last executing test programs: 1m39.22935776s ago: executing program 0 (id=782): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x404}, 0x3c06, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x3c, 0x3ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfffffffe, 0x2a1, 0x0, 0x10000]}}) pipe(0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x8, 0x2, 0x40, @vifc_lcl_ifindex=r3, @rand_addr=0x64010101}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000000)=0x8, 0x4) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") set_mempolicy(0x3, &(0x7f0000000040)=0x7, 0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) setsockopt(r4, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r5, 0x6, 0x0, &(0x7f00000002c0)=0x80000000, 0x4) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001a00010129bd7000000000000a000000fd00000900000000040008"], 0x20}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000040)={0x2000201b}) shutdown(r9, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000300)=[{}, {}, {}], 0x3, 0x2) 1m39.110741682s ago: executing program 0 (id=783): socket$netlink(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x21, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000fcffffff8500000023000000180100002720642500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100002, 0x4, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ptrace(0x10, 0x0) ptrace$getregs(0xe, 0x0, 0x6, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x93}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0x1, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xfbca, 0x202, 0x1, 0x8, 0x7, 0x1, 0xd}, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) 1m39.028481944s ago: executing program 0 (id=784): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x400, 0x8}, 0x4040, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffbfffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x2, 0x4, 0x8d1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) socket$nl_generic(0x10, 0x3, 0x10) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xfffc, 0x6, 0x2, 0xfffffffffffffffe, 0x7, 0xb, 0x2, 0xfffffffffffffff9, 0x8000009657, 0x7, 0x7fffffff, 0x800, 0x7, 0xa, 0x80000000000000, 0xce0, 0x1, 0x2, 0x94d9, 0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffb, 0x0, 0xf, 0xff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44044}, 0x20000800) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m38.997319974s ago: executing program 0 (id=785): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e00004b001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0xab85, 0x49800}, [@IFLA_MTU={0x8, 0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000090}, 0x30045004) 1m38.983323205s ago: executing program 0 (id=786): set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b40d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000a00850000008200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xc11, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x0, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r4, 0x7) close_range(r3, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001803a641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 1m38.804553359s ago: executing program 0 (id=787): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b50000000100feff0000fe"], 0xc8) 1m23.760228367s ago: executing program 32 (id=787): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b50000000100feff0000fe"], 0xc8) 9.854501888s ago: executing program 3 (id=1818): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000000000000001ac1414aa00000000000000000000200000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}}, 0x0) 9.708506622s ago: executing program 3 (id=1822): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001040)=0x1) socket$kcm(0x2c, 0x3, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) kcmp(r0, r0, 0x7080c6a24c5b3385, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 9.237683062s ago: executing program 3 (id=1830): epoll_create1(0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000340)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@discard}, {@errors_remount}, {@mblk_io_submit}, {@quota}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000dc0)=@delpolicy={0x158, 0x14, 0x800, 0x70bd29, 0x25dfdbff, {{@in=@rand_addr=0x64010101, @in=@loopback, 0x4e23, 0xa, 0x4e21, 0x400, 0xa, 0x20, 0x0, 0x2d}, 0x6e6bb0, 0x2}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e21, 0x4e23, @in6=@mcast1}}, @sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@mcast2, 0x4e22, 0x7, 0x4e24, 0x6, 0x2, 0x180, 0xa0, 0x33, 0x0, 0xee01}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x32}, @in6=@remote, {0x2, 0xf8a, 0xe, 0x9, 0x1, 0x1, 0x4, 0x1000}, {0x4, 0x5, 0x0, 0x2}, {0x663, 0x5, 0x8001}, 0x70bd2d, 0x3500, 0xa, 0x4, 0x4, 0x2}}, @replay_thresh={0x8, 0xb, 0x7}]}, 0x158}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@migrate={0x80, 0x21, 0x1, 0x4, 0x0, {{@in=@rand_addr=0x64010102, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xe0, 0x16}}, [@replay_esn_val={0x30, 0x17, {0x5, 0x70bd25, 0x70bd2d, 0x70bd28, 0x70bd2d, 0x0, [0x7, 0xf43c, 0x3, 0x5, 0x3b]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r0, 0x0, 0x88000cc, 0xd) fcntl$setpipe(r8, 0x407, 0x100004) write$eventfd(r8, &(0x7f0000000240), 0xffffff14) openat(0xffffffffffffff9c, &(0x7f0000001f80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x2) 4.725046364s ago: executing program 3 (id=1863): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x18, 0x0, 0x0) write(r0, &(0x7f0000000000)="240000005a0001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) getpgid(0x0) socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000005c0)={0x0}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000680)={r1, 0x21, "87d0fb41f79cd071386b3f067f8465e11c83f80e694fcd116082fb589580944627"}, &(0x7f00000006c0)=0x29) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0xc, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000340)={0x9, 0x5}, 0x2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5128bbad0099cebdc25f55988051f4c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bdb55cd4a5d83cd4a524bd2ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x9, 0xa]}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @local}}, 0xb7a, 0x6, 0xfffffff5, 0x9, 0x3}, &(0x7f0000000500)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000540)={0x6fcf, 0x4, 0x7, 0x6, r7}, &(0x7f0000000580)=0x10) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_DIVISOR={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 4.705248594s ago: executing program 3 (id=1864): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d55, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x2015, 0x8, 0x11400, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003b) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 3.859548723s ago: executing program 1 (id=1876): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000940)='./bus\x00', 0x400017e) r3 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0) getdents64(r3, &(0x7f00000004c0)=""/206, 0xce) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 3.835454394s ago: executing program 1 (id=1877): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c"], 0x50}}, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x2, &(0x7f0000000140)=""/29) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x101d0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x1b, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0xc0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 3.794987165s ago: executing program 3 (id=1880): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000180)=ANY=[@ANYBLOB="8800004f75b5e70cdf211a8800006847431fdb2e1cb34985bc0faf5b"]) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x1800, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff41, 0x10, &(0x7f0000000040)}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r7 = open(&(0x7f0000000580)='./file0\x00', 0x0, 0x2c) r8 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) preadv(r7, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newqdisc={0xec, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xbc, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x68, 0xd, "85fb02f352b681d3566c011dace0362db368f9787dbe92c45230fcca9c00d90865f30d9c53ccef8564098369a85821baf7ee612d34112ccfe4ba45631522022229378d473291bbe423ca32a6777ad0072096e78bb4e782d9d5e0c1bbdf06781e6be86cc9"}, @TCA_NETEM_DELAY_DIST={0x37, 0x2, "ce2b7239806574fd656bfbbed2884a38ee21b8c53d71dec277aff253639741496d3c117833ed96518cd0fddf754c6b14c383c8"}]}}}]}, 0xec}, 0x1, 0x0, 0x0, 0x20048084}, 0x8080) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) ptrace(0x10, 0x0) 2.811723287s ago: executing program 5 (id=1887): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x46, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x102281, 0x2, 0xfffffffe, 0x0, 0x0, 0xf8c, 0x0, 0x0, 0x0, 0x0, 0x1000000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file3\x00', 0x21081e, &(0x7f0000000100), 0x1, 0x523, &(0x7f0000001280)="$eJzs3c9vI1cdAPDvOHHiTdImLT0AgnZpCwtarZN426jqAcoJIVQJ0SNI25B4oyh2HMVOacIe0jNXJCpxgiN/AOeeuHNBcONSDkj8iEANEgejGU+yTmJvwyax0/jzkUYzb57j73u25z37m8QvgJF1OyL2I2IiIt6NiNn8fJJv8VZnS2/3ycGjlcODRytJtNvv/CPJ6tNz0fUzqen8PksR8YPvRPw4ORu3ubu3sVyrVbfz8nyrvjXf3N27t15fXquuVTcrlaXFpYU37r9eubS+vlSfyI++/PHv97/x07RZM/mZ7n5cpk7Xi8dxUuMR8b2rCDYEY3l/JobdEJ5KISKej4iXs+t/NsayZxMAuMna7dloz3aXAYCbrpDlwJJCOc8FzEShUC53cngvxFSh1mi27j5s7GyudnJlc1EsPFyvVRfyXOFcFJO0vJgdPy5XTpXvR8RzEfHzyVtZubzSqK0O840PAIyw6VPz/78nO/M/AHDDlYbdAABg4Mz/ADB6zP8AMHrM/wAwejrz/61hNwMAGCCf/wFg9Px/8//0lbUDABiI77/9drq1D/Pvv159b3dno/HevdVqc6Nc31kprzS2t8prjcZa9p099U+7v1qjsbX4Wuy8P/fNrWZrvrm796De2NlsPci+1/tBtZjdan8APQMA+nnupY/+lKQz8pu3si261nIoDrVlwFUrDLsBwNCMDbsBwNBccLUvwwd8hl3gM770ANwQPZboPaHU6x+E2u12++qaBFyxO1+Q/4dR1ZX/f/JfARsM4MaRwIPRdcH8P/AZ1m4n513zP857QwDgepPWA/r8/v/5fP+b/JcDP1o9fYsPr7JVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcL0drf9bztcCn4lCoVyOeCYi5qKYPFyvVRci4tmI+ONkcTItLw65zQDARRX+muTrf92ZfXXmRNWL08eHExHxk1++84v3l1ut7T9ETCT/nDw63/owP18ZfOsBgC4f9D59NE9n+64P8p8cPFo52gbWxvTdx7cjotSJf3gwEYfH8cdjPEtDlKIYEVP/StLysaQrd3ER++nj9Ple/U9iJsuBdFY+PR0/jf3MQOMXTsQvZHWdffpYfO4S2gKj5qN0/Hmr1/VXiNvZvvf1X8pGqIv7W2f8S+9q5TAbAx/HH88jjfUZ/26fN8Zrv/tu5+jW2boPIr44HnEU+7Br/DmKn/SJ/+o54//5Sy++3K+u/auIO9Ej/mRyItZ8q74139zdu7deX16rrlU3K5WlxaWFN+6/XpnPctTz/WeDv79599l+dWn/p3rFjyR/5vv3/6vn7P+v//vuD7/yhPhff6VX/EK88IT46Zz4tXPGX576balfXRp/tdP/49dgp+bTn/+754z/8V/2ziwbDgAMT3N3b2O5VqtuO3DwtAelq30hjT1+raa7a9HlHgffGlSsieyd+Nmqn73SeZxO/VS7/VSx+o0Yl5F1A66D44s+Iv4z7MYAAAAAAAAAAAAAAAA9DeI/lobdRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG6u/wUAAP//xHrFYA==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x4, 0x3, 0x8, 0x1, 0x6, 0x2, 0xf64, 0xfffffffb}) rename(&(0x7f0000000200)='./file3\x00', &(0x7f0000000240)='./file1\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r2, 0x1a, &(0x7f0000000280)={0x7}, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wg0\x00'}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x0, @b}}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001880), &(0x7f0000001900), 0x8, r1}, 0x38) 2.811446467s ago: executing program 4 (id=1888): socket$netlink(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x21, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000fcffffff8500000023000000180100002720642500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x110422, 0x4, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) ptrace$getregs(0xe, 0x0, 0x6, &(0x7f0000001280)=""/112) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x1, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xfbca, 0x202, 0x1, 0x8, 0x7, 0x1, 0xd}, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) 2.609322641s ago: executing program 4 (id=1890): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) getpgid(0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) close(r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001300)={'ip_vti0\x00', &(0x7f00000011c0)={'erspan0\x00', 0x0, 0x80, 0x10, 0x0, 0x100000, {{0x3a, 0x4, 0x1, 0x9, 0xe8, 0x68, 0x0, 0x8, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x34, 0x3f, 0x3, 0x8, [{@empty, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0x9}, {@multicast2, 0xb}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @noop, @timestamp_prespec={0x44, 0x44, 0x6b, 0x3, 0x0, [{@broadcast, 0x8}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x7fff}, {@remote, 0x6}, {@loopback, 0x5}, {@private=0xa010102, 0x1}, {@multicast2, 0x8}, {@broadcast, 0x7}]}, @timestamp_addr={0x44, 0x24, 0x33, 0x1, 0x3, [{@remote, 0x3}, {@loopback, 0x8}, {@multicast1, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x24}, 0xb00}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x33, [@multicast1, @private=0xa010100, @rand_addr=0x64010101, @loopback]}, @lsrr={0x83, 0x1f, 0xa8, [@multicast1, @local, @private=0xa010100, @rand_addr=0x64010100, @rand_addr=0x64010102, @multicast1, @loopback]}]}}}}}) bind$xdp(r0, &(0x7f0000001340)={0x2c, 0x0, r3, 0x9, r0}, 0x10) memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x800) io_setup(0x9, &(0x7f0000000240)=0x0) r11 = eventfd2(0x7, 0x0) io_submit(r10, 0x2, &(0x7f0000000b80)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xff45, r11, 0x0, 0x0, 0x7, 0x0, 0x5, r11}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x471f, r9, &(0x7f0000000300)="1698", 0x2, 0xf4, 0x0, 0x1, r11}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0x17fc) setns(r6, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x1800, &(0x7f0000001dc0)={0x4, 0xf5, 0x100000}, 0x20) 2.379672217s ago: executing program 5 (id=1891): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdffffff"], 0xfc}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x2, 0x6, 0x5e8, 0x448, 0x308, 0x1c0, 0x448, 0x1c0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2b, 0x8, 0x1, 0x18}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x7, 0x1}, {0xffffffffffffffff, 0x23}, 0x6, 0x7ff}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x2, 0x1}}}}, {{@uncond, 0x0, 0x100, 0x148, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x14, 0x22, 0x40}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001200000026bd7000fcdbdf2508060a014e244e23f8ffffff", @ANYRES32=0x0, @ANYBLOB="0100000000000020ab070471d64c600000000b0000000d000100f102dc"], 0x5c}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500000000000000ce39c063026b3615bd4a0ee7cc"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 2.340140817s ago: executing program 1 (id=1892): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d55, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x2015, 0x8, 0x11400, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r0, 0x402, 0x8000003b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 2.276594899s ago: executing program 4 (id=1894): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000000000000001ac1414aa00000000000000000000002000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}}, 0x0) 2.25062327s ago: executing program 4 (id=1896): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) io_setup(0x8, &(0x7f0000000300)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x200, r0, 0x0, 0x0, 0x4ec8, 0x0, 0x0, r0}]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setresuid(0xee01, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40, 0xc594}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0x1}, &(0x7f00000001c0), &(0x7f00000003c0), &(0x7f0000000000)) sendto$phonet(r3, &(0x7f0000000200)="190c8b1fa8d457e5c536e8da9b8a77d886e6ed11d1cdaef5b442725d9f2e28956b8462c9ecc8f37f9b2c2202b479dfe4bca686c6", 0x34, 0x48d1, 0x0, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x20, 0x27, 0x2, 0x0, 0x0, r8}, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r8, 0x11, &(0x7f00000002c0)=';', 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x3}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x6, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0x8000}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0xfff3}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0xc040) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000840)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000040), 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x4b4483, 0x0, 0x8}, 0x18) socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 2.246398049s ago: executing program 5 (id=1897): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) 2.183221751s ago: executing program 5 (id=1898): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x100000}, 0x20) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) r5 = syz_open_pts(r4, 0x2000) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000100)=0x6537) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r3) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0xb}, 0x1c) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r8, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) write(r8, &(0x7f00000000c0)="182eb9", 0x3) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010006081000418e00000704fcff", 0x58}], 0x1) 2.048290584s ago: executing program 5 (id=1899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[], 0x5, 0x1215, &(0x7f0000001840)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRESHEX=0x0, @ANYRES32=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000100900020073797a310000000008000a40fffffffc0800034000000005400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400032fb7b91f437210e08006000100d10300002c0000000e0a010400000000000000000a0000000900020073797a31000000000900010073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x24) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1.971617556s ago: executing program 4 (id=1901): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) memfd_create(0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r4, 0x7000000) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4090, 0xffa}], 0x1, 0xa, 0x203) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x595, 0x4aa6, 0xd9, 0x6cf}) r6 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$XFS_IOC_ERROR_INJECTION(r3, 0x40085874, &(0x7f0000000000)={r6, 0x2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001c0000004429536e4a680c04d1700d0067dc44bec0112d8abd7937232c1a755e1e5c671d3bc00ef9b414989c80"], 0x1c}}, 0x0) 1.648488773s ago: executing program 5 (id=1902): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket(0x28, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803f5, 0x1, 0x800}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e9500000000000056080000000000008500000081000000b70000000020000095000000000000005887fc353a9e163d4092d5ddc915ad8dfaa42a447cc376ea629b790c5d7596cde86a3626317d52a2f05aa9b505bd61a0cd5ab78e92b83849ea0fb6e69567e8e0b4a18012e660535c197b7c96b9273a6827254108bd28c3df793a63ab7fc9218a927978f110c40cd654fbff9098b5413ef43498b6"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.32414686s ago: executing program 2 (id=1903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECUREBITS(0x1c, 0x20) prctl$PR_SET_SECUREBITS(0x1c, 