last executing test programs: 3.604984125s ago: executing program 2 (id=321): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x5100, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x2, 0x4}, 0x102260, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x200, 0x80100) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x10000) socket$nl_netfilter(0x10, 0x3, 0xc) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x111000, 0x10a, 0x8}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f", @ANYRESDEC, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRES32], 0x0, 0x2ff, &(0x7f0000000540)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 3.271999945s ago: executing program 1 (id=326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 3.271810145s ago: executing program 3 (id=327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e1050000008906ffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.722540323s ago: executing program 1 (id=328): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x44, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.722337633s ago: executing program 2 (id=329): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6e8, 0xa}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x24, 0x5, 0x800, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 2.672996655s ago: executing program 3 (id=330): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.617651856s ago: executing program 2 (id=331): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltclass={0x3c, 0x29, 0x800, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xd}, {0x3, 0x1}, {0xfff3, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xff}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}, @TCA_RATE={0x6, 0x5, {0xb5, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) sendmsg$RDMA_NLDEV_CMD_GET(r1, 0x0, 0x40800) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b48, 0x0) 2.47798323s ago: executing program 0 (id=332): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3280f4b3cd20fdc0, &(0x7f00000017c0)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) 2.47743023s ago: executing program 1 (id=342): perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x100) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x20000851) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x40000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) open_by_handle_at(0xffffffffffffffff, 0x0, 0x101500) socket$inet_mptcp(0x2, 0x1, 0x106) 2.17855923s ago: executing program 2 (id=333): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2c158, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x9, 0x2}, 0x800, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0xa45f8e804036bb63, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prctl$PR_SCHED_CORE(0x41, 0x2, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) 2.154762751s ago: executing program 3 (id=334): ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x76, &(0x7f00000004c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x40, 0x3a, 0x0, @local, @mcast1, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x0, 0x0, 0x10}, @hopopts]}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10010}, 0x0) signalfd(r0, &(0x7f0000000380)={[0x4]}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) 2.153931931s ago: executing program 1 (id=345): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r4) close_range(r6, 0xffffffffffffffff, 0x0) 2.114688162s ago: executing program 0 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x1}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0xfff, 0x3}, 0x100000, 0xc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty=0x810}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 2.114522022s ago: executing program 1 (id=336): sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x20000400) socket(0x28, 0x5, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.097989773s ago: executing program 4 (id=337): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20040040) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x2, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48880) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) 2.044521725s ago: executing program 3 (id=338): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) close_range(r0, r1, 0x2) mbind(&(0x7f0000ccd000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x6, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000000000943be486fc320a112d2079af67d0dc1e00000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000640ffffff00080005400000000d080003400000007814000000020a010200000000000000000000000014000000d56751736d54382264cf61364e"], 0xa8}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) preadv(r3, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x2, 0x800, 0x2, 0x8, 0x6, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mbind(&(0x7f0000087000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000100)=0xffff, 0xe0, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 2.036279305s ago: executing program 2 (id=339): socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8919, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.725601115s ago: executing program 4 (id=340): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xc}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) futex(0x0, 0xb, 0x2, 0x0, 0xfffffffffffffffc, 0x1) write$P9_RGETLOCK(r0, &(0x7f0000000040)=ANY=[], 0x200002e6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.100761265s ago: executing program 0 (id=341): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) close(0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="14000200ff020000000000000000000000000001080008000207"], 0x34}}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.031695327s ago: executing program 0 (id=343): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb3}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='GPL\x00', 0x8, 0x8b, &(0x7f0000000680)=""/139, 0x41100, 0x66, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0x0, 0xffffffff, 0x2}, 0x10, r4, r3, 0x1, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x3, 0x3, 0xffff, 0x4}], 0x10, 0x5}, 0x94) 565.569902ms ago: executing program 2 (id=344): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0xfe701c29a28917ab) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, 0x0, 0x602040, 0x0) ioctl$RTC_PLL_SET(r3, 0x40207012, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x42, 0x0) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 565.145582ms ago: executing program 0 (id=346): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x9d12}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) 564.508122ms ago: executing program 3 (id=347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 474.987025ms ago: executing program 1 (id=348): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x7fff) sendfile(r1, r0, 0x0, 0x7ffff000) 445.374096ms ago: executing program 4 (id=349): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) getxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0xed) 377.512249ms ago: executing program 4 (id=350): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x3280f4b3cd20fdc0, &(0x7f00000017c0)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) 257.340062ms ago: executing program 3 (id=351): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 75.404628ms ago: executing program 4 (id=352): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa7664012d42961e1445ce83def332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5bb6f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a976774"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "1c"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 74.842148ms ago: executing program 0 (id=362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 0s ago: executing program 4 (id=353): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r2, 0x4) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0xffffffffa003e459, 0x700000000000000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x6, 0xfffffffc, 0x52, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @private2, 0x8000, 0xba08, 0x2, 0x4}}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0x6}, 0x4, 0x44, &(0x7f0000000080)="1a934cf703433bf2bdec303f10bae3270bd96092c215604ca3c599702a921fa66cf5248eca25b88322574441080cd0233950173b8ee8d628087a7d6d8b441c0b5ad262afb18606a7519e0c6b0b1325ecf1b6b6264ca757b9bf3a63176cae69accc6ac1e7f76220bc828aef8ee38b17888591c6d4d068ef2e4b501f90e6445a3621e190ccbf285e4a61f3669ddbae4b2bcd67b8909e09d3a2739dd43573e6d547c0ccd29958a796dc3b3c9cab8a0d586362c3ba6615", 0xb5, 0x7ff, 0xff, 0xd93, 0xf, 0xdb0b, &(0x7f0000000140)="0cb75d4bf6914b0e47446a641c78bdb4db15db08c6929aa30700c5b4f3178ff777396874616550fb5bbfdfcb9d33ee9bc8710a3e1669498ec2962319f22c656ac76f76"}) kernel console output (not intermixed with test programs): [ 23.651476][ T28] audit: type=1400 audit(1781612612.806:103): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.673604][ T28] audit: type=1400 audit(1781612612.806:104): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.934382][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 25.934399][ T28] audit: type=1400 audit(1781612615.086:124): avc: denied { write } for pid=3266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.969074][ T28] audit: type=1400 audit(1781612615.116:125): avc: denied { write } for pid=3277 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.12' (ED25519) to the list of known hosts. [ 30.241918][ T28] audit: type=1400 audit(1781612619.396:126): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.265039][ T28] audit: type=1400 audit(1781612619.416:127): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.267325][ T3284] cgroup: Unknown subsys name 'net' [ 30.292950][ T28] audit: type=1400 audit(1781612619.446:128): avc: denied { unmount } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.392224][ T3284] cgroup: Unknown subsys name 'cpuset' [ 30.398492][ T3284] cgroup: Unknown subsys name 'rlimit' [ 30.509694][ T28] audit: type=1400 audit(1781612619.656:129): avc: denied { setattr } for pid=3284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.533907][ T28] audit: type=1400 audit(1781612619.656:130): avc: denied { create } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.554640][ T28] audit: type=1400 audit(1781612619.656:131): avc: denied { write } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.580014][ T28] audit: type=1400 audit(1781612619.656:132): avc: denied { read } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.600629][ T28] audit: type=1400 audit(1781612619.656:133): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.628541][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.672754][ T3284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.342030][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 31.342047][ T28] audit: type=1400 audit(1781612620.486:140): avc: denied { execmem } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.479269][ T28] audit: type=1400 audit(1781612620.626:141): avc: denied { read } for pid=3297 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.521745][ T28] audit: type=1400 audit(1781612620.626:142): avc: denied { open } for pid=3297 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.570080][ T28] audit: type=1400 audit(1781612620.656:143): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 31.617914][ T28] audit: type=1400 audit(1781612620.656:144): avc: denied { module_request } for pid=3297 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 31.661115][ T28] audit: type=1400 audit(1781612620.666:145): avc: denied { sys_module } for pid=3297 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 32.007418][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.014614][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.022147][ T3300] bridge_slave_0: entered allmulticast mode [ 32.028510][ T3300] bridge_slave_0: entered promiscuous mode [ 32.053555][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.060736][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.067967][ T3300] bridge_slave_1: entered allmulticast mode [ 32.074477][ T3300] bridge_slave_1: entered promiscuous mode [ 32.130838][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.140088][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.147675][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.154996][ T3298] bridge_slave_0: entered allmulticast mode [ 32.161674][ T3298] bridge_slave_0: entered promiscuous mode [ 32.174343][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.188453][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.195590][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.202783][ T3298] bridge_slave_1: entered allmulticast mode [ 32.209251][ T3298] bridge_slave_1: entered promiscuous mode [ 32.249678][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.256954][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.264261][ T3297] bridge_slave_0: entered allmulticast mode [ 32.270711][ T3297] bridge_slave_0: entered promiscuous mode [ 32.281256][ T3300] team0: Port device team_slave_0 added [ 32.296466][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.303748][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.310914][ T3297] bridge_slave_1: entered allmulticast mode [ 32.317480][ T3297] bridge_slave_1: entered promiscuous mode [ 32.328497][ T3300] team0: Port device team_slave_1 added [ 32.335243][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.345915][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.403006][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.413570][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.425818][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.432820][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.458766][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.470119][ T3298] team0: Port device team_slave_0 added [ 32.487312][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.494344][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.520301][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.531803][ T3298] team0: Port device team_slave_1 added [ 32.537480][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.544613][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.551973][ T3304] bridge_slave_0: entered allmulticast mode [ 32.558443][ T3304] bridge_slave_0: entered promiscuous mode [ 32.587265][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.594487][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.601772][ T3304] bridge_slave_1: entered allmulticast mode [ 32.608480][ T3304] bridge_slave_1: entered promiscuous mode [ 32.615969][ T3297] team0: Port device team_slave_0 added [ 32.623045][ T3297] team0: Port device team_slave_1 added [ 32.628706][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.635846][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.643053][ T3303] bridge_slave_0: entered allmulticast mode [ 32.649572][ T3303] bridge_slave_0: entered promiscuous mode [ 32.675682][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.682950][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.690101][ T3303] bridge_slave_1: entered allmulticast mode [ 32.696613][ T3303] bridge_slave_1: entered promiscuous mode [ 32.703370][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.710337][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.736400][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.752990][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.776258][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.783359][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.809426][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.825974][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.835319][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.842399][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.868440][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.880522][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.895514][ T3300] hsr_slave_0: entered promiscuous mode [ 32.901598][ T3300] hsr_slave_1: entered promiscuous mode [ 32.918336][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.925370][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.951309][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.962916][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.982481][ T3303] team0: Port device team_slave_0 added [ 32.995766][ T3304] team0: Port device team_slave_0 added [ 33.002708][ T3304] team0: Port device team_slave_1 added [ 33.014118][ T3303] team0: Port device team_slave_1 added [ 33.051705][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.058685][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.084798][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.100692][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.107700][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.133636][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.153506][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.160542][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.186493][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.199570][ T3298] hsr_slave_0: entered promiscuous mode [ 33.205634][ T3298] hsr_slave_1: entered promiscuous mode [ 33.211545][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 33.217266][ T3298] Cannot create hsr debugfs directory [ 33.223102][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.230096][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.256107][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.272130][ T3297] hsr_slave_0: entered promiscuous mode [ 33.278207][ T3297] hsr_slave_1: entered promiscuous mode [ 33.284100][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 33.289821][ T3297] Cannot create hsr debugfs directory [ 33.347966][ T3303] hsr_slave_0: entered promiscuous mode [ 33.354283][ T3303] hsr_slave_1: entered promiscuous mode [ 33.360153][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 33.366050][ T3303] Cannot create hsr debugfs directory [ 33.393491][ T3304] hsr_slave_0: entered promiscuous mode [ 33.399490][ T3304] hsr_slave_1: entered promiscuous mode [ 33.405488][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 33.411243][ T3304] Cannot create hsr debugfs directory [ 33.579568][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.588333][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.596047][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.605091][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.621141][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.629997][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.637693][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.646422][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.667352][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.675949][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.685085][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.693929][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.702015][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.710830][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.718790][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.727294][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.764334][ T3297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.772876][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.786945][ T3297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.795918][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.809946][ T3297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.818714][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.830516][ T3297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.839336][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.861612][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.870381][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.887720][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.896359][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.904169][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.913338][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.921018][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.930249][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.942358][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.950933][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.958641][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.967507][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.975952][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.984960][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.994262][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.003111][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.025879][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.050661][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.066699][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.089237][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.096356][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.110242][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.120210][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.127394][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.149276][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.156402][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.165094][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.172181][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.224031][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.241452][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.258521][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.267487][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.278675][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.285829][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.302490][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.312761][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.319936][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.336940][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.352040][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.359244][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.369214][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.376291][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.407032][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.414173][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.440124][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.447314][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.568778][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.654614][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.685222][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.772805][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.798447][ T3298] veth0_vlan: entered promiscuous mode [ 34.812070][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.831981][ T3298] veth1_vlan: entered promiscuous mode [ 34.867707][ T3300] veth0_vlan: entered promiscuous mode [ 34.881524][ T3300] veth1_vlan: entered promiscuous mode [ 34.902213][ T3298] veth0_macvtap: entered promiscuous mode [ 34.926535][ T3300] veth0_macvtap: entered promiscuous mode [ 34.940705][ T3298] veth1_macvtap: entered promiscuous mode [ 34.952781][ T3300] veth1_macvtap: entered promiscuous mode [ 34.969684][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.000046][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.011948][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.020915][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.031609][ T53] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.044113][ T3304] veth0_vlan: entered promiscuous mode [ 35.063229][ T53] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.072511][ T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.088001][ T3297] veth0_vlan: entered promiscuous mode [ 35.095714][ T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.104670][ T53] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.119112][ T3297] veth1_vlan: entered promiscuous mode [ 35.127346][ T53] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.137120][ T53] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.152209][ T53] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.161888][ T3304] veth1_vlan: entered promiscuous mode [ 35.174701][ T3303] veth0_vlan: entered promiscuous mode [ 35.183437][ T3303] veth1_vlan: entered promiscuous mode [ 35.192917][ T28] audit: type=1400 audit(1781612624.346:146): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.klWuJ2/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 35.221987][ T28] audit: type=1400 audit(1781612624.356:147): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.236134][ T3304] veth0_macvtap: entered promiscuous mode [ 35.247057][ T28] audit: type=1400 audit(1781612624.356:148): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.klWuJ2/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.277670][ T28] audit: type=1400 audit(1781612624.356:149): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.292602][ T3297] veth0_macvtap: entered promiscuous mode [ 35.308822][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.325089][ T3304] veth1_macvtap: entered promiscuous mode [ 35.353054][ T3297] veth1_macvtap: entered promiscuous mode [ 35.379257][ T3303] veth0_macvtap: entered promiscuous mode [ 35.388038][ T3303] veth1_macvtap: entered promiscuous mode [ 35.397095][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.425575][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.445594][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.457844][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.471748][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.483646][ T103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.494129][ T103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.507273][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.507262][ T3507] loop1: detected capacity change from 0 to 4096 [ 35.539656][ T3507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.584864][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.590349][ T3506] batman_adv: batadv0: Adding interface: macvtap1 [ 35.603133][ T3506] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.633075][ T3506] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 35.649343][ T103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.658225][ T103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.676312][ T3511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6'. [ 35.684825][ T3506] syz.0.1 (3506) used greatest stack depth: 10376 bytes left [ 35.687787][ T3511] Zero length message leads to an empty skb [ 35.692911][ T103] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.726349][ T103] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.741143][ T103] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.756748][ T103] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.775681][ T3513] netlink: 'syz.1.8': attribute type 1 has an invalid length. [ 35.786548][ T103] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.813890][ T103] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.830647][ T103] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.861426][ T103] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.970967][ T3520] syzkaller0: entered promiscuous mode [ 35.986101][ T3521] loop0: detected capacity change from 0 to 128 [ 35.996850][ T3520] syzkaller0: entered allmulticast mode [ 36.270221][ T3537] loop4: detected capacity change from 0 to 2048 [ 36.304849][ T3537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.422043][ T3537] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.11: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 36.441755][ T3541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 36.452804][ T3537] EXT4-fs (loop4): Remounting filesystem read-only [ 36.460567][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 36.460621][ T28] audit: type=1400 audit(1781612625.606:182): avc: denied { write } for pid=3536 comm="syz.4.11" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.489346][ T28] audit: type=1400 audit(1781612625.606:183): avc: denied { add_name } for pid=3536 comm="syz.4.11" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.511265][ T28] audit: type=1400 audit(1781612625.606:184): avc: denied { create } for pid=3536 comm="syz.4.11" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.532011][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.533669][ T28] audit: type=1400 audit(1781612625.616:185): avc: denied { create } for pid=3536 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.561666][ T28] audit: type=1400 audit(1781612625.716:186): avc: denied { create } for pid=3540 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.584539][ T28] audit: type=1400 audit(1781612625.716:187): avc: denied { setopt } for pid=3540 comm="syz.0.12" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.606443][ T3545] netlink: 'syz.4.13': attribute type 1 has an invalid length. [ 36.615994][ T3534] syzkaller0: entered promiscuous mode [ 36.623505][ T3534] syzkaller0: entered allmulticast mode [ 36.624677][ T3546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 36.673944][ T28] audit: type=1400 audit(1781612625.826:188): avc: denied { create } for pid=3547 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.706401][ T28] audit: type=1400 audit(1781612625.846:189): avc: denied { create } for pid=3549 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 36.765798][ T28] audit: type=1400 audit(1781612625.916:190): avc: denied { write } for pid=3554 comm="syz.4.17" name="file0" dev="tmpfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.796533][ T3558] xt_CT: You must specify a L4 protocol and not use inversions on it [ 36.833609][ T28] audit: type=1400 audit(1781612625.916:191): avc: denied { open } for pid=3554 comm="syz.4.17" path="/3/file0" dev="tmpfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.870819][ T3557] loop4: detected capacity change from 0 to 512 [ 36.884318][ T3557] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.908433][ T3565] loop2: detected capacity change from 0 to 512 [ 36.934168][ T3565] EXT4-fs (loop2): orphan cleanup on readonly fs [ 36.946010][ T3565] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.20: bad orphan inode 15 [ 36.976199][ T3557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 37.006469][ T3565] loop2: lost filesystem error report for type 5 error -117 [ 37.008113][ T3565] ext4_test_bit(bit=14, block=18) = 1 [ 37.015557][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 37.015581][ C1] EXT4-fs (loop2): initial error at time 1781612626: