last executing test programs: 15.863260002s ago: executing program 1 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) clock_gettime(0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) timer_create(0xfffffff9, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r3, 0x7) close_range(r2, 0xffffffffffffffff, 0x0) 14.97212274s ago: executing program 1 (id=204): socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000001c0)={0x8}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x48) 13.676546651s ago: executing program 1 (id=225): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) eventfd2(0x0, 0x1) pselect6(0x40, &(0x7f0000000040)={0x5, 0x0, 0xfffffffffffffff8, 0xfffffffffffff, 0x1, 0x0, 0xa4, 0x2}, 0x0, &(0x7f0000000000)={0x1f, 0x4, 0x1000, 0x7ffffffffffffffe, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f4, &(0x7f0000000900)={'veth1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xbe}}) setresuid(0xee01, r2, 0x0) setresuid(r0, r1, r2) 13.585193584s ago: executing program 1 (id=227): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f00000000c0), 0xf7, 0x579, &(0x7f0000001200)="$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") r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x20000000002, &(0x7f0000000700)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) fchdir(r5) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0x810c9365, 0x0) ptrace$cont(0x21, r2, 0x80000001, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1000, 0x1) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x1, 0x7800, 0x3, 0x0, {{0x9, 0x4, 0x3, 0x9, 0x24, 0x64, 0x0, 0xd, 0x29, 0x0, @loopback, @multicast1, {[@ra={0x94, 0x4}, @generic={0x7, 0xc, "aa9d0cafa51a214ad468"}]}}}}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r11, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)={0x3c, r12, 0xf, 0x70bd2d, 0x25dfdc02, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080d0}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x19, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000100)='GPL\x00', 0x2f, 0x95, &(0x7f0000000140)=""/149, 0x40f00, 0x1a, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[r0, r0, r0], &(0x7f0000000380)=[{0x5, 0x3, 0x2, 0x3}, {0x5, 0x1, 0x6, 0x6}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB="1808000002000000000000001000000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100b0000000950000000000000018010000696c6c2500000040002020207b1af8ff00000000bfa100000000000007010000f8ff2000b802000008000000b7030000040000008500000006000000bf980000000000005608fdff000000408500000005000000b700000000000000950000000000000003776f0a2d41acdce1975ab111fa21c05ad5c0d93001688b535f5ee9c0010ef1319393f2a4d73bf614f50b4984e3a79b3d9dabeaca084a0441"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) syz_open_dev$usbfs(&(0x7f0000000000), 0x4, 0x100) 12.332236123s ago: executing program 1 (id=233): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 11.547925497s ago: executing program 1 (id=236): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) splice(r0, &(0x7f0000000080)=0x7fffffff, r0, &(0x7f00000000c0)=0xe59, 0xffffffffffff8000, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wlc\x00', 0x11, 0x4}, {@loopback, 0x4e23, 0x1, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) fallocate(r1, 0x0, 0x1, 0x3) 11.520471328s ago: executing program 32 (id=236): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) splice(r0, &(0x7f0000000080)=0x7fffffff, r0, &(0x7f00000000c0)=0xe59, 0xffffffffffff8000, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wlc\x00', 0x11, 0x4}, {@loopback, 0x4e23, 0x1, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) fallocate(r1, 0x0, 0x1, 0x3) 11.349014834s ago: executing program 4 (id=239): prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000008, &(0x7f0000000980)=ANY=[], 0x4, 0x28a, &(0x7f00000012c0)="$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") sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="28000000130001000000000000008031afc7ae9fc6ea83bfc3f75b0000180000000c000000000000000000000008001c00c9000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x40000000, &(0x7f0000000080), 0x2}], 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1803000000850000001c000000954610422e0000000000000000000000000020"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x24842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000340)=0x9, 0x12) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes']) open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000500)={0x5000000000}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES64=0x0, @ANYBLOB="46060900000000001400350062726964bb0b800480050011cde312d8cf6500000000000054e79c55792576519ded5fd3dfa767b552ce570c84cfddb63231ae13455f5336d0b705b21354bfe3f609e7b87c6e15dff31e9496849b21db7044df67cd57ef1374ba78ffd73a8a31db994b5b2717023513976a7dd4e9a9b38eb9cbdba01079af5f1c86355a4a25e7cec9d80cfdb08861caad8b5c105ee5f043be0e235a0097"], 0x48}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x40001) 10.138379612s ago: executing program 4 (id=246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xfffffff4}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz2\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "8c"}]}], {0x14}}, 0x94}}, 0x0) 10.029796695s ago: executing program 4 (id=247): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2012, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d0000000014000280080001000300000008000200250000000a000100aaaaaaaaaa2b00000a00020000"], 0x5c}}, 0xc080) setreuid(0x0, 0xee01) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000200900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000001014c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003800c00008008000340000000020c"], 0xfc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 8.856403752s ago: executing program 4 (id=250): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000240)=ANY=[@ANYBLOB='map=off,check=relaxed\x00mode=0x0000000000000001,map=off,session=0x0000000000000062,uid=', @ANYRESHEX=0x0, @ANYBLOB='Amap=acorn,iocharset=macgaelic,session=0x0000000000000058,mode=0xffffffffffffffff,map=off,check=strict,uid>', @ANYRESDEC=0x0, @ANYBLOB=',cont%|t=user_u,\b'], 0xfa, 0x6bb, &(0x7f00000015c0)="$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") timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_pidfd_open(r1, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(r7, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff8a0a43cdec5908060001080006040009875e647adf0187ba0100aaaaaaaaaabbac"], 0x0) sendto$packet(r8, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000600)='d', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9) socket$nl_route(0x10, 0x3, 0x0) 7.95207111s ago: executing program 4 (id=255): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e0204", 0x1b, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0)={0x8}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000400)=ANY=[], 0x1, 0x34f, &(0x7f00000000c0)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x80) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file2\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c6500007466383d302c00ef7cf9c9e427ab131e48bcb8e8584feb067a2a04bfb53d8acd1a7464c88ceadeb81c1a0a30069011756aa4b047305d230985f1517f13617faa8a8ef798318c0f939dfef1d31c5b266caf9084e4e7cfde9ba9b1007b9c8f019de569c2c65df0fb1106c53f5ed1d67eb004830e465f1da48dfeca72541be2cfc1ae0fd7dd06a1119074aa25561765f678fa139276a5e1f014a4d913ed7e95e6f8e08e70f545dcb1e22102f460b9a944604469f45c4a950919a8cc48f0c9f09c972b639d01e1da6fbde3753f82286b3a0f3157d03502f3cad14f97d803a912d36677e0c9d9bd34983a71d5f5eeac6f1e3c03065350d8b41aef668369d0c2c082e9"], 0x1, 0x373, &(0x7f00000006c0)="$eJzs3U9rXFUUAPDTsfmr6WQhgop4qRvdDEn8Ag3SghhQYkeqC+HVTHTINBPmDZEpot259XMUl+4E8QtkoXt37rJx2UXpk8yfJpOOKSVOHtXfD8I9yT0nc+883uNuHufw1g93drbz2nbWjcq1FJWIqDyIWO5HA5eGY6Ufz8ZJ9+Kd6q0/3vj4088+WN/YuL6Z0o31m++upZSuvPnL19/8ePXX7ouf/HTl57k4WP788K+1Pw9eOXj18NHNr5p5auZpt91NWbrdbnez261G2mrmO7WUPmo1sryRmrt5ozM2v91q7+31Ura7tbS412nkecp2e2mn0Uvddup2ein7MmvuplqtlpYWg6ep39/czNYH8fwZedcuakFMQaeznh3dw3NPzNTvl7IgAKBU5z3/z/6r5/+ZcP6/SCfP//xXHZ3/Z4f37zjnfwAAAAAAAAAAAAAAeB48KIpqURTV0ViMXhIe/l7y8piyJ67/qZ+y18d0nXhxbz6i9f1+fb8+GAfz69vRjFY0YiWq8fDosTAyiG+8v3F9JfUtx9Kd7/r1V3+LqL8wXr8a1VieXL86qE+P6+NonInFk/VrUY2XJ9evTayfjbffOlFfi2r8/kW0oxVb/cfbcf23qym99+HGqfq5fh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/w+1NPJ6DPre79cjFmJ/2L+/dpywPN4ff1D/uL/+SlTj4eT+/CsT+/Nfjtcul7t3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjJe3d3slar0bmoYNTzv/+X2VHwz1WXBun3Tk0txHjy3NP+zzmDyjNVLQw3OWHqUVEU01rq/MVeyvMEMxFxRk4x/ALP/1kvRcQZOXMRMf0tV8r/wp85KONpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOU6bvpd9koAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoU967u5O1Wo3OFIOy9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA8+TsAAP//S+oM3w==") perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000009500000000000000"], 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000, r6}, 0x38) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r7, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb", @ANYRESDEC=r1], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) 6.157738167s ago: executing program 4 (id=270): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000001a240)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x10000}, @filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x38}, 0x1, 0x0, 0xfffffffffff30000, 0x20041004}, 0x0) 5.615165074s ago: executing program 33 (id=270): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000001a240)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x10000}, @filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x38}, 0x1, 0x0, 0xfffffffffff30000, 0x20041004}, 0x0) 3.272764367s ago: executing program 3 (id=297): socket(0x10, 0x803, 0x0) socket(0x23, 0x80805, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x29, 0x0) set_mempolicy_home_node(&(0x7f00009c6000/0x2000)=nil, 0x2000, 0x0, 0x0) 3.117824552s ago: executing program 3 (id=298): socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(0x0, 0x10001, 0x40) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x87, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x4b3a, 0x1) ioctl$VT_ACTIVATE(r1, 0x5606, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000000)={0x104, 0x80000002, 0xfffff7f9, 0xf9, 0x8c, "13ff775cff03000040000000ff004000", 0x200008, 0xc}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xff) 2.879171409s ago: executing program 3 (id=302): prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000008, &(0x7f0000000980)=ANY=[], 0x4, 0x28a, &(0x7f00000012c0)="$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") sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="28000000130001000000000000008031afc7ae9fc6ea83bfc3f75b0000180000000c000000000000000000000008001c00c9000000"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x40000000, &(0x7f0000000080), 0x2}], 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1803000000850000001c000000954610422e0000000000000000000000000020"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x24842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000340)=0x9, 0x12) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000500)={0x5000000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x40001) 2.515815201s ago: executing program 0 (id=303): unshare(0x2c020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) 2.276148449s ago: executing program 0 (id=306): syz_read_part_table(0x1053, &(0x7f0000001080)="$eJzsz8GJwkAABdCf3U02QxAL8JImLEVswwYkWIrXdGYLXpSQYCoQEd47/f+ZGZjwUaUqa/lf85x+u7Yu+cn5tTf9UNJdT+uly61Jsq2W2o/J37FO9vc2yTI/pjjM56tp3G2m5w/je38HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN/hGQAA//+n+wmo") socket$netlink(0x10, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'team_slave_0\x00', &(0x7f0000002fc0)=@ethtool_stats}) eventfd2(0x8, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4051) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="b9ed29d8e7ffffffffff6043d090fc6889ae6b849abc5886602a54d7823999b2a4c23044c325275b35d48feb80c3aa0ce71c2b1b", 0x34}], 0x1}, 0x40) 2.133954213s ago: executing program 2 (id=308): socket(0x10, 0x803, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ff, 0x4, &(0x7f0000006680)) rt_tgsigqueueinfo(0x0, 0x0, 0x29, 0x0) set_mempolicy_home_node(&(0x7f00009c6000/0x2000)=nil, 0x2000, 0x0, 0x0) 2.125131333s ago: executing program 2 (id=309): syz_read_part_table(0x1053, &(0x7f0000001080)="$eJzsz8GJwkAABdCf3U02QxAL8JImLEVswwYkWIrXdGYLXpSQYCoQEd47/f+ZGZjwUaUqa/lf85x+u7Yu+cn5tTf9UNJdT+uly61Jsq2W2o/J37FO9vc2yTI/pjjM56tp3G2m5w/je38HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN/hGQAA//+n+wmo") socket$netlink(0x10, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'team_slave_0\x00', &(0x7f0000002fc0)=@ethtool_stats}) eventfd2(0x8, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4051) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$kcm(0x2, 0x3, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="b9ed29d8e7ffffffffff6043d090fc6889ae6b849abc5886602a54d7823999b2a4c23044c325275b35d48feb80c3aa0ce71c2b1b", 0x34}], 0x1}, 0x40) 2.015175317s ago: executing program 0 (id=310): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2012, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) socket$kcm(0x10, 0x2, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d0000000014000280080001000300000008000200250000000a000100aaaaaaaaaa2b00000a00020000"], 0x5c}}, 0xc080) setreuid(0x0, 0xee01) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000200900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000001014c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003800c00008008000340000000020c"], 0xfc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1.837429572s ago: executing program 0 (id=311): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2012, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) socket$kcm(0x10, 0x2, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d0000000014000280080001000300000008000200250000000a000100aaaaaaaaaa2b00000a00020000"], 0x5c}}, 0xc080) setreuid(0x0, 0xee01) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000200900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000001014c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003800c00008008000340000000020c"], 0xfc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1.684795327s ago: executing program 0 (id=312): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x10000, 0x2, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = epoll_create1(0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x140, 0x65, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff0, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xd6, 0x750}}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0xe4, 0x2, [@TCA_BASIC_EMATCHES={0xe0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x68, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="66c51b842c"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_VAR="0b19a8b7731ef531", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="18", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="30f0af", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="83f3c8fe74"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5, 0x2}, {0x8, 0x8f}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x70, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}, @TCF_EM_META={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x8}, [@TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="303f2dd748e81e1637", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xb, 0x15}, {0xb03, 0x7}}}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_VAR="a9", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="6dea", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="2eac", @TCF_META_TYPE_VAR="9f90a5", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="c1952b80bf5fbafe"]}]}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x100, 0x0, 0x4a3e}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000032090000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000040000007c0500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r4, 0x0, 0x1ba8847c99}, 0x38) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x1, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000180)='trans=rdma,\x8f\x02v\x84\x9c\t\xd7Q+$\xb8M\x06G4\x00\x98\r)YX|\xab#\xb3\xe1\xa7\x7f2\x10v\x9e\x82\xab\xb5\xf1:\x00m\x9f\x88W\x1c\xb6\x01<\xb3\x9e\tAGn\x00\x00\x00\x00') r6 = socket(0x80000000000000a, 0x2, 0x0) connect$x25(r6, &(0x7f0000000340), 0x12) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket(0x80000000000000a, 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x1, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x2120a, 0x40}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x7f}}]}]}, @IFLA_MASTER={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040015}, 0x24040800) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.684069467s ago: executing program 2 (id=313): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000ff", @ANYRES16=r0, @ANYBLOB="210329bd7000fbdbdf0e0100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) 