last executing test programs: 12m21.46736826s ago: executing program 32 (id=1774): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000008c0)={[{@test_dummy_encryption_v1}, {@nojournal_checksum}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x598, &(0x7f0000001900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x0, 0xfd, 0x5aec}, {0x20, 0xf, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x1}]}, 0x10) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000001000)={'syz', 0x1}, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) 12m10.758193524s ago: executing program 33 (id=1797): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000008c0)={[{@test_dummy_encryption_v1}, {@nojournal_checksum}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x598, &(0x7f0000001900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x0, 0xfd, 0x5aec}, {0x20, 0xf, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x1}]}, 0x10) sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000001000)={'syz', 0x1}, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) 10m54.745630124s ago: executing program 34 (id=1977): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000008c0)={[{@test_dummy_encryption_v1}, {@nojournal_checksum}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x598, &(0x7f0000001900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x0, 0xfd, 0x5aec}, {0x20, 0xf, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x1}]}, 0x10) sendmmsg$inet(r6, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000001000)={'syz', 0x1}, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) 7m59.316739943s ago: executing program 35 (id=2246): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7ffd, 0xe) socket$kcm(0xa, 0x1, 0x106) socket$inet6(0x10, 0x2, 0x4) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) 7m40.291985206s ago: executing program 2 (id=2343): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) get_mempolicy(0x0, &(0x7f0000000080), 0x4, &(0x7f0000ffb000/0x4000)=nil, 0xa) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7ffd, 0xe) socket$kcm(0xa, 0x1, 0x106) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) 7m39.190922598s ago: executing program 2 (id=2346): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000b40)={0x54, 0xfbff, 0x1, {0x1, 0x1}, {0x64, 0x7}, @cond=[{0xfffb, 0x2, 0x2, 0x6, 0xffff, 0xfff}, {0x3, 0xffff, 0x1, 0x11, 0x5}]}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000180)) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x20000000080144a, 0x400}, 0x1000, 0x400000, 0x0, 0x5, 0x0, 0x40000e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x23, 0x80805, 0x0) listen(r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x20004041) ioctl$EVIOCGBITSND(r0, 0x80404532, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000d40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@canfd={0xd, {{0x4, 0x1, 0x0, 0x1}, 0x35, 0x5, 0x0, 0x0, "34a468a2a4d81e932075f85cfb285beecfafed9f53f18c6e4be4bf5c788e58c767513d05d3511948098a64a56e67995fd65bc02b1524db8541a79434564424ce"}}}}, 0x0) flock(0xffffffffffffffff, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x0) clock_settime(0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 7m38.802626972s ago: executing program 2 (id=2349): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x103af4, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) ioctl$FIGETBSZ(r0, 0x2, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) memfd_secret(0x80000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) syz_open_dev$vcsn(&(0x7f0000000400), 0x7, 0x20800) semtimedop(0x0, &(0x7f0000000100)=[{0x2, 0x81, 0x1400}, {0x0, 0x7fff, 0x400}, {0x3, 0x86ac, 0x1000}], 0x3, 0x0) socket$inet6(0xa, 0x80000, 0x2) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000040)) add_key(&(0x7f0000000180)='trusted\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000380), 0x0, 0xfffffffffffffffc) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4000010) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000400), &(0x7f0000000440)) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000201, r5, &(0x7f0000000480)='./file0\x00') stat(&(0x7f00000000c0)='./file1\x00', 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) 7m34.754368745s ago: executing program 2 (id=2352): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) get_mempolicy(0x0, &(0x7f0000000080), 0x4, &(0x7f0000ffb000/0x4000)=nil, 0xa) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7ffd, 0xe) socket$kcm(0xa, 0x1, 0x106) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) 7m31.058928385s ago: executing program 2 (id=2357): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) r4 = getpgid(r0) syz_pidfd_open(r4, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x200000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f61141c00000000004603f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x4}, 0x10}, 0x94) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'lblcr\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 7m28.040466537s ago: executing program 2 (id=2364): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) get_mempolicy(0x0, &(0x7f0000000080), 0x4, &(0x7f0000ffb000/0x4000)=nil, 0xa) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7ffd, 0xe) socket$kcm(0xa, 0x1, 0x106) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) 7m11.931628839s ago: executing program 36 (id=2364): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) get_mempolicy(0x0, &(0x7f0000000080), 0x4, &(0x7f0000ffb000/0x4000)=nil, 0xa) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7ffd, 0xe) socket$kcm(0xa, 0x1, 0x106) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) 6m29.56372753s ago: executing program 9 (id=2844): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) sched_getaffinity(r1, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_raw(r4, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, 0x0, 0x4000) 6m28.416294572s ago: executing program 9 (id=2854): r0 = io_uring_setup(0x1822, &(0x7f0000000000)={0x0, 0x627f, 0x0, 0xfffffffc, 0x119}) io_uring_register$IORING_REGISTER_FILES(r0, 0x23, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m27.383821113s ago: executing program 9 (id=2863): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0) getpid() r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f00), 0x0, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 6m26.057549127s ago: executing program 9 (id=2872): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) unlink(&(0x7f0000000100)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) 6m25.243672276s ago: executing program 9 (id=2881): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0xc20, 0x0, 0x200000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffeffffffffffffb, 0xffffffffffffffff, 0x9) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x22, &(0x7f0000000680)}, 0xfffffd00) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4f, 0x50d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8c0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xd}, 0x10410, 0x8, 0x0, 0x0, 0x0, 0x6, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) 6m24.331535386s ago: executing program 9 (id=2892): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc01e4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x4, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r5) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 6m24.078914188s ago: executing program 37 (id=2892): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc01e4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x4, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000100)=r5) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 6m18.666861516s ago: executing program 4 (id=2950): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 6m18.2829475s ago: executing program 4 (id=2953): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000002600)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 6m17.111474373s ago: executing program 4 (id=2960): r0 = syz_open_dev$loop(&(0x7f0000001340), 0x8, 0x2) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) 6m16.983413324s ago: executing program 4 (id=2961): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1aa) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1004001, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x2200892, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='\x00', 0x89901) 6m16.267764401s ago: executing program 4 (id=2966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000"], 0x0, 0x4}, 0x94) symlink(0x0, &(0x7f0000000200)='./file0\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) chmod(&(0x7f0000000100)='./file0\x00', 0x24c) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, 0x0, &(0x7f0000000200)) 6m15.110765453s ago: executing program 4 (id=2971): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) 6m15.074821864s ago: executing program 38 (id=2971): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000200)='q\xa9', 0x0) 5m10.65876082s ago: executing program 1 (id=3511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000008}, 0x0) 5m10.543394852s ago: executing program 1 (id=3512): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f00000000c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 5m10.497287272s ago: executing program 1 (id=3513): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000100)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 5m10.160296006s ago: executing program 1 (id=3516): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000040)=0x8000, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sync_file_range(r0, 0x889, 0x8, 0x2) 5m9.820436889s ago: executing program 1 (id=3519): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="c5d8c0402c0d70984e7ddd4e725489a895a91aadaccd92467f45aa3afdd0600f3773580f0422c35694a882324f7fbca26ba758a2b11999ff71f882d88bf41154ddb211360bcf6b7cea2042e6157e00b7551061052394ddc46c67", 0x5a}], 0x1) 5m9.105824197s ago: executing program 1 (id=3530): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60c43, 0xaa) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x80c8, &(0x7f00000000c0)=ANY=[@ANYBLOB='\"rans']) 5m9.054305978s ago: executing program 39 (id=3530): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60c43, 0xaa) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x80c8, &(0x7f00000000c0)=ANY=[@ANYBLOB='\"rans']) 5m0.894055164s ago: executing program 5 (id=3531): socket$inet6(0xa, 0x2, 0x0) setpriority(0x0, 0x0, 0x2a14b58) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x19) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x9, 0x0, {0x6, 0x1}, {0x47, 0x2}, @cond=[{0x0, 0x20c8, 0x20, 0x4, 0xaf}, {0x7ffe, 0x10, 0x1, 0x7, 0x5, 0x101}]}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000540)=""/240) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x10004000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000000)={0x0, 0x4, 0x5, 0x4001, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="796100000000000000007e00000008000300c70c3d9c1835e4a7d1dcc3100843aa13159b28e1779ee26526", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) 4m58.796551127s ago: executing program 5 (id=3579): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x4, 0xffff, 0x400e0a, 0x7f, "0a4c00765e000080fffffffffffffff200", 0x9, 0x5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) 4m58.647454249s ago: executing program 5 (id=3580): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000440)="b9ff03316844268cb89914f00800", 0x0, 0x23, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m58.51173543s ago: executing program 5 (id=3581): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRES16=0x0], 0x3, 0x248, &(0x7f0000000880)="$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") mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 4m58.320312692s ago: executing program 5 (id=3582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) utime(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000001c0)=0x5) write$cgroup_devices(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e030800d3ff71ef288563"], 0xffdd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m57.55599028s ago: executing program 5 (id=3592): perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 4m57.505574181s ago: executing program 40 (id=3592): perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.404937995s ago: executing program 3 (id=7433): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7) 2.227366017s ago: executing program 3 (id=7435): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x2) close(r1) epoll_create1(0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000001200), 0xa, 0x0) socket$key(0xf, 0x3, 0x2) rt_sigtimedwait(0x0, &(0x7f00000001c0), &(0x7f00000002c0), 0x0) fallocate(r0, 0x20, 0x4000, 0x3000000) 1.93338763s ago: executing program 3 (id=7439): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 1.814309141s ago: executing program 3 (id=7440): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) 1.813777921s ago: executing program 3 (id=7441): perf_event_open(0x0, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x100c, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000900)=r3, 0x4) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100), 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) close(r4) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) write$cgroup_devices(r4, 0x0, 0xffdd) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28d59, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x2, @perf_bp={0x0}, 0xa810, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x2e}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) 1.193242808s ago: executing program 0 (id=7454): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe2(&(0x7f0000000040), 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1.099081049s ago: executing program 7 (id=7457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.085643839s ago: executing program 7 (id=7458): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x16, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x1, 0x1}}, {@generic={0x806, "d9fa2a56"}}}, 0x0) 1.019272479s ago: executing program 7 (id=7460): r0 = epoll_create1(0x80000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002) write(r1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x2000000f}) ppoll(&(0x7f00000000c0)=[{r1, 0x8004}, {r0}], 0x2, 0x0, 0x0, 0x0) 1.019165179s ago: executing program 0 (id=7461): r0 = syz_open_dev$loop(&(0x7f0000000380), 0x5c9, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x240080c4) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 996.55643ms ago: executing program 0 (id=7462): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) mprotect(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 984.75159ms ago: executing program 7 (id=7463): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, 0x0, 0x0) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 957.53104ms ago: executing program 7 (id=7464): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x3e, @empty, 0x6}, 0x1c) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 866.416491ms ago: executing program 3 (id=7467): fchdir(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x4ce, 0x3, 0x9dff, 0xf, "000300eb00cbe600"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x5, 0x0, "f7ffffff00"}) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x7cc74eb8cea42275, 0x8031, 0xffffffffffffffff, 0x8000000) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x2) 649.541714ms ago: executing program 6 (id=7470): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000001140)=0x2, 0x4) 626.499094ms ago: executing program 6 (id=7471): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r0, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0x6, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x0, 0x9, 0x1}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc050}, 0x0) 591.101774ms ago: executing program 6 (id=7472): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x14}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dax_never}, {@prjquota}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") 590.550254ms ago: executing program 8 (id=7473): mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2277024, 0x0) 563.994235ms ago: executing program 8 (id=7474): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, 0x0, 0x0) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 563.433344ms ago: executing program 8 (id=7475): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x170bd26, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x22, {@ip4=@multicast2, 0x10dba}}}]}, 0x38}}, 0x0) 507.472695ms ago: executing program 8 (id=7476): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r0, &(0x7f00000002c0)={0x107f, 0x2d, 0x8000000000001, 0xa, 0x9, 0x2c}, 0x47) 507.236645ms