0x3) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="600000000206010100000000000000000a00000a0900020073797a310000000011000300686173683a6e65742c6e6574000000001400078008000840000000d805001400040000000500010007000000050005000a0000000500040002000000"], 0x60}, 0x1, 0x0, 0x0, 0x20044040}, 0x8c5) 1.159551254s ago: executing program 1 (id=1904): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) eventfd2(0x3, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_bp={0x0, 0xf}, 0x684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="02032000190000000000000000000000040003000000000000000000000000000000fffb000000010000000000000000030006000000000002004e207f00000100000000000000000400040000000000feffffffffffffff0000000000000000000000000000000002000100000000000000000600000000030005000000000002004e21ffffffff00a849000000000005000700000000000a004e2200000005fc01000000000000000000000000000000000000000000000200"], 0xc8}}, 0x0) close(0x3) 708.479784ms ago: executing program 2 (id=1905): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0920000000000035090100000000009500000009000000b7020000000000007b9af8ff0000000065090000fdffffff7babf0ff00000000ad9900000000000007080000f8ffffffbfa400000000000007040000f0f1ffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 606.392117ms ago: executing program 2 (id=1906): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x8080) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, 0x0, 0x3c}, 0x80, &(0x7f0000000680)}, 0x4011) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x100000000000}, 0x0, 0x3b, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setresuid(0xee01, 0xee01, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x44}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000100000000000000040004000000000010000700000000002000000000fb0000d17c4f304cc45b7a107b8698520c5f7c3db6ead3e4d6c5c8cb2228fe91cd749db559d59d8a355030cf3c8801b6ad6b4a59d4f1075c40e994c7a8d9abdccf6c096124b563a5466c1d975c10d41dcbffcad8c3d22a0fbc86955976664f743182921752905c32afbb6e1c58881bdb2fe26ac86195b80dc7c18b8c0082e62f72908deb1a123480c3fa790fa28c455b870d3f353d7001fd0c9604e19e35c740bc625e18efd3f0d8651c67881a7cf45276e2fa6fc4c08e190a8f8e9175271a208b09814a0e4992d9226e9dddf182b8aa3d37315629c1ece1ca2d5729cefa92b10f745bda56a9b3dbcb6f4a"], 0x24, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x119111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x2, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x74}}, 0x4000840) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x52}, 0x28) poll(&(0x7f0000000040)=[{r5, 0x9000}, {r6}], 0x2, 0x9) ptrace(0x10, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01080000000000000000010000000900010073797a30000000000900020073797a31000000000c0003800800014000000000db2597bcc7080007400000000328000000160a0101000b0000000000000100000008000380040003800900010073797a3000000000140000001000010000000000000000000000000a"], 0xb0}}, 0x0) msgget(0x3, 0x584) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x42}, 0x94) r8 = msgget$private(0x0, 0x100) msgsnd(r8, &(0x7f0000002900)=ANY=[@ANYBLOB], 0xfd1, 0x0) r9 = open(&(0x7f00000001c0)='.\x00', 0x50000, 0x0) getdents(r9, &(0x7f0000000600)=""/205, 0xcd) 472.548339ms ago: executing program 2 (id=1907): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdffffff"], 0xfc}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x2, 0x6, 0x5e8, 0x448, 0x308, 0x1c0, 0x448, 0x1c0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2b, 0x8, 0x1, 0x18}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x7, 0x1}, {0xffffffffffffffff, 0x23}, 0x6, 0x7ff}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x2, 0x1}}}}, {{@uncond, 0x0, 0x100, 0x148, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x14, 0x22, 0x40}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000001200000026bd7000fcdbdf2508060a014e244e23f8ffffff", @ANYRES32=0x0, @ANYBLOB="0100000000000020ab070471d64c600000000b0000000d000100f102dc"], 0x5c}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500000000000000ce39c063026b3615bd4a0ee7cc"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 305.578323ms ago: executing program 1 (id=1908): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2, 0x9, 0x8, 0x9, 0x15, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_address={0x5, 0x7, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x17}, 0x79f83021}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0x2, @empty, 0x5}, @in={0x2, 0x4e23, @dev}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0x9, @mcast2, 0x2ce8}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}}]}, 0xa8}, 0x1, 0xffffff80}, 0x4004000) 304.941693ms ago: executing program 2 (id=1909): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/crypto\x00', 0x0, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xe004, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x307d, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x2050}, 0x4) sendmmsg$inet6(r2, &(0x7f0000001a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x81, @private1, 0x608}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x200040c0) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010020000000000300000c0000000d000000020000000700000000000007000000000000"], 0x0, 0x26, 0x0, 0x0, 0x4}, 0x28) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket(0x1d, 0x2, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r5 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c082, 0x3, 0x20002f7}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r6, 0x8000000000000003}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x04\x00\x00\x00\xb2 b\x00O\x03\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000080)={0x2c, r8, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044840}, 0x48804) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r4, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f00000002c0)}}, {{&(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_clone(0xa1302400, 0x0, 0x57, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1e8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 188.395506ms ago: executing program 1 (id=1910): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x400, 0x8}, 0x4040, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socket(0x2, 0x4, 0x8d1) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) socket$nl_generic(0x10, 0x3, 0x10) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xfffc, 0x6, 0x2, 0xfffffffffffffffe, 0x7, 0xb, 0x2, 0xfffffffffffffff9, 0x8000009657, 0x7, 0x7fffffff, 0x800, 0x7, 0xa, 0x80000000000000, 0xce0, 0x1, 0x2, 0x94d9, 0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffb, 0x0, 0xf, 0xff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44044}, 0x20000800) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x2, 0x1) set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000000040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) 135.503777ms ago: executing program 4 (id=1911): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='bdev\x00', 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0xe5, 0x2602) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x90a3b4a3e4f91378) unshare(0x6a040000) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat(0xffffffffffffff9c, 0x0, 0x80042, 0x1bd) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000200], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000f44c64cffd15b72f00000000000000feffffff0000000000000000000000000000000000000000080000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 0s ago: executing program 2 (id=1912): prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) timer_create(0x4, &(0x7f00000002c0)={0x0, 0x2d, 0x1, @thr={&(0x7f0000000000)="3a2ac322d80ab04d8ed5b5f2e4b79346026bc51fcb3ff29a01b50324276f6b66db843bbc947c97c077233d9dc726bfec45d6562a5cb7d742c17925d4da9c2e573fc911b579ebf2371edef5b3a600f8e05ff7cb850ec70a4b6354754e6a7a5b8052be51bd6b20d89e35b3d0ac061a39424b8dd6", &(0x7f0000000180)="21b09ad510e7ab6e3b918f9c292669eb4e2ee62b8698c0fc3cacd04005b76aa4f47610b54ea2589f0741af2efaf155273db2ed5ad5d3f3cba20b4e26bb625fc3849e4d0c9b8c8b2bcf16349f70e465533f8d32ce8178d37a797143dab9c53f30ab61d98a7e26b8bf4756382c9eb14d905159359e98105ca7003caa8b42b996368b6768db7634df1760e3e32b1173d448"}}, &(0x7f0000000300)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001240)='./bus\x00', 0x0, 0xcf2c39061c7b83f2) lseek(r0, 0x3, 0x1) getdents(r0, 0x0, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000000b08000240000000010c00048006000100a83400000c00038006000100d18d00000900010073797a300000fbff0800020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ptrace$setregset(0x4205, r3, 0x200, &(0x7f0000000340)={&(0x7f0000000100)="7fb3402c65436d61524fb11ea27b25cb8b828961cccdf733179bd29577fb53935db59a50c52604ae244447dc1dfa7544", 0x30}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="68008f420b3be69441018508f0520eeff9000000", @ANYRES32=0x0, @ANYBLOB="0b560000000000003c0012800e00010069703667726574617000000028000280140007002001000000000000000000000000000006000e000100000005000b00f90000000a000100aaaaaaaaaa1a0000"], 0x68}, 0x1, 0x0, 0x0, 0x2005d808}, 0x4080) kernel console output (not intermixed with test programs): ontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 213.861321][ T7693] EXT4-fs (loop2): 1 truncate cleaned up [ 213.872345][ T7693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.938228][ T28] audit: type=1400 audit(1783686618.635:954): avc: denied { bind } for pid=7681 comm="syz.4.1132" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 213.978432][ T7704] netlink: 556 bytes leftover after parsing attributes in process `syz.1.1139'. [ 214.011585][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1140'. [ 214.023994][ T28] audit: type=1400 audit(1783686618.635:955): avc: denied { name_bind } for pid=7681 comm="syz.4.1132" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 214.052926][ T7711] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1136'. [ 214.097961][ T7711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=7711 comm=syz.5.1136 [ 214.127668][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.343609][ T7714] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7714 comm=syz.4.1140 [ 214.434195][ T7731] random: crng reseeded on system resumption [ 214.732247][ T28] audit: type=1400 audit(1783686619.615:956): avc: denied { write } for pid=7738 comm="syz.5.1149" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 214.841846][ T28] audit: type=1400 audit(1783686619.725:957): avc: denied { mount } for pid=7743 comm="syz.4.1150" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 214.883343][ T7749] loop5: detected capacity change from 0 to 512 [ 214.891149][ T7749] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 214.907256][ T7749] EXT4-fs (loop5): 1 truncate cleaned up [ 214.922420][ T7749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.119504][ T7764] loop3: detected capacity change from 0 to 4096 [ 215.144237][ T7764] EXT4-fs: Ignoring removed orlov option [ 215.152945][ T7764] EXT4-fs: inline encryption not supported [ 215.166917][ T7764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.191731][ T7772] loop2: detected capacity change from 0 to 1024 [ 215.199114][ T7764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.217148][ T7772] EXT4-fs: Ignoring removed bh option [ 215.253164][ T7772] EXT4-fs: Ignoring removed oldalloc option [ 215.266384][ T7772] EXT4-fs: Ignoring removed nobh option [ 215.280028][ T7772] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 215.280028][ T7772] [ 215.351380][ T7779] netlink: 'syz.4.1165': attribute type 1 has an invalid length. [ 215.455143][ T7779] bond8: entered promiscuous mode [ 215.462463][ T7779] 8021q: adding VLAN 0 to HW filter on device bond8 [ 215.874360][ T7785] loop2: detected capacity change from 0 to 512 [ 215.938345][ T7785] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 215.974142][ T7785] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1166: Invalid block bitmap block 0 in block_group 0 [ 215.987656][ T7785] loop2: lost filesystem error report for type 5 error -117 [ 215.989668][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 216.003422][ C0] EXT4-fs (loop2): initial error at time 1783686620: ext4_read_block_bitmap_nowait:483 [ 216.008030][ T7785] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 216.013104][ C0] EXT4-fs (loop2): last error at time 1783686620: ext4_read_block_bitmap_nowait:483 [ 216.031880][ T7785] loop2: lost filesystem error report for type 5 error -117 [ 216.032136][ T7785] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.1166: attempt to clear invalid blocks 983261 len 1 [ 216.054031][ T7785] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 216.054173][ T7785] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.1166: Invalid inode table block 0 in block_group 0 [ 216.079797][ T7785] loop2: lost filesystem error report for type 5 error -117 [ 216.079933][ T7785] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 216.096808][ T7779] bond8: (slave bridge7): making interface the new active one [ 216.098575][ T7785] loop2: lost filesystem error report for type 5 error -117 [ 216.104508][ T7779] bridge7: entered promiscuous mode [ 216.104672][ T7785] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 216.104695][ T7785] loop2: lost filesystem error report for type 5 error -117 [ 216.104793][ T7785] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.1166: Invalid inode table block 0 in block_group 0 [ 216.104824][ T7785] loop2: lost filesystem error report for type 5 error -117 [ 216.104915][ T7785] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 216.104938][ T7785] loop2: lost filesystem error report for type 5 error -117 [ 216.105114][ T7785] EXT4-fs error (device loop2): ext4_truncate:4691: inode #11: comm syz.2.1166: mark_inode_dirty error [ 216.146166][ T7779] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 216.163214][ T7785] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 216.241340][ T7785] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 216.266970][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.284046][ T7785] loop2: lost filesystem error report for type 5 error -117 [ 216.287518][ T7785] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.1166: Invalid inode table block 0 in block_group 0 [ 216.333076][ T7785] loop2: lost filesystem error report for type 5 error -117 [ 216.339147][ T7785] EXT4-fs (loop2): 1 truncate cleaned up [ 216.353984][ T7785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.372762][ T7785] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.1166: Invalid inode table block 0 in block_group 0 [ 216.401952][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.518653][ T7813] random: crng reseeded on system resumption [ 216.553889][ T7813] Restarting kernel threads ... [ 216.562332][ T7813] Done restarting kernel threads. [ 216.915607][ T7749] Set syz1 is full, maxelem 65536 reached [ 216.951247][ T7840] 8021q: adding VLAN 0 to HW filter on device bond6 [ 216.959420][ T6925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.975985][ T7840] vlan3: entered allmulticast mode [ 216.981281][ T7840] erspan0: entered allmulticast mode [ 216.992043][ T7840] bond6: (slave vlan3): Error -34 calling dev_set_mtu [ 217.062797][ T7846] netlink: 556 bytes leftover after parsing attributes in process `syz.5.1189'. [ 217.260908][ T7866] loop1: detected capacity change from 0 to 1024 [ 217.300166][ T7866] EXT4-fs: Ignoring removed bh option [ 217.350747][ T7866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 217.373879][ T7866] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.429505][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1197'. [ 217.446587][ T28] audit: type=1400 audit(1783686622.325:958): avc: denied { write } for pid=7865 comm="syz.1.1198" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.477700][ T7885] netlink: 556 bytes leftover after parsing attributes in process `syz.4.1203'. [ 217.545529][ T7887] loop5: detected capacity change from 0 to 512 [ 217.565221][ T7887] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 217.582391][ T7887] EXT4-fs (loop5): 1 truncate cleaned up [ 217.593168][ T7887] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.728702][ T6925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.777000][ T7897] pim6reg: entered allmulticast mode [ 217.791221][ T7897] pim6reg: left allmulticast mode [ 217.930700][ T28] audit: type=1400 audit(1783686622.805:959): avc: denied { connect } for pid=7903 comm="syz.5.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 217.993577][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 218.016444][ T7904] netlink: 'syz.5.1210': attribute type 1 has an invalid length. [ 218.184363][ T7922] netlink: 556 bytes leftover after parsing attributes in process `syz.3.1215'. [ 218.347058][ T7928] loop5: detected capacity change from 0 to 7 [ 218.355830][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.365026][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 218.376658][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.376885][ T28] audit: type=1400 audit(1783686623.255:960): avc: denied { listen } for pid=7926 comm="syz.2.