last executing test programs: 9m49.777783069s ago: executing program 32 (id=194): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 9m34.833225758s ago: executing program 33 (id=490): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f4ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) capget(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24080) syz_io_uring_setup(0x10c, 0x0, 0x0, 0x0, 0x0) 7m59.523585721s ago: executing program 34 (id=2374): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000000)=[{r1, 0xa}], 0x1, 0xa1) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000bc0)={0x10, 0x0, 0x8, 0x8, 0x13, "4dd5d26bd8b1eb227705ecfba7158d29559dba", 0x5, 0x10000a4}) 7m51.551312303s ago: executing program 35 (id=2483): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_IFALIAS={0x14, 0x14, 'team_slave_0\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 7m43.634987825s ago: executing program 36 (id=2613): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@empty, @loopback, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001800110100000000000000000a00000000000006"], 0x1c}}, 0x0) 7m11.984482939s ago: executing program 37 (id=3094): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012101, 0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x52, 0x0, 0x9, 0xe16fe, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x5}, 0x8084, 0x9e, 0x400, 0x7, 0x477f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xa8) 6m4.310626405s ago: executing program 38 (id=4377): sched_setscheduler(0x0, 0x2, 0x0) memfd_create(0x0, 0x71042f6f0286d486) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x2}, 0x102802, 0x31, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r0, r1, 0xcf8dbd1a2fcdc68c}, 0x10) 5m49.572852651s ago: executing program 39 (id=4645): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x4ba, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0xfffd}, @initr0, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001f00)={0x0, 0x8, 0x10}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x50}}, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) 4m58.254433294s ago: executing program 40 (id=5576): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) set_mempolicy(0x4003, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 3m49.848228789s ago: executing program 41 (id=6640): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000008000/0xa000)=nil, &(0x7f0000019000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f000000f000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f000000c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, 0x0}, 0x68) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100)={[], 0x11}, 0x0, 0x0) 3m36.343769111s ago: executing program 42 (id=6803): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m29.700657904s ago: executing program 6 (id=6864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m29.630820386s ago: executing program 6 (id=6866): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m29.551792408s ago: executing program 6 (id=6868): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/205, 0xcd}], 0x1}, 0x9}], 0x1, 0x7, 0x0) 3m28.637971803s ago: executing program 6 (id=6882): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000640)={[{@grpjquota}, {@inlinecrypt}, {}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x5bb4269878cbfeb7) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, 0x0) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7ffffffffffffffd, 0x8005, 0x0, 0x0, 0x13, 0xd, "ef359f413bb93852f7d6a4ae6dddbbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafaf3afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359628e45668100e3700000e6d60200cd8ffe000000000000000100", [0x4204]}) openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000088) 3m28.308589242s ago: executing program 6 (id=6888): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c000000020601080000010000000000000000000900020073797a320000000005000400000000001400078005001500200000000800114000000000050005000a000000050001000600000010000300686173683a69702c6d6163"], 0x5c}}, 0x84000) 3m28.050995759s ago: executing program 6 (id=6889): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x2e8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m28.050914199s ago: executing program 43 (id=6889): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x2e8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m25.954134017s ago: executing program 7 (id=6907): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "feccd5a200ea0010", "03e08b113c0af5000000000000008000", '\x00', "b08068ebce17ab00"}, 0x28) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xff3f, 0xd}]}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xc3, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3m25.917612448s ago: executing program 7 (id=6908): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="10"], 0x454680) 3m25.84387668s ago: executing program 7 (id=6909): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x2e, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x10) mknod(&(0x7f0000000140)='./file0\x00', 0xfc4f362c4b451510, 0xff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000740)) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x70bd2b, 0x25dedbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009815}, 0x4000080) 3m25.355544454s ago: executing program 7 (id=6912): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") chdir(0x0) symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) 3m24.423106299s ago: executing program 7 (id=6918): socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008005}, 0x8000002) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 3m23.009509138s ago: executing program 7 (id=6935): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = memfd_create(0x0, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r2, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) 3m22.93640582s ago: executing program 44 (id=6935): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = memfd_create(0x0, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r2, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) 3m16.085150129s ago: executing program 1 (id=7043): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240)=r0, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r2, &(0x7f0000000380)=""/46, 0xfffffeb4) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 3m15.985440452s ago: executing program 1 (id=7045): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x2c00) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 3m15.880793125s ago: executing program 1 (id=7047): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f) 3m15.849150915s ago: executing program 1 (id=7048): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) chown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, 0x0) 3m15.288484291s ago: executing program 1 (id=7053): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xa}, 0x80b0, 0x4d, 0x20, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x50) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) 3m14.730790056s ago: executing program 1 (id=7063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0xb0000000}, 0xd, 0xb, 0x4, 0x1, 0x5, 'syz0\x00', "96d4fd6246d1c42b7f9e10fdb6626bb0ec58802cf0b43afb776b7002b1820168", "69d30d8077e63b207fb7d8c959cf6e019f203869fa621d1434d98a0100534173", [{0x4, 0x1, {0x2, 0x565}}, {0xfffa, 0x2, {0x3, 0x6}}, {0xc, 0x1, {0x3, 0x76f0}}, {0x6, 0x6, {0x3, 0x4}}, {0x0, 0x6, {0x0, 0xfffffff6}}, {0x7b84, 0x8, {0x3, 0x1}}, {0x21, 0x0, {0x2, 0xddb1}}, {0x66af, 0xe, {0x1, 0x4}}, {0x2, 0x9, {0x1, 0x20}}, {0x2, 0x4, {0x0, 0x200}}, {0x400, 0x0, {0x0, 0x10}}, {0x401, 0x5, {0x2, 0xf8d7}}, {0x3bc, 0x8, {0x2, 0x6}}, {0x23b, 0x6, {0x2, 0x4}}, {0x10, 0x8, {0x2, 0x8}}, {0x7, 0x7fff, {0x3, 0x6}}, {0x7, 0x1, {0x1, 0x9}}, {0x100, 0x7fff, {0x2, 0x2}}, {0x80, 0x7, {0x3, 0x7}}, {0xfdc3, 0x400, {0x2, 0x6}}, {0xff7f, 0xd3, {0x1, 0xc3e2}}, {0x3, 0xcc, {0x1, 0x4}}, {0xc4, 0x6, {0x1, 0xff}}, {0x3, 0xcddd, {0x0, 0xffffb383}}, {0xf, 0xfff7, {0x2, 0x7fffffff}}, {0x2, 0xfffb, {0x1, 0x7ff}}, {0xc9, 0x0, {0x0, 0x9}}, {0x8, 0x80, {0x2, 0x1ff}}, {0x3, 0x6e9, {0x2, 0x3}}, {0x6, 0x1, {0x2}}, {0x824b, 0x5, {0x0, 0x9}}, {0x6, 0x5, {0x3, 0x8}}, {0x9, 0x8, {0x2}}, {0x8, 0xb7c5, {0x3, 0x8a52}}, {0x10, 0xdfe4, {0x2, 0x8}}, {0x1ff, 0x1, {0x2, 0xfffffffe}}, {0xf918, 0x5, {0x1, 0x2}}, {0x6, 0xc62a, {0x1, 0x9}}, {0xffff, 0x800, {0x2, 0x1}}, {0x2, 0x2, {0x1, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a00fffe0900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3m14.713729417s ago: executing program 45 (id=7063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0xb0000000}, 0xd, 0xb, 0x4, 0x1, 0x5, 'syz0\x00', "96d4fd6246d1c42b7f9e10fdb6626bb0ec58802cf0b43afb776b7002b1820168", "69d30d8077e63b207fb7d8c959cf6e019f203869fa621d1434d98a0100534173", [{0x4, 0x1, {0x2, 0x565}}, {0xfffa, 0x2, {0x3, 0x6}}, {0xc, 0x1, {0x3, 0x76f0}}, {0x6, 0x6, {0x3, 0x4}}, {0x0, 0x6, {0x0, 0xfffffff6}}, {0x7b84, 0x8, {0x3, 0x1}}, {0x21, 0x0, {0x2, 0xddb1}}, {0x66af, 0xe, {0x1, 0x4}}, {0x2, 0x9, {0x1, 0x20}}, {0x2, 0x4, {0x0, 0x200}}, {0x400, 0x0, {0x0, 0x10}}, {0x401, 0x5, {0x2, 0xf8d7}}, {0x3bc, 0x8, {0x2, 0x6}}, {0x23b, 0x6, {0x2, 0x4}}, {0x10, 0x8, {0x2, 0x8}}, {0x7, 0x7fff, {0x3, 0x6}}, {0x7, 0x1, {0x1, 0x9}}, {0x100, 0x7fff, {0x2, 0x2}}, {0x80, 0x7, {0x3, 0x7}}, {0xfdc3, 0x400, {0x2, 0x6}}, {0xff7f, 0xd3, {0x1, 0xc3e2}}, {0x3, 0xcc, {0x1, 0x4}}, {0xc4, 0x6, {0x1, 0xff}}, {0x3, 0xcddd, {0x0, 0xffffb383}}, {0xf, 0xfff7, {0x2, 0x7fffffff}}, {0x2, 0xfffb, {0x1, 0x7ff}}, {0xc9, 0x0, {0x0, 0x9}}, {0x8, 0x80, {0x2, 0x1ff}}, {0x3, 0x6e9, {0x2, 0x3}}, {0x6, 0x1, {0x2}}, {0x824b, 0x5, {0x0, 0x9}}, {0x6, 0x5, {0x3, 0x8}}, {0x9, 0x8, {0x2}}, {0x8, 0xb7c5, {0x3, 0x8a52}}, {0x10, 0xdfe4, {0x2, 0x8}}, {0x1ff, 0x1, {0x2, 0xfffffffe}}, {0xf918, 0x5, {0x1, 0x2}}, {0x6, 0xc62a, {0x1, 0x9}}, {0xffff, 0x800, {0x2, 0x1}}, {0x2, 0x2, {0x1, 0x401}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a00fffe0900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2m54.803255055s ago: executing program 4 (id=7396): sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0x20c89f, 0x1c881, 0x1, 0xd1}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r0, 0x0, 0x1000002, 0x37, 0x0, 0x0) 2m54.467296004s ago: executing program 4 (id=7409): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2m54.27685868s ago: executing program 4 (id=7416): r0 = socket$inet6_udp(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x81, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 2m54.203033042s ago: executing program 4 (id=7418): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) chown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, 0x0) 2m53.759306954s ago: executing program 4 (id=7423): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x27}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 2m53.305406156s ago: executing program 4 (id=7428): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2m53.267960997s ago: executing program 46 (id=7428): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 25.953049185s ago: executing program 5 (id=9499): unshare(0x60000600) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 24.986986062s ago: executing program 5 (id=9510): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) inotify_init1(0x800) inotify_init1(0x80000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 24.875700455s ago: executing program 5 (id=9522): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) shutdown(r1, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x10120, 0x0, 0x0) 24.841726466s ago: executing program 5 (id=9513): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$eJzs3c9rHFUcAPDv7Cb9GZuotdraarSKwR9Jk/6wBw8qCoIKgh7qMSZprd020kRoS9AoUs8F7+JR8OjJmxdRD+IfoOBRCkWD0FQUIrM7k2R/Jdsm6TbJ5wPbfW/2zcx7M+9l37y3Mw1g0+pN/0kiuiLi14jorkSrE/RW3mZnpkZuzEyNJDE39+afSTnd9ZmpkTxpvt7OLNJXiCh8msTzSf1+Jy5eOjNcKo2dz+IDk2ffH5i4eOmZ02eHT42dGjs3dPz4kcODzx4bOlq1XoNN1dneYFlaruv7Phzfv/eVt6+8PnLiyjs/fp1ua8+ByudZOba0sPmIG3W5eDViui5Zb3rU/porq/3s8ZZ2tH7ctSicdLQxI9yUYkSkp6uz3P67oxgLJ687Xv6krZkD1lT63bS1+cfTc8AGlkS7cwC0R/5Fn17/5q/47zZ1Pu4A115YuOifnZkamZ0fz+iIQra8cw333xsRJ6b/+SJ9Rc14CgDAWij3bZ6u6f+VFWJP+b0y17Erm0PpiYi7I+KeiLg3InZHxH0R5bT3R8QDlZXnulvcf29NvL7/U7jaMM+rJO3/Pbeo7zc7M1U9HFaInmL5rTLH0ROdycnTpbFD2THpi86taXxwiX1891LzaaXF/b/0leahJgNXOyoL5jcyOjw5vFoH4drHEfs6qsqfHf9kfiYgrQF7I2LfzW16Vx44/eRX+5slalT+vC+8rFWYZ5r7MuKJyvmfjpry55Im85NpHT82dHRgW5TGDg3ktaLeT79cfqPZ/ldU/lWQnv8d1fW/JkX330llvrYzSqWx8xM3v4/Lv33W9Jpm+fLP1/95af3fkrxVnrP++d3KsgvDk5PnByO2JK+V41lj2Rbp8qGFdS9k8Tx9Wv6+g43qf6H8Ny6y8/9gRKSV+EDEroci4uEs749ExKMRcXCJ8v/w4mPvLVH+JJJo6/kfjcbtP9OTLJ6vv4VA8cz33zabt2/t/B8pz673ZUvKf/+W0WoGV3j4AAAAYF0oRERXJIX+Sri3KwqF/v7Kb/h3x45CaXxi8qmT4x+cG63cI9ATnYV8pKt70XjoYJL//r0SH8rGivPPD2fjxp8Xt5fj/SPjpdE2lx02u53V7T/y9p/6o9ju3AFrrvk82hK3BgAbQm37L7QpH8Dt18rvaFwLwMbUoP0veobGv9W3CtU/5wJYxzoahIDNoVGr/6gmXtf/b/SULWDdqW//vzd4ZB2wEen1w+al/cPmpf3DprSS+/pvPZDfLLBk4jyLDdNsa/kO/80SyB8Ps5b72h4LS6JQDnRF07V2tOto5GPVSybubmWDEfHNivNTXIVypS2meklxuQKuMNDqf4YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZ/s/AAD//16M4Cg=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4ef07ec3ad71e14dc00000000c2ab00c60e000000000000080000090100", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20000100) 23.555143572s ago: executing program 5 (id=9520): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x61, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x1040, 0x8, 0x0, 0x6, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) unshare(0x22020600) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000100)={'wg2\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}) 23.358910277s ago: executing program 5 (id=9525): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@delchain={0x48, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r5, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x5}}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 23.344509517s ago: executing program 47 (id=9525): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@delchain={0x48, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r5, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x5}}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 4.062578869s ago: executing program 9 (id=9737): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) io_setup(0x400e, &(0x7f0000000600)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000080)={0xa1800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) 3.906602853s ago: executing program 9 (id=9738): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 3.373851148s ago: executing program 8 (id=9744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x6) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_wait(r1, &(0x7f0000000340)=[{}], 0x1, 0x80000300) 2.465494092s ago: executing program 2 (id=9745): pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) 2.388556265s ago: executing program 8 (id=9747): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket(0x1, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.313997876s ago: executing program 9 (id=9749): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x6, @mcast2, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44884) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000040)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) 2.166274551s ago: executing program 9 (id=9752): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_bp={0x0, 0x9}, 0x2002, 0x20000032, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.092842632s ago: executing program 3 (id=9753): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00003f9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x6}, 0x110002, 0x200, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x3893, &(0x7f0000000040)={0x0, 0x1000c89b, 0xc000, 0x800007, 0x41}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000000)='/', 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x2c}, 0x24040041) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.054809504s ago: executing program 8 (id=9754): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 1.934980277s ago: executing program 9 (id=9755): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x9a}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x48018}, 0x4004004) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setown(r0, 0x8, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x5, 0xfffffffffffffffe, 0x800, 0x400000000, 0x8000000100000, 0x10000000000}, 0x0, &(0x7f0000000000)={0x1f, 0x0, 0x9, 0x1, 0xf, 