last executing test programs: 11m2.544420177s ago: executing program 32 (id=1074): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000000040)=@l2={0x1f, 0x3, @any, 0x525b, 0x1}, 0x80, 0x0}, 0x4000811) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 10m45.799147274s ago: executing program 33 (id=1507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0xfff1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x9, 0x2005, 0x9, 0x1, 0xffffffff, 0x2}}, {0x4}}]}, @qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 10m44.129460537s ago: executing program 34 (id=1548): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0xb}, 0x1c) sendto$inet6(r0, &(0x7f0000000840), 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) shutdown(r0, 0x1) 10m27.021012424s ago: executing program 35 (id=1924): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa0}, {@in=@multicast1, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40, 0x70}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) 10m21.106113344s ago: executing program 36 (id=2027): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0xa) 10m17.530903668s ago: executing program 37 (id=2086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 10m7.294106876s ago: executing program 38 (id=2300): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@dioread_nolock}]}, 0x2, 0x54a, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) ioctl$FIBMAP(r1, 0x1, &(0x7f00000001c0)=0x8) 9m38.765916938s ago: executing program 39 (id=2920): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_io_uring_setup(0x4504, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0x0, 0x2b7, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) readv(r2, &(0x7f0000007680)=[{&(0x7f0000006180)=""/153, 0x99}], 0x1) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 9m0.011762089s ago: executing program 40 (id=3828): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2012, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x2) 8m45.704785107s ago: executing program 41 (id=4190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0xe, 0x5, 0x1, 0xd, 0x5, 0x9, 0x4, 0xa, 0x3, 0xd, 0x8, 0x7, 0xe, 0xa, 0x3, 0xe], 0x1, [0x200, 0xfff7, 0x7, 0xc66, 0x3, 0x1ff, 0x9, 0x2, 0x6, 0x1, 0xe8, 0xc, 0xa, 0xfffe, 0x2, 0x9], [0xc00, 0x5, 0xfff, 0x5, 0xfffb, 0x6, 0x4, 0x7, 0xbce, 0x6, 0x2, 0x2, 0x6, 0x101, 0x29d0, 0x2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 7m51.178226082s ago: executing program 42 (id=5520): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01ff270000000800020007"], 0x2c}}, 0x20048010) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) 7m47.287944196s ago: executing program 43 (id=5587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000110001"], 0x80}}, 0x20000084) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) close(r0) 7m24.936634242s ago: executing program 44 (id=6098): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4081}, 0x20044095) 7m8.427735319s ago: executing program 45 (id=6366): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4607030709040000000000000003003e00f9ffffffd80100000000000040000000000000008b00000000000000080000000600380004"], 0x120) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 6m55.564451061s ago: executing program 46 (id=6553): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000017080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98f0ff0000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m26.84930149s ago: executing program 47 (id=6824): r0 = socket$inet6(0xa, 0x80802, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x90, 0x0, 0x0) 5m5.954185449s ago: executing program 48 (id=8772): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x2a}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x772}, 0x18000, 0x0, 0x0, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x5ff, 0x0, 0x95ec}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 5m4.789792156s ago: executing program 49 (id=8787): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 5m0.119051165s ago: executing program 50 (id=8833): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 3m58.147467109s ago: executing program 51 (id=9684): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937f5523", "4705a7b6113b967d73ffff201eb2babf", "18d25a06"}, 0x28) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x8, 0x4) 3m33.540194196s ago: executing program 52 (id=10192): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000010a05d2"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 3m32.617368836s ago: executing program 53 (id=10201): syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4006, r1, 0x0}]) waitid$P_PIDFD(0x3, r0, 0x0, 0x40000004, 0x0) 2m45.032596488s ago: executing program 54 (id=10736): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, 0x3, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) 2m4.115653738s ago: executing program 55 (id=11994): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 1m24.121891018s ago: executing program 56 (id=12767): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m17.002433886s ago: executing program 8 (id=12850): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22102, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000300)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 1m16.410589835s ago: executing program 8 (id=12859): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x2, 0x4, 0x2}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, &(0x7f0000005280)) 1m16.372043416s ago: executing program 8 (id=12860): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010015"], 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x0) 1m16.332289587s ago: executing program 8 (id=12861): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x28f101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) 1m16.316114378s ago: executing program 8 (id=12862): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m16.056810956s ago: executing program 8 (id=12864): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x0, 0x6}, 0x10e028, 0x200, 0xfffffffa, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) gettimeofday(0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) 1m16.029853157s ago: executing program 57 (id=12864): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x0, 0x6}, 0x10e028, 0x200, 0xfffffffa, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) gettimeofday(0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) 1m3.848023446s ago: executing program 9 (id=13077): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000380)=r0}, 0x20) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000200)={0x0}) 1m3.810866038s ago: executing program 9 (id=13080): close(0xffffffffffffffff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) close(0x3) 1m3.73260093s ago: executing program 9 (id=13081): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x81801) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9}}}}}}}, 0x0) 1m3.640008633s ago: executing program 9 (id=13082): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@nolazytime}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@sysvgroups}, {@nodelalloc}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000000)=0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m3.452954499s ago: executing program 9 (id=13088): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$MAP_CREATE(0x0, 0x0, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 1m3.12206652s ago: executing program 9 (id=13097): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x41}}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000580)="ed", 0x1}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x1, 0x2}, 0x10) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000780)=""/206, 0xce}], 0x1, &(0x7f00000002c0)=""/225, 0xe1}, 0x8}], 0x1, 0x0, 0x0) 1m3.083109762s ago: executing program 58 (id=13097): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x41}}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000580)="ed", 0x1}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x1, 0x2}, 0x10) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000780)=""/206, 0xce}], 0x1, &(0x7f00000002c0)=""/225, 0xe1}, 0x8}], 0x1, 0x0, 0x0) 52.717291933s ago: executing program 6 (id=13320): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0xd, 0x14, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0xc18, 0x80000000, 0x7, 0x0, 0x4, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000004c0)='cpu>\t0||\t') r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) 52.644756995s ago: executing program 6 (id=13322): syz_open_dev$tty1(0xc, 0x4, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0xc0}, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x29, 0x37}], 0x10}}], 0x1, 0x24000040) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x11) 52.558354858s ago: executing program 6 (id=13325): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @mcast2, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4000000000003, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 52.530539299s ago: executing program 6 (id=13327): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) 52.49400033s ago: executing program 6 (id=13330): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x55af) fsetxattr$security_capability(r0, &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x5, 0x10}, {0x8, 0xa2a}], 0xee00}, 0x18, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=ANY=[], 0x0, 0x20) 52.086232443s ago: executing program 6 (id=13339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x484, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4, 0x4c0a, 0x7ff, 0x9, 0x5, 0x661f, 0xce4, 0x5, 0xd1, 0x5, 0x2, 0x7, 0x0, 0x0, 0x8001, 0x9098, 0x8, 0xa, 0x0, 0x2, 0x34f, 0x3d7ed312, 0x4, 0x5, 0x5, 0x2, 0x7ff, 0xe7, 0x7, 0x7, 0x8, 0x5, 0xfffff47b, 0x998, 0x5, 0xfffffff7, 0xb, 0x7ff, 0xff, 0x1, 0x8, 0x5, 0x2b2, 0x7, 0x4, 0x6, 0x10, 0x3, 0x121, 0x8, 0x7, 0x8000, 0x80000000, 0x0, 0x4, 0x4000000, 0x200, 0x100, 0x7ff, 0x8, 0x8001, 0x9ef8, 0xfffffffe, 0x6, 0x7ff, 0xd, 0x401, 0x6, 0x8000, 0x13, 0x2, 0x5, 0x9, 0x3, 0xfffffff4, 0x7, 0x4, 0x0, 0x9, 0x5, 0xffffffff, 0x0, 0xffff, 0x9, 0x2e, 0x90000000, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x7, 0x7, 0xfffffffb, 0x1, 0x8, 0x5983, 0x4, 0x0, 0x1, 0xa, 0x2, 0x33b7, 0x5, 0x5, 0xa, 0x3, 0x35, 0x6, 0x0, 0xdf, 0x9, 0x3, 0x5, 0x5, 0x7, 0x3, 0xfffffff7, 0x3ce, 0x7, 0x7, 0x6, 0x10000, 0x6, 0xb, 0x0, 0x7, 0x3, 0x200, 0x5, 0x2f, 0xfffffffb, 0x9c7e, 0x6, 0x0, 0x4, 0x1, 0x6, 0x2, 0x0, 0x95, 0x4, 0x1, 0x4, 0x8, 0x0, 0x5e7c14df, 0x1, 0x4, 0x13c0, 0x3, 0xe, 0xddd3000, 0x40, 0x7, 0x80, 0x8, 0x80000000, 0x3f, 0x3, 0x2, 0xb4a9, 0x400, 0x60f, 0x8, 0x3, 0x3, 0xcba9, 0x7, 0x1, 0x9, 0xa3f0, 0x0, 0x5, 0x4, 0xfffffff8, 0x10001, 0x7, 0x0, 0x4f0a, 0xe, 0x81, 0x5, 0xffff, 0x1000001, 0x32c, 0x5, 0x5c, 0x6, 0x7, 0xa3, 0x0, 0x8001, 0xfffff255, 0x1, 0x5, 0x80000001, 0x7, 0x4, 0x78962c2e, 0xffff, 0x9, 0x8, 0x6, 0xff, 0x1, 0x10000, 0x5, 0x5, 0x6, 0x0, 0x1, 0x33, 0x8, 0x0, 0x5, 0x8, 0x2246, 0x10000, 0x8, 0x3, 0xfffffff6, 0x9, 0x6, 0x7, 0x9, 0x2, 0x3ef, 0x1, 0xadc2, 0x6, 0x0, 0x3, 0x5, 0x1, 0xb6, 0x7, 0x3, 0xfffffffc, 0x6, 0x3, 0x3ff, 0xd, 0x4, 0x6, 0xa2, 0x5fd751c9, 0xfffffff3, 0x3, 0x9, 0x9, 0x7fffffff, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0x5, 0x4, 0xfffffffa, {0x3, 0x0, 0x5, 0xb, 0x2, 0x100}, {0x4, 0x2, 0xd, 0xb, 0x7}, 0x10, 0x2, 0x7}}]}]}}]}, 0x484}}, 0x0) 52.043591975s ago: executing program 59 (id=13339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x484, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4, 0x4c0a, 0x7ff, 0x9, 0x5, 0x661f, 0xce4, 0x5, 0xd1, 0x5, 0x2, 0x7, 0x0, 0x0, 0x8001, 0x9098, 0x8, 0xa, 0x0, 0x2, 0x34f, 0x3d7ed312, 0x4, 0x5, 0x5, 0x2, 0x7ff, 0xe7, 0x7, 0x7, 0x8, 0x5, 0xfffff47b, 0x998, 0x5, 0xfffffff7, 0xb, 0x7ff, 0xff, 0x1, 0x8, 0x5, 0x2b2, 0x7, 0x4, 0x6, 0x10, 0x3, 0x121, 0x8, 0x7, 0x8000, 0x80000000, 0x0, 0x4, 0x4000000, 0x200, 0x100, 0x7ff, 0x8, 0x8001, 0x9ef8, 0xfffffffe, 0x6, 0x7ff, 0xd, 0x401, 0x6, 0x8000, 0x13, 0x2, 0x5, 0x9, 0x3, 0xfffffff4, 0x7, 0x4, 0x0, 0x9, 0x5, 0xffffffff, 0x0, 0xffff, 0x9, 0x2e, 0x90000000, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x7, 0x7, 0xfffffffb, 0x1, 0x8, 0x5983, 0x4, 0x0, 0x1, 0xa, 0x2, 0x33b7, 0x5, 0x5, 0xa, 0x3, 0x35, 0x6, 0x0, 0xdf, 0x9, 0x3, 0x5, 0x5, 0x7, 0x3, 0xfffffff7, 0x3ce, 0x7, 0x7, 0x6, 0x10000, 0x6, 0xb, 0x0, 0x7, 0x3, 0x200, 0x5, 0x2f, 0xfffffffb, 0x9c7e, 0x6, 0x0, 0x4, 0x1, 0x6, 0x2, 0x0, 0x95, 0x4, 0x1, 0x4, 0x8, 0x0, 0x5e7c14df, 0x1, 0x4, 0x13c0, 0x3, 0xe, 0xddd3000, 0x40, 0x7, 0x80, 0x8, 0x80000000, 0x3f, 0x3, 0x2, 0xb4a9, 0x400, 0x60f, 0x8, 0x3, 0x3, 0xcba9, 0x7, 0x1, 0x9, 0xa3f0, 0x0, 0x5, 0x4, 0xfffffff8, 0x10001, 0x7, 0x0, 0x4f0a, 0xe, 0x81, 0x5, 0xffff, 0x1000001, 0x32c, 0x5, 0x5c, 0x6, 0x7, 0xa3, 0x0, 0x8001, 0xfffff255, 0x1, 0x5, 0x80000001, 0x7, 0x4, 0x78962c2e, 0xffff, 0x9, 0x8, 0x6, 0xff, 0x1, 0x10000, 0x5, 0x5, 0x6, 0x0, 0x1, 0x33, 0x8, 0x0, 0x5, 0x8, 0x2246, 0x10000, 0x8, 0x3, 0xfffffff6, 0x9, 0x6, 0x7, 0x9, 0x2, 0x3ef, 0x1, 0xadc2, 0x6, 0x0, 0x3, 0x5, 0x1, 0xb6, 0x7, 0x3, 0xfffffffc, 0x6, 0x3, 0x3ff, 0xd, 0x4, 0x6, 0xa2, 0x5fd751c9, 0xfffffff3, 0x3, 0x9, 0x9, 0x7fffffff, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0x5, 0x4, 0xfffffffa, {0x3, 0x0, 0x5, 0xb, 0x2, 0x100}, {0x4, 0x2, 0xd, 0xb, 0x7}, 0x10, 0x2, 0x7}}]}]}}]}, 0x484}}, 0x0) 43.714603691s ago: executing program 5 (id=13431): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x4020744f, 0x0) 43.657260913s ago: executing program 5 (id=13433): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x80000000}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000030000000500000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 43.374818072s ago: executing program 5 (id=13439): perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x2, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x193, 0x0, &(0x7f0000000180)="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", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9cf}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 43.212311747s ago: executing program 5 (id=13442): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x398d0ce, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 43.187054618s ago: executing program 5 (id=13443): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r1, @ANYBLOB], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 42.418802992s ago: executing program 5 (id=13464): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd2f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1e, 0x407, 0x2, 0x0, 0x3, 0x3}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1d4}, 0x801) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 42.346804375s ago: