attribute type 12 has an invalid length. [ 611.524804][T19803] netlink: 'syz.9.4406': attribute type 29 has an invalid length. [ 611.545905][T19803] netlink: 148 bytes leftover after parsing attributes in process `syz.9.4406'. [ 611.591218][T19810] loop2: detected capacity change from 0 to 256 [ 611.625938][T19810] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 611.757348][ T28] audit: type=1326 audit(2000000062.735:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19824 comm="syz.2.4417" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f545f20ce59 code=0x0 [ 611.838756][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4423'. [ 611.996865][T19786] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.016600][T19786] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.026668][T19786] bridge_slave_0: entered allmulticast mode [ 612.034363][T19786] bridge_slave_0: entered promiscuous mode [ 612.048682][T19786] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.059981][T19786] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.067795][T19786] bridge_slave_1: entered allmulticast mode [ 612.074835][T19786] bridge_slave_1: entered promiscuous mode [ 612.101390][T19786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.131236][T19872] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 612.134069][T19876] sctp: [Deprecated]: syz.5.4437 (pid 19876) Use of int in maxseg socket option. [ 612.134069][T19876] Use struct sctp_assoc_value instead [ 612.142770][T19877] loop9: detected capacity change from 0 to 256 [ 612.158363][T19876] x_tables: duplicate underflow at hook 2 [ 612.168913][T19872] bond3 (unregistering): Released all slaves [ 612.192737][T19786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.194252][T19877] FAT-fs (loop9): Directory bread(block 64) failed [ 612.213807][T19877] FAT-fs (loop9): Directory bread(block 65) failed [ 612.230003][T19877] FAT-fs (loop9): Directory bread(block 66) failed [ 612.238001][T19877] FAT-fs (loop9): Directory bread(block 67) failed [ 612.244941][T19877] FAT-fs (loop9): Directory bread(block 68) failed [ 612.249268][T19786] team0: Port device team_slave_0 added [ 612.258929][T19877] FAT-fs (loop9): Directory bread(block 69) failed [ 612.265624][T19786] team0: Port device team_slave_1 added [ 612.273735][T19877] FAT-fs (loop9): Directory bread(block 70) failed [ 612.280329][T19877] FAT-fs (loop9): Directory bread(block 71) failed [ 612.287648][T19786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.289205][T19877] FAT-fs (loop9): Directory bread(block 72) failed [ 612.303103][T19877] FAT-fs (loop9): Directory bread(block 73) failed [ 612.303757][T19786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.336236][T19786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.356278][T19786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.363402][T19786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.389981][T19786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.430044][T19786] hsr_slave_0: entered promiscuous mode [ 612.439538][T19786] hsr_slave_1: entered promiscuous mode [ 612.445523][T19786] debugfs: 'hsr0' already exists in 'hsr' [ 612.451451][T19786] Cannot create hsr debugfs directory [ 612.659261][ T28] audit: type=1400 audit(2000000063.635:3727): avc: denied { write } for pid=19901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.742312][ T28] audit: type=1400 audit(2000000063.725:3728): avc: denied { write } for pid=19924 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.899374][T19786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 612.923460][T19786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 612.947270][T19786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 612.963505][ T28] audit: type=1400 audit(2000000063.945:3729): avc: denied { write } for pid=19932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.964028][T19786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 613.010102][ T28] audit: type=1400 audit(2000000063.985:3730): avc: denied { write } for pid=19950 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.077588][T19786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 613.097727][T19786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 613.113632][T19786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 613.130859][T19786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 613.204367][T19786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.219682][T19786] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.247019][T10463] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.254185][T10463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.299255][T10463] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.306409][T10463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.320309][ T28] audit: type=1400 audit(2000000064.295:3731): avc: denied { write } for pid=19953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 613.370216][ T28] audit: type=1400 audit(2000000064.345:3732): avc: denied { write } for pid=19975 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 614.098254][ T28] audit: type=1400 audit(2000000065.075:3733): avc: denied { write } for pid=19980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 614.189671][T19786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.233722][T20019] xt_hashlimit: size too large, truncated to 1048576 [ 614.434205][T19786] veth0_vlan: entered promiscuous mode [ 614.452433][T19786] veth1_vlan: entered