0x0, 0x6a9, 0x43}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 1.83507011s ago: executing program 9 (id=9757): mremap(&(0x7f0000780000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f00004fe000/0x3000)=nil) fsmount(0xffffffffffffffff, 0x1, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000041) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 1.83086514s ago: executing program 3 (id=9758): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 1.742991532s ago: executing program 8 (id=9759): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000400)=[{&(0x7f00000002c0)="d7", 0xffffff2a}], 0x1}, 0x20004001) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c", 0x1}], 0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="14"], 0x18, 0x40091}, 0x8001) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 1.575361877s ago: executing program 2 (id=9763): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f00000002c0)=r4}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 1.494693059s ago: executing program 2 (id=9765): prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x80000000}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = syz_io_uring_setup(0x3dc4, &(0x7f0000000140)={0x0, 0x84a0, 0x400, 0x3, 0x236}, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x2206, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x10, 0xa0042f5, 0x0, r1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.294995505s ago: executing program 0 (id=9769): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = eventfd2(0x2, 0x80800) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) fcntl$lock(r1, 0x6, &(0x7f0000000140)={0x1, 0x0, 0x100, 0x7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.120230469s ago: executing program 0 (id=9770): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x100300, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1.041922392s ago: executing program 2 (id=9771): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0x12000021) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x5, 0x0, 0x2, 0x68, 0x0, 0x2, 0x40, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x9, 0x7}, 0x32bc, 0x4, 0x6c, 0x5, 0x1, 0x3, 0x1, 0x0, 0x7, 0x0, 0x9}, 0x0, 0xd, r0, 0x1) memfd_create(0x0, 0x2) ptrace$cont(0x18, 0x0, 0x0, 0x67e) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900000000000700060064680000080008000000000008000b"], 0x54}}, 0x0) 990.653303ms ago: executing program 0 (id=9772): socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x100300, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) 937.350275ms ago: executing program 2 (id=9773): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000017c0)='./bus\x00', 0x8, &(0x7f00000001c0)={[{@errors_remount}, {@nomblk_io_submit}]}, 0x4, 0x511, &(0x7f0000000640)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x4}, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x1e, 0x1, 0x0) socket$kcm(0x23, 0x5, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r2) open_tree(0xffffffffffffff9c, 0x0, 0x89901) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000c10000000000000009ddff0085000000290000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 872.479597ms ago: executing program 8 (id=9774): mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x20031, 0xffffffffffffffff, 0x3b762000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x7, 0x37, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x1, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 835.471117ms ago: executing program 2 (id=9775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x15, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3e, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) 748.98492ms ago: executing program 0 (id=9776): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0x9}, 0x14185, 0x20032, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x4}, 0x1400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ppoll(&(0x7f0000000200)=[{r1, 0x400}], 0x1, 0x0, 0x0, 0x0) shutdown(r1, 0x1) setsockopt$sock_attach_bpf(r0, 0x84, 0xd, &(0x7f0000000480), 0x4) 528.917256ms ago: executing program 0 (id=9777): unshare(0x400) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10419, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x45) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0xe000) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) 472.589347ms ago: executing program 3 (id=9778): mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000f) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func_proto]}, {0x0, [0x2e, 0x0, 0x2e]}}, 0x0, 0x29}, 0x28) pipe2(0x0, 0x80800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_gettime(0xffffffffffffffff, 0x0) r1 = eventfd2(0x2, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000000)=r1, 0x1) write$P9_RRENAMEAT(r0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f00000002c0)={0x9, 'vlan0\x00', {0x6718}, 0x5}) 395.01666ms ago: executing program 3 (id=9779): r0 = inotify_init() r1 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x1000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r2, 0x4095, 0x7721, 0x16, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x80000006) open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) 360.485ms ago: executing program 3 (id=9780): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 245.363104ms ago: executing program 8 (id=9781): timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r1, 0x1, &(0x7f0000040fe0)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r3, 0x7) close_range(r2, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x77359400}, {r4, r5+60000000}}, 0x0) 44.843139ms ago: executing program 0 (id=9782): mount$bpf(0x200000000000, 0x0, 0x0, 0x206002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r0, 0x0, 0x8e14, 0x8ffff) copy_file_range(r0, 0x0, r0, 0x0, 0x9, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x905, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x7}, {0x5, 0xfff3}, {0xe, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8084) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000003a0000"], 0x50) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0/../file0/file0\x00', 0x0, 0x0, 0x34, 0x1) ioctl$BLKCLOSEZONE(0xffffffffffffffff, 0x40101287, 0x0) 0s ago: executing program 3 (id=9783): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000200)=@v1={0x1000000, [{0x6, 0x5}]}, 0xc, 0x2) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) kernel console output (not intermixed with test programs): truncated [ 485.465587][T27270] loop5: p213 start 67109111 is beyond EOD, truncated [ 485.474746][T27270] loop5: p215 start 67109111 is beyond EOD, truncated [ 485.483964][T27270] loop5: p217 start 67109111 is beyond EOD, truncated [ 485.491722][T27270] loop5: p219 start 67109111 is beyond EOD, truncated [ 485.501921][T27270] loop5: p221 start 67109111 is beyond EOD, truncated [ 485.531208][T27270] loop5: p223 start 67109111 is beyond EOD, truncated [ 485.549907][T27270] loop5: p225 start 67109111 is beyond EOD, truncated [ 485.581015][T27270] loop5: p227 start 67109111 is beyond EOD, truncated [ 485.608680][T27270] loop5: p229 start 67109111 is beyond EOD, truncated [ 485.629115][T27418] netlink: 'syz.0.7945': attribute type 1 has an invalid length. [ 485.637171][T27270] loop5: p231 start 67109111 is beyond EOD, truncated [ 485.670003][T27270] loop5: p233 start 67109111 is beyond EOD, truncated [ 485.680023][T27418] 8021q: adding VLAN 0 to HW filter on device bond14 [ 485.680510][T27270] loop5: p235 start 67109111 is beyond EOD, truncated [ 485.694485][T27270] loop5: p237 start 67109111 is beyond EOD, truncated [ 485.702551][T27270] loop5: p239 start 67109111 is beyond EOD, truncated [ 485.710473][T27270] loop5: p241 start 67109111 is beyond EOD, truncated [ 485.718723][T27270] loop5: p243 start 67109111 is beyond EOD, truncated [ 485.727804][T27270] loop5: p245 start 67109111 is beyond EOD, truncated [ 485.735539][T27270] loop5: p247 start 67109111 is beyond EOD, truncated [ 485.743949][T27270] loop5: p249 start 67109111 is beyond EOD, truncated [ 485.751501][T27270] loop5: p251 start 67109111 is beyond EOD, truncated [ 485.759434][T27270] loop5: p253 start 67109111 is beyond EOD, truncated [ 485.767517][T27270] loop5: p255 start 67109111 is beyond EOD, truncated [ 485.775985][T27423] 8021q: adding VLAN 0 to HW filter on device bond14 [ 485.795276][T27423] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address [ 485.808017][T27423] bond14: (slave vxcan1): Error -95 calling set_mac_address [ 485.935429][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 485.950157][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 485.963408][ T6711] udevd[6711]: inotify_add_watch(7, /dev/loop5p10, 10) failed: No such file or directory [ 485.981711][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 485.993164][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop5p8, 10) failed: No such file or directory [ 486.003549][T27431] udevd[27431]: inotify_add_watch(7, /dev/loop5p12, 10) failed: No such file or directory [ 486.020562][T27435] netlink: 'syz.0.7950': attribute type 4 has an invalid length. [ 486.025398][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop5p26, 10) failed: No such file or directory [ 486.048268][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop5p28, 10) failed: No such file or directory [ 486.061612][T27432] udevd[27432]: inotify_add_watch(7, /dev/loop5p14, 10) failed: No such file or directory [ 486.068992][ T6711] udevd[6711]: inotify_add_watch(7, /dev/loop5p34, 10) failed: No such file or directory [ 486.091175][T27435] netlink: 'syz.0.7950': attribute type 4 has an invalid length. [ 486.819748][T27454] xfrm0 speed is unknown, defaulting to 1000 [ 486.938163][T27454] lo speed is unknown, defaulting to 1000 [ 487.046305][T27454] wg1 speed is unknown, defaulting to 1000 [ 488.511192][T27513] bond10: (slave veth27): Enslaving as an active interface with a down link [ 488.533571][T27513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7978'. [ 488.566980][T27513] bond10: entered promiscuous mode [ 488.583592][T27513] bond10: entered allmulticast mode [ 488.601572][T27513] 8021q: adding VLAN 0 to HW filter on device bond10 [ 488.835913][T27541] netlink: 'syz.9.7989': attribute type 1 has an invalid length. [ 488.856316][T27536] loop5: detected capacity change from 0 to 512 [ 488.870759][T27541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.879373][T27536] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 488.898663][T27541] bond2: (slave ip6gretap1): making interface the new active one [ 488.907882][T27541] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 488.961600][T27541] veth3: entered promiscuous mode [ 488.988967][T27553] netlink: 'syz.5.7994': attribute type 1 has an invalid length. [ 489.001093][T27541] bond2: (slave veth3): Enslaving as an active interface with a down link [ 489.021994][T27553] netlink: 63735 bytes leftover after parsing attributes in process `syz.5.7994'. [ 489.076353][T27550] xfrm0 speed is unknown, defaulting to 1000 [ 489.090364][T27561] netlink: 'syz.5.7997': attribute type 1 has an invalid length. [ 489.119017][T27561] bond2: entered promiscuous mode [ 489.124418][T27561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 489.155316][T27561] bond2: (slave bridge3): making interface the new active one [ 489.182289][T27561] bridge3: entered promiscuous mode [ 489.202587][T27561] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 489.224822][T27550] lo speed is unknown, defaulting to 1000 [ 489.265994][T27550] wg1 speed is unknown, defaulting to 1000 [ 489.875108][T27585] xfrm0 speed is unknown, defaulting to 1000 [ 489.975382][T27585] lo speed is unknown, defaulting to 1000 [ 489.991172][T11084] bridge_slave_1: left allmulticast mode [ 490.004292][T11084] bridge_slave_1: left promiscuous mode [ 490.020844][T11084] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.041932][T11084] bridge_slave_0: left allmulticast mode [ 490.054552][T11084] bridge_slave_0: left promiscuous mode [ 490.061267][T11084] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.316320][T11084] dvmrp2: left allmulticast mode [ 490.491359][T11084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.511869][T11084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.531639][T11084] bond0 (unregistering): (slave team0): Releasing backup interface [ 490.551832][T11084] bond0 (unregistering): Released all slaves [ 490.567952][T11084] bond1 (unregistering): Released all slaves [ 490.582854][T11084] bond2 (unregistering): Released all slaves [ 490.591753][T27585] wg1 speed is unknown, defaulting to 1000 [ 490.735966][T11084] hsr_slave_0: left promiscuous mode [ 490.743062][T11084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.780037][T11084] pim6reg (unregistering): left allmulticast mode [ 490.843362][T11084] team0 (unregistering): Port device team_slave_1 removed [ 490.867907][T11084] team0 (unregistering): Port device team_slave_0 removed [ 490.971022][T27628] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8021'. [ 491.031732][T27630] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8021'. [ 491.260672][T11084] IPVS: stop unused estimator thread 0... [ 491.475246][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 491.475262][ T28] audit: type=1326 audit(1777759564.389:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.9.8016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7fc00000 [ 491.507046][ T28] audit: type=1326 audit(1777759564.389:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.9.8016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55d71ecdd9 code=0x7fc00000 [ 491.532602][ T28] audit: type=1326 audit(1777759564.389:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.9.8016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7fc00000 [ 491.565959][ T28] audit: type=1326 audit(1777759564.389:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.9.8016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7fc00000 [ 491.596206][ T28] audit: type=1326 audit(1777759564.389:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.9.8016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7fc00000 [ 491.622887][ T28] audit: type=1326 audit(1777759564.389:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.9.8016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7fc00000 [ 491.649115][ T28] audit: type=1326 audit(1777759564.389:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.9.8016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7fc00000 [ 491.675727][ T28] audit: type=1326 audit(1777759564.389:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.9.8016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7fc00000 [ 491.703427][ T28] audit: type=1326 audit(1777759564.389:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.9.8016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7fc00000 [ 491.733584][ T28] audit: type=1326 audit(1777759564.389:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27611 comm="syz.9.8016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7fc00000 [ 491.772805][T27639] xfrm0 speed is unknown, defaulting to 1000 [ 491.829399][T27639] lo speed is unknown, defaulting to 1000 [ 491.839512][T27649] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8027'. [ 491.871756][T27639] wg1 speed is unknown, defaulting to 1000 [ 492.206523][T27674] sctp: [Deprecated]: syz.3.8037 (pid 27674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 492.206523][T27674] Use struct sctp_sack_info instead [ 492.777555][T27701] netlink: 'syz.2.8047': attribute type 1 has an invalid length. [ 492.806586][T27701] bond3: entered promiscuous mode [ 492.813082][T27701] bond3: entered allmulticast mode [ 492.826393][T27701] 8021q: adding VLAN 0 to HW filter on device bond3 [ 492.845257][T27701] erspan2: entered allmulticast mode [ 492.853874][T27701] bond3: (slave erspan2): making interface the new active one [ 492.863789][T27701] erspan2: entered promiscuous mode [ 492.870186][T27701] bond3: (slave erspan2): Enslaving as an active interface with an up link [ 496.345781][T27761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8067'. [ 496.413186][T27766] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 496.425758][T27766] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 496.466465][T27761] macvlan4: entered promiscuous mode [ 496.478702][T27761] macvlan4: entered allmulticast mode [ 496.492524][T27761] bond11: (slave macvlan4): Error -98 calling set_mac_address [ 496.544309][T27771] xfrm0 speed