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.385841][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 218.385957][ T7928] loop5: unable to read partition table [ 218.436805][ T7928] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õYˆLQkÝŠ5) failed (rc=-5) [ 218.439961][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 218.439993][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 218.610842][ T7904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.686698][ T7931] loop3: detected capacity change from 0 to 512 [ 218.714271][ T7931] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 218.715625][ T7931] EXT4-fs (loop3): 1 truncate cleaned up [ 218.716205][ T7931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.745392][ T7936] loop2: detected capacity change from 0 to 8192 [ 218.746876][ T7936] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.822763][ T7944] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 218.824751][ T7943] random: crng reseeded on system resumption [ 218.848631][ T7946] loop1: detected capacity change from 0 to 512 [ 218.854976][ T7943] Restarting kernel threads ... [ 218.863173][ T7943] Done restarting kernel threads. [ 218.888796][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.902375][ T7946] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 218.914029][ T7944] FAT-fs (loop2): Filesystem has been set read-only [ 218.917162][ T28] audit: type=1326 audit(1783686623.795:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7947 comm="syz.4.1224" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f728524de59 code=0x0 [ 218.928362][ T7944] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 218.955291][ T7944] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 218.964570][ T7944] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 218.973841][ T7946] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1223: bad orphan inode 131083 [ 218.984565][ T7944] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 219.011005][ T7946] loop1: lost filesystem error report for type 5 error -117 [ 219.011139][ T7944] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 219.027274][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 219.027296][ C0] EXT4-fs (loop1): initial error at time 1783686623: ext4_orphan_get:1425 [ 219.027327][ C0] EXT4-fs (loop1): last error at time 1783686623: ext4_orphan_get:1425 [ 219.041630][ T7946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.042484][ T7944] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 219.062278][ T7960] netlink: 556 bytes leftover after parsing attributes in process `syz.3.1226'. [ 219.062824][ T7944] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 219.089421][ T7944] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 219.106949][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1223'. [ 219.218590][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1231'. [ 219.229501][ T7968] netlink: 556 bytes leftover after parsing attributes in process `syz.2.1229'. [ 219.238016][ T7946] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7946 comm=syz.1.1223 [ 219.296393][ T7966] loop5: detected capacity change from 0 to 7 [ 219.308204][ C1] blk_print_req_error: 4 callbacks suppressed [ 219.308219][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.323469][ C1] buffer_io_error: 4 callbacks suppressed [ 219.323483][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 219.338089][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.347267][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 219.355906][ T7966] loop5: unable to read partition table [ 219.357149][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.362638][ T7966] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õYˆLQkÝŠ5) failed (rc=-5) [ 219.382759][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.391938][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 219.400163][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.401099][ T3379] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 219.409338][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 219.426178][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.435366][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 219.446102][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.455296][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 219.465419][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.474655][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 219.478975][ T3379] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 219.507594][ T28] audit: type=1400 audit(1783686624.385:962): avc: denied { ioctl } for pid=7975 comm="syz.2.1233" path="socket:[19464]" dev="sockfs" ino=19464 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 219.547761][ T7988] loop3: detected capacity change from 0 to 512 [ 219.562410][ T7988] EXT4-fs: Ignoring removed mblk_io_submit option [ 219.573791][ T7988] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 219.582833][ T7988] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 219.599022][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1236'. [ 219.610334][ T28] audit: type=1326 audit(1783686624.495:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7992 comm="syz.1.1238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27f976de59 code=0x0 [ 219.616058][ T7991] netlink: 556 bytes leftover after parsing attributes in process `syz.2.1237'. [ 219.636424][ T7988] netlink: 'syz.3.1236': attribute type 15 has an invalid length. [ 219.676972][ T7998] loop3: detected capacity change from 0 to 512 [ 219.685479][ T7998] EXT4-fs: Ignoring removed oldalloc option [ 219.694415][ T7998] EXT4-fs: Ignoring removed i_version option [ 219.712826][ T7998] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 219.728092][ T7998] EXT4-fs (loop3): orphan cleanup on readonly fs [ 219.752988][ T7998] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1239: invalid indirect mapped block 4294967295 (level 1) [ 219.767477][ T7998] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 219.767707][ T7998] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1239: invalid indirect mapped block 4294967295 (level 1) [ 219.776897][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 219.776915][ C0] EXT4-fs (loop3): initial error at time 1783686624: ext4_free_branches:1023: inode 11 [ 219.776963][ C0] EXT4-fs (loop3): last error at time 1783686624: ext4_free_branches:1023: inode 11 [ 219.816652][ T7998] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 219.832317][ T7998] EXT4-fs (loop3): 2 truncates cleaned up [ 219.847905][ T7998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 219.860415][ T7999] loop1: detected capacity change from 0 to 8192 [ 219.990283][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.187288][ T8007] infiniband syz2: set active [ 220.195912][ T8007] infiniband syz2: added bond_slave_1 [ 220.240477][ T8007] RDS/IB: syz2: added [ 220.250569][ T8019] loop2: detected capacity change from 0 to 128 [ 220.262497][ T8007] smc: adding ib device syz2 with port count 1 [ 220.269241][ T8007] smc: ib device syz2 port 1 has no pnetid [ 220.289068][ T8019] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 220.302509][ T8022] netlink: 'syz.5.1247': attribute type 1 has an invalid length. [ 220.310517][ T8019] System zones: 1-3, 19-19, 35-36 [ 220.340118][ T8019] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.373791][ T8019] ext4 filesystem being mounted at /252/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 220.411903][ T8027] netlink: 'syz.3.1248': attribute type 1 has an invalid length. [ 220.454757][ T8027] bond7: entered promiscuous mode [ 220.460700][ T8027] 8021q: adding VLAN 0 to HW filter on device bond7 [ 220.511300][ T8019] EXT4-fs warning (device loop2): ext4_group_extend:1861: can't shrink FS - resize aborted [ 220.521818][ T8027] bond7: (slave bridge4): making interface the new active one [ 220.533331][ T8027] bridge4: entered promiscuous mode [ 220.557829][ T8027] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 220.615322][ T8019] syz_tun: entered promiscuous mode [ 220.648432][ T8019] macvtap1: entered promiscuous mode [ 220.676867][ T8019] macvtap1: entered allmulticast mode [ 220.689007][ T8019] syz_tun: entered allmulticast mode [ 220.758704][ T8033] macvtap1: left promiscuous mode [ 220.787126][ T8033] macvtap1: left allmulticast mode [ 220.816095][ T8033] syz_tun: left allmulticast mode [ 220.862994][ T8046] loop3: detected capacity change from 0 to 8192 [ 220.883286][ T8046] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.904566][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.075963][ T8059] bridge_slave_1: left allmulticast mode [ 221.084711][ T8059] bridge_slave_1: left promiscuous mode [ 221.109845][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.119516][ T8065] netlink: 'syz.3.1263': attribute type 1 has an invalid length. [ 221.129794][ T8059] bridge_slave_0: left allmulticast mode [ 221.147520][ T8059] bridge_slave_0: left promiscuous mode [ 221.170809][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.267938][ T8065] bond8: entered promiscuous mode [ 221.277377][ T8065] 8021q: adding VLAN 0 to HW filter on device bond8 [ 221.287932][ T8081] EXT4-fs: Ignoring removed orlov option [ 221.293982][ T8081] EXT4-fs: inline encryption not supported [ 221.306921][ T8081] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.315423][ T8072] bond8: (slave bridge5): making interface the new active one [ 221.323096][ T8072] bridge5: entered promiscuous mode [ 221.326982][ T8081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.340845][ T8072] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 221.442408][ T28] audit: type=1400 audit(1783686626.315:964): avc: denied { getopt } for pid=8088 comm="syz.1.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 222.207549][ T8094] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.235674][ T6925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.571300][ T8134] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 222.615979][ T8137] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 222.647872][ T8137] EXT4-fs (loop1): 1 truncate cleaned up [ 222.658655][ T8137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.695143][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.823192][ T8148] EXT4-fs: Ignoring removed orlov option [ 222.841540][ T8148] EXT4-fs: inline encryption not supported [ 222.863187][ T8148] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.893638][ T8148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.070483][ T28] audit: type=1400 audit(1783686627.955:965): avc: denied { getopt } for pid=8133 comm="syz.3.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 223.693013][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.832822][ T8171] set_capacity_and_notify: 4 callbacks suppressed [ 223.832836][ T8171] loop1: detected capacity change from 0 to 512 [ 223.907942][ T8171] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 223.937719][ T8171] EXT4-fs (loop1): 1 truncate cleaned up [ 223.956737][ T8171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.978633][ T8173] __nla_validate_parse: 7 callbacks suppressed [ 223.978670][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1301'. [ 224.139423][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.203464][ T8177] loop1: detected capacity change from 0 to 2048 [ 224.280721][ T8179] loop5: detected capacity change from 0 to 512 [ 224.287380][ T8179] EXT4-fs: Ignoring removed bh option [ 224.294317][ T8177] Alternate GPT is invalid, using primary GPT. [ 224.303280][ T8179] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 224.310059][ T8177] loop1: p2 p3 p7 [ 224.320008][ T8179] EXT4-fs (loop5): 1 truncate cleaned up [ 224.326142][ T8179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.339544][ T28] audit: type=1400 audit(1783686629.215:966): avc: denied { write } for pid=8178 comm="syz.5.1303" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.476536][ T6925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.590764][ T8146] loop2: detected capacity change from 0 to 8192 [ 224.628814][ T8146] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.806422][ T8201] netlink: 'syz.1.1312': attribute type 1 has an invalid length. [ 224.886966][ T8198] loop3: detected capacity change from 0 to 512 [ 224.893831][ T8201] bond7: entered promiscuous mode [ 224.898467][ T8198] EXT4-fs: Ignoring removed oldalloc option [ 224.901849][ T8201] 8021q: adding VLAN 0 to HW filter on device bond7 [ 224.934910][ T8198] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 224.948446][ T8207] sg_write: data in/out 504197/136 bytes for SCSI command 0x0-- guessing data in; [ 224.948446][ T8207] program syz.2.1313 not setting count and/or reply_len properly [ 225.035419][ T8201] bond7: (slave bridge5): making interface the new active one [ 225.047669][ T8201] bridge5: entered promiscuous mode [ 225.059183][ T8189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.071999][ T8201] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 225.080156][ T8189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.106722][ T8198] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1310: invalid indirect mapped block 83886080 (level 1) [ 225.260258][ T8198] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 225.266102][ T8214] loop1: detected capacity change from 0 to 512 [ 225.275359][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 225.275396][ C1] EXT4-fs (loop3): initial error at time 1783686630: ext4_free_branches:1023: inode 16 [ 225.275430][ C1] EXT4-fs (loop3): last error at time 1783686630: ext4_free_branches:1023: inode 16 [ 225.300735][ T8198] EXT4-fs (loop3): Remounting filesystem read-only [ 225.307736][ T8214] EXT4-fs: Ignoring removed bh option [ 225.325677][ T8207] loop2: detected capacity change from 0 to 2048 [ 225.332270][ T8214] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 225.340795][ T8198] EXT4-fs (loop3): 1 orphan inode deleted [ 225.350066][ T8214] EXT4-fs (loop1): 1 truncate cleaned up [ 225.356119][ T8214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.359513][ T8198] EXT4-fs (loop3): 1 truncate cleaned up [ 225.384268][ T8207] loop2: p1 < > p2 p3 < > p4 < p5 > [ 225.394738][ T28] audit: type=1400 audit(1783686630.255:967): avc: denied { write } for pid=8213 comm="syz.1.1314" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.404048][ T8207] loop2: partition table partially beyond EOD, [ 225.418773][ T8198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.465489][ T8207] truncated [ 225.468717][ T8207] loop2: p1 start 3405774849 is beyond EOD, truncated [ 225.478496][ T8207] loop2: p3 start 4225 is beyond EOD, truncated [ 225.490386][ T8198] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.492778][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.540549][ T8198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1310'. [ 225.553403][ T8207] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1313'. [ 225.576671][ T8189] loop5: detected capacity change from 0 to 512 [ 225.589018][ T8189] EXT4-fs: Ignoring removed nobh option [ 225.619590][ T8189] EXT4-fs: Ignoring removed oldalloc option [ 225.636340][ T8189] EXT4-fs: old and new quota format mixing [ 225.670891][ T8220] loop5: detected capacity change from 0 to 7 [ 225.678939][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.688104][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 225.698164][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.707444][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 225.717606][ T8220] loop5: unable to read partition table [ 225.724870][ T8220] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õYˆLQkÝŠ5) failed (rc=-5) [ 225.731674][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.744389][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 225.754672][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.763951][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 225.773743][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.783060][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 225.791283][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.800444][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 225.810115][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 225.819302][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 225.912348][ T8232] sit0: entered allmulticast mode [ 225.924309][ T8232] sit0: entered promiscuous mode [ 226.018798][ T8244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1320'. [ 226.181837][ T8252] netlink: 'syz.3.1324': attribute type 1 has an invalid length. [ 226.250193][ T8252] bond9: entered promiscuous mode [ 226.257165][ T8252] 8021q: adding VLAN 0 to HW filter on device bond9 [ 226.289279][ T8257] bond9: (slave bridge6): making interface the new active one [ 226.297022][ T8257] bridge6: entered promiscuous mode [ 226.305437][ T8257] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 226.409292][ T28] audit: type=1400 audit(1783686631.285:968): avc: denied { bind } for pid=8264 comm="syz.4.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 226.436244][ T8270] loop1: detected capacity change from 0 to 512 [ 226.443758][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1329'. [ 226.482994][ T8270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.499243][ T8270] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.542725][ T8270] tipc: Started in network mode [ 226.550148][ T8270] tipc: Node identity ac14140f, cluster identity 4711 [ 226.557181][ T8270] tipc: New replicast peer: 255.255.255.255 [ 226.563653][ T8270] tipc: Enabled bearer , priority 10 [ 226.571452][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1331'. [ 226.590172][ T8270] Quota error (device loop1): do_check_range: Getting block 4128768 out of range 0-5 [ 226.626098][ T8282] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1337'. [ 227.679676][ T9] tipc: Node number set to 2886997007 [ 229.411997][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.677782][ T28] audit: type=1400 audit(1783686634.555:969): avc: denied { connect } for pid=8313 comm="syz.5.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 229.699435][ T8314] set_capacity_and_notify: 1 callbacks suppressed [ 229.699462][ T8314] loop5: detected capacity change from 0 to 256 [ 229.735423][ T8314] vfat: Unknown parameter 'uni_xl' [ 229.751026][ T8319] netlink: 'syz.4.1352': attribute type 5 has an invalid length. [ 229.767349][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'. [ 229.784463][ T28] audit: type=1400 audit(1783686634.665:970): avc: denied { ioctl } for pid=8313 comm="syz.5.1350" path="socket:[21132]" dev="sockfs" ino=21132 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 229.813878][ T8319] bond0: entered promiscuous mode [ 229.824748][ T8319] bond_slave_0: entered promiscuous mode [ 229.850895][ T8319] bond_slave_1: entered promiscuous mode [ 229.886923][ T8319] batadv0: entered promiscuous mode [ 229.910522][ T8319] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 230.146081][ T8335] team0: No ports can be present during mode change [ 230.163740][ T8335] netlink: 'syz.4.1358': attribute type 1 has an invalid length. [ 230.443880][ T8335] 8021q: adding VLAN 0 to HW filter on device bond9 [ 230.580866][ T8346] macvlan2: entered promiscuous mode [ 230.591941][ T8346] macvlan2: entered allmulticast mode [ 230.597663][ T8346] bond9: entered allmulticast mode [ 230.613252][ T8346] bond9: entered promiscuous mode [ 230.626737][ T8346] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 230.628071][ T8362] loop2: detected capacity change from 0 to 512 [ 230.635904][ T8346] team0: Port device macvlan2 added [ 230.683080][ T8362] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 230.730491][ T8362] EXT4-fs (loop2): 1 truncate cleaned up [ 230.742595][ T8362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.835149][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.095379][ T28] audit: type=1400 audit(1783686635.975:971): avc: denied { read } for pid=8416 comm="syz.1.1387" dev="sockfs" ino=21246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 231.108519][ T8419] 9p: Bad value for 'wfdno' [ 231.209464][ T8433] netlink: 'syz.5.1392': attribute type 1 has an invalid length. [ 231.260261][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1396'. [ 231.283916][ T8433] bond2: entered promiscuous mode [ 231.291437][ T8433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.324531][ T28] audit: type=1326 audit(1783686636.195:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.2.1396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91cd3cde59 code=0x7ffc0000 [ 231.425405][ T8433] bond2: (slave bridge1): making interface the new active one [ 231.434935][ T8433] bridge1: entered promiscuous mode [ 231.457116][ T8433] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 231.467681][ T28] audit: type=1326 audit(1783686636.195:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.2.1396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91cd3cde59 code=0x7ffc0000 [ 231.507902][ T28] audit: type=1326 audit(1783686636.195:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.2.1396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91cd3cde59 