executing program 60 (id=13464): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd2f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1e, 0x407, 0x2, 0x0, 0x3, 0x3}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1d4}, 0x801) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 32.933776566s ago: executing program 7 (id=13638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x22008014) 31.982256387s ago: executing program 7 (id=13662): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x1, 0x80008}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008040}, 0xc4) 31.89134854s ago: executing program 7 (id=13665): unshare(0x6060600) setfsuid(0xee01) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 31.825872842s ago: executing program 7 (id=13667): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x2ab, &(0x7f0000000a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x1) 31.781591553s ago: executing program 7 (id=13668): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x2) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='})\x00', &(0x7f0000000300)='\\\x00', 0x0) 31.53414278s ago: executing program 7 (id=13670): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001340)={0x0, 0x10, 0x30}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0) 31.486016122s ago: executing program 61 (id=13670): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001340)={0x0, 0x10, 0x30}, 0xc) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0) 2.468315591s ago: executing program 1 (id=14213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x80000008, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x3, 0x1966f9ad, 0x200, 0x20200, 0xb0fd, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x3, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x3, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x1, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x2, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x5cf1, 0x0, 0x1, 0x773, 0xfffffffb, 0x9, 0x8000, 0xa00000, 0x1, 0x0, 0x80000000, 0x9, 0x2a5, 0x4, 0x95e3, 0x8, 0xb, 0x7, 0x80000000, 0x4, 0x7fffffff, 0x56, 0x2, 0x3, 0x401, 0x3c6, 0x4, 0x56, 0x6d, 0x400, 0x93fb, 0x853c, 0x5, 0xfffffff0, 0x5, 0xfffff0d4, 0x7, 0xffffffff, 0x10000, 0x8, 0x7fffffff, 0xfffffffc, 0x4a, 0x800, 0xb, 0xffff, 0xb, 0xc, 0x7, 0x4, 0x6, 0x8, 0x800, 0x850e7fb, 0xd2dd, 0x2, 0x8001, 0x5, 0x8000, 0x9, 0x7, 0xffffff18, 0x0, 0x81, 0x2, 0x0, 0x1ff, 0x80, 0x4, 0x2, 0x7fff, 0xa64, 0x92e, 0xfffff682, 0xbc, 0x1, 0x8, 0x80000001, 0x7, 0x2, 0x1, 0x7fff, 0x4, 0x4, 0x100, 0x6, 0x9, 0x6, 0xffffffff, 0x8001, 0xc9, 0x0, 0x81, 0x7fffffff, 0x10000, 0x30, 0xfffffff6, 0x3000, 0xfffffffe, 0x8, 0x0, 0x400, 0x2, 0x9, 0x6, 0x0, 0x2ce2, 0x5, 0x0, 0x4, 0x7, 0x9, 0x6, 0x9d7, 0x2, 0x839, 0xe459, 0x1, 0x3630, 0x7, 0x6, 0x5, 0xd905, 0x9a, 0x5891, 0x3, 0x9, 0x9, 0x9f33, 0x1, 0xc0, 0x3ffc00, 0x8, 0x7, 0x8, 0x9, 0x3, 0x9, 0x97, 0x5, 0x7, 0x2, 0xc631, 0x3ff, 0xd44, 0x6, 0x800, 0x415, 0x3322, 0x0, 0x6, 0x4, 0x6, 0x8, 0xf50d, 0xd, 0x1ff, 0x7, 0xb07, 0x8, 0x5, 0x2, 0x1, 0x9f, 0x1000, 0xa, 0xf, 0x401, 0x175ac67f, 0x9, 0x7fff, 0x4, 0x6, 0xcc1, 0x800, 0xeff1, 0x8, 0xa, 0x3, 0x0, 0x6, 0x3, 0x1, 0x1000, 0x8, 0x3ff, 0x9, 0xfffffffb, 0x3, 0x268c, 0x1d, 0x4, 0x9, 0x5, 0xa, 0x2, 0x4, 0xbf33, 0x8, 0x8001, 0x0, 0x1ff, 0x200, 0x2, 0x1, 0x7, 0xfffffeff, 0x1, 0x0, 0x80, 0xa, 0xffffffff, 0xf07, 0xe6d, 0xff, 0x9, 0x400, 0x5, 0x6, 0x101, 0x7f, 0x8, 0x800, 0x60a, 0x3, 0x4df17694, 0x8, 0x4, 0x5, 0x6, 0x6, 0xb6e, 0x4, 0x3, 0xd, 0x400, 0x0, 0x5, 0x89e, 0x3, 0x9, 0x6, 0x5, 0x2, 0x1, 0x9, 0x8, 0x4, 0x7ff, 0x6, 0x6, 0x81, 0x0, 0x4]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 2.391890013s ago: executing program 1 (id=14218): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe000000007110580000000000e5000600000000004704000001ed030407030000060000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0xf3, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x3, 0x0, 0x8001, 0x0, &(0x7f0000000f00)}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2097, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0xfebc) write$selinux_load(r0, &(0x7f0000000280)=ANY=[], 0x65) 2.19043756s ago: executing program 1 (id=14225): socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0x20000007f, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r0, &(0x7f0000001900)=[{&(0x7f00000002c0)=""/190, 0xbe}, {&(0x7f0000000440)=""/139, 0x8b}, {0x0}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/108, 0x6c}], 0x5, 0x4004, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 1.919671969s ago: executing program 0 (id=14233): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) 1.067029726s ago: executing program 0 (id=14235): socket$inet(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0xf0ffffff) 1.064704036s ago: executing program 1 (id=14237): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, 0x0, 0x40000) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0xf}, @IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @loopback}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 898.272991ms ago: executing program 1 (id=14241): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 803.423724ms ago: executing program 0 (id=14244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) shutdown(r0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}}], 0x1, 0x4002, 0x0) 760.137536ms ago: executing program 0 (id=14246): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x4fe}], 0x1}}], 0x2, 0x42054) 759.728876ms ago: executing program 4 (id=14247): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81902) 740.078656ms ago: executing program 0 (id=14248): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ec, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) 700.046638ms ago: executing program 4 (id=14250): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36f, 0xc000, 0xc, 0xa0002f5}) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 695.588167ms ago: executing program 0 (id=14251): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x1, @perf_bp={0x0, 0x5}, 0x88e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) splice(r1, 0x0, r0, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 638.84909ms ago: executing program 3 (id=14252): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15864}]}}]}, 0x44}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 638.39444ms ago: executing program 3 (id=14253): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="0a000000010000000400000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a80)={r2}, 0xc) 591.464941ms ago: executing program 3 (id=14254): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x20, 0xfbfd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x2, 0x8}}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x800}}, 0xe8) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000140008"], 0x34}}, 0x0) 565.621502ms ago: executing program 2 (id=14255): connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) 565.138142ms ago: executing program 3 (id=14256): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0x6f14cf9ac61f9c9b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 494.506824ms ago: executing program 3 (id=14257): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000003f40)=[{{&(0x7f0000000380)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000f80)="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", 0x15b}, {&(0x7f0000000180)="6242870f0e6b4396205a2c501f10b0601e64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489a8ddc2b21909092ab24a155c0285968950c5d57e08533c7216e8dd6ccabae10c2", 0xb3}, {&(0x7f0000000580)="7d1455a2eefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772a67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b0658fe289beff381c455f37c2b1c71e0e98f34a344141f9996f71a6c32cd9e930f86b9aa8d31e566b300"/146, 0x92}, {&(0x7f0000000e00)="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", 0x154}, {&(0x7f00000008c0)="bfc1bfc99c5689c343747de08ca174e7537bba6643a8728bf280dab2e5d29eecc79b53bdc4d9e551904ceda1445fa16f896686a8046d3bc57c10f855dcb44b79c9d4bb0b9285a4590cd7ac862a4efeb27a62f1dac53434cb036335931f77b80f43fef6f7d01fcc8ef21a3611c200d37fba4b86c11fad0395115bf2414e311c5072016f851461ee4cd792f20c97617793b8604ab6ad654960779bed9c68fed82cfe4a5b41caab29552ef9e3eacee6e2d0628d474cb9455cc7a853c4dd2e0961f0c13a424789b26b8e2bc500e65da26e5e618ec40b4f", 0xd5}, {&(0x7f0000001100)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d58667b82a58ec030a57d199f14b1714330e476a95d3aa897b4161302835bee9582736b04c576bbfffe0c6cc0bb35685582b277d975a87c9be2814365f3f1962ee9db85d", 0x105}, {&(0x7f0000000440)="eea9faf55d74298a0274e5b0c1eccf100684c6f55d2b4d131eb8a7ba7a83226db746190b9877481ce2e33350bc3500fecfc7147ccc0215a082ef8d625346323d1c0153f706e4a660d049", 0x4a}, {&(0x7f0000002780)="a80703000000000000009bd961c07ea5421acf0be365820ff0b8aba451eb0f334f4c2f7906a44af10c567997c5248dfb783cf3ed8c45d5f322fa264eeb86f3086837", 0x42}], 0x8}}], 0x2, 0x2000c044) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000c40)="b4207053c783", 0x6}], 0x1) 494.163724ms ago: executing program 4 (id=14258): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x4, 0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000001c0)=0x2, 0x1) 402.203137ms ago: executing program 3 (id=14259): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) 390.170408ms ago: executing program 2 (id=14260): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca3808e8b8bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218dbb9c065f38a22096306c1e1c7a8268d7373f2f6ca476174e543a37052c6e08007c7afd75fabaf66450709ff061959d02d4f6e0c120fdfaad713688d9af3e70e752f3698b8cd0d75efd5eb50f5c4ef48aa62b641104abb1ce0e8ebcea9485d77bb9b523a47f1de80c1456f62e1387435d3f41d2d6c9e04c1f51401aa6b5204972b93c5783233a1002a1c0d9680c43f078cb2fac20df2296408b52ac0338cee4c92445b44b8d802184f15b34dcd5be61c6f55f73559343ad384c6d05afae20646676c06b0d4bba9d96bdb045fb0e8b50b7a84489a59bc371e066b4ae38c5cb05035cbe8d2123dd28d85db900da33b1f01dd306558dc437606314814aaf7416b8e1e4ab0d9fc2a220d009edee9d94fd184c52a5c4fbee4197f30986533be2b656535c6621f15d4a700de437afd57cb91c00e692b5b4bcfbac44a33a917c9fce46b308775e1ba4e4d93388a11deda12d7270634704d2e2846caedba24b226247029d706b423a295689289bfa250f45ae88432d5721129c9ad9a5f4c5bdd4d653a024e9b16c0e96b35920fbd236d1566cc2efd366f327b04e508254cea66bd2977e016757f0cd7169706543cf2571b99084098464ab7dba3b313cc17463d3d26dadf42f5327637d67464d3dcf6ec8d88621c51892bf61685f551df8bd2620976d502ef3df7456865e1b45136bf141b9444680b6658127b7e8d088af71b9206fd177e579b81f284c6aa7694e8241f34ac5308e98776afeeaad59a473d500d9ad99c594e44b6e9a739c218b97ddc1c8219d134cb14fb1513fdae7ecca1ad9beacdb16e577e8820a239011aab5504da2eb368fb8718773026e44c3e63ab2e4f5d8c2ab2e0c69a64d85131a9d1af9cec5b4cb1e39ccafd7e6a03094ed52d30f516d5daf04be1add1bdd830f3a1684b61f6a6366751bda829d0c8160da6784bbd61fc74425d34cf2700887ad4dd109ddf2bad712242cdb68f57923378ee3f0b9b9f7810c3dbea8192a9b92375583b7a2875b15baed35f239f143b976a79d587613e92208eb017015d29b8851f6dec225227497e62b5eaff043792c9ea6a7bf6f2a00ae1d7ac67ab10ea7d97dc1d3e44e8eeed1a87d34ed0db26be992e3d65421f013af2bb74f0384a6b978441764c9d00f64fe517dd96df0fa5df57c98303606879326907ffb3e70d53e68a335a5caf51d609cf8f9ebcd66463193f3363c000fb1b9942864637f2745a49f24ddc4294079e2f10f0dc3d155948f1d1624236e25a18c1b2e7aafee912531104e891502b88c0a795e859773cf8a0779c7a264b7f155ddb1266eec79f62781d5c4e98b85725d038247a77ce81fd504652688f02c3c3049bd64929f7f05924bf25bd38918ffff688fd42994dfcaa5c575483c1b319c78dafb3aa49ea200c0a4acea7279d429cc70bc01dc41f497c610ec0aa6c5852e07b9f2995d734f6d71bce991e265cd2128ca94a791ef71f86b49e9064f4647b810ec8cd5c7c06c408b29b236d0b3351cfa764574445a0e64fcf60e863cd", 0x4fe}], 0x1}}], 0x2, 0x42054) 257.717341ms ago: executing program 1 (id=14261): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ec, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) 253.477522ms ago: executing program 2 (id=14262): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7fffffff}, 0x1c) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 188.630644ms ago: executing program 2 (id=14263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000000900010073797a310000000008000540000000020900020073797a310000000008000a400700000000000000000000140c0009800800014000000081400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 113.008817ms ago: executing program 2 (id=14264): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) close_range(r0, 0xffffffffffffffff, 0x0) 112.769086ms ago: executing program 4 (id=14265): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x41) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x40000029) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 112.312846ms ago: executing program 2 (id=14266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {0x5}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x7200, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x80, 0xcda5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x80000000, 0x6, 0x80000001, 0x3, 0x3ff, 0x9bc, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0xf, 0xbbc, 0x9, 0xfffffffe, 0x6, 0x8, 0x5, 0x6, 0x40000b, 0x5, 0x5, 0x4e3, 0x204, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0x4bf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x3, 0x34, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0x9, 0x401, 0x8600, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0x1, 0x4, 0x9, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0xcd51, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x4831, 0xa, 0x9, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0x2000000c, 0x1ff, 0x40, 0xb, 0x3, 0x2, 0x1ff, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0xe4, 0x7b58, 0x0, 0x807, 0x1ff, 0x3, 0x400, 0xffffffff, 0x1040, 0x3, 0xfffffffa, 0x9a6, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0x100a, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x8006, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0xd, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0x7, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x0, 0x4, 0x8001, 0x3]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 20.31786ms ago: executing program 4 (id=14267): r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0xb0, 0x3, 0xf8, 0x2, 0x0, 0xfffffffffffffffd, 0x209, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x6, @perf_config_ext={0x80000001, 0x1}, 0x200, 0x2, 0x8, 0x6, 0x9, 0x20000ffe, 0x3, 0x0, 0x53a, 0x0, 0x1}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x76, 0x0, 0x0, 0x0, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x2802, 0xc8, 0x6, 0x0, 0x0, 0xc, 0x0, 0x0, 0xb, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 0s ago: executing program 4 (id=14268): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): entered promiscuous mode [ 664.611916][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12921'. [ 664.633008][ T9760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.651876][ T9760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.676464][ T8781] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.691433][ T8781] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.784572][ T8781] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.793600][ T8781] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.234329][ T9256] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 665.336899][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12936'. [ 665.369686][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12936'. [ 666.706230][T10219] loop3: detected capacity change from 0 to 1764 [ 666.783486][T10219] 9p: Bad value for 'rfdno' [ 667.025884][T10235] netlink: 'syz.0.12961': attribute type 3 has an invalid length. [ 667.035553][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12961'. [ 667.579642][T10266] netlink: 20 bytes leftover after parsing attributes in process `syz.9.12965'. [ 668.051913][T10278] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-6) [ 668.103526][T10284] loop2: detected capacity change from 0 to 1024 [ 668.141752][T10284] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 668.196074][T10286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12972'. [ 668.219999][T10284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.246970][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 668.247037][ T28] audit: type=1400 audit(1781218509.812:17720): avc: denied { write } for pid=10283 comm="syz.2.12971" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 668.345093][ T1478] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.439232][ T28] audit: type=1326 audit(1781218510.002:17721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.9.12975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdda00ce59 code=0x7ffc0000 [ 668.537546][ T28] audit: type=1326 audit(1781218510.002:17722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.9.12975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdda00ce59 code=0x7ffc0000 [ 668.585359][ T28] audit: type=1326 audit(1781218510.002:17723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.9.12975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdda00ce59 code=0x7ffc0000 [ 668.669931][ T28] audit: type=1326 audit(1781218510.002:17724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.9.12975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdda00ce59 code=0x7ffc0000 [ 668.722609][ T28] audit: type=1326 audit(1781218510.002:17725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.9.12975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbdda00ce59 code=0x7ffc0000 [ 668.826267][ T28] audit: type=1326 audit(1781218510.002:17726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.9.12975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdda00ce59 code=0x7ffc0000 [ 668.895338][ T28] audit: type=1326 audit(1781218510.002:17727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.9.12975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdda00ce59 code=0x7ffc0000 [ 668.994060][ T28] audit: type=1326 audit(1781218510.002:17728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.9.12975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdda00ce59 code=0x7ffc0000 [ 669.142682][ T28] audit: type=1326 audit(1781218510.002:17729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10294 comm="syz.9.12975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdda00ce59 code=0x7ffc0000 [ 669.646005][T10385] loop9: detected capacity change from 0 to 128 [ 669.656101][T10385] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 669.673429][T10385] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.707585][ T9760] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 669.744614][T10392] loop9: detected capacity change from 0 to 128 [ 669.752766][T10392] EXT4-fs: Ignoring removed nobh option [ 669.763239][T10392] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 669.804954][T10392] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 670.429105][T10410] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 670.463039][T10421] bridge0: port 3(dummy0) entered blocking state [ 670.495938][T10421] bridge0: port 3(dummy0) entered disabled state [ 670.514148][T10421] dummy0: entered allmulticast mode [ 670.532901][T10421] dummy0: entered promiscuous mode [ 670.551623][T10421] bridge0: port 3(dummy0) entered blocking state [ 670.558160][T10421] bridge0: port 3(dummy0) entered forwarding state [ 670.586627][T10408] loop2: detected capacity change from 0 to 32768 [ 670.595010][T10429] dummy0: left allmulticast mode [ 670.611810][T10429] dummy0: left promiscuous mode [ 670.628529][T10429] bridge0: port 3(dummy0) entered disabled state [ 670.675231][T10408] loop2: p1 p3 < > [ 670.757937][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13026'. [ 670.820779][ T9760] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 670.913650][T10454] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13028'. [ 670.967852][T10454] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13028'. [ 670.991087][ T6663] udevd[6663]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 670.994552][ T6661] udevd[6661]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 671.337256][T10504] loop7: detected capacity change from 0 to 512 [ 671.375964][T10504] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.389252][T32428] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 671.407097][T32428] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 671.433010][T10504] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.461743][T32428] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 671.490756][T32428] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 671.526357][ T9256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.540254][T32428] rtc rtc0: __rtc_set_alarm: err=-22 [ 671.598669][T10526] netlink: 'syz.3.13046': attribute type 1 has an invalid length. [ 671.628845][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13048'. [ 671.733740][T10538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13052'. [ 671.829846][T10547] loop3: detected capacity change from 0 to 128 [ 671.867645][T10548] loop7: detected capacity change from 0 to 1764 [ 671.965588][T10542] 9p: Bad value for 'rfdno' [ 672.591515][T10604] loop7: detected capacity change from 0 to 512 [ 672.598186][T10604] EXT4-fs: inline encryption not supported [ 672.605759][T10604] EXT4-fs: inline encryption not supported [ 672.617639][T10554] loop3: detected capacity change from 0 to 1764 [ 672.638556][T10604] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 672.666730][T10604] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 672.681925][T10604] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.13079: bg 0: block 248: padding at end of block bitmap is not set [ 672.696682][T10604] loop7: lost filesystem error report for type 5 error -117 [ 672.697048][T10604] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.13079: Failed to acquire dquot type 1 [ 672.704429][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 672.704450][ C0] EXT4-fs (loop7): last error at time 1781218514: ext4_validate_block_bitmap:441 [ 672.725467][T10613] loop9: detected capacity change from 0 to 1024 [ 672.734215][T10604] loop7: lost filesystem error report for type 5 error -28 [ 672.738572][T10604] EXT4-fs (loop7): 1 truncate cleaned up [ 672.750044][T10613] EXT4-fs: Ignoring removed nomblk_io_submit option [ 672.761688][T10554] 9p: Bad value for 'rfdno' [ 672.765988][T10604] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 672.806260][T10613] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 672.843369][ T8809] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:22: Failed to release dquot type 1 [ 672.855582][T10620] SELinux: failed to load policy [ 672.858306][T10621] netlink: 'syz.2.13085': attribute type 1 has an invalid length. [ 672.871075][T10613] EXT4-fs (loop9): shut down requested (1) [ 672.877960][T10613] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 672.886996][T10604] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 672.895555][T10613] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 672.897020][T10621] 8021q: adding VLAN 0 to HW filter on device bond4 [ 672.914330][T10624] loop3: detected capacity change from 0 to 128 [ 672.929796][ T9256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 672.933262][ T9760] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=11 [ 672.947786][ T9760] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=11 [ 672.956839][ T9760] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=11 [ 672.965853][ T9760] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=11 [ 672.974843][ T9760] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=11 [ 672.983969][ T9760] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=11 [ 672.993258][ T9760] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=11 [ 673.002414][ T9760] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=11 [ 673.066872][T10599] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.145778][T10639] EXT4-fs: Ignoring removed nobh option [ 673.154746][T10639] EXT4-fs (loop7): 1 orphan inode deleted [ 673.164192][T10639] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.194475][ T9256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.275665][ T8781] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.345553][ T8781] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.418120][ T8781] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.494517][ T8781] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.743331][ T8781] bridge_slave_1: left allmulticast mode [ 673.749243][ T8781] bridge_slave_1: left promiscuous mode [ 673.762545][ T8781] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.808768][ T8781] bridge_slave_0: left allmulticast mode [ 673.814953][ T8781] bridge_slave_0: left promiscuous mode [ 673.820938][ T8781] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.842227][T10644] 9p: Bad value for 'rfdno' [ 673.947393][ T8809] Bluetooth: hci0: Frame reassembly failed (-84) [ 674.015247][ T8781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.029130][ T8781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.055980][ T8781] bond0 (unregistering): Released all slaves [ 674.166632][T10710] FAT-fs (loop2): codepage cp874 not found [ 674.179768][ T8781] hsr_slave_0: left promiscuous mode [ 674.196117][ T8781] hsr_slave_1: left promiscuous mode [ 674.206493][ T8781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.215749][ T8781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.247233][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13124'. [ 674.260118][ T8781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.272383][ T8781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.287058][ T8781] veth1_macvtap: left promiscuous mode [ 674.292795][ T8781] veth0_macvtap: left promiscuous mode [ 674.298371][ T8781] veth1_vlan: left promiscuous mode [ 674.303868][ T8781] veth0_vlan: left promiscuous mode [ 674.363789][ T8781] team0 (unregistering): Port device team_slave_1 removed [ 674.373444][ T8781] team0 (unregistering): Port device team_slave_0 removed [ 674.479368][T10723] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.513846][T10650] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.518278][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 674.518295][ T28] audit: type=1400 audit(1781218516.082:17809): avc: denied { write } for pid=10722 comm="syz.7.13125" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 674.521302][T10650] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.531401][ T28] audit: type=1400 audit(1781218516.102:17810): avc: denied { write } for pid=10722 comm="syz.7.13125" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 674.549336][T10650] bridge_slave_0: entered allmulticast mode [ 674.584649][T10650] bridge_slave_0: entered promiscuous mode [ 674.599192][T10650] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.606766][T10650] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.614480][T10650] bridge_slave_1: entered allmulticast mode [ 674.621542][T10650] bridge_slave_1: entered promiscuous mode [ 674.657712][T10650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.668305][T10650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.679257][ T28] audit: type=1400 audit(1781218516.242:17811): avc: denied { write } for pid=10734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.714033][T10650] team0: Port device team_slave_0 added [ 674.727101][T10650] team0: Port device team_slave_1 added [ 674.730814][ T28] audit: type=1400 audit(1781218516.292:17812): avc: denied { write } for pid=10747 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.748337][T10650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.766402][T10650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.770653][ T9256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.794239][T10650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.813168][T10650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.820400][T10650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.847120][T10650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.858562][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 674.899760][T10650] hsr_slave_0: entered promiscuous mode [ 674.906077][T10650] hsr_slave_1: entered promiscuous mode [ 674.912218][T10650] debugfs: 'hsr0' already exists in 'hsr' [ 674.917981][T10650] Cannot create hsr debugfs directory [ 675.049892][ T28] audit: type=1400 audit(1781218516.622:17813): avc: denied { write } for pid=10752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.101732][ T28] audit: type=1400 audit(1781218516.672:17814): avc: denied { write } for pid=10763 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.116812][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 675.242080][T10650] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 675.254170][ T28] audit: type=1400 audit(1781218516.822:17815): avc: denied { write } for pid=10766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.282757][T10650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 675.296840][T10650] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 675.312618][T10650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 675.321836][ T28] audit: type=1400 audit(1781218516.892:17816): avc: denied { write } for pid=10777 