is unknown, defaulting to 1000 [ 496.644347][T27771] lo speed is unknown, defaulting to 1000 [ 496.715649][T27773] loop5: detected capacity change from 0 to 512 [ 496.728062][T27771] wg1 speed is unknown, defaulting to 1000 [ 496.892351][T27773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.961144][T27773] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.006836][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 497.006851][ T28] audit: type=1400 audit(1777759569.919:3611): avc: denied { write } for pid=27772 comm="syz.5.8071" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 497.161751][T25422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.212564][T27806] loop5: detected capacity change from 0 to 256 [ 497.275356][T27806] FAT-fs (loop5): IO charset cp1250 not found [ 497.302037][T27806] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8093'. [ 497.589737][T12671] kernel write not supported for file bpf-map (pid: 12671 comm: kworker/1:21) [ 498.066127][T27834] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8105'. [ 498.484333][T27865] netlink: 104 bytes leftover after parsing attributes in process `syz.9.8108'. [ 498.501906][T27866] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 498.565189][T27869] netlink: 104 bytes leftover after parsing attributes in process `syz.9.8108'. [ 498.644395][T27879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8114'. [ 498.691237][T27877] loop5: detected capacity change from 0 to 1024 [ 498.716111][T27877] EXT4-fs: Ignoring removed mblk_io_submit option [ 498.729816][T27877] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 498.754038][T27877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.812943][T27877] EXT4-fs error (device loop5): __ext4_iget:5481: inode #12: block 13: comm syz.5.8113: invalid block [ 498.865564][T25422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.734223][T27922] sctp: [Deprecated]: syz.9.8128 (pid 27922) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.734223][T27922] Use struct sctp_sack_info instead [ 499.734307][ T28] audit: type=1326 audit(1777759572.649:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27923 comm="syz.0.8127" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69eadcdd9 code=0x7ffc0000 [ 499.838623][T27931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8127'. [ 499.839938][ T28] audit: type=1326 audit(1777759572.649:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27923 comm="syz.0.8127" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69eadcdd9 code=0x7ffc0000 [ 499.870528][T27930] xfrm0 speed is unknown, defaulting to 1000 [ 499.910705][ T28] audit: type=1326 audit(1777759572.649:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27923 comm="syz.0.8127" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69eadcdd9 code=0x7ffc0000 [ 499.957012][T27918] loop5: detected capacity change from 0 to 512 [ 499.959234][T27930] lo speed is unknown, defaulting to 1000 [ 499.979939][ T28] audit: type=1326 audit(1777759572.649:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27923 comm="syz.0.8127" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69eadcdd9 code=0x7ffc0000 [ 500.010239][T27918] EXT4-fs: Ignoring removed oldalloc option [ 500.019541][ T28] audit: type=1326 audit(1777759572.699:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27923 comm="syz.0.8127" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69eadcdd9 code=0x7ffc0000 [ 500.052150][T27918] EXT4-fs (loop5): filesystem is read-only [ 500.060124][T27918] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 500.075732][ T28] audit: type=1326 audit(1777759572.699:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27923 comm="syz.0.8127" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69eadcdd9 code=0x7ffc0000 [ 500.104493][T27918] EXT4-fs (loop5): filesystem is read-only [ 500.111267][T27918] EXT4-fs (loop5): orphan cleanup on readonly fs [ 500.118839][ T28] audit: type=1326 audit(1777759572.699:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27923 comm="syz.0.8127" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69eadcdd9 code=0x7ffc0000 [ 500.145933][T27930] wg1 speed is unknown, defaulting to 1000 [ 500.149179][T27918] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8126: bg 0: block 64: padding at end of block bitmap is not set [ 500.166762][T27918] loop5: lost filesystem error report for type 5 error -117 [ 500.167300][ T28] audit: type=1326 audit(1777759572.699:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27923 comm="syz.0.8127" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69eadcdd9 code=0x7ffc0000 [ 500.200156][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 500.200180][ C0] EXT4-fs (loop5): initial error at time 1777759573: ext4_validate_block_bitmap:441 [ 500.200205][ C0] EXT4-fs (loop5): last error at time 1777759573: ext4_validate_block_bitmap:441 [ 500.206796][T27918] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 500.216090][ T28] audit: type=1326 audit(1777759572.699:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27923 comm="syz.0.8127" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff69eadcdd9 code=0x7ffc0000 [ 500.269310][T27918] loop5: lost filesystem error report for type 5 error -117 [ 500.271264][T27918] EXT4-fs (loop5): 1 orphan inode deleted [ 500.298774][T27918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 500.353892][T25422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.931481][T27964] xfrm0 speed is unknown, defaulting to 1000 [ 500.976865][T27964] lo speed is unknown, defaulting to 1000 [ 501.017361][T27964] wg1 speed is unknown, defaulting to 1000 [ 501.631886][T27999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8154'. [ 501.808359][T28009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8158'. [ 502.645958][T28001] xfrm0 speed is unknown, defaulting to 1000 [ 502.649704][T28017] netlink: 'syz.9.8161': attribute type 29 has an invalid length. [ 502.727079][T28001] lo speed is unknown, defaulting to 1000 [ 502.806499][T28001] wg1 speed is unknown, defaulting to 1000 [ 503.189558][T28052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8174'. [ 503.231489][T27945] syz.3.8131 (27945) used greatest stack depth: 6968 bytes left [ 503.961132][T28064] netlink: 'syz.5.8180': attribute type 1 has an invalid length. [ 504.097047][T28082] loop5: detected capacity change from 0 to 512 [ 504.108832][T28082] EXT4-fs (loop5): 1 truncate cleaned up [ 504.117716][T28082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.141737][T28082] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.5.8185: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 504.181963][T25422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.333162][T28097] loop5: detected capacity change from 0 to 512 [ 504.388111][T28097] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 504.397904][T28097] System zones: 0-2, 18-18, 34-34 [ 504.430864][T28097] EXT4-fs (loop5): 1 orphan inode deleted [ 504.448929][T11055] __quota_error: 50 callbacks suppressed [ 504.448947][T11055] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 504.480417][T11055] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:37: Failed to release dquot type 1 [ 504.500125][T28097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.517587][T11055] loop5: lost filesystem error report for type 5 error -117 [ 504.517865][T11055] EXT4-fs (loop5): Remounting filesystem read-only [ 504.520236][T28097] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.569291][T25422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.041440][T28140] loop5: detected capacity change from 0 to 512 [ 505.060527][T28140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 505.096046][T28140] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 505.132126][T28140] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.8201: invalid indirect mapped block 2683928664 (level 1) [ 505.163755][T28140] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 505.166171][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 505.181782][ C0] EXT4-fs (loop5): initial error at time 1777759578: ext4_free_branches:1023: inode 11 [ 505.191454][ C0] EXT4-fs (loop5): last error at time 1777759578: ext4_free_branches:1023: inode 11 [ 505.202249][T28140] EXT4-fs (loop5): Remounting filesystem read-only [ 505.210810][T28140] EXT4-fs (loop5): 1 truncate cleaned up [ 505.245226][T28140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.375523][T25422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.416310][T28204] loop5: detected capacity change from 0 to 256 [ 506.513598][ T28] audit: type=1400 audit(1777759579.429:3671): avc: denied { write } for pid=28203 comm="syz.5.8226" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 506.575075][T28208] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 506.624125][T28208] FAT-fs (loop5): Filesystem has been set read-only [ 506.741603][T28204] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 506.781094][T28204] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 506.841845][T28204] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 506.869482][T28204] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 507.797590][T25422] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 196) [ 508.580902][T28260] all: renamed from bridge_slave_1 (while UP) [ 508.664816][T28270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8249'. [ 508.701885][T28270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8249'. [ 508.722621][T28276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8249'. [ 508.756789][T28270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8249'. [ 508.778981][T28276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8249'. [ 508.842729][T28276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8249'. [ 508.932899][T28294] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8257'. [ 508.946881][T28294] unsupported nlmsg_type 40 [ 509.223897][T28312] netlink: 'syz.5.8263': attribute type 1 has an invalid length. [ 509.239205][T28312] 8021q: adding VLAN 0 to HW filter on device bond4 [ 509.260048][T28312] vlan3: entered allmulticast mode [ 509.265237][T28312] bond4: entered allmulticast mode [ 509.285665][T28312] bond4: (slave geneve2): making interface the new active one [ 509.299088][T28312] geneve2: entered allmulticast mode [ 509.311665][T28312] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 509.380651][ T28] audit: type=1326 audit(1777759582.299:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28324 comm="syz.3.8268" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bd349cdd9 code=0x0 [ 509.453190][T28330] loop5: detected capacity change from 0 to 512 [ 509.464163][T28330] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 509.490299][T28330] [EXT4 FS bs=1024, gc=1, bpg=2304, ipg=32, mo=a843c018, mo2=0100] [ 509.500524][T28330] System zones: 2-12, 7-7 [ 509.508284][T28330] EXT4-fs (loop5): orphan cleanup on readonly fs [ 509.559697][T28330] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.8270: Block bitmap for bg 0 marked uninitialized [ 509.573883][T28330] loop5: lost filesystem error report for type 5 error -117 [ 509.574100][T28330] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 509.581467][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 509.581490][ C0] EXT4-fs (loop5): initial error at time 1777759582: ext4_read_block_bitmap_nowait:517 [ 509.581519][ C0] EXT4-fs (loop5): last error at time 1777759582: ext4_read_block_bitmap_nowait:517 [ 509.622901][T28330] loop5: lost filesystem error report for type 5 error -117 [ 509.623216][T28330] EXT4-fs (loop5): 1 orphan inode deleted [ 509.636980][T28330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 509.653230][T28330] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 509.662924][T28330] [EXT4 FS bs=1024, gc=1, bpg=2304, ipg=32, mo=a843c018, mo2=0100] [ 509.671101][T28330] EXT4-fs error (device loop5): __ext4_remount:6837: comm syz.5.8270: Abort forced by user [ 509.681829][T28330] EXT4-fs (loop5): Remounting filesystem read-only [ 509.691086][T28330] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 509.774238][T25422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.339656][T28370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8284'. [ 510.524752][T28379] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.8288'. [ 510.708820][T28390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8294'. [ 510.902705][T28409] netlink: 'syz.3.8297': attribute type 10 has an invalid length. [ 510.954649][T28409] team0 (unregistering): Port device netdevsim2 removed [ 511.032891][T28417] netlink: 'syz.3.8304': attribute type 1 has an invalid length. [ 511.064790][T28417] 8021q: adding VLAN 0 to HW filter on device bond13 [ 511.510399][ T28] audit: type=1326 audit(1777759584.429:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28455 comm="syz.9.8318" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7fc00000 [ 511.564507][ T28] audit: type=1326 audit(1777759584.429:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28455 comm="syz.9.8318" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f55d71ecdd9 code=0x7fc00000 [ 512.320612][T28497] xfrm0 speed is unknown, defaulting to 1000 [ 512.359845][T28504] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 512.383605][T28497] lo speed is unknown, defaulting to 1000 [ 512.447758][T28497] wg1 speed is unknown, defaulting to 1000 [ 512.941944][T28527] bond9: (slave batadv0): Releasing active interface [ 513.192984][T28537] loop5: detected capacity change from 0 to 512 [ 513.222535][T28537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.238414][T28537] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.252165][ T28] audit: type=1400 audit(1777759586.169:3675): avc: denied { write } for pid=28536 comm="syz.5.8349" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 513.287109][T25422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.514304][T28554] loop5: detected capacity change from 0 to 1024 [ 513.561774][T28554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.586445][ T28] audit: type=1400 audit(1777759586.509:3676): avc: denied { write } for pid=28553 comm="syz.5.8356" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 513.622193][T25422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.720737][T28562] __nla_validate_parse: 7 callbacks suppressed [ 513.720817][T28562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8358'. [ 513.741718][T28562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8358'. [ 514.212837][T28589] loop5: detected capacity change from 0 to 512 [ 514.238719][T28589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.256359][T28589] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 514.269551][T28589] Quota error (device loop5): do_check_range: Getting block 134217728 out of range 0-5 [ 514.271704][ T28] audit: type=1400 audit(1777759587.189:3677): avc: denied { write } for pid=28588 comm="syz.5.8366" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 514.322978][T25422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.018675][T28628] xfrm0 speed is unknown, defaulting to 1000 [ 515.170460][T28628] lo speed is unknown, defaulting to 1000 [ 515.292533][T28628] wg1 speed is unknown, defaulting to 1000 [ 515.579217][T28636] loop5: detected capacity change from 0 to 8192 [ 516.940471][T28723] netlink: 172 bytes leftover after parsing attributes in process `syz.5.8416'. [ 516.967397][T28723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8416'. [ 516.991847][T28723] netlink: 172 bytes leftover after parsing attributes in process `syz.5.8416'. [ 517.024691][T28723] netlink: 100 bytes leftover after parsing attributes in process `syz.5.8416'. [ 517.066558][T28723] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8416'. [ 517.590968][T28753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8427'. [ 517.630126][T28753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8427'. [ 517.666571][T28753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8427'. [ 518.888672][T28826] __nla_validate_parse: 23 callbacks suppressed [ 518.888739][T28826] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8455'. [ 518.927925][T28828] IPVS: Scheduler module ip_vs_ not found [ 519.913552][T28858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8464'. [ 520.640307][T28887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8472'. [ 520.661199][T28887] bond6: (slave batadv0): Releasing active interface [ 521.086838][T28906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8478'. [ 