promiscuous mode [ 614.488800][T19786] veth0_macvtap: entered promiscuous mode [ 614.506577][T19786] veth1_macvtap: entered promiscuous mode [ 614.526868][T19786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.546114][T19786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.573185][T10457] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.604659][T10457] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.635302][T10457] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.661451][T10457] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.850692][T20077] x_tables: ip_tables: osf match: only valid for protocol 6 [ 614.928535][T20091] loop2: detected capacity change from 0 to 256 [ 614.947650][T20091] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 615.182848][T20108] loop5: detected capacity change from 0 to 256 [ 615.189658][T20108] vfat: Unknown parameter '' [ 615.806727][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 615.806756][ T28] audit: type=1400 audit(2000000066.785:3742): avc: denied { write } for pid=20124 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 616.018446][T20136] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 616.126382][ T28] audit: type=1400 audit(2000000067.105:3743): avc: denied { write } for pid=20128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 616.190159][ T28] audit: type=1400 audit(2000000067.165:3744): avc: denied { write } for pid=20158 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 616.274111][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4496'. [ 616.511289][ T28] audit: type=1400 audit(2000000067.495:3745): avc: denied { write } for pid=20160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 616.811891][ T28] audit: type=1400 audit(2000000067.785:3746): avc: denied { write } for pid=20195 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.012379][ T28] audit: type=1400 audit(2000000067.905:3747): avc: denied { map } for pid=20193 comm="syz.2.4503" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 617.046187][T20194] loop2: detected capacity change from 0 to 8192 [ 617.138742][ T28] audit: type=1400 audit(2000000068.115:3748): avc: denied { write } for pid=20198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.193343][ T28] audit: type=1400 audit(2000000068.175:3749): avc: denied { write } for pid=20214 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.410811][ T28] audit: type=1400 audit(2000000068.385:3750): avc: denied { write } for pid=20220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.504654][ T28] audit: type=1400 audit(2000000068.485:3751): avc: denied { write } for pid=20241 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.373838][T20331] xt_hashlimit: size too large, truncated to 1048576 [ 618.536144][T20340] syzkaller0: entered promiscuous mode [ 618.542087][T20340] syzkaller0: entered allmulticast mode [ 618.618743][T20350] loop9: detected capacity change from 0 to 512 [ 618.822179][T20372] loop3: detected capacity change from 0 to 512 [ 619.482618][T20398] loop5: detected capacity change from 0 to 128 [ 619.557611][T20408] netlink: 'syz.2.4579': attribute type 1 has an invalid length. [ 619.577162][T20408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 619.587041][T20398] syzkaller1: tun_chr_ioctl cmd 2147767507 [ 619.632827][T20408] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 619.759645][T20420] syzkaller0: entered promiscuous mode [ 619.767563][T20420] syzkaller0: entered allmulticast mode [ 619.852725][T20430] xt_hashlimit: size too large, truncated to 1048576 [ 620.115749][T20444] loop5: detected capacity change from 0 to 512 [ 620.246426][T20459] syzkaller0: entered promiscuous mode [ 620.263384][T20459] syzkaller0: entered allmulticast mode [ 620.479253][T20477] syzkaller0: entered promiscuous mode [ 620.496085][T20477] syzkaller0: entered allmulticast mode [ 620.640338][T20491] syzkaller0: entered promiscuous mode [ 620.653535][T20491] syzkaller0: entered allmulticast mode [ 620.729112][T20504] loop2: detected capacity change from 0 to 128 [ 621.222200][T20536] loop3: detected capacity change from 0 to 512 [ 621.254996][T20536] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 621.280595][T20536] FAT-fs (loop3): Filesystem has been set read-only [ 621.697145][T20568] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 622.890896][T10463] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.949595][T10463] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.006023][T10463] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.065072][T20623] loop2: detected capacity change from 0 to 512 [ 623.073867][T10463] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.204928][T10463] bridge_slave_1: left allmulticast mode [ 623.214887][T10463] bridge_slave_1: left promiscuous mode [ 623.225248][T10463] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.235740][T20629] loop2: detected capacity change from 0 to 8192 [ 623.244740][T10463] bridge_slave_0: left allmulticast mode [ 623.251079][T10463] bridge_slave_0: left promiscuous mode [ 623.256868][T10463] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.320277][T20633] loop5: detected capacity change from 0 to 256 [ 623.344551][T20633] FAT-fs (loop5): Directory bread(block 64) failed [ 623.352148][T20633] FAT-fs (loop5): Directory bread(block 65) failed [ 623.358778][T20633] FAT-fs (loop5): Directory bread(block 66) failed [ 623.365332][T20633] FAT-fs (loop5): Directory bread(block 67) failed [ 623.371932][T20633] FAT-fs (loop5): Directory bread(block 68) failed [ 623.378592][T20633] FAT-fs (loop5): Directory bread(block 69) failed [ 623.385230][T20633] FAT-fs (loop5): Directory bread(block 70) failed [ 623.391773][T20633] FAT-fs (loop5): Directory bread(block 71) failed [ 623.398302][T20633] FAT-fs (loop5): Directory bread(block 72) failed [ 623.404864][T20633] FAT-fs (loop5): Directory bread(block 73) failed [ 623.533534][T10463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.544682][T10463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.568977][T10463] bond0 (unregistering): Released all slaves [ 623.630304][T10463] hsr_slave_0: left promiscuous mode [ 623.647912][T10463] hsr_slave_1: left promiscuous mode [ 623.659555][T10463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.679069][T10463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.691250][T10463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.710624][T10463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.723148][T10463] veth1_macvtap: left promiscuous mode [ 623.733374][T10463] veth0_macvtap: left promiscuous mode [ 623.742097][T10463] veth1_vlan: left promiscuous mode [ 623.750314][T10463] veth0_vlan: left promiscuous mode [ 623.840643][T20651] loop5: detected capacity change from 0 to 512 [ 623.919238][T10463] team0 (unregistering): Port device team_slave_1 removed [ 623.946351][T10463] team0 (unregistering): Port device team_slave_0 removed [ 623.990795][T20658] loop5: detected capacity change from 0 to 1156 [ 624.012413][T20658] ISOFS: Unable to identify CD-ROM format. [ 624.219407][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 624.219424][ T28] audit: type=1400 audit(2000000075.195:3754): avc: denied { write } for pid=20660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.301164][ T28] audit: type=1400 audit(2000000075.275:3755): avc: denied { write } for pid=20683 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.327509][T20614] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.346521][T20614] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.354042][T20614] bridge_slave_0: entered allmulticast mode [ 624.361070][T20614] bridge_slave_0: entered promiscuous mode [ 624.368656][T20614] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.375868][T20614] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.383616][T20614] bridge_slave_1: entered allmulticast mode [ 624.391969][T20614] bridge_slave_1: entered promiscuous mode [ 624.399333][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 624.438686][T20614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.475220][T20614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.512670][T20614] team0: Port device team_slave_0 added [ 624.519166][T20614] team0: Port device team_slave_1 added [ 624.562255][T20614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.580571][T20614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.614613][T20614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.671283][T20614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.678274][T20614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.738012][T20614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.810093][T20614] hsr_slave_0: entered promiscuous mode [ 624.829248][T20614] hsr_slave_1: entered promiscuous mode [ 624.843943][T20614] debugfs: 'hsr0' already exists in 'hsr' [ 624.857870][T20614] Cannot create hsr debugfs directory [ 624.963866][ T28] audit: type=1400 audit(2000000075.945:3756): avc: denied { write } for pid=20706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.040134][ T28] audit: type=1400 audit(2000000076.015:3757): avc: denied { write } for pid=20729 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.098418][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 625.323261][T20614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 625.344314][T20614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 625.368228][T20614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 625.374953][T20751] loop2: detected capacity change from 0 to 512 [ 625.375457][ T28] audit: type=1400 audit(2000000076.345:3758): avc: denied { write } for pid=20735 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.417984][T20614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 625.437738][T20614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 625.455588][T20614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 625.479871][ T28] audit: type=1400 audit(2000000076.435:3759): avc: denied { write } for pid=20755 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.509696][T20614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 625.529013][T20614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 625.625921][T20614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.749176][T20614] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.783213][T10463] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.790344][T10463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.830013][T10463] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.837174][T10463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.697083][ T28] audit: type=1400 audit(2000000077.675:3760): avc: denied { write } for pid=20774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.760576][ T28] audit: type=1400 audit(2000000077.715:3761): avc: denied { write } for pid=20809 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.913389][T20831] loop5: detected capacity change from 0 to 512 [ 626.926511][T20614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.940972][ T28] audit: type=1400 audit(2000000077.915:3762): avc: denied { write } for pid=20814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.017448][ T28] audit: type=1400 audit(2000000077.995:3763): avc: denied { write } for pid=20836 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.161051][T20854] loop5: detected capacity change from 0 to 128 [ 627.243421][T20614] veth0_vlan: entered promiscuous mode [ 627.267197][T20614] veth1_vlan: entered promiscuous mode [ 627.316475][T20614] veth0_macvtap: entered promiscuous mode [ 627.352980][T20614] veth1_macvtap: entered promiscuous mode [ 627.397679][T20614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.425697][T20614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.461517][T10491] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.487868][T10491] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.490991][T20884] loop5: detected capacity change from 0 to 512 [ 627.516614][T10491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.559396][T10491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.191859][T20939] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 628.203827][T20939] syzkaller1: persist disabled [ 628.209375][T20939] syzkaller1: tun_chr_ioctl cmd 2147767511 [ 628.288425][T20948] 9p: Bad value for 'rfdno' [ 628.484907][T20968] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4764'. [ 628.498943][T20972] xt_hashlimit: size too large, truncated to 1048576 [ 628.978374][ T3559] kernel write not supported for file /input/event0 (pid: 3559 comm: kworker/0:8) [ 629.225791][T21038] netlink: 'syz.5.4796': attribute type 1 has an invalid length. [ 629.240242][T21038] netlink: 'syz.5.4796': attribute type 2 has an invalid length. [ 629.249582][T21038] netlink: 252 bytes leftover after parsing attributes in process `syz.5.4796'. [ 629.376288][T21055] 9p: Bad value for 'rfdno' [ 629.517074][T21069] netlink: 136 bytes leftover after parsing attributes in process `syz.5.4810'. [ 629.535978][T21069] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 629.587105][T21071] loop5: detected capacity change from 0 to 128 [ 629.754718][T21079] loop5: detected capacity change from 0 to 8192 [ 629.783925][T21081] 9p: Bad value for 'rfdno' [ 630.220974][T21112] 9p: Bad value for 'rfdno' [ 631.175296][T21176] ================================================================== [ 631.183439][T21176] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 631.192158][T21176] [ 631.194495][T21176] write to 0xffff88816bb3a8e0 of 8 bytes by task 21173 on cpu 1: [ 631.202225][T21176] shmem_file_splice_read+0x40e/0x5a0 [ 631.207701][T21176] splice_direct_to_actor+0x26e/0x670 [ 631.213109][T21176] do_splice_direct+0x119/0x1a0 [ 631.217989][T21176] do_sendfile+0x382/0x650 [ 631.222436][T21176] __x64_sys_sendfile64+0x105/0x150 [ 631.227667][T21176] x64_sys_call+0x2dc4/0x3020 [ 631.232361][T21176] do_syscall_64+0x12c/0x3b0 [ 631.236979][T21176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.242902][T21176] [ 631.245231][T21176] write to 0xffff88816bb3a8e0 of 8 bytes by task 21176 on cpu 0: [ 631.253152][T21176] shmem_file_splice_read+0x40e/0x5a0 [ 631.258550][T21176] splice_direct_to_actor+0x26e/0x670 [ 631.263957][T21176] do_splice_direct+0x119/0x1a0 [ 631.268836][T21176] do_sendfile+0x382/0x650 [ 631.273263][T21176] __x64_sys_sendfile64+0x105/0x150 [ 631.278573][T21176] x64_sys_call+0x2dc4/0x3020 [ 631.283357][T21176] do_syscall_64+0x12c/0x3b0 [ 631.287977][T21176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.293983][T21176] [ 631.296310][T21176] value changed: 0x000000000000260a -> 0x000000000000260d [ 631.303438][T21176] [ 631.305857][T21176] Reported by Kernel Concurrency Sanitizer on: [ 631.312039][T21176] CPU: 0 UID: 0 PID: 21176 Comm: syz.3.4852 Tainted: G W syzkaller #0 PREEMPT(full) [ 631.323004][T21176] Tainted: [W]=WARN [ 631.326817][T21176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 631.337064][T21176] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 631.459220][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 631.459302][ T28] audit: type=1400 audit(2000000082.405:3767): avc: denied { write } for pid=3285 comm="syz-executor" path="pipe:[547]" dev="pipefs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 632.365730][T10459] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.433140][T21118] bond1: (slave syz_tun): Removing an active aggregator [ 632.442079][T21118] bond1: (slave syz_tun): Releasing backup interface [ 632.463709][T10459] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.573479][T10459] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.663412][T10459] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.767837][T10459] bridge_slave_1: left allmulticast mode [ 632.784547][T10459] bridge_slave_1: left promiscuous mode [ 632.794829][T10459] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.804841][T10459] bridge_slave_0: left allmulticast mode [ 632.814768][T10459] bridge_slave_0: left promiscuous mode [ 632.820771][T10459] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.911313][ T28] audit: type=1400 audit(2000000083.895:3768): avc: denied { write } for pid=21181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 632.945986][T10459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.971193][ T28] audit: type=1400 audit(2000000083.945:3769): avc: denied { write } for pid=21192 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 632.994977][T10459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.004981][T10459] bond0 (unregistering): Released all slaves [ 633.013149][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 633.067165][T10459] hsr_slave_0: left promiscuous mode [ 633.079196][T10459] hsr_slave_1: left promiscuous mode [ 633.091175][T10459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.106354][T10459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.117216][T10459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.126707][T10459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.139013][T10459] veth1_macvtap: left promiscuous mode [ 633.151679][T10459] veth0_macvtap: left promiscuous mode [ 633.155676][ T28] audit: type=1400 audit(2000000084.135:3770): avc: denied { write } for pid=21195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.157371][T10459] veth1_vlan: left promiscuous mode [ 633.195989][T10459] veth0_vlan: left promiscuous mode [ 633.213275][ T28] audit: type=1400 audit(2000000084.185:3771): avc: denied { write } for pid=21206 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.303683][T10459] team0 (unregistering): Port device team_slave_1 removed [ 633.317034][T10459] team0 (unregistering): Port device team_slave_0 removed [ 633.353639][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 633.451549][ T28] audit: type=1400 audit(2000000084.435:3772): avc: denied { write } for pid=21209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.489452][ T28] audit: type=1400 audit(2000000084.465:3773): avc: denied { write } for pid=21220 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.523020][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 633.597282][ T28] audit: type=1400 audit(2000000084.575:3774): avc: denied { write } for pid=21223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.621869][ T28] audit: type=1400 audit(2000000084.575:3775): avc: denied { write } for pid=21234 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.654041][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 633.754958][T10459] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.765088][T10459] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.813701][T10459] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.824402][T10459] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.883271][T10459] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.893169][T10459] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.953503][T10459] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.963429][T10459] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.043366][T10459] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.094610][T10459] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.133416][T10459] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.146045][ T28] audit: type=1400 audit(2000000085.125:3776): avc: denied { write } for pid=21242 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 634.194856][T10459] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.206880][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 634.252505][T10459] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.262565][T10459] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.323213][T10459] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.333604][T10459] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.345100][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 634.382438][T10459] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.393818][T10459] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.458271][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 634.467236][T10459] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.477421][T10459] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.534960][T10459] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.564761][T10459] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.606738][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 634.617988][T10459] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.673830][T10459] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.748371][T10459] bridge_slave_1: left allmulticast mode [ 634.754142][T10459] bridge_slave_1: left promiscuous mode [ 634.759948][T10459] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.768329][T10459] bridge_slave_0: left allmulticast mode [ 634.774209][T10459] bridge_slave_0: left promiscuous mode [ 634.779894][T10459] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.789073][T10459] bridge_slave_1: left promiscuous mode [ 634.795017][T10459] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.802942][T10459] bridge_slave_0: left allmulticast mode [ 634.808594][T10459] bridge_slave_0: left promiscuous mode [ 634.814504][T10459] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.081851][T10459] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 635.089953][T10459] bridge3 (unregistering): left promiscuous mode [ 635.132249][T10459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.142436][T10459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.152089][T10459] bond0 (unregistering): Released all slaves [ 635.159658][T10459] bond1 (unregistering): Released all slaves [ 635.170428][T10459] bond2 (unregistering): Released all slaves [ 635.242900][T10459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.253335][T10459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.263065][T10459] bond0 (unregistering): Released all slaves [ 635.270431][T10459] bond1 (unregistering): Released all slaves [ 635.403035][T10459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.413514][T10459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.423557][T10459] bond0 (unregistering): Released all slaves [ 635.431372][T10459] bond1 (unregistering): Released all slaves [ 635.581905][T10459] bond0 (unregistering): (slave bridge3): Releasing backup interface [ 635.590033][T10459] bridge3 (unregistering): left promiscuous mode [ 635.631931][T10459] bond0 (unregistering): Released all slaves [ 635.641091][T10459] bond1 (unregistering): Released all slaves [ 635.649899][ T3021] 8021q: adding VLAN 0 to HW filter on device eth25 [ 635.699657][T10459] tipc: Disabling bearer [ 635.705372][T10459] tipc: Left network mode [ 635.710177][T10459] tipc: Disabling bearer [ 635.716984][T10459] tipc: Left network mode [ 635.725242][T10459] hsr_slave_0: left promiscuous mode [ 635.731482][T10459] hsr_slave_1: left promiscuous mode [ 635.737139][T10459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.744915][T10459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.753079][T10459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.761203][T10459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.770808][T10459] hsr_slave_0: left promiscuous mode [ 635.776730][T10459] hsr_slave_1: left promiscuous mode [ 635.782607][T10459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.790152][T10459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.798378][T10459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.805999][T10459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.815117][T10459] hsr_slave_0: left promiscuous mode [ 635.820915][T10459] hsr_slave_1: left promiscuous mode [ 635.826691][T10459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.834128][T10459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.841707][T10459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.849100][T10459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.858436][T10459] hsr_slave_0: left promiscuous mode [ 635.864309][T10459] hsr_slave_1: left promiscuous mode [ 635.878335][T10459] veth1_macvtap: left promiscuous mode [ 635.883972][T10459] veth0_macvtap: left promiscuous mode [ 635.890419][T10459] veth1_macvtap: left promiscuous mode [ 635.896023][T10459] veth0_macvtap: left promiscuous mode [ 635.901616][T10459] veth1_vlan: left promiscuous mode [ 635.906845][T10459] veth0_vlan: left promiscuous mode [ 635.912866][T10459] veth1_macvtap: left promiscuous mode [ 635.918398][T10459] veth0_macvtap: left promiscuous mode [ 635.924062][T10459] veth1_vlan: left promiscuous mode [ 635.929294][T10459] veth0_vlan: left promiscuous mode [ 635.935075][T10459] veth1_macvtap: left promiscuous mode [ 635.940651][T10459] veth0_macvtap: left promiscuous mode [ 635.946148][T10459] veth1_vlan: left promiscuous mode [ 635.952026][T10459] veth0_vlan: left promiscuous mode [ 636.236896][ T3021] 8021q: adding VLAN 0 to HW filter on device eth26 [ 636.342232][ T3021] 8021q: adding VLAN 0 to HW filter on device eth27 [ 636.448149][ T3021] 8021q: adding VLAN 0 to HW filter on device eth28 [ 636.526013][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 636.526032][ T28] audit: type=1400 audit(2000000087.505:3792): avc: denied { write } for pid=21362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.556283][ T28] audit: type=1400 audit(2000000087.515:3793): avc: denied { write } for pid=21373 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.561744][ T3021] 8021q: adding VLAN 0 to HW filter on device eth29 [ 636.654518][ T28] audit: type=1400 audit(2000000087.635:3794): avc: denied { write } for pid=21376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.678886][ T28] audit: type=1400 audit(2000000087.635:3795): avc: denied { write } for pid=21387 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.689939][ T3021] 8021q: adding VLAN 0 to HW filter on device eth30 [ 636.792213][ T28] audit: type=1400 audit(2000000087.775:3796): avc: denied { write } for pid=21392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.816787][ T28] audit: type=1400 audit(2000000087.775:3797): avc: denied { write } for pid=21403 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.827794][ T3021] 8021q: adding VLAN 0 to HW filter on device eth31 [ 636.917194][ T28] audit: type=1400 audit(2000000087.895:3798): avc: denied { write } for pid=21406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.955409][ T28] audit: type=1400 audit(2000000087.935:3799): avc: denied { write } for pid=21417 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.988251][ T3021] 8021q: adding VLAN 0 to HW filter on device eth32 [ 637.078430][ T28] audit: type=1400 audit(2000000088.055:3800): avc: denied { write } for pid=21421 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.103441][ T28] audit: type=1400 audit(2000000088.055:3801): avc: denied { write } for pid=21432 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.113120][ T3021] 8021q: adding VLAN 0 to HW filter on device eth33 [ 637.191618][T10459] IPVS: stop unused estimator thread 0... [ 637.197856][T10459] IPVS: stop unused estimator thread 0... [ 637.243369][ T3021] 8021q: adding VLAN 0 to HW filter on device eth34 [ 637.347221][ T3021] 8021q: adding VLAN 0 to HW filter on device eth35 [ 637.449170][ T3021] 8021q: adding VLAN 0 to HW filter on device eth36