code=0x7ffc0000 [ 231.534265][ T28] audit: type=1326 audit(1783686636.195:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.2.1396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f91cd3cde59 code=0x7ffc0000 [ 231.560582][ T28] audit: type=1326 audit(1783686636.195:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.2.1396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91cd3cde59 code=0x7ffc0000 [ 231.562820][ T8457] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1400'. [ 231.586719][ T28] audit: type=1326 audit(1783686636.195:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.2.1396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91cd3cde59 code=0x7ffc0000 [ 231.625860][ T8460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.636880][ T8460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.654132][ T28] audit: type=1326 audit(1783686636.205:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8443 comm="syz.2.1396" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91cd3cde59 code=0x7ffc0000 [ 231.718333][ T8444] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 231.718333][ T8444] The task syz.2.1396 (8444) triggered the difference, watch for misbehavior. [ 231.749260][ T8473] nr0: entered allmulticast mode [ 231.866040][ T8478] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1403'. [ 231.888080][ T8478] loop3: detected capacity change from 0 to 164 [ 232.231996][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 232.246704][ T8496] netlink: 'syz.2.1409': attribute type 13 has an invalid length. [ 232.256972][ T8496] netlink: 'syz.2.1409': attribute type 17 has an invalid length. [ 232.466164][ T8496] bond1: left promiscuous mode [ 232.471369][ T8496] bridge1: left promiscuous mode [ 232.482719][ T8496] bond2: left promiscuous mode [ 232.487819][ T8496] bridge3: left promiscuous mode [ 232.500078][ T8496] bond4: left promiscuous mode [ 232.505103][ T8496] bridge4: left promiscuous mode [ 232.513922][ T8496] bond5: left promiscuous mode [ 232.518873][ T8496] bridge5: left promiscuous mode [ 232.528187][ T8496] bond6: left promiscuous mode [ 232.533353][ T8496] bridge6: left promiscuous mode [ 232.542848][ T8496] gretap1: left promiscuous mode [ 232.604456][ T8491] Set syz1 is full, maxelem 65536 reached [ 232.643835][ T8505] loop3: detected capacity change from 0 to 512 [ 232.651452][ T8505] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 232.694876][ T8505] EXT4-fs (loop3): 1 truncate cleaned up [ 232.701813][ T8505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.734109][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.916032][ T8531] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1415'. [ 233.046442][ T8531] loop3: detected capacity change from 0 to 512 [ 233.083505][ T8531] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 233.123836][ T8531] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 233.161252][ T8531] block device autoloading is deprecated and will be removed. [ 233.180396][ T8531] EXT4-fs (loop3): couldn't read superblock of external journal [ 233.400190][ T8534] loop2: detected capacity change from 0 to 1024 [ 233.421685][ T8534] EXT4-fs: Ignoring removed bh option [ 233.473330][ T8534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 233.501314][ T8534] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.553498][ T8554] loop1: detected capacity change from 0 to 512 [ 233.573791][ T8554] EXT4-fs: Ignoring removed bh option [ 233.580715][ T8534] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1416: bg 0: block 112: padding at end of block bitmap is not set [ 233.598476][ T8554] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.1422: corrupted in-inode xattr: e_value size too large [ 233.632797][ T8534] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 233.648834][ T8554] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 233.649696][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 233.660132][ T8534] EXT4-fs (loop2): This should not happen!! Data will be lost [ 233.660132][ T8534] [ 233.665462][ C0] EXT4-fs (loop1): initial error at time 1783686638: ext4_iget_extra_inode:5180: inode 15 [ 233.665509][ C0] EXT4-fs (loop1): last error at time 1783686638: ext4_iget_extra_inode:5180: inode 15 [ 233.699773][ T8554] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1422: couldn't read orphan inode 15 (err -117) [ 233.711838][ T8554] loop1: lost filesystem error report for type 5 error -117 [ 233.712061][ T8534] EXT4-fs (loop2): Total free blocks count 0 [ 233.726466][ T8554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.742035][ T8534] EXT4-fs (loop2): Free/Dirty block details [ 233.748659][ T8534] EXT4-fs (loop2): free_blocks=0 [ 233.756174][ T8534] EXT4-fs (loop2): dirty_blocks=64 [ 233.761629][ T8553] Invalid ELF header type: 54641 != 1 [ 233.761881][ T8534] EXT4-fs (loop2): Block reservation details [ 233.780902][ T8534] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 233.793736][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.813663][ T8557] loop1: detected capacity change from 0 to 512 [ 233.820879][ T8557] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 233.837754][ T8557] EXT4-fs (loop1): 1 truncate cleaned up [ 233.845030][ T3307] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 233.851638][ T8557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.857385][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 234.015305][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.337825][ T8586] netlink: 'syz.4.1428': attribute type 1 has an invalid length. [ 234.417495][ T8586] bond10: entered promiscuous mode [ 234.424806][ T8586] 8021q: adding VLAN 0 to HW filter on device bond10 [ 234.448765][ T8584] team0: No ports can be present during mode change [ 234.490303][ T8584] netlink: 'syz.1.1426': attribute type 1 has an invalid length. [ 234.788694][ T8595] loop5: detected capacity change from 0 to 8192 [ 234.815870][ T8595] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.274067][ T8586] bond10: (slave bridge8): making interface the new active one [ 235.281790][ T8586] bridge8: entered promiscuous mode [ 235.288204][ T8586] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 235.307641][ T8584] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 235.402124][ T8611] loop1: detected capacity change from 0 to 4096 [ 235.460138][ T8611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.478287][ T28] kauditd_printk_skb: 292 callbacks suppressed [ 235.478302][ T28] audit: type=1400 audit(1783686640.355:1271): avc: denied { write } for pid=8610 comm="syz.1.1436" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.508486][ T8614] loop2: detected capacity change from 0 to 4096 [ 235.522420][ T8614] EXT4-fs: Ignoring removed orlov option [ 235.526958][ T28] audit: type=1400 audit(1783686640.395:1272): avc: denied { read } for pid=8610 comm="syz.1.1436" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 235.549871][ T8614] EXT4-fs: inline encryption not supported [ 235.568007][ T8605] syz.4.1433 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 235.573417][ T28] audit: type=1400 audit(1783686640.395:1273): avc: denied { ioctl } for pid=8610 comm="syz.1.1436" path="/287/file0/file0/file0" dev="loop1" ino=13 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 235.583528][ T8614] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 235.624137][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.640268][ T8614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.884583][ T8629] loop1: detected capacity change from 0 to 128 [ 235.980025][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.988448][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.996910][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.005295][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.288644][ T8629] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.306710][ T8629] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.362221][ T28] audit: type=1400 audit(1783686641.215:1274): avc: denied { write } for pid=8623 comm="syz.1.1438" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.386491][ T28] audit: type=1400 audit(1783686641.225:1275): avc: denied { create } for pid=8623 comm="syz.1.1438" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 236.590757][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.604255][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.617271][ T8641] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.628331][ T8641] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.680049][ T8646] loop1: detected capacity change from 0 to 512 [ 236.698001][ T8646] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 236.704768][ T8652] netlink: 'syz.3.1449': attribute type 1 has an invalid length. [ 236.734201][ T8646] EXT4-fs (loop1): 1 truncate cleaned up [ 236.746074][ T8646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.820098][ T8652] bond10: entered promiscuous mode [ 236.828126][ T8652] 8021q: adding VLAN 0 to HW filter on device bond10 [ 236.830734][ T8661] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1451'. [ 236.881871][ T8656] bond10: (slave bridge7): making interface the new active one [ 236.891513][ T8643] loop5: detected capacity change from 0 to 8192 [ 236.892911][ T8656] bridge7: entered promiscuous mode [ 236.905561][ T8656] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 236.908399][ T8643] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 236.929289][ T8641] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.940585][ T8641] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.986933][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.140464][ T8641] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.155448][ T8641] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.187901][ T8671] loop5: detected capacity change from 0 to 128 [ 237.339217][ T8673] loop3: detected capacity change from 0 to 4096 [ 237.367411][ T8672] loop1: detected capacity change from 0 to 164 [ 237.387386][ T8673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.695681][ T8641] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.707895][ T8641] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.738666][ T8672] rock: directory entry would overflow storage [ 237.747505][ T28] audit: type=1400 audit(1783686642.285:1276): avc: denied { write } for pid=8663 comm="syz.3.1453" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.778048][ T8672] rock: sig=0x5252, size=5, remaining=3 [ 237.796188][ T8669] netlink: 'syz.1.1452': attribute type 30 has an invalid length. [ 237.867487][ T8678] loop5: detected capacity change from 0 to 4096 [ 237.905894][ T8678] EXT4-fs: Ignoring removed orlov option [ 237.911794][ T8678] EXT4-fs: inline encryption not supported [ 237.925243][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.937839][ T8678] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 237.967187][ T8678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.010826][ T5739] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.019047][ T5739] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.081460][ T30] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.096592][ T30] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.112028][ T30] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.121626][ T28] audit: type=1400 audit(1783686643.005:1277): avc: denied { sys_admin } for pid=8690 comm="syz.3.1460" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 238.121980][ T30] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.153824][ T30] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.162130][ T30] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.767349][ T8712] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1466'. [ 238.793084][ T6925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.000478][ T8712] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 239.020650][ T8712] EXT4-fs (loop1): couldn't read superblock of external journal [ 239.032389][ T28] audit: type=1400 audit(1783686643.915:1278): avc: denied { watch_reads } for pid=8735 comm="syz.4.1470" path="/329" dev="tmpfs" ino=1753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 239.243488][ T8732] EXT4-fs: Ignoring removed bh option [ 239.368123][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.372789][ T8732] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 239.377340][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 239.379509][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.399467][ T28] audit: type=1400 audit(1783686644.275:1279): avc: denied { getopt } for pid=8752 comm="syz.3.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 239.403577][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 239.403996][ T8751] loop5: unable to read partition table [ 239.432384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.432696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.432964][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.433256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.433599][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.500459][ T8732] EXT4-fs (loop2): 1 truncate cleaned up [ 239.506603][ T8751] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õYˆLQkÝŠ5) failed (rc=-5) [ 239.522396][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.531596][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 239.539958][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.545341][ T8732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.549140][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 239.570111][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.570146][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 239.570300][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.570343][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 239.570454][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.570481][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 239.717972][ T28] audit: type=1400 audit(1783686644.595:1280): avc: denied { write } for pid=8705 comm="syz.2.1464" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.772337][ T8765] EXT4-fs: Ignoring removed orlov option [ 239.783042][ T8765] EXT4-fs: inline encryption not supported [ 239.811685][ T8765] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 239.823973][ T8765] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.630491][ T6925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.682733][ T8507] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 240.894443][ T8800] set_capacity_and_notify: 4 callbacks suppressed [ 240.894458][ T8800] loop5: detected capacity change from 0 to 512 [ 240.925743][ T8800] EXT4-fs: Ignoring removed nobh option [ 240.954570][ T8800] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 241.002304][ T8800] EXT4-fs (loop5): 1 truncate cleaned up [ 241.027347][ T8800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.151776][ T8811] loop1: detected capacity change from 0 to 8192 [ 241.223550][ T8811] loop1: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 [ 241.223767][ T8811] loop1: p1 size 67108886 extends beyond EOD, truncated [ 241.470924][ T8811] loop1: p2 start 150995200 is beyond EOD, truncated [ 241.481742][ T8811] loop1: p3 start 327168 is beyond EOD, truncated [ 241.503034][ T8811] loop1: p5 size 67108886 extends beyond EOD, truncated [ 241.519979][ T8811] loop1: p6 start 150995200 is beyond EOD, truncated [ 241.645869][ T8811] loop1: p7 size 67108886 extends beyond EOD, truncated [ 241.675839][ T8811] loop1: p8 start 150995200 is beyond EOD, truncated [ 241.707123][ T8811] loop1: p9 size 67108886 extends beyond EOD, truncated [ 241.754879][ T8811] loop1: p10 start 150995200 is beyond EOD, truncated [ 241.822173][ T8811] loop1: p11 size 67108886 extends beyond EOD, truncated [ 241.886293][ T8811] loop1: p12 start 150995200 is beyond EOD, truncated [ 241.910592][ T6925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.946819][ T8811] loop1: p13 size 67108886 extends beyond EOD, truncated [ 241.965502][ T8811] loop1: p14 start 150995200 is beyond EOD, truncated [ 241.975270][ T8811] loop1: p15 size 67108886 extends beyond EOD, truncated [ 241.986320][ T8811] loop1: p15 could not be added: -ENOMEM [ 241.992315][ T8811] loop1: p16 start 150995200 is beyond EOD, truncated [ 241.999195][ T8811] loop1: p17 size 67108886 extends beyond EOD, truncated [ 242.009737][ T8811] loop1: p18 start 150995200 is beyond EOD, truncated [ 242.016776][ T8811] loop1: p19 size 67108886 extends beyond EOD, truncated [ 242.025931][ T8811] loop1: p20 start 150995200 is beyond EOD, truncated [ 242.034764][ T8811] loop1: p21 size 67108886 extends beyond EOD, truncated [ 242.048181][ T8811] loop1: p22 start 150995200 is beyond EOD, truncated [ 242.055228][ T8811] loop1: p23 size 67108886 extends beyond EOD, truncated [ 242.132050][ T8811] loop1: p24 start 150995200 is beyond EOD, truncated [ 242.148376][ T8811] loop1: p25 size 67108886 extends beyond EOD, truncated [ 242.169239][ T8811] loop1: p26 start 150995200 is beyond EOD, truncated [ 242.176421][ T8811] loop1: p27 size 67108886 extends beyond EOD, truncated [ 242.184024][ T8811] loop1: p28 start 150995200 is beyond EOD, truncated [ 242.190924][ T8811] loop1: p29 size 67108886 extends beyond EOD, truncated [ 242.198534][ T8811] loop1: p30 start 150995200 is beyond EOD, truncated [ 242.205484][ T8811] loop1: p31 size 67108886 extends beyond EOD, truncated [ 242.213135][ T8811] loop1: p32 start 150995200 is beyond EOD, truncated [ 242.317986][ T8838] loop5: detected capacity change from 0 to 512 [ 242.327886][ T8838] EXT4-fs: Ignoring removed bh option [ 242.339829][ T8811] loop1: p33 size 67108886 extends beyond EOD, truncated [ 242.348257][ T8838] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 242.366529][ T8838] EXT4-fs (loop5): 1 truncate cleaned up [ 242.375959][ T8838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.400153][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 242.400175][ T28] audit: type=1400 audit(1783686647.275:1282): avc: denied { write } for pid=8830 comm="syz.5.1501" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.448859][ T8811] loop1: p34 start 150995200 is beyond EOD, truncated [ 242.470899][ T8811] loop1: p35 size 67108886 extends beyond EOD, truncated [ 242.496341][ T8811] loop1: p35 could not be added: -ENOMEM [ 242.514616][ T8811] loop1: p36 start 150995200 is beyond EOD, truncated [ 242.538073][ T8811] loop1: p37 size 67108886 extends beyond EOD, truncated [ 242.557556][ T8811] loop1: p38 start 150995200 is beyond EOD, truncated [ 242.568656][ T8811] loop1: p39 size 67108886 extends beyond EOD, truncated [ 242.577280][ T8811] loop1: p40 start 150995200 is beyond EOD, truncated [ 242.609323][ T8811] loop1: p41 size 67108886 extends beyond EOD, truncated [ 242.635961][ T8811] loop1: p42 start 150995200 is beyond EOD, truncated [ 242.652314][ T8811] loop1: p43 size 67108886 extends beyond EOD, truncated [ 242.673005][ T8811] loop1: p44 start 150995200 is beyond EOD, truncated [ 242.699170][ T8811] loop1: p45 size 67108886 extends beyond EOD, truncated [ 242.724097][ T8811] loop1: p46 start 150995200 is beyond EOD, truncated [ 242.744897][ T8811] loop1: p47 size 67108886 extends beyond EOD, truncated [ 242.767549][ T8811] loop1: p48 start 150995200 is beyond EOD, truncated [ 242.774730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.775064][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.775337][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.775612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.775902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.849998][ T8811] loop1: p49 size 67108886 extends beyond EOD, truncated [ 242.870409][ T8811] loop1: p50 start 150995200 is beyond EOD, truncated [ 242.878574][ T8811] loop1: p51 size 67108886 extends beyond EOD, truncated [ 242.900196][ T8811] loop1: p52 start 150995200 is beyond EOD, truncated [ 242.908538][ T8811] loop1: p53 size 67108886 extends beyond EOD, truncated [ 242.930568][ T8811] loop1: p54 start 150995200 is beyond EOD, truncated [ 242.938859][ T8811] loop1: p55 size 67108886 extends beyond EOD, truncated [ 242.962780][ T8811] loop1: p56 start 150995200 is beyond EOD, truncated [ 242.994907][ T8811] loop1: p57 size 67108886 extends beyond EOD, truncated [ 243.025041][ T8811] loop1: p58 start 150995200 is beyond EOD, truncated [ 243.051185][ T8811] loop1: p59 size 67108886 extends beyond EOD, truncated [ 243.071766][ T8811] loop1: p60 start 150995200 is beyond EOD, truncated [ 243.091302][ T8811] loop1: p61 size 67108886 extends beyond EOD, truncated [ 243.115698][ T8811] loop1: p62 start 150995200 is beyond EOD, truncated [ 243.132577][ T8811] loop1: p63 size 67108886 extends beyond EOD, truncated [ 243.153112][ T8811] loop1: p64 start 150995200 is beyond EOD, truncated [ 243.170261][ T8811] loop1: p65 size 67108886 extends beyond EOD, truncated [ 243.194892][ T8811] loop1: p66 start 150995200 is beyond EOD, truncated [ 243.211077][ T8811] loop1: p67 size 67108886 extends beyond EOD, truncated [ 243.230384][ T8811] loop1: p68 start 150995200 is beyond EOD, truncated [ 243.248710][ T8811] loop1: p69 size 67108886 extends beyond EOD, truncated [ 243.264677][ T8811] loop1: p70 start 150995200 is beyond EOD, truncated [ 243.281075][ T8811] loop1: p71 size 67108886 extends beyond EOD, truncated [ 243.302313][ T8811] loop1: p72 start 150995200 is beyond EOD, truncated [ 243.315072][ T8811] loop1: p73 size 67108886 extends beyond EOD, truncated [ 243.331705][ T8811] loop1: p74 start 150995200 is beyond EOD, truncated [ 243.349729][ T8811] loop1: p75 size 67108886 extends beyond EOD, truncated [ 243.363219][ T8811] loop1: p76 start 150995200 is beyond EOD, truncated [ 243.381090][ T8811] loop1: p77 size 67108886 extends beyond EOD, truncated [ 243.407425][ T8811] loop1: p78 start 150995200 is beyond EOD, truncated [ 243.437060][ T8811] loop1: p79 size 67108886 extends beyond EOD, truncated [ 243.460129][ T8811] loop1: p80 start 150995200 is beyond EOD, truncated [ 243.485801][ T8811] loop1: p81 size 67108886 extends beyond EOD, truncated [ 243.650355][ T8811] loop1: p82 start 150995200 is beyond EOD, truncated [ 243.676346][ T8811] loop1: p83 size 67108886 extends beyond EOD, truncated [ 243.736791][ T8811] loop1: p84 start 150995200 is beyond EOD, truncated [ 243.802803][ T8811] loop1: p85 size 67108886 extends beyond EOD, truncated [ 243.849930][ T8811] loop1: p86 start 150995200 is beyond EOD, truncated [ 243.888663][ T8811] loop1: p87 size 67108886 extends beyond EOD, truncated [ 243.906903][ T8811] loop1: p88 start 150995200 is beyond EOD, truncated [ 243.913800][ T8811] loop1: p89 size 67108886 extends beyond EOD, truncated [ 243.914836][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.932398][ T8811] loop1: p90 start 150995200 is beyond EOD, truncated [ 243.939258][ T8811] loop1: p91 size 67108886 extends beyond EOD, truncated [ 243.948326][ T8811] loop1: p92 start 150995200 is beyond EOD, truncated [ 243.958348][ T8811] loop1: p93 size 67108886 extends beyond EOD, truncated [ 243.981441][ T8811] loop1: p94 start 150995200 is beyond EOD, truncated [ 243.997038][ T8811] loop1: p95 size 67108886 extends beyond EOD, truncated [ 244.017670][ T8811] loop1: p96 start 150995200 is beyond EOD, truncated [ 244.039601][ T8811] loop1: p97 size 67108886 extends beyond EOD, truncated [ 244.061472][ T8811] loop1: p98 start 150995200 is beyond EOD, truncated [ 244.079669][ T8811] loop1: p99 size 67108886 extends beyond EOD, truncated [ 244.097581][ T8811] loop1: p100 start 150995200 is beyond EOD, truncated [ 244.132116][ T8811] loop1: p101 size 67108886 extends beyond EOD, truncated [ 244.154501][ T8811] loop1: p102 start 150995200 is beyond EOD, truncated [ 244.176557][ T8811] loop1: p103 size 67108886 extends beyond EOD, truncated [ 244.199899][ T8811] loop1: p104 start 150995200 is beyond EOD, truncated [ 244.212353][ T8811] loop1: p105 size 67108886 extends beyond EOD, truncated [ 244.238793][ T8811] loop1: p106 start 150995200 is beyond EOD, truncated [ 244.259782][ T8811] loop1: p107 size 67108886 extends beyond EOD, truncated [ 244.287245][ T8811] loop1: p108 start 150995200 is beyond EOD, truncated [ 244.309807][ T8811] loop1: p109 size 67108886 extends beyond EOD, truncated [ 244.323588][ T8811] loop1: p110 start 150995200 is beyond EOD, truncated [ 244.339873][ T8811] loop1: p111 size 67108886 extends beyond EOD, truncated [ 244.358268][ T8811] loop1: p112 start 150995200 is beyond EOD, truncated [ 244.369924][ T8811] loop1: p113 size 67108886 extends beyond EOD, truncated [ 244.388689][ T8811] loop1: p114 start 150995200 is beyond EOD, truncated [ 244.412082][ T8811] loop1: p115 size 67108886 extends beyond EOD, truncated [ 244.436852][ T8811] loop1: p116 start 150995200 is beyond EOD, truncated [ 244.454760][ T8811] loop1: p117 size 67108886 extends beyond EOD, truncated [ 244.475683][ T8811] loop1: p118 start 150995200 is beyond EOD, truncated [ 244.493292][ T8811] loop1: p119 size 67108886 extends beyond EOD, truncated [ 244.513006][ T8811] loop1: p120 start 150995200 is beyond EOD, truncated [ 244.525376][ T8811] loop1: p121 size 67108886 extends beyond EOD, truncated [ 244.559987][ T8811] loop1: p122 start 150995200 is beyond EOD, truncated [ 244.566895][ T8811] loop1: p123 size 67108886 extends beyond EOD, truncated [ 244.581291][ T8811] loop1: p124 start 150995200 is beyond EOD, truncated [ 244.600777][ T8811] loop1: p125 size 67108886 extends beyond EOD, truncated [ 244.611779][ T8811] loop1: p126 start 150995200 is beyond EOD, truncated [ 244.632176][ T8811] loop1: p127 size 67108886 extends beyond EOD, truncated [ 244.641078][ T8811] loop1: p128 start 150995200 is beyond EOD, truncated [ 244.659570][ T8811] loop1: p129 size 67108886 extends beyond EOD, truncated [ 244.669854][ T8811] loop1: p130 start 150995200 is beyond EOD, truncated [ 244.691371][ T8811] loop1: p131 size 67108886 extends beyond EOD, truncated [ 244.699911][ T8811] loop1: p132 start 150995200 is beyond EOD, truncated [ 244.711061][ T8811] loop1: p133 size 67108886 extends beyond EOD, truncated [ 244.719017][ T8867] loop2: detected capacity change from 0 to 8192 [ 244.731063][ T8811] loop1: p134 start 150995200 is beyond EOD, truncated [ 244.750409][ T8811] loop1: p135 size 67108886 extends beyond EOD, truncated [ 244.759059][ T8867] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 244.775909][ T8811] loop1: p136 start 150995200 is beyond EOD, truncated [ 244.783764][ T8811] loop1: p137 size 67108886 extends beyond EOD, truncated [ 244.794141][ T8811] loop1: p138 start 150995200 is beyond EOD, truncated [ 244.802383][ T8811] loop1: p139 size 67108886 extends beyond EOD, truncated [ 244.829833][ T8811] loop1: p140 start 150995200 is beyond EOD, truncated [ 244.839407][ T8811] loop1: p141 size 67108886 extends beyond EOD, truncated [ 244.848668][ T8811] loop1: p142 start 150995200 is beyond EOD, truncated [ 244.858462][ T8811] loop1: p143 size 67108886 extends beyond EOD, truncated [ 244.881036][ T8811] loop1: p144 start 150995200 is beyond EOD, truncated [ 244.899517][ T8811] loop1: p145 size 67108886 extends beyond EOD, truncated [ 244.910311][ T8811] loop1: p146 start 150995200 is beyond EOD, truncated [ 244.917345][ T8811] loop1: p147 size 67108886 extends beyond EOD, truncated [ 244.931685][ T8811] loop1: p148 start 150995200 is beyond EOD, truncated [ 244.950070][ T8811] loop1: p149 size 67108886 extends beyond EOD, truncated [ 244.969303][ T8811] loop1: p150 start 150995200 is beyond EOD, truncated [ 245.019749][ T8811] loop1: p151 size 67108886 extends beyond EOD, truncated [ 245.035831][ T8811] loop1: p152 start 150995200 is beyond EOD, truncated [ 245.050344][ T8811] loop1: p153 size 67108886 extends beyond EOD, truncated [ 245.161770][ T8904] loop2: detected capacity change from 0 to 256 [ 245.300958][ T8811] loop1: p154 start 150995200 is beyond EOD, truncated [ 245.515848][ T8810] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 245.533486][ T8811] loop1: p155 size 67108886 extends beyond EOD, truncated [ 245.547700][ T8811] loop1: p156 start 150995200 is beyond EOD, truncated [ 245.569598][ T8811] loop1: p157 size 67108886 extends beyond EOD, truncated [ 245.592535][ T8811] loop1: p158 start 150995200 is beyond EOD, truncated [ 245.627304][ T8811] loop1: p159 size 67108886 extends beyond EOD, truncated [ 245.649837][ T8811] loop1: p160 start 150995200 is beyond EOD, truncated [ 245.673813][ T8811] loop1: p161 size 67108886 extends beyond EOD, truncated [ 245.697709][ T8811] loop1: p162 start 150995200 is beyond EOD, truncated [ 245.781237][ T8811] loop1: p163 size 67108886 extends beyond EOD, truncated [ 245.803460][ T8811] loop1: p164 start 150995200 is beyond EOD, truncated [ 245.822324][ T8811] loop1: p165 size 67108886 extends beyond EOD, truncated [ 245.830389][ T8811] loop1: p166 start 150995200 is beyond EOD, truncated [ 245.837791][ T8811] loop1: p167 size 67108886 extends beyond EOD, truncated [ 245.860358][ T8811] loop1: p168 start 150995200 is beyond EOD, truncated [ 245.871805][ T8811] loop1: p169 size 67108886 extends beyond EOD, truncated [ 245.889389][ T8811] loop1: p170 start 150995200 is beyond EOD, truncated [ 245.901082][ T8811] loop1: p171 size 67108886 extends beyond EOD, truncated [ 245.909170][ T8811] loop1: p172 start 150995200 is beyond EOD, truncated [ 245.930853][ T8811] loop1: p173 size 67108886 extends beyond EOD, truncated [ 246.020988][ T8811] loop1: p174 start 150995200 is beyond EOD, truncated [ 246.028099][ T8811] loop1: p175 size 67108886 extends beyond EOD, truncated [ 246.055722][ T8811] loop1: p176 start 150995200 is beyond EOD, truncated [ 246.076540][ T8811] loop1: p177 size 67108886 extends beyond EOD, truncated [ 246.106535][ T8811] loop1: p178 start 150995200 is beyond EOD, truncated [ 246.129314][ T8811] loop1: p179 size 67108886 extends beyond EOD, truncated [ 246.144948][ C1] net_ratelimit: 2 callbacks suppressed [ 246.145032][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.154410][ T8811] loop1: p180 start 150995200 is beyond EOD, [ 246.163372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.169693][ T8811] truncated [ 246.169703][ T8811] loop1: p181 size 67108886 extends beyond EOD, truncated [ 246.170271][ T8811] loop1: p182 start 150995200 is beyond EOD, [ 246.182772][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.206902][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.217993][ T8930] loop2: detected capacity change from 0 to 8192 [ 246.221840][ T8811] truncated [ 246.237620][ T8811] loop1: p183 size 67108886 extends beyond EOD, truncated [ 246.251497][ T8930] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.254528][ T8811] loop1: p184 start 150995200 is beyond EOD, truncated [ 246.293172][ T8811] loop1: p185 size 67108886 extends beyond EOD, truncated [ 246.308613][ T8811] loop1: p186 start 150995200 is beyond EOD, truncated [ 246.338973][ T8811] loop1: p187 size 67108886 extends beyond EOD, truncated [ 246.370406][ T8811] loop1: p188 start 150995200 is beyond EOD, truncated [ 246.379285][ T8811] loop1: p189 size 67108886 extends beyond EOD, truncated [ 246.398677][ T8811] loop1: p190 start 150995200 is beyond EOD, truncated [ 246.411676][ T8811] loop1: p191 size 67108886 extends beyond EOD, truncated [ 246.431858][ T8811] loop1: p192 start 150995200 is beyond EOD, truncated [ 246.447992][ T8811] loop1: p193 size 67108886 extends beyond EOD, truncated [ 246.467555][ T8811] loop1: p194 start 150995200 is beyond EOD, truncated [ 246.478316][ T8811] loop1: p195 size 67108886 extends beyond EOD, truncated [ 246.500158][ T8811] loop1: p196 start 150995200 is beyond EOD, truncated [ 246.522918][ T8811] loop1: p197 size 67108886 extends beyond EOD, truncated [ 246.534257][ T8811] loop1: p198 start 150995200 is beyond EOD, truncated [ 246.552738][ T8811] loop1: p199 size 67108886 extends beyond EOD, truncated [ 246.564662][ T8811] loop1: p200 start 150995200 is beyond EOD, truncated [ 246.587221][ T8811] loop1: p201 size 67108886 extends beyond EOD, truncated [ 246.597848][ T8811] loop1: p202 start 150995200 is beyond EOD, truncated [ 246.613386][ T8811] loop1: p203 size 67108886 extends beyond EOD, truncated [ 246.632757][ T8811] loop1: p204 start 150995200 is beyond EOD, truncated [ 246.641504][ T8811] loop1: p205 size 67108886 extends beyond EOD, truncated [ 246.658539][ T8811] loop1: p206 start 150995200 is beyond EOD, truncated [ 246.677291][ T8811] loop1: p207 size 67108886 extends beyond EOD, truncated [ 246.701713][ T8811] loop1: p208 start 150995200 is beyond EOD, truncated [ 246.721161][ T8811] loop1: p209 size 67108886 extends beyond EOD, truncated [ 246.745884][ T8811] loop1: p210 start 150995200 is beyond EOD, truncated [ 246.766335][ T8933] loop2: detected capacity change from 0 to 1024 [ 246.773477][ T8811] loop1: p211 size 67108886 extends beyond EOD, truncated [ 246.793259][ T8811] loop1: p212 start 150995200 is beyond EOD, truncated [ 246.810371][ T8811] loop1: p213 size 67108886 extends beyond EOD, truncated [ 246.833641][ T8811] loop1: p214 start 150995200 is beyond EOD, truncated [ 246.846565][ T8933] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 246.867203][ T8811] loop1: p215 size 67108886 extends beyond EOD, truncated [ 246.882872][ T8933] System zones: 0-1, 3-36 [ 246.892604][ T6925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.903311][ T8811] loop1: p216 start 150995200 is beyond EOD, truncated [ 246.918491][ T8933] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1531: bad orphan inode 134217728 [ 246.943737][ T8811] loop1: p217 size 67108886 extends beyond EOD, truncated [ 246.960063][ T8933] loop2: lost filesystem error report for type 5 error -117 [ 246.963018][ T8811] loop1: p218 start 150995200 is beyond EOD, [ 246.966880][ T8933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.979797][ T8811] truncated [ 247.005181][ T8811] loop1: p219 size 67108886 extends beyond EOD, truncated [ 247.013026][ T8811] loop1: p220 start 150995200 is beyond EOD, truncated [ 247.020637][ T8811] loop1: p221 size 67108886 extends beyond EOD, truncated [ 247.028397][ T8811] loop1: p222 start 150995200 is beyond EOD, truncated [ 247.035666][ T8811] loop1: p223 size 67108886 extends beyond EOD, truncated [ 247.051237][ T8811] loop1: p224 start 150995200 is beyond EOD, truncated [ 247.058427][ T8811] loop1: p225 size 67108886 extends beyond EOD, truncated [ 247.066560][ T8811] loop1: p226 start 150995200 is beyond EOD, truncated [ 247.075543][ T8811] loop1: p227 size 67108886 extends beyond EOD, truncated [ 247.078785][ T28] audit: type=1400 audit(1783686651.955:1283): avc: denied { write } for pid=8932 comm="syz.2.1531" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 247.086261][ T8811] loop1: p228 start 150995200 is beyond EOD, truncated [ 247.112974][ T8811] loop1: p229 size 67108886 extends beyond EOD, truncated [ 247.122113][ T8943] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 247.133065][ T8811] loop1: p230 start 150995200 is beyond EOD, truncated [ 247.160612][ T8811] loop1: p231 size 67108886 extends beyond EOD, truncated [ 247.167570][ T28] audit: type=1400 audit(1783686652.005:1284): avc: denied { getopt } for pid=8932 comm="syz.2.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 247.170855][ T8811] loop1: p232 start 150995200 is beyond EOD, truncated [ 247.214765][ T8811] loop1: p233 size 67108886 extends beyond EOD, truncated [ 247.230140][ T8811] loop1: p234 start 150995200 is beyond EOD, truncated [ 247.248644][ T8811] loop1: p235 size 67108886 extends beyond EOD, truncated [ 247.267008][ T8811] loop1: p236 start 150995200 is beyond EOD, truncated [ 247.280176][ T8811] loop1: p237 size 67108886 extends beyond EOD, truncated [ 247.288111][ T8811] loop1: p238 start 150995200 is beyond EOD, truncated [ 247.296448][ T8811] loop1: p239 size 67108886 extends beyond EOD, truncated [ 247.304200][ T8811] loop1: p240 start 150995200 is beyond EOD, truncated [ 247.311766][ T8811] loop1: p241 size 67108886 extends beyond EOD, truncated [ 247.331525][ T8811] loop1: p242 start 150995200 is beyond EOD, truncated [ 247.339574][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.350308][ T8811] loop1: p243 size 67108886 extends beyond EOD, truncated [ 247.367938][ T8811] loop1: p244 start 150995200 is beyond EOD, truncated [ 247.375422][ T8811] loop1: p245 size 67108886 extends beyond EOD, truncated [ 247.384022][ T8811] loop1: p246 start 150995200 is beyond EOD, truncated [ 247.391064][ T8811] loop1: p247 size 67108886 extends beyond EOD, truncated [ 247.398711][ T8811] loop1: p248 start 150995200 is beyond EOD, truncated [ 247.405740][ T8811] loop1: p249 size 67108886 extends beyond EOD, truncated [ 247.449906][ T8811] loop1: p250 start 150995200 is beyond EOD, truncated [ 247.469848][ T8811] loop1: p251 size 67108886 extends beyond EOD, truncated [ 247.499722][ T8811] loop1: p252 start 150995200 is beyond EOD, truncated [ 247.520796][ T28] audit: type=1400 audit(1783686652.395:1285): avc: denied { read } for pid=8966 comm="syz.5.1544" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 247.534014][ T8969] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1545'. [ 247.550199][ T8811] loop1: p253 size 67108886 extends beyond EOD, truncated [ 247.597490][ T8811] loop1: p254 start 150995200 is beyond EOD, truncated [ 247.650772][ T8811] loop1: p255 size 67108886 extends beyond EOD, truncated [ 247.684997][ T28] audit: type=1400 audit(1783686652.395:1286): avc: denied { open } for pid=8966 comm="syz.5.1544" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 248.089028][ T8977] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1547'. [ 248.391159][ T28] audit: type=1400 audit(1783686653.265:1287): avc: denied { checkpoint_restore } for pid=8980 comm="syz.4.1550" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 248.432298][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 248.436843][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 248.445023][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 248.456124][ T5777] udevd[5777]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 248.473207][ T3707] udevd[3707]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 248.496657][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop1p25, 10) failed: No such file