last executing test programs: 5m26.814033714s ago: executing program 32 (id=2691): socketpair$unix(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x8}, {0x2, 0x3ffd, @remote}, {0x2, 0x0, @empty}, 0xab852ebbeefbd50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010, 0x0, 0xfffd}) 4m0.811234284s ago: executing program 33 (id=3754): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x0, 0x0, 0x401, 0x8001, 0x401402}, 0x4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PRATE64={0xc, 0x5, 0x686638524b0fe9fe}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44080) 3m16.940587852s ago: executing program 34 (id=4188): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r0, 0x3, 0x4, 0x8000c62) 2m50.733591797s ago: executing program 7 (id=5031): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006080)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xfb}}, @filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x2, 0x7, 0x7, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 2m50.669524439s ago: executing program 7 (id=5032): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) setuid(0xee01) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) 2m50.642051939s ago: executing program 7 (id=5033): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in=@loopback, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x1000000, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m49.665444691s ago: executing program 7 (id=5042): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 2m49.618812472s ago: executing program 7 (id=5044): socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x6c7e, &(0x7f0000000140)={0x0, 0x0, 0x3000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040051) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2217, 0x7721, 0x16, 0x0, 0x0) 2m49.38964424s ago: executing program 7 (id=5047): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x100, 0x43, 0xa0, 0x100, 0x98, 0x1b0, 0x178, 0x178, 0x1b0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast2, 0x0, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0xe0, 0x100, 0x0, {0x0, 0x7a010000}, [@common=@ttl={{0x28}, {0x3, 0x8}}, @common=@unspec=@helper={{0x48}, {0x1, 'RAS\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x2f}, 0x0, 0xffffff00, 'pim6reg1\x00', 'pim6reg\x00', {}, {}, 0x50, 0x1, 0x6}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5a091f126a6bc52700"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc318"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m49.38140138s ago: executing program 35 (id=5047): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x100, 0x43, 0xa0, 0x100, 0x98, 0x1b0, 0x178, 0x178, 0x1b0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast2, 0x0, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0xe0, 0x100, 0x0, {0x0, 0x7a010000}, [@common=@ttl={{0x28}, {0x3, 0x8}}, @common=@unspec=@helper={{0x48}, {0x1, 'RAS\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x2f}, 0x0, 0xffffff00, 'pim6reg1\x00', 'pim6reg\x00', {}, {}, 0x50, 0x1, 0x6}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5a091f126a6bc52700"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc318"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m47.049630324s ago: executing program 6 (id=5084): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68000000000901010000000000000000010000020900010073797a30000000003c0002cc769543a5f6718fdb111c1d002c00018014000300fc01000000000000000000000000000014000400200100000005000000000000000000010c000280050001"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) 2m46.964370347s ago: executing program 6 (id=5087): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000340)='timerslack_ns\x00') setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) cachestat(r2, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0x0) 2m46.877801229s ago: executing program 6 (id=5088): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4040000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x35}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x89b, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x4, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd23}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m46.827073121s ago: executing program 6 (id=5090): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x808719, &(0x7f0000019400)={[{@mb_optimize_scan}, {@noblock_validity}, {@discard}, {@errors_remount}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@commit={'commit', 0x3d, 0x5}}, {@nolazytime}, {@dax_inode}, {@prjquota}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@fsname={'fsname', 0x3d, '\\$'}}, {@context={'context', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x2c}}], 0x2c}, 0x42, 0x4fc, &(0x7f0000000e40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x64) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x194d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1802a53, 0x0, 0xfa, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 2m46.341246377s ago: executing program 2 (id=5097): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000200)="259a86c690cf2723463fbce83146", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2m46.25572929s ago: executing program 2 (id=5100): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2m46.2423646s ago: executing program 6 (id=5101): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x106220, 0x1000, 0x22da, 0x8, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) 2m46.194809101s ago: executing program 2 (id=5102): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x17, r2, 0x1, 0x7, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m46.153390163s ago: executing program 6 (id=5104): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m46.150012853s ago: executing program 2 (id=5105): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x8) 2m46.100580284s ago: executing program 2 (id=5107): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8083, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68190, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c76c, 0x5, 0x0, 0x2, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40481, 0x0) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, 0x0) dup(r1) unshare(0x400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xa5, 0x8}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xd9, r2, 0x800000000000000}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="2d64657669636573202dfc0bd5ad4d6114ce76970177db9f637d9542150b766837118b44a1326f895c1f3c0ae153d4397402149c6901565dd32c6b73eea3672401a4fae9b6f2346e236337c919b11734e0af6f22c12d1d3cc49f2705bbb85681538a82855e68efef9da27bebcb05a78500ebd41bb3a75244ac5cf946ad4da75f66fa20e9c8"], 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@can_delroute={0x3c, 0x19, 0x1, 0x70bd28, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0x3, 0xffffffffffffffff, 0xfffffffffffffffd}}, @CGW_MOD_AND={0x15, 0x1, {{{}, 0x4, 0x2, 0x0, 0x0, "92c9040000001caf"}, 0x3}}]}, 0x3c}}, 0x20000) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r7, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r3, 0x0, r6, 0x0, 0x10d00, 0xf) r8 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x50, 0x14, 0xf0b, 0x70bd29, 0x3, {0x2, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0xb}, {0x4, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7f}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x9}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000540)={0x6, 0x7, 0x10021da0, 0x0, 0xff, "42f42749a2ed195a14c84953dc7e8e5aec7776", 0xfffffffa, 0x8000095f}) r9 = socket$rds(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) recvmsg(r9, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=""/98, 0x62}, 0x10060) 2m45.735283846s ago: executing program 2 (id=5110): ioctl$TCSETS(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0x80000d1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x10, 0x0, 0x20200000}}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m45.691823997s ago: executing program 36 (id=5110): ioctl$TCSETS(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0x80000d1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x10, 0x0, 0x20200000}}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m31.053530954s ago: executing program 37 (id=5104): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m7.589888541s ago: executing program 8 (id=5686): io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 2m7.485639814s ago: executing program 8 (id=5690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100001002dbd7000fedbdf2500000000", @ANYRES32=r4, @ANYBLOB="00140000000000003000128008000100736974002400028006000f00026773"], 0x50}}, 0x0) 2m7.476935205s ago: executing program 8 (id=5692): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) 2m7.428181707s ago: executing program 8 (id=5693): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x461, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc0002, 0x98) sendfile(r2, r1, 0x0, 0x40001) 2m7.282874271s ago: executing program 8 (id=5698): sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 2m7.01087806s ago: executing program 8 (id=5707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003580)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0x8}, {}, {0x2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8849}, 0x448c4) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x6, 0x2}, {0x0, 0xfff1}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040851}, 0x4041080) 2m6.971550261s ago: executing program 38 (id=5707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003580)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0x8}, {}, {0x2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8849}, 0x448c4) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x6, 0x2}, {0x0, 0xfff1}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040851}, 0x4041080) 1m29.025653775s ago: executing program 0 (id=6361): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}, 0x2fc3}], 0x1, 0x40000100, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 1m28.934569638s ago: executing program 0 (id=6366): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x200, 0x0) ppoll(&(0x7f0000001040)=[{r0, 0x12a4}], 0x1, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') pread64(r1, &(0x7f0000000000)=""/153, 0x99, 0x19a55d1a) prctl$PR_GET_PDEATHSIG(0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x2000c010) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x50) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) 1m28.659908206s ago: executing program 0 (id=6367): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x40) 1m28.5498012s ago: executing program 0 (id=6368): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) listen(0xffffffffffffffff, 0xfff) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000001) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000040), 0x6) gettid() gettid() 1m28.390069335s ago: executing program 0 (id=6371): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x5, 0x0, &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xf3a, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@noload}]}, 0x1, 0x459, &(0x7f0000000240)="$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") open(0x0, 0x8000, 0x0) 1m27.749408405s ago: executing program 0 (id=6385): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgget$private(0x0, 0x40a) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x4000080) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x2, 0x0) rmdir(0x0) 1m27.722788896s ago: executing program 39 (id=6385): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgget$private(0x0, 0x40a) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x4000080) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x2, 0x0) rmdir(0x0) 4.751817029s ago: executing program 9 (id=7205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24041090}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 4.608722574s ago: executing program 9 (id=7210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x6}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r3, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r4, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 4.330803923s ago: executing program 3 (id=7214): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(0xffffffffffffffff) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.339911274s ago: executing program 5 (id=7215): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000004000000850000002a0000001801000020786c2500"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) 2.226538639s ago: executing program 9 (id=7217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) io_setup(0x8, &(0x7f0000004200)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r3, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) msgrcv(0x0, &(0x7f0000001240)={0x0, ""/147}, 0x9b, 0x3, 0x2000) 2.222634259s ago: executing program 4 (id=7218): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x4, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000140), 0x852, 0x800) ioctl$RTC_UIE_ON(r3, 0x7003) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 2.161673291s ago: executing program 5 (id=7219): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2.161074561s ago: executing program 1 (id=7220): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x40, 0x3, 0x0, 0x10000000000, 0x8880, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_bp={0x0, 0x3}, 0x4008, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r7, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 2.039980295s ago: executing program 4 (id=7221): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4403b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f0000000180)={0x0, 0x0, 0x240000000000, 0x3, 0x6, 0x7d}) syz_pidfd_open(0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 2.038903795s ago: executing program 3 (id=7222): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x5a, 0x7, 0xfffffff7, 0x1, 0x2, 0x8, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x4, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x8002, 0xfffffffa, 0x1, 0x10001, 0x6, 0x1, 0x4, 0x8, 0x8, 0x7, 0x81, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x10, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x46a, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0xa000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb6, 0x1, 0x80, 0x8, 0xb, 0x2}, {0xd, 0x1, 0x0, 0xc71b, 0x8000, 0x4}, 0x7, 0xfffffff0, 0x5a9}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 1.462812313s ago: executing program 1 (id=7223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x2, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r5, 0x1d}, 0x80, &(0x7f0000000080), 0x1}, 0x4008081) 1.337117327s ago: executing program 1 (id=7224): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8040) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x8000, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) 1.258642129s ago: executing program 5 (id=7225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r9, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24040812) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0xffffffff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 1.25813522s ago: executing program 4 (id=7226): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x1d, 0x20000002, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x64, r4, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}}, 0x4c004) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 1.198146372s ago: executing program 9 (id=7227): socket$kcm(0x1e, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) epoll_create1(0x0) socket(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) 1.197382782s ago: executing program 3 (id=7228): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x6, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x40, 0x6, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x6, 0x0, r0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180300000000008000000000001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000840300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.130077364s ago: executing program 9 (id=7229): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x820000, &(0x7f0000000080)={[{@noinit_itable}, {@nobh}, {@noauto_da_alloc}, {@grpquota}, {@lazytime}, {@sysvgroups}, {@quota}, {@oldalloc}, {@noauto_da_alloc}]}, 0x1, 0x47f, &(0x7f00000010c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d33, 0x5084, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x5, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000043c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000040) close(0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff7) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4004743b, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_read_part_table(0x4080, &(0x7f0000000000)="$eJzszz1KM1EUBuB3Jj9MQorvA8EuCG5ANxBcgG2wzwKsxFZQshHBJgjWFoKrcDsj488kE1IGRHmeYu45551770z4WcXnUuZtO/m3VZRt8lAmi8f/SY5GWT5/Tfs7Tj85zWBYFZkkuUpvI5mfN4/V3v4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Beq6vmnWouzO+9dPG13VDRfFx5a2v+1lMJsWOWiHhzuuev0u5qu9fDoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Lf1Ot1wXV5UTVhl3E5G3Z2TJPfHuZtNi1TrY5YvSV03/bj7/lnKzkWX7+zPwQAAAAgEsCRTCyLKk7jnZrCb/doDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxIAAAAAQf9ftyNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACmCgAA//9AfRaF") 1.078444305s ago: executing program 3 (id=7230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x125d}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 957.080539ms ago: executing program 1 (id=7231): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r2, @ANYBLOB="05002d000100000008000600", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8480, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x1, 0x249, &(0x7f0000000d80)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000001d80)={&(0x7f00000000c0)={0xa, 0x4e23, 0xff, @local, 0x400}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x87}}}, @dstopts={{0x18, 0x29, 0x37, {0x2f}}}], 0x30}, 0x10) open_tree(0xffffffffffffffff, 0x0, 0x3901) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) 884.511162ms ago: executing program 5 (id=7232): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000000c0), 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) 806.417094ms ago: executing program 4 (id=7233): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x10000) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300010000000000fcffff0707000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c000a80"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 721.610317ms ago: executing program 3 (id=7234): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbb8, &(0x7f0000000c00)="$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") socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r3, &(0x7f0000000480)=""/177, 0xb1, 0xe0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, 0x0) syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x1000, 0x0, 0xfffffffc}, &(0x7f0000000140), 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x6400, 0x0, 0x3) 699.869128ms ago: executing program 4 (id=7235): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x444, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 642.809069ms ago: executing program 5 (id=7236): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, 0x0, 0x4008000) 565.643642ms ago: executing program 1 (id=7237): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 487.458374ms ago: executing program 4 (id=7238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x3001) 426.544246ms ago: executing program 3 (id=7239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) io_setup(0x8, &(0x7f0000004200)) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r3, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) msgrcv(0x0, &(0x7f0000001240)={0x0, ""/147}, 0x9b, 0x3, 0x2000) 365.673958ms ago: executing program 5 (id=7240): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) readahead(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) io_uring_setup(0x7348, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) 261.776121ms ago: executing program 1 (id=7241): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 0s ago: executing program 9 (id=7242): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket(0x840000000002, 0x3, 0x100) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x33, 0x0, 0x0) kernel console output (not intermixed with test programs): 387.003213][T19827] loop8: detected capacity change from 0 to 128 [ 387.010372][T19825] loop9: detected capacity change from 0 to 512 [ 387.017207][T19825] EXT4-fs: Mount option(s) incompatible with ext2 [ 387.054526][T19827] syz.8.5652: attempt to access beyond end of device [ 387.054526][T19827] loop8: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 387.096923][T19827] syz.8.5652: attempt to access beyond end of device [ 387.096923][T19827] loop8: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 387.125331][T19827] Buffer I/O error on dev loop8, logical block 156, lost async page write [ 387.134228][T19827] syz.8.5652: attempt to access beyond end of device [ 387.134228][T19827] loop8: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 387.148518][T19827] Buffer I/O error on dev loop8, logical block 157, lost async page write [ 387.157313][T19827] syz.8.5652: attempt to access beyond end of device [ 387.157313][T19827] loop8: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 387.186878][T19827] Buffer I/O error on dev loop8, logical block 158, lost async page write [ 387.201053][T19835] syzkaller0: entered promiscuous mode [ 387.205247][T19827] syz.8.5652: attempt to access beyond end of device [ 387.205247][T19827] loop8: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 387.214111][T19835] syzkaller0: entered allmulticast mode [ 387.234902][T19827] Buffer I/O error on dev loop8, logical block 159, lost async page write [ 387.249949][T19827] syz.8.5652: attempt to access beyond end of device [ 387.249949][T19827] loop8: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 387.277698][T19827] Buffer I/O error on dev loop8, logical block 160, lost async page write [ 387.287816][T19827] syz.8.5652: attempt to access beyond end of device [ 387.287816][T19827] loop8: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 387.303256][T19827] Buffer I/O error on dev loop8, logical block 161, lost async page write [ 387.312209][T19827] syz.8.5652: attempt to access beyond end of device [ 387.312209][T19827] loop8: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 387.339884][T19827] Buffer I/O error on dev loop8, logical block 150, lost async page write [ 387.350165][T19827] syz.8.5652: attempt to access beyond end of device [ 387.350165][T19827] loop8: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 387.380700][T19827] Buffer I/O error on dev loop8, logical block 151, lost async page write [ 387.580882][T19856] syzkaller1: entered promiscuous mode [ 387.586536][T19856] syzkaller1: entered allmulticast mode [ 387.721029][T19865] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5676'. [ 388.020160][T19888] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5675'. [ 388.119775][T19892] netlink: 'syz.1.5678': attribute type 5 has an invalid length. [ 388.512595][T19901] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 388.512595][T19901] program syz.0.5681 not setting count and/or reply_len properly [ 388.530951][T19901] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 388.530951][T19901] program syz.0.5681 not setting count and/or reply_len properly [ 388.549454][T19901] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 388.549454][T19901] program syz.0.5681 not setting count and/or reply_len properly [ 388.715148][T19921] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5690'. [ 388.736481][T19923] loop4: detected capacity change from 0 to 7 [ 388.755004][T19923] loop4: [ 388.811699][T19929] loop8: detected capacity change from 0 to 512 [ 388.856023][T19929] EXT4-fs (loop8): 1 truncate cleaned up [ 388.869867][T19929] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.938869][T17754] EXT4-fs error (device loop8): __ext4_iget:5481: inode #12: block 2: comm syz-executor: invalid block [ 388.956298][T17754] EXT4-fs error (device loop8): __ext4_iget:5481: inode #12: block 2: comm syz-executor: invalid block [ 389.069754][T19947] loop9: detected capacity change from 0 to 128 [ 389.086018][T19947] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 389.098817][T19947] FAT-fs (loop9): error, invalid FAT chain (i_pos 548, last_block 8) [ 389.107023][T19947] FAT-fs (loop9): Filesystem has been set read-only [ 389.114515][T19947] FAT-fs (loop9): error, corrupted file size (i_pos 548, 522) [ 389.123515][T19949] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5703'. [ 389.174437][T17754] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.700808][T19967] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.709846][T19967] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.722079][T19967] bridge_slave_0: entered allmulticast mode [ 389.729386][T19967] bridge_slave_0: entered promiscuous mode [ 389.737079][T19967] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.744346][T19967] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.751882][T19967] bridge_slave_1: entered allmulticast mode [ 389.758860][T19967] bridge_slave_1: entered promiscuous mode [ 389.800654][T19967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.821242][T19967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.880416][T19967] team0: Port device team_slave_0 added [ 389.893907][T19967] team0: Port device team_slave_1 added [ 389.964966][T19967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.006642][T19967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.057927][T19967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.092048][T19967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.110779][T19967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.172827][T19967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.276615][ T30] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.315267][T19967] hsr_slave_0: entered promiscuous mode [ 390.336293][T19967] hsr_slave_1: entered promiscuous mode [ 390.350115][T19967] debugfs: 'hsr0' already exists in 'hsr' [ 390.376989][T19967] Cannot create hsr debugfs directory [ 390.423252][ T30] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.507527][ T30] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.601929][ T30] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.784416][ T30] bridge_slave_1: left allmulticast mode [ 390.802008][ T30] bridge_slave_1: left promiscuous mode [ 390.821482][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.833157][T20039] netlink: 'syz.9.5731': attribute type 1 has an invalid length. [ 390.853154][ T30] bridge_slave_0: left allmulticast mode [ 390.862543][ T30] bridge_slave_0: left promiscuous mode [ 390.879964][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.914952][ T30] pimreg: left allmulticast mode [ 391.083771][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 391.083810][ T28] audit: type=1400 audit(1779928395.283:1743): avc: denied { write } for pid=20050 comm="syz.1.5734" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 391.115323][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.131511][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.142569][ T30] bond0 (unregistering): Released all slaves [ 391.164865][T20039] bond2: entered promiscuous mode [ 391.179715][T20039] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.204505][T20045] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 391.234273][T20045] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 391.252505][T20045] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 391.325995][ T30] hsr_slave_0: left promiscuous mode [ 391.332604][ T30] hsr_slave_1: left promiscuous mode [ 391.357039][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.381451][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.389261][ T28] audit: type=1400 audit(1779928395.583:1744): avc: denied { setopt } for pid=20059 comm="syz.1.5735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 391.425160][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.455994][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.484677][ T30] veth1_macvtap: left promiscuous mode [ 391.493941][ T30] veth0_macvtap: left promiscuous mode [ 391.508764][ T30] veth1_vlan: left promiscuous mode [ 391.522249][ T30] veth0_vlan: left promiscuous mode [ 391.535715][ T28] audit: type=1400 audit(1779928395.733:1745): avc: denied { write } for pid=20055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.622057][ T28] audit: type=1400 audit(1779928395.823:1746): avc: denied { write } for pid=20077 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.825217][ T30] team0 (unregistering): Port device team_slave_1 removed [ 391.843333][ T28] audit: type=1400 audit(1779928396.043:1747): avc: denied { write } for pid=20083 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.874955][ T30] team0 (unregistering): Port device team_slave_0 removed [ 391.906943][ T28] audit: type=1400 audit(1779928396.103:1748): avc: denied { write } for pid=20099 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.999622][T20067] team0: Port device vlan2 added [ 392.095014][ T28] audit: type=1400 audit(1779928396.293:1749): avc: denied { write } for pid=20104 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.151663][ T4474] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 392.182842][ T4474] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 392.197762][ T28] audit: type=1400 audit(1779928396.393:1750): avc: denied { write } for pid=20120 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.287092][T19967] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 392.306108][T19967] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.318994][T19967] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 392.343112][T19967] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.362860][T19967] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 392.413833][T19967] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.430852][T20130] lo: entered allmulticast mode [ 392.445043][ T30] IPVS: stop unused estimator thread 0... [ 392.450917][T19967] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 392.492957][T19967] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.581205][T19956] syz.9.5706 (19956) used greatest stack depth: 7176 bytes left [ 392.598814][T19967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.610808][ T28] audit: type=1400 audit(1779928396.813:1751): avc: denied { map } for pid=20141 comm="syz.5.5747" path="socket:[56509]" dev="sockfs" ino=56509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 392.636073][T19967] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.674897][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.682131][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.703461][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.710675][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.740321][T20148] netlink: 