ago: executing program 8 (id=7477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x7}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r0, 0x58, &(0x7f0000000700)}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210010, &(0x7f00000002c0), 0xfa, 0x59d, &(0x7f0000000d00)="$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") brk(0x3) mount(0x0, 0x0, 0x0, 0x2390024, 0x0) 506.716655ms ago: executing program 8 (id=7478): perf_event_open(0x0, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x100c, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000900)=r3, 0x4) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100), 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) close(r4) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) write$cgroup_devices(r4, 0x0, 0xffdd) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28d59, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x2, @perf_bp={0x0}, 0xa810, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x2e}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) 345.642757ms ago: executing program 7 (id=7479): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 78.977329ms ago: executing program 0 (id=7480): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_x_sec_ctx={0x1, 0x18, 0x3, 0xd8}]}, 0x68}, 0x1, 0x7}, 0x0) 19.14576ms ago: executing program 0 (id=7481): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)}, {&(0x7f0000000280)="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", 0x16d}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x3}, 0x200400c4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1d, 0x2, 0x1000000, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x64b}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x4, 0x3}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) 18.90955ms ago: executing program 6 (id=7482): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010a29bd7000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057000902000004006cde46003300d0380a0008021100ec000802110000008b293db9a42218000f011601010072060303030303032d1a0003040400000000000000cb808000100000000100"], 0x74}, 0x1, 0x0, 0x0, 0x44010}, 0x80) 18.81077ms ago: executing program 6 (id=7483): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001200)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0xfff3, 0xa}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x44080) 4.054161ms ago: executing program 6 (id=7484): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aHQXgsW8soIrX8gqTiSdVgl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDWku7+mGtNIr8+cDTvDdvZt73q5F23oPdDeC5NZT9SCOOR8SVJKJQ359GRG+11h9RqR23tDg/9u3i/FgSy8v/+SqJJCKeLM6PNa6V1LdH6o3+iPj470n88qX1407Pzk2OlsulqXr79Mz1W6enZ+f+NHF99FrpWunGmXN/GTk7cm74/EjHcv3u84v3v/ndP7+ofP/2D3e/fvXNJC7GQL2vOY961js2FEMrv5Nm3REx2oHr7wdd9Xya80y6Nzkp3eWgAABoK22aw/06CtEVq5O3QnzwSa7BAQAAAB2x3BWxDAAAABxwifU/AAAAHHCN9wE8WZwfa5R835Gwtx5fiojBWv5L9VLr6Y5KddsfPRFx+EkSzR9rTWqn7dhQRDz67Px7WYkWn0PebZWFiPhNq/ufVPMfrH8Sem3+aUQMd2D8oTXtn1P+Fzswft75A/B8enCp9iBb//xLV+Y/0eL5193i2fUs8n7+NeZ/S+vmf6v5d7WZ//17i2Pceev12+36svz/ev8f7zZKNn623VFS2/B4IeK33a3yT1byT9rkf2WLYxR+vF1q15d3/stvRJyM1vk3JBt/P9Hp8Ylyabj2s+UYCx+NvNNu/Lzzz+7/4Tb5b3D/+7N9t566Uvsv9fnf5cv32vVtnn/6ZW/y32qtt77nhdGZmakzEb3Jv9bvP7txvo1jGtfI8j/1+43//1v9/WevCZX630aW+UJ9m7VfXDPm3+7eeX+j/LO1X573/+r2739138tbHOMPH75yql1f8/o3K9n4j5LaWhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIgkLUZEUq2nabEYcSQifhWH0/LN6Zk/jt/8/42rWV/EYPSk4xPl0nBEFGrtJGufqdZX22fXtP8cEcci4rXCoWq7OHazfDXv5AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhxJCIGIkmLEZFGxFIhTYvFvKMCAAAAOm4w7wAAAACAXWf9DwAAAAef9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC77NiJBw+TiKhcOFQtmd56X0+ukQG7Lc07ACA3XXkHAOSmO+8AgNxsc41vugAHULJJf3/bnr6OxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/nXy+IOHSURULhyqlkxvva+n5Rkn9jA6YDeleQcA5KZro87uvYsD2HvP/C9+tLNxAHuv9RofeJ4km/T3rx5Tebqnb9diAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD/GaiWJC1GRFqtp2mxGHE0IgajJxmfKJeGI+IXEfFpoacva/flHTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNz07NzlaLpemnqWS7Ox0FRWVpkqyP8KoVfJ+ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/Ts3OTo+VyaWo670gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvE3Pzk2OlsulqS1U7m3n4KZK3jkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCfnwIAAP//198NMw==") socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000680)=@urb_type_iso={0x0, {0xe, 0x1}, 0xffff, 0x5, &(0x7f00000003c0)="40c9b6d4388e55332d6891ddc6097fdffef0f3377274affa7d3f65556eeb0c0624d8f218a4b187ce02773cbd2d917e85b2c1d2e940f81a61d01d7ed62ee83403337bf0ee16cf4c658d393a632aa40428f9f6b9914e3d50a0002ff7b997495a31ec01484440033ebe4b40c5a280f0367b87f648accffb144c166d32b32087da850d8f44649effa42fb8abe1ffbf703abc4025ff6486aec6377c1701", 0x9b, 0x8, 0x5, 0x46, 0x0, 0x0, &(0x7f0000000580)="0bf3f3634cda3d19cdcb272131c69c1fd4a2950cbd7f48549eef2a1eab3e9f16c24f550e8b1d8f278c2bbf6e64f0a91e463d5ee6aa705961178f2baafd207ddf99e6fa0209962832432eb744fefb8ac82f2ec8db009b8f0a6941513d2b7bafa182b8c3fb5a404ec58363a6e14ff9b03c2124813479d2284e7498c7ed251eb0d3cae13260b262e301b0070925a63e73f774c919f317c86d485f3a28874ea19a511f89c7215585821b10c950fc98fd90fa3a0c7b953e3ec6d7f176cdb1f12e4fae91c88811be391df7a721adbd13feb6446be092f3c30c39d1943be1e4ec6b49f3092c8355fdf9f1310f95fcf0f7a7519088495e7128007c", [{0x8, 0x6, 0x1}, {0x54, 0x5e00000, 0x6}, {0xfffffffe, 0x800, 0xa}, {0xd, 0x34c1bafb, 0x9}, {0x1ff, 0x7fffffff, 0x6}, {0x0, 0xffff48f3, 0x7}, {0x6, 0x7, 0x932}, {0x7, 0x5, 0x3}, {0xb, 0x1, 0x100}, {0x2, 0xc5, 0x8}, {0x8, 0x1, 0x4}, {0x10, 0x8, 0xffff4c37}, {0x1, 0xfffeffff, 0x10000}, {0x6, 0x4, 0x4189}, {0x3, 0x9, 0x5}, {0x2, 0xcf25, 0xffff7442}, {0x100, 0x9, 0x1000000}, {0xffffffff, 0x10000, 0x8001}, {0x1, 0x5, 0x4}, {0x400, 0x4, 0x3}, {0x8, 0x7f, 0x17c5ad3c}, {0xc1cb, 0x9b76, 0x5}, {0x2, 0x5, 0x7ff}, {0x6, 0x8000, 0x7fffffff}, {0x9, 0x55, 0x5}, {0x7f, 0x9, 0x4037}, {0x5, 0xb1, 0x3}, {0x7f, 0x8, 0x4}, {0x9, 0x8}, {0x9, 0x7fffffff, 0xfffffffe}, {0x8000, 0x2, 0x4}, {0x8, 0xfffffffe, 0x4}, {0x6, 0x0, 0x200}, {0x4, 0x2, 0x3f29}, {0x10001, 0xd, 0x5}, {0x1ff, 0x5, 0x24}, {0x3, 0xffffffff, 0x8}, {0x1, 0x6, 0x1}, {0x800000, 0x3, 0x210d}, {0x1, 0x6, 0xe250}, {0x9, 0x9, 0x8}, {0x6, 0xffffff29, 0xd523}, {0xc7, 0x81, 0x1}, {0x4, 0xb2, 0x5}, {0xfffffffb, 0x6, 0x5}, {0x9}, {0x5, 0x2}, {0x0, 0x8, 0x8}, {0x61, 0x12}, {0x4, 0x4, 0x9}, {0x3, 0x9, 0xd7c0}, {0x101, 0x3dd}, {0x7, 0x9, 0x2}, {0x203, 0x7, 0xfff}, {0x9, 0x0, 0xfffffffc}, {0xf, 0x0, 0x7}, {0xb36, 0x4, 0x9}, {0x0, 0x6, 0x44c0}, {0x0, 0xf5, 0x6}, {0x7ffe, 0xe, 0x17042048}, {0x3, 0x5, 0x1}, {0x10001, 0xaf52, 0x6}, {0x3ff, 0xe, 0x4}, {0x5, 0x1c, 0x78}, {0xfffffff8, 0x8, 0xd91}, {0x13b46736, 0x5, 0x3}, {0x7, 0x22a4, 0x7}, {0xfff, 0x5f, 0xc}, {0x1, 0xe68, 0xfffffff7}, {0xffffffff, 0x8, 0x9}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) fallocate(r0, 0x1, 0xbf5, 0x2000402) r6 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x101140, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000080)=0x4) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 0s ago: executing program 0 (id=7485): r0 = eventfd(0x8000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) kernel console output (not intermixed with test programs): d=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23806 comm="syz.7.5319" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4c59cdd9 code=0x7ffc0000 [ 977.852295][T23769] truncated [ 977.870253][T23769] loop8: p34 size 515840 extends beyond EOD, truncated [ 977.878886][T23769] loop8: p36 size 515840 extends beyond EOD, truncated [ 977.888936][T23769] loop8: p38 size 515840 extends beyond EOD, truncated [ 977.897146][ T28] audit: type=1326 audit(2000000173.646:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23806 comm="syz.7.5319" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f5b4c59cdd9 code=0x7ffc0000 [ 977.897276][T23769] loop8: p40 size 515840 extends beyond EOD, truncated [ 977.924856][ T28] audit: type=1326 audit(2000000173.646:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23806 comm="syz.7.5319" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b4c59cdd9 code=0x7ffc0000 [ 977.931214][T23769] loop8: p42 size 515840 extends beyond EOD, truncated [ 977.973899][T23769] loop8: p44 size 515840 extends beyond EOD, truncated [ 977.984700][T23769] loop8: p46 size 515840 extends beyond EOD, truncated [ 977.995507][T23769] loop8: p48 size 515840 extends beyond EOD, truncated [ 978.445327][T23769] loop8: p50 size 515840 extends beyond EOD, truncated [ 978.481914][T23769] loop8: p52 size 515840 extends beyond EOD, truncated [ 978.501385][T23769] loop8: p54 size 515840 extends beyond EOD, truncated [ 978.528289][T23769] loop8: p56 size 515840 extends beyond EOD, truncated [ 978.561895][T23769] loop8: p58 size 515840 extends beyond EOD, truncated [ 978.585755][T23769] loop8: p60 size 515840 extends beyond EOD, truncated [ 978.613382][T23769] loop8: p62 size 515840 extends beyond EOD, truncated [ 978.632808][T23769] loop8: p64 size 515840 extends beyond EOD, truncated [ 978.653333][T23854] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5335'. [ 978.661446][T23769] loop8: p66 size 515840 extends beyond EOD, truncated [ 978.698708][T23769] loop8: p68 size 515840 extends beyond EOD, truncated [ 978.722552][T23769] loop8: p70 size 515840 extends beyond EOD, truncated [ 978.735010][T23769] loop8: p72 size 515840 extends beyond EOD, truncated [ 978.744090][T23769] loop8: p74 size 515840 extends beyond EOD, truncated [ 978.753527][T23769] loop8: p76 size 515840 extends beyond EOD, truncated [ 978.762145][T23769] loop8: p78 size 515840 extends beyond EOD, truncated [ 978.788825][T23769] loop8: p80 size 515840 extends beyond EOD, truncated [ 978.808744][T23769] loop8: p80 could not be added: -ENOMEM [ 978.822240][T23769] loop8: p82 size 515840 extends beyond EOD, truncated [ 978.842449][T23769] loop8: p84 size 515840 extends beyond EOD, truncated [ 978.858363][T23769] loop8: p86 size 515840 extends beyond EOD, truncated [ 978.883426][T23769] loop8: p88 size 515840 extends beyond EOD, truncated [ 978.899870][T23769] loop8: p90 size 515840 extends beyond EOD, truncated [ 978.922278][T23769] loop8: p92 size 515840 extends beyond EOD, truncated [ 978.941646][T23769] loop8: p94 size 515840 extends beyond EOD, truncated [ 978.961454][T23769] loop8: p96 size 515840 extends beyond EOD, truncated [ 978.982273][T23769] loop8: p98 size 515840 extends beyond EOD, truncated [ 979.002324][T23769] loop8: p100 size 515840 extends beyond EOD, truncated [ 979.023844][T23769] loop8: p102 size 515840 extends beyond EOD, truncated [ 979.042297][T23769] loop8: p104 size 515840 extends beyond EOD, truncated [ 979.060730][T23769] loop8: p106 size 515840 extends beyond EOD, truncated [ 979.081336][T23769] loop8: p108 size 515840 extends beyond EOD, truncated [ 979.101173][T23769] loop8: p110 size 515840 extends beyond EOD, truncated [ 979.120511][T23769] loop8: p112 size 515840 extends beyond EOD, truncated [ 979.140990][T23769] loop8: p114 size 515840 extends beyond EOD, truncated [ 979.164243][T23769] loop8: p116 size 515840 extends beyond EOD, truncated [ 979.184523][T23769] loop8: p118 size 515840 extends beyond EOD, truncated [ 979.205639][T23769] loop8: p120 size 515840 extends beyond EOD, truncated [ 979.219008][T23769] loop8: p122 size 515840 extends beyond EOD, truncated [ 979.240273][T23769] loop8: p124 size 515840 extends beyond EOD, truncated [ 979.266297][T23769] loop8: p126 size 515840 extends beyond EOD, truncated [ 979.285783][T23769] loop8: p128 size 515840 extends beyond EOD, truncated [ 979.305243][T23769] loop8: p130 size 515840 extends beyond EOD, truncated [ 979.326240][T23769] loop8: p132 size 515840 extends beyond EOD, truncated [ 979.346050][T23769] loop8: p134 size 515840 extends beyond EOD, truncated [ 979.366888][T23769] loop8: p136 size 515840 extends beyond EOD, truncated [ 979.396318][T23769] loop8: p138 size 515840 extends beyond EOD, truncated [ 979.431061][T23769] loop8: p140 size 515840 extends beyond EOD, truncated [ 979.454722][T23769] loop8: p142 size 515840 extends beyond EOD, truncated [ 979.482693][T23769] loop8: p144 size 515840 extends beyond EOD, truncated [ 979.511485][T23769] loop8: p146 size 515840 extends beyond EOD, truncated [ 979.529281][T23769] loop8: p148 size 515840 extends beyond EOD, truncated [ 979.547907][T23769] loop8: p150 size 515840 extends beyond EOD, truncated [ 979.565293][T23769] loop8: p152 size 515840 extends beyond EOD, truncated [ 979.591327][T23769] loop8: p154 size 515840 extends beyond EOD, truncated [ 979.608976][T23769] loop8: p156 size 515840 extends beyond EOD, truncated [ 979.627894][T23769] loop8: p158 size 515840 extends beyond EOD, truncated [ 979.657529][T23769] loop8: p160 size 515840 extends beyond EOD, truncated [ 979.683302][T23769] loop8: p162 size 515840 extends beyond EOD, truncated [ 979.803383][T23769] loop8: p164 size 515840 extends beyond EOD, truncated [ 979.820144][T23769] loop8: p166 size 515840 extends beyond EOD, truncated [ 979.852561][T23769] loop8: p168 size 515840 extends beyond EOD, truncated [ 979.876299][T23769] loop8: p170 size 515840 extends beyond EOD, truncated [ 979.976382][T23769] loop8: p172 size 515840 extends beyond EOD, truncated [ 980.021339][T23889] syzkaller0: entered promiscuous mode [ 980.059556][T23769] loop8: p174 size 515840 extends beyond EOD, truncated [ 980.093795][T23889] syzkaller0: entered allmulticast mode [ 980.140645][T23769] loop8: p176 size 515840 extends beyond EOD, truncated [ 980.229024][T23769] loop8: p178 size 515840 extends beyond EOD, truncated [ 980.311263][T23769] loop8: p180 size 515840 extends beyond EOD, truncated [ 980.366990][T23769] loop8: p182 size 515840 extends beyond EOD, truncated [ 980.386978][T23769] loop8: p184 size 515840 extends beyond EOD, truncated [ 980.417688][T23769] loop8: p186 size 515840 extends beyond EOD, truncated [ 980.433837][T23769] loop8: p188 size 515840 extends beyond EOD, truncated [ 980.450004][T23769] loop8: p190 size 515840 extends beyond EOD, truncated [ 980.468627][T23769] loop8: p192 size 515840 extends beyond EOD, truncated [ 980.493561][T23769] loop8: p194 size 515840 extends beyond EOD, truncated [ 980.511789][T23769] loop8: p196 size 515840 extends beyond EOD, truncated [ 980.528796][T23769] loop8: p198 size 515840 extends beyond EOD, truncated [ 980.554371][T23769] loop8: p200 size 515840 extends beyond EOD, truncated [ 980.574624][T23769] loop8: p202 size 515840 extends beyond EOD, truncated [ 980.621542][T23769] loop8: p204 size 515840 extends beyond EOD, truncated [ 980.648229][T23769] loop8: p206 size 515840 extends beyond EOD, truncated [ 980.693203][T23769] loop8: p208 size 515840 extends beyond EOD, truncated [ 980.718343][T23769] loop8: p210 size 515840 extends beyond EOD, truncated [ 980.738224][T23769] loop8: p212 size 515840 extends beyond EOD, truncated [ 980.762406][T23769] loop8: p214 size 515840 extends beyond EOD, truncated [ 980.785077][T23769] loop8: p216 size 515840 extends beyond EOD, truncated [ 980.805835][T23769] loop8: p218 size 515840 extends beyond EOD, truncated [ 980.826573][T23769] loop8: p220 size 515840 extends beyond EOD, truncated [ 980.847989][T23769] loop8: p222 size 515840 extends beyond EOD, truncated [ 980.872167][T23769] loop8: p224 size 515840 extends beyond EOD, truncated [ 980.893052][T23924] syzkaller0: entered promiscuous mode [ 980.900713][T23769] loop8: p226 size 515840 extends beyond EOD, truncated [ 980.918873][T23924] syzkaller0: entered allmulticast mode [ 980.926433][T23769] loop8: p228 size 515840 extends beyond EOD, truncated [ 980.939890][T23769] loop8: p230 size 515840 extends beyond EOD, truncated [ 980.958123][T23769] loop8: p232 size 515840 extends beyond EOD, truncated [ 980.971163][T23769] loop8: p234 size 515840 extends beyond EOD, truncated [ 980.989064][T23769] loop8: p236 size 515840 extends beyond EOD, truncated [ 981.015431][T23769] loop8: p238 size 515840 extends beyond EOD, truncated [ 981.029441][T23769] loop8: p240 size 515840 extends beyond EOD, truncated [ 981.042250][T23769] loop8: p242 size 515840 extends beyond EOD, truncated [ 981.055312][T23769] loop8: p244 size 515840 extends beyond EOD, truncated [ 981.068680][T23769] loop8: p246 size 515840 extends beyond EOD, truncated [ 981.094408][T23769] loop8: p248 size 515840 extends beyond EOD, truncated [ 981.107737][T23929] xt_hashlimit: size too large, truncated to 1048576 [ 981.116484][T23769] loop8: p250 size 515840 extends beyond EOD, truncated [ 981.137055][T23769] loop8: p252 size 515840 extends beyond EOD, truncated [ 981.156962][T23769] loop8: p254 size 515840 extends beyond EOD, truncated [ 981.586330][T23144] udevd[23144]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 981.600610][T23185] udevd[23185]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 981.612007][T23607] udevd[23607]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 981.704055][T23185] udevd[23185]: inotify_add_watch(7, /dev/loop8p15, 10) failed: No such file or directory [ 981.714795][T23144] udevd[23144]: inotify_add_watch(7, /dev/loop8p16, 10) failed: No such file or directory [ 981.725631][T23607] udevd[23607]: inotify_add_watch(7, /dev/loop8p14, 10) failed: No such file or directory [ 981.791049][T23940] udevd[23940]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 981.798782][T23941] udevd[23941]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 981.820732][T23942] udevd[23942]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 981.831219][T23943] udevd[23943]: inotify_add_watch(7, /dev/loop8p8, 10) failed: No such file or directory [ 981.943906][T23957] xt_hashlimit: size too large, truncated to 1048576 [ 982.091876][T23962] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.099211][T23962] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.106597][T23962] bridge0: entered allmulticast mode [ 982.114663][T23962] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 982.138617][T23962] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5375'. [ 982.854098][T23966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.943589][T23966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.435859][T23977] loop8: detected capacity change from 0 to 4096 [ 983.454677][T23977] EXT4-fs: inline encryption not supported [ 983.471604][T23977] EXT4-fs: test_dummy_encryption option not supported [ 985.063021][T23993] netlink: 104 bytes leftover after parsing attributes in process `syz.7.5386'. [ 985.152013][T23991] syzkaller0: entered promiscuous mode [ 985.190318][T23991] syzkaller0: entered allmulticast mode [ 985.513891][T24004] syzkaller0: entered promiscuous mode [ 985.547596][T24004] syzkaller0: entered allmulticast mode [ 986.034379][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 986.034411][ T28] audit: type=1326 audit(2000000181.881:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24011 comm="syz.3.5392" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64a71cdd9 code=0x7ffc0000 [ 986.565570][ T28] audit: type=1326 audit(2000000181.881:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24011 comm="syz.3.5392" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64a71cdd9 code=0x7ffc0000 [ 986.700602][ T28] audit: type=1326 audit(2000000181.891:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24011 comm="syz.3.5392" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe64a71cdd9 code=0x7ffc0000 [ 987.104898][ T28] audit: type=1326 audit(2000000181.891:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24011 comm="syz.3.5392" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64a71cdd9 code=0x7ffc0000 [ 987.506895][ T28] audit: type=1326 audit(2000000181.891:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24011 comm="syz.3.5392" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64a71cdd9 code=0x7ffc0000 [ 988.649695][T24054] syzkaller0: entered promiscuous mode [ 988.682245][T24054] syzkaller0: entered allmulticast mode [ 988.815574][T24062] loop8: detected capacity change from 0 to 256 [ 989.206897][T24075] veth0_vlan: left promiscuous mode [ 989.214267][T24075] veth0_vlan: entered promiscuous mode [ 989.245186][T24067] veth0_vlan: entered allmulticast mode [ 989.444961][T24080] syzkaller0: entered promiscuous mode [ 989.450851][T24080] syzkaller0: entered allmulticast mode [ 989.635438][T24091] syzkaller0: entered promiscuous mode [ 989.641262][T24091] syzkaller0: entered allmulticast mode [ 989.955183][T24102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.038844][T24102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.607518][T24132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.930745][T24137] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 990.957387][T24132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.399473][T24151] SELinux: failed to load policy [ 991.481712][T24156] syzkaller0: entered promiscuous mode [ 991.552888][T24156] syzkaller0: entered allmulticast mode [ 991.566654][T24163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.586651][T24163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.628470][T24166] syzkaller0: entered promiscuous mode [ 991.634320][T24166] syzkaller0: entered allmulticast mode [ 991.786460][T24176] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5449'. [ 991.797703][T24176] bridge_slave_0: left allmulticast mode [ 991.803763][T24176] bridge_slave_0: left promiscuous mode [ 991.811074][T24176] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.340426][T24200] syzkaller0: entered promiscuous mode [ 993.433810][T24200] syzkaller0: entered allmulticast mode [ 993.459879][T24205] loop8: detected capacity change from 0 to 1024 [ 993.473534][ T28] audit: type=1400 audit(2000000188.853:1420): avc: denied { create } for pid=24209 comm="syz.0.5459" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 993.551518][T24204] syzkaller0: entered promiscuous mode [ 993.869981][T24204] syzkaller0: entered allmulticast mode [ 994.038147][T24205] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 994.162842][T22402] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.192278][T24226] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5467'. [ 994.215811][T24229] loop8: detected capacity change from 0 to 512 [ 994.262415][T24229] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 994.287933][T24229] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 994.287999][ T28] audit: type=1400 audit(2000000189.611:1421): avc: denied { sys_module } for pid=24232 comm="syz.6.5462" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 994.326093][T22402] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.345017][ T28] audit: type=1400 audit(2000000189.630:1422): avc: denied { write } for pid=24228 comm="syz.8.5466" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 994.561612][T24247] syzkaller0: entered promiscuous mode [ 994.581653][T24247] syzkaller0: entered allmulticast mode [ 994.814282][T24253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.849613][T24253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.979490][T24255] syzkaller0: entered promiscuous mode [ 994.986351][T24255] syzkaller0: entered allmulticast mode [ 995.135008][ T28] audit: type=1400 audit(2000000190.407:1423): avc: denied { create } for pid=24262 comm="syz.6.5477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 995.200576][T24266] syzkaller0: entered promiscuous mode [ 995.206197][T24266] syzkaller0: entered allmulticast mode [ 995.298618][T24277] syzkaller0: entered promiscuous mode [ 995.304988][T24277] syzkaller0: entered allmulticast mode [ 995.416792][ T28] audit: type=1400 audit(2000000190.669:1424): avc: denied { map } for pid=24286 comm="syz.0.5487" path="/proc/1360/task/1361/mountinfo" dev="proc" ino=67217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 995.667450][T24293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.733270][T24293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.497254][T24313] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 996.912756][ T28] audit: type=1400 audit(2000000191.632:1425): avc: denied { ioctl } for pid=24307 comm="syz.3.5496" path="socket:[67682]" dev="sockfs" ino=67682 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 997.197830][T24315] syzkaller0: entered promiscuous mode [ 997.207387][T24323] loop7: detected capacity change from 0 to 256 [ 997.237088][T24315] syzkaller0: entered allmulticast mode [ 997.319979][T24328] syzkaller0: entered promiscuous mode [ 997.330298][T24328] syzkaller0: entered allmulticast mode [ 997.496815][T24351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.509259][T24351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.387113][T24371] loop7: detected capacity change from 0 to 512 [ 998.396136][T24371] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 998.406426][T24371] EXT4-fs (loop7): bad geometry: first data block is 0 with a 1k block and cluster size [ 998.468288][T24373] syzkaller0: entered promiscuous mode [ 998.474200][T24373] syzkaller0: entered allmulticast mode [ 998.644917][T24381] syzkaller0: entered promiscuous mode [ 998.664097][T24381] syzkaller0: entered allmulticast mode [ 998.821612][T24395] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 999.143570][T24407] SELinux: failed to load policy [ 999.661779][T24417] syzkaller0: entered promiscuous mode [ 999.693860][T24417] syzkaller0: entered allmulticast mode [ 1000.378814][T24426] syzkaller0: entered promiscuous mode [ 1000.431223][T24426] syzkaller0: entered allmulticast mode [ 1000.674675][ T28] audit: type=1400 audit(2000000195.591:1426): avc: denied { create } for pid=24431 comm="syz.0.5539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1000.710876][ T28] audit: type=1400 audit(2000000195.610:1427): avc: denied { write } for pid=24431 comm="syz.0.5539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1000.735879][T24432] xt_hashlimit: size too large, truncated to 1048576 [ 1001.003711][T24448] syzkaller0: entered promiscuous mode [ 1001.025410][T24448] syzkaller0: entered allmulticast mode [ 1001.211030][T24458] syzkaller0: entered promiscuous mode [ 1001.226394][T24458] syzkaller0: entered allmulticast mode [ 1003.857233][T24491] syzkaller0: entered promiscuous mode [ 1003.862969][T24491] syzkaller0: entered allmulticast mode [ 1005.201855][T24511] syzkaller0: entered promiscuous mode [ 1005.213348][T24511] syzkaller0: entered allmulticast mode [ 1006.253508][ T28] audit: type=1326 audit(2000000200.813:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24532 comm="syz.0.5571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100134cdd9 code=0x7ffc0000 [ 1006.360815][ T28] audit: type=1326 audit(2000000200.841:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24532 comm="syz.0.5571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100134cdd9 code=0x7ffc0000 [ 1006.546860][ T28] audit: type=1326 audit(2000000200.850:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24532 comm="syz.0.5571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100134cdd9 code=0x7ffc0000 [ 1006.577111][ T28] audit: type=1326 audit(2000000200.850:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24532 comm="syz.0.5571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f100134cdd9 code=0x7ffc0000 [ 1006.868538][ T28] audit: type=1326 audit(2000000200.850:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24532 comm="syz.0.5571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100134cdd9 code=0x7ffc0000 [ 1007.099418][T24545] loop7: detected capacity change from 0 to 4096 [ 1007.109417][ T28] audit: type=1326 audit(2000000200.850:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24532 comm="syz.0.5571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100134cdd9 code=0x7ffc0000 [ 1007.146750][T24545] EXT4-fs: inline encryption not supported [ 1007.158662][T24545] EXT4-fs: test_dummy_encryption option not supported [ 1007.196893][ T28] audit: type=1326 audit(2000000200.850:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24532 comm="syz.0.5571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100134cdd9 code=0x7ffc0000 [ 1007.212982][T24549] syzkaller0: entered promiscuous mode [ 1007.224288][ T28] audit: type=1326 audit(2000000200.850:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24532 comm="syz.0.5571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100134cdd9 code=0x7ffc0000 [ 1007.358591][ T28] audit: type=1326 audit(2000000200.850:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24532 comm="syz.0.5571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f100134cdd9 code=0x7ffc0000 [ 1007.384613][ T28] audit: type=1326 audit(2000000200.850:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24532 comm="syz.0.5571" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100134cdd9 code=0x7ffc0000 [ 1007.386240][T24549] syzkaller0: entered allmulticast mode [ 1007.505595][T24558] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1007.960857][T24564] loop7: detected capacity change from 0 to 512 [ 1007.969234][T24564] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1007.997179][T24564] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.5581: iget: bad i_size value: 38620345925642 [ 1008.010633][T24564] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1008.010820][T24564] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.5581: couldn't read orphan inode 15 (err -117) [ 1008.020019][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1008.020043][ C1] EXT4-fs (loop7): initial error at time 2000000202: ext4_orphan_get:1397: inode 15 [ 1008.020093][ C1] EXT4-fs (loop7): last error at time 2000000202: ext4_orphan_get:1397: inode 15 [ 1008.061583][T24564] loop7: lost filesystem error report for type 5 error -117 [ 1008.062310][T24564] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1008.336449][T24564] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.5581: bg 0: block 5: invalid block bitmap [ 1008.349263][T24564] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1008.362134][T24564] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1008.362134][T24564] [ 1008.371820][T24564] EXT4-fs (loop7): Total free blocks count 0 [ 1008.378206][T24564] EXT4-fs (loop7): Free/Dirty block details [ 1008.384290][T24564] EXT4-fs (loop7): free_blocks=0 [ 1008.389458][T24564] EXT4-fs (loop7): dirty_blocks=7556 [ 1008.395041][T24564] EXT4-fs (loop7): Block reservation details [ 1008.401316][T24564] EXT4-fs (loop7): i_reserved_data_blocks=7556 [ 1009.597439][T15412] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 1009.647844][T22805] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1010.470344][T24606] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1010.706906][T24610] loop7: detected capacity change from 0 to 256 [ 1010.968596][T24613] syzkaller0: entered promiscuous mode [ 1010.987389][T24618] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5597'. [ 1011.002591][T24613] syzkaller0: entered allmulticast mode [ 1011.792070][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1011.792123][ T28] audit: type=1400 audit(2000000205.988:1444): avc: denied { bind } for pid=24634 comm="syz.8.5602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1011.826660][ T28] audit: type=1400 audit(2000000205.988:1445): avc: denied { setopt } for pid=24634 comm="syz.8.5602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1012.003911][T24646] loop7: detected capacity change from 0 to 512 [ 1013.097585][T24664] netlink: 'syz.3.5611': attribute type 3 has an invalid length. [ 1013.496981][T24675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.527442][ T28] audit: type=1400 audit(2000000207.607:1446): avc: denied { create } for pid=24669 comm="syz.6.5614" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1013.567746][T24675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.740499][ T28] audit: type=1400 audit(2000000207.812:1447): avc: denied { connect } for pid=24679 comm="syz.7.5618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1013.815296][T24684] loop7: detected capacity change from 0 to 256 [ 1013.860119][T24684] FAT-fs (loop7): codepage cp865 not found [ 1013.897522][T24688] loop7: detected capacity change from 0 to 512 [ 1013.916044][T24688] loop7: detected capacity change from 0 to 512 [ 1013.923376][T24688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1013.931435][T24688] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1014.089706][T24688] EXT4-fs (loop7): 1 truncate cleaned up [ 1014.105833][T24688] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1014.533698][T24698] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1014.855254][T24700] loop8: detected capacity change from 0 to 512 [ 1014.896670][T22805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.010070][T24703] xt_hashlimit: size too large, truncated to 1048576 [ 1015.673890][T24715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.730076][T24715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.008545][T24731] loop7: detected capacity change from 0 to 512 [ 1016.509228][T24731] EXT4-fs: Ignoring removed nobh option [ 1016.615919][T24731] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1016.902911][T24731] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1016.957049][T24731] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1016.972880][ T28] audit: type=1400 audit(2000000210.826:1448): avc: denied { write } for pid=24729 comm="syz.7.5634" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1017.001512][T24741] 9p: Bad value for 'wfdno' [ 1017.197214][T22805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.121959][T24757] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1019.355209][ T28] audit: type=1400 audit(2000000213.072:1449): avc: denied { read } for pid=24763 comm="syz.8.5643" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1022.440248][ T28] audit: type=1400 audit(2000000215.963:1450): avc: denied { create } for pid=24832 comm="syz.6.5666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1022.491408][T24831] syzkaller0: entered promiscuous mode [ 1022.499576][T24831] syzkaller0: entered allmulticast mode [ 1022.542991][ T28] audit: type=1400 audit(2000000216.047:1451): avc: denied { create } for pid=24832 comm="syz.6.5666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1023.150980][T24891] veth1_macvtap: mtu less than device minimum [ 1023.656158][T24948] syzkaller0: entered promiscuous mode [ 1023.672402][T24948] syzkaller0: entered allmulticast mode [ 1023.917014][T24979] loop7: detected capacity change from 0 to 512 [ 1023.946403][T24979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1023.971127][T24979] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.5731: iget: bad i_size value: 38620345925642 [ 1023.984689][T24979] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1023.984946][T24979] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.5731: couldn't read orphan inode 15 (err -117) [ 1024.006014][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1024.006037][ C1] EXT4-fs (loop7): initial error at time 2000000217: ext4_orphan_get:1397: inode 15 [ 1024.006070][ C1] EXT4-fs (loop7): last error at time 2000000217: ext4_orphan_get:1397: inode 15 [ 1024.044285][T24979] loop7: lost filesystem error report for type 5 error -117 [ 1024.069857][T24979] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.132703][T22805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.372048][T25023] loop7: detected capacity change from 0 to 512 [ 1024.379288][T25023] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1024.409339][T25023] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.5748: iget: bad i_size value: 38620345925642 [ 1024.433535][T25023] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1024.433781][T25023] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.5748: couldn't read orphan inode 15 (err -117) [ 1024.454930][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1024.454955][ C1] EXT4-fs (loop7): initial error at time 2000000217: ext4_orphan_get:1397: inode 15 [ 1024.454999][ C1] EXT4-fs (loop7): last error at time 2000000217: ext4_orphan_get:1397: inode 15 [ 1024.481890][T25023] loop7: lost filesystem error report for type 5 error -117 [ 1024.482566][T25023] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.521448][T22805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.667946][T25065] syzkaller0: entered promiscuous mode [ 1025.808679][T25078] syzkaller0: entered promiscuous mode [ 1025.814309][T25078] syzkaller0: entered allmulticast mode [ 1025.937145][T25084] erspan0: entered promiscuous mode [ 1025.979281][ T5205] ip6_tunnel:  xmit: Local address not yet configured! [ 1026.056072][T10674] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1027.316835][T10674] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1027.338882][T25098] syzkaller0: entered promiscuous mode [ 1027.344632][T25098] syzkaller0: entered allmulticast mode [ 1027.395900][T25110] netlink: 'syz.6.5778': attribute type 3 has an invalid length. [ 1027.409549][ T36] bridge_slave_1: left allmulticast mode [ 1027.422898][ T36] bridge_slave_1: left promiscuous mode [ 1027.428887][T25110] netlink: 'syz.6.5778': attribute type 1 has an invalid length. [ 1027.436909][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.444118][T25110] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.5778'. [ 1027.460471][ T36] bridge_slave_0: left allmulticast mode [ 1027.470331][ T36] bridge_slave_0: left promiscuous mode [ 1027.476390][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.663482][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.673986][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.684123][ T36] bond0 (unregistering): Released all slaves [ 1027.694383][T25127] netlink: 'syz.6.5784': attribute type 29 has an invalid length. [ 1027.715350][T25130] netlink: 'syz.6.5784': attribute type 29 has an invalid length. [ 1027.735167][ T36] hsr_slave_0: left promiscuous mode [ 1027.742076][ T36] hsr_slave_1: left promiscuous mode [ 1027.748038][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1027.755479][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.767613][ T36] veth1_macvtap: left promiscuous mode [ 1027.809921][ T36] veth0_macvtap: left promiscuous mode [ 1027.815712][ T36] veth1_vlan: left promiscuous mode [ 1027.820988][ T36] veth0_vlan: left promiscuous mode [ 1027.914960][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1027.936474][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1027.967897][T25131] netlink: 'syz.6.5784': attribute type 29 has an invalid length. [ 1028.071179][T25142] syzkaller0: entered promiscuous mode [ 1028.078082][T25142] syzkaller0: entered allmulticast mode [ 1030.057042][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1030.393599][T25097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.400866][T25097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.408155][T25097] bridge_slave_0: entered allmulticast mode [ 1030.414916][T25097] bridge_slave_0: entered promiscuous mode [ 1030.422373][T25097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.429524][T25097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.436766][T25097] bridge_slave_1: entered allmulticast mode [ 1030.443750][T25097] bridge_slave_1: entered promiscuous mode [ 1030.451577][T25165] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.5794'. [ 1030.460974][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1030.481667][T25097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.493286][T25097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.513334][T25097] team0: Port device team_slave_0 added [ 1030.520262][T25097] team0: Port device team_slave_1 added [ 1030.540117][T25097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.547174][T25097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.575231][T25097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.588374][T25097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.595655][T25097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.622160][T25097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.656412][T25097] hsr_slave_0: entered promiscuous mode [ 1030.662653][T25097] hsr_slave_1: entered promiscuous mode [ 1030.668752][T25097] debugfs: 'hsr0' already exists in 'hsr' [ 1030.674896][T25097] Cannot create hsr debugfs directory [ 1030.741814][T25176] netlink: 188 bytes leftover after parsing attributes in process `syz.8.5799'. [ 1030.754281][T25177] wg2: entered promiscuous mode [ 1030.774786][T25177] wg2: entered allmulticast mode [ 1030.807285][T25176] Ù: renamed from bond_slave_1 (while UP) [ 1030.827711][T25183] loop7: detected capacity change from 0 to 4096 [ 1030.849726][ T36] IPVS: stop unused estimator thread 0... [ 1030.856411][T25183] EXT4-fs: inline encryption not supported [ 1030.868875][T25183] EXT4-fs: test_dummy_encryption option not supported [ 1031.036463][T25097] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.063786][T25188] netlink: 'syz.8.5803': attribute type 10 has an invalid length. [ 1031.080685][T25188] netlink: 2 bytes leftover after parsing attributes in process `syz.8.5803'. [ 1031.100290][T25188] veth1_virt_wifi: entered promiscuous mode [ 1031.106614][T25188] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 1031.113910][T25188] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 1031.121416][T25188] veth1_virt_wifi: entered allmulticast mode [ 1031.171058][T25097] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.209117][T25201] IPv6: Can't replace route, no match found [ 1031.257466][T25097] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.308327][T25097] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.339928][ T28] audit: type=1400 audit(2000000224.292:1452): avc: denied { write } for pid=25202 comm="syz.6.5808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1031.496060][T25097] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1031.511333][T25097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1031.527781][T25097] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1031.538621][T25097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1031.546780][T25097] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1031.556803][T25097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1031.565038][T25097] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1031.576223][T25097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1031.616810][T25097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.624182][T25221] C: renamed from veth1_to_team (while UP) [ 1031.632793][T25221] netlink: 'syz.0.5813': attribute type 3 has an invalid length. [ 1031.643439][T25221] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5813'. [ 1031.653628][T25221] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1031.678678][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1031.727479][T25097] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.727823][T25224] netlink: 9275 bytes leftover after parsing attributes in process `syz.8.5815'. [ 1031.744879][T10674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.751999][T10674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.764806][T10674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.771958][T10674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.968471][T25097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.015951][T25255] netlink: 'syz.7.5820': attribute type 10 has an invalid length. [ 1032.036858][T25255] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1032.065557][T25255] team0: Port device netdevsim1 added [ 1032.096981][T25097] veth0_vlan: entered promiscuous mode [ 1032.114379][T25097] veth1_vlan: entered promiscuous mode [ 1032.142272][T25097] veth0_macvtap: entered promiscuous mode [ 1032.145568][T25267] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5825'. [ 1032.158389][T25267] veth1_to_bridge: entered allmulticast mode [ 1032.167080][T25097] veth1_macvtap: entered promiscuous mode [ 1032.181789][T25097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.195735][T25097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.215870][ T814] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.232663][ T814] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.248261][ T814] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.260453][ T814] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.391285][T25278] raw_sendmsg: syz.3.5826 forgot to set AF_INET. Fix it! [ 1032.665363][T25298] netlink: 'syz.6.5835': attribute type 10 has an invalid length. [ 1032.682517][T25298] netlink: 55 bytes leftover after parsing attributes in process `syz.6.5835'. [ 1032.866201][T25302] netlink: 15487 bytes leftover after parsing attributes in process `syz.7.5836'. [ 1032.899696][T25306] netlink: 'syz.3.5837': attribute type 3 has an invalid length. [ 1032.923539][T25306] netlink: 'syz.3.5837': attribute type 1 has an invalid length. [ 1032.961348][T25306] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.5837'. [ 1032.983778][ T28] audit: type=1400 audit(2000000225.827:1453): avc: denied { ioctl } for pid=25309 comm="syz.7.5840" path="socket:[71805]" dev="sockfs" ino=71805 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1033.034394][T25313] loop7: detected capacity change from 0 to 512 [ 1033.043605][T25313] EXT4-fs: Ignoring removed nobh option [ 1033.057430][T25313] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1033.067967][T25313] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5841: invalid indirect mapped block 256 (level 1) [ 1033.081891][T25313] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1033.083526][T25313] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5841: invalid indirect mapped block 2683928664 (level 1) [ 1033.092737][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1033.092762][ C1] EXT4-fs (loop7): initial error at time 2000000225: ext4_free_branches:1023: inode 13 [ 1033.092802][ C1] EXT4-fs (loop7): last error at time 2000000225: ext4_free_branches:1023: inode 13 [ 1033.133059][T25313] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1033.134519][T25313] EXT4-fs (loop7): 1 truncate cleaned up [ 1033.153901][T25313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1033.452148][T25336] tap0: tun_chr_ioctl cmd 1074025677 [ 1033.464032][T25336] tap0: linktype set to 778 [ 1033.476394][T25336] tap0: tun_chr_ioctl cmd 2147767511 [ 1033.608031][T22805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.978554][T25353] IPv6: Can't replace route, no match found [ 1034.164423][T25361] ref_ctr_offset mismatch. inode: 0x29a offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 1034.176398][T25357] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5859'. [ 1034.272139][T25368] syz.0.5863: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1034.287852][T25368] CPU: 1 UID: 0 PID: 25368 Comm: syz.0.5863 Tainted: G W syzkaller #0 PREEMPT(full) [ 1034.287896][T25368] Tainted: [W]=WARN [ 1034.287904][T25368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1034.287917][T25368] Call Trace: [ 1034.287968][T25368] [ 1034.287976][T25368] __dump_stack+0x1d/0x30 [ 1034.288077][T25368] dump_stack_lvl+0x95/0xd0 [ 1034.288100][T25368] dump_stack+0x15/0x1b [ 1034.288193][T25368] warn_alloc+0x145/0x1c0 [ 1034.288218][T25368] ? lapic_next_event+0x11/0x20 [ 1034.288243][T25368] ? clockevents_program_event+0x2fd/0x340 [ 1034.288321][T25368] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 1034.288344][T25368] ? tick_program_event+0x79/0xc0 [ 1034.288373][T25368] ? _raw_spin_unlock+0x9/0x30 [ 1034.288459][T25368] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 1034.288493][T25368] ? irqentry_exit+0x527/0x5b0 [ 1034.288522][T25368] ? should_fail_ex+0x30/0x280 [ 1034.288558][T25368] vmalloc_user_noprof+0x7d/0xb0 [ 1034.288618][T25368] ? xskq_create+0x80/0xe0 [ 1034.288732][T25368] xskq_create+0x80/0xe0 [ 1034.288761][T25368] xsk_init_queue+0x70/0xb0 [ 1034.288788][T25368] xsk_setsockopt+0x477/0x640 [ 1034.288831][T25368] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1034.288862][T25368] __sys_setsockopt+0x184/0x200 [ 1034.288899][T25368] __x64_sys_setsockopt+0x64/0x80 [ 1034.288927][T25368] x64_sys_call+0x2327/0x3020 [ 1034.289033][T25368] do_syscall_64+0x12c/0x3b0 [ 1034.289110][T25368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.289135][T25368] RIP: 0033:0x7f100134cdd9 [ 1034.289156][T25368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.289178][T25368] RSP: 002b:00007f0fffda7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1034.289202][T25368] RAX: ffffffffffffffda RBX: 00007f10015c5fa0 RCX: 00007f100134cdd9 [ 1034.289295][T25368] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 1034.289312][T25368] RBP: 00007f10013e2d69 R08: 0000000000000004 R09: 0000000000000000 [ 1034.289329][T25368] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1034.289345][T25368] R13: 00007f10015c6038 R14: 00007f10015c5fa0 R15: 00007fffa25a37b8 [ 1034.289368][T25368] [ 1034.289568][T25368] Mem-Info: [ 1034.522572][T25368] active_anon:68762 inactive_anon:4 isolated_anon:0 [ 1034.522572][T25368] active_file:27493 inactive_file:2884 isolated_file:0 [ 1034.522572][T25368] unevictable:0 dirty:253 writeback:0 [ 1034.522572][T25368] slab_reclaimable:3962 slab_unreclaimable:20277 [ 1034.522572][T25368] mapped:34322 shmem:52941 pagetables:1966 [ 1034.522572][T25368] sec_pagetables:0 bounce:0 [ 1034.522572][T25368] kernel_misc_reclaimable:0 [ 1034.522572][T25368] free:1805018 free_pcp:10495 free_cma:0 [ 1034.617425][T25368] Node 0 active_anon:263564kB inactive_anon:16kB active_file:109972kB inactive_file:11536kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125804kB dirty:1012kB writeback:0kB shmem:200396kB kernel_stack:4480kB pagetables:7864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1034.648518][T25368] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1034.692877][T25368] lowmem_reserve[]: 0 2878 7857 7857 [ 1034.703048][T25368] Node 0 DMA32 free:2944528kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948052kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 1034.777507][T25368] lowmem_reserve[]: 0 0 4978 4978 [ 1034.793934][T25368] Node 0 Normal free:4260184kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:263912kB inactive_anon:16kB active_file:109972kB inactive_file:11536kB unevictable:0kB writepending:1012kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:49532kB local_pcp:15180kB free_cma:0kB [ 1034.843282][T25368] lowmem_reserve[]: 0 0 0 0 [ 1034.853815][T25368] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1034.876046][T25368] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944528kB [ 1034.921895][T25368] Node 