or directory [ 248.522205][ T8988] loop5: detected capacity change from 0 to 7 [ 248.533224][ T3707] udevd[3707]: inotify_add_watch(7, /dev/loop1p29, 10) failed: No such file or directory [ 248.534324][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p27, 10) failed: No such file or directory [ 248.555844][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p31, 10) failed: No such file or directory [ 248.573497][ T8992] udevd[8992]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory [ 248.596338][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.605626][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 248.614925][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 248.624111][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 248.634568][ T8988] loop5: unable to read partition table [ 248.670951][ T8988] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õYˆLQkÝŠ5) failed (rc=-5) [ 248.767731][ T9003] loop5: detected capacity change from 0 to 8192 [ 248.786780][ T9003] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 248.953725][ T9016] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1559'. [ 249.233717][ T9028] 9p: Could not find request transport: rem [ 249.254470][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1564'. [ 249.274540][ T9031] random: crng reseeded on system resumption [ 249.275066][ T9028] netlink: 'syz.5.1564': attribute type 30 has an invalid length. [ 249.324620][ T9031] Restarting kernel threads ... [ 249.348158][ T30] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.366197][ T30] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.366511][ T28] audit: type=1326 audit(1783686654.245:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.5.1564" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ec177de59 code=0x0 [ 249.376457][ T9031] Done restarting kernel threads. [ 249.415544][ T30] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.430195][ T30] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.890025][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.898538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.906984][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.915493][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.923981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.083294][ T9073] netlink: 'syz.4.1573': attribute type 4 has an invalid length. [ 250.106808][ T9073] netlink: 'syz.4.1573': attribute type 4 has an invalid length. [ 250.493193][ T9078] loop1: detected capacity change from 0 to 512 [ 250.505694][ T9082] loop5: detected capacity change from 0 to 512 [ 250.523178][ T9078] EXT4-fs: Ignoring removed bh option [ 250.544045][ T9082] EXT4-fs: Mount option(s) incompatible with ext2 [ 250.565260][ T9078] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 250.596883][ T9078] EXT4-fs (loop1): 1 truncate cleaned up [ 250.699122][ T9078] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.701615][ T9091] loop2: detected capacity change from 0 to 512 [ 250.743356][ T28] audit: type=1400 audit(1783686655.625:1289): avc: denied { write } for pid=9069 comm="syz.1.1576" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 250.768430][ T9091] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 250.804665][ T9095] random: crng reseeded on system resumption [ 250.817891][ T9091] EXT4-fs (loop2): 1 truncate cleaned up [ 250.825675][ T9091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.828403][ T9095] Restarting kernel threads ... [ 250.856855][ T9095] Done restarting kernel threads. [ 250.887385][ T9088] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 251.000428][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.185907][ T9119] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1591'. [ 251.207978][ T28] audit: type=1400 audit(1783686656.085:1290): avc: denied { ioctl } for pid=9120 comm="syz.5.1592" path="socket:[23257]" dev="sockfs" ino=23257 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 251.280915][ T28] audit: type=1400 audit(1783686656.085:1291): avc: denied { setopt } for pid=9120 comm="syz.5.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 251.334293][ T28] audit: type=1400 audit(1783686656.085:1292): avc: denied { accept } for pid=9120 comm="syz.5.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 251.377343][ T28] audit: type=1400 audit(1783686656.245:1293): avc: denied { create } for pid=9134 comm="syz.2.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 251.414963][ T9142] loop2: detected capacity change from 0 to 512 [ 251.459410][ T9142] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 251.500527][ T9142] EXT4-fs (loop2): 1 truncate cleaned up [ 251.514230][ T9142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.596703][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.763796][ T9177] FAULT_INJECTION: forcing a failure. [ 251.763796][ T9177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.780500][ T9177] CPU: 1 UID: 0 PID: 9177 Comm: syz.5.1609 Not tainted syzkaller #0 PREEMPT(lazy) [ 251.780530][ T9177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 251.780543][ T9177] Call Trace: [ 251.780550][ T9177] [ 251.780558][ T9177] __dump_stack+0x1d/0x30 [ 251.780616][ T9177] dump_stack_lvl+0x95/0xd0 [ 251.780644][ T9177] dump_stack+0x15/0x1b [ 251.780660][ T9177] should_fail_ex+0x25e/0x270 [ 251.780688][ T9177] should_fail+0xb/0x20 [ 251.780725][ T9177] should_fail_usercopy+0x1a/0x20 [ 251.780755][ T9177] _copy_from_user+0x1c/0xb0 [ 251.780787][ T9177] ___sys_sendmsg+0xc1/0x1e0 [ 251.780824][ T9177] __x64_sys_sendmsg+0xd4/0x160 [ 251.780863][ T9177] x64_sys_call+0x194c/0x3020 [ 251.780963][ T9177] do_syscall_64+0x136/0x3c0 [ 251.780997][ T9177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.781022][ T9177] RIP: 0033:0x7f4ec177de59 [ 251.781040][ T9177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.781057][ T9177] RSP: 002b:00007f4ec01d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.781118][ T9177] RAX: ffffffffffffffda RBX: 00007f4ec1a05fa0 RCX: 00007f4ec177de59 [ 251.781133][ T9177] RDX: 0000000000000010 RSI: 0000200000000800 RDI: 0000000000000003 [ 251.781148][ T9177] RBP: 00007f4ec01d7090 R08: 0000000000000000 R09: 0000000000000000 [ 251.781163][ T9177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.781178][ T9177] R13: 00007f4ec1a06038 R14: 00007f4ec1a05fa0 R15: 00007ffe337a5528 [ 251.781270][ T9177] [ 252.052901][ T9179] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1610'. [ 252.171715][ T9194] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1616'. [ 252.901613][ T9185] Set syz1 is full, maxelem 65536 reached [ 253.554637][ T9231] loop5: detected capacity change from 0 to 7 [ 253.563154][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.572346][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 253.580770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.589232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.597695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.606125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.614611][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.622771][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.631960][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 253.653094][ T9231] loop5: unable to read partition table [ 253.672491][ T9231] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õYˆLQkÝŠ5) failed (rc=-5) [ 253.683102][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.692301][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 253.701145][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.710343][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 253.719105][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.728544][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 253.736955][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.743825][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.746122][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 253.768987][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 253.778262][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 253.993221][ T9250] netlink: 'syz.1.1637': attribute type 1 has an invalid length. [ 254.122675][ T9250] bond9: entered promiscuous mode [ 254.129821][ T9250] 8021q: adding VLAN 0 to HW filter on device bond9 [ 254.175765][ T9255] bond9: (slave bridge6): making interface the new active one [ 254.196525][ T9255] bridge6: entered promiscuous mode [ 254.216976][ T9255] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 254.457615][ T9268] FAULT_INJECTION: forcing a failure. [ 254.457615][ T9268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.471272][ T9268] CPU: 0 UID: 0 PID: 9268 Comm: syz.2.1642 Not tainted syzkaller #0 PREEMPT(lazy) [ 254.471347][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 254.471360][ T9268] Call Trace: [ 254.471366][ T9268] [ 254.471375][ T9268] __dump_stack+0x1d/0x30 [ 254.471407][ T9268] dump_stack_lvl+0x95/0xd0 [ 254.471429][ T9268] dump_stack+0x15/0x1b [ 254.471598][ T9268] should_fail_ex+0x25e/0x270 [ 254.471626][ T9268] should_fail+0xb/0x20 [ 254.471650][ T9268] should_fail_usercopy+0x1a/0x20 [ 254.471738][ T9268] _copy_from_iter+0xcc/0xe70 [ 254.471764][ T9268] ? __alloc_skb+0x511/0x6f0 [ 254.471787][ T9268] ? __alloc_skb+0x205/0x6f0 [ 254.471885][ T9268] netlink_sendmsg+0x4a4/0x6f0 [ 254.471913][ T9268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.471933][ T9268] ____sys_sendmsg+0x532/0x580 [ 254.471963][ T9268] ___sys_sendmsg+0x195/0x1e0 [ 254.472022][ T9268] __x64_sys_sendmsg+0xd4/0x160 [ 254.472055][ T9268] x64_sys_call+0x194c/0x3020 [ 254.472079][ T9268] do_syscall_64+0x136/0x3c0 [ 254.472149][ T9268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.472171][ T9268] RIP: 0033:0x7f91cd3cde59 [ 254.472189][ T9268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.472240][ T9268] RSP: 002b:00007f91cbe27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.472301][ T9268] RAX: ffffffffffffffda RBX: 00007f91cd655fa0 RCX: 00007f91cd3cde59 [ 254.472317][ T9268] RDX: 0000000000000010 RSI: 0000200000000800 RDI: 0000000000000003 [ 254.472331][ T9268] RBP: 00007f91cbe27090 R08: 0000000000000000 R09: 0000000000000000 [ 254.472344][ T9268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.472358][ T9268] R13: 00007f91cd656038 R14: 00007f91cd655fa0 R15: 00007fff77052c48 [ 254.472410][ T9268] [ 254.865799][ T28] audit: type=1400 audit(1783686659.745:1294): avc: denied { read } for pid=9286 comm="syz.2.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 254.902009][ T9284] loop1: detected capacity change from 0 to 4096 [ 254.980180][ T9289] random: crng reseeded on system resumption [ 254.987142][ T9284] netlink: 'syz.1.1648': attribute type 22 has an invalid length. [ 255.032137][ T9289] Restarting kernel threads ... [ 255.037367][ T9289] Done restarting kernel threads. [ 255.107010][ T28] audit: type=1400 audit(1783686659.985:1295): avc: denied { execute } for pid=9292 comm="syz.1.1652" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 255.232211][ T9293] loop1: detected capacity change from 0 to 512 [ 255.254727][ T9293] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.275593][ T9293] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 255.326758][ T9303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1654'. [ 255.348764][ T9293] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 255.382335][ T9293] EXT4-fs (loop1): orphan cleanup on readonly fs [ 255.410290][ T9293] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1652: Invalid block bitmap block 0 in block_group 0 [ 255.445070][ T9303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1654'. [ 255.460670][ T9301] loop2: detected capacity change from 0 to 8192 [ 255.468334][ T9293] loop1: lost filesystem error report for type 5 error -117 [ 255.469645][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 255.483404][ C0] EXT4-fs (loop1): last error at time 1783686660: ext4_read_block_bitmap_nowait:483 [ 255.494254][ T9293] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1652: Invalid block bitmap block 0 in block_group 0 [ 255.508853][ T9301] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 255.547454][ T9293] loop1: lost filesystem error report for type 5 error -117 [ 255.549101][ T9293] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1652: Invalid block bitmap block 0 in block_group 0 [ 255.596072][ T9293] loop1: lost filesystem error report for type 5 error -117 [ 255.596301][ T9293] Quota error (device loop1): write_blk: dquota write failed [ 255.650714][ T9293] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 255.673266][ T9293] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1652: Failed to acquire dquot type 1 [ 255.714279][ T9293] loop1: lost filesystem error report for type 5 error -28 [ 255.715947][ T9293] EXT4-fs (loop1): 1 orphan inode deleted [ 255.730697][ T40] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 255.745232][ T40] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 255.768441][ T40] loop1: lost filesystem error report for type 5 error -117 [ 255.898831][ T9293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 255.963827][ T9321] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1658'. [ 255.978515][ T9321] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1658'. [ 255.979039][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.046082][ T3407] IPVS: starting estimator thread 0... [ 256.083062][ T9331] dvmrp8: entered allmulticast mode [ 256.140139][ T9330] IPVS: using max 2304 ests per chain, 115200 per kthread [ 256.166834][ T9338] 9p: Bad value for 'wfdno' [ 256.664617][ T9353] loop5: detected capacity change from 0 to 512 [ 256.696163][ T9353] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 256.719002][ T9353] EXT4-fs (loop5): 1 truncate cleaned up [ 256.726175][ T9353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.784916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.797896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.810405][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.821774][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.897415][ T6925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.350338][ T9376] netlink: 'syz.5.1677': attribute type 3 has an invalid length. [ 257.365909][ T9376] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1677'. [ 257.549290][ T9387] loop1: detected capacity change from 0 to 512 [ 257.565085][ T9387] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 257.584884][ T9387] EXT4-fs (loop1): 1 truncate cleaned up [ 257.591094][ T9387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.672778][ T9347] loop2: detected capacity change from 0 to 8192 [ 257.691434][ T9347] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 257.713330][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.753808][ T9394] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1684'. [ 257.755264][ T9392] loop5: detected capacity change from 0 to 2048 [ 257.796336][ T9392] EXT4-fs: Ignoring removed mblk_io_submit option [ 257.803213][ T9392] EXT4-fs: Ignoring removed mblk_io_submit option [ 257.825018][ T9392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.991906][ T9405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1688'. [ 258.259241][ T9413] vlan4: entered promiscuous mode [ 258.290498][ T9410] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.297732][ T9410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.305073][ T9410] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.312184][ T9410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.367592][ T9410] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.376942][ T9410] 8021q: adding VLAN 0 to HW filter on device eth0 [ 258.385985][ T9410] 8021q: adding VLAN 0 to HW filter on device eth1 [ 258.394963][ T9410] 8021q: adding VLAN 0 to HW filter on device eth2 [ 258.404138][ T9410] 8021q: adding VLAN 0 to HW filter on device eth3 [ 258.501692][ T5734] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 258.571391][ T9423] loop2: detected capacity change from 0 to 512 [ 258.584152][ T9423] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 258.610991][ T9423] EXT4-fs (loop2): 1 truncate cleaned up [ 258.617051][ T9423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.733792][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.830697][ T9442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1700'. [ 258.835542][ T9443] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1701'. [ 259.220114][ T9461] random: crng reseeded on system resumption [ 259.254214][ T9461] Restarting kernel threads ... [ 259.265400][ T9461] Done restarting kernel threads. [ 259.970080][ C1] net_ratelimit: 1 callbacks suppressed [ 259.970097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.984272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.992815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.001287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.168434][ T28] audit: type=1400 audit(1783686665.045:1296): avc: denied { mounton } for pid=9478 comm="syz.2.1716" path="/" dev="tmpfs" ino=1801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 260.225128][ T28] audit: type=1400 audit(1783686665.075:1297): avc: denied { accept } for pid=9488 comm="syz.3.