522.631345][ T28] audit: type=1326 audit(1777759595.549:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.2.8500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c798cdd9 code=0x7ffc0000 [ 522.667139][ T28] audit: type=1326 audit(1777759595.549:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.2.8500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c798cdd9 code=0x7ffc0000 [ 522.693459][ T28] audit: type=1326 audit(1777759595.549:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.2.8500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c798cdd9 code=0x7ffc0000 [ 522.720130][ T28] audit: type=1326 audit(1777759595.549:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.2.8500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c798cdd9 code=0x7ffc0000 [ 522.747235][ T28] audit: type=1326 audit(1777759595.549:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.2.8500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f40c798cdd9 code=0x7ffc0000 [ 522.773261][ T28] audit: type=1326 audit(1777759595.549:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.2.8500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f40c798cb42 code=0x7ffc0000 [ 522.799244][ T28] audit: type=1326 audit(1777759595.549:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.2.8500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f40c798cb42 code=0x7ffc0000 [ 522.834013][ T28] audit: type=1326 audit(1777759595.549:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.2.8500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c798cdd9 code=0x7ffc0000 [ 522.861738][ T28] audit: type=1326 audit(1777759595.549:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.2.8500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c798cdd9 code=0x7ffc0000 [ 522.889495][ T28] audit: type=1326 audit(1777759595.549:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28964 comm="syz.2.8500" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c798cdd9 code=0x7ffc0000 [ 522.949779][T28970] xfrm0 speed is unknown, defaulting to 1000 [ 523.073984][T28970] lo speed is unknown, defaulting to 1000 [ 523.180102][T28970] wg1 speed is unknown, defaulting to 1000 [ 523.656099][T29011] netlink: 'syz.0.8516': attribute type 1 has an invalid length. [ 523.691800][T29020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8519'. [ 523.701246][T29011] 8021q: adding VLAN 0 to HW filter on device bond17 [ 523.712891][T29011] bond16: (slave bond17): making interface the new active one [ 523.725949][T29011] bond16: (slave bond17): Enslaving as an active interface with an up link [ 523.735139][T29020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.742613][T29020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.750468][T29020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.758033][T29020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.780040][T29027] bond16: (slave gretap4): Enslaving as a backup interface with an up link [ 523.819131][T29011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8516'. [ 523.829073][T29011] 8021q: adding VLAN 0 to HW filter on device bond16 [ 524.049968][T29057] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8534'. [ 524.062396][T29057] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8534'. [ 524.116507][T29064] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8538'. [ 524.135844][T29064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.147336][T29064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.158628][T29064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.166487][T29055] loop5: detected capacity change from 0 to 512 [ 524.174668][T29064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.191707][T29055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 524.242020][T29055] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 524.270597][T29055] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.8533: invalid indirect mapped block 2683928664 (level 1) [ 524.289514][T29055] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 524.290597][T29055] EXT4-fs (loop5): Remounting filesystem read-only [ 524.300230][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 524.300309][ C0] EXT4-fs (loop5): initial error at time 1777759597: ext4_free_branches:1023: inode 11 [ 524.300669][ C0] EXT4-fs (loop5): last error at time 1777759597: ext4_free_branches:1023: inode 11 [ 524.342005][T29055] EXT4-fs (loop5): 1 truncate cleaned up [ 524.356531][T29055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.423185][T25422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.415131][T29114] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8558'. [ 525.823685][T29142] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 525.925625][T29152] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8575'. [ 526.033972][T11084] Bluetooth: hci0: Frame reassembly failed (-84) [ 526.162866][T29168] ref_ctr increment failed for inode: 0x6cb offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811315a880 [ 526.292999][T29179] xfrm0 speed is unknown, defaulting to 1000 [ 526.389862][T29188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8587'. [ 526.408692][T29188] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8587'. [ 526.425668][T29179] lo speed is unknown, defaulting to 1000 [ 526.589422][T29179] wg1 speed is unknown, defaulting to 1000 [ 527.207988][T29208] 8021q: VLANs not supported on ip6tnl0 [ 528.056195][T29158] Bluetooth: hci0: command 0x1003 tx timeout [ 528.062234][ T7589] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 528.141538][T29223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.149609][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 528.149623][ T28] audit: type=1400 audit(1777759601.069:3717): avc: denied { setopt } for pid=29218 comm="syz.9.8602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 528.166326][T29223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.490841][T29231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8606'. [ 529.428098][T29257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8615'. [ 529.494395][T29257] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8615'. [ 529.622427][T29275] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8624'. [ 530.175693][T29301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8634'. [ 530.556919][T29329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8642'. [ 530.574415][T29329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.589510][T29329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.597421][T29329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.604928][T29329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.699661][ T28] audit: type=1326 audit(1777759604.620:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29348 comm="syz.0.8652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69eadcdd9 code=0x7ffc0000 [ 530.740006][ T28] audit: type=1326 audit(1777759604.650:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29348 comm="syz.0.8652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69eadcdd9 code=0x7ffc0000 [ 530.769771][ T28] audit: type=1326 audit(1777759604.650:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29348 comm="syz.0.8652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7ff69eadcdd9 code=0x7ffc0000 [ 530.806896][ T28] audit: type=1326 audit(1777759604.650:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29348 comm="syz.0.8652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69eadcdd9 code=0x7ffc0000 [ 530.832838][ T28] audit: type=1326 audit(1777759604.650:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29348 comm="syz.0.8652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69eadcdd9 code=0x7ffc0000 [ 530.859660][ T28] audit: type=1326 audit(1777759604.650:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29348 comm="syz.0.8652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff69eadcdd9 code=0x7ffc0000 [ 530.885527][ T28] audit: type=1326 audit(1777759604.650:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29348 comm="syz.0.8652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69eadcdd9 code=0x7ffc0000 [ 530.956338][ T28] audit: type=1326 audit(1777759604.650:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29348 comm="syz.0.8652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff69eadcdd9 code=0x7ffc0000 [ 531.006362][ T28] audit: type=1326 audit(1777759604.650:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29348 comm="syz.0.8652" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff69eadcdd9 code=0x7ffc0000 [ 531.662732][T29392] netlink: 'syz.0.8668': attribute type 1 has an invalid length. [ 531.704847][T29392] 8021q: adding VLAN 0 to HW filter on device bond18 [ 531.748591][T29402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8672'. [ 531.748615][T29392] bond18: entered promiscuous mode [ 531.761438][T29402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8672'. [ 531.803222][T29392] bond18: (slave dummy0): making interface the new active one [ 531.819666][T29392] dummy0: entered promiscuous mode [ 531.826607][T29392] bond18: (slave dummy0): Enslaving as an active interface with an up link [ 531.848618][T29392] bond18 (unregistering): left promiscuous mode [ 531.860320][T29392] dummy0: left promiscuous mode [ 531.866422][T29392] bond18 (unregistering): (slave dummy0): Releasing active interface [ 531.881519][T29392] bond18 (unregistering): Released all slaves [ 532.132417][T29419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8687'. [ 533.262306][T29463] 9pnet: p9_errstr2errno: server reported unknown error 0000000000 [ 533.287205][ T28] kauditd_printk_skb: 3447 callbacks suppressed [ 533.287221][ T28] audit: type=1400 audit(1777759607.210:7174): avc: denied { ioctl } for pid=29468 comm="syz.3.8693" path="socket:[101925]" dev="sockfs" ino=101925 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 533.441194][ T28] audit: type=1400 audit(1777759607.360:7175): avc: denied { getopt } for pid=29468 comm="syz.3.8693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 533.479378][T29484] xt_hashlimit: size too large, truncated to 1048576 [ 533.834709][T29517] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8707'. [ 534.211731][ T28] audit: type=1326 audit(1777759608.130:7176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29523 comm="syz.3.8709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd349cdd9 code=0x7ffc0000 [ 534.237722][ T28] audit: type=1326 audit(1777759608.130:7177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29523 comm="syz.3.8709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd349cdd9 code=0x7ffc0000 [ 534.265145][ T28] audit: type=1326 audit(1777759608.130:7178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29523 comm="syz.3.8709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd349cdd9 code=0x7ffc0000 [ 534.296261][ T28] audit: type=1326 audit(1777759608.130:7179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29523 comm="syz.3.8709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd349cdd9 code=0x7ffc0000 [ 534.302218][T29526] netlink: 'syz.9.8710': attribute type 12 has an invalid length. [ 534.322490][ T28] audit: type=1326 audit(1777759608.160:7180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29523 comm="syz.3.8709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4bd349cdd9 code=0x7ffc0000 [ 534.356190][ T28] audit: type=1326 audit(1777759608.160:7181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29523 comm="syz.3.8709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd349cdd9 code=0x7ffc0000 [ 534.391047][ T28] audit: type=1326 audit(1777759608.160:7182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29523 comm="syz.3.8709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd349cdd9 code=0x7ffc0000 [ 534.417139][ T28] audit: type=1326 audit(1777759608.160:7183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29523 comm="syz.3.8709" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd349cdd9 code=0x7ffc0000 [ 534.445875][T29528] 9pnet_fd: p9_fd_create_tcp (29528): problem connecting socket to 127.0.0.1 [ 534.643199][T29539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.676629][T29539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.875610][T29544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8719'. [ 534.999104][T29564] netlink: 'syz.0.8727': attribute type 8 has an invalid length. [ 535.020221][T29560] 9pnet: p9_errstr2errno: server reported unknown error 0000000000 [ 535.161149][T29587] netlink: 'syz.9.8737': attribute type 1 has an invalid length. [ 535.196579][T29587] 8021q: adding VLAN 0 to HW filter on device bond5 [ 535.291803][T29587] bond5: (slave geneve2): making interface the new active one [ 535.315536][T29587] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 535.365363][T29597] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8741'. [ 535.476506][T29597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8741'. [ 535.717699][T29612] ref_ctr increment failed for inode: 0x7f8 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881042bca40 [ 535.904006][T29629] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8750'. [ 536.227933][T29643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8756'. [ 536.279002][T29643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8756'. [ 536.575000][T29648] netlink: 'syz.5.8759': attribute type 4 has an invalid length. [ 536.633523][T29649] netlink: 'syz.5.8759': attribute type 4 has an invalid length. [ 537.181627][T29657] netlink: 'syz.9.8760': attribute type 8 has an invalid length. [ 537.327142][ T5641] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 537.340440][T29656] bridge0: port 3(syz_tun) entered blocking state [ 537.348314][T29656] bridge0: port 3(syz_tun) entered disabled state [ 537.355838][T29656] syz_tun: entered allmulticast mode [ 537.367188][T29656] syz_tun: entered promiscuous mode [ 537.409272][T29668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8765'. [ 537.482306][T29678] syz_tun: entered allmulticast mode [ 538.254466][T29707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8779'. [ 538.263799][T29707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8779'. [ 538.301500][ T5641] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 538.307555][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 538.307614][ T28] audit: type=1400 audit(1777759612.220:7229): avc: denied { write } for pid=29709 comm="syz.2.8780" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 538.515863][T29722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8786'. [ 538.599168][T29730] bond18: entered allmulticast mode [ 538.614800][T29730] bridge12: entered promiscuous mode [ 538.620677][T29730] bridge12: entered allmulticast mode [ 538.629021][T29730] bond18: (slave bridge12): Enslaving as an active interface with an up link [ 538.853170][T29756] tipc: Enabling of bearer rejected, failed to enable media [ 538.897913][ T28] audit: type=1400 audit(1777759612.820:7230): avc: denied { remount } for pid=29759 comm="syz.3.8802" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 539.991863][T29792] __nla_validate_parse: 2 callbacks suppressed [ 539.991976][T29792] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8815'. [ 540.526050][T29816] futex_wake_op: syz.2.8821 tries to shift op by 144; fix this program [ 541.249202][T29848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8833'. [ 541.276236][T29848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8833'. [ 541.602751][T11059] bond0: (slave bond_slave_0): interface is now down [ 541.623258][T11059] bond0: (slave bond_slave_1): interface is now down [ 542.550037][ T28] audit: type=1400 audit(1777759616.470:7231): avc: denied { create } for pid=29903 comm="syz.3.8857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 542.649611][ T28] audit: type=1400 audit(1777759616.570:7232): avc: denied { connect } for pid=29907 comm="syz.2.8858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 543.078801][T29920] xfrm0 speed is unknown, defaulting to 1000 [ 543.236023][T29920] lo speed is unknown, defaulting to 1000 [ 543.285531][T29918] SELinux: failed to load policy [ 543.349402][T29920] wg1 speed is unknown, defaulting to 1000 [ 543.483533][T29939] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8867'. [ 543.511486][ T28] audit: type=1326 audit(1777759617.430:7233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29919 comm="syz.9.8862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x0 [ 