1.61365274s ago: executing program 5 (id=314): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020500000a00000028bd7000fcdbdf25030005000000000002004e2200000000000000000000000002000100000000000003070c00000080030006000000000002"], 0x50}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000000012800b00010067726574617000001400028008000700ac14142805b30a0000b2350000000800", @ANYRES32=r2, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.60790966s ago: executing program 2 (id=315): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000400)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140), 0x1, 0x539, &(0x7f0000000c40)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x2000000, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xad}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 1.449532214s ago: executing program 5 (id=316): syz_clone3(&(0x7f0000000280)={0xc0240a00, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x3}, &(0x7f0000000100)=""/189, 0xbd, &(0x7f00000001c0)=""/127, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x5}, 0x58) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/net\x00') pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="40000000100039042cbd7000fbdbdf2500000000", @ANYRES32=r6, @ANYBLOB="11980400419804002000128008000100736974001400028008000300ac1414aa06000f0002"], 0x40}}, 0x0) sendto$packet(r4, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x0, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x840) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000006890086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) r9 = dup(r1) ioctl$PERF_EVENT_IOC_RESET(r9, 0x2403, 0x2) 1.449133354s ago: executing program 6 (id=271): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000002000010300c99526dea0985b0a0000000000000001000000140003006c6f"], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x8, 0x80000000) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x20402) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x80000}]}, {0x0, [0x0, 0x2e, 0x0, 0x5f, 0x5f, 0x0, 0x51, 0x2e, 0x3e]}}, 0x0, 0x2f, 0x0, 0x1, 0x5}, 0x28) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000100)=r5) read(r8, &(0x7f0000001400)=""/4076, 0xfffffeea) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000"], 0x68}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x20, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 1.348225798s ago: executing program 5 (id=317): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2012, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xd0}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000180)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}, {@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}]}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d0000000014000280080001000300000008000200250000000a000100aaaaaaaaaa2b00000a00020000"], 0x5c}}, 0xc080) setreuid(0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x6930, @local}, 0x10, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r8, 0x28, 0x2, &(0x7f0000000340)=0x1, 0x8) 1.038980677s ago: executing program 5 (id=318): socket$kcm(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), 0x0) 974.18052ms ago: executing program 5 (id=319): memfd_create(&(0x7f00000009c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xc0=\x8f\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xde\xc3\x1e\xb8\xd6w\xb0\"~\x15G\xe6\xe5U\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x7fn\xc7\x00\v\xd0 a\xb8\xb7\xfbQ\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#S\xd9\xe3~Sj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j\x15U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\x11\xe7\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020100006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 846.912754ms ago: executing program 5 (id=320): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000840)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRESDEC], 0x1, 0x285, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8102, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) (fail_nth: 1) write(r1, &(0x7f0000000200)="c788", 0x2) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 445.731466ms ago: executing program 3 (id=321): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000000f03000000000000e5000200000000002604fdffff0200007b010014000000001d140000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x8, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x200100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0xffffffff, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0x6, 0x800, 0x1000}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @auto="b287dd5acaa80a0845716a8c29ba20b8"}}) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000240)={0x11, {{0x29, 0x0, 0x4, @local, 0x7ff}}}, 0x88) (async, rerun: 32) r4 = socket(0x200000000000011, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 445.231976ms ago: executing program 6 (id=322): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000840)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRESDEC], 0x1, 0x285, &(0x7f0000000940)="$eJzs3cFKY1cYB/AvGpsolGRRkJZCb+mmq6CW7iPFQmmgpSWLdlWpkRZjBQOCXag76Tu0D9BNu+y2MIthtvMCw8DgDMxmnJWLgQyZGzOJJFclxAzj77fx45zz95yTe7kXF5789OH21sZOa/P09CSKxVzkq1GNs1yUYyZmI3UUAMDb5Kzdjmft1LTXAgDcDO9/ALh9st7/uaNe27c3vzIAYFLG+vt/ZiJLAgAm7Psffvx6tVZb+y5JihHbx3v1vXr6M+1f3YxfoxmNWIpSvIho96T1l1/V1paSjsflKG4fzqT5w7367GB+OUpRHp5fTlJR7+TO83Ox0M0/WIhGrEQp3hueXxmafyc+/aRv/kqU4v7PsRPN2IhONs0XIuJgOUm++KZ2IV94NQ4AAAAAAAAAAAAAAAAAAAAAACahkvSUB8+/Sc/vqVRG9af5/vOB5rPOB2ofXjhfJx8f5Ke7dwAAAAAAAAAAAAAAAAAAAHhTtPZ/31pvNhu7WcVv9/65c1JIA5cOzi5y3Xn7uv6OS1PHmb95/mq7uFC8+/GjP4d1FaJw3c9nRDEXERljOt39LUl3yv8/GmfSZmGMq3P14u7JL+9/1lr8fNSYyPe3/NHZ6sCYETdSfqwPPKN4Wsq4FsXBG/Kaxb/nRfV5a39tcF/nt1Jjd/4GLkpmsfhXdf2/g4dPrprKeGi0ZyfxKAIAAAAAAAAAAAAAAAAAgFvv9T/9TnslAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA9ve//z0W36LVcUhRioKU4cvDRtPcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvAwAA//8Ys5Fc") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8102, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a0, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000caeedf2501000000180001801400020069705f76746930000000000000000000100002800c00018008000100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write(r1, &(0x7f0000000200)="c788", 0x2) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 341.84649ms ago: executing program 3 (id=323): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001540)={0x2, {0x2, 0x4, 0x4, 0x14a, 0x3ff, 0x2}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x6) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r5}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x6, 0x2, 0x4, 0x2, "070040000580cc0d"}, 0x10}}, 0x0) write$binfmt_script(r3, &(0x7f0000000800)={'#! ', './file0'}, 0xb) tee(r2, r1, 0x9, 0x8) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x7, 0xfffffe04, 0x8, 0xaa, "20ab980900eea4a7446c180000cd681ec267a0", 0x6, 0x10d}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000140)={0x8, 'syzkaller1\x00', {'veth0_to_team\x00'}, 0x7}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffc, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r7 = syz_open_pts(r6, 0x800) ioctl$TIOCNXCL(r7, 0x540d) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x4, 0x8, 0xac75, 0x73, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x7, 0x700, 0x9, 0x9}}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r11, r12, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r12, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @sched_cls}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r13, 0x4) 232.050643ms ago: executing program 0 (id=324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @multicast1}, &(0x7f0000000200)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) listen(r3, 0x5) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080400d0ff00000000000018000000000000000000000003000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', r4}, 0x94) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r6, &(0x7f0000000100)={0x0, 0x80000010, 0x1, @tid=0xffffffffffffffff}) mq_notify(r6, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00') preadv(r7, &(0x7f0000000100)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, 0x200000, 0x0) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f00000003c0), &(0x7f0000000400)=0x4) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000280)=0x1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0xea, 0x2, 0x44, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x7800, 0x7800, 0x1000, 0x3}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="20000800000000000000040fe7a63d7fea50826167c79b768ee300000004000180b35dd44975577d1a49a37e470fcaf5dd036aac5d6a5b5bdc7696c61143e14f7ce99f0600000000000000f8131e57bbbf633701bd979e6fd2ea65b34c353cd3032cf22b5627d3cdfc2f5733b4e1e6c7d02b1d43a56a7422b8ddce1c6d9551942d0dd4964f26b3cd778060db31e4bf7f54fc92cbda93748c4a050000000000000037a4b28652cff9961369f8761bd5c953cdc671e8b94c2ebb348b9e688de4f5dd720f4a59333c"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp\x00') r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000000)={r12, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000680)={r12, 0x5, 0x1, 0x4, 0x8, 0xffffffff}, 0x14) preadv(r9, &(0x7f0000000500)=[{&(0x7f0000000100)=""/228, 0xe4}], 0x1, 0x21, 0x0) 81.951888ms ago: executing program 2 (id=325): socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(0x0, 0x10001, 0x40) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x87, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x4b3a, 0x1) ioctl$VT_ACTIVATE(r1, 0x5606, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000000)={0x104, 0x80000002, 0xfffff7f9, 0xf9, 0x8c, "13ff775cff03000040000000ff004000", 0x200008, 0xc}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xff) r3 = syz_open_pts(r1, 0x361000) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f00000000c0)) 24.98472ms ago: executing program 3 (id=326): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x2720df49, 0x5}, 0x0, 0x80000000, 0xfffffffd, 0x3, 0xabca, 0x85, 0x3ff, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)="cb948c7f2ae6f7db163205e29f1dbc053460b3d453ec6ad98bfc558ac3398dd1d3e299d16af307b7e402a6d5196d32a82ae2c0a2229d9fb852aeeaf1bbfcc7cca5c3f7987505273983518cb2e2e4ed3e21a9c8a8785315b1050582a61c4375eea964008d63dcb4902ebe58c5", 0x6c}, {&(0x7f0000000080)="3e6197c0f66f170effd0f97d1d3959efcfdbf01df27730e0f07dcfd6488feebcfa304ad0afce70c0f5c1169f93812e02a411426a6e", 0x35}, {&(0x7f00000000c0)="72f2a744ba0a2aad79da401b07e676e669be599b1179dbd38ff9df2ba4cfb2949bf166f22055ad31226b2c0ba1c2a8bfb13951d0ceb150b29b716d3e4d45ada3590e14c4fac3dfdc6cb881862ef057079fd108998ef2291ebf86b708010e89d04dd73ea89d3b6b8a90267934e75cc4786e58c4c7541f7eec4c1557c384ce6d7039d7eb5204fd8e85c092cf7a4f257fa691b6d071e871d26a5591115565c0663d10b1cabe525e819989badc81daccab6809212cdd519923f8c0669431", 0xbc}, {&(0x7f0000000180)="aaaa26581c45e307e1a84043c85cc0745a36dff4c1dd51eb0b7110be6db07afef092e89cdb65f1bad1d3b4c6fa1fa9d8b88f4311961c04592f288e86de426d5262bbce967c80a11bff81d977fdc6f28f9cd8c4dcaeae4ba243477c467d686bee7e4b64627669913bfe193c2af0ea1659fa19c228f664e84c2f99070096fb37f53035b50716eca60e1d61828d90ded9447bc03715f617925284213b7fc3d325bb2552064311c7b83654012d775a6a722b09f73f1e5ec14a65a2c28363fc3985b865ed3c8b846504291965cbe3579b6d7fc62e35764009cd01f81b10", 0xdb}, {&(0x7f0000000280)="0930d3f6f50c99292aabfb8b2090b99030da436cdecd1ab64fcfee651e465bacc1c4867e3c270f7c6f55292c211a69851273b436a67be2df7e71d9b58ada143350c72c3e3885c9db4b84933554d1", 0x4e}, {&(0x7f00000003c0)="1ab64340d28e9761b9877697ab5f7024d0113be0d0c37801f19851d2562f5795820468c0503c99c41609a8e5da0561a2a620cb971ca23f5f81e0a5de3d3ced8079ee4f44e180b0c2810ad90a5a1c", 0x4e}], 0x6, 0x7, 0x3) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000003f40), 0xfe, 0x2a4, &(0x7f0000000a80)="$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") creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, 0x1) r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x80020849, 0x3, 0x1, 0x2, 0xffffff01}, 0x20, 0x100) 0s ago: executing program 2 (id=327): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x9000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x75, 0x9000, 0x0, 0x3) kernel console output (not intermixed with test programs): this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.524289][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.535516][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.542533][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.568478][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.580173][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.593959][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.600952][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.626929][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.642401][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.649406][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.675401][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.686485][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.693440][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.719361][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.738458][ T3306] team0: Port device team_slave_0 added [ 35.744301][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.751316][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.777302][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.791400][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.798461][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.824406][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.849688][ T3306] team0: Port device team_slave_1 added [ 35.875528][ T3302] hsr_slave_0: entered promiscuous mode [ 35.881644][ T3302] hsr_slave_1: entered promiscuous mode [ 35.893487][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.900520][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.926448][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.957107][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.964140][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.990089][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.006072][ T3299] hsr_slave_0: entered promiscuous mode [ 36.012088][ T3299] hsr_slave_1: entered promiscuous mode [ 36.017944][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 36.023681][ T3299] Cannot create hsr debugfs directory [ 36.037254][ T3303] hsr_slave_0: entered promiscuous mode [ 36.043549][ T3303] hsr_slave_1: entered promiscuous mode [ 36.049926][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 36.055750][ T3303] Cannot create hsr debugfs directory [ 36.068684][ T3298] hsr_slave_0: entered promiscuous mode [ 36.074755][ T3298] hsr_slave_1: entered promiscuous mode [ 36.080685][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 36.086436][ T3298] Cannot create hsr debugfs directory [ 36.143981][ T3306] hsr_slave_0: entered promiscuous mode [ 36.150210][ T3306] hsr_slave_1: entered promiscuous mode [ 36.156138][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 36.161869][ T3306] Cannot create hsr debugfs directory [ 36.339720][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.348562][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.356174][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.364725][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.372447][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.381081][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.391082][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.400130][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.421730][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.431023][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.438994][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.447476][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.455086][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.463912][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.471587][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.480398][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.517025][ T3298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.525734][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.533447][ T3298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.542321][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.550237][ T3298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.559217][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.570822][ T3298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.579437][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.610098][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.620132][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.628031][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.636527][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.644264][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.652890][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.660869][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.669670][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.710659][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.724760][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.733475][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.741350][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.750192][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.757967][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.766699][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.779501][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.788005][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.807893][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.819349][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.830945][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.838167][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.855136][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.862259][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.893249][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.907804][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.914861][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.928427][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.944470][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.951548][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.968613][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.977689][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.003620][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.010850][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.022355][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.034672][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.041894][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.079342][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.086506][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.106060][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.113198][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.147798][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.187386][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.217244][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.224432][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.235583][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.242706][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.287508][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.405774][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.473866][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.493750][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.581655][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.614797][ T3298] veth0_vlan: entered promiscuous mode [ 37.635164][ T3298] veth1_vlan: entered promiscuous mode [ 37.674723][ T3302] veth0_vlan: entered promiscuous mode [ 37.692763][ T3298] veth0_macvtap: entered promiscuous mode [ 37.700766][ T3298] veth1_macvtap: entered promiscuous mode [ 37.713321][ T3302] veth1_vlan: entered promiscuous mode [ 37.726722][ T3299] veth0_vlan: entered promiscuous mode [ 37.738921][ T3299] veth1_vlan: entered promiscuous mode [ 37.745100][ T3303] veth0_vlan: entered promiscuous mode [ 37.768195][ T3302] veth0_macvtap: entered promiscuous mode [ 37.776201][ T3302] veth1_macvtap: entered promiscuous mode [ 37.783478][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.792915][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.803361][ T3303] veth1_vlan: entered promiscuous mode [ 37.823948][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.836657][ T3299] veth0_macvtap: entered promiscuous mode [ 37.844165][ T3306] veth0_vlan: entered promiscuous mode [ 37.850107][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.859150][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.871350][ T3299] veth1_macvtap: entered promiscuous mode [ 37.879879][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.887688][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.903363][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.914030][ T3306] veth1_vlan: entered promiscuous mode [ 37.926929][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.934212][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 37.934227][ T28] audit: type=1400 audit(1779531753.614:146): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.tuzlYm/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 37.966831][ T3306] veth0_macvtap: entered promiscuous mode [ 37.972744][ T28] audit: type=1400 audit(1779531753.614:147): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.995118][ T28] audit: type=1400 audit(1779531753.614:148): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.tuzlYm/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.021191][ T28] audit: type=1400 audit(1779531753.624:149): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.043302][ T28] audit: type=1400 audit(1779531753.624:150): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.tuzlYm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.049697][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.071256][ T28] audit: type=1400 audit(1779531753.624:151): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.tuzlYm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.082598][ T3303] veth0_macvtap: entered promiscuous mode [ 38.112051][ T28] audit: type=1400 audit(1779531753.624:152): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.130781][ T71] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.134347][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.156816][ T28] audit: type=1400 audit(1779531753.654:153): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.179985][ T28] audit: type=1400 audit(1779531753.654:154): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="gadgetfs" ino=4037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.192150][ T3303] veth1_macvtap: entered promiscuous mode [ 38.210352][ T71] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.220485][ T71] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.228907][ T28] audit: type=1400 audit(1779531753.914:155): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.257756][ T3306] veth1_macvtap: entered promiscuous mode [ 38.270204][ T71] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.279636][ T71] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.288662][ T71] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.298147][ T71] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.307214][ T71] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.320706][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.355632][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.384195][ T310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.426469][ T310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.441143][ T310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.464306][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.478929][ T310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.506569][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.548166][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.565773][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.590744][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.599728][ T3510] nftables ruleset with unbound chain [ 38.613566][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.636905][ T3510] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 38.789446][ T3520] loop0: detected capacity change from 0 to 512 [ 38.829737][ T3520] EXT4-fs: Ignoring removed bh option [ 38.854938][ T3519] loop4: detected capacity change from 0 to 4096 [ 38.888286][ T3520] EXT4-fs: inline encryption not supported [ 38.897584][ T3519] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 38.929281][ T3520] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.999768][ T3520] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 39.045666][ T3520] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1: bg 0: block 248: padding at end of block bitmap is not set [ 39.062352][ T3508] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.072906][ T3520] loop0: lost filesystem error report for type 5 error -117 [ 39.075261][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 39.089667][ C0] EXT4-fs (loop0): last error at time 1779531754: ext4_validate_block_bitmap:441 [ 39.100060][ T3520] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.1: Failed to acquire dquot type 1 [ 39.111127][ T3520] loop0: lost filesystem error report for type 5 error -28 [ 39.117027][ T3520] EXT4-fs (loop0): 1 truncate cleaned up [ 39.134768][ T3520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 39.222022][ T3521] loop2: detected capacity change from 0 to 512 [ 39.222270][ T3528] loop4: detected capacity change from 0 to 512 [ 39.259778][ T3528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 39.272465][ T3528] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.301043][ T3521] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.317055][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 39.507284][ T3520] syz.0.1 (3520) used greatest stack depth: 9368 bytes left [ 39.672272][ T3406] IPVS: starting estimator thread 0... [ 39.679429][ T3541] loop1: detected capacity change from 0 to 512 [ 39.692017][ T3541] ======================================================= [ 39.692017][ T3541] WARNING: The mand mount option has been deprecated and [ 39.692017][ T3541] and is ignored by this kernel. Remove the mand [ 39.692017][ T3541] option from the mount to silence this warning. [ 39.692017][ T3541] ======================================================= [ 39.845337][ T3542] IPVS: using max 2544 ests per chain, 127200 per kthread [ 40.491761][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 40.541070][ T3541] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.1.8: corrupted xattr block 95: invalid header [ 40.559635][ T3541] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.564969][ T3541] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 40.588207][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 40.588301][ C0] EXT4-fs (loop1): initial error at time 1779531756: ext4_expand_extra_isize_ea:2810: inode 11 [ 40.588518][ C0] EXT4-fs (loop1): last error at time 1779531756: ext4_expand_extra_isize_ea:2810: inode 11 [ 40.623944][ T3541] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.8: bg 0: block 7: invalid block bitmap [ 40.636720][ T3541] loop1: lost filesystem error report for type 5 error -117 [ 40.707949][ T3541] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 40.725147][ T3541] loop1: lost filesystem error report for type 5 error -117 [ 40.728034][ T3521] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.3: corrupted inode contents [ 40.754538][ T3541] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #11: comm syz.1.8: corrupted xattr block 95: invalid header [ 40.772619][ T3541] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.774126][ T3541] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 40.793513][ T3541] EXT4-fs (loop1): 1 orphan inode deleted [ 41.002274][ T3521] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.005232][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 41.020912][ C0] EXT4-fs (loop2): initial error at time 1779531756: ext4_do_update_inode:5690: inode 16 [ 41.030775][ C0] EXT4-fs (loop2): last error at time 1779531756: ext4_do_update_inode:5690: inode 16 [ 41.045656][ T3521] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.3: mark_inode_dirty error [ 41.169300][ T3521] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.173366][ T3521] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.3: corrupted inode contents [ 41.332117][ T3521] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.334495][ T3521] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.3: mark_inode_dirty error [ 41.419632][ T3521] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.422634][ T3521] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.3: corrupted inode contents [ 41.522760][ T3541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.595335][ T3521] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.598490][ T3521] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 41.625437][ T3521] loop2: lost filesystem error report for type 5 error -117 [ 41.627155][ T3521] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.3: corrupted inode contents [ 41.654617][ T3521] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.727793][ T3521] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.3: mark_inode_dirty error [ 41.774634][ T3521] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 41.786844][ T3521] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 41.806687][ T3545] bridge_slave_0: left allmulticast mode [ 41.812474][ T3545] bridge_slave_0: left promiscuous mode [ 41.827213][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.838419][ T3521] loop2: lost filesystem error report for type 5 error -117 [ 41.844274][ T3521] EXT4-fs (loop2): 1 truncate cleaned up [ 41.873741][ T310] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 41.893391][ T310] loop2: lost filesystem error report for type 5 error -117 [ 41.898513][ T3521] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.924254][ T3521] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.927075][ T3545] bridge_slave_1: left allmulticast mode [ 41.941324][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.953374][ T3545] bridge_slave_1: left promiscuous mode [ 41.955400][ T3521] syz.2.3 (3521) used greatest stack depth: 9296 bytes left [ 41.964390][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.031468][ T3545] bond0: (slave bond_slave_0): Releasing backup interface [ 42.039503][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.051231][ T3545] bond0: (slave bond_slave_1): Releasing backup interface [ 42.064176][ T3545] team0: Port device team_slave_0 removed [ 42.074318][ T3545] team0: Port device team_slave_1 removed [ 42.081807][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.090769][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.099806][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.107953][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.121196][ T3545] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 42.190474][ T3571] netlink: 'syz.3.15': attribute type 1 has an invalid length. [ 42.248518][ T3573] tmpfs: Bad value for 'mpol' [ 42.272198][ T3575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 42.287984][ T3567] netlink: 'syz.2.14': attribute type 10 has an invalid length. [ 42.295968][ T3567] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.14'. [ 42.311360][ T3575] loop3: detected capacity change from 0 to 512 [ 42.344820][ T3575] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.365863][ T3575] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.15: corrupted xattr entries [ 42.390799][ T3575] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.391151][ T3575] EXT4-fs (loop3): 1 truncate cleaned up [ 42.400352][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 42.400373][ C0] EXT4-fs (loop3): initial error at time 1779531758: xattr_find_entry:337: inode 15 [ 42.400409][ C0] EXT4-fs (loop3): last error at time 1779531758: xattr_find_entry:337: inode 15 [ 42.434420][ T3575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.487252][ T3579] loop2: detected capacity change from 0 to 1024 [ 42.511834][ T3579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.532384][ T3571] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 42.543896][ T3579] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.572044][ T3584] loop0: detected capacity change from 0 to 128 [ 42.581436][ T3579] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.17: lblock 3 mapped to illegal pblock 3 (length 1) [ 42.591297][ T3571] netlink: 'syz.3.15': attribute type 15 has an invalid length. [ 42.610699][ T3579] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 42.624146][ T3584] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.637479][ T3573] xfrm1: entered allmulticast mode [ 42.653375][ T3579] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.653375][ T3579] [ 42.664747][ T3584] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.681840][ T3571] netlink: 18 bytes leftover after parsing attributes in process `syz.3.15'. [ 42.708875][ T3571] Zero length message leads to an empty skb [ 42.770255][ T3306] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 42.788245][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.801352][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.924027][ T3590] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 43.595280][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 43.595306][ T28] audit: type=1400 audit(1779531759.224:231): avc: denied { write } for pid=3604 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 43.652051][ T3605] netlink: 44 bytes leftover after parsing attributes in process `syz.3.25'. [ 43.851327][ T3588] loop0: detected capacity change from 0 to 