'syz.5.5749': attribute type 19 has an invalid length. [ 392.748694][T20148] netlink: 14552 bytes leftover after parsing attributes in process `syz.5.5749'. [ 392.826350][ T28] audit: type=1400 audit(1779928397.023:1752): avc: denied { write } for pid=20140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.930544][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 393.048445][T19967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.134780][T20195] block device autoloading is deprecated and will be removed. [ 393.252025][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 393.261542][T19967] veth0_vlan: entered promiscuous mode [ 393.268995][T20216] loop0: detected capacity change from 0 to 2048 [ 393.281874][T19967] veth1_vlan: entered promiscuous mode [ 393.298792][T20216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.325542][T19967] veth0_macvtap: entered promiscuous mode [ 393.352692][T19967] veth1_macvtap: entered promiscuous mode [ 393.363967][T18514] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.366500][T19967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.382698][T19967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.418715][ T361] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.440265][ T361] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.455893][ T361] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.470902][ T361] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.527086][T20241] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5764'. [ 393.595863][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 393.614077][T20256] loop6: detected capacity change from 0 to 8 [ 393.775964][T20256] loop6: detected capacity change from 8 to 7 [ 393.788176][T20274] loop3: detected capacity change from 0 to 1024 [ 393.796221][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 393.805422][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.815980][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 393.825220][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 393.833129][T20256] loop6: unable to read partition table [ 393.843295][T20274] EXT4-fs: Ignoring removed bh option [ 393.849250][T20256] loop_reread_partitions: partition scan of loop6 (°´[{BÑ·¶žMܾ`*ÎîZ´Ç5¡]z(¿Ťî4+hGËpX„Ïgm [ 393.849250][T20256] ü òæôØ.BÊL_seÔ) failed (rc=-5) [ 393.871697][T20262] loop6: detected capacity change from 7 to 0 [ 393.880031][T20274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.923925][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 393.964708][T20291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5777'. [ 393.981767][ T361] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 393.984588][T20291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5777'. [ 393.999955][ T361] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 394.009544][T20291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5777'. [ 394.018655][ T361] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 394.027507][ T361] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 394.045084][T20294] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5776'. [ 394.096199][T20294] syzkaller1: entered promiscuous mode [ 394.117480][T20294] syzkaller1: entered allmulticast mode [ 394.161974][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.474292][T20360] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 394.482897][T20360] mroute: pending queue full, dropping entries [ 394.521946][T20364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5794'. [ 394.577859][T20368] netlink: 'syz.5.5796': attribute type 5 has an invalid length. [ 395.596031][T20428] loop9: detected capacity change from 0 to 512 [ 395.661573][T20428] ext4: Unknown parameter 'appraise_type' [ 396.047693][T20496] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5814'. [ 396.125747][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 396.125762][ T28] audit: type=1400 audit(1779928400.323:1803): avc: denied { write } for pid=20504 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.275837][T20519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.295176][T20519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.931875][T20559] loop9: detected capacity change from 0 to 256 [ 397.576539][T20564] loop9: detected capacity change from 0 to 1024 [ 397.604759][T20564] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 397.619913][T20564] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.637810][ T28] audit: type=1400 audit(1779928401.833:1804): avc: denied { write } for pid=20563 comm="syz.9.5829" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.661516][T20564] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: block 3: comm syz.9.5829: lblock 3 mapped to illegal pblock 3 (length 3) [ 397.676214][T20564] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 397.691263][T20564] EXT4-fs (loop9): This should not happen!! Data will be lost [ 397.691263][T20564] [ 397.705547][ T28] audit: type=1326 audit(1779928401.903:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20579 comm="syz.1.5833" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f414f7ece59 code=0x0 [ 397.798704][T20587] EXT4-fs error (device loop9): ext4_ext_remove_space:2969: inode #15: comm syz.9.5829: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 397.840085][T20591] loop0: detected capacity change from 0 to 512 [ 397.847219][T20587] EXT4-fs error (device loop9) in ext4_setattr:6120: Corrupt filesystem [ 397.879924][T20591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.905996][ T28] audit: type=1400 audit(1779928402.103:1806): avc: denied { write } for pid=20590 comm="syz.0.5837" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 397.945252][ T361] EXT4-fs error (device loop9): ext4_map_blocks:833: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 2) [ 397.949586][T18514] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.959067][ T28] audit: type=1400 audit(1779928402.103:1807): avc: denied { ioctl } for pid=20590 comm="syz.0.5837" path="/96/file0/cpu.stat" dev="loop0" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 397.993563][ T361] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 117 [ 398.006159][ T361] EXT4-fs (loop9): This should not happen!! Data will be lost [ 398.006159][ T361] [ 398.021449][T18014] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 398.046126][T18014] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 398.071920][T20600] uprobe: syz.0.5842:20600 failed to unregister, leaking uprobe [ 398.117073][T20607] smc: net device ip6_vti0 applied user defined pnetid SYZ2 [ 398.144409][T20605] loop9: detected capacity change from 0 to 512 [ 398.162459][T20605] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 398.184657][T20605] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.5840: bad orphan inode 131083 [ 398.196442][T20605] loop9: lost filesystem error report for type 5 error -117 [ 398.198459][T20605] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.296091][T18014] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.382281][T20622] netlink: 'syz.3.5852': attribute type 5 has an invalid length. [ 398.631532][T20653] loop9: detected capacity change from 0 to 512 [ 398.671686][T20653] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.724292][ T28] audit: type=1400 audit(1779928402.913:1808): avc: denied { read append } for pid=20652 comm="syz.9.5864" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 398.808803][ T28] audit: type=1400 audit(1779928402.973:1809): avc: denied { create } for pid=20651 comm="syz.0.5862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 398.830345][T18014] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.876025][T18347] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 398.887871][T18347] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 398.920412][T20664] netlink: 'syz.3.5867': attribute type 5 has an invalid length. [ 399.016261][ T28] audit: type=1400 audit(1779928403.213:1810): avc: denied { listen } for pid=20672 comm="syz.3.5871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 399.095483][ T28] audit: type=1400 audit(1779928403.293:1811): avc: denied { read } for pid=20677 comm="syz.3.5872" path="socket:[57707]" dev="sockfs" ino=57707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 399.597636][T20707] loop3: detected capacity change from 0 to 1764 [ 399.619032][ T28] audit: type=1400 audit(1779928403.823:1812): avc: denied { mount } for pid=20706 comm="syz.3.5884" name="/" dev="loop3" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 399.695948][T20708] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 400.206487][ T23] IPVS: starting estimator thread 0... [ 400.299476][T20736] IPVS: using max 1920 ests per chain, 96000 per kthread [ 400.311176][T20741] loop0: detected capacity change from 0 to 136 [ 400.332657][T20746] tipc: Started in network mode [ 400.337629][T20746] tipc: Node identity 2007ff, cluster identity 4711 [ 400.356081][T20746] tipc: Node number set to 2099199 [ 400.379887][T20741] Attempt to read inode for relocated directory [ 400.389410][T20741] syz.0.5898: attempt to access beyond end of device [ 400.389410][T20741] loop0: rw=524288, sector=335544428, nr_sectors = 4 limit=136 [ 400.410481][T20743] netlink: 'syz.5.5899': attribute type 5 has an invalid length. [ 400.422152][T20741] syz.0.5898: attempt to access beyond end of device [ 400.422152][T20741] loop0: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 400.436781][T20741] syz.0.5898: attempt to access beyond end of device [ 400.436781][T20741] loop0: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 400.460435][T16509] IPVS: stop unused estimator thread 0... [ 400.574718][T20768] random: crng reseeded on system resumption [ 400.778184][T20784] loop9: detected capacity change from 0 to 512 [ 400.796332][T20784] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 400.817875][T20784] EXT4-fs (loop9): 1 truncate cleaned up [ 400.825653][T20782] netlink: 'syz.3.5913': attribute type 5 has an invalid length. [ 400.826073][T20784] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.903113][ T3399] kernel write not supported for file /sysvipc/shm (pid: 3399 comm: kworker/1:4) [ 401.160434][T18014] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.204473][T20805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 401.211834][T20805] IPv6: NLM_F_CREATE should be set when creating new route [ 401.451434][T20803] loop3: detected capacity change from 0 to 1024 [ 401.480060][T20803] EXT4-fs: Ignoring removed orlov option [ 401.522977][T20803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.560059][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 401.560076][ T28] audit: type=1400 audit(1779928405.763:1822): avc: denied { write } for pid=20801 comm="syz.3.5920" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 401.832033][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.905276][T20830] loop3: detected capacity change from 0 to 128 [ 402.190609][T20837] loop3: detected capacity change from 0 to 2048 [ 402.252762][T20837] Alternate GPT is invalid, using primary GPT. [ 402.259434][T20837] loop3: p1 p2 p3 [ 402.263297][T20837] loop3: partition table partially beyond EOD, truncated [ 402.427102][T20849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5938'. [ 402.449755][T20849] netlink: 'syz.1.5938': attribute type 7 has an invalid length. [ 402.460318][T20849] netlink: 'syz.1.5938': attribute type 8 has an invalid length. [ 402.468821][T20849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5938'. [ 402.734068][T20884] tipc: Started in network mode [ 402.742366][T20884] tipc: Node identity 22d700e70b5e, cluster identity 4711 [ 402.749886][T20884] tipc: Enabled bearer , priority 0 [ 402.796046][T20884] syzkaller0: entered promiscuous mode [ 402.801697][T20884] syzkaller0: entered allmulticast mode [ 402.808174][T20884] tipc: Resetting bearer [ 402.828385][T20883] tipc: Resetting bearer [ 402.857671][T20883] tipc: Disabling bearer [ 403.159375][ T28] audit: type=1400 audit(1779928407.353:1823): avc: denied { name_bind } for pid=20906 comm="syz.3.5960" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 403.217998][ T28] audit: type=1400 audit(1779928407.353:1824): avc: denied { name_connect } for pid=20906 comm="syz.3.5960" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 403.276134][ T28] audit: type=1400 audit(1779928407.423:1825): avc: denied { execute } for pid=20908 comm="syz.5.5961" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=58124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 403.357455][ T28] audit: type=1400 audit(1779928407.553:1826): avc: denied { setopt } for pid=20917 comm="syz.5.5966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 403.398290][T20918] xt_hashlimit: size too large, truncated to 1048576 [ 403.614796][T20933] syz.5.5970 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 403.738390][ T28] audit: type=1400 audit(1779928407.933:1827): avc: denied { getopt } for pid=20932 comm="syz.5.5970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 404.101876][T20951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.108752][T20949] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 404.118839][T20949] mroute: pending queue full, dropping entries [ 404.130972][T20951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.152624][ T28] audit: type=1400 audit(1779928408.353:1828): avc: denied { shutdown } for pid=20952 comm="syz.9.5979" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 404.296099][T20964] loop3: detected capacity change from 0 to 256 [ 404.305935][T20964] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 404.380802][T20968] netlink: 'syz.5.5985': attribute type 5 has an invalid length. [ 404.598382][T20987] syzkaller0: entered promiscuous mode [ 404.604105][T20987] syzkaller0: entered allmulticast mode [ 404.679614][T20991] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5993'. [ 404.725655][ T28] audit: type=1400 audit(1779928408.923:1829): avc: denied { mount } for pid=20995 comm="syz.3.5995" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 404.766068][ T28] audit: type=1400 audit(1779928408.953:1830): avc: denied { remount } for pid=20995 comm="syz.3.5995" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 404.788813][ T28] audit: type=1400 audit(1779928408.963:1831): avc: denied { unmount } for pid=19967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 405.021243][T21004] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5998'. [ 405.043911][T21004] geneve2: entered promiscuous mode [ 405.076004][T21006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5999'. [ 405.104809][T21006] team1: entered promiscuous mode [ 405.110340][T21006] team1: entered allmulticast mode [ 405.115932][T21006] 8021q: adding VLAN 0 to HW filter on device team1 [ 405.482578][T21033] netlink: 'syz.3.6011': attribute type 5 has an invalid length. [ 405.789493][T21049] loop3: detected capacity change from 0 to 1024 [ 405.811599][T21049] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 405.821858][T21049] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 405.832036][T21049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6017'. [ 405.915648][T21055] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6020'. [ 405.926476][T21051] loop0: detected capacity change from 0 to 128 [ 406.050192][T21060] loop3: detected capacity change from 0 to 512 [ 406.087177][T21060] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.6022: inode has both inline data and extents flags [ 406.115936][T21060] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 