ext4_orphan_get:1425 [ 37.015636][ C1] EXT4-fs (loop2): last error at time 1781612626: ext4_orphan_get:1425 [ 37.051361][ T3557] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.061917][ T3565] is_bad_inode(inode)=0 [ 37.066479][ T3565] NEXT_ORPHAN(inode)=1023 [ 37.071471][ T3565] max_ino=32 [ 37.076893][ T3557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 37.088233][ T3565] i_nlink=0 [ 37.099401][ T3565] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #15: comm syz.2.20: corrupted xattr block 19: e_value size too large [ 37.137649][ T3565] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.137865][ T3565] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 37.171278][ T3557] netlink: 'syz.4.17': attribute type 2 has an invalid length. [ 37.174978][ T3565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-2400-000000000000 ro without journal. Quota mode: none. [ 37.607720][ T3584] Cannot find set identified by id 0 to match [ 37.762415][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-2400-000000000000. [ 37.936930][ T3586] process 'syz.1.25' launched './file1' with NULL argv: empty string added [ 38.024818][ T3587] loop1: detected capacity change from 0 to 512 [ 38.056814][ T3587] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 38.110332][ T3587] EXT4-fs: error: could not find journal device path [ 38.260457][ T3595] syzkaller0: entered promiscuous mode [ 38.280927][ T3595] syzkaller0: entered allmulticast mode [ 38.509586][ T3602] loop3: detected capacity change from 0 to 2048 [ 38.534951][ T3608] capability: warning: `syz.2.33' uses deprecated v2 capabilities in a way that may be insecure [ 38.838357][ T3615] syzkaller0: entered promiscuous mode [ 39.245894][ T3615] syzkaller0: entered allmulticast mode [ 40.072213][ T3635] loop3: detected capacity change from 0 to 128 [ 40.120872][ T3635] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.142336][ T3635] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.166520][ T3635] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.294183][ T3650] netlink: 'syz.4.48': attribute type 1 has an invalid length. [ 40.303185][ T3649] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 40.323665][ T3649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.47'. [ 40.346181][ T3649] veth0_to_bridge: entered promiscuous mode [ 40.362523][ T3649] veth0_to_bridge: entered allmulticast mode [ 40.483877][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.500757][ T3650] bridge_slave_0 (unregistering): left allmulticast mode [ 40.508181][ T3650] bridge_slave_0 (unregistering): left promiscuous mode [ 40.515743][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.624528][ T3663] loop2: detected capacity change from 0 to 4096 [ 40.637653][ T3664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 40.649500][ T3664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.51'. [ 40.674886][ T3661] vlan2: entered promiscuous mode [ 40.685881][ T3661] veth1_to_bridge: entered promiscuous mode [ 40.692946][ T3661] vlan2: entered allmulticast mode [ 40.698152][ T3661] veth1_to_bridge: entered allmulticast mode [ 40.809392][ T3377] IPVS: starting estimator thread 0... [ 40.817491][ T3663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.931637][ T3674] IPVS: using max 2304 ests per chain, 115200 per kthread [ 41.604705][ T3686] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 41.688135][ T3686] loop3: detected capacity change from 0 to 512 [ 41.774235][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 41.774248][ T28] audit: type=1400 audit(1781612630.926:237): avc: denied { mount } for pid=3688 comm="syz.0.57" name="/" dev="autofs" ino=5215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 41.843214][ T3686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.919768][ T3686] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.920936][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.029223][ T3686] ======================================================= [ 42.029223][ T3686] WARNING: The mand mount option has been deprecated and [ 42.029223][ T3686] and is ignored by this kernel. Remove the mand [ 42.029223][ T3686] option from the mount to silence this warning. [ 42.029223][ T3686] ======================================================= [ 42.064786][ T28] audit: type=1400 audit(1781612631.176:238): avc: denied { remount } for pid=3685 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.118238][ T3686] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.129361][ T3686] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 42.166412][ T3392] IPVS: starting estimator thread 0... [ 42.167552][ T28] audit: type=1400 audit(1781612631.316:239): avc: denied { setopt } for pid=3703 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.222242][ T3707] loop0: detected capacity change from 0 to 512 [ 42.231521][ T28] audit: type=1400 audit(1781612631.356:240): avc: denied { nlmsg_read } for pid=3685 comm="syz.3.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 42.256871][ T3707] EXT4-fs: Ignoring removed bh option [ 42.272292][ T3705] IPVS: using max 2448 ests per chain, 122400 per kthread [ 42.308454][ T3707] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.332606][ T3707] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.421882][ T28] audit: type=1400 audit(1781612631.576:241): avc: denied { write } for pid=3706 comm="syz.0.63" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.469859][ T28] audit: type=1400 audit(1781612631.596:242): avc: denied { write } for pid=3706 comm="syz.0.63" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.513680][ T28] audit: type=1400 audit(1781612631.596:243): avc: denied { read append } for pid=3706 comm="syz.0.63" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.561676][ T28] audit: type=1400 audit(1781612631.596:244): avc: denied { open } for pid=3706 comm="syz.0.63" path="/13/file1/file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.626712][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.635171][ T28] audit: type=1400 audit(1781612631.596:245): avc: denied { ioctl } for pid=3706 comm="syz.0.63" path="/13/file1/file2" dev="loop0" ino=16 ioctlcmd=0x5603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.661437][ T28] audit: type=1400 audit(1781612631.736:246): avc: denied { create } for pid=3703 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 42.741125][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.787790][ T3717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.66'. [ 42.840005][ T3717] erspan1: entered allmulticast mode [ 42.884965][ T3720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.66'. [ 42.895621][ T3720] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.920533][ T3720] bridge_slave_0 (unregistering): left allmulticast mode [ 42.940787][ T3720] bridge_slave_0 (unregistering): left promiscuous mode [ 42.961089][ T3720] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.322433][ T3696] Set syz1 is full, maxelem 65536 reached [ 43.562874][ T3741] loop3: detected capacity change from 0 to 512 [ 43.605829][ T3741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.629102][ T3741] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.982846][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.035141][ T3747] netlink: 14 bytes leftover after parsing attributes in process `syz.3.75'. [ 44.077957][ T3747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.097802][ T3747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.127809][ T3747] bond0 (unregistering): Released all slaves [ 44.288491][ T3756] netlink: 'syz.4.78': attribute type 4 has an invalid length. [ 45.193152][ T3788] loop0: detected capacity change from 0 to 512 [ 45.211725][ T3788] mmap: syz.0.91 (3788) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.522542][ T3797] syz.3.95 (3797) used greatest stack depth: 9496 bytes left [ 45.763277][ T3806] syz.1.97 uses obsolete (PF_INET,SOCK_PACKET) [ 45.811248][ T3808] loop0: detected capacity change from 0 to 1024 [ 45.842505][ T3808] EXT4-fs: Ignoring removed bh option [ 45.885487][ T3808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.046133][ T3816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.061868][ T3816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.074169][ T3816] ieee802154 phy0 wpan0: encryption failed: -22 [ 46.096402][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.129769][ T3816] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.202395][ T3816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.220867][ T3816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.330538][ T53] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.339666][ T53] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.348860][ T53] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.369427][ T53] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.511530][ T3823] syzkaller0: entered promiscuous mode [ 46.517517][ T3823] syzkaller0: entered allmulticast mode [ 46.704542][ T3836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 46.850748][ T3839] loop0: detected capacity change from 0 to 512 [ 46.882858][ T3839] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 46.930250][ T3839] EXT4-fs (loop0): 1 truncate cleaned up [ 46.953170][ T3842] xt_hashlimit: size too large, truncated to 1048576 [ 46.964252][ T3839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.990468][ T3844] netlink: 'syz.4.111': attribute type 1 has an invalid length. [ 47.005479][ T3844] vlan2: entered promiscuous mode [ 47.031056][ T3844] vlan0: entered promiscuous mode [ 47.051585][ T3844] vlan2: entered allmulticast mode [ 47.075253][ T3844] vlan0: entered allmulticast mode [ 47.077751][ T3839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 47.088970][ T3839] IPv6: NLM_F_CREATE should be set when creating new route [ 47.095006][ T3844] veth0_vlan: entered allmulticast mode [ 47.190139][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.319891][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 47.319909][ T28] audit: type=1400 audit(1781612636.466:280): avc: denied { read } for pid=3849 comm="syz.0.112" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 47.365702][ T28] audit: type=1400 audit(1781612636.466:281): avc: denied { open } for pid=3849 