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.345736][T10650] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 675.361596][T10650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 675.369324][T10650] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 675.388471][T10650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 675.406977][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 675.438625][T10792] set_capacity_and_notify: 5 callbacks suppressed [ 675.438643][T10792] loop7: detected capacity change from 0 to 256 [ 675.469349][T10793] loop2: detected capacity change from 0 to 1764 [ 675.506628][T10793] 9p: Bad value for 'rfdno' [ 675.536045][T10650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.575662][T10650] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.617199][ T8809] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.624328][ T8809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.649391][ T8777] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.656532][ T8777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.686378][T10650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 675.726429][T10804] syz.2.13133: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 675.731403][T10650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 675.754673][T10804] CPU: 1 UID: 0 PID: 10804 Comm: syz.2.13133 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 675.754714][T10804] Tainted: [W]=WARN [ 675.754722][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 675.754765][T10804] Call Trace: [ 675.754774][T10804] [ 675.754783][T10804] __dump_stack+0x1d/0x30 [ 675.754812][T10804] dump_stack_lvl+0x95/0xd0 [ 675.754877][T10804] dump_stack+0x15/0x1b [ 675.754898][T10804] warn_alloc+0x145/0x1c0 [ 675.754999][T10804] ? futex_unqueue+0xc5/0xf0 [ 675.755035][T10804] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 675.755064][T10804] ? __pfx_futex_wake_mark+0x10/0x10 [ 675.755141][T10804] ? __rcu_read_unlock+0x4e/0x70 [ 675.755168][T10804] ? avc_has_perm_noaudit+0xab/0x130 [ 675.755204][T10804] ? should_fail_ex+0x30/0x280 [ 675.755263][T10804] vmalloc_user_noprof+0x7d/0xb0 [ 675.755341][T10804] ? xskq_create+0x80/0xe0 [ 675.755496][T10804] xskq_create+0x80/0xe0 [ 675.755533][T10804] xsk_init_queue+0x70/0xb0 [ 675.755567][T10804] xsk_setsockopt+0x477/0x640 [ 675.755657][T10804] ? __pfx_xsk_setsockopt+0x10/0x10 [ 675.755691][T10804] __sys_setsockopt+0x184/0x200 [ 675.755823][T10804] __x64_sys_setsockopt+0x64/0x80 [ 675.755854][T10804] x64_sys_call+0x2327/0x3020 [ 675.755941][T10804] do_syscall_64+0x12c/0x3b0 [ 675.755988][T10804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.756090][T10804] RIP: 0033:0x7f7fe2c4ce59 [ 675.756109][T10804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.756222][T10804] RSP: 002b:00007f7fe169f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 675.756249][T10804] RAX: ffffffffffffffda RBX: 00007f7fe2ec5fa0 RCX: 00007f7fe2c4ce59 [ 675.756267][T10804] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 675.756283][T10804] RBP: 00007f7fe2ce2d6f R08: 0000000000000004 R09: 0000000000000000 [ 675.756300][T10804] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 675.756334][T10804] R13: 00007f7fe2ec6038 R14: 00007f7fe2ec5fa0 R15: 00007ffe39a88fe8 [ 675.756358][T10804] [ 675.757794][T10804] Mem-Info: [ 675.929509][ T28] audit: type=1400 audit(1781218517.472:17817): avc: denied { write } for pid=10795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.000118][ T4314] Bluetooth: hci0: command 0x1003 tx timeout [ 676.019746][ T3628] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 676.032079][ T28] audit: type=1400 audit(1781218517.582:17818): avc: denied { write } for pid=10815 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.054921][T10804] active_anon:52515 inactive_anon:3 isolated_anon:0 [ 676.054921][T10804] active_file:18205 inactive_file:5695 isolated_file:0 [ 676.054921][T10804] unevictable:0 dirty:291 writeback:0 [ 676.054921][T10804] slab_reclaimable:4036 slab_unreclaimable:24207 [ 676.054921][T10804] mapped:29477 shmem:33728 pagetables:4605 [ 676.054921][T10804] sec_pagetables:0 bounce:0 [ 676.054921][T10804] kernel_misc_reclaimable:0 [ 676.054921][T10804] free:1805118 free_pcp:11677 free_cma:0 [ 676.100891][T10804] Node 0 active_anon:210060kB inactive_anon:12kB active_file:72820kB inactive_file:22780kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117908kB dirty:1164kB writeback:0kB shmem:134912kB kernel_stack:4736kB pagetables:18188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 676.132828][T10804] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 676.142328][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 676.162756][T10804] lowmem_reserve[]: 0 2878 7857 7857 [ 676.175800][T10804] Node 0 DMA32 free:2944352kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947980kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 676.207499][T10804] lowmem_reserve[]: 0 0 4978 4978 [ 676.212783][T10804] Node 0 Normal free:4261120kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:209828kB inactive_anon:12kB active_file:72820kB inactive_file:22780kB unevictable:0kB writepending:1164kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:43352kB local_pcp:7396kB free_cma:0kB [ 676.293071][T10804] lowmem_reserve[]: 0 0 0 0 [ 676.297822][T10804] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 676.310793][T10804] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944352kB [ 676.358036][T10804] Node 0 Normal: 4383*4kB (UME) 3831*8kB (UME) 1833*16kB (UME) 808*32kB (UME) 595*64kB (UME) 411*128kB (UME) 327*256kB (UME) 368*512kB (UME) 300*1024kB (UME) 195*2048kB (UME) 754*4096kB (UM) = 4261124kB [ 676.380215][T10650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.387807][T10804] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 676.398549][T10804] 57756 total pagecache pages [ 676.403422][T10804] 134 pages in swap cache [ 676.407801][T10804] Free swap = 124196kB [ 676.412227][T10804] Total swap = 124996kB [ 676.416746][T10804] 2097051 pages RAM [ 676.420652][T10804] 0 pages HighMem/MovableOnly [ 676.425450][T10804] 81657 pages reserved [ 676.671163][T10650] veth0_vlan: entered promiscuous mode [ 676.679386][T10650] veth1_vlan: entered promiscuous mode [ 676.714071][T10881] vlan2: entered allmulticast mode [ 676.726888][T10881] bond0: entered allmulticast mode [ 676.742522][T10881] bond_slave_0: entered allmulticast mode [ 676.753644][T10881] bond_slave_1: entered allmulticast mode [ 676.808602][T10881] bridge0: port 3(vlan2) entered blocking state [ 676.815166][T10892] loop2: detected capacity change from 0 to 4096 [ 676.820549][T10881] bridge0: port 3(vlan2) entered disabled state [ 676.828862][T10881] vlan2: entered promiscuous mode [ 676.835026][T10881] bond0: entered promiscuous mode [ 676.840996][T10881] bond_slave_0: entered promiscuous mode [ 676.847121][T10881] bond_slave_1: entered promiscuous mode [ 676.853809][T10881] bridge0: port 3(vlan2) entered blocking state [ 676.860229][T10881] bridge0: port 3(vlan2) entered forwarding state [ 676.877694][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13143'. [ 676.888509][T10650] veth0_macvtap: entered promiscuous mode [ 676.897055][T10892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.911548][T10650] veth1_macvtap: entered promiscuous mode [ 676.918062][T10887] netlink: 'syz.3.13143': attribute type 26 has an invalid length. [ 676.928421][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13143'. [ 676.940355][T10650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.954202][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13143'. [ 676.955603][T10650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.973786][T10887] netlink: 'syz.3.13143': attribute type 26 has an invalid length. [ 676.983530][ T8787] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.989578][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13143'. [ 677.004424][ T8787] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.017748][ T8787] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.026611][ T8787] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.045642][ T1478] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.345115][T10950] loop2: detected capacity change from 0 to 4096 [ 677.365523][T10950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.547202][ T1478] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.654204][T10992] hsr0: entered promiscuous mode [ 677.661919][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13161'. [ 677.678387][T10992] hsr_slave_0: left promiscuous mode [ 677.688311][T10992] hsr_slave_1: left promiscuous mode [ 677.703323][T10992] hsr0 (unregistering): left promiscuous mode [ 678.039550][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13177'. [ 678.079803][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13177'. [ 678.280395][T11082] loop2: detected capacity change from 0 to 1764 [ 678.315718][T11082] 9p: Bad value for 'rfdno' [ 678.742331][T11133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13198'. [ 678.787152][T11133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13198'. [ 678.881848][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 678.983205][T11186] hsr0: entered promiscuous mode [ 678.989002][T11186] hsr_slave_0: left promiscuous mode [ 678.995090][T11186] hsr_slave_1: left promiscuous mode [ 679.003540][T11186] hsr0 (unregistering): left promiscuous mode [ 679.538185][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 679.538204][ T28] audit: type=1400 audit(1781218521.102:17905): avc: denied { write } for pid=11242 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 679.628234][T11250] hsr0: entered promiscuous mode [ 679.642368][T11250] __nla_validate_parse: 1 callbacks suppressed [ 679.642389][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13222'. [ 679.683810][T11250] hsr_slave_0: left promiscuous mode [ 679.698817][T11250] hsr_slave_1: left promiscuous mode [ 679.717139][T11250] hsr0 (unregistering): left promiscuous mode [ 679.807213][T11228] netlink: 'syz.3.13227': attribute type 13 has an invalid length. [ 679.817276][T11228] netlink: 'syz.3.13227': attribute type 17 has an invalid length. [ 680.114391][T11262] IPVS: Unknown mcast interface: vcan0 [ 680.242333][T11272] loop7: detected capacity change from 0 to 512 [ 680.413147][T11284] loop7: detected capacity change from 0 to 128 [ 680.440331][T11284] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 680.473769][T11284] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 680.477526][T11291] hsr0: entered promiscuous mode [ 680.552902][ T28] audit: type=1400 audit(1781218522.122:17906): avc: denied { write } for pid=11282 comm="syz.7.13236" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 680.626988][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13239'. [ 680.652625][ T9256] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 680.662441][T11291] hsr_slave_0: left promiscuous mode [ 680.668679][T11291] hsr_slave_1: left promiscuous mode [ 680.708867][T11291] hsr0 (unregistering): left promiscuous mode [ 680.914041][T11309] netlink: 'syz.2.13245': attribute type 21 has an invalid length. [ 680.961231][T11301] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 681.018072][T11309] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13245'. [ 681.187861][ T28] audit: type=1400 audit(1781218522.742:17907): avc: denied { write } for pid=11316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 681.287625][ T28] audit: type=1400 audit(1781218522.782:17908): avc: denied { write } for pid=11339 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 681.353545][ T28] audit: type=1400 audit(1781218522.882:17909): avc: denied { map } for pid=11352 comm="syz.2.13259" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 682.288372][T11406] hsr0: entered promiscuous mode [ 682.297182][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13278'. [ 682.309038][ T28] audit: type=1326 audit(1781218523.872:17910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.2.13279" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe2c4ce59 code=0x7ffc0000 [ 682.309175][T11406] hsr_slave_0: left promiscuous mode [ 682.335503][ T28] audit: type=1326 audit(1781218523.872:17911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.2.13279" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe2c4ce59 code=0x7ffc0000 [ 682.372350][T11406] hsr_slave_1: left promiscuous mode [ 682.379852][ T28] audit: type=1326 audit(1781218523.872:17912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.2.13279" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe2c4ce59 code=0x7ffc0000 [ 682.407806][T11406] hsr0 (unregistering): left promiscuous mode [ 682.420040][ T28] audit: type=1326 audit(1781218523.872:17913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.2.13279" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f7fe2c4ce59 code=0x7ffc0000 [ 682.479753][ T28] audit: type=1326 audit(1781218523.872:17914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11402 comm="syz.2.13279" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe2c4ce59 code=0x7ffc0000 [ 682.529587][T11418] veth0: entered promiscuous mode [ 682.548083][T11418] veth0: left promiscuous mode [ 682.562974][T11426] loop3: detected capacity change from 0 to 512 [ 682.570137][T11426] EXT4-fs: Ignoring removed mblk_io_submit option [ 682.578588][T11426] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 682.605305][T11426] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 682.624778][T11426] EXT4-fs (loop3): orphan cleanup on readonly fs [ 682.632236][T11426] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.13288: bg 0: block 361: padding at end of block bitmap is not set [ 682.647371][T11426] loop3: lost filesystem error report for type 5 error -117 [ 682.649443][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 682.663235][ C0] EXT4-fs (loop3): initial error at time 1781218524: ext4_validate_block_bitmap:441 [ 682.672711][ C0] EXT4-fs (loop3): last error at time 1781218524: ext4_validate_block_bitmap:441 [ 682.683641][T11426] EXT4-fs (loop3): Remounting filesystem read-only [ 682.705793][T11426] EXT4-fs (loop3): 1 truncate cleaned up [ 682.720085][T11426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 682.783164][ T1150] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 682.936105][T11454] loop6: detected capacity change from 0 to 512 [ 682.942962][T11454] EXT4-fs: Ignoring removed mblk_io_submit option [ 682.977175][T11454] EXT4-fs (loop6): orphan cleanup on readonly fs [ 682.992910][T11454] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 683.028251][T11454] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.13300: attempt to