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 260.611459][ T9357] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 260.649850][ T9357] EXT4-fs (loop5): Remounting filesystem read-only [ 260.657923][ T9507] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1728'. [ 261.282378][ T9521] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1732'. [ 261.702656][ T9550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.760073][ T9550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.798153][ T9550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.806793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.865283][ T9565] loop2: detected capacity change from 0 to 4096 [ 261.872325][ T9565] EXT4-fs: Ignoring removed orlov option [ 261.890210][ T9565] EXT4-fs: inline encryption not supported [ 261.922649][ T9565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 261.964783][ T9565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.014353][ T9569] ipip0: entered promiscuous mode [ 262.032014][ T9565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1746'. [ 262.370474][ T948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.670659][ T6925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.753323][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.846245][ T9615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1765'. [ 262.854275][ T28] audit: type=1400 audit(1783686667.735:1298): avc: denied { watch_reads } for pid=9617 comm="syz.4.1766" path="/415/file0" dev="tmpfs" ino=2202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 262.855410][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 262.958034][ T9627] dvmrp8: left allmulticast mode [ 262.982306][ T9632] loop1: detected capacity change from 0 to 2048 [ 262.991375][ T9632] EXT4-fs: Ignoring removed mblk_io_submit option [ 263.006212][ T9632] EXT4-fs: Ignoring removed mblk_io_submit option [ 263.029747][ T9632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.053988][ T9641] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1774'. [ 263.105786][ T9639] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1773'. [ 263.170014][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.255700][ T9648] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1777'. [ 263.439003][ T9655] loop5: detected capacity change from 0 to 7 [ 263.485856][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 263.501794][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.511006][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 263.519655][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.528807][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 263.537540][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.546694][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 263.555720][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.564884][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 263.578966][ T9655] loop5: unable to read partition table [ 263.584874][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.594262][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 263.602885][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.612041][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 263.620029][ T9655] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õYˆLQkÝŠ5) failed (rc=-5) [ 263.631490][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 263.640822][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 263.748783][ T9665] random: crng reseeded on system resumption [ 263.758420][ T9663] netlink: 'syz.2.1780': attribute type 1 has an invalid length. [ 263.774949][ T9665] Restarting kernel threads ... [ 263.788028][ T9665] Done restarting kernel threads. [ 263.809187][ T9663] 8021q: adding VLAN 0 to HW filter on device bond8 [ 263.905728][ T9663] bond8: (slave veth0_to_bond): making interface the new active one [ 263.948840][ T9663] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 264.008249][ T9670] bond8: entered promiscuous mode [ 264.025647][ T9670] veth0_to_bond: entered promiscuous mode [ 264.040200][ T9670] bond8: entered allmulticast mode [ 264.062831][ T9670] veth0_to_bond: entered allmulticast mode [ 264.141981][ T9681] macvlan2: entered promiscuous mode [ 264.147322][ T9681] macvlan2: entered allmulticast mode [ 264.154104][ T9681] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 264.163797][ T9681] bond8: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 264.202097][ T9688] loop5: detected capacity change from 0 to 128 [ 264.228190][ T9688] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 264.261918][ T9688] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 264.506464][ T9699] loop5: detected capacity change from 0 to 7 [ 264.531545][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.540999][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.550314][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 264.556973][ T9706] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.559567][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.577263][ T9699] loop5: unable to read partition table [ 264.587650][ T9706] netlink: 'syz.4.1794': attribute type 2 has an invalid length. [ 264.630418][ T9699] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õYˆLQkÝŠ5) failed (rc=-5) [ 264.647807][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.723779][ T9712] loop5: detected capacity change from 0 to 512 [ 264.749545][ T9712] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 264.804252][ T6925] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 265.066954][ T9728] loop5: detected capacity change from 0 to 128 [ 265.094791][ T9728] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 265.138283][ T9728] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 265.565541][ T9736] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1804'. [ 265.594159][ T9738] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1806'. [ 265.717725][ T9738] loop5: detected capacity change from 0 to 512 [ 265.740001][ T948] net_ratelimit: 6 callbacks suppressed [ 265.740016][ T948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.800312][ T9738] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 265.852978][ T9738] EXT4-fs (loop5): couldn't read superblock of external journal [ 266.139744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.215281][ T9757] loop5: detected capacity change from 0 to 4096 [ 266.222966][ T9757] EXT4-fs: Ignoring removed orlov option [ 266.284663][ T28] audit: type=1400 audit(1783686671.135:1299): avc: denied { write } for pid=9747 comm="syz.4.1810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 266.348386][ T9757] EXT4-fs: inline encryption not supported [ 266.411252][ T9757] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 266.478833][ T9757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.594931][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1814'. [ 266.781476][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.378804][ T6925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.388402][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.410434][ T3407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.447637][ T9777] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1819'. [ 267.481337][ T9780] netlink: 'syz.3.1822': attribute type 1 has an invalid length. [ 267.588277][ T9780] bond11: entered promiscuous mode [ 267.602449][ T9780] 8021q: adding VLAN 0 to HW filter on device bond11 [ 267.635297][ T9790] loop5: detected capacity change from 0 to 7 [ 267.641945][ T9790] loop5: unable to read partition table [ 267.666566][ T9790] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õYˆLQkÝŠ5) failed (rc=-5) [ 267.871206][ T9780] bond11: (slave bridge8): making interface the new active one [ 267.878955][ T9780] bridge8: entered promiscuous mode [ 267.907597][ T9780] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 267.919440][ T948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.013639][ T9802] loop2: detected capacity change from 0 to 4096 [ 268.044296][ T9802] EXT4-fs: Ignoring removed orlov option [ 268.070914][ T9802] EXT4-fs: inline encryption not supported [ 268.104156][ T9802] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 268.122327][ T9802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.146482][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1829'. [ 268.616552][ T9822] loop5: detected capacity change from 0 to 8192 [ 268.799757][ T9822] syz.5.1832: attempt to access beyond end of device [ 268.799757][ T9822] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 268.825970][ T9822] buffer_io_error: 16 callbacks suppressed [ 268.825986][ T9822] Buffer I/O error on dev loop5, logical block 57847, async page read [ 268.840401][ T9831] loop1: detected capacity change from 0 to 512 [ 268.847850][ T9831] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.867646][ T9831] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 268.939603][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.939771][ T948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.961945][ T9831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.988208][ T9831] ext4 filesystem being mounted at /340/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.023744][ T9837] loop2: detected capacity change from 0 to 512 [ 269.063524][ T9837] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 269.072163][ T9837] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 269.094601][ T9837] System zones: 0-1, 15-15, 18-18, 34-34 [ 269.107543][ T9837] EXT4-fs (loop2): orphan cleanup on readonly fs [ 269.139452][ T9837] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 269.163575][ T9831] EXT4-fs (loop1): shut down requested (0) [ 269.163578][ T28] audit: type=1400 audit(1783686674.045:1300): avc: denied { shutdown } for pid=9830 comm="syz.1.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 269.195497][ T9837] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 269.215112][ T9831] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 269.225559][ T9837] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 269.237775][ T28] audit: type=1400 audit(1783686674.075:1301): avc: denied { read } for pid=2963 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 269.242568][ T9831] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 269.276134][ T9837] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1836: bad orphan inode 16 [ 269.296382][ T28] audit: type=1400 audit(1783686674.075:1302): avc: denied { search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.314591][ T9837] loop2: lost filesystem error report for type 5 error -117 [ 269.319525][ T9837] ext4_test_bit(bit=15, block=18) = 1 [ 269.326937][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 269.326960][ C1] EXT4-fs (loop2): initial error at time 1783686674: ext4_orphan_get:1425 [ 269.326986][ C1] EXT4-fs (loop2): last error at time 1783686674: ext4_orphan_get:1425 [ 269.357024][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.372577][ T28] audit: type=1400 audit(1783686674.075:1303): avc: denied { write search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.395023][ T9837] is_bad_inode(inode)=0 [ 269.395032][ T9837] NEXT_ORPHAN(inode)=0 [ 269.395041][ T9837] max_ino=32 [ 269.395049][ T9837] i_nlink=2 [ 269.395610][ T9837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 269.468464][ T28] audit: type=1400 audit(1783686674.075:1304): avc: denied { add_name } for pid=2963 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.537483][ T28] audit: type=1400 audit(1783686674.075:1305): avc: denied { create } for pid=2963 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 269.669893][ T9852] loop1: detected capacity change from 0 to 256 [ 269.706068][ T9852] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 269.722762][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1842'. [ 269.786722][ T28] audit: type=1400 audit(1783686674.075:1306): avc: denied { append open } for pid=2963 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 269.899353][ T28] audit: type=1400 audit(1783686674.075:1307): avc: denied { getattr } for pid=2963 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 269.962124][ T9857] loop5: detected capacity change from 0 to 7 [ 270.007705][ C0] blk_print_req_error: 17 callbacks suppressed [ 270.007723][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.023122][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 270.038758][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.048618][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 270.060974][ T9857] loop5: unable to read partition table [ 270.099685][ T9857] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õYˆLQkÝŠ5) failed (rc=-5) [ 270.111371][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.120579][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 270.144180][ T948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.174660][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.184046][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 270.194960][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.204140][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 270.212377][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.221537][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 270.232103][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 270.241294][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 270.359258][ T9864] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1844'. [ 270.436148][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.451459][ T3407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.170945][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.481351][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 271.481367][ T28] audit: type=1400 audit(1783686676.365:1316): avc: denied { create } for pid=9893 comm="syz.5.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 271.533478][ T28] audit: type=1400 audit(1783686676.395:1317): avc: denied { write } for pid=9893 comm="syz.5.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 271.714294][ T9904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.753950][ T9917] usb usb1: usbfs: process 9917 (syz.5.1857) did not claim interface 0 before use [ 271.773559][ T9920] loop1: detected capacity change from 0 to 1024 [ 271.787995][ T9920] EXT4-fs: inline encryption not supported [ 271.816449][ T9920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.839435][ T28] audit: type=1400 audit(1783686676.715:1318): avc: denied { write } for pid=9914 comm="syz.1.1856" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 271.876766][ T9925] random: crng reseeded on system resumption [ 271.902543][ T9925] Restarting kernel threads ... [ 271.907803][ T9925] Done restarting kernel threads. [ 271.922543][ T9904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.032468][ T9904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.054382][ T28] audit: type=1326 audit(1783686676.935:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9927 comm="syz.5.1859" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ec177de59 code=0x0 [ 272.151354][ T9904] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.211247][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.289711][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 272.292894][ T30] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.331923][ T30] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.361325][ T30] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.385056][ T30] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.428930][ T28] audit: type=1400 audit(1783686677.305:1320): avc: denied { tracepoint } for pid=9936 comm="syz.2.1862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 272.546090][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.919359][ T9950] vhci_hcd vhci_hcd.4: invalid port number 142 [ 272.933817][ T9950] vhci_hcd vhci_hcd.4: default hub control req: 8007 v0302 i008e l41 [ 273.016953][ T9955] loop5: detected capacity change from 0 to 512 [ 273.024008][ T9955] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 273.036881][ T9955] EXT4-fs (loop5): 1 truncate cleaned up [ 273.043218][ T9955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.061031][ T28] audit: type=1400 audit(1783686677.935:1321): avc: denied { setattr } for pid=9949 comm="syz.5.1867" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 273.250968][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.540897][ T3367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.704182][ T9994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1877'. [ 273.848484][ T6925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.947484][T10002] random: crng reseeded on system resumption [ 274.008504][T10002] Restarting kernel threads ... [ 274.036116][T10002] Done restarting kernel threads. [ 274.355509][T10012] loop5: detected capacity change from 0 to 512 [ 274.391520][ T9993] loop2: detected capacity change from 0 to 8192 [ 274.411154][ T9993] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 274.446662][T10012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.523572][T10012] ext4 filesystem being mounted at /180/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.599539][ T28] audit: type=1400 audit(1783686679.475:1322): avc: denied { write } for pid=10011 comm="syz.5.1887" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.628533][T10012] EXT4-fs (loop5): resizing filesystem from 128 to 2 blocks [ 274.638847][T10012] EXT4-fs warning (device loop5): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 274.691486][ T28] audit: type=1400 audit(1783686679.475:1323): avc: denied { write } for pid=10011 comm="syz.5.1887" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 274.741222][ T28] audit: type=1400 audit(1783686679.475:1324): avc: denied { rename } for pid=10011 comm="syz.5.1887" name="file3" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 274.743589][ T6925] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.776662][ T28] audit: type=1400 audit(1783686679.475:1325): avc: denied { unlink } for pid=10011 comm="syz.5.1887" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 274.921977][T10030] random: crng reseeded on system resumption [ 274.978256][T10030] Restarting kernel threads ... [ 274.989882][T10030] Done restarting kernel threads. [ 275.207319][T10045] bridge_slave_0: entered allmulticast mode [ 275.236612][T10045] loop2: detected capacity change from 0 to 128 [ 275.263449][T10045] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 275.316684][T10045] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 275.684397][T10044] bridge_slave_0: left allmulticast mode [ 276.348205][ T40] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.399575][ T40] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.507061][ T40] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.526899][ T40] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.670961][ T40] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.726076][ T40] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.856476][ T40] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.925205][ T40] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.998605][T10089] random: crng reseeded on system resumption [ 277.045298][ T5734] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.061261][ T5734] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.076929][T10089] Restarting kernel threads ... [ 277.104981][T10089] Done restarting kernel threads. [ 277.111473][ T5734] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.162255][ T5734] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.252610][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1912'. [ 277.307267][T10052] ================================================================== [ 277.313424][T10101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=10101 comm=syz.2.1912 [ 277.315384][T10052] BUG: KCSAN: data-race in rwsem_down_write_slowpath / rwsem_down_write_slowpath [ 277.337114][T10052] [ 277.339432][T10052] write to 0xffffc900016f7960 of 1 bytes by task 10096 on cpu 1: [ 277.347133][T10052] rwsem_down_write_slowpath+0x3eb/0xab0 [ 277.352781][T10052] down_write+0xab/0xc0 [ 277.356940][T10052] kernfs_add_one+0x5a/0x290 [ 277.361527][T10052] __kernfs_create_file+0x145/0x180 [ 277.366731][T10052] sysfs_add_file_mode_ns+0x132/0x1b0 [ 277.372116][T10052] internal_create_group+0x43e/0x9e0 [ 277.377408][T10052] sysfs_create_groups+0x3f/0xf0 [ 277.382355][T10052] ib_setup_port_attrs+0xee7/0x1480 [ 277.387574][T10052] add_one_compat_dev+0x297/0x390 [ 277.392604][T10052] rdma_dev_init_net+0x1b9/0x240 [ 277.397541][T10052] ops_init+0x22a/0x2e0 [ 277.401702][T10052] setup_net+0x9f/0x230 [ 277.405855][T10052] copy_net_ns+0x31a/0x460 [ 277.410264][T10052] create_new_namespaces+0x1f6/0x420 [ 277.415553][T10052] unshare_nsproxy_namespaces+0x115/0x150 [ 277.421375][T10052] ksys_unshare+0x411/0x760 [ 277.425882][T10052] __x64_sys_unshare+0x1f/0x30 [ 277.430648][T10052] x64_sys_call+0x1cef/0x3020 [ 277.435326][T10052] do_syscall_64+0x136/0x3c0 [ 277.439916][T10052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.445807][T10052] [ 277.448125][T10052] read to 0xffffc900016f7960 of 1 bytes by task 10052 on cpu 0: [ 277.455752][T10052] rwsem_down_write_slowpath+0x462/0xab0 [ 277.461390][T10052] down_write+0xab/0xc0 [ 277.465540][T10052] kernfs_activate+0x50/0x220 [ 277.470204][T10052] kernfs_add_one+0x208/0x290 [ 277.474870][T10052] __kernfs_create_file+0x145/0x180 [ 277.480061][T10052] sysfs_add_file_mode_ns+0x132/0x1b0 [ 277.485428][T10052] internal_create_group+0x43e/0x9e0 [ 277.490797][T10052] sysfs_create_groups+0x3f/0xf0 [ 277.495731][T10052] device_add_attrs+0x64/0x3f0 [ 277.500491][T10052] device_add+0x37a/0x790 [ 277.504825][T10052] netdev_register_kobject+0x108/0x220 [ 277.510311][T10052] register_netdevice+0xaf7/0x11a0 [ 277.515419][T10052] register_netdev+0x3b/0x50 [ 277.520004][T10052] ip6_tnl_init_net+0x22d/0x310 [ 277.524853][T10052] ops_init+0x22a/0x2e0 [ 277.529005][T10052] setup_net+0x9f/0x230 [ 277.533148][T10052] copy_net_ns+0x31a/0x460 [ 277.537553][T10052] create_new_namespaces+0x1f6/0x420 [ 277.543012][T10052] unshare_nsproxy_namespaces+0x115/0x150 [ 277.548731][T10052] ksys_unshare+0x411/0x760 [ 277.553227][T10052] __x64_sys_unshare+0x1f/0x30 [ 277.557983][T10052] x64_sys_call+0x1cef/0x3020 [ 277.562650][T10052] do_syscall_64+0x136/0x3c0 [ 277.567234][T10052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.573121][T10052] [ 277.575431][T10052] value changed: 0x00 -> 0x01 [ 277.580088][T10052] [ 277.582400][T10052] Reported by Kernel Concurrency Sanitizer on: [ 277.588534][T10052] CPU: 0 UID: 0 PID: 10052 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 277.598070][T10052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 277.608118][T10052] ================================================================== [ 277.941756][ T40] bridge_slave_1: left allmulticast mode [ 277.947893][ T40] bridge_slave_1: left promiscuous mode [ 277.953701][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.979326][ T40] bridge_slave_0: left allmulticast mode [ 277.986445][ T40] bridge_slave_0: left promiscuous mode [ 278.001913][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.087247][ T40] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 278.095421][ T40] bridge1 (unregistering): left promiscuous mode [ 278.107372][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.118416][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.128260][ T40] bond0 (unregistering): Released all slaves [ 278.136604][ T40] bond1 (unregistering): Released all slaves [ 278.145960][ T40] bond2 (unregistering): Released all slaves [ 278.238259][ T28] audit: type=1400 audit(1783686683.115:1326): avc: denied { write } for pid=10103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.267597][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 278.300804][ T28] audit: type=1400 audit(1783686683.135:1327): avc: denied { write } for pid=10114 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.324769][ T40] hsr_slave_0: left promiscuous mode [ 278.332008][ T40] hsr_slave_1: left promiscuous mode [ 278.364967][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.377513][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.395914][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.404362][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.424967][ T40] veth1_macvtap: left promiscuous mode [ 278.433512][ T40] veth0_macvtap: left promiscuous mode [ 278.459714][ T40] veth1_vlan: left promiscuous mode [ 278.465020][ T40] veth0_vlan: left promiscuous mode [ 278.467306][ T28] audit: type=1400 audit(1783686683.345:1328): avc: denied { write } for pid=10117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.522609][ T28] audit: type=1400 audit(1783686683.405:1329): avc: denied { write } for pid=10128 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.601278][ T40] team0 (unregistering): Port device team_slave_1 removed [ 278.611591][ T40] team0 (unregistering): Port device team_slave_0 removed [ 278.649682][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 278.741385][ T28] audit: type=1400 audit(1783686683.625:1330): avc: denied { write } for pid=10131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.783444][ T28] audit: type=1400 audit(1783686683.665:1331): avc: denied { write } for pid=10142 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.816756][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 278.888573][ T28] audit: type=1400 audit(1783686683.765:1332): avc: denied { write } for pid=10146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.912985][ T28] audit: type=1400 audit(1783686683.785:1333): avc: denied { write } for pid=10157 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.920690][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 279.002086][ T40] IPVS: stop unused estimator thread 0... [ 279.075137][ T40] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.112926][ T40] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.163010][ T40] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.203016][ T40] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.260246][ T40] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.270260][ T40] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.321921][ T40] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.331851][ T40] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.355811][ T28] audit: type=1400 audit(1783686684.235:1334): avc: denied { write } for pid=10164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.379088][ T28] audit: type=1400 audit(1783686684.235:1335): avc: denied { write } for pid=10175 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.389457][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 279.409970][ T40] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.419800][ T40] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.471481][ T40] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.481377][ T40] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.527758][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 279.554690][ T40] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.564577][ T40] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.611791][ T40] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.621702][ T40] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.669298][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 279.701670][ T40] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.712350][ T40] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.751628][ T40] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.761499][ T40] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.787614][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 279.843867][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.893033][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.905748][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 279.963285][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.002950][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.014535][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 280.076115][ T40] bridge_slave_1: left allmulticast mode [ 280.082129][ T40] bridge_slave_1: left promiscuous mode [ 280.087860][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.096292][ T40] bridge_slave_0: left allmulticast mode [ 280.102304][ T40] bridge_slave_0: left promiscuous mode [ 280.108054][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.121064][ T40] bridge_slave_1: left allmulticast mode [ 280.126862][ T40] bridge_slave_1: left promiscuous mode [ 280.132775][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.141273][ T40] bridge_slave_0: left allmulticast mode [ 280.147056][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.166946][ T40] bridge_slave_1: left allmulticast mode [ 280.172624][ T40] bridge_slave_1: left promiscuous mode [ 280.178325][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.186180][ T40] bridge_slave_0: left allmulticast mode [ 280.192662][ T40] bridge_slave_0: left promiscuous mode [ 280.198415][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.397865][ T40] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 280.407346][ T40] bridge1 (unregistering): left promiscuous mode [ 280.415973][ T40] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 280.424214][ T40] bridge2 (unregistering): left promiscuous mode [ 280.433138][ T40] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 280.441428][ T40] bridge3 (unregistering): left promiscuous mode [ 280.450263][ T40] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 280.458378][ T40] bridge4 (unregistering): left promiscuous mode [ 280.466975][ T40] bond8 (unregistering): (slave bridge5): Releasing backup interface [ 280.475097][ T40] bridge5 (unregistering): left promiscuous mode [ 280.483656][ T40] bond9 (unregistering): (slave bridge6): Releasing backup interface [ 280.491769][ T40] bridge6 (unregistering): left promiscuous mode [ 280.500468][ T40] bond10 (unregistering): (slave bridge7): Releasing backup interface [ 280.508720][ T40] bridge7 (unregistering): left promiscuous mode [ 280.517402][ T40] bond11 (unregistering): (slave bridge8): Releasing backup interface [ 280.525739][ T40] bridge8 (unregistering): left promiscuous mode [ 280.534705][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.544760][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.554283][ T40] bond0 (unregistering): Released all slaves [ 280.561850][ T40] bond1 (unregistering): Released all slaves [ 280.570316][ T40] bond2 (unregistering): Released all slaves [ 280.578946][ T40] bond3 (unregistering): Released all slaves [ 280.587291][ T40] bond4 (unregistering): Released all slaves [ 280.595983][ T40] bond5 (unregistering): Released all slaves [ 280.604597][ T40] bond6 (unregistering): Released all slaves [ 280.613028][ T40] bond7 (unregistering): Released all slaves [ 280.621564][ T40] bond8 (unregistering): Released all slaves [ 280.629959][ T40] bond9 (unregistering): Released all slaves [ 280.638329][ T40] bond10 (unregistering): Released all slaves [ 280.647152][ T40] bond11 (unregistering): Released all slaves [ 280.657282][ T40] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 280.666180][ T40] ip6gretap1 (unregistering): left allmulticast mode [ 280.696455][ T40] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 280.704682][ T40] bridge1 (unregistering): left promiscuous mode [ 280.713207][ T40] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 280.721344][ T40] bridge2 (unregistering): left promiscuous mode [ 280.729668][ T40] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 280.737848][ T40] bridge3 (unregistering): left promiscuous mode [ 280.746487][ T40] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 280.754726][ T40] bridge4 (unregistering): left promiscuous mode [ 280.763434][ T40] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 280.771684][ T40] bridge5 (unregistering): left promiscuous mode [ 280.781283][ T40] bond8 (unregistering): (slave bridge7): Releasing backup interface [ 280.789369][ T40] bridge7 (unregistering): left promiscuous mode [ 280.798049][ T40] bond10 (unregistering): (slave bridge8): Releasing backup interface [ 280.806329][ T40] bridge8 (unregistering): left promiscuous mode [ 280.815145][ T40] bond0 (unregistering): left promiscuous mode [ 280.821326][ T40] bond_slave_0: left promiscuous mode [ 280.826761][ T40] bond_slave_1: left promiscuous mode [ 280.832948][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.843084][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.853073][ T40] bond0 (unregistering): Released all slaves [ 280.860864][ T40] bond1 (unregistering): Released all slaves [ 280.869285][ T40] bond2 (unregistering): Released all slaves [ 280.877695][ T40] bond3 (unregistering): Released all slaves [ 280.886630][ T40] bond4 (unregistering): Released all slaves [ 280.894836][ T40] bond5 (unregistering): Released all slaves [ 280.903555][ T40] bond6 (unregistering): Released all slaves [ 280.911562][ T40] bond7 (unregistering): Released all slaves [ 280.920140][ T40] bond8 (unregistering): Released all slaves [ 280.928037][ T40] bond9 (unregistering): left allmulticast mode [ 280.934573][ T40] bond9 (unregistering): left promiscuous mode [ 280.942208][ T40] team0: Port device macvlan2 removed [ 280.949420][ T40] bond9 (unregistering): Released all slaves [ 280.958178][ T40] bond10 (unregistering): Released all slaves [ 280.983352][ T40] bond7 (unregistering): (slave geneve2): Releasing active interface [ 280.997556][ T40] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 281.009395][ T40] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 281.020536][ T40] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 281.030471][ T40] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 281.040602][ T40] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 281.053323][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.063020][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.072887][ T40] bond0 (unregistering): Released all slaves [ 281.080747][ T40] bond1 (unregistering): Released all slaves [ 281.088750][ T40] bond2 (unregistering): Released all slaves [ 281.097244][ T40] bond3 (unregistering): Released all slaves [ 281.105251][ T40] bond4 (unregistering): Released all slaves [ 281.113751][ T40] bond5 (unregistering): Released all slaves [ 281.122149][ T40] bond6 (unregistering): Released all slaves [ 281.133247][ T40] bond7 (unregistering): Released all slaves [ 281.141827][ T40] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 281.150547][ T40] veth0_to_bond: left promiscuous mode [ 281.156221][ T40] veth0_to_bond: left allmulticast mode [ 281.162814][ T40] bond8 (unregistering): Released all slaves [ 281.202179][ T40] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 281.210471][ T40] bridge2 (unregistering): left promiscuous mode [ 281.219323][ T40] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 281.227511][ T40] bridge3 (unregistering): left promiscuous mode [ 281.235991][ T40] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 281.244100][ T40] bridge4 (unregistering): left promiscuous mode [ 281.252631][ T40] bond7 (unregistering): (slave bridge5): Releasing backup interface [ 281.260799][ T40] bridge5 (unregistering): left promiscuous mode [ 281.268988][ T40] bond9 (unregistering): (slave bridge6): Releasing backup interface [ 281.277132][ T40] bridge6 (unregistering): left promiscuous mode [ 281.286541][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.296406][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.305996][ T40] bond0 (unregistering): Released all slaves [ 281.315679][ T40] bond1 (unregistering): Released all slaves [ 281.324389][ T40] bond2 (unregistering): Released all slaves [ 281.332503][ T40] bond3 (unregistering): Released all slaves [ 281.340908][ T40] bond4 (unregistering): Released all slaves [ 281.349339][ T40] bond5 (unregistering): Released all slaves [ 281.358551][ T40] bond6 (unregistering): Released all slaves [ 281.367346][ T40] bond7 (unregistering): Released all slaves [ 281.375948][ T40] bond8 (unregistering): Released all slaves [ 281.384384][ T40] bond9 (unregistering): Released all slaves [ 281.406999][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 281.438406][ T11] syz2: Port: 1 Link DOWN [ 281.457847][ T40] tipc: Disabling bearer [ 281.463246][ T40] tipc: Left network mode [ 281.471785][ T40] IPVS: stopping master sync thread 8943 ... [ 281.561162][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 281.638857][ T40] hsr_slave_0: left promiscuous mode [ 281.644617][ T40] hsr_slave_1: left promiscuous mode [ 281.650350][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.657827][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.666797][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.674374][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.682069][ T40] batadv0: left promiscuous mode [ 281.688793][ T40] hsr_slave_0: left promiscuous mode [ 281.694637][ T40] hsr_slave_1: left promiscuous mode [ 281.700501][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.707934][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.715602][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.723119][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.732726][ T40] hsr_slave_0: left promiscuous mode [ 281.738459][ T40] hsr_slave_1: left promiscuous mode [ 281.744111][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.751709][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.759186][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.766593][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.775231][ T40] hsr_slave_0: left promiscuous mode [ 281.781054][ T40] hsr_slave_1: left promiscuous mode [ 281.786652][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.794131][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.801790][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.809159][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.825083][ T40] veth1_macvtap: left promiscuous mode [ 281.830676][ T40] veth0_macvtap: left promiscuous mode [ 281.836304][ T40] veth1_vlan: left promiscuous mode [ 281.841573][ T40] veth0_vlan: left promiscuous mode [ 281.847242][ T40] veth1_macvtap: left promiscuous mode [ 281.852783][ T40] veth0_macvtap: left promiscuous mode [ 281.858370][ T40] veth1_vlan: left promiscuous mode [ 281.863932][ T40] veth0_vlan: left promiscuous mode [ 281.869568][ T40] veth1_macvtap: left promiscuous mode [ 281.875053][ T40] veth0_macvtap: left promiscuous mode [ 281.880595][ T40] veth1_vlan: left promiscuous mode [ 281.886330][ T40] veth1_macvtap: left promiscuous mode [ 281.891892][ T40] veth0_macvtap: left promiscuous mode [ 281.897539][ T40] veth1_vlan: left promiscuous mode [ 281.902851][ T40] veth0_vlan: left promiscuous mode [ 282.036385][ T40] team0 (unregistering): Port device team_slave_1 removed [ 282.045667][ T40] team0 (unregistering): Port device team_slave_0 removed [ 282.098435][ T40] team0 (unregistering): Port device team_slave_1 removed [ 282.107831][ T40] team0 (unregistering): Port device team_slave_0 removed [ 282.117429][ T5734] smc: removing ib device syz2 [ 282.168224][ T40] team0 (unregistering): Port device team_slave_1 removed [ 282.177949][ T40] team0 (unregistering): Port device team_slave_0 removed [ 282.233289][ T40] team0 (unregistering): Port device team_slave_1 removed [ 282.242777][ T40] team0 (unregistering): Port device team_slave_0 removed [ 282.274929][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17 [ 282.378490][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 282.468770][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 282.559114][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 282.658371][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21 [ 282.747689][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22 [ 282.848348][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23 [ 282.938311][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24