comm="syz.0.112" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 47.422595][ T3852] loop4: detected capacity change from 0 to 512 [ 47.441494][ T3852] EXT4-fs: Ignoring removed oldalloc option [ 47.474755][ T3852] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 47.496136][ T3852] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.517998][ T3852] EXT4-fs warning (device loop4): ext4_enable_quotas:7267: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 47.538192][ T3852] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 47.561206][ T3852] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.113: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 47.580481][ T3852] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 47.581072][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 47.595873][ T3852] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.113: couldn't read orphan inode 13 (err -117) [ 47.596734][ C1] EXT4-fs (loop4): last error at time 1781612636: ext4_ext_check_inode:521: inode 13 [ 47.641138][ T3852] loop4: lost filesystem error report for type 5 error -117 [ 47.642127][ T3852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.680471][ T28] audit: type=1400 audit(1781612636.826:282): avc: denied { ioctl } for pid=3854 comm="syz.3.115" path="socket:[6484]" dev="sockfs" ino=6484 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.680856][ T3855] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 47.706718][ T3852] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 47.728819][ T3852] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 47.753560][ T3852] EXT4-fs warning (device loop4): ext4_enable_quotas:7267: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 47.810175][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.912508][ T3865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.116'. [ 47.925804][ T28] audit: type=1400 audit(1781612637.076:283): avc: denied { getopt } for pid=3860 comm="syz.0.118" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.949541][ T3865] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3865 comm=syz.4.116 [ 47.964848][ T3863] loop3: detected capacity change from 0 to 128 [ 48.037800][ T28] audit: type=1400 audit(1781612637.186:284): avc: denied { block_suspend } for pid=3860 comm="syz.0.118" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.110067][ T3871] loop4: detected capacity change from 0 to 512 [ 48.151965][ T28] audit: type=1400 audit(1781612637.306:285): avc: denied { write } for pid=3872 comm="syz.3.120" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.185937][ T3875] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.120' sets config #-1 [ 48.216066][ T3871] vfat: Unknown parameter './file0' [ 48.233460][ T28] audit: type=1400 audit(1781612637.376:286): avc: denied { lock } for pid=3876 comm="syz.0.122" path="socket:[6517]" dev="sockfs" ino=6517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 48.301903][ T28] audit: type=1400 audit(1781612637.446:287): avc: denied { bpf } for pid=3878 comm="syz.3.123" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.375926][ T28] audit: type=1400 audit(1781612637.476:288): avc: denied { perfmon } for pid=3878 comm="syz.3.123" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.459767][ T28] audit: type=1400 audit(1781612637.506:289): avc: denied { name_bind 0x1000000 } for pid=3880 comm="syz.0.124" path="socket:[6533]" dev="sockfs" ino=6533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 48.522342][ T3879] loop3: detected capacity change from 0 to 256 [ 49.207827][ T3900] syzkaller0: entered promiscuous mode [ 49.213805][ T3900] syzkaller0: entered allmulticast mode [ 49.982908][ T3905] loop0: detected capacity change from 0 to 512 [ 50.005474][ T3905] ext4: Unknown parameter 'smackfsroot' [ 50.134126][ T3914] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 50.221793][ T3917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 50.243372][ T3917] bond1: (slave bond2): making interface the new active one [ 50.254415][ T3917] bond1: (slave bond2): Enslaving as an active interface with an up link [ 50.263561][ T3918] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 50.280265][ T3918] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 50.308631][ T3914] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 50.324053][ T3914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.358964][ T3921] syzkaller0: entered promiscuous mode [ 50.368663][ T3921] syzkaller0: entered allmulticast mode [ 50.389100][ T3925] netlink: 'syz.4.137': attribute type 8 has an invalid length. [ 50.404783][ T3925] sch_fq: defrate 0 ignored. [ 51.990095][ T3950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 52.076223][ T3950] ip6erspan0: entered promiscuous mode [ 52.082243][ T3953] loop3: detected capacity change from 0 to 512 [ 52.142866][ T3953] EXT4-fs: inline encryption not supported [ 52.291844][ T3953] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.142: bad orphan inode 15 [ 52.318843][ T3953] loop3: lost filesystem error report for type 5 error -117 [ 52.321208][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 52.335808][ C1] EXT4-fs (loop3): initial error at time 1781612641: ext4_orphan_get:1425 [ 52.344888][ C1] EXT4-fs (loop3): last error at time 1781612641: ext4_orphan_get:1425 [ 52.354680][ T3953] ext4_test_bit(bit=14, block=5) = 0 [ 52.363928][ T3953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.384475][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 52.384493][ T28] audit: type=1326 audit(1781612641.506:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92b587d68e code=0x7ffc0000 [ 52.464337][ T3962] netlink: 64 bytes leftover after parsing attributes in process `syz.1.146'. [ 52.486527][ T28] audit: type=1326 audit(1781612641.516:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92b587d68e code=0x7ffc0000 [ 52.515023][ T28] audit: type=1326 audit(1781612641.526:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92b587d68e code=0x7ffc0000 [ 52.540664][ T28] audit: type=1326 audit(1781612641.526:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92b587d68e code=0x7ffc0000 [ 52.566142][ T28] audit: type=1326 audit(1781612641.526:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92b587d68e code=0x7ffc0000 [ 52.593640][ T28] audit: type=1326 audit(1781612641.536:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92b587d68e code=0x7ffc0000 [ 52.619325][ T28] audit: type=1326 audit(1781612641.566:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92b587d68e code=0x7ffc0000 [ 52.648705][ T28] audit: type=1326 audit(1781612641.566:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92b587d68e code=0x7ffc0000 [ 52.707962][ T28] audit: type=1326 audit(1781612641.566:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92b587d68e code=0x7ffc0000 [ 52.740592][ T28] audit: type=1326 audit(1781612641.566:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.145" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92b587d68e code=0x7ffc0000 [ 52.856078][ T3970] netlink: 'syz.4.150': attribute type 49 has an invalid length. [ 52.877170][ T3974] loop0: detected capacity change from 0 to 8192 [ 52.983840][ T3979] netlink: 'syz.1.154': attribute type 10 has an invalid length. [ 52.995829][ T3981] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 53.004705][ T3981] FAT-fs (loop0): Filesystem has been set read-only [ 53.012028][ T3970] ip6gretap0: entered promiscuous mode [ 53.019055][ T3970] ip6gretap0: entered allmulticast mode [ 53.042489][ T3979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.083665][ T3983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.153'. [ 53.100689][ T3979] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 53.158123][ T3982] netlink: 14 bytes leftover after parsing attributes in process `syz.1.154'. [ 53.246928][ T3982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.288470][ T3982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.329427][ T3982] bond0 (unregistering): (slave netdevsim2): Releasing backup interface [ 53.341134][ T3982] bond0 (unregistering): Released all slaves [ 53.420537][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.398308][ T4007] tipc: Failed to remove unknown binding: 66,0,0/0:4228739962/4228739964 [ 54.443761][ T4005] tipc: Failed to remove unknown binding: 66,0,0/0:2981311429/2981311430 [ 54.492374][ T4005] tipc: Failed to remove unknown binding: 66,0,0/0:2981311429/2981311430 [ 54.892596][ T4016] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 55.528872][ T4030] tmpfs: Bad value for 'mpol' [ 56.196165][ T4043] xt_hashlimit: size too large, truncated to 1048576 [ 56.311133][ T4050] loop3: detected capacity change from 0 to 764 [ 56.327292][ T4050] rock: directory entry would overflow storage [ 56.334340][ T4050] rock: sig=0x4654, size=5, remaining=4 [ 56.799810][ T4064] loop1: detected capacity change from 0 to 512 [ 56.834827][ T4064] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 57.053986][ T4070] loop1: detected capacity change from 0 to 512 [ 57.073714][ T4070] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 57.108073][ T4070] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.131300][ T4070] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 57.146939][ T4070] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 57.194070][ T4070] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 57.227164][ T4077] loop3: detected capacity change from 0 to 1024 [ 57.233893][ T4070] System zones: 0-2, 18-18, 34-35 [ 57.257171][ T4070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.282356][ T4077] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.343668][ T4077] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 1: comm syz.3.180: lblock 1 mapped to illegal pblock 1 (length 1) [ 57.390818][ T4077] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 57.390967][ T4077] EXT4-fs error (device loop3): ext4_acquire_dquot:7032: comm syz.3.180: Failed to acquire dquot type 0 [ 57.391065][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 57.391085][ C1] EXT4-fs (loop3): initial error at time 1781612646: ext4_map_blocks:833: inode 3: block 1 [ 57.391119][ C1] EXT4-fs (loop3): last error at time 1781612646: ext4_map_blocks:833: inode 3: block 1 [ 