0 Normal: 1828*4kB (UME) 2986*8kB (UME) 1119*16kB (UME) 573*32kB (UME) 299*64kB (UME) 221*128kB (UM) 166*256kB (UME) 117*512kB (UM) 94*1024kB (UME) 39*2048kB (UME) 944*4096kB (UM) = 4260016kB [ 1034.954750][T25368] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1034.980695][T25368] 80451 total pagecache pages [ 1034.991364][T25368] 5 pages in swap cache [ 1034.997263][T25368] Free swap = 124976kB [ 1035.011396][T25396] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.5872'. [ 1035.011989][T25368] Total swap = 124996kB [ 1035.041075][T25368] 2097051 pages RAM [ 1035.048537][T25368] 0 pages HighMem/MovableOnly [ 1035.059202][T25368] 81639 pages reserved [ 1035.246086][T25411] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5877'. [ 1036.033617][T25426] syzkaller0: entered promiscuous mode [ 1036.039603][T25426] syzkaller0: entered allmulticast mode [ 1036.172801][T25432] syzkaller0: entered promiscuous mode [ 1036.179564][T25432] syzkaller0: entered allmulticast mode [ 1036.223869][T25439] syzkaller0: entered promiscuous mode [ 1036.229454][T25439] syzkaller0: entered allmulticast mode [ 1036.851052][T25468] netlink: 'syz.8.5896': attribute type 10 has an invalid length. [ 1036.861082][T25467] syzkaller0: entered promiscuous mode [ 1036.874214][T25467] syzkaller0: entered allmulticast mode [ 1036.899732][T25468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1036.934082][T25468] team0: Port device netdevsim1 added [ 1037.077972][T25488] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.5905'. [ 1037.253627][T25494] netlink: 'syz.6.5908': attribute type 4 has an invalid length. [ 1037.270897][T25494] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5908'. [ 1037.306827][T25498] netlink: 'syz.0.5909': attribute type 39 has an invalid length. [ 1037.375052][T25502] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5911'. [ 1037.478435][T25502] syzkaller0: entered promiscuous mode [ 1037.491520][T25502] syzkaller0: entered allmulticast mode [ 1037.560072][T25506] syzkaller0: entered promiscuous mode [ 1037.572676][T25506] syzkaller0: entered allmulticast mode [ 1037.775002][T25512] syzkaller0: entered promiscuous mode [ 1037.790269][T25512] syzkaller0: entered allmulticast mode [ 1037.835232][T25514] tap0: tun_chr_ioctl cmd 1074025677 [ 1037.847456][T25514] tap0: linktype set to 778 [ 1037.858372][T25523] netlink: 'syz.8.5920': attribute type 10 has an invalid length. [ 1037.876632][T25523] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5920'. [ 1037.905066][T25514] tap0: tun_chr_ioctl cmd 2147767511 [ 1037.908183][T25523] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5920'. [ 1037.961700][T25523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.987298][T25523] bond0 (unregistering): (slave cÙ): Releasing backup interface [ 1038.024864][T25523] bond0 (unregistering): Released all slaves [ 1038.154401][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1038.373995][T25552] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5927'. [ 1038.518969][T25558] syzkaller0: entered promiscuous mode [ 1038.525743][T25558] syzkaller0: entered allmulticast mode [ 1038.535598][T25560] netlink: 830 bytes leftover after parsing attributes in process `syz.6.5931'. [ 1038.824241][T25575] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 1038.831508][T25575] bridge0: port 3(veth1_virt_wifi) entered forwarding state [ 1038.839020][T25575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.846130][T25575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.853600][T25575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.860705][T25575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1039.107526][T25583] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5941'. [ 1039.522214][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1039.613291][T25609] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5948'. [ 1039.649079][ T814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.859060][T25589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.882738][T25589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.900296][T25589] bridge_slave_0: entered allmulticast mode [ 1039.913976][T25589] bridge_slave_0: entered promiscuous mode [ 1039.938954][ T814] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.962887][T25589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.971303][T25589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.978665][T25589] bridge_slave_1: entered allmulticast mode [ 1039.985256][T25589] bridge_slave_1: entered promiscuous mode [ 1040.031460][ T814] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.046653][T25589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.072820][T25589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.118049][ T814] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.139043][T25589] team0: Port device team_slave_0 added [ 1040.146341][T25589] team0: Port device team_slave_1 added [ 1040.162424][T25589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.169654][T25589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.206141][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1040.213809][T25589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.226226][T25589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.234309][T25589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.260699][T25589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.281496][ T814] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.310176][T25589] hsr_slave_0: entered promiscuous mode [ 1040.316589][T25589] hsr_slave_1: entered promiscuous mode [ 1040.322606][T25589] debugfs: 'hsr0' already exists in 'hsr' [ 1040.328711][T25589] Cannot create hsr debugfs directory [ 1040.454482][ T814] bridge_slave_1: left allmulticast mode [ 1040.469391][ T814] bridge_slave_1: left promiscuous mode [ 1040.481291][ T814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.664987][ T28] audit: type=1400 audit(2000000233.013:1454): avc: denied { write } for pid=25651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1040.721107][ T28] audit: type=1400 audit(2000000233.051:1455): avc: denied { write } for pid=25662 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1041.003618][ T814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1041.018490][ T814] bond_slave_0: left promiscuous mode [ 1041.036659][ T814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1041.037774][T25670] netlink: 'syz.6.5963': attribute type 10 has an invalid length. [ 1041.054609][T25670] netlink: 55 bytes leftover after parsing attributes in process `syz.6.5963'. [ 1041.054871][ T814] bond_slave_1: left promiscuous mode [ 1041.086648][ T814] bond0 (unregistering): Released all slaves [ 1041.135560][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1041.159650][ T814] tipc: Left network mode [ 1041.186688][ T814] hsr_slave_0: left promiscuous mode [ 1041.200615][ T814] hsr_slave_1: left promiscuous mode [ 1041.216069][ T814] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1041.235692][ T814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.250564][ T814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1041.258196][ T814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.278306][ T814] veth0_macvtap: left promiscuous mode [ 1041.287345][ T814] veth1_vlan: left promiscuous mode [ 1041.389729][T25688] netlink: 'syz.3.5968': attribute type 10 has an invalid length. [ 1041.407292][T25688] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5968'. [ 1041.440419][ T814] team0 (unregistering): Port device team_slave_1 removed [ 1041.459994][ T814] team0 (unregistering): Port device team_slave_0 removed [ 1041.516136][T25688] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1041.562374][T25690] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.5969'. [ 1041.592896][T25692] netlink: 16399 bytes leftover after parsing attributes in process `syz.7.5970'. [ 1041.695454][ T28] audit: type=1400 audit(2000000233.977:1456): avc: denied { write } for pid=25697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1041.784868][ T28] audit: type=1400 audit(2000000234.062:1457): avc: denied { write } for pid=25710 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1041.847402][T25719] loop7: detected capacity change from 0 to 512 [ 1041.864442][T25719] EXT4-fs: Ignoring removed nobh option [ 1041.892025][T25719] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1041.905503][T25719] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5976: invalid indirect mapped block 256 (level 1) [ 1041.934873][T25725] netlink: 'syz.3.5977': attribute type 29 has an invalid length. [ 1041.942921][T25719] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1041.946151][T25719] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5976: invalid indirect mapped block 2683928664 (level 1) [ 1041.955458][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1041.955479][ C1] EXT4-fs (loop7): initial error at time 2000000234: ext4_free_branches:1023: inode 13 [ 1041.955520][ C1] EXT4-fs (loop7): last error at time 2000000234: ext4_free_branches:1023: inode 13 [ 1041.995743][T25719] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1041.997508][T25719] EXT4-fs (loop7): 1 truncate cleaned up [ 1042.013080][T25719] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1042.014249][T25725] netlink: 'syz.3.5977': attribute type 29 has an invalid length. [ 1042.079867][T25731] netlink: 'syz.3.5977': attribute type 29 has an invalid length. [ 1042.168029][T25725] netlink: 'syz.3.5977': attribute type 29 has an invalid length. [ 1042.260782][T25589] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1042.406483][T25589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1042.426276][ T28] audit: type=1400 audit(2000000234.660:1458): avc: denied { write } for pid=25737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.429691][T25589] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1042.496294][T25589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1042.524355][ T28] audit: type=1400 audit(2000000234.754:1459): avc: denied { write } for pid=25755 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1042.556587][T25751] syzkaller0: entered promiscuous mode [ 1042.576367][T25751] syzkaller0: entered allmulticast mode [ 1042.598001][T25589] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1042.644349][T25589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1042.715998][T22805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.726487][T25589] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1042.748722][T25589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1042.898584][T25589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.937667][T25589] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.985146][T25790] syzkaller0: entered promiscuous mode [ 1043.006367][ T28] audit: type=1400 audit(2000000235.203:1460): avc: denied { write } for pid=25762 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.037538][T25790] syzkaller0: entered allmulticast mode [ 1043.110595][T25798] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1043.223602][ T814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.230770][ T814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.312319][ T814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.319475][ T814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.422114][ T28] audit: type=1400 audit(2000000235.587:1461): avc: denied { setopt } for pid=25801 comm="syz.8.5994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1043.593442][ T28] audit: type=1400 audit(2000000235.746:1462): avc: denied { write } for pid=25806 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.878207][T25832] netlink: 'syz.3.5999': attribute type 10 has an invalid length. [ 1043.898024][T25838] netlink: 'syz.7.6001': attribute type 22 has an invalid length. [ 1043.910162][T25589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.910552][T25830] netlink: 'syz.8.5998': attribute type 2 has an invalid length. [ 1043.925384][T25838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6001'. [ 1043.935005][ T28] audit: type=1400 audit(2000000236.074:1463): avc: denied { write } for pid=25812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.936275][T25832] veth0_macvtap: left promiscuous mode [ 1043.971459][T25830] netlink: 'syz.8.5998': attribute type 8 has an invalid length. [ 1044.035136][T25830] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5998'. [ 1044.176277][T25851] syzkaller0: entered promiscuous mode [ 1044.203158][T25851] syzkaller0: entered allmulticast mode [ 1044.221232][T25589] veth0_vlan: entered promiscuous mode [ 1044.263706][T25589] veth1_vlan: entered promiscuous mode [ 1044.336205][T25589] veth0_macvtap: entered promiscuous mode [ 1044.359141][T25589] veth1_macvtap: entered promiscuous mode [ 1044.385060][T25589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.407896][T25589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1044.425596][ T5205] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.437967][ T5205] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.487425][ T5205] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.533760][ T5205] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.569889][T25870] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6008'. [ 1044.812701][T25886] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1045.298651][T25894] loop7: detected capacity change from 0 to 512 [ 1046.172541][T25918] syzkaller0: entered promiscuous mode [ 1046.202503][T25918] syzkaller0: entered allmulticast mode [ 1047.576844][T25986] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6048'. [ 1047.693192][T25992] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.6049'. [ 1048.113492][T26018] IPv6: pim6reg1: Disabled Multicast RS [ 1048.580096][T26028] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.6062'. [ 1048.710457][T26030] loop7: detected capacity change from 0 to 512 [ 1048.717341][T26030] EXT4-fs: Ignoring removed nobh option [ 1048.729234][T26030] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1048.748333][T26030] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.6063: invalid indirect mapped block 256 (level 1) [ 1048.774575][T26030] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1048.774810][T26030] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.6063: invalid indirect mapped block 2683928664 (level 1) [ 1048.784074][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1048.784096][ C0] EXT4-fs (loop7): initial error at time 2000000240: ext4_free_branches:1023: inode 13 [ 1048.784148][ C0] EXT4-fs (loop7): last error at time 2000000240: ext4_free_branches:1023: inode 13 [ 1048.814485][T26034] syzkaller0: entered promiscuous mode [ 1048.823819][T26030] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1048.848156][T26034] syzkaller0: entered allmulticast mode [ 1048.865828][T26030] EXT4-fs (loop7): 1 truncate cleaned up [ 1048.878739][T26030] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1049.028751][T26040] syzkaller0: entered promiscuous mode [ 1049.040982][T26040] syzkaller0: entered allmulticast mode [ 1049.225179][T26053] netlink: 'syz.6.6071': attribute type 10 has an invalid length. [ 1049.238692][T26053] dummy0: entered promiscuous mode [ 1049.247241][T26053] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1050.059224][T26032] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1050.170819][T26032] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1050.353978][T26076] syzkaller0: entered promiscuous mode [ 1050.373859][T26076] syzkaller0: entered allmulticast mode [ 1050.392969][T22805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.630584][T26092] syzkaller0: entered promiscuous mode [ 1050.642452][T26092] syzkaller0: entered allmulticast mode [ 1055.131563][T26145] netlink: 'syz.8.6103': attribute type 10 has an invalid length. [ 1055.149596][T26145] netlink: 2 bytes leftover after parsing attributes in process `syz.8.6103'. [ 1055.365195][T26155] bridge_slave_1: left allmulticast mode [ 1055.371670][T26155] bridge_slave_1: left promiscuous mode [ 1055.377469][T26155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.385971][T26155] bridge_slave_0: left allmulticast mode [ 1055.399202][T26155] bridge_slave_0: left promiscuous mode [ 1055.405423][T26155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.537359][T26172] netlink: 'syz.3.6112': attribute type 10 has an invalid length. [ 1055.551323][T26172] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.6112'. [ 1055.779336][T26181] netlink: 207236 bytes leftover after parsing attributes in process `syz.3.6116'. [ 1055.788833][T26181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6116'. [ 1056.437093][T26194] loop7: detected capacity change from 0 to 512 [ 1056.445114][T26194] EXT4-fs: Ignoring removed