clear invalid blocks 2 len 1 [ 683.057667][T11454] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 683.059471][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 683.079529][ C0] EXT4-fs (loop6): initial error at time 1781218524: ext4_clear_blocks:876 [ 683.079642][T11454] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 683.092031][T11454] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.13300: invalid indirect mapped block 1819239214 (level 0) [ 683.105520][ C0] : inode 13 [ 683.125580][ C0] EXT4-fs (loop6): last error at time 1781218524: ext4_mb_generate_buddy:1317 [ 683.151700][T11463] netlink: 'syz.3.13301': attribute type 21 has an invalid length. [ 683.159825][T11454] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 683.160007][T11454] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.13300: invalid indirect mapped block 1819239214 (level 1) [ 683.169294][T11463] netlink: 156 bytes leftover after parsing attributes in process `syz.3.13301'. [ 683.227652][T11454] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 683.235679][T11454] EXT4-fs (loop6): 1 truncate cleaned up [ 683.251162][T11454] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 683.344140][T10650] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.616914][T11493] loop6: detected capacity change from 0 to 2048 [ 683.640075][T11493] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.675037][T10650] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.884705][T11522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13328'. [ 683.911532][T11522] bridge: RTM_NEWNEIGH with invalid ether address [ 683.936244][T11522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13328'. [ 683.949855][T11522] bridge: RTM_NEWNEIGH with invalid ether address [ 684.154703][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13335'. [ 684.196726][T11539] loop3: detected capacity change from 0 to 1024 [ 684.214444][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13336'. [ 684.292103][ T8777] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.403458][ T8777] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.451374][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13346'. [ 684.475019][ T8777] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.518205][T11556] bond5: entered promiscuous mode [ 684.523506][T11556] 8021q: adding VLAN 0 to HW filter on device bond5 [ 684.542199][T11561] 8021q: adding VLAN 0 to HW filter on device bond5 [ 684.555753][T11561] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 684.575755][T11561] bond5: (slave ip6gre1): Error -95 calling set_mac_address [ 684.633105][ T8777] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.916680][T11600] loop7: detected capacity change from 0 to 512 [ 684.952233][T11600] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.13359: iget: bad i_size value: 38620345925642 [ 685.045476][T11600] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 685.047525][T11600] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.13359: couldn't read orphan inode 15 (err -117) [ 685.056819][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 685.056841][ C0] EXT4-fs (loop7): initial error at time 1781218526: ext4_orphan_get:1397: inode 15 [ 685.056871][ C0] EXT4-fs (loop7): last error at time 1781218526: ext4_orphan_get:1397: inode 15 [ 685.094523][T11600] loop7: lost filesystem error report for type 5 error -117 [ 685.106910][T11600] EXT4-fs (loop7): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.165107][T11617] loop2: detected capacity change from 0 to 512 [ 685.186204][T11617] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 685.198168][T11617] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.13362: corrupted in-inode xattr: e_value size too large [ 685.212473][T11617] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 685.212672][T11617] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.13362: couldn't read orphan inode 15 (err -117) [ 685.221936][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 685.222000][ C0] EXT4-fs (loop2): initial error at time 1781218526: ext4_iget_extra_inode:5128: inode 15 [ 685.222040][ C0] EXT4-fs (loop2): last error at time 1781218526: ext4_iget_extra_inode:5128: inode 15 [ 685.262559][T11617] loop2: lost filesystem error report for type 5 error -117 [ 685.264312][T11617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.265263][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 685.265278][ T28] audit: type=1400 audit(1781218526.832:17919): avc: denied { write } for pid=11598 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.392440][ T28] audit: type=1326 audit(1781218526.852:17920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.2.13362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe2c4ce59 code=0x7ffc0000 [ 685.421451][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 685.477510][ T28] audit: type=1326 audit(1781218526.852:17921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.2.13362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe2c4ce59 code=0x7ffc0000 [ 685.504816][T11557] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.520963][T11557] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.535721][T11557] bridge_slave_0: entered allmulticast mode [ 685.548878][T11557] bridge_slave_0: entered promiscuous mode [ 685.559300][ T28] audit: type=1326 audit(1781218526.852:17922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.2.13362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe2c4ce59 code=0x7ffc0000 [ 685.593570][T11557] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.605737][T11557] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.620451][T11557] bridge_slave_1: entered allmulticast mode [ 685.633082][T11557] bridge_slave_1: entered promiscuous mode [ 685.640572][ T28] audit: type=1326 audit(1781218526.852:17923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.2.13362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe2c4ce59 code=0x7ffc0000 [ 685.699129][T11557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.718214][ T28] audit: type=1326 audit(1781218526.852:17924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.2.13362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fe2c4ce59 code=0x7ffc0000 [ 685.750014][T11557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.783141][ T28] audit: type=1326 audit(1781218526.852:17925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.2.13362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe2c4ce59 code=0x7ffc0000 [ 685.849549][ T28] audit: type=1326 audit(1781218526.852:17926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.2.13362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe2c4ce59 code=0x7ffc0000 [ 685.896710][ T28] audit: type=1326 audit(1781218526.852:17927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.2.13362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fe2c4ce59 code=0x7ffc0000 [ 685.971187][ T28] audit: type=1326 audit(1781218526.852:17928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.2.13362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f7fe2c4ce59 code=0x7ffc0000 [ 687.698075][ T1478] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.710969][ T9256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 687.754914][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 687.786642][ T8777] bridge_slave_1: left allmulticast mode [ 687.803667][ T8777] bridge_slave_1: left promiscuous mode [ 687.819313][ T8777] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.848974][T11656] loop2: detected capacity change from 0 to 1024 [ 687.850822][ T8777] bridge_slave_0: left allmulticast mode [ 687.874619][ T8777] bridge_slave_0: left promiscuous mode [ 687.879926][T11656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.880586][ T8777] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.023387][ T8809] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 688.039387][T11671] netlink: 'syz.0.13372': attribute type 1 has an invalid length. [ 688.051281][ T8809] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 688.063748][ T8809] EXT4-fs (loop2): This should not happen!! Data will be lost [ 688.063748][ T8809] [ 688.074152][ T8809] EXT4-fs (loop2): Total free blocks count 0 [ 688.080512][ T8809] EXT4-fs (loop2): Free/Dirty block details [ 688.086516][ T8809] EXT4-fs (loop2): free_blocks=20480 [ 688.092445][ T8809] EXT4-fs (loop2): dirty_blocks=64 [ 688.097655][ T8809] EXT4-fs (loop2): Block reservation details [ 688.106048][ T8809] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 688.112761][ T8777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.123743][ T8809] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 16 with error 28 [ 688.136885][ T8777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.147553][ T8777] bond0 (unregistering): Released all slaves [ 688.154383][ T1478] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 688.171752][T11557] team0: Port device team_slave_0 added [ 688.178309][T11557] team0: Port device team_slave_1 added [ 688.218878][T11412] IPVS: starting estimator thread 0... [ 688.227262][T11671] 8021q: adding VLAN 0 to HW filter on device bond5 [ 688.240999][T11673] bond5: (slave geneve4): making interface the new active one [ 688.252645][T11680] loop7: detected capacity change from 0 to 512 [ 688.258982][T11673] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 688.268175][T11680] EXT4-fs: Ignoring removed nobh option [ 688.295870][T11680] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #3: comm syz.7.13374: corrupted inode contents [ 688.316532][T11557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.325097][T11680] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 688.325174][T11557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.330177][T11680] EXT4-fs (loop7): Remounting filesystem read-only [ 688.334358][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 688.362141][T11679] IPVS: using max 2736 ests per chain, 136800 per kthread [ 688.366748][ C1] EXT4-fs (loop7): initial error at time 1781218529: ext4_do_update_inode:5690: inode 3 [ 688.390079][ C1] EXT4-fs (loop7): last error at time 1781218529: ext4_do_update_inode:5690: inode 3 [ 688.399723][T11557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.412424][T11680] EXT4-fs (loop7): 1 truncate cleaned up [ 688.418953][T11680] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 688.420047][ T8777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.434320][T11680] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 688.460830][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 688.488713][ T8777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.533570][ T8777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.542075][ T8777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.570715][ T8777] veth1_macvtap: left promiscuous mode [ 688.590333][ T8777] veth0_macvtap: left promiscuous mode [ 688.605784][ T8777] veth1_vlan: left promiscuous mode [ 688.617250][ T8777] veth0_vlan: left promiscuous mode [ 688.633998][ T9256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.667118][T11713] loop2: detected capacity change from 0 to 128 [ 688.682702][T11713] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 688.713048][T11713] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 688.764540][T11713] ext2 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 688.791296][T11713] SELinux: Context /sbin/dhclient is not valid (left unmapped). [ 688.827061][ T1478] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 688.859089][ T8777] team0 (unregistering): Port device team_slave_1 removed [ 688.878115][ T8777] team0 (unregistering): Port device team_slave_0 removed [ 688.911413][T11730] netlink: 'syz.2.13386': attribute type 4 has an invalid length. [ 688.921374][T11557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.928403][T11557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.954539][T11557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.970582][T11725] netlink: 'syz.7.13387': attribute type 3 has an invalid length. [ 688.974895][T11727] netlink: 'syz.2.13386': attribute type 4 has an invalid length. [ 688.981771][T11725] netlink: 'syz.7.13387': attribute type 3 has an invalid length. [ 688.996862][T11725] netlink: 'syz.7.13387': attribute type 3 has an invalid length. [ 689.005152][T11725] netlink: 'syz.7.13387': attribute type 3 has an invalid length. [ 689.013292][T11725] netlink: 'syz.7.13387': attribute type 3 has an invalid length. [ 689.021562][T11725] netlink: 'syz.7.13387': attribute type 3 has an invalid length. [ 689.030311][T11725] netlink: 'syz.7.13387': attribute type 3 has an invalid length. [ 689.080246][T11557] hsr_slave_0: entered promiscuous mode [ 689.093379][T11557] hsr_slave_1: entered promiscuous mode [ 689.289589][ T3019] 8021q: adding VLAN 0 to HW filter on device eth19 [ 689.373317][T11765] SELinux: failed to load policy [ 689.511045][T11557] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 689.534839][T11557] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 689.551839][T11557] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 689.563810][T11557] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 689.572176][ T3019] 8021q: adding VLAN 0 to HW filter on device eth20 [ 689.580433][T11557] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 689.589910][T11557] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 689.601004][T11557] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 689.616456][T11557] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 689.677741][T11557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.702181][T11557] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.713698][ T8781] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.720847][ T8781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.733637][ T8809] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.740844][ T8809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.758939][T11557] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 689.769387][T11557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 689.965442][T11557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.057714][T11847] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 690.257126][T11557] veth0_vlan: entered promiscuous mode [ 690.266002][T11557] veth1_vlan: entered promiscuous mode [ 690.285982][T11557] veth0_macvtap: entered promiscuous mode [ 690.301592][T11557] veth1_macvtap: entered promiscuous mode [ 