57.478785][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 57.478804][ T28] audit: type=1326 audit(1781612646.616:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.1.178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de243ce59 code=0x7ffc0000 [ 57.521167][ T4077] loop3: lost filesystem error report for type 5 error -117 [ 57.525799][ T4077] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.180: Freeing blocks not in datazone - block = 0, count = 4096 [ 57.582747][ T28] audit: type=1326 audit(1781612646.616:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.1.178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de243ce59 code=0x7ffc0000 [ 57.587218][ T4077] loop3: lost filesystem error report for type 5 error -117 [ 57.646352][ T4077] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.180: Invalid inode bitmap blk 0 in block_group 0 [ 57.652267][ T28] audit: type=1326 audit(1781612646.616:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.1.178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de243ce59 code=0x7ffc0000 [ 57.672696][ T4077] loop3: lost filesystem error report for type 5 error -117 [ 57.691957][ T36] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 57.741511][ T36] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 57.741633][ T36] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 57.779027][ T28] audit: type=1326 audit(1781612646.616:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.1.178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de243ce59 code=0x7ffc0000 [ 57.779770][ T4077] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 57.827651][ T4100] netlink: 'syz.0.185': attribute type 11 has an invalid length. [ 57.831132][ T36] EXT4-fs error (device loop3): ext4_release_dquot:7068: comm kworker/u8:2: Failed to release dquot type 0 [ 57.844651][ T4100] netlink: 36 bytes leftover after parsing attributes in process `syz.0.185'. [ 57.861135][ T4098] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 57.862492][ T36] loop3: lost filesystem error report for type 5 error -117 [ 57.869289][ T28] audit: type=1326 audit(1781612646.616:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.1.178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de243ce59 code=0x7ffc0000 [ 57.871829][ T4077] loop3: lost filesystem error report for type 5 error -117 [ 57.880568][ T28] audit: type=1326 audit(1781612646.616:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.1.178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4de243ce59 code=0x7ffc0000 [ 57.936545][ T4077] EXT4-fs (loop3): 1 orphan inode deleted [ 57.943353][ T28] audit: type=1326 audit(1781612646.616:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.1.178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de243ce59 code=0x7ffc0000 [ 57.949548][ T4077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.969862][ T28] audit: type=1326 audit(1781612646.626:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.1.178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de243ce59 code=0x7ffc0000 [ 57.990095][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.025039][ T28] audit: type=1326 audit(1781612646.736:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.1.178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de243ce59 code=0x7ffc0000 [ 58.174518][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.215797][ T4112] syzkaller0: entered promiscuous mode [ 58.221714][ T4112] syzkaller0: entered allmulticast mode [ 58.249708][ T4113] syzkaller0: entered promiscuous mode [ 58.257531][ T4113] syzkaller0: entered allmulticast mode [ 58.263419][ T4108] loop0: detected capacity change from 0 to 8192 [ 58.559641][ T4115] netlink: 'syz.4.191': attribute type 12 has an invalid length. [ 58.677835][ T4124] syzkaller0: entered promiscuous mode [ 58.684244][ T4124] syzkaller0: entered allmulticast mode [ 58.685136][ T3406] IPVS: starting estimator thread 0... [ 58.699056][ T4126] loop4: detected capacity change from 0 to 1024 [ 58.710762][ T4124] tipc: Started in network mode [ 58.719565][ T4126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.731235][ T4124] tipc: Node identity c258e77dce82, cluster identity 4711 [ 58.745860][ T4124] tipc: Enabled bearer , priority 0 [ 58.776243][ T4123] tipc: Resetting bearer [ 58.778033][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.791175][ T4127] IPVS: using max 1824 ests per chain, 91200 per kthread [ 58.800427][ T4123] tipc: Disabling bearer [ 58.985277][ T4138] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 59.258058][ T4145] loop3: detected capacity change from 0 to 512 [ 59.312090][ T4145] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.200: inode has both inline data and extents flags [ 59.468822][ T4145] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.468946][ T4145] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.200: couldn't read orphan inode 15 (err -117) [ 59.478198][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 59.478215][ C0] EXT4-fs (loop3): initial error at time 1781612648: ext4_orphan_get:1399: inode 15 [ 59.478240][ C0] EXT4-fs (loop3): last error at time 1781612648: ext4_orphan_get:1399: inode 15 [ 59.553771][ T4152] loop0: detected capacity change from 0 to 512 [ 59.582720][ T4152] EXT4-fs: Ignoring removed nobh option [ 59.663279][ T4152] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #3: comm syz.0.203: corrupted inode contents [ 59.721711][ T4152] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 59.721883][ T4152] EXT4-fs (loop0): Remounting filesystem read-only [ 59.731158][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 59.731179][ C0] EXT4-fs (loop0): initial error at time 1781612648: ext4_do_update_inode:5690: inode 3 [ 59.731203][ C0] EXT4-fs (loop0): last error at time 1781612648: ext4_do_update_inode:5690: inode 3 [ 59.784401][ T4145] loop3: lost filesystem error report for type 5 error -117 [ 59.786652][ T4145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.983491][ T4152] EXT4-fs (loop0): 1 truncate cleaned up [ 60.010194][ T4152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.068521][ T4144] netlink: 'syz.3.200': attribute type 12 has an invalid length. [ 60.091172][ T4144] netlink: 132 bytes leftover after parsing attributes in process `syz.3.200'. [ 60.111209][ T4152] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.195323][ T4152] netlink: 132 bytes leftover after parsing attributes in process `syz.0.203'. [ 60.212252][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.274464][ T4166] loop3: detected capacity change from 0 to 128 [ 60.317070][ T4166] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 60.401598][ T4170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'. [ 60.418254][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.442074][ T4166] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.495292][ T3297] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.505084][ T4170] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4170 comm=syz.1.209 [ 60.519566][ T4170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 60.528457][ T4170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.209'. [ 60.546520][ T4170] veth3: entered allmulticast mode [ 60.553697][ T4170] bond0: (slave veth3): Enslaving as an active interface with an up link [ 60.642828][ T4182] netlink: 'syz.0.213': attribute type 1 has an invalid length. [ 60.662602][ T4185] netlink: 4116 bytes leftover after parsing attributes in process `syz.3.215'. [ 60.702258][ T4182] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 60.714980][ T4182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 60.731305][ T4182] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 60.754833][ T4182] bond3 (unregistering): Released all slaves [ 61.006752][ T4199] loop2: detected capacity change from 0 to 8192 [ 61.374220][ T4205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.423415][ T4205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.490865][ T4205] tmpfs: Bad value for 'nr_inodes' [ 61.572051][ T4205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 61.585380][ T4205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.878188][ T4214] loop3: detected capacity change from 0 to 764 [ 61.908798][ T4212] syzkaller0: entered promiscuous mode [ 61.920645][ T4212] syzkaller0: entered allmulticast mode [ 61.959264][ T4221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'. [ 62.210323][ T4230] netlink: 20 bytes leftover after parsing attributes in process `syz.1.232'. [ 62.516129][ T4238] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4238 comm=syz.0.234 [ 62.611594][ T28] kauditd_printk_skb: 132 callbacks suppressed [ 62.611610][ T28] audit: type=1400 audit(1781612651.756:487): avc: denied { create } for pid=4240 comm="syz.1.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 62.726693][ T4249] loop1: detected capacity change from 0 to 256 [ 62.749138][ T4249] FAT-fs (loop1): IO charset maccroatian not found [ 62.758570][ T4249] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 62.812475][ T4255] loop4: detected capacity change from 0 to 512 [ 62.837804][ T4255] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.954346][ T4255] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.240: invalid indirect mapped block 83886080 (level 1) [ 62.972266][ T4255] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 62.979158][ T4255] EXT4-fs (loop4): Remounting filesystem read-only [ 62.989648][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 62.989767][ C0] EXT4-fs (loop4): initial error at time 1781612652: ext4_free_branches:1023: inode 16 [ 62.990088][ C0] EXT4-fs (loop4): last error at time 1781612652: ext4_free_branches:1023: inode 16 [ 63.057067][ T4255] EXT4-fs (loop4): 1 orphan inode deleted [ 63.092262][ T4255] EXT4-fs (loop4): 1 truncate cleaned up [ 63.130500][ T28] audit: type=1400 audit(1781612652.276:488): avc: denied { ioctl } for pid=4266 comm="syz.2.243" path="socket:[7071]" dev="sockfs" ino=7071 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.212192][ T4255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.247608][ T4271] gretap0: entered promiscuous mode [ 63.253037][ T28] audit: type=1400 audit(1781612652.396:489): avc: denied { create } for pid=4272 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 63.324016][ T4274] 0ªî{X¹¦: renamed from gretap0 [ 63.343746][ T4274] 0ªî{X¹¦: left promiscuous mode [ 63.353374][ T28] audit: type=1400 audit(1781612652.506:490): avc: denied { write } for pid=4272 comm="syz.2.246" path="socket:[7074]" dev="sockfs" ino=7074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 63.359048][ T4274] 0ªî{X¹¦: entered allmulticast mode [ 63.436839][ T4274] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 63.484516][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.614224][ T4271] loop3: detected capacity change from 0 to 1024 [ 63.621163][ T28] audit: type=1400 audit(1781612652.766:491): avc: denied { append } for pid=4281 comm="syz.4.249" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.683168][ T28] audit: type=1400 audit(1781612652.776:492): avc: denied { listen } for pid=4281 comm="syz.4.