nobh option [ 1056.462887][T26183] syzkaller0: entered promiscuous mode [ 1056.478754][T26194] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1056.493120][T26183] syzkaller0: entered allmulticast mode [ 1056.602268][T26194] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.6119: invalid indirect mapped block 256 (level 1) [ 1056.623128][T26194] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1056.623377][T26194] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.6119: invalid indirect mapped block 2683928664 (level 1) [ 1056.632845][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1056.632868][ C1] EXT4-fs (loop7): initial error at time 2000000247: ext4_free_branches:1023: inode 13 [ 1056.632912][ C1] EXT4-fs (loop7): last error at time 2000000247: ext4_free_branches:1023: inode 13 [ 1056.672971][T26194] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1056.673392][T26194] EXT4-fs (loop7): 1 truncate cleaned up [ 1056.710496][T26194] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.775906][T26211] netlink: 'syz.3.6125': attribute type 5 has an invalid length. [ 1056.841480][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1056.841499][ T28] audit: type=1400 audit(2000000248.145:1465): avc: denied { read } for pid=26214 comm="syz.8.6129" laddr=172.20.20.10 lport=49354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1056.945111][T26226] syzkaller0: entered promiscuous mode [ 1056.957879][T26226] syzkaller0: entered allmulticast mode [ 1057.304346][T26198] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1057.336240][T26198] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1057.397938][T22805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.445486][T26265] netlink: 'syz.3.6149': attribute type 10 has an invalid length. [ 1057.489687][T26265] team0 (unregistering): Port device team_slave_0 removed [ 1057.506329][T26265] team0 (unregistering): Port device team_slave_1 removed [ 1057.532185][T26269] syzkaller0: entered promiscuous mode [ 1057.537744][T26269] syzkaller0: entered allmulticast mode [ 1057.853889][T26285] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=26285 comm=syz.7.6156 [ 1058.134199][T26303] syzkaller0: entered promiscuous mode [ 1058.150670][T26303] syzkaller0: entered allmulticast mode [ 1058.451948][T26315] syzkaller0: entered promiscuous mode [ 1058.457527][T26315] syzkaller0: entered allmulticast mode [ 1058.539232][T26328] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6173'. [ 1058.739153][T26350] loop7: detected capacity change from 0 to 512 [ 1058.742422][T26339] syzkaller0: entered promiscuous mode [ 1058.748838][T26350] EXT4-fs: Ignoring removed nobh option [ 1058.764493][T26339] syzkaller0: entered allmulticast mode [ 1058.780551][T26350] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1058.789418][T26350] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.6181: invalid indirect mapped block 256 (level 1) [ 1058.802932][T26350] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1058.804535][T26350] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.6181: invalid indirect mapped block 2683928664 (level 1) [ 1058.813738][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1058.813759][ C1] EXT4-fs (loop7): initial error at time 2000000249: ext4_free_branches:1023: inode 13 [ 1058.813792][ C1] EXT4-fs (loop7): last error at time 2000000249: ext4_free_branches:1023: inode 13 [ 1058.853830][T26350] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1058.857755][T26350] EXT4-fs (loop7): 1 truncate cleaned up [ 1058.889862][T26358] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.6184'. [ 1058.906560][T26350] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1059.027982][T26366] syzkaller0: entered promiscuous mode [ 1059.033514][T26366] syzkaller0: entered allmulticast mode [ 1059.252648][T26396] syzkaller0: entered promiscuous mode [ 1059.260761][T26396] syzkaller0: entered allmulticast mode [ 1059.388841][T26403] netlink: 'syz.6.6202': attribute type 10 has an invalid length. [ 1059.492434][T22805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.810074][T26442] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.6217'. [ 1060.175977][T26466] netlink: 'syz.6.6226': attribute type 21 has an invalid length. [ 1060.201413][T26466] netlink: 'syz.6.6226': attribute type 6 has an invalid length. [ 1060.222259][T26466] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6226'. [ 1060.371241][T26477] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.6230'. [ 1060.653758][ T28] audit: type=1400 audit(2000000251.701:1466): avc: denied { write } for pid=26495 comm="syz.7.6239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1060.689876][T26489] : port 1(ip6gretap0) entered blocking state [ 1060.721363][T26489] : port 1(ip6gretap0) entered disabled state [ 1060.758929][T26489] ip6gretap0: entered allmulticast mode [ 1060.769733][T26489] ip6gretap0: entered promiscuous mode [ 1060.805250][T26489] ip6gretap0: left allmulticast mode [ 1060.829512][T26489] ip6gretap0: left promiscuous mode [ 1060.832751][T26504] netlink: 16211 bytes leftover after parsing attributes in process `syz.6.6243'. [ 1060.835324][T26489] : port 1(ip6gretap0) entered disabled state [ 1061.674242][T26536] syzkaller0: entered promiscuous mode [ 1061.707266][T26536] syzkaller0: entered allmulticast mode [ 1061.925451][T26547] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.6254'. [ 1063.011207][T26597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26597 comm=syz.6.6272 [ 1063.106739][T26605] syzkaller0: entered promiscuous mode [ 1063.123567][T26605] syzkaller0: entered allmulticast mode [ 1063.512673][T26645] syzkaller0: entered promiscuous mode [ 1063.518282][T26645] syzkaller0: entered allmulticast mode [ 1064.309602][T26680] syzkaller0: entered promiscuous mode [ 1064.322072][T26680] syzkaller0: entered allmulticast mode [ 1065.061226][T26717] syzkaller0: entered promiscuous mode [ 1065.085908][T26717] syzkaller0: entered allmulticast mode [ 1065.384365][T26741] netlink: 16211 bytes leftover after parsing attributes in process `syz.6.6333'. [ 1065.557689][T26755] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1065.940446][T26761] syzkaller0: entered promiscuous mode [ 1065.955797][T26761] syzkaller0: entered allmulticast mode [ 1066.250318][T26800] syzkaller0: entered promiscuous mode [ 1066.262482][T26800] syzkaller0: entered allmulticast mode [ 1066.473884][T26826] syzkaller0: entered promiscuous mode [ 1066.479443][T26826] syzkaller0: entered allmulticast mode [ 1066.723863][ T28] audit: type=1400 audit(2000000257.400:1467): avc: denied { ioctl } for pid=26850 comm="syz.7.6378" path="socket:[77889]" dev="sockfs" ino=77889 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1066.844520][T26864] bridge_slave_1: left allmulticast mode [ 1066.850931][T26864] bridge_slave_1: left promiscuous mode [ 1066.856925][T26864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.912899][T26864] bridge_slave_0: left allmulticast mode [ 1066.923454][T26864] bridge_slave_0: left promiscuous mode [ 1066.938896][T26864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.174281][T26886] netlink: 16187 bytes leftover after parsing attributes in process `syz.7.6391'. [ 1067.199702][ T28] audit: type=1400 audit(2000000257.840:1468): avc: denied { create } for pid=26887 comm="syz.6.6392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1067.395713][T26898] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6396'. [ 1067.689598][T26937] netlink: 16187 bytes leftover after parsing attributes in process `syz.6.6411'. [ 1067.943111][T26950] netlink: 'syz.7.6417': attribute type 21 has an invalid length. [ 1067.983407][T26950] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6417'. [ 1067.986685][T26952] netlink: 'syz.6.6418': attribute type 10 has an invalid length. [ 1068.025357][T26952] veth0_macvtap: left promiscuous mode [ 1068.268424][T26964] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6423'. [ 1069.042910][T27048] netlink: 9275 bytes leftover after parsing attributes in process `syz.7.6459'. [ 1069.504564][T27081] loop7: detected capacity change from 0 to 512 [ 1069.536769][T27085] netlink: 'syz.3.6473': attribute type 29 has an invalid length. [ 1069.651733][T27089] Ÿë: port 1(gretap0) entered blocking state [ 1069.663876][T27089] Ÿë: port 1(gretap0) entered disabled state [ 1069.674727][T27089] gretap0: entered allmulticast mode [ 1069.682819][T27089] gretap0: entered promiscuous mode [ 1069.722566][T27091] netlink: 'syz.6.6475': attribute type 1 has an invalid length. [ 1069.749771][T27091] netlink: 127868 bytes leftover after parsing attributes in process `syz.6.6475'. [ 1069.852689][T27101] netlink: 'syz.7.6479': attribute type 11 has an invalid length. [ 1070.071609][T27121] syzkaller0: entered promiscuous mode [ 1070.071691][T27122] netlink: 188 bytes leftover after parsing attributes in process `syz.7.6486'. [ 1070.079991][T27121] syzkaller0: entered allmulticast mode [ 1070.144435][T27126] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6489'. [ 1070.295769][T27151] syzkaller0: entered promiscuous mode [ 1070.302546][T27151] syzkaller0: entered allmulticast mode [ 1070.864500][T27231] netlink: 'syz.8.6532': attribute type 10 has an invalid length. [ 1070.883742][T27231] team0: Device wg2 is of different type [ 1071.020994][T27253] netlink: 16399 bytes leftover after parsing attributes in process `syz.7.6543'. [ 1071.178367][T27261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8216 sclass=netlink_route_socket pid=27261 comm=syz.7.6545 [ 1071.279171][T27277] bridge_slave_1: left allmulticast mode [ 1071.285106][T27277] bridge_slave_1: left promiscuous mode [ 1071.290924][T27277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.299841][T27277] bridge_slave_0: left allmulticast mode [ 1071.308379][T27277] bridge_slave_0: left promiscuous mode [ 1071.324225][T27277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.764993][T27325] netlink: 'syz.7.6571': attribute type 10 has an invalid length. [ 1071.853968][T27347] netlink: 'syz.0.6579': attribute type 1 has an invalid length. [ 1071.967755][T27357] netlink: 'syz.0.6582': attribute type 13 has an invalid length. [ 1072.024235][T27364] syzkaller0: entered promiscuous mode [ 1072.030025][T27364] syzkaller0: entered allmulticast mode [ 1073.495413][T27352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.502722][T27352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.506235][T27402] netlink: 'syz.3.6596': attribute type 10 has an invalid length. [ 1073.510706][T27352] bridge_slave_0: entered allmulticast mode [ 1073.524274][T27402] __nla_validate_parse: 2 callbacks suppressed [ 1073.524295][T27402] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6596'. [ 1073.540789][T27352] bridge_slave_0: entered promiscuous mode [ 1073.547890][T27352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.555049][T27352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.562263][T27352] bridge_slave_1: entered allmulticast mode [ 1073.568869][T27352] bridge_slave_1: entered promiscuous mode [ 1073.575385][T27402] dummy0: entered promiscuous mode [ 1073.589489][T27402] dummy0: entered allmulticast mode [ 1073.595879][T27402] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1073.645302][T27352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.669824][T27352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.711117][T27352] team0: Port device team_slave_0 added [ 1073.740385][T27352] team0: Port device team_slave_1 added [ 1073.758469][T27427] netlink: 16399 bytes leftover after parsing attributes in process `syz.7.6606'. [ 1073.787211][T27352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.806301][T27352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.853095][T27352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.096245][T27352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.103298][T27352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.130699][T27352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.166737][T27352] hsr_slave_0: entered promiscuous mode [ 1075.179805][T27352] hsr_slave_1: entered promiscuous mode [ 1075.192605][T27352] debugfs: 'hsr0' already exists in 'hsr' [ 1075.204964][T27352] Cannot create hsr debugfs directory [ 1075.269927][T27454] netlink: 188 bytes leftover after parsing attributes in process `syz.8.6615'. [ 1075.291218][T27352] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.362646][T27352] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.446516][T27352] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.448290][T27468] netlink: 16399 bytes leftover after parsing attributes in process `syz.8.6619'. [ 1075.517170][T27352] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.870216][T27352] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1076.880014][T27352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1076.887906][T27352] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1076.897391][T27352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1076.906291][T27352] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1076.922989][T27352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1076.924903][T27493] netlink: 16399 bytes leftover after parsing attributes in process `syz.7.6629'. [ 1076.948718][T27352] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1076.963068][T27352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1077.044411][T27352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.068220][T27352] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.087603][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.094744][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.121961][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.129106][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.278479][T27539] netlink: 14 bytes leftover after parsing attributes in process `syz.7.6644'. [ 1077.300882][T27539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.318613][T27539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.335307][T27539] bond0 (unregistering): Released all slaves [ 1077.418901][T27352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.502009][T27574] netlink: 16399 bytes leftover after parsing attributes in process `syz.7.6655'. [ 1077.602599][T27583] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6657'. [ 1077.686431][T27352] veth0_vlan: entered promiscuous mode [ 1077.699974][T27352] veth1_vlan: entered promiscuous mode [ 1077.728882][T27352] veth0_macvtap: entered promiscuous mode [ 1077.742081][T27352] veth1_macvtap: entered promiscuous mode [ 1077.762085][T27352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.784915][T27352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.815935][ T30] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.825276][ T30] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.856319][ T30] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.867717][ T30] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.986837][T27638] netlink: 16399 bytes leftover after parsing attributes in process `syz.8.6679'. [ 1078.017191][T27643] loop7: detected capacity change from 0 to 512 [ 1078.030659][T27643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1078.053868][T27643] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.6681: iget: bad i_size value: 38620345925642 [ 1078.070489][T27643] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1078.070799][T27643] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6681: couldn't read orphan inode 15 (err -117) [ 1078.080120][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1078.080144][ C0] EXT4-fs (loop7): initial error at time 2000000268: ext4_orphan_get:1397: inode 15 [ 1078.080181][ C0] EXT4-fs (loop7): last error at time 2000000268: ext4_orphan_get:1397: inode 15 [ 1078.119376][T27643] loop7: lost filesystem error report for type 5 error -117 [ 1078.120060][T27643] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1078.143205][ T28] audit: type=1400 audit(2000000268.087:1469): avc: denied { write } for pid=27641 comm="syz.7.6681" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1078.204000][T27659] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6685'. [ 1078.360862][T27643] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.6681: bg 0: block 5: invalid block bitmap [ 1078.386029][T27643] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 1078.409963][T27643] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1078.409963][T27643] [ 1078.446041][T27643] EXT4-fs (loop7): Total free blocks count 0 [ 1078.454178][T27643] EXT4-fs (loop7): Free/Dirty block details [ 1078.460451][T27643] EXT4-fs (loop7): free_blocks=0 [ 1078.467427][T27643] EXT4-fs (loop7): dirty_blocks=4500 [ 1078.481050][T27643] EXT4-fs (loop7): Block reservation details [ 1078.489013][T27643] EXT4-fs (loop7): i_reserved_data_blocks=4500 [ 1078.524709][T27686] warn_alloc: 2 callbacks suppressed [ 1078.524744][T27686] syz.8.6699: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1078.545765][T27686] CPU: 1 UID: 0 PID: 27686 Comm: syz.8.6699 Tainted: G W syzkaller #0 PREEMPT(full) [ 1078.545867][T27686] Tainted: [W]=WARN [ 1078.545875][T27686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1078.545887][T27686] Call Trace: [ 1078.545894][T27686] [ 1078.545903][T27686] __dump_stack+0x1d/0x30 [ 1078.545988][T27686] dump_stack_lvl+0x95/0xd0 [ 1078.546013][T27686] dump_stack+0x15/0x1b [ 1078.546033][T27686] warn_alloc+0x145/0x1c0 [ 1078.546055][T27686] ? tick_program_event+0x79/0xc0 [ 1078.546116][T27686] ? hrtimer_active+0xe4/0x110 [ 1078.546146][T27686] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 1078.546238][T27686] ? irqentry_exit+0x527/0x5b0 [ 1078.546267][T27686] ? preempt_schedule_common+0x11/0x30 [ 1078.546329][T27686] ? preempt_schedule_thunk+0x16/0x30 [ 1078.546373][T27686] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 1078.546464][T27686] ? should_fail_ex+0x30/0x280 [ 1078.546496][T27686] vmalloc_user_noprof+0x7d/0xb0 [ 1078.546521][T27686] ? xskq_create+0x80/0xe0 [ 1078.546555][T27686] xskq_create+0x80/0xe0 [ 1078.546592][T27686] xsk_init_queue+0x70/0xb0 [ 1078.546623][T27686] xsk_setsockopt+0x477/0x640 [ 1078.546664][T27686] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1078.546695][T27686] __sys_setsockopt+0x184/0x200 [ 1078.546720][T27686] __x64_sys_setsockopt+0x64/0x80 [ 1078.546825][T27686] x64_sys_call+0x2327/0x3020 [ 1078.546853][T27686] do_syscall_64+0x12c/0x3b0 [ 1078.546969][T27686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.546996][T27686] RIP: 0033:0x7fdaa743cdd9 [ 1078.547016][T27686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.547072][T27686] RSP: 002b:00007fdaa5e97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1078.547141][T27686] RAX: ffffffffffffffda RBX: 00007fdaa76b5fa0 RCX: 00007fdaa743cdd9 [ 1078.547160][T27686] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 1078.547177][T27686] RBP: 00007fdaa74d2d69 R08: 0000000000000004 R09: 0000000000000000 [ 1078.547255][T27686] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1078.547272][T27686] R13: 00007fdaa76b6038 R14: 00007fdaa76b5fa0 R15: 00007ffc237a0148 [ 1078.547312][T27686] [ 1078.565023][T27686] Mem-Info: [ 1078.565052][T27686] active_anon:24632 inactive_anon:4 isolated_anon:0 [ 1078.565052][T27686] active_file:27493 inactive_file:4035 isolated_file:0 [ 1078.565052][T27686] unevictable:0 dirty:767 writeback:0 [ 1078.565052][T27686] slab_reclaimable:4026 slab_unreclaimable:20915 [ 1078.565052][T27686] mapped:31061 shmem:16728 pagetables:1790 [ 1078.565052][T27686] sec_pagetables:0 bounce:0 [ 1078.565052][T27686] kernel_misc_reclaimable:0 [ 1078.565052][T27686] free:1845408 free_pcp:12521 free_cma:0 [ 1078.565224][T27686] Node 0 active_anon:98528kB inactive_anon:16kB active_file:109972kB inactive_file:16140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124244kB dirty:3068kB writeback:0kB shmem:66912kB kernel_stack:4352kB pagetables:7160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1078.565424][T27686] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1078.565575][T27686] lowmem_reserve[]: 0 2878 7857 7857 [ 1078.565778][T27686] Node 0 DMA32 free:2944528kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948052kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 1078.565881][T27686] lowmem_reserve[]: 0 0 4978 4978 [ 1078.565963][T27686] Node 0 Normal free:4421744kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:98528kB inactive_anon:16kB active_file:109972kB inactive_file:16140kB unevictable:0kB writepending:3068kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:46572kB local_pcp:44368kB free_cma:0kB [ 1078.566173][T27686] lowmem_reserve[]: 0 0 0 0 [ 1078.566323][T27686] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1078.566722][T27686] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944528kB [ 1078.579179][T27686] Node 0 Normal: 3742*4kB (UM) 5721*8kB (UM) 3440*16kB (UM) 1956*32kB (UM) 884*64kB (UME) 301*128kB (UME) 182*256kB (UM) 125*512kB (UME) 101*1024kB (UME) 43*2048kB (UME) 939*4096kB (UM) = 4421696kB [ 1078.580477][T27686] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1078.580526][T27686] 48257 total pagecache pages [ 1078.580551][T27686] 5 pages in swap cache [ 1078.580574][T27686] Free swap = 124976kB [ 1078.580598][T27686] Total swap = 124996kB [ 1078.580620][T27686] 2097051 pages RAM [ 1078.580696][T27686] 0 pages HighMem/MovableOnly [ 1078.580704][T27686] 81639 pages reserved [ 1079.042939][T27735] netlink: 'syz.6.6720': attribute type 21 has an invalid length. [ 1079.228672][T27742] __nla_validate_parse: 2 callbacks suppressed [ 1079.228747][T27742] netlink: 16375 bytes leftover after parsing attributes in process `syz.0.6721'. [ 1079.228997][T15412] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 1079.280794][T22805] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1079.501234][T27765] syzkaller0: entered promiscuous mode [ 1079.506929][T27765] syzkaller0: entered allmulticast mode [ 1079.694708][T27778] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1079.732526][T27778] syzkaller0: entered promiscuous mode [ 1079.742323][T27778] syzkaller0: entered allmulticast mode [ 1079.802803][T27804] netlink: 'syz.6.6750': attribute type 21 has an invalid length. [ 1079.867182][T27807] syzkaller0: entered promiscuous mode [ 1079.873142][T27807] syzkaller0: entered allmulticast mode [ 1079.906756][T27804] Ÿë: port 1(ip6gretap0) entered blocking state [ 1079.917152][T27804] Ÿë: port 1(ip6gretap0) entered disabled state [ 1079.924072][T27804] ip6gretap0: entered allmulticast mode [ 1079.934322][T27804] ip6gretap0: entered promiscuous mode [ 1079.967250][ T28] audit: type=1400 audit(2000000269.790:1470): avc: denied { read } for pid=27803 comm="syz.6.6750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1080.075300][T27831] syzkaller0: entered promiscuous mode [ 1080.081419][T27831] syzkaller0: entered allmulticast mode [ 1080.423275][T27858] syzkaller0: entered promiscuous mode [ 1080.432989][T27858] syzkaller0: entered allmulticast mode [ 1080.986902][T27891] syzkaller0: entered promiscuous mode [ 1080.998244][T27891] syzkaller0: entered allmulticast mode [ 1081.118464][T27903] netlink: 16375 bytes leftover after parsing attributes in process `syz.3.6787'. [ 1081.132194][T27901] netlink: 'syz.7.6788': attribute type 2 has an invalid length. [ 1081.146486][T27901] netlink: 'syz.7.6788': attribute type 8 has an invalid length. [ 1081.157536][T27901] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6788'. [ 1081.230219][ T28] audit: type=1400 audit(2000000270.969:1471): avc: denied { read } for pid=27911 comm="syz.6.6792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1081.284855][ T12] veth1_virt_wifi: left allmulticast mode [ 1081.290837][ T12] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 1082.091580][ T12] bridge_slave_1: left allmulticast mode [ 1082.119238][ T12] bridge_slave_1: left promiscuous mode [ 1082.136402][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.155386][ T12] bridge_slave_0: left allmulticast mode [ 1082.170732][ T12] bridge_slave_0: left promiscuous mode [ 1082.177036][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.319504][ T28] audit: type=1400 audit(2000000271.989:1472): avc: denied { write } for pid=27944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1082.370832][ T28] audit: type=1400 audit(2000000272.027:1473): avc: denied { write } for pid=27959 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1082.440191][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1082.450855][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1082.460747][ T12] bond0 (unregistering): Released all slaves [ 1082.511087][ T12] hsr_slave_0: left promiscuous mode [ 1082.530944][ T12] hsr_slave_1: left promiscuous mode [ 1082.540806][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.555197][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.586272][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.615838][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.638345][ T28] audit: type=1400 audit(2000000272.289:1474): avc: denied { write } for pid=27967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1082.668297][ T12] veth1_macvtap: left promiscuous mode [ 1082.679581][ T12] veth0_macvtap: left promiscuous mode [ 1082.697509][ T12] veth1_vlan: left promiscuous mode [ 1082.716315][ T12] veth0_vlan: left promiscuous mode [ 1082.741916][ T28] audit: type=1400 audit(2000000272.392:1475): avc: denied { write } for pid=27994 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1082.796838][T28001] netlink: 9275 bytes leftover after parsing attributes in process `syz.8.6813'. [ 1082.988380][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1083.007877][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1083.043960][ T28] audit: type=1400 audit(2000000272.673:1476): avc: denied { write } for pid=28005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.107622][ T28] audit: type=1400 audit(2000000272.729:1477): avc: denied { write } for pid=28038 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.200772][T28006] syzkaller0: entered promiscuous mode [ 1083.222464][T28006] syzkaller0: entered allmulticast mode [ 1083.341217][ T28] audit: type=1400 audit(2000000272.953:1478): avc: denied { write } for pid=28044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.544060][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1083.544078][ T28] audit: type=1400 audit(2000000273.141:1480): avc: denied { write } for pid=28071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.583526][ T28] audit: type=1400 audit(2000000273.169:1481): avc: denied { write } for pid=28102 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.727627][T28117] loop7: detected capacity change from 0 to 4096 [ 1083.747923][T28117] EXT4-fs: inline encryption not supported [ 1083.766495][T28117] EXT4-fs: test_dummy_encryption option not supported [ 1083.780422][ T28] audit: type=1400 audit(2000000273.346:1482): avc: denied { write } for pid=28107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.936112][ T28] audit: type=1400 audit(2000000273.505:1483): avc: denied { write } for pid=28137 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1084.643087][ T28] audit: type=1400 audit(2000000274.170:1484): avc: denied { write } for pid=28144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1084.715935][ T28] audit: type=1400 audit(2000000274.235:1485): avc: denied { write } for pid=28156 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1084.921214][ T28] audit: type=1400 audit(2000000274.432:1486): avc: denied { write } for pid=28162 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1085.002652][ T28] audit: type=1400 audit(2000000274.497:1487): avc: denied { write } for pid=28192 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1085.119344][T28202] syzkaller0: entered promiscuous mode [ 1085.125125][T28202] syzkaller0: entered allmulticast mode [ 1085.320824][T28210] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6860'. [ 1085.330159][T28210] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6860'. [ 1085.753704][T28228] syzkaller0: entered promiscuous mode [ 1085.759249][T28228] syzkaller0: entered allmulticast mode [ 1085.854795][T28239] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6872'. [ 1085.921333][T28243] sctp: [Deprecated]: syz.3.6874 (pid 28243) Use of int in maxseg socket option. [ 1085.921333][T28243] Use struct sctp_assoc_value instead [ 1086.070999][T28266] netlink: 160 bytes leftover after parsing attributes in process `syz.6.6884'. [ 1087.695540][T28323] syzkaller0: entered promiscuous mode [ 1087.701329][T28323] syzkaller0: entered allmulticast mode [ 1087.864073][T28339] netlink: 'syz.0.6916': attribute type 10 has an invalid length. [ 1087.886487][T28339] team0: Port device veth1_to_hsr added [ 1087.933532][T28345] syzkaller0: entered promiscuous mode [ 1087.940182][T28345] syzkaller0: entered allmulticast mode [ 1088.185405][T28383] netlink: 'syz.7.6936': attribute type 10 has an invalid length. [ 1088.210848][T28383] team0: Port device veth1_to_hsr added [ 1088.281118][T28397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.291497][T28397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.595823][T28437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.607607][T28437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.606716][T28513] pimreg: entered allmulticast mode [ 1089.896455][T28545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7010'. [ 1089.905610][T28545] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7010'. [ 1091.021086][T28629] loop7: detected capacity change from 0 to 512 [ 1091.106976][T28629] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1091.121191][T28629] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.7045: iget: bad i_size value: 38620345925642 [ 1091.134279][T28629] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1091.134857][T28629] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.7045: couldn't read orphan inode 15 (err -117) [ 1091.144485][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1091.144511][ C1] EXT4-fs (loop7): initial error at time 2000000280: ext4_orphan_get:1397: inode 15 [ 1091.144546][ C1] EXT4-fs (loop7): last error at time 2000000280: ext4_orphan_get:1397: inode 15 [ 1091.200718][T28629] loop7: lost filesystem error report for type 5 error -117 [ 1091.202188][T28629] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1091.435956][T28648] syzkaller0: entered promiscuous mode [ 1091.473880][ T28] audit: type=1400 audit(2000000280.552:1488): avc: denied { write } for pid=28628 comm="syz.7.7045" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1091.517900][T28648] syzkaller0: entered allmulticast mode [ 1091.544841][T28659] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.7045: bg 0: block 5: invalid block bitmap [ 1091.644294][T28659] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 112 with error 28 [ 1091.691326][T28659] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1091.691326][T28659] [ 1091.709369][T28659] EXT4-fs (loop7): Total free blocks count 0 [ 1091.715631][T28659] EXT4-fs (loop7): Free/Dirty block details [ 1091.722397][T28659] EXT4-fs (loop7): free_blocks=0 [ 1091.728468][T28659] EXT4-fs (loop7): dirty_blocks=112 [ 1091.733837][T28659] EXT4-fs (loop7): Block reservation details [ 1091.750970][T28659] EXT4-fs (loop7): i_reserved_data_blocks=112 [ 1091.785885][T22805] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1091.800876][T22805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.814939][T28671] : port 1(ip6gretap0) entered blocking state [ 1091.823191][T28671] : port 1(ip6gretap0) entered disabled state [ 1091.843064][ T28] audit: type=1400 audit(2000000280.908:1489): avc: denied { nlmsg_read } for pid=28679 comm="syz.7.7063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1091.846524][T28671] ip6gretap0: entered allmulticast mode [ 1091.958839][T28671] ip6gretap0: entered promiscuous mode [ 1092.140752][ T28] audit: type=1400 audit(2000000281.188:1490): avc: denied { bind } for pid=28723 comm="syz.0.7086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1092.223470][T28735] netlink: 'syz.8.7090': attribute type 54 has an invalid length. [ 1092.352600][T28757] netlink: 388 bytes leftover after parsing attributes in process `syz.7.7100'. [ 1093.919335][T28829] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7127'. [ 1094.260795][T28849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7132'. [ 1094.820868][T28859] loop7: detected capacity change from 0 to 512 [ 1094.833783][T28859] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1094.862399][T28859] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.7140: iget: bad i_size value: 38620345925642 [ 1094.886650][T28859] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1094.886960][T28859] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.7140: couldn't read orphan inode 15 (err -117) [ 1094.908125][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1094.908151][ C0] EXT4-fs (loop7): initial error at time 2000000283: ext4_orphan_get:1397: inode 15 [ 1094.908200][ C0] EXT4-fs (loop7): last error at time 2000000283: ext4_orphan_get:1397: inode 15 [ 1094.989075][T28859] loop7: lost filesystem error report for type 5 error -117 [ 1094.991439][T28859] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.111982][ T28] audit: type=1400 audit(2000000283.968:1491): avc: denied { write } for pid=28858 comm="syz.7.7140" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1095.200018][T28859] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.7140: bg 0: block 5: invalid block bitmap [ 