406.116154][T21060] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6022: couldn't read orphan inode 15 (err -117) [ 406.125373][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 406.125399][ C1] EXT4-fs (loop3): initial error at time 1779928410: ext4_orphan_get:1397: inode 15 [ 406.125425][ C1] EXT4-fs (loop3): last error at time 1779928410: ext4_orphan_get:1397: inode 15 [ 406.179283][T21060] loop3: lost filesystem error report for type 5 error -117 [ 406.188428][T21060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.270196][T21070] netlink: 'syz.5.6024': attribute type 5 has an invalid length. [ 406.421305][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.507335][T21090] loop3: detected capacity change from 0 to 512 [ 406.555445][T21090] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 406.587736][T21090] EXT4-fs (loop3): 1 truncate cleaned up [ 406.603697][T21090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.625215][T21097] tipc: Enabling of bearer rejected, failed to enable media [ 406.646156][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 406.646173][ T28] audit: type=1400 audit(1779928410.843:1835): avc: denied { write } for pid=21086 comm="syz.3.6027" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 406.731799][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.761567][ T28] audit: type=1400 audit(1779928410.883:1836): avc: denied { write } for pid=21086 comm="syz.3.6027" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 406.803746][ T28] audit: type=1400 audit(1779928410.883:1837): avc: denied { write } for pid=21086 comm="syz.3.6027" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 406.894081][ T28] audit: type=1400 audit(1779928410.883:1838): avc: denied { write } for pid=21086 comm="syz.3.6027" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 406.928053][ T28] audit: type=1400 audit(1779928410.893:1839): avc: denied { write } for pid=21086 comm="syz.3.6027" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 406.976717][ T28] audit: type=1400 audit(1779928410.893:1840): avc: denied { write } for pid=21086 comm="syz.3.6027" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 407.020038][ T28] audit: type=1400 audit(1779928410.893:1841): avc: denied { rename } for pid=21086 comm="syz.3.6027" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 407.091433][ T28] audit: type=1400 audit(1779928410.893:1842): avc: denied { unlink } for pid=21086 comm="syz.3.6027" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 407.136296][T21138] syzkaller0: entered promiscuous mode [ 407.146329][T21138] syzkaller0: entered allmulticast mode [ 407.153676][ T28] audit: type=1400 audit(1779928410.943:1843): avc: denied { setopt } for pid=21108 comm="syz.0.6034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 407.186387][ T28] audit: type=1400 audit(1779928411.213:1844): avc: denied { write } for pid=21113 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.492353][T21174] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6049'. [ 407.994853][T21216] netlink: 'syz.5.6060': attribute type 39 has an invalid length. [ 408.144047][T21224] loop3: detected capacity change from 0 to 4096 [ 408.156231][T21224] EXT4-fs: test_dummy_encryption option not supported [ 408.671716][T21236] Process accounting resumed [ 408.914248][T21248] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6072'. [ 408.932902][T21248] geneve4: entered promiscuous mode [ 409.189157][T21265] uprobe: syz.5.6078:21265 failed to unregister, leaking uprobe [ 409.828492][T21308] syz_tun: entered allmulticast mode [ 409.857397][T21308] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 409.866002][T21308] mroute: pending queue full, dropping entries [ 409.877594][T21307] syz_tun: left allmulticast mode [ 410.020272][T21318] syzkaller0: entered promiscuous mode [ 410.025813][T21318] syzkaller0: entered allmulticast mode [ 410.681734][T21353] netlink: 'syz.5.6105': attribute type 5 has an invalid length. [ 410.723958][T21360] loop0: detected capacity change from 0 to 1024 [ 410.737850][T21360] EXT4-fs: Ignoring removed bh option [ 410.773817][T21360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.875234][T18514] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.897263][T21370] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6109'. [ 411.000415][T21376] xt_hashlimit: size too large, truncated to 1048576 [ 412.083414][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 412.083432][ T28] audit: type=1400 audit(1779928416.283:1857): avc: denied { connect } for pid=21457 comm="syz.5.6142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 412.176970][ T28] audit: type=1326 audit(1779928416.373:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.3.6144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef5face59 code=0x7ffc0000 [ 412.221730][ T28] audit: type=1326 audit(1779928416.373:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.3.6144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef5face59 code=0x7ffc0000 [ 412.250014][ T28] audit: type=1326 audit(1779928416.373:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.3.6144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef5face59 code=0x7ffc0000 [ 412.277568][ T28] audit: type=1326 audit(1779928416.373:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.3.6144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f2ef5face59 code=0x7ffc0000 [ 412.322682][ T28] audit: type=1326 audit(1779928416.373:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.3.6144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef5face59 code=0x7ffc0000 [ 412.353521][ T28] audit: type=1326 audit(1779928416.373:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.3.6144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef5face59 code=0x7ffc0000 [ 412.381791][ T28] audit: type=1326 audit(1779928416.373:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.3.6144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef5face59 code=0x7ffc0000 [ 412.409006][ T28] audit: type=1326 audit(1779928416.373:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.3.6144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ef5face59 code=0x7ffc0000 [ 412.434778][ T28] audit: type=1326 audit(1779928416.373:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21462 comm="syz.3.6144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef5face59 code=0x7ffc0000 [ 412.482525][T21472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6148'. [ 412.491674][T21472] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6148'. [ 412.505283][T21472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6148'. [ 412.506939][ T361] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.514675][T21472] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6148'. [ 412.530398][ T361] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.542136][ T361] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.551127][ T361] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.933569][T21488] loop0: detected capacity change from 0 to 512 [ 413.351826][T21507] netlink: 1116 bytes leftover after parsing attributes in process `syz.0.6162'. [ 413.375333][T21510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6163'. [ 413.468232][T21518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6165'. [ 413.496478][T21520] ip6gre1: entered promiscuous mode [ 413.517868][T21520] ip6gre1: entered allmulticast mode [ 413.542492][T21520] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 413.552861][T16504] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 413.561978][T16504] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 413.578643][ T3400] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 413.697314][T21542] loop3: detected capacity change from 0 to 512 [ 413.720166][T21542] EXT4-fs (loop3): 1 truncate cleaned up [ 413.727647][T21542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.754253][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.888905][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.039283][ T11] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.113540][T21576] netlink: 180 bytes leftover after parsing attributes in process `syz.5.6184'. [ 414.129968][T21564] loop3: detected capacity change from 0 to 4096 [ 414.154618][T21564] EXT4-fs: Ignoring removed bh option [ 414.195673][T21564] EXT4-fs (loop3): stripe (13) is not aligned with cluster size (16), stripe is disabled [ 414.244272][T21564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.273391][T21593] netlink: 'syz.5.6189': attribute type 5 has an invalid length. [ 414.322205][T21564] EXT4-fs error (device loop3): ext4_empty_dir:3101: inode #12: block 80: comm syz.3.6180: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 414.343464][T21564] EXT4-fs (loop3): Remounting filesystem read-only [ 414.350881][T21564] EXT4-fs warning (device loop3): ext4_empty_dir:3104: inode #12: comm syz.3.6180: directory missing '..' [ 417.310052][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.348540][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.380835][T21621] netlink: 'syz.9.6200': attribute type 5 has an invalid length. [ 417.426415][T21629] netlink: 'syz.1.6211': attribute type 4 has an invalid length. [ 417.456154][T21629] netlink: 'syz.1.6211': attribute type 4 has an invalid length. [ 417.601369][T21643] syzkaller0: entered promiscuous mode [ 417.611706][T21643] syzkaller0: entered allmulticast mode [ 417.965523][T21656] loop3: detected capacity change from 0 to 8192 [ 418.022759][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 418.022777][ T28] audit: type=1400 audit(1779928422.223:1889): avc: denied { create } for pid=21655 comm="syz.3.6213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 418.059449][ T28] audit: type=1400 audit(1779928422.253:1890): avc: denied { listen } for pid=21655 comm="syz.3.6213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 418.092906][ T28] audit: type=1400 audit(1779928422.253:1891): avc: denied { accept } for pid=21655 comm="syz.3.6213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 418.500666][T21671] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.508020][T21671] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.569725][T21671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.621497][T21671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.642085][ T28] audit: type=1400 audit(1779928422.843:1892): avc: denied { ioctl } for pid=21696 comm="syz.1.6221" path="socket:[60184]" dev="sockfs" ino=60184 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 418.735066][T21671] gre1: left promiscuous mode [ 418.745682][T21671] bond2: left promiscuous mode [ 418.751762][T21671] geneve2: left promiscuous mode [ 418.771924][T21681] syz_tun: entered promiscuous mode [ 418.781738][T21681] vlan2: entered promiscuous mode [ 418.817759][T21699] syzkaller1: entered promiscuous mode [ 418.833831][T21699] syzkaller1: entered allmulticast mode [ 418.854750][ T30] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.878063][ T30] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.903044][ T361] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.946402][ T361] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.368635][T21757] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6238'. [ 419.495128][T21765] loop3: detected capacity change from 0 to 4096 [ 419.524593][T21765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.540346][T21774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.549681][T21774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.550699][T21776] netlink: 'syz.1.6241': attribute type 4 has an invalid length. [ 419.573566][ T28] audit: type=1400 audit(1779928423.773:1893): avc: denied { write } for pid=21764 comm="syz.3.6242" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 419.596397][ T28] audit: type=1400 audit(1779928423.773:1894): avc: denied { write } for pid=21764 comm="syz.3.6242" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 419.618831][ T28] audit: type=1400 audit(1779928423.773:1895): avc: denied { write } for pid=21764 comm="syz.3.6242" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 419.642288][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.791803][T21779] syzkaller0: entered promiscuous mode [ 419.797423][T21779] syzkaller0: entered allmulticast mode [ 420.158396][T21804] loop0: detected capacity change from 0 to 8192 [ 420.173216][T21804] syz.0.6256: attempt to access beyond end of device [ 420.173216][T21804] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 420.334076][T21825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6264'. [ 420.416359][T21832] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 420.460766][T21842] loop3: detected capacity change from 0 to 512 [ 420.478898][T21842] EXT4-fs: Ignoring removed nobh option [ 420.520595][T21842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.541611][T21842] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 420.925277][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.647154][T21905] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6288'. [ 421.661387][T21905] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6288'. [ 421.782818][T21915] loop0: detected capacity change from 0 to 512 [ 421.829244][T21915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.867141][T21915] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.963199][T18514] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.621613][T21960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6305'. [ 422.630737][T21960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.999858][T21960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.243050][ T28] audit: type=1400 audit(1779928429.443:1896): avc: denied { name_bind } for pid=21993 comm="syz.0.6318" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 425.268694][T22000] netlink: 'syz.5.6321': attribute type 10 has an invalid length. [ 425.280885][T21994] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.6318'. [ 425.287578][T22000] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6321'. [ 425.338499][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 425.623879][ T28] audit: type=1326 audit(1779928429.823:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22023 comm="syz.0.6329" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e75ace59 code=0x7fc00000 [ 425.649953][ T28] audit: type=1326 audit(1779928429.823:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22023 comm="syz.0.6329" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd6e75ace59 code=0x7fc00000 [ 425.973342][T22039] loop3: detected capacity change from 0 to 1024 [ 425.992082][T22039] EXT4-fs: Ignoring removed orlov option [ 426.024638][T22039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.086905][ T28] audit: type=1400 audit(1779928430.273:1899): avc: denied { write } for pid=22038 comm="syz.3.6334" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 426.123921][ T28] audit: type=1400 audit(1779928430.283:1900): avc: denied { write } for pid=22038 comm="syz.3.6334" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 426.297614][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.302308][T22050] syzkaller0: entered promiscuous mode [ 426.333769][T22050] syzkaller0: entered allmulticast mode [ 426.470778][T22060] syzkaller0: entered promiscuous mode [ 426.476407][T22060] syzkaller0: entered allmulticast mode [ 426.487112][T22061] loop3: detected capacity change from 0 to 512 [ 426.504538][T22061] EXT4-fs: inline encryption not supported [ 426.524262][T22061] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.6339: bad orphan inode 15 [ 426.539254][T22061] loop3: lost filesystem error report for type 5 error -117 [ 426.540615][T22061] ext4_test_bit(bit=14, block=5) = 0 [ 426.553288][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 426.553308][ C0] EXT4-fs (loop3): initial error at time 1779928430: ext4_orphan_get:1423 [ 426.553337][ C0] EXT4-fs (loop3): last error at time 1779928430: ext4_orphan_get:1423 [ 426.576990][T22061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.593409][ T28] audit: type=1400 audit(1779928430.793:1901): avc: denied { mounton } for pid=22063 comm="syz.5.6342" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 426.666406][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.745105][T22077] syzkaller0: entered promiscuous mode [ 426.772147][T22077] syzkaller0: entered allmulticast mode [ 426.781721][T22074] loop3: detected capacity change from 0 to 512 [ 426.835281][T22074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.853951][T22074] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.893570][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.999047][ T28] audit: type=1400 audit(1779928431.183:1902): avc: denied { mount } for pid=22100 comm="syz.9.6354" name="/" dev="ramfs" ino=61129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 427.144124][T22116] SELinux: failed to load policy [ 427.149174][ T28] audit: type=1400 audit(1779928431.343:1903): avc: denied { load_policy } for pid=22115 comm="syz.3.6359" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 427.590870][ T28] audit: type=1400 audit(1779928431.793:1904): avc: denied { write } for pid=22140 comm="syz.0.6367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 427.659860][T22143] loop0: detected capacity change from 0 to 1024 [ 427.705962][T22143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 427.731165][T22143] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.780886][T18514] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /168/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 427.806551][T18514] EXT4-fs error (device loop0): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /168/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 427.843608][T18514] EXT4-fs error (device loop0): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 427.863044][ T28] audit: type=1400 audit(1779928432.043:1905): avc: denied { write } for pid=18514 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 427.885918][T18514] EXT4-fs error (device loop0): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /168/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 427.908005][T18514] EXT4-fs error (device loop0): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 427.929025][T18514] EXT4-fs error (device loop0): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /168/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 427.951044][T18514] EXT4-fs error (device loop0): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 427.971610][T18514] EXT4-fs error (device loop0): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /168/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 428.024642][T18514] EXT4-fs error (device loop0): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 428.059287][T18514] EXT4-fs error (device loop0): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /168/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 428.431475][T22152] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 428.446410][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.837184][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.897880][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.978598][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.004758][T22190] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.012053][T22190] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.020972][T22190] bridge_slave_0: entered allmulticast mode [ 429.027603][T22190] bridge_slave_0: entered promiscuous mode [ 429.036598][T22190] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.044085][T22190] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.051555][T22190] bridge_slave_1: entered allmulticast mode [ 429.060682][T22190] bridge_slave_1: entered promiscuous mode [ 429.109970][T22190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.120374][T22190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.141225][ T12] bridge_slave_1: left allmulticast mode [ 429.147419][ T12] bridge_slave_1: left promiscuous mode [ 429.161263][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.169486][ T12] bridge_slave_0: left allmulticast mode [ 429.175187][ T12] bridge_slave_0: left promiscuous mode [ 429.181202][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.217477][T22231] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6395'. [ 429.282882][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.293215][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.303022][ T12] bond0 (unregistering): Released all slaves [ 429.316895][T22190] team0: Port device team_slave_0 added [ 429.323769][T22231] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 429.335759][T22190] team0: Port device team_slave_1 added [ 429.354184][ T12] hsr_slave_0: left promiscuous mode [ 429.361810][ T12] hsr_slave_1: left promiscuous mode [ 429.369995][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.377482][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.385668][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.393381][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.407918][ T12] veth1_macvtap: left promiscuous mode [ 429.413602][ T12] veth0_macvtap: left promiscuous mode [ 429.419416][ T12] veth1_vlan: left promiscuous mode [ 429.424757][ T12] veth0_vlan: left promiscuous mode [ 429.495580][ T12] team0 (unregistering): Port device team_slave_1 removed [ 429.506322][ T12] team0 (unregistering): Port device team_slave_0 removed [ 429.549416][T22190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.556510][T22190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.584414][T22190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.599499][T22190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.607000][T22190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.633391][T22190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.664321][T22190] hsr_slave_0: entered promiscuous mode [ 429.670682][T22190] hsr_slave_1: entered promiscuous mode [ 429.676649][T22190] debugfs: 'hsr0' already exists in 'hsr' [ 429.682490][T22190] Cannot create hsr debugfs directory [ 430.118225][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.183348][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.236060][T22252] netlink: 240 bytes leftover after parsing attributes in process `syz.9.6402'. [ 430.261959][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.352154][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.448700][ T12] bridge_slave_1: left allmulticast mode [ 430.454399][ T12] bridge_slave_1: left promiscuous mode [ 430.460302][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.468055][ T12] bridge_slave_0: left allmulticast mode [ 430.473847][ T12] bridge_slave_0: left promiscuous mode [ 430.479832][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.740920][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.751198][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.760550][ T12] bond0 (unregistering): Released all slaves [ 430.790188][ T12] tipc: Left network mode [ 430.797489][ T12] hsr_slave_0: left promiscuous mode [ 430.803317][ T12] hsr_slave_1: left promiscuous mode [ 430.809124][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.816579][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.824596][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.832068][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.841484][ T12] veth0_macvtap: left promiscuous mode [ 430.847076][ T12] veth1_vlan: left promiscuous mode [ 430.909951][ T12] team0 (unregistering): Port device team_slave_1 removed [ 430.920395][ T12] team0 (unregistering): Port device team_slave_0 removed [ 431.110599][T22164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.122721][T22190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 431.142043][T22190] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.155991][T22190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 431.168315][T22190] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.178255][T22190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 431.202019][T22190] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.213658][T22263] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 431.232168][T22190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 431.253032][T22190] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.334356][T22190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.348884][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 431.348917][ T28] audit: type=1400 audit(1779928435.553:2008): avc: denied { write } for pid=22269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.350957][T22190] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.388835][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.395945][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.409962][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.417081][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.436023][ T28] audit: type=1400 audit(1779928435.633:2009): avc: denied { write } for pid=22294 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.476611][ T3023] 8021q: adding VLAN 0 to HW filter on device eth5 [ 431.600908][T22190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.633427][ T28] audit: type=1400 audit(1779928435.833:2010): avc: denied { write } for pid=22303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.679589][ T28] audit: type=1400 audit(1779928435.883:2011): avc: denied { write } for pid=22327 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.719300][ T3023] 8021q: adding VLAN 0 to HW filter on device eth6 [ 431.777654][T22190] veth0_vlan: entered promiscuous mode [ 431.786414][T22190] veth1_vlan: entered promiscuous mode [ 431.805648][T22190] veth0_macvtap: entered promiscuous mode [ 431.814378][T22190] veth1_macvtap: entered promiscuous mode [ 431.828386][T22190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.839777][ T28] audit: type=1400 audit(1779928436.043:2012): avc: denied { write } for pid=22336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.865413][T22190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.878326][ T361] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.887630][ T361] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.896860][ T28] audit: type=1400 audit(1779928436.073:2013): avc: denied { write } for pid=22348 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.916840][ T3023] 8021q: adding VLAN 0 to HW filter on device eth7 [ 431.926164][ T361] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.935791][ T361] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.983403][T22354] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6386'. [ 432.135516][ T28] audit: type=1400 audit(1779928436.333:2014): avc: denied { write } for pid=22352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.221198][ T28] audit: type=1400 audit(1779928436.423:2015): avc: denied { write } for pid=22374 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.280293][T22377] netlink: 'syz.4.6415': attribute type 2 has an invalid length. [ 432.316208][ T3023] 8021q: adding VLAN 0 to HW filter on device eth8 [ 432.440192][ T28] audit: type=1400 audit(1779928436.633:2016): avc: denied { write } for pid=22381 comm="syz.4.6416" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 432.536755][ T28] audit: type=1400 audit(1779928436.733:2017): avc: denied { write } for pid=22378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.912110][T22437] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 434.916125][T22524] loop4: detected capacity change from 0 to 164 [ 435.237497][T22551] loop4: detected capacity change from 0 to 128 [ 435.312726][T22551] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 435.341672][T22551] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 435.430914][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 436.032203][T22653] loop3: detected capacity change from 0 to 512 [ 436.056268][T22649] netlink: 'syz.1.6454': attribute type 1 has an invalid length. [ 436.413909][T22649] bond2: entered promiscuous mode [ 436.436572][T22649] 8021q: adding VLAN 0 to HW filter on device bond2 [ 436.622195][T22693] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6461'. [ 436.628833][T22691] syzkaller0: entered promiscuous mode [ 436.639803][T22693] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6461'. [ 436.687925][T22691] syzkaller0: entered allmulticast mode [ 436.695963][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 436.695977][ T28] audit: type=1400 audit(1779928440.893:2062): avc: denied { write } for pid=22679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.783528][ T28] audit: type=1400 audit(1779928440.983:2063): avc: denied { write } for pid=22705 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 436.834757][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 437.046845][ T28] audit: type=1400 audit(1779928441.243:2064): avc: denied { write } for pid=22710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.111645][ T28] audit: type=1400 audit(1779928441.303:2065): avc: denied { write } for pid=22723 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.149699][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 437.371349][ T28] audit: type=1400 audit(1779928441.573:2066): avc: denied { write } for pid=22726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.426703][T22733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6464'. [ 437.464892][ T28] audit: type=1400 audit(1779928441.663:2067): avc: denied { write } for pid=22744 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.530352][ T3023] 8021q: adding VLAN 0 to HW filter on device eth11 [ 437.573518][T22751] loop4: detected capacity change from 0 to 2048 [ 437.636618][T22751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.645055][ T28] audit: type=1400 audit(1779928441.833:2068): avc: denied { create } for pid=22760 comm="syz.1.6471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 437.740838][ T28] audit: type=1400 audit(1779928441.873:2069): avc: denied { write } for pid=22750 comm="syz.4.6467" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 437.812779][ T28] audit: type=1400 audit(1779928442.003:2070): avc: denied { write } for pid=22758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.864153][ T28] audit: type=1400 audit(1779928442.063:2071): avc: denied { write } for pid=22781 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 437.924514][ T3023] 8021q: adding VLAN 0 to HW filter on device eth12 [ 437.940564][T22784] loop3: detected capacity change from 0 to 512 [ 437.966380][T22784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.986901][T22784] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.235019][T22800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.268250][T22800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.688145][T16509] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 438.715279][T16509] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 352 with error 28 [ 438.737448][T16509] EXT4-fs (loop4): This should not happen!! Data will be lost [ 438.737448][T16509] [ 