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 63.725171][ T4271] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 63.763571][ T4271] System zones: 0-1, 3-36 [ 63.813263][ T4288] netlink: 'syz.4.251': attribute type 1 has an invalid length. [ 63.828879][ T4271] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.245: bad orphan inode 134217728 [ 63.875307][ T4271] loop3: lost filesystem error report for type 5 error -117 [ 63.876240][ T4288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.896526][ T4271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.974484][ T4288] bond1: (slave geneve2): making interface the new active one [ 63.998718][ T4288] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 64.010966][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.061684][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.074056][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.087735][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.172639][ T4294] Cannot find add_set index 0 as target [ 65.077623][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.019311][ T4307] loop0: detected capacity change from 0 to 256 [ 66.109625][ T4307] FAT-fs (loop0): IO charset maccroatian not found [ 66.118740][ T4313] syzkaller0: entered promiscuous mode [ 66.137276][ T4313] syzkaller0: entered allmulticast mode [ 66.149817][ T4307] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 66.241763][ T28] audit: type=1400 audit(1781612655.386:493): avc: denied { write } for pid=4305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.336553][ T28] audit: type=1400 audit(1781612655.486:494): avc: denied { write } for pid=4334 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.346212][ T4315] loop2: detected capacity change from 0 to 512 [ 66.461521][ T4315] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.527806][ T4315] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.259: invalid indirect mapped block 83886080 (level 1) [ 66.543465][ T4315] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 66.557587][ T4315] EXT4-fs (loop2): Remounting filesystem read-only [ 66.568147][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 66.568349][ C0] EXT4-fs (loop2): initial error at time 1781612655: ext4_free_branches:1023: inode 16 [ 66.568687][ C0] EXT4-fs (loop2): last error at time 1781612655: ext4_free_branches:1023: inode 16 [ 66.631730][ T4315] EXT4-fs (loop2): 1 orphan inode deleted [ 66.631839][ T4353] __nla_validate_parse: 4 callbacks suppressed [ 66.631855][ T4353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.263'. [ 66.657025][ T4315] EXT4-fs (loop2): 1 truncate cleaned up [ 66.670041][ T4315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.704795][ T28] audit: type=1400 audit(1781612655.856:495): avc: denied { write } for pid=4340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.738819][ T4353] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4353 comm=syz.4.263 [ 66.768783][ T28] audit: type=1400 audit(1781612655.906:496): avc: denied { write } for pid=4363 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.791693][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.901793][ T4353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'. [ 66.935120][ T4353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.263'. [ 66.994415][ T4353] veth3: entered allmulticast mode [ 67.007280][ T4353] bond2: (slave veth3): Enslaving as an active interface with an up link [ 67.067608][ T4378] netlink: 'syz.1.269': attribute type 1 has an invalid length. [ 67.096167][ T4378] netlink: 'syz.1.269': attribute type 2 has an invalid length. [ 67.114717][ T4381] syzkaller0: entered promiscuous mode [ 67.131331][ T4381] syzkaller0: entered allmulticast mode [ 67.221781][ T4385] netlink: 'syz.1.271': attribute type 1 has an invalid length. [ 67.300535][ T4387] bond1: (slave geneve2): making interface the new active one [ 67.323722][ T4387] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 67.343989][ T410] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.353144][ T410] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.372460][ T410] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.402557][ T410] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 67.429282][ T4385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.271'. [ 67.444963][ T4391] syzkaller0: entered promiscuous mode [ 67.457071][ T4392] netlink: 'syz.4.283': attribute type 1 has an invalid length. [ 67.462546][ T4391] syzkaller0: entered allmulticast mode [ 67.465081][ T4392] netlink: 'syz.4.283': attribute type 2 has an invalid length. [ 67.502094][ T4385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.630910][ T4396] syzkaller0: entered promiscuous mode [ 67.636744][ T4396] syzkaller0: entered allmulticast mode [ 67.907615][ T4406] netlink: 'syz.2.279': attribute type 12 has an invalid length. [ 68.121456][ T4410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.150483][ T4410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.166912][ T4410] ieee802154 phy0 wpan0: encryption failed: -22 [ 68.285754][ T4418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.282'. [ 68.311791][ T4401] loop1: detected capacity change from 0 to 512 [ 68.315010][ T4410] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.325516][ T4410] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.385270][ T4401] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.398179][ T4420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4420 comm=syz.2.282 [ 68.412141][ T4420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 68.421308][ T4420] netlink: 24 bytes leftover after parsing attributes in process `syz.2.282'. [ 68.496559][ T4401] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.277: invalid indirect mapped block 83886080 (level 1) [ 68.547393][ T4401] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 68.549509][ T4401] EXT4-fs (loop1): Remounting filesystem read-only [ 68.559246][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 68.559588][ C0] EXT4-fs (loop1): initial error at time 1781612657: ext4_free_branches:1023: inode 16 [ 68.559768][ C0] EXT4-fs (loop1): last error at time 1781612657: ext4_free_branches:1023: inode 16 [ 68.602220][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.613778][ T4410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.655197][ T4401] EXT4-fs (loop1): 1 orphan inode deleted [ 68.688447][ T4401] EXT4-fs (loop1): 1 truncate cleaned up [ 68.777724][ T4401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.795948][ T4420] veth3: entered allmulticast mode [ 68.804402][ T4420] bond1: (slave veth3): Enslaving as an active interface with an up link [ 68.820536][ T53] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.829619][ T53] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.848572][ T53] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.858017][ T53] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.866942][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.940606][ T4428] netlink: 'syz.2.286': attribute type 1 has an invalid length. [ 68.977495][ T4428] bond2: (slave geneve2): making interface the new active one [ 68.992912][ T4428] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 69.007286][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 69.007352][ T28] audit: type=1400 audit(1781612658.156:498): avc: denied { cpu } for pid=4430 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 69.043632][ T4432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.286'. [ 69.079497][ T4432] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.111039][ T3450] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 69.120247][ T3450] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 69.130586][ T3450] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 69.139475][ T3450] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 69.233998][ T4434] netlink: 24 bytes leftover after parsing attributes in process `syz.2.287'. [ 69.759310][ T4444] syzkaller0: entered promiscuous mode [ 69.815544][ T4444] syzkaller0: entered allmulticast mode [ 70.162559][ T4454] netlink: 'syz.1.292': attribute type 12 has an invalid length. [ 70.741693][ T4458] netlink: 76 bytes leftover after parsing attributes in process `syz.2.294'. [ 72.276157][ T4476] netlink: 'syz.4.299': attribute type 1 has an invalid length. [ 72.294349][ T4474] syzkaller0: entered promiscuous mode [ 72.312558][ T4474] syzkaller0: entered allmulticast mode [ 72.340778][ T4478] bond3: (slave geneve3): making interface the new active one [ 72.388042][ T4476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.299'. [ 72.464717][ T4478] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 72.506559][ T53] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 72.515695][ T53] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 72.525619][ T4476] 8021q: adding VLAN 0 to HW filter on device bond3 [ 72.541981][ T4484] syzkaller0: entered promiscuous mode [ 72.557113][ T4484] syzkaller0: entered allmulticast mode [ 72.573576][ T53] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 72.599959][ T53] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 72.675112][ T4491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.684818][ T4491] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.685123][ T4486] loop2: detected capacity change from 0 to 128 [ 72.698510][ T4491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.797541][ T4491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.815343][ T4491] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.826215][ T28] audit: type=1400 audit(1781612661.956:499): avc: denied { getopt } for pid=4497 comm="syz.1.