2048 [ 43.890789][ T28] audit: type=1400 audit(1779531759.314:232): avc: denied { create } for pid=3604 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 43.975261][ T28] audit: type=1400 audit(1779531759.334:233): avc: denied { accept } for pid=3604 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 43.999885][ T3588] Alternate GPT is invalid, using primary GPT. [ 44.026041][ T3588] loop0: p1 p2 p3 [ 44.113719][ T28] audit: type=1400 audit(1779531759.724:234): avc: denied { read write } for pid=3606 comm="syz.3.26" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 44.213052][ T3609] loop3: detected capacity change from 0 to 512 [ 44.229660][ T28] audit: type=1400 audit(1779531759.724:235): avc: denied { open } for pid=3606 comm="syz.3.26" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 44.295270][ T3609] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 44.345136][ T28] audit: type=1400 audit(1779531759.724:236): avc: denied { ioctl } for pid=3606 comm="syz.3.26" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 44.382321][ T3609] netlink: 'syz.3.27': attribute type 5 has an invalid length. [ 44.433547][ T28] audit: type=1400 audit(1779531760.084:237): avc: denied { read write } for pid=3608 comm="syz.3.27" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 44.507717][ T28] audit: type=1400 audit(1779531760.084:238): avc: denied { open } for pid=3608 comm="syz.3.27" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 44.583801][ T28] audit: type=1400 audit(1779531760.094:239): avc: denied { create } for pid=3608 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.642759][ T28] audit: type=1400 audit(1779531760.234:240): avc: denied { ioctl } for pid=3602 comm="syz.4.24" path="socket:[4881]" dev="sockfs" ino=4881 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.792359][ T3613] bridge_slave_0: left allmulticast mode [ 44.822850][ T3613] bridge_slave_0: left promiscuous mode [ 44.860683][ T3613] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.922560][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 44.940001][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 44.943571][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 44.950056][ T3613] bridge_slave_1: left allmulticast mode [ 45.040509][ T3623] ref_ctr increment failed for inode: 0x22 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810006a880 [ 45.070249][ T3613] bridge_slave_1: left promiscuous mode [ 45.103648][ T3627] uprobe: syz.1.31:3627 failed to unregister, leaking uprobe [ 45.121909][ T3613] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.204217][ T3613] bond0: (slave bond_slave_0): Releasing backup interface [ 45.247551][ T3628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.32'. [ 45.279573][ T3628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.32'. [ 46.346035][ T3613] bond0: (slave bond_slave_1): Releasing backup interface [ 46.375105][ T3613] team0: Port device team_slave_0 removed [ 46.402026][ T3613] team0: Port device team_slave_1 removed [ 46.414454][ T3613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.434643][ T3613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.448526][ T3633] syz.1.33 uses obsolete (PF_INET,SOCK_PACKET) [ 46.458857][ T3613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.479662][ T3613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.509407][ T3613] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 46.529666][ T3628] loop2: detected capacity change from 0 to 4096 [ 46.555424][ T3611] ip6_vti0 speed is unknown, defaulting to 1000 [ 46.581666][ T3628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.585726][ T3636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 46.646534][ T3611] ip6_vti0 speed is unknown, defaulting to 1000 [ 46.653222][ T3611] ip6_vti0 speed is unknown, defaulting to 1000 [ 46.669104][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.694587][ T3640] loop0: detected capacity change from 0 to 128 [ 46.743084][ T3642] tmpfs: Bad value for 'mpol' [ 46.768533][ T3644] loop2: detected capacity change from 0 to 128 [ 46.768871][ T3640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 46.801157][ T3644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 46.838972][ T3611] infiniband syz2: set active [ 46.843807][ T3392] ip6_vti0 speed is unknown, defaulting to 1000 [ 46.859778][ T3611] infiniband syz2: added ip6_vti0 [ 46.870351][ T3611] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 46.870548][ T3611] infiniband syz2: Couldn't open port 1 [ 46.932987][ T3611] RDS/IB: syz2: added [ 46.937168][ T3611] smc: adding ib device syz2 with port count 1 [ 46.943550][ T3611] smc: ib device syz2 port 1 has no pnetid [ 47.134455][ T3644] syz.2.34: attempt to access beyond end of device [ 47.134455][ T3644] loop2: rw=2049, sector=133, nr_sectors = 24 limit=128 [ 47.149670][ T3642] xfrm1: entered allmulticast mode [ 47.156422][ T3392] ip6_vti0 speed is unknown, defaulting to 1000 [ 47.167784][ T3611] ip6_vti0 speed is unknown, defaulting to 1000 [ 47.197247][ T3640] syz.0.35: attempt to access beyond end of device [ 47.197247][ T3640] loop0: rw=2049, sector=133, nr_sectors = 24 limit=128 [ 47.212466][ T3611] ip6_vti0 speed is unknown, defaulting to 1000 [ 47.258129][ T3652] loop1: detected capacity change from 0 to 512 [ 47.285985][ T3652] EXT4-fs: Ignoring removed bh option [ 47.302684][ T3652] EXT4-fs: inline encryption not supported [ 47.311734][ T3654] netlink: 156 bytes leftover after parsing attributes in process `syz.2.39'. [ 47.332681][ T3652] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.361636][ T3611] ip6_vti0 speed is unknown, defaulting to 1000 [ 47.369002][ T3652] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 47.419679][ T3611] ip6_vti0 speed is unknown, defaulting to 1000 [ 47.457203][ T3611] ip6_vti0 speed is unknown, defaulting to 1000 [ 47.470180][ T3652] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.38: bg 0: block 248: padding at end of block bitmap is not set [ 47.543061][ T3652] loop1: lost filesystem error report for type 5 error -117 [ 47.543321][ T3652] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.38: Failed to acquire dquot type 1 [ 47.550757][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 47.550775][ C0] EXT4-fs (loop1): last error at time 1779532019: ext4_validate_block_bitmap:441 [ 47.569744][ T3658] loop3: detected capacity change from 0 to 512 [ 47.602874][ T3664] loop0: detected capacity change from 0 to 512 [ 47.615982][ T3652] loop1: lost filesystem error report for type 5 error -28 [ 47.636893][ T3664] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.638066][ T3658] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.40: corrupted inode contents [ 47.669954][ T3658] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 47.672868][ T3658] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #16: comm syz.3.40: mark_inode_dirty error [ 47.682317][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 47.682347][ C1] EXT4-fs (loop3): initial error at time 1779532019: ext4_do_update_inode:5690: inode 16 [ 47.682499][ C1] EXT4-fs (loop3): last error at time 1779532019: ext4_do_update_inode:5690: inode 16 [ 47.725499][ T3658] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 47.726541][ T3652] EXT4-fs (loop1): 1 truncate cleaned up [ 47.741926][ T3658] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.40: corrupted inode contents [ 47.754216][ T3658] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 47.755515][ T3652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 47.777165][ T3658] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.40: mark_inode_dirty error [ 47.790803][ T3658] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 47.794402][ T3658] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.40: corrupted inode contents [ 47.816799][ T3658] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 47.818154][ T3658] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 47.837913][ T3658] loop3: lost filesystem error report for type 5 error -117 [ 47.840957][ T3658] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.40: corrupted inode contents [ 47.862378][ T3658] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 47.863927][ T3658] EXT4-fs error (device loop3): ext4_truncate:4690: inode #16: comm syz.3.40: mark_inode_dirty error [ 47.887197][ T3658] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 47.888017][ T3658] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 47.907367][ T3658] loop3: lost filesystem error report for type 5 error -117 [ 47.911642][ T3658] EXT4-fs (loop3): 1 truncate cleaned up [ 47.927731][ T310] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 1 [ 47.931161][ T3658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.955332][ T3658] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.034407][ T3658] IPv6: NLM_F_CREATE should be specified when creating new route [ 48.077216][ T3679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.44'. [ 48.079192][ T3652] syz.1.38 (3652) used greatest stack depth: 9128 bytes left [ 48.120508][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 48.299263][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.327430][ T3303] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 48.342445][ T3685] loop3: detected capacity change from 0 to 128 [ 48.481371][ T3688] loop1: detected capacity change from 0 to 512 [ 48.541779][ T3685] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000020) [ 48.583424][ T3688] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.1.45: corrupted xattr block 95: invalid header [ 48.598060][ T3688] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 48.601391][ T3688] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.45: bg 0: block 7: invalid block bitmap [ 48.611354][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 48.611423][ C0] EXT4-fs (loop1): initial error at time 1779532020: ext4_expand_extra_isize_ea:2810: inode 11 [ 48.611903][ C0] EXT4-fs (loop1): last error at time 1779532020: ext4_expand_extra_isize_ea:2810: inode 11 [ 48.653119][ T3688] loop1: lost filesystem error report for type 5 error -117 [ 48.657767][ T3688] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 48.675000][ T3688] loop1: lost filesystem error report for type 5 error -117 [ 48.677387][ T3688] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #11: comm syz.1.45: corrupted xattr block 95: invalid header [ 48.699425][ T3688] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 48.701130][ T3688] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 48.721345][ T3688] EXT4-fs (loop1): 1 orphan inode deleted [ 48.736642][ T3688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.207363][ T3695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=3695 comm=syz.2.50 [ 49.235232][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 49.235248][ T28] audit: type=1400 audit(1779532020.860:258): avc: denied { create } for pid=3692 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.330869][ T3702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'. [ 49.345781][ T3698] netlink: 277 bytes leftover after parsing attributes in process `syz.2.50'. [ 49.366119][ T28] audit: type=1400 audit(1779532020.860:259): avc: denied { create } for pid=3684 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.407655][ T3706] loop2: detected capacity change from 0 to 512 [ 49.427691][ T3706] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.440248][ T28] audit: type=1400 audit(1779532020.860:260): avc: denied { bind } for pid=3692 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.485272][ T28] audit: type=1400 audit(1779532020.870:261): avc: denied { write } for pid=3692 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 49.516380][ T3706] EXT4-fs (loop2): 1 truncate cleaned up [ 49.535597][ T3706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.545517][ T28] audit: type=1400 audit(1779532021.040:262): avc: denied { nlmsg_read } for pid=3694 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.568354][ T28] audit: type=1400 audit(1779532021.050:263): avc: denied { ioctl } for pid=3699 comm="syz.4.52" path="socket:[5086]" dev="sockfs" ino=5086 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 49.592738][ T28] audit: type=1400 audit(1779532021.050:264): avc: denied { write } for pid=3699 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 49.732170][ T3695] bridge_slave_0: left allmulticast mode [ 49.763255][ T3695] bridge_slave_0: left promiscuous mode [ 49.777967][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.823792][ T3695] bridge_slave_1: left allmulticast mode [ 49.837135][ T3695] bridge_slave_1: left promiscuous mode [ 49.855106][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.910140][ T3695] bond0: (slave bond_slave_0): Releasing backup interface [ 49.939901][ T3695] bond0: (slave bond_slave_1): Releasing backup interface [ 50.027157][ T3695] team0: Port device team_slave_0 removed [ 50.058674][ T3695] team0: Port device team_slave_1 removed [ 50.065871][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.073338][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.082680][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.090319][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.103034][ T3695] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 50.215373][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.230132][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.243839][ T3713] ref_ctr increment failed for inode: 0x57 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881047daf40 [ 50.246431][ T3711] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 50.284104][ T3712] uprobe: syz.4.55:3712 failed to unregister, leaking uprobe [ 50.295198][ T28] audit: type=1400 audit(1779532021.970:265): avc: denied { getopt } for pid=3714 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.339607][ T3718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 50.366831][ T28] audit: type=1400 audit(1779532022.060:266): avc: denied { ioctl } for pid=3721 comm="syz.0.60" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=6166 ioctlcmd=0x5431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.399947][ T28] audit: type=1400 audit(1779532022.070:267): avc: denied { read write } for pid=3723 comm="syz.2.59" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 50.479803][ T3718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.57'. [ 50.495451][ T3718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 50.513835][ T3718] netlink: 7 bytes leftover after parsing attributes in process `syz.1.57'. [ 50.530437][ T3737] netlink: 36 bytes leftover after parsing attributes in process `syz.1.57'. [ 50.988010][ T3742] loop1: detected capacity change from 0 to 128 [ 51.024532][ T3742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 51.107750][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 51.232991][ T3742] syz.1.65: attempt to access beyond end of device [ 51.232991][ T3742] loop1: rw=2049, sector=133, nr_sectors = 24 limit=128 [ 51.678175][ T3758] loop1: detected capacity change from 0 to 512 [ 51.685104][ T3758] ext4: Unknown parameter 'euid' [ 51.701565][ T3758] bridge0: port 3(vlan2) entered blocking state [ 51.708063][ T3758] bridge0: port 3(vlan2) entered disabled state [ 51.714409][ T3758] vlan2: entered allmulticast mode [ 51.719719][ T3758] geneve0: entered allmulticast mode [ 51.736333][ T3757] loop3: detected capacity change from 0 to 128 [ 51.793191][ T3758] vlan2: entered promiscuous mode [ 51.798480][ T3758] geneve0: entered promiscuous mode [ 51.887789][ T3760] loop4: detected capacity change from 0 to 8192 [ 51.915655][ T3736] loop0: detected capacity change from 0 to 2048 [ 51.932779][ T3736] EXT4-fs: dax option not supported [ 51.945451][ T3760] loop4: p2 p3 p4 [ 51.950735][ T3760] loop4: p2 size 588341 extends beyond EOD, truncated [ 51.980111][ T3760] loop4: p3 start 65280 is beyond EOD, truncated [ 51.997768][ T3760] loop4: p4 start 219873280 is beyond EOD, truncated [ 52.098624][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 52.344936][ T3777] tmpfs: Bad value for 'mpol' [ 52.450338][ T3777] xfrm1: entered allmulticast mode [ 52.462702][ T3781] loop4: detected capacity change from 0 to 512 [ 52.503209][ T3781] EXT4-fs (loop4): 1 truncate cleaned up [ 52.516431][ T3788] netlink: 'syz.3.81': attribute type 10 has an invalid length. [ 52.524868][ T3788] veth0_macvtap: left promiscuous mode [ 52.531796][ T3781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.545836][ T3788] veth0_macvtap: entered promiscuous mode [ 52.558907][ T3788] team0: Device macvtap0 failed to register rx_handler [ 52.578204][ T3788] veth0_macvtap: left promiscuous mode [ 52.591290][ T3792] veth1_to_team: entered promiscuous mode [ 52.600302][ T3792] ipvlan1: entered promiscuous mode [ 52.606223][ T3792] ipvlan1: left promiscuous mode [ 52.611651][ T3792] veth1_to_team: left promiscuous mode [ 52.618444][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.717938][ T3798] loop4: detected capacity change from 0 to 128 [ 52.765625][ T3798] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.810152][ T3798] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.928822][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.938111][ T3803] loop1: detected capacity change from 0 to 8192 [ 53.005346][ T3803] loop1: p2 p3 p4 [ 53.009274][ T3803] loop1: p2 size 588341 extends beyond EOD, truncated [ 53.021373][ T3803] loop1: p3 start 65280 is beyond EOD, truncated [ 53.034516][ T3803] loop1: p4 start 219873280 is beyond EOD, truncated [ 53.168379][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 53.334709][ T3828] FAULT_INJECTION: forcing a failure. [ 53.334709][ T3828] name failslab, interval 1, probability 0, space 0, times 1 [ 53.386140][ T3828] CPU: 0 UID: 0 PID: 3828 Comm: syz.0.94 Not tainted syzkaller #0 PREEMPT(full) [ 53.386230][ T3828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 53.386244][ T3828] Call Trace: [ 53.386254][ T3828] [ 53.386261][ T3828] __dump_stack+0x1d/0x30 [ 53.386288][ T3828] dump_stack_lvl+0x95/0xd0 [ 53.386314][ T3828] dump_stack+0x15/0x1b [ 53.386402][ T3828] should_fail_ex+0x263/0x280 [ 53.386429][ T3828] should_failslab+0x8c/0xb0 [ 53.386458][ T3828] __kvmalloc_node_noprof+0x155/0x640 [ 53.386483][ T3828] ? rhashtable_init_noprof+0x30f/0x480 [ 53.386583][ T3828] rhashtable_init_noprof+0x30f/0x480 [ 53.386619][ T3828] rhltable_init_noprof+0x1d/0x40 [ 53.386655][ T3828] nf_tables_newtable+0x522/0xea0 [ 53.386692][ T3828] nfnetlink_rcv+0xc15/0x1720 [ 53.386818][ T3828] netlink_unicast+0x5a8/0x680 [ 53.386852][ T3828] netlink_sendmsg+0x5c8/0x6f0 [ 53.386886][ T3828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.386994][ T3828] ____sys_sendmsg+0x563/0x5b0 [ 53.387022][ T3828] ___sys_sendmsg+0x195/0x1e0 [ 53.387069][ T3828] __x64_sys_sendmsg+0xd4/0x160 [ 53.387162][ T3828] x64_sys_call+0x194c/0x3020 [ 53.387267][ T3828] do_syscall_64+0x12c/0x3b0 [ 53.387309][ T3828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.387336][ T3828] RIP: 0033:0x7f432c35ce59 [ 53.387352][ T3828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.387375][ T3828] RSP: 002b:00007f432adaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.387489][ T3828] RAX: ffffffffffffffda RBX: 00007f432c5d5fa0 RCX: 00007f432c35ce59 [ 53.387583][ T3828] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 53.387601][ T3828] RBP: 00007f432adaf090 R08: 0000000000000000 R09: 0000000000000000 [ 53.387617][ T3828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.387633][ T3828] R13: 00007f432c5d6038 R14: 00007f432c5d5fa0 R15: 00007ffded7624f8 [ 53.387749][ T3828] [ 53.665865][ T3831] tmpfs: Bad value for 'mpol' [ 53.728187][ T3830] xfrm1: entered allmulticast mode [ 53.775133][ T3833] tmpfs: Bad value for 'mpol' [ 53.927730][ T3833] xfrm1: entered allmulticast mode [ 54.091529][ T3845] tmpfs: Bad value for 'mpol' [ 54.109102][ T3847] random: crng reseeded on system resumption [ 54.118256][ T3841] loop0: detected capacity change from 0 to 8192 [ 54.126614][ T3849] netlink: 'syz.4.103': attribute type 10 has an invalid length. [ 54.138356][ T3849] veth0_macvtap: left promiscuous mode [ 54.148444][ T3849] veth0_macvtap: entered promiscuous mode [ 54.157387][ T3849] team0: Device macvtap0 failed to register rx_handler [ 54.173149][ T3849] veth0_macvtap: left promiscuous mode [ 54.189321][ T3841] loop0: p2 p3 p4 [ 54.202349][ T3841] loop0: p2 size 588341 extends beyond EOD, truncated [ 54.215140][ T3841] loop0: p3 start 65280 is beyond EOD, truncated [ 54.221598][ T3841] loop0: p4 start 219873280 is beyond EOD, truncated [ 54.381510][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 54.381526][ T28] audit: type=1400 audit(1779532026.070:313): avc: denied { connect } for pid=3864 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.479428][ T3865] loop3: detected capacity change from 0 to 256 [ 54.656749][ T3867] loop4: detected capacity change from 0 to 256 [ 54.682994][ T3867] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.728693][ T3867] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 54.753786][ T3867] FAT-fs (loop4): Filesystem has been set read-only [ 54.761190][ T3867] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 54.828715][ T3867] bridge1: entered promiscuous mode [ 54.834613][ T3867] bridge1: entered allmulticast mode [ 55.452614][ T28] audit: type=1400 audit(1779532027.131:314): avc: denied { connect } for pid=3873 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.694044][ T3884] random: crng reseeded on system resumption [ 55.790076][ T28] audit: type=1400 audit(1779532027.481:315): avc: denied { bind } for pid=3888 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.811524][ T3872] syzkaller0: entered promiscuous mode [ 55.819190][ T3889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 55.930497][ T3872] syzkaller0: entered allmulticast mode [ 55.954555][ T28] audit: type=1400 audit(1779532027.641:316): avc: denied { getopt } for pid=3870 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.068268][ T3901] loop2: detected capacity change from 0 to 1024 [ 56.095690][ T3901] EXT4-fs: test_dummy_encryption option not supported [ 56.118844][ T3903] loop0: detected capacity change from 0 to 128 [ 56.227855][ T3866] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 56.235867][ T3866] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 56.439253][ T3907] loop2: detected capacity change from 0 to 512 [ 56.471153][ T28] audit: type=1400 audit(1779532028.141:317): avc: denied { mounton } for pid=3899 comm="syz.2.122" path="/syzcgroup/net/syz2/devices.allow" dev="cgroup" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 56.593473][ T3907] EXT4-fs (loop2): 1 orphan inode deleted [ 56.608423][ T3907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.624696][ T3907] ext4 filesystem being mounted at /syzcgroup/net/syz2/devices.allow supports timestamps until 2038-01-19 (0x7fffffff) [ 56.938043][ T3550] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 56.938068][ T3550] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 56.953454][ T3907] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.047262][ T28] audit: type=1400 audit(1779532028.681:318): avc: denied { map } for pid=3899 comm="syz.2.122" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.047302][ T28] audit: type=1400 audit(1779532028.691:319): avc: denied { read write } for pid=3899 comm="syz.2.122" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.482498][ T3923] netlink: 32 bytes leftover after parsing attributes in process `syz.3.129'. [ 57.483155][ T3923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'. [ 57.617455][ T3903] loop0: detected capacity change from 0 to 512 [ 57.675510][ T28] audit: type=1400 audit(1779532029.371:320): avc: denied { connect } for pid=3928 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.703557][ T3903] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.727827][ T28] audit: type=1400 audit(1779532029.421:321): avc: denied { ioctl } for pid=3928 comm="syz.3.132" path="socket:[5823]" dev="sockfs" ino=5823 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.897703][ T3934] loop4: detected capacity change from 0 to 512 [ 57.926122][ T3934] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.134: Bad quota inum: 2, type: 1 [ 58.079132][ T3934] loop4: lost filesystem error report for type 5 error -117 [ 58.084006][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 58.097851][ C0] EXT4-fs (loop4): initial error at time 1779532029: ext4_quota_enable:7221 [ 58.106615][ C0] EXT4-fs (loop4): last error at time 1779532029: ext4_quota_enable:7221 [ 58.146742][ T3938] loop3: detected capacity change from 0 to 8192 [ 58.221257][ T3934] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 58.253161][ T3934] EXT4-fs (loop4): mount failed [ 58.259138][ T2982] loop3: p1 p2 p3 [ 58.274846][ T2982] loop3: p1 size 67111168 extends beyond EOD, truncated [ 58.303510][ T2982] loop3: p2 size 8388608 extends beyond EOD, truncated [ 58.471149][ T2982] loop3: p3 start 4294901760 is beyond EOD, truncated [ 58.515885][ T3938] loop3: p1 p2 p3 [ 58.519850][ T3938] loop3: p1 size 67111168 extends beyond EOD, truncated [ 58.529251][ T3938] loop3: p2 size 8388608 extends beyond EOD, truncated [ 58.583182][ T3938] loop3: p3 start 4294901760 is beyond EOD, truncated [ 58.615499][ T3392] IPVS: starting estimator thread 0... [ 58.765423][ T3945] IPVS: using max 2544 ests per chain, 127200 per kthread [ 59.197937][ T3934] loop4: detected capacity change from 0 to 512 [ 59.263611][ T3934] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 59.305691][ T3955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.316338][ T3954] loop3: detected capacity change from 0 to 512 [ 59.330645][ T3934] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 59.356075][ T3954] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.368862][ T3955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.391316][ T3934] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.134: Corrupt directory, running e2fsck is recommended [ 59.429967][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 59.429979][ T28] audit: type=1400 audit(1779532031.121:323): avc: denied { ioctl } for pid=3953 comm="syz.1.139" path="socket:[6485]" dev="sockfs" ino=6485 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.506407][ T3934] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 59.552889][ T3934] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.134: corrupted in-inode xattr: e_name out of bounds [ 59.573779][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 59.584843][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 59.648179][ T3934] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.648585][ T3934] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.134: couldn't read orphan inode 15 (err -117) [ 59.657917][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 59.657930][ C0] EXT4-fs (loop4): initial error at time 1779532031: ext4_iget_extra_inode:5128: inode 15 [ 59.657961][ C0] EXT4-fs (loop4): last error at time 1779532031: ext4_iget_extra_inode:5128: inode 15 [ 59.724498][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 59.738620][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 59.878692][ T3934] loop4: lost filesystem error report for type 5 error -117 [ 59.882118][ T3934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.977886][ T3934] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 60.003598][ T3934] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 60.028077][ T3959] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 60.039626][ T3959] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 60.049789][ T3959] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.134: Corrupt directory, running e2fsck is recommended [ 60.062133][ T3934] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.134: Corrupt directory, running e2fsck is recommended [ 60.097018][ T28] audit: type=1400 audit(1779532031.781:324): avc: denied { create } for pid=3960 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 60.125305][ T3961] loop1: detected capacity change from 0 to 512 [ 60.151645][ T3961] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 60.190750][ T28] audit: type=1400 audit(1779532031.781:325): avc: denied { bind } for pid=3960 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 60.230744][ T3298] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 60.239815][ T3961] System zones: 1-12 [ 60.250293][ T3961] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.140: corrupted in-inode xattr: e_value size too large [ 60.267842][ T3959] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 60.293939][ T3961] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.294132][ T3961] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.140: couldn't read orphan inode 15 (err -117) [ 60.315089][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 60.315103][ C0] EXT4-fs (loop1): initial error at time 1779532031: ext4_iget_extra_inode:5128: inode 15 [ 60.315135][ C0] EXT4-fs (loop1): last error at time 1779532031: ext4_iget_extra_inode:5128: inode 15 [ 60.353581][ T3959] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 60.373787][ T3959] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.134: Corrupt directory, running e2fsck is recommended [ 60.400641][ T3963] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 60.424116][ T3961] loop1: lost filesystem error report for type 5 error -117 [ 60.485287][ T3961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.529810][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.557670][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.574588][ T3971] loop2: detected capacity change from 0 to 512 [ 60.603892][ T3971] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 60.618638][ T28] audit: type=1400 audit(1779532032.311:326): avc: denied { mount } for pid=3972 comm="syz.4.144" name="/" dev="configfs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 60.792034][ T3971] hub 9-0:1.0: USB hub found [ 60.799918][ T3973] xfrm1: left allmulticast mode [ 60.811655][ T3971] hub 9-0:1.0: 8 ports detected [ 60.816658][ T3973] bridge1: left allmulticast mode [ 60.824425][ T10] ip6_vti0 speed is unknown, defaulting to 1000 [ 60.948561][ T28] audit: type=1400 audit(1779532032.641:327): avc: denied { create } for pid=3970 comm="syz.2.145" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 61.017190][ T3989] capability: warning: `syz.1.146' uses 32-bit capabilities (legacy support in use) [ 61.097415][ T3999] netlink: 'syz.0.152': attribute type 10 has an invalid length. [ 61.114549][ T3999] syz_tun: entered promiscuous mode [ 61.124277][ T3999] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 61.175215][ T28] audit: type=1400 audit(1779532032.871:328): avc: denied { shutdown } for pid=3975 comm="syz.1.146" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.209444][ T4005] loop3: detected capacity change from 0 to 128 [ 61.235828][ T4007] netlink: 72 bytes leftover after parsing attributes in process `syz.0.155'. [ 61.309797][ T28] audit: type=1400 audit(1779532033.001:329): avc: denied { getopt } for pid=4006 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.355720][ T28] audit: type=1400 audit(1779532033.001:330): avc: denied { name_connect } for pid=4006 comm="syz.0.155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 61.424634][ T28] audit: type=1400 audit(1779532033.121:331): avc: denied { getopt } for pid=4012 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.449794][ T4013] netlink: 308 bytes leftover after parsing attributes in process `syz.0.157'. [ 61.470989][ T4013] netlink: 308 bytes leftover after parsing attributes in process `syz.0.157'. [ 61.486873][ T4005] loop3: detected capacity change from 0 to 512 [ 61.553900][ T4005] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.023369][ T4019] loop4: detected capacity change from 0 to 128 [ 62.147503][ T4005] ip6gre1: entered promiscuous mode [ 62.180399][ T4005] ip6gre1: entered allmulticast mode [ 62.218166][ T4022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.234722][ T4022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.276548][ T4019] loop4: detected capacity change from 0 to 512 [ 62.348179][ T4022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.159'. [ 62.383784][ T4019] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.404861][ T4023] loop0: detected capacity change from 0 to 128 [ 62.425325][ T4023] msdos: Unknown parameter '' [ 62.720273][ T28] audit: type=1400 audit(1779532034.412:332): avc: denied { read } for pid=4024 comm="syz.2.160" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 62.844399][ T4029] netlink: 'syz.2.161': attribute type 17 has an invalid length. [ 62.891804][ T4031] loop3: detected capacity change from 0 to 512 [ 62.910520][ T4031] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.162: corrupted in-inode xattr: invalid ea_ino [ 62.993478][ T4031] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.996077][ T4031] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.162: couldn't read orphan inode 15 (err -117) [ 63.005284][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 63.005306][ C0] EXT4-fs (loop3): initial error at time 1779532034: ext4_iget_extra_inode:5128: inode 15 [ 63.005402][ C0] EXT4-fs (loop3): last error at time 1779532034: ext4_iget_extra_inode:5128: inode 15 [ 63.043452][ T4031] loop3: lost filesystem error report for type 5 error -117 [ 63.045589][ T4031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.076654][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.199961][ T4019] ip6gre1: entered promiscuous mode [ 63.228384][ T4019] ip6gre1: entered allmulticast mode [ 63.802759][ T4047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168'. [ 63.832405][ T4047] netlink: 10 bytes leftover after parsing attributes in process `syz.2.168'. [ 64.141644][ T4055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 64.151064][ T10] IPVS: starting estimator thread 0... [ 64.264643][ T4054] IPVS: using max 2592 ests per chain, 129600 per kthread [ 64.978285][ T28] kauditd_printk_skb: 525 callbacks suppressed [ 64.978303][ T28] audit: type=1326 