438.740715][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.751241][T16509] EXT4-fs (loop4): Total free blocks count 0 [ 438.788570][T16509] EXT4-fs (loop4): Free/Dirty block details [ 438.795580][T16509] EXT4-fs (loop4): free_blocks=4096 [ 438.802250][T16509] EXT4-fs (loop4): dirty_blocks=368 [ 438.808207][T16509] EXT4-fs (loop4): Block reservation details [ 438.814668][T16509] EXT4-fs (loop4): i_reserved_data_blocks=23 [ 438.825043][T16509] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 438.838747][T22190] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 440.060682][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 440.076805][T22847] ref_ctr increment failed for inode: 0x2f3 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888124868d80 [ 440.106394][T22851] uprobe: syz.3.6490:22851 failed to unregister, leaking uprobe [ 440.312858][T22859] ªªªªªª: renamed from vlan0 (while UP) [ 440.948740][T22878] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 441.070089][T22883] loop3: detected capacity change from 0 to 764 [ 441.194453][T22888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6505'. [ 441.309023][T22894] syzkaller0: entered promiscuous mode [ 441.318363][T22894] syzkaller0: entered allmulticast mode [ 441.946980][T22938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6526'. [ 442.050814][T22938] team0: Failed to send options change via netlink (err -105) [ 442.058622][T22938] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 442.074132][T22926] loop4: detected capacity change from 0 to 512 [ 442.097492][T22938] team0: Port device team_slave_0 removed [ 442.161400][T22926] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.6521: inode has both inline data and extents flags [ 442.184209][T22926] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 442.188556][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 442.189559][T22926] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.6521: couldn't read orphan inode 15 (err -117) [ 442.197751][ C1] EXT4-fs (loop4): initial error at time 1779928446: ext4_orphan_get:1397: inode 15 [ 442.197789][ C1] EXT4-fs (loop4): last error at time 1779928446: ext4_orphan_get:1397: inode 15 [ 442.290355][T22926] loop4: lost filesystem error report for type 5 error -117 [ 442.346438][T22926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.432452][T22950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6528'. [ 442.460422][T22926] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6521'. [ 442.520937][T22190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.573774][T22953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6529'. [ 442.813454][T22966] loop4: detected capacity change from 0 to 8192 [ 442.830180][T22966] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 442.872478][T22966] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 442.882093][T22966] FAT-fs (loop4): Filesystem has been set read-only [ 442.910173][T22966] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 442.924185][T22971] 9pnet_fd: p9_fd_create_tcp (22971): problem connecting socket to 127.0.0.1 [ 442.939270][T22966] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 442.957347][T22971] 9pnet_fd: p9_fd_create_tcp (22971): problem connecting socket to 127.0.0.1 [ 442.957942][T22976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6536'. [ 443.010414][T22966] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 443.010448][T22966] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 443.010477][T22966] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 443.010503][T22966] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 443.010564][T22966] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 443.010588][T22966] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 443.013076][T22966] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 443.126696][T22986] xt_hashlimit: size too large, truncated to 1048576 [ 443.683785][T23000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6543'. [ 443.719561][T23000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6543'. [ 443.756316][T23000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6543'. [ 443.838637][T23012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6546'. [ 443.938550][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 443.938569][ T28] audit: type=1400 audit(1779928448.133:2144): avc: denied { map } for pid=23017 comm="syz.1.6551" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 443.973194][T23016] syzkaller0: entered promiscuous mode [ 443.982319][T23016] syzkaller0: entered allmulticast mode [ 443.995361][ T28] audit: type=1400 audit(1779928448.133:2145): avc: denied { read write } for pid=23017 comm="syz.1.6551" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 444.007218][T23023] tipc: Enabled bearer , priority 10 [ 444.055430][ T28] audit: type=1326 audit(1779928448.183:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23021 comm="syz.4.6552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed718ce59 code=0x7ffc0000 [ 444.083811][ T28] audit: type=1326 audit(1779928448.183:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23021 comm="syz.4.6552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed718ce59 code=0x7ffc0000 [ 444.112452][ T28] audit: type=1326 audit(1779928448.193:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23021 comm="syz.4.6552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed718ce59 code=0x7ffc0000 [ 444.163698][T23018] openvswitch: netlink: Message has 4 unknown bytes. [ 444.187906][ T28] audit: type=1326 audit(1779928448.193:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23021 comm="syz.4.6552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed718ce59 code=0x7ffc0000 [ 444.214043][ T28] audit: type=1326 audit(1779928448.193:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23021 comm="syz.4.6552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6ed718ce59 code=0x7ffc0000 [ 444.799500][ T28] audit: type=1326 audit(1779928448.193:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23021 comm="syz.4.6552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed718ce59 code=0x7ffc0000 [ 444.825298][ T28] audit: type=1326 audit(1779928448.193:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23021 comm="syz.4.6552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed718ce59 code=0x7ffc0000 [ 444.851011][ T28] audit: type=1326 audit(1779928448.193:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23021 comm="syz.4.6552" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed718ce59 code=0x7ffc0000 [ 447.338308][T23077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6568'. [ 447.404550][T23093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6572'. [ 448.410999][T23135] loop3: detected capacity change from 0 to 1024 [ 448.430811][T23135] EXT4-fs: Ignoring removed i_version option [ 448.460474][T23135] EXT4-fs: Ignoring removed nomblk_io_submit option [ 448.511181][T23135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.779097][T23181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6592'. [ 448.805264][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.965044][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 448.965070][ T28] audit: type=1400 audit(1779928453.163:2241): avc: denied { write } for pid=23203 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.203739][ T28] audit: type=1400 audit(1779928453.403:2242): avc: denied { write } for pid=23208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.250604][T23223] loop4: detected capacity change from 0 to 512 [ 449.263285][ T28] audit: type=1400 audit(1779928453.443:2243): avc: denied { mount } for pid=23217 comm="syz.9.6607" name="/" dev="autofs" ino=64847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 449.289909][ T28] audit: type=1400 audit(1779928453.453:2244): avc: denied { write } for pid=23221 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.324682][T23223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.357091][T23223] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 449.426269][T23232] netlink: 'syz.3.6598': attribute type 1 has an invalid length. [ 449.465696][T23232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.497858][T23237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6598'. [ 449.609982][T23241] smc: net device lo applied user defined pnetid SYZ2 [ 449.631780][T23241] smc: net device lo erased user defined pnetid SYZ2 [ 450.019428][ T28] audit: type=1326 audit(1779928454.213:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23272 comm="syz.9.6615" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13aa3bce59 code=0x7ffc0000 [ 450.078872][ T28] audit: type=1326 audit(1779928454.213:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23272 comm="syz.9.6615" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13aa3bce59 code=0x7ffc0000 [ 450.170612][ T28] audit: type=1326 audit(1779928454.213:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23272 comm="syz.9.6615" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13aa3bce59 code=0x7ffc0000 [ 450.205908][ T28] audit: type=1326 audit(1779928454.213:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23272 comm="syz.9.6615" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f13aa3bce59 code=0x7ffc0000 [ 450.288751][ T28] audit: type=1326 audit(1779928454.213:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23272 comm="syz.9.6615" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13aa3bce59 code=0x7ffc0000 [ 450.432582][ T28] audit: type=1326 audit(1779928454.213:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23272 comm="syz.9.6615" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13aa3bce59 code=0x7ffc0000 [ 451.036807][T23311] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 451.043505][T23311] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 451.412134][T23339] xt_hashlimit: size too large, truncated to 1048576 [ 451.853912][T22190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.634146][T23384] syzkaller0: entered promiscuous mode [ 452.655807][T23384] syzkaller0: entered allmulticast mode [ 453.367389][T23408] loop4: detected capacity change from 0 to 4096 [ 453.416410][T23408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.533777][T22190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.661043][T23436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6648'. [ 453.758815][T23438] tipc: Enabling of bearer rejected, failed to enable media [ 453.790060][T23446] netlink: 'syz.3.6653': attribute type 1 has an invalid length. [ 453.831094][T23446] bond2: entered promiscuous mode [ 453.839837][T23446] 8021q: adding VLAN 0 to HW filter on device bond2 [ 453.869924][T23457] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6653'. [ 453.923908][T23457] bond2: entered allmulticast mode [ 454.006311][T23446] bond2: (slave bridge1): making interface the new active one [ 454.019364][T23446] bridge1: entered promiscuous mode [ 454.024899][T23446] bridge1: entered allmulticast mode [ 454.035235][T23446] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 455.067261][T23496] tipc: Started in network mode [ 455.088882][T23496] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 455.121521][T23498] openvswitch: netlink: Message has 4 unknown bytes. [ 455.131918][T23496] tipc: Enabled bearer , priority 10 [ 455.504140][T23508] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6684'. [ 455.521793][ T28] kauditd_printk_skb: 202 callbacks suppressed [ 455.521812][ T28] audit: type=1400 audit(1779928459.723:2453): avc: denied { write } for pid=23507 comm="syz.4.6673" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 455.570269][ T28] audit: type=1400 audit(1779928459.723:2454): avc: denied { ioctl } for pid=23507 comm="syz.4.6673" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 455.912341][T23532] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6681'. [ 456.249899][ T3400] tipc: Node number set to 8432298 [ 458.762241][T23522] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 458.832509][T23545] tipc: Enabled bearer , priority 10 [ 458.844940][T23545] openvswitch: netlink: Message has 4 unknown bytes. [ 459.631433][T23579] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6697'. [ 459.711522][T23585] netlink: 'syz.9.6700': attribute type 1 has an invalid length. [ 459.733181][T23585] bond3: entered promiscuous mode [ 459.763311][T23585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 459.829322][T23595] 8021q: adding VLAN 0 to HW filter on device bond3 [ 459.845081][T23595] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 459.867857][T23597] loop3: detected capacity change from 0 to 512 [ 459.875034][T23595] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 459.887333][T23597] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 459.914909][T23595] bond3: (slave ip6gre1): making interface the new active one [ 459.947612][T23595] ip6gre1: entered promiscuous mode [ 459.976277][T23595] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 460.005081][T21691] tipc: Node number set to 696844519 [ 460.019868][T23600] tipc: Enabled bearer , priority 10 [ 460.036430][T23600] openvswitch: netlink: Message has 4 unknown bytes. [ 461.024986][T23609] loop3: detected capacity change from 0 to 512 [ 461.086688][T23609] ext4: Unknown parameter 'smackfsroot' [ 461.407405][T23644] tipc: Started in network mode [ 461.420276][T23644] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 461.435621][T23644] tipc: Enabled bearer , priority 10 [ 461.452955][T23644] openvswitch: netlink: Message has 4 unknown bytes. [ 461.542458][T23648] netlink: 'syz.3.6726': attribute type 4 has an invalid length. [ 461.609058][T23650] netlink: 'syz.3.6726': attribute type 4 has an invalid length. [ 461.825544][T23654] netlink: 'syz.3.6726': attribute type 4 has an invalid length. [ 463.417281][T23657] loop4: detected capacity change from 0 to 512 [ 463.433255][T21147] tipc: Node number set to 8432298 [ 463.441553][T23657] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.6720: inode has both inline data and extents flags [ 463.460228][T23657] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 463.461948][T23657] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.6720: couldn't read orphan inode 15 (err -117) [ 463.471202][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 463.471219][ C1] EXT4-fs (loop4): initial error at time 1779928467: ext4_orphan_get:1397: inode 15 [ 463.471244][ C1] EXT4-fs (loop4): last error at time 1779928467: ext4_orphan_get:1397: inode 15 [ 463.508916][T23657] loop4: lost filesystem error report for type 5 error -117 [ 463.510765][T23657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.534024][ T28] audit: type=1400 audit(1779928467.733:2455): avc: denied { write } for pid=23655 comm="syz.4.6720" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 463.539620][T23657] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 463.594394][T22190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.657538][T23666] loop3: detected capacity change from 0 to 512 [ 463.693863][T23666] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 463.704674][T23671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6722'. [ 463.714025][T23666] System zones: 1-12 [ 463.719672][T23666] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.6721: corrupted in-inode xattr: e_value size too large [ 463.751355][T23666] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 463.752056][T23666] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.6721: couldn't read orphan inode 15 (err -117) [ 463.761365][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 