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.892661][ T4491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.915009][ T4491] veth1_vlan: left promiscuous mode [ 72.931370][ T4491] veth1_vlan: entered promiscuous mode [ 72.939841][ T4491] veth1_macvtap: left promiscuous mode [ 72.972893][ T4491] veth0_macvtap: left promiscuous mode [ 72.979940][ T4491] veth0_macvtap: entered promiscuous mode [ 73.118518][ T4491] veth1_macvtap: entered promiscuous mode [ 73.154396][ T4491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.181535][ T4491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.191673][ T4491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.202438][ T4491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.219216][ T4491] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.498228][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.505398][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.590129][ T4518] netlink: 'syz.2.312': attribute type 1 has an invalid length. [ 73.632841][ T4518] 8021q: adding VLAN 0 to HW filter on device bond3 [ 73.683691][ T4525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 73.705032][ T4521] loop0: detected capacity change from 0 to 512 [ 73.727413][ T4518] bond3: (slave ip6gretap1): making interface the new active one [ 73.744977][ T4518] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 73.757866][ T4525] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 73.828991][ T4525] gretap0: entered allmulticast mode [ 73.847352][ T4521] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.370524][ T28] audit: type=1400 audit(1781612663.496:500): avc: denied { watch watch_reads } for pid=4520 comm="syz.0.314" path="/71/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 74.394120][ T4546] loop2: detected capacity change from 0 to 128 [ 74.402560][ T4546] FAT-fs (loop2): bogus number of FAT structure [ 74.409212][ T4546] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 74.419786][ T4546] FAT-fs (loop2): Can't find a valid FAT filesystem [ 74.515745][ T4549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.524155][ T4549] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.534944][ T4549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.582917][ T4549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.592127][ T4549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.603942][ T4549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.615060][ T4549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.628907][ T4549] veth1_vlan: left promiscuous mode [ 74.646906][ T4549] veth0_vlan: left promiscuous mode [ 74.664545][ T4549] veth0_vlan: entered promiscuous mode [ 74.673504][ T4549] veth1_vlan: entered promiscuous mode [ 74.683635][ T4549] veth1_macvtap: left promiscuous mode [ 74.689942][ T4549] veth0_macvtap: left promiscuous mode [ 74.696365][ T4549] veth0_macvtap: entered promiscuous mode [ 74.705667][ T4549] veth1_macvtap: entered promiscuous mode [ 74.715451][ T4549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.724649][ T4549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.733122][ T4549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.741676][ T4549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.749927][ T4549] gretap0: entered promiscuous mode [ 74.756163][ T4549] batman_adv: batadv0: Interface activated: macvtap1 [ 74.765113][ T4549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.773189][ T4549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.799853][ T4541] netlink: 140 bytes leftover after parsing attributes in process `syz.2.321'. [ 74.834028][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.841262][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.877305][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.884561][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.947774][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.956784][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.968462][ T4570] syzkaller0: entered promiscuous mode [ 74.974372][ T4570] syzkaller0: entered allmulticast mode [ 74.983631][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.992631][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.117786][ T4582] netlink: 'syz.1.328': attribute type 1 has an invalid length. [ 75.161415][ T4582] 8021q: adding VLAN 0 to HW filter on device bond2 [ 75.168618][ T4586] netlink: 'syz.3.330': attribute type 1 has an invalid length. [ 75.211448][ T4586] bond0: entered promiscuous mode [ 75.219325][ T4586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.235114][ T4586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.330'. [ 75.247286][ T4582] bond2: (slave ip6gretap1): making interface the new active one [ 75.257356][ T4582] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 75.385094][ T4586] bond0: entered allmulticast mode [ 75.577917][ T4597] bond0: (slave bridge1): making interface the new active one [ 75.586008][ T4597] bridge1: entered promiscuous mode [ 75.592991][ T4597] bridge1: entered allmulticast mode [ 75.600096][ T4597] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 75.782018][ T28] audit: type=1400 audit(1781612664.926:501): avc: denied { create } for pid=4611 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 75.910006][ T28] audit: type=1400 audit(1781612665.016:502): avc: denied { create } for pid=4611 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 76.156635][ T28] audit: type=1400 audit(1781612665.016:503): avc: denied { ioctl } for pid=4611 comm="syz.4.337" path="socket:[8617]" dev="sockfs" ino=8617 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 76.842921][ T3392] IPVS: starting estimator thread 0... [ 76.848567][ T28] audit: type=1400 audit(1781612665.996:504): avc: denied { read } for pid=4631 comm="syz.0.343" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 76.962444][ T4636] IPVS: using max 2256 ests per chain, 112800 per kthread [ 77.023255][ T4618] netlink: 76 bytes leftover after parsing attributes in process `syz.3.338'. [ 77.145634][ T28] audit: type=1400 audit(1781612665.996:505): avc: denied { open } for pid=4631 comm="syz.0.343" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 77.307417][ T4639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.366828][ T4643] syzkaller0: entered promiscuous mode [ 77.372628][ T4643] syzkaller0: entered allmulticast mode [ 77.398781][ T4641] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 77.407984][ T4648] loop1: detected capacity change from 0 to 4096 [ 77.435906][ T4648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.475031][ T4641] syzkaller0: entered promiscuous mode [ 77.493477][ T4641] syzkaller0: entered allmulticast mode [ 77.518421][ T4657] netlink: 'syz.3.351': attribute type 1 has an invalid length. [ 77.526259][ T28] audit: type=1400 audit(1781612666.666:506): avc: denied { write } for pid=4647 comm="syz.1.348" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.633543][ T4657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.681745][ T4659] bond1: (slave veth3): Enslaving as an active interface with a down link [ 77.695807][ T4657] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 77.705464][ T4657] bond1: (slave batadv1): making interface the new active one [ 77.714580][ T4657] batadv1: entered promiscuous mode [ 77.719994][ T4657] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 77.749577][ T4665] tipc: Started in network mode [ 77.761458][ T4665] tipc: Node identity 3229041befe6, cluster identity 4711 [ 77.776360][ T4665] tipc: Enabled bearer , priority 0 [ 77.796150][ T4657] bond1 (unregistering): (slave veth3): Releasing active interface [ 77.814914][ T4657] bond1 (unregistering): (slave batadv1): Releasing active interface [ 77.835031][ T4657] bond1 (unregistering): Released all slaves [ 77.845888][ T12] ================================================================== [ 77.854041][ T12] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 77.863665][ T12] [ 77.866027][ T12] write to 0xffff8881348081e6 of 4 bytes by task 4648 on cpu 1: [ 77.873702][ T12] copy_folio_from_iter_atomic+0x728/0x10a0 [ 77.879648][ T12] generic_perform_write+0x2c4/0x490 [ 77.884980][ T12] ext4_buffered_write_iter+0x2e2/0x480 [ 77.890566][ T12] ext4_file_write_iter+0x38e/0xef0 [ 77.895819][ T12] iter_file_splice_write+0x6a0/0xa60 [ 77.901232][ T12] direct_splice_actor+0x156/0x280 [ 77.906381][ T12] splice_direct_to_actor+0x2f9/0x680 [ 77.911787][ T12] do_splice_direct+0x119/0x1a0 [ 77.916670][ T12] do_sendfile+0x37d/0x640 [ 77.921122][ T12] __x64_sys_sendfile64+0x105/0x150 [ 77.926372][ T12] x64_sys_call+0x2dc4/0x3020 [ 77.931105][ T12] do_syscall_64+0x136/0x3c0 [ 77.935731][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.941657][ T12] [ 77.944016][ T12] read to 0xffff888134808000 of 4096 bytes by task 12 on cpu 0: [ 77.951662][ T12] copy_folio_from_iter_atomic+0x728/0x10a0 [ 77.957606][ T12] generic_perform_write+0x2c4/0x490 [ 77.962935][ T12] shmem_file_write_iter+0xc5/0xf0 [ 77.968090][ T12] lo_rw_aio+0x6a9/0x760 [ 77.972377][ T12] loop_process_work+0x567/0xac0 [ 77.977364][ T12] loop_workfn+0x31/0x40 [ 77.981650][ T12] process_scheduled_works+0x4d4/0x9a0 [ 77.987147][ T12] worker_thread+0x569/0x750 [ 77.991782][ T12] kthread+0x221/0x270 [ 77.995871][ T12] ret_from_fork+0x146/0x330 [ 78.000496][ T12] ret_from_fork_asm+0x1a/0x30 [ 78.005299][ T12] [ 78.007643][ T12] Reported by Kernel Concurrency Sanitizer on: [ 78.013822][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.023127][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 78.033205][ T12] Workqueue: loop1 loop_workfn [ 78.038005][ T12] ================================================================== [ 78.046879][ T4665] syzkaller0: entered promiscuous mode [ 78.054285][ T4665] syzkaller0: entered allmulticast mode [ 78.068062][ T4676] tipc: Resetting bearer [ 78.091064][ T4664] tipc: Resetting bearer [ 78.108694][ T4664] tipc: Disabling bearer [ 78.270055][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.