543.682560][T29949] loop5: detected capacity change from 0 to 512 [ 543.690939][T29949] EXT4-fs: test_dummy_encryption option not supported [ 543.772778][T29948] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 543.799407][ T28] audit: type=1400 audit(1777759617.720:7234): avc: denied { ioctl } for pid=29954 comm="syz.5.8874" path="socket:[104108]" dev="sockfs" ino=104108 ioctlcmd=0x6e81 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 543.830873][T29955] netlink: 'syz.5.8874': attribute type 27 has an invalid length. [ 543.881568][T29960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8875'. [ 543.907672][T29960] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29960 comm=syz.3.8875 [ 543.981571][T29964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8879'. [ 543.987202][T29966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8878'. [ 544.997427][T29994] xfrm0 speed is unknown, defaulting to 1000 [ 545.145685][T29994] lo speed is unknown, defaulting to 1000 [ 545.256039][T29994] wg1 speed is unknown, defaulting to 1000 [ 545.439144][ T28] audit: type=1326 audit(1777759619.360:7235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29993 comm="syz.3.8892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bd349cdd9 code=0x0 [ 545.655669][T30023] 9pnet_fd: p9_fd_create_tcp (30023): problem connecting socket to 127.0.0.1 [ 546.707038][T30050] loop5: detected capacity change from 0 to 128 [ 546.738877][T30050] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 546.753696][T30050] FAT-fs (loop5): Filesystem has been set read-only [ 546.767135][T30050] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 546.786286][T30050] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 546.797624][T30050] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 546.812354][T30050] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 546.826270][T30050] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 546.835947][ T28] audit: type=1326 audit(1777759620.750:7236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30058 comm="syz.9.8914" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7fc00000 [ 546.841018][T30050] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 546.897581][ T28] audit: type=1326 audit(1777759620.750:7237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30058 comm="syz.9.8914" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f55d71ecdd9 code=0x7fc00000 [ 546.927538][T30050] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 546.946656][T30050] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 546.966990][T30067] tipc: Failed to remove unknown binding: 66,0,0/0:764527021/764527023 [ 546.977419][T30049] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 546.997929][T30067] tipc: Failed to remove unknown binding: 66,0,0/0:764527021/764527022 [ 547.024898][T30072] tipc: Failed to remove unknown binding: 66,0,0/0:764527021/764527023 [ 547.058326][T30072] tipc: Failed to remove unknown binding: 66,0,0/0:764527021/764527022 [ 547.212629][T30078] netlink: 763 bytes leftover after parsing attributes in process `syz.2.8921'. [ 547.811231][T30107] futex_wake_op: syz.9.8933 tries to shift op by 144; fix this program [ 547.854047][T30112] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8934'. [ 547.913998][T30112] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30112 comm=syz.9.8934 [ 548.090405][ T5905] IPVS: starting estimator thread 0... [ 548.216441][T30127] IPVS: using max 2304 ests per chain, 115200 per kthread [ 548.465885][T30146] team0 (unregistering): Port device team_slave_0 removed [ 548.493914][T30146] team0 (unregistering): Port device team_slave_1 removed [ 548.997017][T30156] futex_wake_op: syz.0.8945 tries to shift op by 144; fix this program [ 549.956980][T30182] netlink: 'syz.5.8957': attribute type 16 has an invalid length. [ 549.981754][T30179] syzkaller0: entered promiscuous mode [ 549.991126][T30179] syzkaller0: entered allmulticast mode [ 550.009700][ T28] audit: type=1326 audit(1777759623.930:7238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30183 comm="syz.9.8958" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 550.048096][ T28] audit: type=1326 audit(1777759623.930:7239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30183 comm="syz.9.8958" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 550.086067][ T28] audit: type=1326 audit(1777759623.930:7240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30183 comm="syz.9.8958" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 550.112625][ T28] audit: type=1326 audit(1777759623.930:7242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30183 comm="syz.9.8958" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 550.140934][ T28] audit: type=1326 audit(1777759623.930:7241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30183 comm="syz.9.8958" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 550.179870][ T28] audit: type=1326 audit(1777759623.930:7243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30183 comm="syz.9.8958" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 550.205632][ T28] audit: type=1326 audit(1777759623.930:7245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30183 comm="syz.9.8958" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 550.219359][T30188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8952'. [ 550.262699][ T28] audit: type=1326 audit(1777759623.930:7244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30183 comm="syz.9.8958" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 550.298099][ T28] audit: type=1326 audit(1777759623.930:7246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30183 comm="syz.9.8958" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 550.340631][ T28] audit: type=1326 audit(1777759623.930:7247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30183 comm="syz.9.8958" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 550.875450][T11059] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.888716][T11059] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.945324][T11059] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.974222][T11059] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.004403][T11059] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.031427][T11059] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.057046][T11059] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.082279][T11059] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.302973][T30272] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.8984'. [ 555.328801][T30301] xfrm0 speed is unknown, defaulting to 1000 [ 555.343295][T30304] futex_wake_op: syz.5.8993 tries to shift op by 144; fix this program [ 555.602013][T30309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8996'. [ 555.671532][T30301] lo speed is unknown, defaulting to 1000 [ 555.916409][T30320] xfrm0 speed is unknown, defaulting to 1000 [ 555.945863][T30301] wg1 speed is unknown, defaulting to 1000 [ 556.041424][T30320] lo speed is unknown, defaulting to 1000 [ 556.111651][T30320] wg1 speed is unknown, defaulting to 1000 [ 556.402537][T30340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9008'. [ 556.447165][T30342] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 556.483038][T30342] bridge6: entered promiscuous mode [ 556.518370][T30344] netlink: 276 bytes leftover after parsing attributes in process `syz.2.9010'. [ 556.536722][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 556.557860][T30344] netlink: 276 bytes leftover after parsing attributes in process `syz.2.9010'. [ 557.142344][T30368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9019'. [ 557.181831][T30370] netlink: 'syz.0.9022': attribute type 21 has an invalid length. [ 557.190735][T30370] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9022'. [ 557.989830][T30380] netlink: 'syz.0.9035': attribute type 10 has an invalid length. [ 558.031025][T30380] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 558.044179][T30380] team0: Failed to send options change via netlink (err -105) [ 558.066925][T30380] team0: Port device dummy0 added [ 558.070918][T30385] netlink: 'syz.0.9035': attribute type 10 has an invalid length. [ 558.094338][T30385] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 558.094938][T30386] futex_wake_op: syz.3.9025 tries to shift op by 144; fix this program [ 558.121088][T30385] team0: Failed to send options change via netlink (err -105) [ 558.157506][T30385] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 558.176633][T30385] team0: Port device dummy0 removed [ 558.193690][T30385] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 558.295807][T30389] tipc: Failed to remove unknown binding: 66,1,1/0:80489334/80489336 [ 558.303972][T30389] tipc: Failed to remove unknown binding: 66,1,1/0:80489334/80489336 [ 558.336559][T30395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9031'. [ 558.383035][T30395] team1: entered promiscuous mode [ 558.404120][T30395] team1: entered allmulticast mode [ 558.414530][T30395] 8021q: adding VLAN 0 to HW filter on device team1 [ 558.427481][T30400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9031'. [ 558.451609][T30400] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 558.477491][T30400] team2: entered promiscuous mode [ 558.497386][T30400] team2: entered allmulticast mode [ 558.512366][T30400] 8021q: adding VLAN 0 to HW filter on device team2 [ 558.760453][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 558.760469][ T28] audit: type=1400 audit(1777759888.689:7288): avc: denied { cmd } for pid=30430 comm="syz.2.9048" path="/438/file0" dev="tmpfs" ino=2274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 559.256093][T30474] netlink: 'syz.0.9059': attribute type 39 has an invalid length. [ 560.116307][T30500] netlink: 'syz.3.9068': attribute type 11 has an invalid length. [ 560.128684][T30502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30502 comm=syz.0.9079 [ 560.141333][T30502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30502 comm=syz.0.9079 [ 560.153967][T30502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30502 comm=syz.0.9079 [ 560.167155][T30502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30502 comm=syz.0.9079 [ 560.179680][T30502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30502 comm=syz.0.9079 [ 560.192237][T30502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30502 comm=syz.0.9079 [ 560.205576][T30502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30502 comm=syz.0.9079 [ 560.218196][T30502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30502 comm=syz.0.9079 [ 560.231619][T30502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30502 comm=syz.0.9079 [ 560.244434][T30502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30502 comm=syz.0.9079 [ 560.259670][T30507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9070'. [ 560.339894][T30505] loop5: detected capacity change from 0 to 8192 [ 560.479483][T30523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.488728][T30523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.530323][T30555] loop5: detected capacity change from 0 to 512 [ 561.742544][T30555] syz.5.9091: attempt to access beyond end of device [ 561.742544][T30555] loop5: rw=2049, sector=4440, nr_sectors = 2880 limit=512 [ 561.761191][T30555] syz.5.9091: attempt to access beyond end of device [ 561.761191][T30555] loop5: rw=2049, sector=7320, nr_sectors = 2056 limit=512 [ 561.778905][T30555] syz.5.9091: attempt to access beyond end of device [ 561.778905][T30555] loop5: rw=2049, sector=9376, nr_sectors = 1648 limit=512 [ 561.794227][T30555] syz.5.9091: attempt to access beyond end of device [ 561.794227][T30555] loop5: rw=2049, sector=11056, nr_sectors = 8 limit=512 [ 561.911955][T30568] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 561.962240][T30575] lo: Caught tx_queue_len zero misconfig [ 562.562228][T30608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9114'. [ 562.718313][T30624] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 562.929624][T30633] netlink: 'syz.0.9123': attribute type 16 has an invalid length. [ 562.969426][T30637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9125'. [ 562.981933][T30637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9125'. [ 563.441402][T30633] veth0_macvtap: left allmulticast mode [ 563.592251][ T28] audit: type=1400 audit(1777759893.527:7289): avc: denied { connect } for pid=30659 comm="syz.3.9132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 564.031993][T30200] xfrm0 speed is unknown, defaulting to 1000 [ 564.032004][T11084] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.047913][T30200] syz0: Port: 1 Link DOWN [ 564.071492][T11084] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 564.091854][T11084] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.115102][T30200] xfrm0 speed is unknown, defaulting to 1000 [ 564.123996][T30668] syzkaller0: entered promiscuous mode [ 564.136494][T30668] syzkaller0: entered allmulticast mode [ 564.152198][T11084] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.170794][T11084] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 564.189547][T11084] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.201219][T11084] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.221606][T11084] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 564.237886][T11084] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.259002][T11084] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.274621][ T28] audit: type=1400 audit(1777759894.207:7290): avc: denied { create } for pid=30683 comm="syz.0.9141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 564.295799][T11084] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 564.308362][T11084] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 564.328456][T30676] xfrm0 speed is unknown, defaulting to 1000 [ 564.388696][T30676] lo speed is unknown, defaulting to 1000 [ 564.434915][T30676] wg1 speed is unknown, defaulting to 1000 [ 565.567365][T30692] syzkaller0: entered promiscuous mode [ 565.573166][T30692] syzkaller0: entered allmulticast mode [ 565.581583][T11084] syzkaller0: tun_net_xmit 70 [ 565.590486][T30692] syzkaller0: tun_net_xmit 14 [ 566.521835][T30702] xfrm0 speed is unknown, defaulting to 1000 [ 566.559820][T30702] lo speed is unknown, defaulting to 1000 [ 566.600051][T30702] wg1 speed is unknown, defaulting to 1000 [ 567.227298][T30712] netlink: 'syz.2.9149': attribute type 16 has an invalid length. [ 567.460944][T11059] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.480576][T11059] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.501871][T11059] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.523358][T11059] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.542086][T11059] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.568485][T11059] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.585380][T11059] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.605795][T11059] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.647440][T30726] xfrm0 speed is unknown, defaulting to 1000 [ 567.683574][T30733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9158'. [ 567.742977][T30726] lo speed is unknown, defaulting to 1000 [ 567.854531][T30726] wg1 speed is unknown, defaulting to 1000 [ 568.193932][T30757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9169'. [ 568.251978][T30757] selinux_netlink_send: 70 callbacks suppressed [ 568.251998][T30757] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30757 comm=syz.2.9169 [ 568.351691][T30763] netlink: 'syz.9.9170': attribute type 16 has an invalid length. [ 568.541725][T30763] bridge0: port 3(syz_tun) entered disabled state [ 571.786488][T30797] netlink: 'syz.2.9184': attribute type 9 has an invalid length. [ 571.897223][ T3906] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.914024][ T3906] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.932467][ T3906] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.948387][ T3906] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.163332][T30819] x_tables: duplicate underflow at hook 2 [ 572.262685][ T28] audit: type=1400 audit(1777759902.199:7291): avc: denied { getopt } for pid=30823 comm="syz.9.9195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 572.707962][T30857] tipc: Failed to remove unknown binding: 66,0,0/0:1404239276/1404239278 [ 572.716678][T30857] tipc: Failed to remove unknown binding: 66,0,0/0:1404239276/1404239277 [ 572.725746][T30857] tipc: Failed to remove unknown binding: 