463.761390][ C1] EXT4-fs (loop3): initial error at time 1779928467: ext4_iget_extra_inode:5128: inode 15 [ 463.761427][ C1] EXT4-fs (loop3): last error at time 1779928467: ext4_iget_extra_inode:5128: inode 15 [ 463.822079][T23666] loop3: lost filesystem error report for type 5 error -117 [ 463.824571][T23666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.874761][ T28] audit: type=1400 audit(1779928468.063:2456): avc: denied { write } for pid=23665 comm="syz.3.6721" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 463.891235][T23666] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.6721: Unrecognised inode hash code 4 [ 463.914375][T23666] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.6721: Corrupt directory, running e2fsck is recommended [ 463.929692][ T28] audit: type=1400 audit(1779928468.063:2457): avc: denied { write } for pid=23665 comm="syz.3.6721" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 463.963354][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.972588][ T28] audit: type=1400 audit(1779928468.073:2458): avc: denied { write } for pid=23665 comm="syz.3.6721" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 463.996312][ T28] audit: type=1400 audit(1779928468.073:2459): avc: denied { write } for pid=23665 comm="syz.3.6721" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.072315][ T28] audit: type=1400 audit(1779928468.083:2460): avc: denied { write } for pid=23665 comm="syz.3.6721" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.155793][ T28] audit: type=1400 audit(1779928468.083:2461): avc: denied { write } for pid=23665 comm="syz.3.6721" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.181619][ T28] audit: type=1400 audit(1779928468.083:2462): avc: denied { rename } for pid=23665 comm="syz.3.6721" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.229301][T23682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6730'. [ 464.238344][ T28] audit: type=1400 audit(1779928468.433:2463): avc: denied { write } for pid=23681 comm="syz.1.6730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 464.347121][T23682] 8021q: adding VLAN 0 to HW filter on device bond4 [ 464.383262][T23682] bond3: (slave bond4): Enslaving as an active interface with an up link [ 464.423332][T23689] ref_ctr increment failed for inode: 0x416 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104dfe540 [ 464.452153][T23687] bond3 (unregistering): (slave bond4): Releasing backup interface [ 464.476506][T23687] bond3 (unregistering): Released all slaves [ 464.523576][T23688] uprobe: syz.3.6731:23688 failed to unregister, leaking uprobe [ 464.572548][T23691] netlink: 'syz.1.6732': attribute type 1 has an invalid length. [ 464.626252][T23691] 8021q: adding VLAN 0 to HW filter on device bond3 [ 464.717325][T23691] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 464.768187][T23691] bond3: (slave batadv1): making interface the new active one [ 464.825830][T23691] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 465.535153][T23697] bond3: (slave veth3): Enslaving as an active interface with a down link [ 465.548976][T23700] bond3 (unregistering): (slave batadv1): Releasing active interface [ 465.559865][T23700] bond3 (unregistering): (slave veth3): Releasing active interface [ 465.569533][T23700] bond3 (unregistering): Released all slaves [ 465.703244][ T28] audit: type=1400 audit(1779928469.903:2464): avc: denied { setopt } for pid=23715 comm="syz.1.6737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 465.845668][T23722] syzkaller0: entered promiscuous mode [ 465.860488][T23722] syzkaller0: entered allmulticast mode [ 465.991512][T23730] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6743'. [ 466.064625][T23730] 8021q: adding VLAN 0 to HW filter on device bond4 [ 466.086395][T23730] bond3: (slave bond4): Enslaving as an active interface with an up link [ 466.101199][T23735] bond3 (unregistering): (slave bond4): Releasing backup interface [ 466.111343][T23737] loop4: detected capacity change from 0 to 512 [ 466.118041][T23737] EXT4-fs: Invalid want_extra_isize 87 [ 466.124745][T23735] bond3 (unregistering): Released all slaves [ 466.248755][T23745] loop4: detected capacity change from 0 to 2048 [ 466.303133][T23745] Alternate GPT is invalid, using primary GPT. [ 466.310276][T23745] loop4: p1 p2 p3 [ 466.314409][T23745] loop4: partition table partially beyond EOD, truncated [ 466.526364][T23762] syzkaller0: create flow: hash 391056224 index 1 [ 466.529619][T23751] loop3: detected capacity change from 0 to 512 [ 466.558578][T11246] syzkaller0: tun_net_xmit 76 [ 466.568386][T11246] syzkaller0: tun_net_xmit 48 [ 466.588846][T21691] syzkaller0: tun_net_xmit 76 [ 466.637263][T23759] syzkaller0: delete flow: hash 391056224 index 1 [ 466.647306][T23751] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 466.730003][T23772] tipc: Enabling of bearer rejected, already enabled [ 466.751671][T23772] openvswitch: netlink: Message has 4 unknown bytes. [ 466.821457][T23751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.879854][T23751] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 467.105300][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.195570][T23791] loop3: detected capacity change from 0 to 512 [ 467.202997][T23787] loop4: detected capacity change from 0 to 128 [ 467.218819][T23787] FAT-fs (loop4): Directory bread(block 524322) failed [ 467.233077][T23787] FAT-fs (loop4): Directory bread(block 524323) failed [ 467.241892][T23787] FAT-fs (loop4): Directory bread(block 524324) failed [ 467.255870][T23791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.266951][T23787] FAT-fs (loop4): Directory bread(block 524325) failed [ 467.275468][T23787] FAT-fs (loop4): Directory bread(block 524326) failed [ 467.283056][T23787] FAT-fs (loop4): Directory bread(block 524327) failed [ 467.291131][T23787] FAT-fs (loop4): Directory bread(block 524328) failed [ 467.299913][T23787] FAT-fs (loop4): Directory bread(block 524329) failed [ 467.354330][T23787] FAT-fs (loop4): FAT read failed (blocknr 128) [ 468.028046][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.152749][T23853] loop3: detected capacity change from 0 to 2048 [ 468.213787][T23853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.442916][T23847] netlink: 'syz.3.6775': attribute type 1 has an invalid length. [ 468.544760][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.514044][T23933] loop3: detected capacity change from 0 to 8192 [ 470.345724][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 470.345740][ T28] audit: type=1400 audit(1779928474.523:2467): avc: denied { getopt } for pid=23942 comm="syz.5.6797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 470.476478][T23954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6802'. [ 470.596680][T23956] bond3: entered promiscuous mode [ 470.618359][T23956] bond3: entered allmulticast mode [ 470.778508][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 471.389538][T24001] loop4: detected capacity change from 0 to 512 [ 471.508677][T24001] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.6811: corrupted in-inode xattr: invalid ea_ino [ 471.522242][T24001] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 471.522460][T24001] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.6811: couldn't read orphan inode 15 (err -117) [ 471.531642][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 471.531677][ C0] EXT4-fs (loop4): initial error at time 1779928475: ext4_iget_extra_inode:5128: inode 15 [ 471.531711][ C0] EXT4-fs (loop4): last error at time 1779928475: ext4_iget_extra_inode:5128: inode 15 [ 471.632809][T24001] loop4: lost filesystem error report for type 5 error -117 [ 471.634207][T24001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.678732][ T28] audit: type=1400 audit(1779928475.873:2468): avc: denied { getopt } for pid=24003 comm="syz.1.6814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 472.034849][T24013] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6817'. [ 472.110102][T22190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.222862][T24013] team0 (unregistering): Port device team_slave_0 removed [ 472.238573][ T28] audit: type=1400 audit(1779928476.433:2469): avc: denied { write } for pid=24018 comm="syz.3.6819" path="socket:[66144]" dev="sockfs" ino=66144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 472.372269][T24013] team0 (unregistering): Port device team_slave_1 removed [ 472.466996][T24029] SET target dimension over the limit! [ 472.505084][T24013] team0 (unregistering): Port device vlan2 removed [ 473.081626][T24063] netlink: 'syz.5.6830': attribute type 39 has an invalid length. [ 473.219332][T24047] syzkaller0: entered promiscuous mode [ 473.225303][T24047] syzkaller0: entered allmulticast mode [ 473.240883][T24068] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6832'. [ 473.260329][T24051] syzkaller0: entered promiscuous mode [ 473.266004][T24051] syzkaller0: entered allmulticast mode [ 473.281399][T24068] 8021q: adding VLAN 0 to HW filter on device bond4 [ 473.419711][T24083] bond4: entered promiscuous mode [ 473.425061][T24083] bond4: entered allmulticast mode [ 473.453938][T24068] team_slave_1: entered promiscuous mode [ 473.461286][T24068] team_slave_1: entered allmulticast mode [ 473.467510][T24068] bond4: (slave team_slave_1): Enslaving as an active interface with an up link [ 473.574683][T24093] netlink: 'syz.1.6839': attribute type 1 has an invalid length. [ 473.590398][T24097] tipc: Enabled bearer , priority 0 [ 473.618039][T24093] 8021q: adding VLAN 0 to HW filter on device bond3 [ 473.637242][T24097] syzkaller0: entered promiscuous mode [ 473.643742][T24097] syzkaller0: entered allmulticast mode [ 473.668132][T24097] tipc: Resetting bearer [ 473.701313][T24093] vlan3: entered allmulticast mode [ 473.720068][T24093] bond3: entered allmulticast mode [ 473.740705][T24096] tipc: Resetting bearer [ 473.754852][T24096] tipc: Disabling bearer [ 473.785538][T24104] bond3: (slave geneve3): making interface the new active one [ 473.797042][T24104] geneve3: entered allmulticast mode [ 473.817717][T24104] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 473.925790][T24118] loop4: detected capacity change from 0 to 4096 [ 473.944822][T24118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.042008][T22190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.665217][ T28] audit: type=1400 audit(2000000002.220:2470): avc: denied { watch watch_reads } for pid=24253 comm="syz.5.6866" path="/959/file0" dev="tmpfs" ino=4976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 476.079521][T24278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6873'. [ 476.375396][T24288] Invalid argument reading file caps for ./file0 [ 476.692313][T24297] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.6879'. [ 476.717537][T24297] netlink: zone id is out of range [ 476.756911][T24297] netlink: zone id is out of range [ 476.781184][T24297] netlink: del zone limit has 8 unknown bytes [ 476.887055][T24303] netlink: 'syz.9.6883': attribute type 13 has an invalid length. [ 476.902118][T24305] netlink: 'syz.4.6884': attribute type 8 has an invalid length. [ 476.918245][T24305] sch_fq: defrate 0 ignored. [ 478.033227][T24341] syzkaller0: entered promiscuous mode [ 478.046379][T24341] syzkaller0: entered allmulticast mode [ 478.137787][ T28] audit: type=1326 audit(2000000004.690:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24348 comm="syz.9.6903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13aa3bce59 code=0x0 [ 478.194690][T24353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6904'. [ 478.204185][T24353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6904'. [ 478.253864][T24353] loop4: detected capacity change from 0 to 256 [ 478.365397][T24360] loop4: detected capacity change from 0 to 512 [ 478.366570][ T28] audit: type=1326 audit(2000000004.920:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24348 comm="syz.9.6903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13aa3bce59 code=0x7ffc0000 [ 478.409051][ T28] audit: type=1326 audit(2000000004.960:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24348 comm="syz.9.6903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13aa3bce59 code=0x7ffc0000 [ 478.434950][ T28] audit: type=1326 audit(2000000004.960:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24348 comm="syz.9.6903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13aa3bce59 code=0x7ffc0000 [ 478.464154][T24360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.481091][ T28] audit: type=1326 audit(2000000004.960:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24348 comm="syz.9.6903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f13aa3bce59 code=0x7ffc0000 [ 478.507810][ T28] audit: type=1326 audit(2000000004.960:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24348 comm="syz.9.6903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13aa3bce59 code=0x7ffc0000 [ 478.533510][ T28] audit: type=1326 audit(2000000004.990:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24348 comm="syz.9.6903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13aa3bce59 code=0x7ffc0000 [ 478.570141][ T28] audit: type=1326 audit(2000000004.990:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24348 comm="syz.9.6903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13aa3bce59 code=0x7ffc0000 [ 478.595800][ T28] audit: type=1326 audit(2000000004.990:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24348 comm="syz.9.6903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f13aa3bce59 code=0x7ffc0000 [ 478.674667][T22190] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.767077][T24370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6907'. [ 479.298568][T21690] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 479.323848][T24380] syzkaller0: entered promiscuous mode [ 479.335170][T24380] syzkaller0: entered allmulticast mode [ 479.345319][T24388] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6914'. [ 479.449578][ T3400] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 479.501894][T24399] usb usb7: usbfs: process 24399 (syz.3.6920) did not claim interface 0 before use [ 479.545760][T24403] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6921'. [ 479.641094][T24414] netlink: 'syz.1.6926': attribute type 8 has an invalid length. [ 479.649404][T24414] sch_fq: defrate 0 ignored. [ 479.898535][T24417] loop4: detected capacity change from 0 to 512 [ 479.933560][T24417] EXT4-fs: test_dummy_encryption option not supported [ 482.156273][ T28] kauditd_printk_skb: 144 callbacks suppressed [ 482.156292][ T28] audit: type=1400 audit(2000000008.710:2624): avc: denied { bind } for pid=24466 comm="syz.5.6943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 482.208183][ T28] audit: type=1400 audit(2000000008.740:2625): avc: denied { listen } for pid=24466 comm="syz.5.6943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 482.503996][ T28] audit: type=1400 audit(2000000009.060:2626): avc: denied { firmware_load } for pid=24483 comm="syz.3.6949" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 483.472437][T24504] smc: net device ip6_vti0 erased user defined pnetid SYZ2 [ 483.493023][T24504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6956'. [ 483.695838][T24512] xt_hashlimit: size too large, truncated to 1048576 [ 483.719829][ T28] audit: type=1400 audit(2000000010.270:2627): avc: denied { connect } for pid=24511 comm="syz.3.6959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 483.778283][ T28] audit: type=1400 audit(2000000010.280:2628): avc: denied { write } for pid=24511 comm="syz.3.6959" laddr=fe80::b