audit(1779532036.672:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4038 comm="syz.3.165" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7e1b86ce59 code=0x7ffc0000 [ 65.412800][ T4066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 65.441388][ T4066] netlink: 'syz.1.173': attribute type 30 has an invalid length. [ 65.493294][ T4067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 65.530155][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.539440][ T4067] netlink: 'syz.1.173': attribute type 30 has an invalid length. [ 65.557633][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.604820][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.636792][ T4071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.175'. [ 65.657176][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.728124][ T4073] loop1: detected capacity change from 0 to 2048 [ 65.764879][ T4073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.843964][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.913385][ T4081] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 65.962069][ T4083] tmpfs: Bad value for 'mpol' [ 66.045244][ T4085] loop0: detected capacity change from 0 to 128 [ 66.119603][ T4089] loop1: detected capacity change from 0 to 128 [ 66.298936][ T4096] FAULT_INJECTION: forcing a failure. [ 66.298936][ T4096] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.333109][ T4096] CPU: 1 UID: 0 PID: 4096 Comm: syz.2.184 Not tainted syzkaller #0 PREEMPT(full) [ 66.333134][ T4096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 66.333146][ T4096] Call Trace: [ 66.333152][ T4096] [ 66.333158][ T4096] __dump_stack+0x1d/0x30 [ 66.333192][ T4096] dump_stack_lvl+0x95/0xd0 [ 66.333223][ T4096] dump_stack+0x15/0x1b [ 66.333246][ T4096] should_fail_ex+0x263/0x280 [ 66.333312][ T4096] should_fail+0xb/0x20 [ 66.333334][ T4096] should_fail_usercopy+0x1a/0x20 [ 66.333368][ T4096] _copy_from_user+0x1c/0xb0 [ 66.333474][ T4096] ___sys_sendmsg+0xc1/0x1e0 [ 66.333520][ T4096] __x64_sys_sendmsg+0xd4/0x160 [ 66.333547][ T4096] x64_sys_call+0x194c/0x3020 [ 66.333605][ T4096] do_syscall_64+0x12c/0x3b0 [ 66.333673][ T4096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.333716][ T4096] RIP: 0033:0x7f89edf6ce59 [ 66.333890][ T4096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.333912][ T4096] RSP: 002b:00007f89ec9bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.333936][ T4096] RAX: ffffffffffffffda RBX: 00007f89ee1e5fa0 RCX: 00007f89edf6ce59 [ 66.333952][ T4096] RDX: 00000000000000ee RSI: 00002000000001c0 RDI: 0000000000000004 [ 66.334007][ T4096] RBP: 00007f89ec9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 66.334019][ T4096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.334030][ T4096] R13: 00007f89ee1e6038 R14: 00007f89ee1e5fa0 R15: 00007fff91af60e8 [ 66.334052][ T4096] [ 66.505805][ T4085] syz.0.181: attempt to access beyond end of device [ 66.505805][ T4085] loop0: rw=2049, sector=133, nr_sectors = 24 limit=128 [ 66.524425][ T4092] ------------[ cut here ]------------ [ 66.529921][ T4092] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#0: syz.3.183/4092 [ 66.539593][ T4092] Modules linked in: [ 66.543494][ T4092] CPU: 0 UID: 0 PID: 4092 Comm: syz.3.183 Not tainted syzkaller #0 PREEMPT(full) [ 66.552697][ T4092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 66.562860][ T4092] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 66.568551][ T4092] Code: 8b 05 e1 a8 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d e9 04 48 5f 04 cc e8 2e 1c 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 20 1c 1e 00 90 0f 0b 90 e9 af fa ff ff [ 66.588190][ T4092] RSP: 0018:ffffc900001f3dd8 EFLAGS: 00010093 [ 66.594280][ T4092] RAX: ffffffff813b1762 RBX: ffff8881054a8000 RCX: ffff8881054a8000 [ 66.602345][ T4092] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 66.610332][ T4092] RBP: 0000000000000080 R08: ffff8881054a8b00 R09: 0000000000000000 [ 66.618354][ T4092] R10: ffffc900001f3df0 R11: 0001c900001f3df0 R12: ffff8881054a8000 [ 66.626340][ T4092] R13: ffff8881054a8828 R14: ffff888105474010 R15: 0000000000000080 [ 66.634388][ T4092] FS: 0000000000000000(0000) GS:ffff8882ae8f8000(0000) knlGS:0000000000000000 [ 66.643380][ T4092] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.649975][ T4092] CR2: 0000001b32f13ff8 CR3: 000000011d08e000 CR4: 00000000003506f0 [ 66.657960][ T4092] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.666009][ T4092] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 66.674004][ T4092] Call Trace: [ 66.677302][ T4092] [ 66.680295][ T4092] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 66.685708][ T4092] ? __list_add_valid_or_report+0x38/0xe0 [ 66.691487][ T4092] do_exit+0xc13/0x1530 [ 66.695739][ T4092] ? switch_fpu_return+0xe7/0x1b0 [ 66.700806][ T4092] __x64_sys_exit+0x1f/0x20 [ 66.705404][ T4092] x64_sys_call+0x301d/0x3020 [ 66.710126][ T4092] do_syscall_64+0x12c/0x3b0 [ 66.714740][ T4092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.720696][ T4092] RIP: 0033:0x7f7e1b86ce59 [ 66.725123][ T4092] Code: Unable to access opcode bytes at 0x7f7e1b86ce2f. [ 66.732229][ T4092] RSP: 002b:00007f7e1a2befd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 66.740699][ T4092] RAX: ffffffffffffffda RBX: 00007f7e1bae5fa0 RCX: 00007f7e1b86ce59 [ 66.748789][ T4092] RDX: 00007f7e1a2bf9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.756770][ T4092] RBP: 00007f7e1b902d6f R08: 0000000000000000 R09: 0000000000000000 [ 66.764769][ T4092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.772770][ T4092] R13: 00007f7e1bae6038 R14: 00007f7e1bae5fa0 R15: 00007ffcd8b39188 [ 66.780797][ T4092] [ 66.783825][ T4092] ---[ end trace 0000000000000000 ]--- [ 66.833370][ T4100] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 66.834189][ T28] audit: type=1400 audit(1779532038.532:859): avc: denied { write } for pid=4099 comm="syz.4.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.913685][ T28] audit: type=1400 audit(1779532038.592:860): avc: denied { ioctl } for pid=4103 comm="syz.2.187" path="pid:[4026532377]" dev="nsfs" ino=4026532377 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.998302][ T28] audit: type=1400 audit(1779532038.692:861): avc: denied { read } for pid=4110 comm="syz.0.190" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.028753][ T4109] ref_ctr increment failed for inode: 0xdd offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810006ec00 [ 67.048641][ T4116] uprobe: syz.4.189:4116 failed to unregister, leaking uprobe [ 67.057038][ T28] audit: type=1400 audit(1779532038.692:862): avc: denied { open } for pid=4110 comm="syz.0.190" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.302775][ T4131] loop4: detected capacity change from 0 to 4096 [ 67.332644][ T4131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.349753][ T28] audit: type=1400 audit(1779532039.042:863): avc: denied { write } for pid=4130 comm="syz.4.192" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.371756][ T28] audit: type=1400 audit(1779532039.062:864): avc: denied { read } for pid=4130 comm="syz.4.192" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.456415][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.513030][ T4144] tmpfs: Bad value for 'mpol' [ 67.692361][ T4149] loop3: detected capacity change from 0 to 164 [ 67.718428][ T28] audit: type=1400 audit(1779532039.412:865): avc: denied { mount } for pid=4147 comm="syz.3.195" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 67.796037][ T28] audit: type=1400 audit(1779532039.482:866): avc: denied { getopt } for pid=4151 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.911246][ T28] audit: type=1400 audit(1779532039.602:867): avc: denied { setopt } for pid=4155 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.967466][ T4181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.969221][ T4178] tmpfs: Bad value for 'mpol' [ 68.977064][ T4181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.979027][ T4181] __nla_validate_parse: 3 callbacks suppressed [ 68.979061][ T4181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.205'. [ 69.036936][ T4181] netlink: 100 bytes leftover after parsing attributes in process `syz.3.205'. [ 69.069237][ T4181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.205'. [ 69.141649][ T4190] loop0: detected capacity change from 0 to 256 [ 69.165278][ T4191] loop2: detected capacity change from 0 to 1024 [ 69.208186][ T4191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 69.322306][ T4191] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.345802][ T4191] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.211: bg 0: block 112: padding at end of block bitmap is not set [ 69.628737][ T4191] netlink: 10 bytes leftover after parsing attributes in process `syz.2.211'. [ 69.648925][ T4193] loop4: detected capacity change from 0 to 256 [ 69.671127][ T4193] FAT-fs (loop4): bogus number of FAT sectors [ 69.683595][ T4193] FAT-fs (loop4): Can't find a valid FAT filesystem [ 69.786190][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.814955][ T4212] loop3: detected capacity change from 0 to 1024 [ 69.843369][ T4212] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 69.869016][ T4215] netlink: 'syz.2.219': attribute type 3 has an invalid length. [ 69.896800][ T4217] ref_ctr increment failed for inode: 0xfe offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104241440 [ 69.949822][ T4217] uprobe: syz.4.220:4217 failed to unregister, leaking uprobe [ 70.101077][ T4225] tmpfs: Bad value for 'mpol' [ 70.130206][ T4227] netlink: 'syz.4.224': attribute type 17 has an invalid length. [ 70.291590][ T4234] loop0: detected capacity change from 0 to 512 [ 70.315865][ T23] IPVS: starting estimator thread 0... [ 70.390870][ T4234] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.0.223: corrupted xattr block 95: invalid header [ 70.405762][ T4234] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 70.409196][ T4234] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.223: bg 0: block 7: invalid block bitmap [ 70.422992][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 70.423047][ C1] EXT4-fs (loop0): initial error at time 1779532043: ext4_expand_extra_isize_ea:2810: inode 11 [ 70.423181][ C1] EXT4-fs (loop0): last error at time 1779532043: ext4_expand_extra_isize_ea:2810: inode 11 [ 70.465354][ T4234] loop0: lost filesystem error report for type 5 error -117 [ 70.466633][ T4236] IPVS: using max 2544 ests per chain, 127200 per kthread [ 70.481868][ T4234] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 70.491332][ T4234] loop0: lost filesystem error report for type 5 error -117 [ 70.494513][ T4234] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #11: comm syz.0.223: corrupted xattr block 95: invalid header [ 70.516882][ T4234] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 70.518286][ T4234] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 70.537939][ T4234] EXT4-fs (loop0): 1 orphan inode deleted [ 70.564036][ T4234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.605778][ T4238] EXT4-fs (loop1): orphan cleanup on readonly fs [ 70.686965][ T4238] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.227: bad orphan inode 15 [ 70.804884][ T4238] loop1: lost filesystem error report for type 5 error -117 [ 70.805250][ T4238] ext4_test_bit(bit=14, block=18) = 1 [ 70.812711][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 70.812748][ C1] EXT4-fs (loop1): initial error at time 1779532043: ext4_orphan_get:1423 [ 70.812773][ C1] EXT4-fs (loop1): last error at time 1779532043: ext4_orphan_get:1423 [ 70.955799][ T4238] is_bad_inode(inode)=0 [ 70.967812][ T4238] NEXT_ORPHAN(inode)=1023 [ 70.980446][ T4238] max_ino=32 [ 70.993624][ T4238] i_nlink=0 [ 71.004746][ T4238] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #15: comm syz.1.227: corrupted xattr block 19: e_value size too large [ 71.050384][ T4238] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.050579][ T4238] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 71.074017][ T4227] veth0_macvtap: entered promiscuous mode [ 71.111433][ T4238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-2400-000000000000 ro without journal. Quota mode: none. [ 71.205065][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 71.205144][ T28] audit: type=1400 audit(1779532043.901:880): avc: denied { mount } for pid=4237 comm="syz.1.227" name="/" dev="autofs" ino=7332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 71.329889][ T4253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.230'. [ 71.345230][ T4256] set_capacity_and_notify: 1 callbacks suppressed [ 71.345242][ T4256] loop3: detected capacity change from 0 to 512 [ 71.409422][ T4256] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.231: iget: bad i_size value: 38620345925642 [ 71.437880][ T3299] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /43/éq‰Y’3aK: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=4096, size=4096 fake=0 [ 71.497734][ T4256] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.498094][ T4256] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.231: couldn't read orphan inode 15 (err -117) [ 71.507285][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 71.507306][ C1] EXT4-fs (loop3): initial error at time 1779532044: ext4_orphan_get:1397: inode 15 [ 71.507361][ C1] EXT4-fs (loop3): last error at time 1779532044: ext4_orphan_get:1397: inode 15 [ 71.627330][ T4261] loop4: detected capacity change from 0 to 8192 [ 71.642902][ T3299] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 71.659192][ T4256] loop3: lost filesystem error report for type 5 error -117 [ 71.659842][ T4256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.721208][ T3299] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 71.766921][ T28] audit: type=1400 audit(1779532044.461:881): avc: denied { listen } for pid=4255 comm="syz.3.231" lport=56893 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.826261][ T4256] EXT4-fs (loop3): shut down requested (1) [ 71.855479][ T28] audit: type=1400 audit(1779532044.481:882): avc: denied { accept } for pid=4255 comm="syz.3.231" lport=56893 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.901936][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.943767][ T28] audit: type=1400 audit(1779532044.481:883): avc: denied { getopt } for pid=4255 comm="syz.3.231" lport=56893 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 71.993818][ T28] audit: type=1400 audit(1779532044.511:884): avc: denied { write } for pid=4255 comm="syz.3.231" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.033564][ T28] audit: type=1400 audit(1779532044.511:885): avc: denied { read } for pid=4255 comm="syz.3.231" path="/48/bus/cpuset.effective_mems" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.041412][ T4261] loop4: p2 p3 p4 [ 72.057521][ T28] audit: type=1400 audit(1779532044.521:886): avc: denied { ioctl } for pid=4255 comm="syz.3.231" path="/48/bus/cpuset.effective_mems" dev="loop3" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.086669][ T28] audit: type=1400 audit(1779532044.541:887): avc: denied { read } for pid=2964 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 72.108995][ T28] audit: type=1400 audit(1779532044.541:888): avc: denied { search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.109648][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.130522][ T4261] loop4: p2 size 588341 extends beyond EOD, [ 72.145737][ T28] audit: type=1400 audit(1779532044.541:889): avc: denied { write search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.146310][ T4261] truncated [ 72.178573][ T4261] loop4: p3 start 65280 is beyond EOD, truncated [ 72.185793][ T4248] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-2400-000000000000. [ 72.211426][ T71] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.214398][ T4261] loop4: p4 start 219873280 is beyond EOD, truncated [ 72.236523][ T4270] ref_ctr increment failed for inode: 0x104 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888100069b00 [ 72.259686][ T71] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.294773][ T4272] uprobe: syz.0.235:4272 failed to unregister, leaking uprobe [ 72.373859][ T71] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.396420][ T71] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.468762][ T4280] loop4: detected capacity change from 0 to 128 [ 72.496367][ T71] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.520982][ T4280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'. [ 72.530967][ T71] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.596087][ T71] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.634111][ T71] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.638758][ T4290] loop0: detected capacity change from 0 to 512 [ 72.687803][ T4290] EXT4-fs: Ignoring removed orlov option [ 72.714397][ T4280] syz.4.239: attempt to access beyond end of device [ 72.714397][ T4280] loop4: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 72.743977][ T4290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.804723][ T4297] Cannot find add_set index 0 as target [ 72.817360][ T4290] EXT4-fs error (device loop0): ext4_empty_dir:3085: inode #12: comm syz.0.242: Directory block failed checksum [ 72.835497][ T4280] syz.4.239: attempt to access beyond end of device [ 72.835497][ T4280] loop4: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 72.893829][ T4280] Buffer I/O error on dev loop4, logical block 156, lost async page write [ 72.903868][ T4280] syz.4.239: attempt to access beyond end of device [ 72.903868][ T4280] loop4: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 72.917940][ T4280] Buffer I/O error on dev loop4, logical block 157, lost async page write [ 72.928064][ T4280] syz.4.239: attempt to access beyond end of device [ 72.928064][ T4280] loop4: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 72.942384][ T4291] tmpfs: Bad value for 'nr_inodes' [ 72.950316][ T4280] Buffer I/O error on dev loop4, logical block 158, lost async page write [ 72.968178][ T4280] syz.4.239: attempt to access beyond end of device [ 72.968178][ T4280] loop4: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 72.995682][ T4309] loop2: detected capacity change from 0 to 128 [ 73.087919][ T4309] loop2: detected capacity change from 0 to 512 [ 73.107894][ T4309] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.425477][ T71] vlan2: left allmulticast mode [ 73.430410][ T71] geneve0: left allmulticast mode [ 73.435673][ T71] vlan2: left promiscuous mode [ 73.438325][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.441191][ T71] geneve0: left promiscuous mode [ 73.459527][ T4280] Buffer I/O error on dev loop4, logical block 159, lost async page write [ 73.462391][ T71] bridge0: port 3(vlan2) entered disabled state [ 73.476249][ T4280] syz.4.239: attempt to access beyond end of device [ 73.476249][ T4280] loop4: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 73.491554][ T4280] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 73.501095][ T71] bridge_slave_1: left allmulticast mode [ 73.518681][ T71] bridge_slave_1: left promiscuous mode [ 73.524540][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.533833][ T4280] syz.4.239: attempt to access beyond end of device [ 73.533833][ T4280] loop4: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 73.533845][ T71] bridge_slave_0: left allmulticast mode [ 73.553002][ T71] bridge_slave_0: left promiscuous mode [ 73.559527][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.561825][ T4304] SELinux: policydb magic number 0x746c6966 does not match expected magic number 0xf97cff8c [ 73.582546][ T4280] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 73.592881][ T4280] syz.4.239: attempt to access beyond end of device [ 73.592881][ T4280] loop4: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 73.608216][ T4280] Buffer I/O error on dev loop4, logical block 151, lost async page write [ 73.618525][ T4280] syz.4.239: attempt to access beyond end of device [ 73.618525][ T4280] loop4: rw=2049, sector=152, nr_sectors = 1 limit=128 [ 73.633210][ T4280] Buffer I/O error on dev loop4, logical block 152, lost async page write [ 73.654445][ T4304] SELinux: failed to load policy [ 73.787824][ T4326] netlink: 76 bytes leftover after parsing attributes in process `syz.3.248'. [ 73.913914][ T4327] loop0: detected capacity change from 0 to 512 [ 74.012483][ T4327] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.0.245: corrupted xattr block 95: invalid header [ 74.027085][ T4327] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 74.029907][ T4327] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.245: bg 0: block 7: invalid block bitmap [ 74.039978][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 74.040125][ C1] EXT4-fs (loop0): initial error at time 1779532046: ext4_expand_extra_isize_ea:2810: inode 11 [ 74.040317][ C1] EXT4-fs (loop0): last error at time 1779532046: ext4_expand_extra_isize_ea:2810: inode 11 [ 74.083241][ T4327] loop0: lost filesystem error report for type 5 error -117 [ 74.086164][ T4327] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 74.103087][ T4327] loop0: lost filesystem error report for type 5 error -117 [ 74.105023][ T4327] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #11: comm syz.0.245: corrupted xattr block 95: invalid header [ 74.126769][ T4327] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 74.127841][ T4327] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 74.147569][ T4327] EXT4-fs (loop0): 1 orphan inode deleted [ 74.164745][ T4327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.700932][ T4342] loop3: detected capacity change from 0 to 256 [ 74.723214][ T4342] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.805622][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.824426][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.843987][ T71] bond0 (unregistering): Released all slaves [ 74.864265][ T4309] ip6gre1: entered promiscuous mode [ 74.869493][ T4309] ip6gre1: entered allmulticast mode [ 74.928160][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 74.952125][ T4277] ip6_vti0 speed is unknown, defaulting to 1000 [ 74.981631][ T4345] loop4: detected capacity change from 0 to 164 [ 75.511582][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.595010][ T4358] loop3: detected capacity change from 0 to 128 [ 75.784257][ T71] hsr_slave_0: left promiscuous mode [ 75.806652][ T4368] netlink: 88 bytes leftover after parsing attributes in process `syz.3.253'. [ 75.823114][ T71] hsr_slave_1: left promiscuous mode [ 75.849792][ T3302] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 75.872329][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.895045][ T3302] iso9660: Corrupted directory entry in block 1 of inode 1856 [ 75.915521][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.932250][ T3302] VFS: Lookup of '' in iso9660 loop4 would have caused loop [ 75.949851][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.964909][ T3302] VFS: Lookup of '' in iso9660 loop4 would have caused loop [ 75.981646][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.099516][ T71] veth1_macvtap: left promiscuous mode [ 76.111771][ T71] veth0_macvtap: left promiscuous mode [ 76.123612][ T71] veth1_vlan: left promiscuous mode [ 76.135088][ T71] veth0_vlan: left promiscuous mode [ 76.255227][ T71] team0 (unregistering): Port device team_slave_1 removed [ 76.265842][ T71] team0 (unregistering): Port device team_slave_0 removed [ 76.307805][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 76.358250][ T4378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.257'. [ 76.367369][ T4378] tipc: Invalid UDP bearer configuration [ 76.367382][ T4378] tipc: Enabling of bearer rejected, failed to enable media [ 76.389916][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 76.390063][ T28] audit: type=1400 audit(1779532049.081:919): avc: denied { ioctl } for pid=4380 comm="syz.0.258" path="socket:[8331]" dev="sockfs" ino=8331 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.470795][ T28] audit: type=1400 audit(1779532049.161:920): avc: denied { create } for pid=4390 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 76.535834][ T28] audit: type=1400 audit(1779532049.181:921): avc: denied { connect } for pid=4390 comm="syz.0.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 76.602526][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.633347][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.640571][ T4277] bridge_slave_0: entered allmulticast mode [ 76.642589][ T28] audit: type=1400 audit(1779532049.331:922): avc: denied { wake_alarm } for pid=4388 comm="syz.2.259" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.648379][ T4277] bridge_slave_0: entered promiscuous mode [ 76.691662][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.716179][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.735071][ T4277] bridge_slave_1: entered allmulticast mode [ 76.740625][ T28] audit: type=1400 audit(1779532049.381:923): avc: denied { read write } for pid=4409 comm="syz.0.264" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 76.751652][ T4277] bridge_slave_1: entered promiscuous mode [ 76.815552][ T28] audit: type=1400 audit(1779532049.381:924): avc: denied { open } for pid=4409 comm="syz.0.264" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 76.830455][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.883561][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 76.890380][ T28] audit: type=1400 audit(2000000000.020:925): avc: denied { name_bind } for pid=4409 comm="syz.0.264" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 76.913155][ T71] IPVS: stop unused estimator thread 0... [ 76.920251][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.957318][ T28] audit: type=1400 audit(2000000000.020:926): avc: denied { write } for pid=4393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.981520][ T4277] team0: Port device team_slave_0 added [ 76.989391][ T4277] team0: Port device team_slave_1 added [ 77.018000][ T28] audit: type=1400 audit(2000000000.100:927): avc: denied { write } for pid=4418 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.043786][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.063922][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.081671][ T28] audit: type=1400 audit(2000000000.210:928): avc: denied { read } for pid=4422 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.133112][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.161119][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.174275][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.237062][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.403228][ T4439] loop0: detected capacity change from 0 to 1024 [ 77.640018][ T4439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.839718][ T4277] hsr_slave_0: entered promiscuous mode [ 77.856349][ T4277] hsr_slave_1: entered promiscuous mode [ 78.473670][ T4277] debugfs: 'hsr0' already exists in 'hsr' [ 78.479448][ T4277] Cannot create hsr debugfs directory [ 78.479534][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.528531][ T4457] tmpfs: Bad value for 'mpol' [ 78.629816][ T4277] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.649474][ T4277] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.684034][ T4277] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.715182][ T4277] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.733342][ T4476] loop2: detected capacity change from 0 to 128 [ 78.733694][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 78.763757][ T4470] netlink: 56 bytes leftover after parsing attributes in process `syz.0.275'. [ 78.765712][ T4277] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.797640][ T4476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 78.810240][ T4277] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.824702][ T4277] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 78.842041][ T4277] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.889103][ T4448] ip6_vti0 speed is unknown, defaulting to 1000 [ 78.967434][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.005957][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.036453][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.043538][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.083194][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.090395][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.196302][ T4476] syz.2.278: attempt to access beyond end of device [ 79.196302][ T4476] loop2: rw=2049, sector=133, nr_sectors = 24 limit=128 [ 79.307286][ T4508] tmpfs: Bad value for 'mpol' [ 79.371463][ T4448] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.390090][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.397797][ T4514] netlink: 20 bytes leftover after parsing attributes in process `syz.2.283'. [ 79.420386][ T4448] bridge_slave_0: entered allmulticast mode [ 79.443722][ T4448] bridge_slave_0: entered promiscuous mode [ 79.464333][ T4514] ip6gre2: entered promiscuous mode [ 79.475096][ T4514] ip6gre2: entered allmulticast mode [ 79.490493][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.510673][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.534439][ T4448] bridge_slave_1: entered allmulticast mode [ 79.551377][ T4448] bridge_slave_1: entered promiscuous mode [ 79.560418][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.606635][ T4448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.626375][ T4448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.674414][ T4537] loop2: detected capacity change from 0 to 128 [ 79.688668][ T4448] team0: Port device team_slave_0 added [ 79.693427][ T4537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'. [ 79.708578][ T4448] team0: Port device team_slave_1 added [ 79.752732][ T4448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.776704][ T4448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.796592][ T4544] tmpfs: Bad value for 'mpol' [ 79.823153][ T4448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.826213][ T4537] syz.2.287: attempt to access beyond end of device [ 79.826213][ T4537] loop2: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 79.852065][ T4448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.873485][ T4448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.906460][ T4537] syz.2.287: attempt to access beyond end of device [ 79.906460][ T4537] loop2: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 79.930430][ T4448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.932075][ T4537] Buffer I/O error on dev loop2, logical block 156, lost async page write [ 79.963036][ T4537] syz.2.287: attempt to access beyond end of device [ 79.963036][ T4537] loop2: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 79.983006][ T4537] Buffer I/O error on dev loop2, logical block 157, lost async page write [ 79.995248][ T4537] syz.2.287: attempt to access beyond end of device [ 79.995248][ T4537] loop2: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 80.033781][ T4448] hsr_slave_0: entered promiscuous mode [ 80.049906][ T4448] hsr_slave_1: entered promiscuous mode [ 80.055892][ T4537] Buffer I/O error on dev loop2, logical block 158, lost async page write [ 80.065891][ T4448] debugfs: 'hsr0' already exists in 'hsr' [ 80.071943][ T4537] syz.2.287: attempt to access beyond end of device [ 80.071943][ T4537] loop2: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 80.087093][ T4448] Cannot create hsr debugfs directory [ 80.095147][ T4537] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 80.113217][ T4537] syz.2.287: attempt to access beyond end of device [ 80.113217][ T4537] loop2: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 80.132913][ T4537] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 80.151200][ T4555] netlink: 40 bytes leftover after parsing attributes in process `syz.0.290'. [ 80.163767][ T4537] syz.2.287: attempt to access beyond end of device [ 80.163767][ T4537] loop2: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 80.194529][ T4537] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 80.217339][ T4277] veth0_vlan: entered promiscuous mode [ 80.225009][ T4537] syz.2.287: attempt to access beyond end of device [ 80.225009][ T4537] loop2: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 80.265106][ T4277] veth1_vlan: entered promiscuous mode [ 80.270858][ T4537] Buffer I/O error on dev loop2, logical block 150, lost async page write [ 80.295971][ T4537] syz.2.287: attempt to access beyond end of device [ 80.295971][ T4537] loop2: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 80.328429][ T4277] veth0_macvtap: entered promiscuous mode [ 80.340666][ T4537] Buffer I/O error on dev loop2, logical block 151, lost async page write [ 80.361688][ T4277] veth1_macvtap: entered promiscuous mode [ 80.386342][ T4565] tmpfs: Bad value for 'mpol' [ 80.410102][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.454840][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.473789][ T4448] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 80.489443][ T4448] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.512074][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.528721][ T3550] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.551462][ T4448] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 80.563227][ T4448] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.583354][ T4448] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 80.595316][ T4448] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.609425][ T3550] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.623019][ T3550] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.648972][ T4448] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 80.661350][ T4448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.779071][ T4591] FAULT_INJECTION: forcing a failure. [ 80.779071][ T4591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.786838][ T4448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.800675][ T4590] FAULT_INJECTION: forcing a failure. [ 80.800675][ T4590] name failslab, interval 1, probability 0, space 0, times 0 [ 80.809343][ T4591] CPU: 0 UID: 0 PID: 4591 Comm: syz.0.300 Tainted: G W syzkaller #0 PREEMPT(full) [ 80.809409][ T4591] Tainted: [W]=WARN [ 80.809430][ T4591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 80.809468][ T4591] Call Trace: [ 80.809487][ T4591] [ 80.809562][ T4591] __dump_stack+0x1d/0x30 [ 80.809652][ T4591] dump_stack_lvl+0x95/0xd0 [ 80.809712][ T4591] dump_stack+0x15/0x1b [ 80.809800][ T4591] should_fail_ex+0x263/0x280 [ 80.809885][ T4591] should_fail+0xb/0x20 [ 80.809958][ T4591] should_fail_usercopy+0x1a/0x20 [ 80.810090][ T4591] _copy_to_user+0x20/0xa0 [ 80.810179][ T4591] simple_read_from_buffer+0xb5/0x130 [ 80.810357][ T4591] proc_fail_nth_read+0x10e/0x150 [ 80.810447][ T4591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.810596][ T4591] vfs_read+0x1ab/0x7f0 [ 80.810684][ T4591] ? __rcu_read_unlock+0x4e/0x70 [ 80.810750][ T4591] ? __fget_files+0x184/0x1c0 [ 80.810988][ T4591] ? mutex_lock+0x57/0x90 [ 80.811061][ T4591] ksys_read+0xdc/0x1a0 [ 80.811148][ T4591] __x64_sys_read+0x40/0x50 [ 80.811233][ T4591] x64_sys_call+0x2886/0x3020 [ 80.811299][ T4591] do_syscall_64+0x12c/0x3b0 [ 80.811441][ T4591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.811498][ T4591] RIP: 0033:0x7f432c31d68e [ 80.811614][ T4591] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 80.811667][ T4591] RSP: 002b:00007f432adaefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.811722][ T4591] RAX: ffffffffffffffda RBX: 00007f432adaf6c0 RCX: 00007f432c31d68e [ 80.811765][ T4591] RDX: 000000000000000f RSI: 00007f432adaf0a0 RDI: 0000000000000003 [ 80.811847][ T4591] RBP: 00007f432adaf090 R08: 0000000000000000 R09: 0000000000000000 [ 80.811898][ T4591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.811975][ T4591] R13: 00007f432c5d6038 R14: 00007f432c5d5fa0 R15: 00007ffded7624f8 [ 80.812069][ T4591] [ 81.016765][ T4448] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.024291][ T4590] CPU: 1 UID: 0 PID: 4590 Comm: syz.5.237 Tainted: G W syzkaller #0 PREEMPT(full) [ 81.024329][ T4590] Tainted: [W]=WARN [ 81.024337][ T4590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 81.024370][ T4590] Call Trace: [ 81.024461][ T4590] [ 81.024470][ T4590] __dump_stack+0x1d/0x30 [ 81.024511][ T4590] dump_stack_lvl+0x95/0xd0 [ 81.024538][ T4590] dump_stack+0x15/0x1b [ 81.024573][ T4590] should_fail_ex+0x263/0x280 [ 81.024619][ T4590] should_failslab+0x8c/0xb0 [ 81.024694][ T4590] __kmalloc_cache_node_noprof+0x6b/0x470 [ 81.024821][ T4590] ? page_pool_create_percpu+0x4d/0x690 [ 81.024848][ T4590] page_pool_create_percpu+0x4d/0x690 [ 81.024882][ T4590] page_pool_create+0x1a/0x30 [ 81.024984][ T4590] bpf_test_run_xdp_live+0x1a8/0x1360 [ 81.025106][ T4590] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 81.025186][ T4590] ? __pfx_autoremove_wake_function+0x10/0x10 [ 81.025255][ T4590] ? mutex_unlock+0x4e/0x90 [ 81.025302][ T4590] ? 0xffffffffa0205240 [ 81.025436][ T4590] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 81.025477][ T4590] ? 0xffffffffa0205240 [ 81.025517][ T4590] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 81.025614][ T4590] bpf_prog_test_run_xdp+0x57b/0xa10 [ 81.025723][ T4590] ? __rcu_read_unlock+0x4e/0x70 [ 81.025745][ T4590] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 81.025784][ T4590] bpf_prog_test_run+0x204/0x340 [ 81.025816][ T4590] __sys_bpf+0x52e/0x7e0 [ 81.025857][ T4590] __x64_sys_bpf+0x41/0x50 [ 81.025891][ T4590] x64_sys_call+0x10cb/0x3020 [ 81.025945][ T4590] do_syscall_64+0x12c/0x3b0 [ 81.026019][ T4590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.026049][ T4590] RIP: 0033:0x7fa2704ace59 [ 81.026122][ T4590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.026142][ T4590] RSP: 002b:00007fa26ef07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 81.026168][ T4590] RAX: ffffffffffffffda RBX: 00007fa270725fa0 RCX: 00007fa2704ace59 [ 81.026188][ T4590] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 81.026199][ T4590] RBP: 00007fa26ef07090 R08: 0000000000000000 R09: 0000000000000000 [ 81.026209][ T4590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.026263][ T4590] R13: 00007fa270726038 R14: 00007fa270725fa0 R15: 00007ffcee462dc8 [ 81.026285][ T4590] [ 81.030422][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.274432][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.289952][ T4597] loop3: detected capacity change from 0 to 128 [ 81.305100][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.312305][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.357478][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 81.431056][ T4607] tmpfs: Bad value for 'mpol' [ 81.490957][ T4608] Buffer I/O error on dev loop3, logical block 156, lost async page write [ 81.522799][ T4608] Buffer I/O error on dev loop3, logical block 157, lost async page write [ 81.584503][ T4448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.591988][ T4616] loop0: detected capacity change from 0 to 8192 [ 81.636064][ T4616] loop0: p2 p3 p4 [ 81.651462][ T4616] loop0: p2 size 588341 extends beyond EOD, truncated [ 81.676990][ T4616] loop0: p3 start 65280 is beyond EOD, truncated [ 81.697405][ T4616] loop0: p4 start 219873280 is beyond EOD, truncated [ 81.734206][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 81.734221][ T28] audit: type=1400 audit(2000000005.030:941): avc: denied { write } for pid=4615 comm="syz.0.306" lport=262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.841946][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 81.853441][ T4629] loop2: detected capacity change from 0 to 8192 [ 81.893135][ T4629] loop2: p2 p3 p4 [ 81.897078][ T4629] loop2: p2 size 588341 extends beyond EOD, truncated [ 81.907857][ T4629] loop2: p3 start 65280 is beyond EOD, truncated [ 81.917697][ T4629] loop2: p4 start 219873280 is beyond EOD, truncated [ 81.929297][ T4448] veth0_vlan: entered promiscuous mode [ 81.962897][ T4448] veth1_vlan: entered promiscuous mode [ 82.010782][ T4448] veth0_macvtap: entered promiscuous mode [ 82.032072][ T4448] veth1_macvtap: entered promiscuous mode [ 82.049410][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 82.067704][ T4448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.091978][ T4448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.119924][ T3550] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.143237][ T3550] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.163657][ T4649] netlink: 'syz.5.314': attribute type 1 has an invalid length. [ 82.175683][ T3550] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.200966][ T3550] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.222226][ T4649] netlink: 44 bytes leftover after parsing attributes in process `syz.5.314'. [ 82.253087][ T28] audit: type=1400 audit(2000000005.540:942): avc: denied { mounton } for pid=4448 comm="syz-executor" path="/root/syzkaller.JedX1E/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 82.368063][ T28] audit: type=1400 audit(2000000005.660:943): avc: denied { write } for pid=4656 comm="syz.6.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.418320][ T28] audit: type=1400 audit(2000000005.700:944): avc: denied { setopt } for pid=4656 comm="syz.6.271" lport=56 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.453726][ T28] audit: type=1400 audit(2000000005.750:945): avc: denied { append } for pid=4656 comm="syz.6.271" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.540341][ T4661] tmpfs: Bad value for 'mpol' [ 82.560832][ T4659] netlink: 20 bytes leftover after parsing attributes in process `syz.6.271'. [ 82.561933][ T4651] loop2: detected capacity change from 0 to 512 [ 82.670821][ T4651] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 82.676052][ T4661] xfrm1: entered allmulticast mode [ 82.692559][ T4651] EXT4-fs (loop2): orphan cleanup on readonly fs [ 82.720730][ T4651] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 82.741112][ T4651] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 82.796942][ T4651] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 82.844266][ T4651] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.315: bg 0: block 64: padding at end of block bitmap is not set [ 82.881174][ T4651] loop2: lost filesystem error report for type 5 error -117 [ 82.882064][ T4651] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 82.889904][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 82.889943][ C0] EXT4-fs (loop2): initial error at time 2000000006: ext4_validate_block_bitmap:441 [ 82.890011][ C0] EXT4-fs (loop2): last error at time 2000000006: ext4_validate_block_bitmap:441 [ 82.892173][ T28] audit: type=1400 audit(2000000006.180:946): avc: denied { mounton } for pid=4645 comm="syz.0.312" path="/74/bus" dev="tmpfs" ino=423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.913254][ T4651] loop2: lost filesystem error report for type 5 error -117 [ 82.953378][ T4671] loop5: detected capacity change from 0 to 256 [ 82.979375][ T4671] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.022965][ T4671] FAULT_INJECTION: forcing a failure. [ 83.022965][ T4671] name failslab, interval 1, probability 0, space 0, times 0 [ 83.035371][ T4651] EXT4-fs (loop2): 1 truncate cleaned up [ 83.046838][ T4671] CPU: 1 UID: 0 PID: 4671 Comm: syz.5.320 Tainted: G W syzkaller #0 PREEMPT(full) [ 83.046865][ T4671] Tainted: [W]=WARN [ 83.046870][ T4671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 83.046941][ T4671] Call Trace: [ 83.046948][ T4671] [ 83.046956][ T4671] __dump_stack+0x1d/0x30 [ 83.046983][ T4671] dump_stack_lvl+0x95/0xd0 [ 83.047085][ T4671] dump_stack+0x15/0x1b [ 83.047102][ T4671] should_fail_ex+0x263/0x280 [ 83.047209][ T4671] ? alloc_pipe_info+0xad/0x340 [ 83.047309][ T4671] should_failslab+0x8c/0xb0 [ 83.047341][ T4671] __kmalloc_cache_noprof+0x5f/0x400 [ 83.047440][ T4671] alloc_pipe_info+0xad/0x340 [ 83.047478][ T4671] splice_direct_to_actor+0x591/0x670 [ 83.047558][ T4671] ? kstrtouint_from_user+0xa8/0xf0 [ 83.047588][ T4671] ? __pfx_direct_splice_actor+0x10/0x10 [ 83.047627][ T4671] ? __rcu_read_unlock+0x4e/0x70 [ 83.047726][ T4671] ? get_pid_task+0x96/0xd0 [ 83.047752][ T4671] ? avc_policy_seqno+0x15/0x30 [ 83.047774][ T4671] ? selinux_file_permission+0x1e1/0x320 [ 83.047855][ T4671] do_splice_direct+0x119/0x1a0 [ 83.047927][ T4671] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 83.047951][ T4671] do_sendfile+0x382/0x650 [ 83.047970][ T4671] __x64_sys_sendfile64+0x105/0x150 [ 83.047988][ T4671] x64_sys_call+0x2dc4/0x3020 [ 83.048016][ T4671] do_syscall_64+0x12c/0x3b0 [ 83.048051][ T4671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.048073][ T4671] RIP: 0033:0x7fa2704ace59 [ 83.048086][ T4671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.048101][ T4671] RSP: 002b:00007fa26ef07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 83.048191][ T4671] RAX: ffffffffffffffda RBX: 00007fa270725fa0 RCX: 00007fa2704ace59 [ 83.048206][ T4671] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 83.048218][ T4671] RBP: 00007fa26ef07090 R08: 0000000000000000 R09: 0000000000000000 [ 83.048231][ T4671] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 83.048243][ T4671] R13: 00007fa270726038 R14: 00007fa270725fa0 R15: 00007ffcee462dc8 [ 83.048392][ T4671] [ 83.061588][ T4651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.320852][ T4674] loop6: detected capacity change from 0 to 256 [ 83.329084][ T4674] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.511496][ T4682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 83.590173][ T4682] hsr_slave_1 (unregistering): left promiscuous mode [ 83.613722][ T28] audit: type=1400 audit(2000000006.910:947): avc: denied { listen } for pid=4685 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 83.659337][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.807529][ T4691] loop3: detected capacity change from 0 to 128 [ 83.819146][ T4680] ================================================================== [ 83.827279][ T4680] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 83.834432][ T4680] [ 83.836773][ T4680] write to 0xffff88810c5e738c of 4 bytes by task 4683 on cpu 1: [ 83.844427][ T4680] xas_set_mark+0x12b/0x140 [ 83.848991][ T4680] __folio_start_writeback+0x17b/0x370 [ 83.854487][ T4680] __mpage_writepages+0xdbd/0x1390 [ 83.859641][ T4680] fat_writepages+0x26/0x30 [ 83.864197][ T4680] do_writepages+0x1c6/0x310 [ 83.868826][ T4680] file_write_and_wait_range+0x178/0x2f0 [ 83.874497][ T4680] mmb_fsync_noflush+0x48/0x140 [ 83.879398][ T4680] fat_file_fsync+0x98/0x110 [ 83.884028][ T4680] vfs_fsync_range+0xc5/0xe0 [ 83.888639][ T4680] generic_file_write_iter+0x1ba/0x310 [ 83.894120][ T4680] iter_file_splice_write+0x6c4/0xa80 [ 83.899525][ T4680] direct_splice_actor+0x156/0x2a0 [ 83.904666][ T4680] splice_direct_to_actor+0x311/0x670 [ 83.910074][ T4680] do_splice_direct+0x119/0x1a0 [ 83.914953][ T4680] do_sendfile+0x382/0x650 [ 83.919381][ T4680] __x64_sys_sendfile64+0x105/0x150 [ 83.924587][ T4680] x64_sys_call+0x2dc4/0x3020 [ 83.929279][ T4680] do_syscall_64+0x12c/0x3b0 [ 83.933886][ T4680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.939791][ T4680] [ 83.942120][ T4680] read to 0xffff88810c5e738c of 4 bytes by task 4680 on cpu 0: [ 83.949672][ T4680] xas_find_marked+0x5d7/0x620 [ 83.954463][ T4680] filemap_get_folios_tag+0xfa/0x430 [ 83.959779][ T4680] writeback_iter+0x4bb/0x800 [ 83.964477][ T4680] __mpage_writepages+0x8a/0x1390 [ 83.969526][ T4680] fat_writepages+0x26/0x30 [ 83.974046][ T4680] do_writepages+0x1c6/0x310 [ 83.978642][ T4680] file_write_and_wait_range+0x178/0x2f0 [ 83.984296][ T4680] mmb_fsync_noflush+0x48/0x140 [ 83.989165][ T4680] fat_file_fsync+0x98/0x110 [ 83.993777][ T4680] vfs_fsync_range+0xc5/0xe0 [ 83.998380][ T4680] generic_file_write_iter+0x1ba/0x310 [ 84.003853][ T4680] iter_file_splice_write+0x6c4/0xa80 [ 84.009255][ T4680] direct_splice_actor+0x156/0x2a0 [ 84.014395][ T4680] splice_direct_to_actor+0x311/0x670 [ 84.019800][ T4680] do_splice_direct+0x119/0x1a0 [ 84.024697][ T4680] do_sendfile+0x382/0x650 [ 84.029130][ T4680] __x64_sys_sendfile64+0x105/0x150 [ 84.034356][ T4680] x64_sys_call+0x2dc4/0x3020 [ 84.039058][ T4680] do_syscall_64+0x12c/0x3b0 [ 84.043670][ T4680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.049584][ T4680] [ 84.051907][ T4680] value changed: 0x0a000021 -> 0x04000021 [ 84.057648][ T4680] [ 84.059973][ T4680] Reported by Kernel Concurrency Sanitizer on: [ 84.066132][ T4680] CPU: 0 UID: 0 PID: 4680 Comm: syz.6.322 Tainted: G W syzkaller #0 PREEMPT(full) [ 84.076907][ T4680] Tainted: [W]=WARN [ 84.080719][ T4680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 84.090789][ T4680] ================================================================== [ 84.155198][ T4696] loop5: detected capacity change from 0 to 1024 [ 84.163059][ T4691] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.186376][ T4696] EXT4-fs: test_dummy_encryption option not supported [ 84.218439][ T4691] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.264705][ T4694] loop2: detected capacity change from 0 to 4096 [ 84.326504][ T4694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.356999][ T28] audit: type=1400 audit(2000000007.650:948): avc: denied { write } for pid=4692 comm="syz.2.327" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.578264][ T4691] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 63: comm syz.3.326: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 84.686193][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.711312][ T4691] EXT4-fs error (device loop3) in do_split:2027: Corrupt filesystem [ 84.747711][ T4702] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 63: comm syz.3.326: bad entry in directory: inode out of bounds - offset=2012, inode=128, rec_len=36, size=1024 fake=1 [ 84.924040][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.180622][ T28] audit: type=1400 audit(2000000007.650:949): avc: denied { map } for pid=4692 comm="syz.2.327" path="/73/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.344547][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 88.344580][ T28] audit: type=1400 audit(2000000011.640:958): avc: denied { write } for pid=4706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.380313][ T28] audit: type=1400 audit(2000000011.670:959): avc: denied { write } for pid=4717 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.652806][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 90.543752][ T28] audit: type=1400 audit(2000000013.840:960): avc: denied { write } for pid=4720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.576972][ T28] audit: type=1400 audit(2000000013.870:961): avc: denied { write } for pid=4731 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.799265][ T28] audit: type=1400 audit(2000000014.090:962): avc: denied { write } for pid=4734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.832090][ T28] audit: type=1400 audit(2000000014.120:963): avc: denied { write } for pid=4745 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.007975][ T28] audit: type=1400 audit(2000000014.300:964): avc: denied { write } for pid=4748 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.040570][ T28] audit: type=1400 audit(2000000014.330:965): avc: denied { write } for pid=4759 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1