66,0,0/0:1404239276/1404239278 [ 572.734315][T30857] tipc: Failed to remove unknown binding: 66,0,0/0:1404239276/1404239277 [ 573.245312][T30889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9219'. [ 573.262720][T30889] bond19: entered promiscuous mode [ 573.268357][T30889] 8021q: adding VLAN 0 to HW filter on device bond19 [ 573.407660][T30900] gre0 speed is unknown, defaulting to 1000 [ 573.415378][T30900] gre0 speed is unknown, defaulting to 1000 [ 573.422301][T30900] gre0 speed is unknown, defaulting to 1000 [ 573.481681][T30901] sit0: left promiscuous mode [ 573.500372][T30900] infiniband syz1: set active [ 573.505325][T30900] infiniband syz1: added gre0 [ 573.510840][T30901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.528511][T30900] RDS/IB: syz1: added [ 573.532667][T30900] smc: adding ib device syz1 with port count 1 [ 573.539001][T30900] smc: ib device syz1 port 1 has no pnetid [ 573.547011][T30901] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.575150][T30901] veth0_to_team: left promiscuous mode [ 573.588380][T30901] veth1_macvtap: left promiscuous mode [ 573.594698][T30901] veth0_macvtap: left promiscuous mode [ 573.600965][T30901] veth0_macvtap: entered promiscuous mode [ 573.606788][T30901] veth0_macvtap: entered allmulticast mode [ 573.614130][T30901] veth1_macvtap: entered promiscuous mode [ 573.621854][T30911] netlink: 'syz.2.9226': attribute type 4 has an invalid length. [ 573.623076][T30901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 573.639181][T30901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 573.674577][T30901] 8021q: adding VLAN 0 to HW filter on device bond3 [ 573.675399][T30912] netlink: 'syz.2.9226': attribute type 4 has an invalid length. [ 573.690755][T30901] 8021q: adding VLAN 0 to HW filter on device bond4 [ 573.701753][T30901] 8021q: adding VLAN 0 to HW filter on device bond5 [ 573.714521][T30901] 8021q: adding VLAN 0 to HW filter on device bond6 [ 573.725058][T30901] 8021q: adding VLAN 0 to HW filter on device bond7 [ 573.755714][T30901] veth0_to_team: entered promiscuous mode [ 573.766010][T30901] 8021q: adding VLAN 0 to HW filter on device bond8 [ 573.776148][T30901] 8021q: adding VLAN 0 to HW filter on device bond10 [ 573.809981][T30901] 8021q: adding VLAN 0 to HW filter on device bond9 [ 573.819302][T30901] 8021q: adding VLAN 0 to HW filter on device bond11 [ 573.830213][T30901] netdevsim netdevsim0 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 573.840275][T30901] 8021q: adding VLAN 0 to HW filter on device eth0 [ 573.848125][T30901] netdevsim netdevsim0 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 573.858719][T30901] 8021q: adding VLAN 0 to HW filter on device eth1 [ 573.866486][T30901] netdevsim netdevsim0 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 573.876399][T30901] 8021q: adding VLAN 0 to HW filter on device eth2 [ 573.884673][T30901] netdevsim netdevsim0 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 573.894698][T30901] 8021q: adding VLAN 0 to HW filter on device eth3 [ 573.903099][T30901] ip6gre3: left promiscuous mode [ 573.910382][T30901] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 573.923745][T30901] 8021q: adding VLAN 0 to HW filter on device bond12 [ 573.936509][T30901] bond13: left promiscuous mode [ 573.941901][T30901] sit5: left promiscuous mode [ 573.961439][T30901] 8021q: adding VLAN 0 to HW filter on device bond13 [ 573.971018][T30901] 8021q: adding VLAN 0 to HW filter on device bond14 [ 573.980441][T30901] 8021q: adding VLAN 0 to HW filter on device bond15 [ 573.992905][T30901] 8021q: adding VLAN 0 to HW filter on device bond16 [ 574.001081][T30901] 8021q: adding VLAN 0 to HW filter on device bond17 [ 574.012039][T30901] 8021q: adding VLAN 0 to HW filter on device bond18 [ 574.020266][T30901] bridge12: left promiscuous mode [ 574.026442][T30901] team1: left promiscuous mode [ 574.031940][T30901] 8021q: adding VLAN 0 to HW filter on device team1 [ 574.040403][T30901] team2: left promiscuous mode [ 574.045310][T30901] 8021q: adding VLAN 0 to HW filter on device team2 [ 574.053194][T30901] bond19: left promiscuous mode [ 574.058886][ T5641] gre0 speed is unknown, defaulting to 1000 [ 574.067448][ T3906] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.074581][ T3906] bridge0: port 1(bridge_slave_0) entered listening state [ 574.082262][ T5641] syz1: Port: 1 Link ACTIVE [ 574.088698][ T3906] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.093225][ T3414] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 574.095799][ T3906] bridge0: port 2(bridge_slave_1) entered listening state [ 574.138345][T30213] xfrm0 speed is unknown, defaulting to 1000 [ 574.140055][ T1670] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.144516][T30213] syz0: Port: 1 Link ACTIVE [ 574.153454][ T1670] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.165364][ T1670] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 574.173758][ T1670] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.181966][ T1670] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.190370][ T1670] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 574.201650][ T23] gre0 speed is unknown, defaulting to 1000 [ 574.207646][T30775] xfrm0 speed is unknown, defaulting to 1000 [ 574.210701][T11084] bond9: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 574.222421][T11084] bond9: (slave veth13): making interface the new active one [ 574.231072][T11084] bond9: active interface up! [ 574.235900][ T1670] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.246667][ T1670] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.259105][ T1670] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 574.267851][ T1670] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.276452][ T1670] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.284807][ T1670] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 574.293341][T30900] gre0 speed is unknown, defaulting to 1000 [ 574.309356][T11055] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 574.340278][T30900] gre0 speed is unknown, defaulting to 1000 [ 574.381446][T30900] gre0 speed is unknown, defaulting to 1000 [ 574.422479][T30900] gre0 speed is unknown, defaulting to 1000 [ 574.455625][T30926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9231'. [ 574.462785][T30900] gre0 speed is unknown, defaulting to 1000 [ 574.475973][T30926] bond5: entered promiscuous mode [ 574.482178][T30926] 8021q: adding VLAN 0 to HW filter on device bond5 [ 574.501222][T30926] 8021q: adding VLAN 0 to HW filter on device bond5 [ 574.508342][T30926] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 574.519861][T30926] bond5: (slave sit1): Error -95 calling set_mac_address [ 574.528927][T30900] gre0 speed is unknown, defaulting to 1000 [ 574.559685][T30900] gre0 speed is unknown, defaulting to 1000 [ 574.598664][T30900] gre0 speed is unknown, defaulting to 1000 [ 574.645818][T30900] gre0 speed is unknown, defaulting to 1000 [ 574.686166][T30900] gre0 speed is unknown, defaulting to 1000 [ 574.924848][ T5898] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 574.973041][T30950] netlink: 'syz.3.9240': attribute type 1 has an invalid length. [ 574.997314][T30950] 8021q: adding VLAN 0 to HW filter on device bond14 [ 575.033507][T30950] macvlan4: entered promiscuous mode [ 575.039634][T30950] macvlan4: entered allmulticast mode [ 575.046447][T30950] bond14: entered promiscuous mode [ 575.052004][T30950] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 575.062599][T30950] bond14: left promiscuous mode [ 575.321125][T11084] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 575.340495][T11084] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 575.890255][T30965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9254'. [ 575.900423][T30968] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9244'. [ 575.936005][T30968] bond6: entered promiscuous mode [ 575.945217][T30968] 8021q: adding VLAN 0 to HW filter on device bond6 [ 575.987865][T30965] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30965 comm=syz.0.9254 [ 576.009314][T30968] 8021q: adding VLAN 0 to HW filter on device bond6 [ 576.032401][T30968] bond6: (slave sit2): The slave device specified does not support setting the MAC address [ 576.051818][T30968] bond6: (slave sit2): Error -95 calling set_mac_address [ 576.127311][ T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 576.952011][T30975] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9247'. [ 576.971545][T30980] netlink: 'syz.3.9245': attribute type 16 has an invalid length. [ 576.976950][T30975] loop5: detected capacity change from 0 to 512 [ 576.996323][ T28] audit: type=1400 audit(1777759906.929:7292): avc: denied { mounton } for pid=30972 comm="syz.5.9247" path="/307/file0" dev="tmpfs" ino=1616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 577.027419][T30975] EXT4-fs (loop5): bad s_min_extra_isize: 2304 [ 577.033894][T30980] bridge0: left promiscuous mode [ 577.085189][T30987] tipc: Failed to remove unknown binding: 66,0,0/0:2488492933/2488492934 [ 577.103678][T30987] tipc: Failed to remove unknown binding: 66,0,0/0:2488492933/2488492934 [ 577.210618][ T28] audit: type=1326 audit(1777759907.139:7293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.9.9256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 577.272051][ T28] audit: type=1326 audit(1777759907.139:7294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.9.9256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 577.330476][ T28] audit: type=1326 audit(1777759907.169:7295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.9.9256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 577.403090][ T28] audit: type=1326 audit(1777759907.169:7296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.9.9256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 577.460179][ T28] audit: type=1326 audit(1777759907.169:7297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.9.9256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 577.512513][ T28] audit: type=1326 audit(1777759907.179:7298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.9.9256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 577.539220][ T28] audit: type=1326 audit(1777759907.179:7299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.9.9256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 577.566328][ T28] audit: type=1326 audit(1777759907.179:7300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.9.9256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 577.593300][ T28] audit: type=1326 audit(1777759907.179:7301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.9.9256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 577.621825][ T28] audit: type=1326 audit(1777759907.179:7302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.9.9256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 577.667468][ T28] audit: type=1326 audit(1777759907.179:7303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30995 comm="syz.9.9256" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55d71ecdd9 code=0x7ffc0000 [ 578.061658][T31019] netlink: 'syz.3.9266': attribute type 16 has an invalid length. [ 579.000603][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 579.127496][T31046] xfrm0 speed is unknown, defaulting to 1000 [ 579.888385][T31046] lo speed is unknown, defaulting to 1000 [ 579.926039][T31046] wg1 speed is unknown, defaulting to 1000 [ 579.932440][T31046] gre0 speed is unknown, defaulting to 1000 [ 580.038251][T31077] ªªªªª6: renamed from wg2 (while UP) [ 580.140375][T31085] netlink: 'syz.0.9286': attribute type 1 has an invalid length. [ 580.182099][T31085] 8021q: adding VLAN 0 to HW filter on device bond20 [ 582.025958][T31137] netlink: 132 bytes leftover after parsing attributes in process `syz.9.9301'. [ 582.465782][T31169] loop5: detected capacity change from 0 to 128 [ 582.589431][T31169] netlink: 'syz.5.9313': attribute type 21 has an invalid length. [ 582.624961][T31169] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9313'. [ 582.840399][T31185] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 582.840399][T31185] The task syz.9.9317 (31185) triggered the difference, watch for misbehavior. [ 583.429535][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 583.429602][ T28] audit: type=1400 audit(1777759913.359:7310): avc: denied { getopt } for pid=31205 comm="syz.5.9325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 583.608102][T31212] netlink: 'syz.9.9326': attribute type 21 has an invalid length. [ 583.617348][T31212] netlink: 132 bytes leftover after parsing attributes in process `syz.9.9326'. [ 583.679306][T31219] netlink: 276 bytes leftover after parsing attributes in process `syz.9.9330'. [ 583.715439][T31219] netlink: 276 bytes leftover after parsing attributes in process `syz.9.9330'. [ 583.730095][T31225] loop5: detected capacity change from 0 to 2048 [ 583.936677][T31243] loop5: detected capacity change from 0 to 764 [ 584.045000][T31248] netlink: 'syz.2.9342': attribute type 21 has an invalid length. [ 584.053400][T31248] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9342'. [ 584.174230][T31259] netlink: 276 bytes leftover after parsing attributes in process `syz.5.9346'. [ 584.192932][T31259] netlink: 276 bytes leftover after parsing attributes in process `syz.5.9346'. [ 584.436466][T31264] netlink: 'syz.9.9349': attribute type 39 has an invalid length. [ 584.450073][T31264] syz_tun (unregistering): left allmulticast mode [ 584.461736][T31264] syz_tun (unregistering): left promiscuous mode [ 584.469300][T31264] bridge0: port 3(syz_tun) entered disabled state [ 584.647671][T31263] xfrm0 speed is unknown, defaulting to 1000 [ 585.413884][T31263] lo speed is unknown, defaulting to 1000 [ 585.501812][T31263] wg1 speed is unknown, defaulting to 1000 [ 585.515654][T31263] gre0 speed is unknown, defaulting to 1000 [ 585.625846][T31288] futex_wake_op: syz.3.9355 tries to shift op by 144; fix this program [ 585.642478][T31294] ªªªªª6: renamed from wg2 [ 585.785063][T31300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9358'. [ 585.898469][T31308] netlink: 'syz.3.9360': attribute type 1 has an invalid length. [ 585.964621][T31308] 8021q: adding VLAN 0 to HW filter on device bond15 [ 585.969544][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 585.997700][T31313] bond15: entered allmulticast mode [ 586.118330][T31308] bond15: (slave ip6gretap1): making interface the new active one [ 586.162329][T31308] ip6gretap1: entered allmulticast mode [ 586.347471][T31308] bond15: (slave ip6gretap1): Enslaving as an active interface with an up link [ 586.689789][T31322] bridge13: the hash_elasticity option has been deprecated and is always 16 [ 586.699782][T31322] bridge13: entered promiscuous mode [ 586.943885][T31339] ªªªªª6: renamed from wg2 [ 587.044223][T31347] loop5: detected capacity change from 0 to 128 [ 587.068791][T31347] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 587.092188][T31349] netlink: 'syz.2.9374': attribute type 39 has an invalid length. [ 587.115838][T31335] xfrm0 speed is unknown, defaulting to 1000 [ 588.030087][T31335] lo speed is unknown, defaulting to 1000 [ 588.084545][T31335] wg1 speed is unknown, defaulting to 1000 [ 588.091343][T31335] gre0 speed is unknown, defaulting to 1000 [ 588.839026][T31386] ªªªªª6: renamed from wg2 [ 589.136260][T31403] netlink: 'syz.2.9390': attribute type 4 has an invalid length. [ 589.149764][T31403] netlink: 'syz.2.9390': attribute type 4 has an invalid length. [ 589.169642][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 589.176786][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 589.258835][T31416] netlink: 'syz.3.9397': attribute type 1 has an invalid length. [ 589.286135][T31416] bond16: entered promiscuous mode [ 589.293329][T31416] 8021q: adding VLAN 0 to HW filter on device bond16 [ 589.407957][ T28] audit: type=1400 audit(1777759919.339:7311): avc: denied { write } for pid=31415 comm="syz.3.9397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 589.428984][T31416] bond16: (slave bridge7): making interface the new active one [ 589.459721][T31416] bridge7: entered promiscuous mode [ 589.912058][T31416] bridge7: left promiscuous mode [ 590.991290][T31458] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 591.003816][T31458] bridge4: entered promiscuous mode [ 591.141052][T31466] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9410'. [ 591.617446][T31484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9415'. [ 592.766313][T31500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9430'. [ 