lport=54266 faddr=::1 fport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 485.584273][ T28] audit: type=1326 audit(2000000012.140:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24564 comm="syz.1.6976" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f414f7ece59 code=0x0 [ 485.778498][ T28] audit: type=1326 audit(2000000012.330:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24564 comm="syz.1.6976" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414f7ece59 code=0x7ffc0000 [ 485.850740][ T28] audit: type=1326 audit(2000000012.330:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24564 comm="syz.1.6976" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414f7ece59 code=0x7ffc0000 [ 485.905732][ T28] audit: type=1326 audit(2000000012.360:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24564 comm="syz.1.6976" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414f7ece59 code=0x7ffc0000 [ 485.960513][ T28] audit: type=1326 audit(2000000012.360:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24564 comm="syz.1.6976" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414f7ece59 code=0x7ffc0000 [ 486.123014][T24583] loop3: detected capacity change from 0 to 128 [ 486.194898][T24583] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 486.233342][T24583] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 486.260202][T24583] ext2 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.282121][T24591] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6987'. [ 486.295559][T24592] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6986'. [ 486.307341][T24591] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6987'. [ 486.399111][T19967] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 487.301983][T24635] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7000'. [ 488.288788][T24664] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 489.043128][T24692] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 489.052810][T24692] syzkaller0: entered promiscuous mode [ 489.059431][T24692] syzkaller0: entered allmulticast mode [ 489.068353][T24692] tipc: Enabled bearer , priority 0 [ 489.078619][T24691] tipc: Resetting bearer [ 489.104232][T24691] tipc: Disabling bearer [ 489.157859][T24700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7023'. [ 489.228812][T24700] hsr_slave_1 (unregistering): left promiscuous mode [ 489.283051][T24710] tipc: Enabling of bearer rejected, failed to enable media [ 489.416828][T24720] xt_hashlimit: size too large, truncated to 1048576 [ 490.237379][T24737] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7036'. [ 490.247471][T24739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7037'. [ 490.276557][T24739] xfrm1: entered promiscuous mode [ 490.282480][T24739] xfrm1: entered allmulticast mode [ 490.289501][T24739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7037'. [ 490.712591][T24751] loop3: detected capacity change from 0 to 512 [ 490.774309][T24751] EXT4-fs: Ignoring removed nobh option [ 490.853322][T24751] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 490.878471][T24751] EXT4-fs (loop3): 1 truncate cleaned up [ 490.896356][T24751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.927068][ T28] kauditd_printk_skb: 231 callbacks suppressed [ 490.927085][ T28] audit: type=1400 audit(2000000018.477:2865): avc: denied { write } for pid=24750 comm="syz.3.7041" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 490.955923][T24751] syz.3.7041(24751): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 490.994119][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.103781][ T28] audit: type=1400 audit(2000000018.647:2866): avc: denied { write } for pid=24759 comm="syz.3.7044" path="socket:[68939]" dev="sockfs" ino=68939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 491.186800][T24769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7045'. [ 491.831518][ T28] audit: type=1400 audit(2000000019.387:2867): avc: denied { shutdown } for pid=24780 comm="syz.4.7050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 491.914019][T24785] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7053'. [ 493.706287][T24836] syzkaller0: entered promiscuous mode [ 493.712026][T24836] syzkaller0: entered allmulticast mode [ 495.180584][T24862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7083'. [ 495.193955][T24862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7083'. [ 496.660308][T24895] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7084'. [ 497.803552][ T28] audit: type=1400 audit(2000000025.357:2868): avc: denied { write } for pid=24903 comm="syz.9.7088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 499.939269][ T28] audit: type=1400 audit(2000000027.487:2869): avc: denied { read } for pid=24926 comm="syz.1.7096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 500.411825][ T28] audit: type=1400 audit(2000000027.967:2870): avc: denied { ioctl } for pid=24939 comm="syz.4.7101" path="socket:[68468]" dev="sockfs" ino=68468 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 500.552144][T24942] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 504.341690][T25029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7130'. [ 504.488219][T25032] veth3: entered allmulticast mode [ 504.506891][T25032] bond1: (slave veth3): Enslaving as an active interface with an up link [ 504.706626][T25029] bond1 (unregistering): (slave veth3): Releasing backup interface [ 504.716546][T25029] bond1 (unregistering): Released all slaves [ 505.286601][T25050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7135'. [ 506.030260][T25064] loop3: detected capacity change from 0 to 512 [ 506.038143][T25064] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 506.094014][T25069] syzkaller0: entered promiscuous mode [ 506.099757][T25069] syzkaller0: entered allmulticast mode [ 506.786541][T25094] tipc: Enabling of bearer rejected, failed to enable media [ 507.241100][T25106] random: crng reseeded on system resumption [ 507.423070][T25110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7155'. [ 507.446482][T25106] loop3: detected capacity change from 0 to 1024 [ 507.465885][T25112] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7156'. [ 507.476352][T25112] netlink: 14 bytes leftover after parsing attributes in process `syz.9.7156'. [ 507.608548][T25106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.621361][T25112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.645660][ T28] audit: type=1400 audit(2000000035.197:2871): avc: denied { watch } for pid=25104 comm="syz.3.7154" path="/273/file1" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 507.670220][T25112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.680386][T25112] bond0 (unregistering): Released all slaves [ 507.699798][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.776131][T25122] netlink: 'syz.4.7158': attribute type 1 has an invalid length. [ 508.054489][T25145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7167'. [ 508.066709][T25145] macvlan2: entered promiscuous mode [ 508.072799][T25145] bond0: entered promiscuous mode [ 508.078001][T25145] bond_slave_0: entered promiscuous mode [ 508.084090][T25145] bond_slave_1: entered promiscuous mode [ 508.097179][T25145] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 508.281751][T25157] netlink: 'syz.1.7172': attribute type 4 has an invalid length. [ 508.335508][T25161] tmpfs: Bad value for 'mpol' [ 508.392914][T25170] netlink: 'syz.9.7176': attribute type 2 has an invalid length. [ 508.444797][T25174] bond3: entered allmulticast mode [ 508.450121][T25174] ip6gre1: entered allmulticast mode [ 508.457237][T25173] bond3: left allmulticast mode [ 508.462595][T25173] ip6gre1: left allmulticast mode [ 508.569808][ T28] audit: type=1400 audit(2000000036.127:2872): avc: denied { read } for pid=25160 comm="syz.1.7174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 508.810585][T25186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7182'. [ 509.170543][T25194] sit0: entered allmulticast mode [ 509.271571][T25199] tipc: Resetting bearer [ 509.326450][T25199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.390506][T25200] sit0: entered promiscuous mode [ 509.858562][T16494] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.867856][T16494] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.900161][T16494] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.923820][T25215] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7191'. [ 509.934742][T16494] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.982640][T25215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.007980][T16494] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.032207][T25215] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25215 comm=syz.9.7191 [ 510.051755][T16494] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.074590][T16494] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.108055][T16494] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.132912][T25218] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 510.214491][ T28] audit: type=1400 audit(2000000037.767:2873): avc: denied { setopt } for pid=25226 comm="syz.5.7197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 510.335464][ T28] audit: type=1400 audit(2000000037.887:2874): avc: denied { getopt } for pid=25224 comm="syz.9.7196" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 510.377540][ T28] audit: type=1326 audit(2000000037.917:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25230 comm="syz.5.7199" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487684ce59 code=0x7ffc0000 [ 510.443529][ T28] audit: type=1326 audit(2000000037.927:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25230 comm="syz.5.7199" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487684ce59 code=0x7ffc0000 [ 510.473414][ T28] audit: type=1326 audit(2000000037.927:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25230 comm="syz.5.7199" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487684ce59 code=0x7ffc0000 [ 510.502879][T25234] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 510.599081][ T28] audit: type=1326 audit(2000000037.927:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25230 comm="syz.5.7199" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f487684ce59 code=0x7ffc0000 [ 510.630199][ T28] audit: type=1326 audit(2000000037.977:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25230 comm="syz.5.7199" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f487684ce59 code=0x7ffc0000 [ 510.662361][ T28] audit: type=1326 audit(2000000037.977:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25230 comm="syz.5.7199" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f487684cbc2 code=0x7ffc0000 [ 511.313059][T25246] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7204'. [ 511.436109][T25243] syzkaller0: entered promiscuous mode [ 511.454002][T25243] syzkaller0: entered allmulticast mode [ 513.965868][T25291] hub 8-0:1.0: USB hub found [ 513.970697][T25291] hub 8-0:1.0: 8 ports detected [ 514.717223][T25311] tipc: Enabling of bearer rejected, failed to enable media [ 514.760948][T25318] syzkaller0: entered promiscuous mode [ 514.783350][T25318] syzkaller0: entered allmulticast mode [ 514.946875][T25333] bridge_slave_0: left allmulticast mode [ 514.952818][T25333] bridge_slave_0: left promiscuous mode [ 514.959892][T25333] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.984423][T25333] bridge_slave_1: left allmulticast mode [ 514.998306][T25333] bridge_slave_1: left promiscuous mode [ 515.005648][T25333] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.031081][T25333] bond0: (slave bond_slave_0): Releasing backup interface [ 515.041604][T25333] bond_slave_0: left promiscuous mode [ 515.069449][T25333] bond0: (slave bond_slave_1): Releasing backup interface [ 515.083533][T25333] bond_slave_1: left promiscuous mode [ 515.109449][T25333] team0: Port device team_slave_0 removed [ 515.132666][T25333] team0: Port device team_slave_1 removed [ 515.146096][T25333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.171267][T25333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.185269][T25333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.192943][T25333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.203435][T25333] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 515.221398][T25335] team0: Mode changed to "activebackup" [ 515.234677][T25346] vlan0: entered promiscuous mode [ 515.286101][T25346] team0: Port device vlan0 added [ 515.313898][T25351] tipc: Enabled bearer , priority 0 [ 515.335329][T25350] syzkaller0: entered promiscuous mode [ 515.345635][T25350] syzkaller0: entered allmulticast mode [ 515.500962][T25364] loop3: detected capacity change from 0 to 4096 [ 515.518220][T25364] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.617523][T25374] 9p: Bad value for 'wfdno' [ 515.628281][T25373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7237'. [ 515.655294][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 515.655312][ T28] audit: type=1400 audit(2000000043.207:2971): avc: denied { write } for pid=25363 comm="syz.3.7234" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 515.770436][T25381] bond5: entered promiscuous mode [ 515.775669][T25381] bond5: entered allmulticast mode [ 515.869360][T19967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.328782][T19967] ================================================================== [ 516.336976][T19967] BUG: KCSAN: data-race in mlock_new_folio / need_mlock_drain [ 516.344499][T19967] [ 516.346846][T19967] read-write to 0xffff888237c27248 of 1 bytes by task 25386 on cpu 0: [ 516.355036][T19967] mlock_new_folio+0x143/0x240 [ 516.359847][T19967] folio_add_lru_vma+0x5f/0x70 [ 516.364656][T19967] set_pte_range+0x235/0x4f0 [ 516.369297][T19967] finish_fault+0x875/0xa00 [ 516.373840][T19967] handle_mm_fault+0x211b/0x2e70 [ 516.378815][T19967] __get_user_pages+0x1290/0x1f10 [ 516.383870][T19967] __mm_populate+0x242/0x390 [ 516.388507][T19967] do_mlock+0x47c/0x520 [ 516.392683][T19967] __x64_sys_mlock+0x36/0x50 [ 516.397314][T19967] x64_sys_call+0x1ab3/0x3020 [ 516.402018][T19967] do_syscall_64+0x12c/0x3b0 [ 516.406647][T19967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.412578][T19967] [ 516.414924][T19967] read to 0xffff888237c27248 of 1 bytes by task 19967 on cpu 1: [ 516.422585][T19967] need_mlock_drain+0x30/0x50 [ 516.427317][T19967] __lru_add_drain_all+0x273/0x450 [ 516.432458][T19967] lru_add_drain_all+0x10/0x20 [ 516.437255][T19967] invalidate_bdev+0x47/0x70 [ 516.441885][T19967] ext4_put_super+0x610/0x7b0 [ 516.446596][T19967] generic_shutdown_super+0xee/0x220 [ 516.451927][T19967] kill_block_super+0x2a/0x70 [ 516.456647][T19967] ext4_kill_sb+0x42/0x80 [ 516.461002][T19967] deactivate_locked_super+0x75/0x1c0 [ 516.466423][T19967] deactivate_super+0x97/0xa0 [ 516.471138][T19967] cleanup_mnt+0x2bb/0x330 [ 516.475589][T19967] __cleanup_mnt+0x19/0x20 [ 516.480046][T19967] task_work_run+0x130/0x1a0 [ 516.484673][T19967] exit_to_user_mode_loop+0x211/0x820 [ 516.490099][T19967] do_syscall_64+0x232/0x3b0 [ 516.494740][T19967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.500682][T19967] [ 516.503026][T19967] value changed: 0x00 -> 0x01 [ 516.507739][T19967] [ 516.510092][T19967] Reported by Kernel Concurrency Sanitizer on: [ 516.516247][T19967] CPU: 1 UID: 0 PID: 19967 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 516.527418][T19967] Tainted: [W]=WARN [ 516.531217][T19967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 516.541398][T19967] ==================================================================