690.317527][T11557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.330851][T11557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.346375][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.360709][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.373787][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 690.373805][ T28] audit: type=1400 audit(1781218531.942:17970): avc: denied { write } for pid=11881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.410486][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.424610][T11862] loop2: detected capacity change from 0 to 512 [ 690.439821][ T28] audit: type=1400 audit(1781218531.992:17971): avc: denied { write } for pid=11892 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.442071][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.549866][ T4314] Bluetooth: hci0: command 0x1003 tx timeout [ 690.556108][ T3628] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 690.678283][T11862] EXT4-fs: inline encryption not supported [ 690.753753][ T28] audit: type=1400 audit(1781218532.322:17972): avc: denied { write } for pid=11894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.807909][T11924] loop3: detected capacity change from 0 to 128 [ 690.808216][T11920] loop7: detected capacity change from 0 to 1024 [ 690.848361][ T28] audit: type=1400 audit(1781218532.412:17973): avc: denied { write } for pid=11925 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 690.919945][T11920] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 690.956775][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13412'. [ 690.959671][T11920] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 690.996571][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13412'. [ 691.006121][T11862] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.13403: bad orphan inode 15 [ 691.026769][T11920] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.13410: bg 0: block 112: padding at end of block bitmap is not set [ 691.042523][ T28] audit: type=1400 audit(1781218532.592:17974): avc: denied { write } for pid=11919 comm="syz.7.13410" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 691.066043][T11862] loop2: lost filesystem error report for type 5 error -117 [ 691.089466][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 691.103432][ C0] EXT4-fs (loop2): initial error at time 1781218532: ext4_orphan_get:1423 [ 691.111986][ C0] EXT4-fs (loop2): last error at time 1781218532: ext4_orphan_get:1423 [ 691.122612][T11920] EXT4-fs (loop7): Remounting filesystem read-only [ 691.134355][T11862] ext4_test_bit(bit=14, block=5) = 0 [ 691.204135][ T28] audit: type=1400 audit(1781218532.772:17975): avc: denied { write } for pid=11937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.233312][T11862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 691.267985][ T28] audit: type=1400 audit(1781218532.832:17976): avc: denied { write } for pid=11949 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.422417][ T28] audit: type=1400 audit(1781218532.992:17977): avc: denied { write } for pid=11951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.468516][ T28] audit: type=1400 audit(1781218533.032:17978): avc: denied { write } for pid=11962 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.591096][ T28] audit: type=1400 audit(1781218533.162:17979): avc: denied { write } for pid=11964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 692.010977][T11662] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 692.141436][ T1478] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.141460][ T9256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 692.164290][ T8787] kworker/u8:13: attempt to access beyond end of device [ 692.164290][ T8787] loop3: rw=1, sector=145, nr_sectors = 16 limit=128 [ 692.185207][ T8787] kworker/u8:13: attempt to access beyond end of device [ 692.185207][ T8787] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 692.199096][ T8787] kworker/u8:13: attempt to access beyond end of device [ 692.199096][ T8787] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 692.248895][ T8787] kworker/u8:13: attempt to access beyond end of device [ 692.248895][ T8787] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 692.265089][ T8787] kworker/u8:13: attempt to access beyond end of device [ 692.265089][ T8787] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 692.299687][ T8787] kworker/u8:13: attempt to access beyond end of device [ 692.299687][ T8787] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 692.322468][ T8787] kworker/u8:13: attempt to access beyond end of device [ 692.322468][ T8787] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 692.343957][ T8787] kworker/u8:13: attempt to access beyond end of device [ 692.343957][ T8787] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 692.376587][ T8787] kworker/u8:13: attempt to access beyond end of device [ 692.376587][ T8787] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 692.416121][ T8787] kworker/u8:13: attempt to access beyond end of device [ 692.416121][ T8787] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 692.595411][ T3727] IPVS: starting estimator thread 0... [ 692.606251][T12052] IPVS: rr: FWM 3 0x00000003 - no destination available [ 692.621039][ T3727] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 692.644943][ T3727] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 692.699480][T12053] IPVS: using max 2736 ests per chain, 136800 per kthread [ 692.878512][T12072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13436'. [ 692.908010][T12072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13436'. [ 692.977428][T12075] loop2: detected capacity change from 0 to 4096 [ 693.041266][T12075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.087933][ T1478] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.150339][T12099] program syz.5.13439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 694.003081][ T30] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.090309][ T30] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.165819][ T30] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.216017][ T30] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.359089][ T30] bridge_slave_1: left allmulticast mode [ 694.370609][ T30] bridge_slave_1: left promiscuous mode [ 694.380302][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.394147][ T30] bridge_slave_0: left allmulticast mode [ 694.402227][ T30] bridge_slave_0: left promiscuous mode [ 694.417488][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.463132][T12215] loop7: detected capacity change from 0 to 1024 [ 694.498828][T12215] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 694.526485][ T9256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 694.569712][T12224] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 694.693055][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.703611][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.713714][ T30] bond0 (unregistering): Released all slaves [ 694.810511][ T30] hsr_slave_0: left promiscuous mode [ 694.824619][ T30] hsr_slave_1: left promiscuous mode [ 694.841328][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.853935][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.861835][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.869341][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.880814][ T30] veth1_macvtap: left promiscuous mode [ 694.886359][ T30] veth0_macvtap: left promiscuous mode [ 694.892307][ T30] veth1_vlan: left promiscuous mode [ 694.897631][ T30] veth0_vlan: left promiscuous mode [ 694.981491][ T30] team0 (unregistering): Port device team_slave_1 removed [ 694.993568][ T30] team0 (unregistering): Port device team_slave_0 removed [ 695.078912][T12184] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.115904][T12184] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.124161][T12184] bridge_slave_0: entered allmulticast mode [ 695.130870][T12184] bridge_slave_0: entered promiscuous mode [ 695.141076][T12184] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.148284][T12184] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.155710][T12184] bridge_slave_1: entered allmulticast mode [ 695.162430][T12184] bridge_slave_1: entered promiscuous mode [ 695.181806][T12184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.198801][T12184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.244411][T12184] team0: Port device team_slave_0 added [ 695.251264][T12184] team0: Port device team_slave_1 added [ 695.313486][T12184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.332887][T12184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.400255][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 695.400309][ T28] audit: type=1400 audit(1781218536.962:17994): avc: denied { write } for pid=12265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.431162][T12184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.453157][T12184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.467419][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13499'. [ 695.476919][ T28] audit: type=1400 audit(1781218537.032:17995): avc: denied { write } for pid=12289 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.496652][T12184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.561217][T12184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.582549][ T30] IPVS: stop unused estimator thread 0... [ 695.586806][T12290] team1: entered promiscuous mode [ 695.599288][T12290] team1: entered allmulticast mode [ 695.606695][T12290] 8021q: adding VLAN 0 to HW filter on device team1 [ 695.615769][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 695.653772][T12184] hsr_slave_0: entered promiscuous mode [ 695.661786][T12184] hsr_slave_1: entered promiscuous mode [ 695.761798][ T28] audit: type=1400 audit(1781218537.312:17996): avc: denied { execute } for pid=12298 comm="syz.0.13503" path=2F6D656D66643AFF202864656C6574656429 dev="hugetlbfs" ino=132905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 695.840014][T12315] loop3: detected capacity change from 0 to 512 [ 695.855051][T12315] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 695.866605][ T28] audit: type=1400 audit(1781218537.442:17997): avc: denied { write } for pid=12301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.897766][T12315] EXT4-fs (loop3): 1 truncate cleaned up [ 695.916158][T12315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.959246][ T28] audit: type=1400 audit(1781218537.522:17998): avc: denied { write } for pid=12322 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.985245][ T1150] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.014827][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 696.031433][T12325] validate_nla: 44 callbacks suppressed [ 696.031461][T12325] netlink: 'syz.3.13507': attribute type 11 has an invalid length. [ 696.060306][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13507'. [ 696.077254][T12325] netlink: 'syz.3.13507': attribute type 11 has an invalid length. [ 696.099762][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13507'. [ 696.162727][T12184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 696.214153][T12184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 696.239791][T12184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 696.278602][T12184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 696.315778][T12184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 696.334263][T12184] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 696.343397][ T28] audit: type=1400 audit(1781218537.912:17999): avc: denied { listen } for pid=12353 comm="syz.2.13516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 696.362089][T12184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 696.389774][T12184] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 696.412620][ T28] audit: type=1400 audit(1781218537.912:18000): avc: denied { write } for pid=12335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.472640][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 696.488873][ T28] audit: type=1400 audit(1781218537.982:18001): avc: denied { write } for pid=12357 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.510051][T12184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.552155][ T28] audit: type=1400 audit(1781218538.052:18002): avc: denied { getopt } for pid=12366 comm="syz.7.13517" laddr=172.20.20.170 lport=55497 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 696.592341][T12184] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.602485][ T8787] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.609636][ T8787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.631751][ T8777] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.638871][ T8777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.723718][ T28] audit: type=1400 audit(1781218538.292:18003): avc: denied { write } for pid=12373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.771122][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 696.864286][T12184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.166499][T12184] veth0_vlan: entered promiscuous mode [ 697.195591][T12184] veth1_vlan: entered promiscuous mode [ 697.257503][T12184] veth0_macvtap: entered promiscuous mode [ 697.289575][T12184] veth1_macvtap: entered promiscuous mode [ 697.331967][T12184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.387016][T12184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.423001][ T8777] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.439166][ T8777] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.470472][ T8777] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.488196][ T8777] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.753421][T12488] loop4: detected capacity change from 0 to 2048 [ 697.810396][T12499] loop7: detected capacity change from 0 to 2048 [ 697.845059][T12499] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.880305][T12488] loop4: p2 p3 p7 [ 698.029369][ T9256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.884185][T12552] loop3: detected capacity change from 0 to 512 [ 699.031889][T12552] EXT4-fs: inline encryption not supported [ 699.054074][T12552] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.13539: bad orphan inode 15 [ 699.105479][T12552] loop3: lost filesystem error report for type 5 error -117 [ 699.129940][T12552] ext4_test_bit(bit=14, block=5) = 0 [ 699.137880][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 699.138428][ C1] EXT4-fs (loop3): initial error at time 1781218540: ext4_orphan_get:1423 [ 699.138480][ C1] EXT4-fs (loop3): last error at time 1781218540: ext4_orphan_get:1423 [ 699.476912][T12613] SELinux: policydb version 58131 does not match my version range 15-35 [ 699.494245][T12613] SELinux: failed to load policy [ 699.551080][T12552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.594745][T12609] loop4: detected capacity change from 0 to 8192 [ 699.715110][T12629] loop7: detected capacity change from 0 to 2048 [ 699.812417][T12629] Alternate GPT is invalid, using primary GPT. [ 699.818840][T12629] loop7: p1 p2 p3 [ 699.822633][T12629] loop7: partition table partially beyond EOD, truncated [ 699.832161][T12609] loop4: p1 p2 p3 [ 699.836091][T12609] loop4: p1 size 67111168 extends beyond EOD, truncated [ 699.843977][T12609] loop4: p2 size 8388608 extends beyond EOD, truncated [ 699.844286][ T1150] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.892435][T12609] loop4: p3 start 4294901760 is beyond EOD, truncated [ 700.018950][T12648] loop3: detected capacity change from 0 to 512 [ 700.036748][ T6663] udevd[6663]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 700.044536][ T3719] udevd[3719]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 700.066112][T12648] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 700.115551][T12648] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 700.136005][T12648] System zones: 1-12 [ 700.156200][T12648] EXT4-fs (loop3): 1 truncate cleaned up [ 700.173866][T12648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 700.436901][ T1150] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.925504][T12722] netlink: 'syz.0.13579': attribute type 1 has an invalid length. [ 700.955681][T12722] 8021q: adding VLAN 0 to HW filter on device bond6 [ 700.986661][T12722] bond6: (slave gretap3): making interface the new active one [ 701.010523][T12722] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 701.307879][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 701.307897][ T28] audit: type=1326 audit(1781218542.872:18041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.4.13592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e816ce59 code=0x7ffc0000 [ 701.363961][ T28] audit: type=1326 audit(1781218542.872:18042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.4.13592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e816ce59 code=0x7ffc0000 [ 701.389915][ T28] audit: type=1326 audit(1781218542.872:18043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.4.13592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e816ce59 code=0x7ffc0000 [ 701.415768][ T28] audit: type=1326 audit(1781218542.872:18044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.4.13592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e816ce59 code=0x7ffc0000 [ 701.441791][ T28] audit: type=1326 audit(1781218542.872:18045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.4.13592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd6e816ce59 code=0x7ffc0000 [ 701.467842][ T28] audit: type=1326 audit(1781218542.872:18046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.4.13592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e816ce59 code=0x7ffc0000 [ 701.494272][ T28] audit: type=1326 audit(1781218542.872:18047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.4.13592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e816ce59 code=0x7ffc0000 [ 701.528277][ T28] audit: type=1326 audit(1781218542.872:18048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.4.13592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e816ce59 code=0x7ffc0000 [ 701.554926][ T28] audit: type=1326 audit(1781218542.872:18049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.4.13592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e816ce59 code=0x7ffc0000 [ 701.583135][ T28] audit: type=1326 audit(1781218542.872:18050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12750 comm="syz.4.13592" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6e816ce59 code=0x7ffc0000 [ 702.199871][T12798] vlan3: entered allmulticast mode [ 702.205175][T12798] bond_slave_1: entered allmulticast mode [ 702.257473][T12798] vlan3: entered allmulticast mode [ 702.748393][T12836] sctp: [Deprecated]: syz.7.13623 (pid 12836) Use of int in max_burst socket option deprecated. [ 702.748393][T12836] Use struct sctp_assoc_value instead [ 703.112185][T12877] loop7: detected capacity change from 0 to 128 [ 703.143548][T12877] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 703.169289][T12877] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 703.282811][ T9256] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 703.386358][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13634'. [ 703.536553][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13638'. [ 703.858696][T12927] loop2: detected capacity change from 0 to 8192 [ 703.910337][T12927] loop2: p1 p2 p3 [ 703.921171][T12927] loop2: p1 size 67111168 extends beyond EOD, truncated [ 703.933193][T12927] loop2: p2 size 8388608 extends beyond EOD, truncated [ 703.940830][T12927] loop2: p3 start 4294901760 is beyond EOD, truncated [ 704.114164][ T3719] udevd[3719]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 704.126376][ T6663] udevd[6663]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 704.185220][T12950] xt_hashlimit: size too large, truncated to 1048576 [ 704.431807][T12974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 704.441149][T12974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.530809][T12985] loop7: detected capacity change from 0 to 256 [ 704.682343][T12996] loop2: detected capacity change from 0 to 128 [ 704.703521][T12996] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 704.719069][T12996] ext4 filesystem being mounted at /639/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 704.813282][ T8781] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.923089][ T8781] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.999223][ T1478] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 705.023582][ T8781] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.059127][ T8781] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.086731][T13015] loop3: detected capacity change from 0 to 512 [ 705.093898][T13015] EXT4-fs: Ignoring removed i_version option [ 705.117810][T13015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.132148][T13015] ext4 filesystem being mounted at /709/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 705.177543][ T8781] vlan2: left promiscuous mode [ 705.182920][ T8781] bond0: left promiscuous mode [ 705.187816][ T8781] bond_slave_0: left promiscuous mode [ 705.193864][ T8781] bond_slave_1: left promiscuous mode [ 705.199712][ T8781] bridge0: port 3(vlan2) entered disabled state [ 705.206675][ T8781] bridge_slave_1: left allmulticast mode [ 705.212737][ T8781] bridge_slave_1: left promiscuous mode [ 705.218414][ T8781] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.226679][ T8781] bridge_slave_0: left allmulticast mode [ 705.232795][ T8781] bridge_slave_0: left promiscuous mode [ 705.238929][ T8781] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.239619][ T1150] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.333097][ T8781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.342322][ T8781] bond_slave_0: left allmulticast mode [ 705.348800][ T8781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.357871][ T8781] bond_slave_1: left allmulticast mode [ 705.364437][ T8781] bond0 (unregistering): Released all slaves [ 705.428721][ T8781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.436747][ T8781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.444702][ T8781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.452473][ T8781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.463583][ T8781] veth1_macvtap: left promiscuous mode [ 705.471098][ T8781] veth0_macvtap: left promiscuous mode [ 705.482013][ T8781] veth1_vlan: left promiscuous mode [ 705.489565][ T8781] veth0_vlan: left promiscuous mode [ 705.953221][T13054] loop2: detected capacity change from 0 to 4096 [ 705.963348][T13054] EXT4-fs: Ignoring removed nomblk_io_submit option [ 705.983800][T13054] EXT4-fs (loop2): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 706.003238][T13054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.037312][ T8781] team0 (unregistering): Port device team_slave_1 removed [ 706.047751][ T8781] team0 (unregistering): Port device team_slave_0 removed [ 706.111877][ T1478] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.134874][ T3019] 8021q: adding VLAN 0 to HW filter on device eth21 [ 706.241282][T13068] loop2: detected capacity change from 0 to 512 [ 706.255043][T13000] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.265858][T13068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.269256][T13000] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.287703][T13000] bridge_slave_0: entered allmulticast mode [ 706.297184][T13068] ext4 filesystem being mounted at /645/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 706.321347][T13000] bridge_slave_0: entered promiscuous mode [ 706.337096][ T1478] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.347806][T13000] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.363045][T13000] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.371745][T13000] bridge_slave_1: entered allmulticast mode [ 706.380695][T13000] bridge_slave_1: entered promiscuous mode [ 706.421132][T13000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.446990][T13000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.492411][T13000] team0: Port device team_slave_0 added [ 706.505465][T13000] team0: Port device team_slave_1 added [ 706.548223][T13000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.555439][T13000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.583700][T13000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.597802][T13000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.605835][ T8781] IPVS: stop unused estimator thread 0... [ 706.612452][T13000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.647804][T13000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.696808][T13000] hsr_slave_0: entered promiscuous mode [ 706.710522][T13000] hsr_slave_1: entered promiscuous mode [ 706.716637][T13000] debugfs: 'hsr0' already exists in 'hsr' [ 706.724455][T13098] loop2: detected capacity change from 0 to 2048 [ 706.725271][T13000] Cannot create hsr debugfs directory [ 706.736894][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 706.736912][ T28] audit: type=1400 audit(1781218548.302:18122): avc: denied { write } for pid=13082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.791030][ T28] audit: type=1400 audit(1781218548.362:18123): avc: denied { write } for pid=13102 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 706.792802][T13098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.834298][T13098] ext4 filesystem being mounted at /648/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 706.869864][ T3019] 8021q: adding VLAN 0 to HW filter on device eth22 [ 706.874907][T13098] xt_hashlimit: size too large, truncated to 1048576 [ 707.052115][ T1478] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.064017][ T28] audit: type=1400 audit(1781218548.632:18124): avc: denied { write } for pid=13113 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.097233][ T28] audit: type=1400 audit(1781218548.652:18125): avc: denied { write } for pid=13125 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.122254][ T3019] 8021q: adding VLAN 0 to HW filter on device eth23 [ 707.144889][T13130] loop2: detected capacity change from 0 to 164 [ 707.152975][T13130] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 707.169039][T13130] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 707.186737][T13130] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 707.190314][T13000] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 707.216367][T13000] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 707.236184][T13000] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 707.245913][T13000] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 707.258627][T13000] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 707.274762][T13000] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 707.285912][T13000] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 707.294973][T13000] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 707.376816][T13000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.410092][T13153] loop4: detected capacity change from 0 to 512 [ 707.419206][T13000] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.428305][T13153] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 707.446788][T13153] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 707.457788][T13153] System zones: 1-12 [ 707.465944][ T8777] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.473071][ T8777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.487571][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.494771][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.504487][T13153] EXT4-fs (loop4): 1 truncate cleaned up [ 707.511772][T13153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 707.547786][ T28] audit: type=1400 audit(1781218549.112:18126): avc: denied { write } for pid=13134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.605359][T13000] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 707.617880][T13000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 707.660362][ T28] audit: type=1400 audit(1781218549.212:18127): avc: denied { write } for pid=13164 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.700748][T13166] syzkaller1: entered allmulticast mode [ 707.723636][ T3019] 8021q: adding VLAN 0 to HW filter on device eth24 [ 707.736424][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.988113][T13159] loop2: detected capacity change from 0 to 32768 [ 708.031586][ T28] audit: type=1400 audit(1781218549.602:18128): avc: denied { write } for pid=13174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.031703][T13000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.099596][ T28] audit: type=1400 audit(1781218549.662:18129): avc: denied { write } for pid=13201 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.166577][T11412] Process accounting resumed [ 708.307688][ T28] audit: type=1400 audit(1781218549.872:18130): avc: denied { write } for pid=13210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.368028][ T28] audit: type=1400 audit(1781218549.932:18131): avc: denied { write } for pid=13223 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.462461][T13159] loop2: p1 p3 < > [ 708.636075][T13000] veth0_vlan: entered promiscuous mode [ 708.665519][T13000] veth1_vlan: entered promiscuous mode [ 708.703167][T13246] loop4: detected capacity change from 0 to 