592.874185][T31500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9430'. [ 592.989933][T31509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9424'. [ 593.092005][T31525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9429'. [ 593.198102][T31528] futex_wake_op: syz.9.9433 tries to shift op by 144; fix this program [ 594.719420][T31556] netlink: 'syz.0.9438': attribute type 1 has an invalid length. [ 594.720381][T31557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9439'. [ 594.757648][T31556] bond21: entered promiscuous mode [ 594.768835][T31556] 8021q: adding VLAN 0 to HW filter on device bond21 [ 594.827450][T31556] bond21: (slave bridge14): making interface the new active one [ 594.854012][T31556] bridge14: entered promiscuous mode [ 594.883977][T31556] bridge14: left promiscuous mode [ 594.895676][T31557] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31557 comm=syz.3.9439 [ 595.227032][T31585] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 595.272674][T31589] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9452'. [ 595.307943][T31585] bridge6: entered promiscuous mode [ 595.379892][T31593] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31593 comm=syz.5.9452 [ 595.615552][T31597] netlink: 'syz.9.9454': attribute type 1 has an invalid length. [ 595.764738][T31597] bond7: entered promiscuous mode [ 595.770775][T31597] 8021q: adding VLAN 0 to HW filter on device bond7 [ 595.806262][T31597] bond7: (slave bridge7): making interface the new active one [ 595.821811][T31597] bridge7: entered promiscuous mode [ 595.837561][T31597] bridge7: left promiscuous mode [ 596.875850][T31640] loop5: detected capacity change from 0 to 256 [ 597.837493][T31684] xfrm0 speed is unknown, defaulting to 1000 [ 597.976873][T31684] lo speed is unknown, defaulting to 1000 [ 598.045472][T31692] xfrm0 speed is unknown, defaulting to 1000 [ 598.139171][T31684] wg1 speed is unknown, defaulting to 1000 [ 598.151853][T31684] gre0 speed is unknown, defaulting to 1000 [ 598.191009][T31692] lo speed is unknown, defaulting to 1000 [ 598.681777][T31692] wg1 speed is unknown, defaulting to 1000 [ 598.766790][T31692] gre0 speed is unknown, defaulting to 1000 [ 598.933718][T31704] netlink: 'syz.0.9490': attribute type 11 has an invalid length. [ 599.145699][T31718] futex_wake_op: syz.2.9497 tries to shift op by 144; fix this program [ 599.348988][T31728] xfrm0 speed is unknown, defaulting to 1000 [ 599.540267][T31728] lo speed is unknown, defaulting to 1000 [ 599.684814][T31728] wg1 speed is unknown, defaulting to 1000 [ 599.715644][T31728] gre0 speed is unknown, defaulting to 1000 [ 599.866462][T31739] siw: device registration error -23 [ 600.039430][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 600.052777][T31762] netlink: 'syz.9.9509': attribute type 27 has an invalid length. [ 600.092694][T31762] sit1: left allmulticast mode [ 600.118292][T31762] veth3: left promiscuous mode [ 600.134699][T31762] bridge6: left promiscuous mode [ 600.157837][T31762] bond7: left promiscuous mode [ 600.231369][T31763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.260647][T31763] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.344833][T31776] loop5: detected capacity change from 0 to 512 [ 600.358528][T31763] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 600.375818][T31763] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 600.386495][T31776] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.9513: inode has both inline data and extents flags [ 600.393976][T31763] veth1_vlan: left promiscuous mode [ 600.406416][T31763] veth0_vlan: left promiscuous mode [ 600.412263][T31763] veth0_vlan: entered promiscuous mode [ 600.416393][T31776] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 600.419321][T31776] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.9513: couldn't read orphan inode 15 (err -117) [ 600.419409][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 600.420812][T31763] veth1_vlan: entered promiscuous mode [ 600.428586][ C1] EXT4-fs (loop5): initial error at time 1777759930: ext4_orphan_get:1397 [ 600.443921][T31763] veth1_macvtap: left promiscuous mode [ 600.446801][ C1] : inode 15 [ 600.452878][T31763] veth0_macvtap: left promiscuous mode [ 600.460744][ C1] [ 600.460753][ C1] EXT4-fs (loop5): last error at time 1777759930: ext4_orphan_get:1397 [ 600.467099][T31763] veth0_macvtap: entered promiscuous mode [ 600.469415][ C1] : inode 15 [ 600.476149][T31763] veth1_macvtap: entered promiscuous mode [ 600.477184][ C1] [ 600.506385][T31763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 600.514937][T31763] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 600.523330][T31763] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 600.532151][T31763] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 600.535670][T31776] loop5: lost filesystem error report for type 5 error -117 [ 600.542370][T31763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 600.544169][T31776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.570773][T31763] 8021q: adding VLAN 0 to HW filter on device bond2 [ 600.590935][ T28] audit: type=1400 audit(1777759930.529:7312): avc: denied { write } for pid=31775 comm="syz.5.9513" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 600.591480][T31763] 8021q: adding VLAN 0 to HW filter on device bond3 [ 600.623765][T31763] 8021q: adding VLAN 0 to HW filter on device bond4 [ 600.635077][T31763] 8021q: adding VLAN 0 to HW filter on device bond5 [ 600.674733][ T28] audit: type=1400 audit(1777759930.609:7313): avc: denied { write } for pid=31775 comm="syz.5.9513" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 600.709152][T31763] 8021q: adding VLAN 0 to HW filter on device bond6 [ 600.718949][T31763] 8021q: adding VLAN 0 to HW filter on device bond7 [ 600.739318][T11056] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.746458][T11056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.761184][ T28] audit: type=1400 audit(1777759930.699:7314): avc: denied { write } for pid=31775 comm="syz.5.9513" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 600.769450][T31788] loop5: detected capacity change from 512 to 64 [ 600.790619][T31790] syz.5.9513: attempt to access beyond end of device [ 600.790619][T31790] loop5: rw=14337, sector=72, nr_sectors = 2 limit=64 [ 600.797089][T11056] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.804578][T31776] syz.5.9513: attempt to access beyond end of device [ 600.804578][T31776] loop5: rw=14337, sector=74, nr_sectors = 2 limit=64 [ 600.811170][T11056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.844507][T31790] Buffer I/O error on dev loop5, logical block 36, lost sync page write [ 600.845262][T31776] Buffer I/O error on dev loop5, logical block 37, lost sync page write [ 600.880954][T31790] EXT4-fs error (device loop5): ext4_handle_dirty_dirblock:409: inode #2: block 36: comm syz.5.9513: IO error syncing itable block [ 600.895138][T31776] EXT4-fs error (device loop5): ext4_free_data:978: inode #18: block 37: comm syz.5.9513: IO error syncing itable block [ 600.896718][T31795] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9518'. [ 600.914555][T11084] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.924964][T31790] EXT4-fs error (device loop5) in add_dirent_to_buf:2155: IO failure [ 600.926642][T11084] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.938328][T31790] EXT4-fs error (device loop5): ext4_check_bdev_write_error:227: comm syz.5.9513: Error while async write back metadata [ 600.951259][T31776] syz.5.9513: attempt to access beyond end of device [ 600.951259][T31776] loop5: rw=14337, sector=74, nr_sectors = 2 limit=64 [ 600.958183][T11084] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.978413][T11084] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.998035][T11084] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.017932][T11084] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.042553][T11084] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.059615][T11084] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.080603][T31776] Buffer I/O error on dev loop5, logical block 37, lost sync page write [ 601.089776][T11084] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 601.110653][T31776] EXT4-fs error (device loop5): ext4_splice_branch:472: inode #18: block 37: comm syz.5.9513: IO error syncing itable block [ 601.139001][T31776] EXT4-fs error (device loop5): ext4_check_bdev_write_error:227: comm syz.5.9513: Error while async write back metadata [ 601.153219][T31776] syz.5.9513: attempt to access beyond end of device [ 601.153219][T31776] loop5: rw=2051, sector=138, nr_sectors = 2 limit=64 [ 601.166970][T31776] EXT4-fs (loop5): discard request in group:0 block:68 count:1 failed with -5 [ 601.176324][T31776] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: IO failure [ 601.185557][T31776] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 18: block 69:freeing already freed block (bit 68); block bitmap corrupt. [ 601.200232][T31776] EXT4-fs (loop5): pa ffff8881084f05b0: logic 76, phys. 69, len 20 [ 601.208185][T31776] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5459: group 0, free 20, pa_free 19 [ 601.222011][T31776] syz.5.9513: attempt to access beyond end of device [ 601.222011][T31776] loop5: rw=14337, sector=74, nr_sectors = 2 limit=64 [ 601.235730][T31776] Buffer I/O error on dev loop5, logical block 37, lost sync page write [ 601.245437][T31776] EXT4-fs error (device loop5): ext4_free_data:978: inode #18: block 37: comm syz.5.9513: IO error syncing itable block [ 601.259256][T31776] syz.5.9513: attempt to access beyond end of device [ 601.259256][T31776] loop5: rw=2049, sector=82, nr_sectors = 8 limit=64 [ 601.273582][T31776] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 41) [ 601.285115][T31776] buffer_io_error: 35 callbacks suppressed [ 601.285131][T31776] Buffer I/O error on device loop5, logical block 41 [ 601.297625][T31776] Buffer I/O error on device loop5, logical block 42 [ 601.304362][T31776] Buffer I/O error on device loop5, logical block 43 [ 601.311146][T31776] Buffer I/O error on device loop5, logical block 44 [ 601.319165][T31776] syz.5.9513: attempt to access beyond end of device [ 601.319165][T31776] loop5: rw=2049, sector=98, nr_sectors = 8 limit=64 [ 601.335882][T31776] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 49) [ 601.347800][T31776] Buffer I/O error on device loop5, logical block 49 [ 601.354541][T31776] Buffer I/O error on device loop5, logical block 50 [ 601.361222][T31776] Buffer I/O error on device loop5, logical block 51 [ 601.367896][T31776] Buffer I/O error on device loop5, logical block 52 [ 601.375639][T31776] syz.5.9513: attempt to access beyond end of device [ 601.375639][T31776] loop5: rw=2049, sector=114, nr_sectors = 8 limit=64 [ 601.389170][T31776] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 57) [ 601.401330][T31776] Buffer I/O error on device loop5, logical block 57 [ 601.408036][T31776] Buffer I/O error on device loop5, logical block 58 [ 601.415613][T31776] syz.5.9513: attempt to access beyond end of device [ 601.415613][T31776] loop5: rw=2049, sector=130, nr_sectors = 8 limit=64 [ 601.430376][T31776] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 65) [ 601.444734][T31776] syz.5.9513: attempt to access beyond end of device [ 601.444734][T31776] loop5: rw=2049, sector=90, nr_sectors = 8 limit=64 [ 601.458551][T31776] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 45) [ 601.470495][T31776] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53) [ 601.482044][T31776] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 61) [ 601.493301][T31776] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 125) [ 601.539789][T31776] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 161) [ 601.560468][T31776] EXT4-fs warning (device loop5): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 201) [ 601.587149][T25422] Buffer I/O error on dev loop5, logical block 36, lost sync page write [ 601.596187][ T28] audit: type=1400 audit(1777759931.519:7315): avc: denied { write } for pid=25422 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 601.667611][T29085] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.702560][T29085] syz_tun (unregistering): left allmulticast mode [ 601.992207][T11064] bridge_slave_1: left allmulticast mode [ 601.998472][T11064] bridge_slave_1: left promiscuous mode [ 602.005565][T11064] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.016993][T11064] bridge_slave_0: left allmulticast mode [ 602.023902][T11064] bridge_slave_0: left promiscuous mode [ 602.030402][T11064] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.071230][T11064] bond4 (unregistering): (slave geneve2): Releasing active interface [ 602.084572][T11064] geneve2 (unregistering): left allmulticast mode [ 602.230304][T31845] futex_wake_op: syz.0.9537 tries to shift op by 144; fix this program [ 602.253787][T11064] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 602.261995][T11064] bridge3 (unregistering): left promiscuous mode [ 602.386939][T11064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.400116][T11064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.420820][T11064] bond0 (unregistering): Released all slaves [ 602.442424][T11064] bond1 (unregistering): Released all slaves [ 602.466869][T11064] bond2 (unregistering): Released all slaves [ 602.489272][T11064] bond3 (unregistering): Released all slaves [ 602.516626][T11064] bond4 (unregistering): Released all slaves [ 602.569309][T31814] xfrm0 speed is unknown, defaulting to 1000 [ 602.720540][T31814] lo speed is unknown, defaulting to 1000 [ 602.758339][ T28] audit: type=1400 audit(1777759932.689:7316): avc: denied { write } for pid=31857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 602.851205][ T28] audit: type=1400 audit(1777759932.749:7317): avc: denied { write } for pid=31868 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 602.855835][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 602.941941][T31814] wg1 speed is unknown, defaulting to 1000 [ 602.952148][T31814] gre0 speed is unknown, defaulting to 1000 [ 603.214187][T11064] hsr_slave_0: left promiscuous mode [ 603.285658][T11064] hsr_slave_1: left promiscuous mode [ 603.346872][ T28] audit: type=1400 audit(1777759933.279:7318): avc: denied { write } for pid=31871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 603.374089][T11064] team0 (unregistering): Port device team_slave_1 removed [ 603.384909][T11064] team0 (unregistering): Port device team_slave_0 removed [ 603.411930][ T28] audit: type=1400 audit(1777759933.349:7319): avc: denied { write } for pid=31888 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 603.485191][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 603.634193][T11064] IPVS: stop unused estimator thread 0... [ 603.664241][T31814] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.678792][ T28] audit: type=1400 audit(1777759933.609:7320): avc: denied { write } for pid=31899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 603.682118][T31814] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.713495][T31814] bridge_slave_0: entered allmulticast mode [ 603.723334][T31814] bridge_slave_0: entered promiscuous mode [ 603.735702][ T28] audit: type=1400 audit(1777759933.669:7321): avc: denied { write } for pid=31910 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 603.759020][T31814] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.766213][T31814] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.776199][T31814] bridge_slave_1: entered allmulticast mode [ 603.783072][T31814] bridge_slave_1: entered promiscuous mode [ 603.801480][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 603.821662][T31814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.836796][T31814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.882223][T31814] team0: Port device team_slave_0 added [ 603.895708][T31814] team0: Port device team_slave_1 added [ 603.961928][T31814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.969273][T31814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.996261][T31814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.020767][T31814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.027800][T31814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.068026][T31814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.108626][T31814] hsr_slave_0: entered promiscuous mode [ 604.118124][T31814] hsr_slave_1: entered promiscuous mode [ 