1095.213900][T28859] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1200 with error 28 [ 1095.226201][ T28] audit: type=1400 audit(2000000284.061:1492): avc: denied { mounton } for pid=28883 comm="syz.0.7150" path="/file0" dev="ramfs" ino=84328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1095.269690][T28859] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1095.269690][T28859] [ 1095.280477][ T28] audit: type=1400 audit(2000000284.117:1493): avc: denied { attach_queue } for pid=28885 comm="syz.3.7151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1095.315579][T28859] EXT4-fs (loop7): Total free blocks count 0 [ 1095.325059][T28859] EXT4-fs (loop7): Free/Dirty block details [ 1095.331937][T28859] EXT4-fs (loop7): free_blocks=0 [ 1095.337468][T28859] EXT4-fs (loop7): dirty_blocks=1204 [ 1095.343507][T28859] EXT4-fs (loop7): Block reservation details [ 1095.350097][T28859] EXT4-fs (loop7): i_reserved_data_blocks=1204 [ 1095.445996][T22805] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 1095.499096][T22805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.621459][T28927] xt_hashlimit: max too large, truncated to 1048576 [ 1095.787344][T28943] loop7: detected capacity change from 0 to 1764 [ 1095.796434][ T28] audit: type=1400 audit(2000000284.613:1494): avc: denied { mount } for pid=28942 comm="syz.7.7177" name="/" dev="loop7" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 1095.838821][ T28] audit: type=1400 audit(2000000284.632:1495): avc: denied { unmount } for pid=22805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 1097.142689][T28980] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7191'. [ 1097.158870][T28979] warn_alloc: 1 callbacks suppressed [ 1097.158902][T28979] syz.8.7190: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1097.193396][T28980] netlink: 19 bytes leftover after parsing attributes in process `syz.7.7191'. [ 1097.232370][T28979] CPU: 1 UID: 0 PID: 28979 Comm: syz.8.7190 Tainted: G W syzkaller #0 PREEMPT(full) [ 1097.232412][T28979] Tainted: [W]=WARN [ 1097.232421][T28979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1097.232438][T28979] Call Trace: [ 1097.232447][T28979] [ 1097.232457][T28979] __dump_stack+0x1d/0x30 [ 1097.232529][T28979] dump_stack_lvl+0x95/0xd0 [ 1097.232553][T28979] dump_stack+0x15/0x1b [ 1097.232651][T28979] warn_alloc+0x145/0x1c0 [ 1097.232681][T28979] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 1097.232711][T28979] ? __pfx_futex_wake_mark+0x10/0x10 [ 1097.232735][T28979] ? __rcu_read_unlock+0x4e/0x70 [ 1097.232756][T28979] ? avc_has_perm_noaudit+0xab/0x130 [ 1097.232800][T28979] ? should_fail_ex+0x30/0x280 [ 1097.232833][T28979] vmalloc_user_noprof+0x7d/0xb0 [ 1097.233004][T28979] ? xskq_create+0x80/0xe0 [ 1097.233110][T28979] xskq_create+0x80/0xe0 [ 1097.233137][T28979] xsk_init_queue+0x70/0xb0 [ 1097.233202][T28979] xsk_setsockopt+0x477/0x640 [ 1097.233236][T28979] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1097.233267][T28979] __sys_setsockopt+0x184/0x200 [ 1097.233304][T28979] __x64_sys_setsockopt+0x64/0x80 [ 1097.233368][T28979] x64_sys_call+0x2327/0x3020 [ 1097.233442][T28979] do_syscall_64+0x12c/0x3b0 [ 1097.233478][T28979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.233504][T28979] RIP: 0033:0x7fdaa743cdd9 [ 1097.233522][T28979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1097.233545][T28979] RSP: 002b:00007fdaa5e97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1097.233595][T28979] RAX: ffffffffffffffda RBX: 00007fdaa76b5fa0 RCX: 00007fdaa743cdd9 [ 1097.233613][T28979] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 1097.233630][T28979] RBP: 00007fdaa74d2d69 R08: 0000000000000004 R09: 0000000000000000 [ 1097.233645][T28979] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1097.233710][T28979] R13: 00007fdaa76b6038 R14: 00007fdaa76b5fa0 R15: 00007ffc237a0148 [ 1097.233734][T28979] [ 1097.449904][T28991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7195'. [ 1097.468535][T28979] Mem-Info: [ 1097.555902][T29001] loop7: detected capacity change from 0 to 1024 [ 1097.569540][T28979] active_anon:44530 inactive_anon:4 isolated_anon:0 [ 1097.569540][T28979] active_file:27493 inactive_file:2913 isolated_file:0 [ 1097.569540][T28979] unevictable:0 dirty:210 writeback:0 [ 1097.569540][T28979] slab_reclaimable:3979 slab_unreclaimable:20588 [ 1097.569540][T28979] mapped:32263 shmem:36553 pagetables:1707 [ 1097.569540][T28979] sec_pagetables:0 bounce:0 [ 1097.569540][T28979] kernel_misc_reclaimable:0 [ 1097.569540][T28979] free:1817997 free_pcp:21728 free_cma:0 [ 1097.617847][T29001] EXT4-fs: Ignoring removed orlov option [ 1097.624203][T28979] Node 0 active_anon:178468kB inactive_anon:16kB active_file:109972kB inactive_file:11652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129052kB dirty:840kB writeback:0kB shmem:146560kB kernel_stack:4128kB pagetables:6828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1097.667615][T29001] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1097.705719][T28979] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1097.791809][T22805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.878227][T28979] lowmem_reserve[]: 0 2878 7857 7857 [ 1097.916605][T28979] Node 0 DMA32 free:2944528kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948052kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 1098.045133][T28979] lowmem_reserve[]: 0 0 4978 4978 [ 1098.051853][T28979] Node 0 Normal free:4311836kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:177836kB inactive_anon:16kB active_file:109972kB inactive_file:11652kB unevictable:0kB writepending:844kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:83248kB local_pcp:24952kB free_cma:0kB [ 1098.086093][T28979] lowmem_reserve[]: 0 0 0 0 [ 1098.091855][T28979] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1098.107768][T28979] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944528kB [ 1098.138327][T28979] Node 0 Normal: 3110*4kB (UME) 1090*8kB (UME) 505*16kB (UM) 943*32kB (UME) 936*64kB (UME) 340*128kB (UME) 200*256kB (UM) 118*512kB (UME) 101*1024kB (UME) 43*2048kB (UME) 939*4096kB (UM) = 4312088kB [ 1098.158864][T28979] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1098.225135][T28979] 68580 total pagecache pages [ 1098.230281][T28979] 5 pages in swap cache [ 1098.249893][T28979] Free swap = 124976kB [ 1098.257979][T28979] Total swap = 124996kB [ 1098.262497][T28979] 2097051 pages RAM [ 1098.274890][T28979] 0 pages HighMem/MovableOnly [ 1098.279986][T28979] 81639 pages reserved [ 1099.670726][T29093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.679511][T29093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.996806][T29120] loop7: detected capacity change from 0 to 764 [ 1101.603784][ T28] audit: type=1400 audit(2000000546.044:1496): avc: denied { bind } for pid=29254 comm="syz.7.7299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1101.658364][ T28] audit: type=1400 audit(2000000546.044:1497): avc: denied { node_bind } for pid=29254 comm="syz.7.7299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1105.294272][ T28] audit: type=1400 audit(2000000549.487:1498): avc: denied { create } for pid=29465 comm="syz.7.7362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1105.626506][ T28] audit: type=1400 audit(2000000549.749:1499): avc: denied { setopt } for pid=29465 comm="syz.7.7362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1106.690855][ T28] audit: type=1400 audit(2000000550.798:1500): avc: denied { create } for pid=29485 comm="syz.3.7369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1107.180762][T29534] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7388'. [ 1107.782693][T29556] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7395'. [ 1108.737284][ T28] audit: type=1400 audit(2000000552.707:1501): avc: denied { name_bind } for pid=29566 comm="syz.0.7400" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1108.769527][T29569] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7402'. [ 1108.842166][T29579] syz_tun: entered allmulticast mode [ 1108.912513][T29592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.940814][T29594] warn_alloc: 2 callbacks suppressed [ 1108.940862][T29594] syz.6.7411: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1108.945308][T29592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.947168][T29594] ,cpuset=/,mems_allowed=0 [ 1108.981722][T29594] CPU: 1 UID: 0 PID: 29594 Comm: syz.6.7411 Tainted: G W syzkaller #0 PREEMPT(full) [ 1108.981765][T29594] Tainted: [W]=WARN [ 1108.981774][T29594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1108.981790][T29594] Call Trace: [ 1108.981798][T29594] [ 1108.981884][T29594] __dump_stack+0x1d/0x30 [ 1108.981911][T29594] dump_stack_lvl+0x95/0xd0 [ 1108.981933][T29594] dump_stack+0x15/0x1b [ 1108.981957][T29594] warn_alloc+0x145/0x1c0 [ 1108.981981][T29594] ? _raw_spin_unlock+0x9/0x30 [ 1108.982061][T29594] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 1108.982093][T29594] ? irqentry_exit+0x527/0x5b0 [ 1108.982116][T29594] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 1108.982146][T29594] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 1108.982195][T29594] ? selinux_netlbl_socket_setsockopt+0x73/0x2f0 [ 1108.982229][T29594] ? __sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 1108.982339][T29594] ? should_fail_ex+0x30/0x280 [ 1108.982375][T29594] vmalloc_user_noprof+0x7d/0xb0 [ 1108.982404][T29594] ? xskq_create+0x80/0xe0 [ 1108.982455][T29594] xskq_create+0x80/0xe0 [ 1108.982502][T29594] xsk_init_queue+0x70/0xb0 [ 1108.982529][T29594] xsk_setsockopt+0x477/0x640 [ 1108.982555][T29594] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1108.982661][T29594] __sys_setsockopt+0x184/0x200 [ 1108.982689][T29594] __x64_sys_setsockopt+0x64/0x80 [ 1108.982716][T29594] x64_sys_call+0x2327/0x3020 [ 1108.982806][T29594] do_syscall_64+0x12c/0x3b0 [ 1108.982840][T29594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.982867][T29594] RIP: 0033:0x7f03beddcdd9 [ 1108.982930][T29594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.983027][T29594] RSP: 002b:00007f03bd837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1108.983055][T29594] RAX: ffffffffffffffda RBX: 00007f03bf055fa0 RCX: 00007f03beddcdd9 [ 1108.983070][T29594] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 1108.983086][T29594] RBP: 00007f03bee72d69 R08: 0000000000000004 R09: 0000000000000000 [ 1108.983155][T29594] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1108.983170][T29594] R13: 00007f03bf056038 R14: 00007f03bf055fa0 R15: 00007ffc83b70378 [ 1108.983189][T29594] [ 1108.983505][T29594] Mem-Info: [ 1109.031306][ T28] audit: type=1400 audit(2000000552.987:1502): avc: denied { setopt } for pid=29604 comm="syz.0.7418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1109.042486][T29594] active_anon:41585 inactive_anon:4 isolated_anon:0 [ 1109.042486][T29594] active_file:27493 inactive_file:2917 isolated_file:0 [ 1109.042486][T29594] unevictable:0 dirty:123 writeback:0 [ 1109.042486][T29594] slab_reclaimable:3983 slab_unreclaimable:20617 [ 1109.042486][T29594] mapped:29418 shmem:33620 pagetables:1788 [ 1109.042486][T29594] sec_pagetables:0 bounce:0 [ 1109.042486][T29594] kernel_misc_reclaimable:0 [ 1109.042486][T29594] free:1825140 free_pcp:17362 free_cma:0 [ 1109.206433][T29614] syz_tun: entered allmulticast mode [ 1109.215536][T29594] Node 0 active_anon:177824kB inactive_anon:16kB active_file:109972kB inactive_file:11668kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:129156kB dirty:492kB writeback:0kB shmem:145848kB kernel_stack:4272kB pagetables:7616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1109.317523][T29594] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1109.348802][T29594] lowmem_reserve[]: 0 2878 7857 7857 [ 1109.354606][T29594] Node 0 DMA32 free:2944528kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948052kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 1109.414424][T29594] lowmem_reserve[]: 0 0 4978 4978 [ 1109.420987][T29594] Node 0 Normal free:4340672kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:177824kB inactive_anon:16kB active_file:109972kB inactive_file:11668kB unevictable:0kB writepending:492kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:54536kB local_pcp:22696kB free_cma:0kB [ 1109.501696][T29594] lowmem_reserve[]: 0 0 0 0 [ 1109.508480][T29594] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1109.523629][T29594] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944528kB [ 1109.545168][T29594] Node 0 Normal: 3142*4kB (UME) 1891*8kB (UME) 738*16kB (UME) 1508*32kB (UME) 946*64kB (UME) 340*128kB (UM) 200*256kB (UM) 117*512kB (UME) 101*1024kB (UME) 43*2048kB (UME) 939*4096kB (UM) = 4340560kB [ 1109.603112][T29594] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1109.613362][T29594] 66873 total pagecache pages [ 1109.619453][T29594] 5 pages in swap cache [ 1109.746365][T29594] Free swap = 124976kB [ 1109.775422][T29594] Total swap = 124996kB [ 1109.854853][T29594] 2097051 pages RAM [ 1109.859069][T29594] 0 pages HighMem/MovableOnly [ 1109.864000][T29594] 81639 pages reserved [ 1109.869961][T29629] syzkaller0: entered promiscuous mode [ 1109.879163][T29629] syzkaller0: entered allmulticast mode [ 1109.950943][T29640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7431'. [ 1110.345111][T29657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.422994][T29657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.972394][T29682] loop7: detected capacity change from 0 to 128 [ 1110.979961][T29682] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1110.999584][T29682] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1111.023096][T29682] ext2 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1111.036291][ T28] audit: type=1400 audit(2000000554.868:1503): avc: denied { write } for pid=29681 comm="syz.7.7447" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1111.037130][T29682] EXT4-fs error (device loop7): ext4_append:79: inode #2: comm syz.7.7447: Logical block already allocated [ 1111.147521][T22805] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1111.467418][T29721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.485594][T29721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.488937][T29723] syz_tun: entered allmulticast mode [ 1111.498973][T29721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1111.514402][T29721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.420800][ T3406] kernel write not supported for file [eventfd] (pid: 3406 comm: kworker/1:4) [ 1112.420892][ T28] ================================================================== [ 1112.437822][ T28] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 1112.444464][ T28] [ 1112.446813][ T28] write to 0xffffffff86c77060 of 8 bytes by task 3406 on cpu 1: [ 1112.454475][ T28] data_alloc+0x31c/0x390 [ 1112.458840][ T28] prb_reserve+0x8d6/0xad0 [ 1112.463276][ T28] vprintk_store+0x54a/0x910 [ 1112.467872][ T28] vprintk_emit+0x1a4/0x600 [ 1112.472392][ T28] vprintk_default+0x26/0x30 [ 1112.476991][ T28] vprintk+0x1d/0x30 [ 1112.480900][ T28] _printk+0x79/0xa0 [ 1112.484800][ T28] warn_unsupported+0x80/0x90 [ 1112.489494][ T28] __kernel_write_iter+0x57d/0x590 [ 1112.494622][ T28] kernel_write+0x1f6/0x410 [ 1112.499160][ T28] p9_write_work+0x312/0x720 [ 1112.503854][ T28] process_scheduled_works+0x4f0/0x9c0 [ 1112.509331][ T28] worker_thread+0x58a/0x780 [ 1112.513941][ T28] kthread+0x22a/0x280 [ 1112.518021][ T28] ret_from_fork+0x146/0x330 [ 1112.522624][ T28] ret_from_fork_asm+0x1a/0x30 [ 1112.527400][ T28] [ 1112.529725][ T28] read to 0xffffffff86c77060 of 8 bytes by task 28 on cpu 0: [ 1112.537100][ T28] prb_reserve+0x216/0xad0 [ 1112.541542][ T28] vprintk_store+0x54a/0x910 [ 1112.546144][ T28] vprintk_emit+0x1a4/0x600 [ 1112.550661][ T28] vprintk_default+0x26/0x30 [ 1112.555284][ T28] vprintk+0x1d/0x30 [ 1112.559206][ T28] _printk+0x79/0xa0 [ 1112.563119][ T28] kauditd_hold_skb+0x1b1/0x1c0 [ 1112.567992][ T28] kauditd_send_queue+0x273/0x2c0 [ 1112.573037][ T28] kauditd_thread+0x444/0x670 [ 1112.577728][ T28] kthread+0x22a/0x280 [ 1112.581889][ T28] ret_from_fork+0x146/0x330 [ 1112.586580][ T28] ret_from_fork_asm+0x1a/0x30 [ 1112.591358][ T28] [ 1112.593686][ T28] value changed: 0x0000000000003b50 -> 0x00000000000bd390 [ 1112.600886][ T28] [ 1112.603223][ T28] Reported by Kernel Concurrency Sanitizer on: [ 1112.609380][ T28] CPU: 0 UID: 0 PID: 28 Comm: kauditd Tainted: G W syzkaller #0 PREEMPT(full) [ 1112.619827][ T28] Tainted: [W]=WARN [ 1112.623636][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1112.633696][ T28] ================================================================== [ 1112.420800][ T28] audit: type=1400 audit(2000000556.160:1504): avc: denied { mounton } for pid=29771 comm="syz.0.7485" path="/307/file0" dev="tmpfs" ino=1593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1