604.247088][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 604.447305][T31814] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 604.462193][T31814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 604.482763][T31814] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 604.510747][T31814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 604.519438][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.526680][ C1] bridge0: topology change detected, propagating [ 604.528979][T31814] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 604.533110][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.533129][ C1] bridge0: topology change detected, propagating [ 604.601425][T31814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 604.639522][T31814] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 604.660613][T31814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 604.774573][T31814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.803069][T31814] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.817135][ T1670] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.824299][ T1670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.866138][ T1670] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.873248][ T1670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.902791][T31814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 605.153480][T31814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.385534][T31814] veth0_vlan: entered promiscuous mode [ 605.396453][T31814] veth1_vlan: entered promiscuous mode [ 605.429063][T31814] veth0_macvtap: entered promiscuous mode [ 605.449832][T31814] veth1_macvtap: entered promiscuous mode [ 605.461858][T32041] netlink: 'syz.2.9549': attribute type 11 has an invalid length. [ 605.482257][T31814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.510207][T31814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.531643][T11055] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.559186][T11055] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.594534][T11055] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.614423][T11055] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.624875][T32047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9551'. [ 605.671236][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 605.671252][ T28] audit: type=1400 audit(1777759935.609:7334): avc: denied { write } for pid=32049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 605.744587][ T28] audit: type=1400 audit(1777759935.629:7335): avc: denied { write } for pid=32066 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.033001][ T28] audit: type=1400 audit(1777759935.969:7336): avc: denied { write } for pid=32072 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.379005][ T28] audit: type=1400 audit(1777759936.309:7337): avc: denied { write } for pid=32088 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.637156][ T28] audit: type=1400 audit(1777759936.569:7338): avc: denied { write } for pid=32091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.674609][ T28] audit: type=1400 audit(1777759936.609:7339): avc: denied { write } for pid=32106 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.825540][ T28] audit: type=1400 audit(1777759936.759:7340): avc: denied { write } for pid=32108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 606.868203][T32118] xfrm0 speed is unknown, defaulting to 1000 [ 606.899318][ T28] audit: type=1400 audit(1777759936.829:7341): avc: denied { write } for pid=32136 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.015107][T32148] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9566'. [ 607.025484][T32118] lo speed is unknown, defaulting to 1000 [ 607.050395][T32148] 8021q: adding VLAN 0 to HW filter on device bond8 [ 607.121881][ T28] audit: type=1400 audit(1777759937.059:7342): avc: denied { write } for pid=32145 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.185135][T32148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.198134][T32148] bond8: (slave batadv0): Enslaving as an active interface with an up link [ 607.211969][T32118] wg1 speed is unknown, defaulting to 1000 [ 607.222785][T32118] gre0 speed is unknown, defaulting to 1000 [ 607.232226][ T28] audit: type=1400 audit(1777759937.169:7343): avc: denied { write } for pid=32162 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.717880][T32207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9575'. [ 608.809108][T32207] bond6: entered promiscuous mode [ 608.820820][T32207] 8021q: adding VLAN 0 to HW filter on device bond6 [ 609.168674][T32207] 8021q: adding VLAN 0 to HW filter on device bond6 [ 609.195699][T32207] bond6: (slave sit1): The slave device specified does not support setting the MAC address [ 609.239291][T32207] bond6: (slave sit1): Error -95 calling set_mac_address [ 610.404981][T32275] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9597'. [ 610.428247][T32275] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32275 comm=syz.8.9597 [ 610.542243][T32291] netlink: 'syz.3.9604': attribute type 27 has an invalid length. [ 610.561371][T32291] sit0: left promiscuous mode [ 610.566157][T32291] sit0: left allmulticast mode [ 610.572362][T32291] bridge_slave_1: left allmulticast mode [ 610.580488][T32291] wireguard0: left promiscuous mode [ 610.585743][T32291] wireguard0: left allmulticast mode [ 610.591656][T32291] ip6gre1: left promiscuous mode [ 610.597134][T32291] ip6gre1: left allmulticast mode [ 610.605019][T32291] bond4: left promiscuous mode [ 610.611151][T32291] bond4: left allmulticast mode [ 610.616896][T32291] sit4: left promiscuous mode [ 610.622850][T32291] hsr1: left promiscuous mode [ 610.627750][T32291] macvlan2: left promiscuous mode [ 610.633930][T32291] bond10: left promiscuous mode [ 610.638865][T32291] bond10: left allmulticast mode [ 610.645021][T32291] bridge6: left promiscuous mode [ 610.650435][T32291] bond15: left allmulticast mode [ 610.655537][T32291] ip6gretap1: left allmulticast mode [ 610.670828][T32291] bond16: left promiscuous mode [ 610.723227][T32293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.748713][T32293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 610.759882][T32293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 610.773422][T32293] veth1_vlan: left promiscuous mode [ 610.779892][T32293] veth0_vlan: left promiscuous mode [ 610.786522][T32293] veth0_vlan: entered promiscuous mode [ 610.794707][T32293] veth1_vlan: entered promiscuous mode [ 610.805817][T32293] geneve1: left promiscuous mode [ 610.812714][T32293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 610.821184][T32293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 610.829857][T32293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 610.838599][T32293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 610.854319][T32293] 8021q: adding VLAN 0 to HW filter on device bond1 [ 610.886479][T32293] 8021q: adding VLAN 0 to HW filter on device bond2 [ 610.897963][T32293] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 610.914397][T30775] lo speed is unknown, defaulting to 1000 [ 610.932324][T30775] lyz2: Port: 1 Link ACTIVE [ 610.961906][T11056] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.971187][ T23] wg1 speed is unknown, defaulting to 1000 [ 610.977114][T11056] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.986406][ T23] syz2: Port: 1 Link ACTIVE [ 610.992492][T11056] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.001648][T11056] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.018796][T11056] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.028426][T11056] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.037518][T30213] lo speed is unknown, defaulting to 1000 [ 611.046253][T11056] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.055365][T11056] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.086794][T11055] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 611.096747][T11055] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 611.104629][ T3414] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 611.124765][ T3414] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 611.209675][ T3414] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 611.629637][ T3414] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 611.800351][T11051] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 612.121616][ T3414] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 612.848588][T11055] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 612.856834][T11055] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 613.620119][T32376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 613.627563][T32376] IPv6: NLM_F_CREATE should be set when creating new route [ 615.007111][T32421] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 615.044355][T32433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9655'. [ 616.864867][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 616.864882][ T28] audit: type=1400 audit(1777759946.799:7349): avc: denied { write } for pid=32470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 616.924589][ T28] audit: type=1400 audit(1777759946.849:7350): avc: denied { write } for pid=32483 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 616.999428][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 616.999449][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 617.140343][T32489] netlink: 'syz.8.9672': attribute type 4 has an invalid length. [ 617.168095][T32489] netlink: 'syz.8.9672': attribute type 4 has an invalid length. [ 617.383652][T32505] tipc: Failed to remove unknown binding: 66,2,2/0:1587838919/1587838923 [ 617.418100][ T28] audit: type=1400 audit(1777759947.349:7351): avc: denied { connect } for pid=32491 comm="syz.3.9674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 617.527741][T32520] syzkaller1: entered promiscuous mode [ 617.549442][T32520] syzkaller1: entered allmulticast mode [ 617.690234][T32526] netlink: 'syz.9.9688': attribute type 10 has an invalid length. [ 617.698629][T32526] netlink: 16154 bytes leftover after parsing attributes in process `syz.9.9688'. [ 617.766046][T32532] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9691'. [ 617.824436][T32536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9693'. [ 618.509844][T32602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9706'. [ 619.243353][ T28] audit: type=1400 audit(1777759949.179:7352): avc: denied { write } for pid=32639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.320796][ T28] audit: type=1400 audit(1777759949.259:7353): avc: denied { write } for pid=32674 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.462919][T32691] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9712'. [ 619.622943][ T28] audit: type=1400 audit(1777759949.559:7354): avc: denied { write } for pid=32686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.689880][ T28] audit: type=1400 audit(1777759949.629:7355): avc: denied { write } for pid=32704 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.863687][ T28] audit: type=1400 audit(1777759949.799:7356): avc: denied { write } for pid=32707 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.928656][ T28] audit: type=1400 audit(1777759949.849:7357): avc: denied { write } for pid=32721 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.301282][T32730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9719'. [ 620.333731][T32730] 8021q: adding VLAN 0 to HW filter on device bond22 [ 620.355488][T32737] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9723'. [ 620.375412][T32730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.383611][T32730] bond22: (slave batadv0): Enslaving as an active interface with an up link [ 620.411826][T32739] netlink: 'syz.2.9724': attribute type 13 has an invalid length. [ 620.420848][T32730] bond22 (unregistering): (slave batadv0): Releasing backup interface [ 620.441843][T32730] bond22 (unregistering): Released all slaves [ 620.646565][ T28] audit: type=1326 audit(1777759950.579:7358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32757 comm="syz.2.9732" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40c798cdd9 code=0x0 [ 622.867262][ T353] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 622.876941][ T28] audit: type=1400 audit(1777759952.809:7359): avc: denied { relabelto } for pid=352 comm="syz.9.9749" name="616" dev="tmpfs" ino=3192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 622.909704][ T353] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9749'. [ 622.919994][ T28] audit: type=1400 audit(1777759952.839:7360): avc: denied { associate } for pid=352 comm="syz.9.9749" name="616" dev="tmpfs" ino=3192 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 622.964106][ T357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9751'. [ 622.988198][ T28] audit: type=1400 audit(1777759952.919:7361): avc: denied { write } for pid=23304 comm="syz-executor" name="616" dev="tmpfs" ino=3192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 623.019107][ T28] audit: type=1400 audit(1777759952.919:7362): avc: denied { remove_name } for pid=23304 comm="syz-executor" name="binderfs" dev="tmpfs" ino=3196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 623.051677][ T28] audit: type=1400 audit(1777759952.919:7363): avc: denied { write } for pid=23304 comm="syz-executor" name="616" dev="tmpfs" ino=3192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 623.091419][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 623.134924][ T28] audit: type=1400 audit(1777759952.919:7364): avc: denied { write } for pid=23304 comm="syz-executor" name="616" dev="tmpfs" ino=3192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 623.163225][ T28] audit: type=1400 audit(1777759952.919:7365): avc: denied { write } for pid=23304 comm="syz-executor" name="616" dev="tmpfs" ino=3192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 623.190160][ T28] audit: type=1400 audit(1777759952.919:7366): avc: denied { rmdir } for pid=23304 comm="syz-executor" name="616" dev="tmpfs" ino=3192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 623.699682][ T395] tipc: Failed to remove unknown binding: 66,0,0/9:3694401908/3694401909 [ 623.708791][ T395] tipc: Failed to remove unknown binding: 66,0,0/9:3694401908/3694401909 [ 624.175763][ T406] IPVS: persistence engine module ip_vs_pe_€ not found [ 624.527225][ T419] sctp: [Deprecated]: syz.0.9776 (pid 419) Use of int in maxseg socket option. [ 624.527225][ T419] Use struct sctp_assoc_value instead [ 625.639532][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 625.661958][ T373] ================================================================== [ 625.670078][ T373] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 625.677039][ T373] [ 625.679362][ T373] read-write to 0xffff88811876b7e4 of 4 bytes by task 378 on cpu 1: [ 625.687329][ T373] fifo_open+0x59f/0x5d0 [ 625.691576][ T373] do_dentry_open+0x4be/0xa90 [ 625.696246][ T373] vfs_open+0x37/0x1e0 [ 625.700310][ T373] path_openat+0x1b70/0x2050 [ 625.704902][ T373] do_file_open+0x16c/0x290 [ 625.709494][ T373] do_sys_openat2+0x94/0x130 [ 625.714081][ T373] __x64_sys_openat+0xf2/0x120 [ 625.718841][ T373] x64_sys_call+0x1e39/0x3020 [ 625.723521][ T373] do_syscall_64+0x12c/0x3b0 [ 625.728111][ T373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.734003][ T373] [ 625.736352][ T373] read to 0xffff88811876b7e4 of 4 bytes by task 373 on cpu 0: [ 625.743797][ T373] wait_for_partner+0xd5/0x1e0 [ 625.748568][ T373] fifo_open+0x462/0x5d0 [ 625.752814][ T373] do_dentry_open+0x4be/0xa90 [ 625.757484][ T373] vfs_open+0x37/0x1e0 [ 625.761545][ T373] path_openat+0x1b70/0x2050 [ 625.766139][ T373] do_file_open+0x16c/0x290 [ 625.770646][ T373] do_sys_openat2+0x94/0x130 [ 625.775230][ T373] __se_sys_openat2+0x193/0x1f0 [ 625.780078][ T373] __x64_sys_openat2+0x55/0x70 [ 625.784838][ T373] x64_sys_call+0x2170/0x3020 [ 625.789518][ T373] do_syscall_64+0x12c/0x3b0 [ 625.794106][ T373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.799994][ T373] [ 625.802307][ T373] value changed: 0x00000001 -> 0x00000002 [ 625.808010][ T373] [ 625.810323][ T373] Reported by Kernel Concurrency Sanitizer on: [ 625.816464][ T373] CPU: 0 UID: 0 PID: 373 Comm: syz.9.9757 Tainted: G W syzkaller #0 PREEMPT(full) [ 625.827227][ T373] Tainted: [W]=WARN [ 625.831014][ T373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 625.841064][ T373] ================================================================== [ 628.849688][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!