4096 [ 708.730036][T13000] veth0_macvtap: entered promiscuous mode [ 708.748355][T13246] EXT4-fs: Ignoring removed nomblk_io_submit option [ 708.762578][ T6661] udevd[6661]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 708.762855][ T6663] udevd[6663]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 708.789008][T13246] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 708.810291][T13000] veth1_macvtap: entered promiscuous mode [ 708.813823][T13258] xt_hashlimit: size too large, truncated to 1048576 [ 708.847762][T13246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.860529][T13000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.870041][T13000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.901999][ T8787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.953348][ T8787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.638343][ T8787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.640033][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.648642][ T8787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.470540][T13400] loop3: detected capacity change from 0 to 512 [ 710.506935][T13400] EXT4-fs: Ignoring removed orlov option [ 710.542928][T13400] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 710.578063][T13400] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 710.595005][T13400] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.13752: corrupted in-inode xattr: e_value size too large [ 710.654396][T13400] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 710.654650][T13400] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.13752: couldn't read orphan inode 15 (err -117) [ 710.663897][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 710.663919][ C1] EXT4-fs (loop3): initial error at time 1781218552: ext4_iget_extra_inode:5128: inode 15 [ 710.663951][ C1] EXT4-fs (loop3): last error at time 1781218552: ext4_iget_extra_inode:5128: inode 15 [ 710.819151][T13426] serio: Serial port ptm0 [ 710.827120][T13400] loop3: lost filesystem error report for type 5 error -117 [ 710.828089][T13400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 711.020926][ T1150] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.528450][T13405] loop4: detected capacity change from 0 to 512 [ 711.814091][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 711.814109][ T28] audit: type=1400 audit(1781218553.382:18152): avc: denied { write } for pid=13500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.920391][T13405] EXT4-fs: inline encryption not supported [ 711.974175][ T28] audit: type=1400 audit(1781218553.532:18153): avc: denied { write } for pid=13514 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.060169][T13531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13780'. [ 712.085482][T13531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13780'. [ 712.113402][T13531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13780'. [ 712.145480][T13531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13780'. [ 712.329486][ T28] audit: type=1400 audit(1781218553.892:18154): avc: denied { write } for pid=13524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.382935][ T28] audit: type=1400 audit(1781218553.952:18155): avc: denied { write } for pid=13550 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.606938][ T28] audit: type=1400 audit(1781218554.172:18156): avc: denied { write } for pid=13555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.708048][T13405] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.13754: bad orphan inode 15 [ 712.737707][ T28] audit: type=1400 audit(1781218554.302:18157): avc: denied { write } for pid=13571 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 712.795518][T13405] loop4: lost filesystem error report for type 5 error -117 [ 712.809462][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 712.823265][ C0] EXT4-fs (loop4): initial error at time 1781218554: ext4_orphan_get:1423 [ 712.831911][ C0] EXT4-fs (loop4): last error at time 1781218554: ext4_orphan_get:1423 [ 712.852367][T13405] ext4_test_bit(bit=14, block=5) = 0 [ 713.001327][T13405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.019733][ T28] audit: type=1400 audit(1781218554.582:18158): avc: denied { write } for pid=13574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.098850][ T28] audit: type=1400 audit(1781218554.662:18159): avc: denied { write } for pid=13593 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.254652][T13605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13793'. [ 713.273068][T13605] netlink: 'syz.2.13793': attribute type 7 has an invalid length. [ 713.301277][T13605] netlink: 'syz.2.13793': attribute type 8 has an invalid length. [ 713.326429][T13605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13793'. [ 713.355426][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13794'. [ 713.397743][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.482591][T13629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.498285][T13629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.753571][ T28] audit: type=1400 audit(1781218555.322:18160): avc: denied { write } for pid=13642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.786179][T13629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.812462][T13629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.836863][ T28] audit: type=1400 audit(1781218555.382:18161): avc: denied { write } for pid=13669 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 714.236090][T13708] netlink: 'syz.3.13825': attribute type 30 has an invalid length. [ 714.245801][T13708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13825'. [ 714.255390][T13708] netlink: 'syz.3.13825': attribute type 30 has an invalid length. [ 714.263614][T13708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13825'. [ 714.481500][T13730] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 715.160444][T13777] loop3: detected capacity change from 0 to 128 [ 715.216245][T13783] batadv_slave_0: entered promiscuous mode [ 715.236866][T13783] batadv_slave_0: left promiscuous mode [ 715.812527][T13818] loop3: detected capacity change from 0 to 512 [ 715.843491][T13818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.856748][T13818] ext4 filesystem being mounted at /760/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 715.901677][ T1150] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.054171][T13825] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 716.466501][T13844] loop4: detected capacity change from 0 to 512 [ 716.480542][T13844] EXT4-fs: Ignoring removed i_version option [ 716.492083][T13844] EXT4-fs: Ignoring removed bh option [ 716.502941][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13882'. [ 716.542495][T13844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.566872][T13844] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 716.655550][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.747663][T13827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.764455][T11412] IPVS: starting estimator thread 0... [ 716.859552][T13871] IPVS: using max 2592 ests per chain, 129600 per kthread [ 717.678660][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 717.678678][ T28] audit: type=1400 audit(1781218559.242:18168): avc: denied { accept } for pid=13911 comm="syz.2.13908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 717.718938][T13912] team_slave_1: Caught tx_queue_len zero misconfig [ 718.183538][T13926] netlink: 'syz.2.13915': attribute type 1 has an invalid length. [ 718.216847][T13926] 8021q: adding VLAN 0 to HW filter on device bond6 [ 718.251706][T13929] bond6: (slave gretap1): making interface the new active one [ 718.268639][T13929] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 718.311603][T13932] xt_hashlimit: size too large, truncated to 1048576 [ 718.637404][T13952] xt_hashlimit: size too large, truncated to 1048576 [ 718.785596][ T28] audit: type=1400 audit(1781218560.352:18169): avc: denied { write } for pid=13953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.819944][T13969] __nla_validate_parse: 5 callbacks suppressed [ 718.819960][T13969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13925'. [ 718.859224][ T28] audit: type=1400 audit(1781218560.422:18170): avc: denied { write } for pid=13972 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.928528][T13978] lo: Caught tx_queue_len zero misconfig [ 719.016092][ T28] audit: type=1400 audit(1781218560.582:18171): avc: denied { setattr } for pid=13983 comm="syz.1.13930" name="/" dev="configfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 719.481752][T14010] netlink: 'syz.0.13940': attribute type 1 has an invalid length. [ 719.498019][T14012] loop3: detected capacity change from 0 to 512 [ 719.506936][T14010] 8021q: adding VLAN 0 to HW filter on device bond7 [ 719.520003][ T8809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.530568][T14012] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 719.548189][T14012] EXT4-fs (loop3): 1 truncate cleaned up [ 719.555485][T14012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 719.586540][ T28] audit: type=1400 audit(1781218561.152:18172): avc: denied { write } for pid=14011 comm="syz.3.13942" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 719.640699][ T28] audit: type=1400 audit(1781218561.202:18173): avc: denied { write } for pid=14011 comm="syz.3.13942" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 719.668001][T14014] bond7: (slave gretap4): making interface the new active one [ 719.706991][T14014] bond7: (slave gretap4): Enslaving as an active interface with an up link [ 719.892662][ T28] audit: type=1400 audit(1781218561.452:18174): avc: denied { write } for pid=14011 comm="syz.3.13942" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 719.974227][ T28] audit: type=1400 audit(1781218561.452:18175): avc: denied { link } for pid=14011 comm="syz.3.13942" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 720.099884][ T1150] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.414975][T14064] SELinux: failed to load policy [ 720.459471][T14066] team0: Caught tx_queue_len zero misconfig [ 720.652387][ T28] audit: type=1400 audit(1781218562.212:18176): avc: denied { write } for pid=14072 comm="syz.3.13966" lport=53902 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 720.659986][ T8809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.402711][T14086] SELinux: policydb version 0 does not match my version range 15-35 [ 721.411163][T14086] SELinux: failed to load policy [ 721.810810][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.115370][T14106] lo: Caught tx_queue_len zero misconfig [ 722.190428][ T28] audit: type=1400 audit(1781218563.752:18177): avc: denied { write } for pid=14103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.734199][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13990'. [ 722.756863][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13990'. [ 722.812266][T14147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.921087][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.185695][T14170] loop3: detected capacity change from 0 to 512 [ 723.200551][T14170] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 723.232172][T14170] EXT4-fs (loop3): 1 truncate cleaned up [ 723.238409][T14170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 723.267478][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 723.267495][ T28] audit: type=1400 audit(1781218564.832:18180): avc: denied { write } for pid=14169 comm="syz.3.14002" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 723.418613][ T1150] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.599215][T14200] syz_tun: entered allmulticast mode [ 723.605442][T14197] syz_tun: left allmulticast mode [ 723.676053][T14209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.736631][T14214] loop2: detected capacity change from 0 to 512 [ 723.744003][T14214] EXT4-fs: test_dummy_encryption option not supported [ 723.989000][T14222] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 724.003200][T14222] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 724.018158][T14222] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 724.035021][T14222] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 724.044328][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.049540][T14222] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 724.204273][ T28] audit: type=1326 audit(1781218565.772:18181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14227 comm="syz.1.14025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0191b4ce59 code=0x7ffc0000 [ 724.230577][ T28] audit: type=1326 audit(1781218565.772:18182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14227 comm="syz.1.14025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0191b4ce59 code=0x7ffc0000 [ 724.257158][ T28] audit: type=1326 audit(1781218565.772:18183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14227 comm="syz.1.14025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0191b4ce59 code=0x7ffc0000 [ 724.286267][ T28] audit: type=1326 audit(1781218565.772:18184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14227 comm="syz.1.14025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0191b4ce59 code=0x7ffc0000 [ 724.313887][ T28] audit: type=1326 audit(1781218565.772:18185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14227 comm="syz.1.14025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f0191b4ce59 code=0x7ffc0000 [ 724.340308][ T28] audit: type=1326 audit(1781218565.772:18186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14227 comm="syz.1.14025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0191b4ce59 code=0x7ffc0000 [ 724.387286][ T28] audit: type=1326 audit(1781218565.772:18187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14227 comm="syz.1.14025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0191b4ce59 code=0x7ffc0000 [ 724.441460][ T28] audit: type=1326 audit(1781218565.772:18188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14227 comm="syz.1.14025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0191b4ce59 code=0x7ffc0000 [ 724.467504][ T28] audit: type=1326 audit(1781218565.772:18189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14227 comm="syz.1.14025" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0191b4ce59 code=0x7ffc0000 [ 724.668998][T14233] loop4: detected capacity change from 0 to 512 [ 724.684849][T14233] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 724.698903][T14236] netlink: 'syz.2.14028': attribute type 1 has an invalid length. [ 724.714928][T14233] EXT4-fs (loop4): 1 truncate cleaned up [ 724.726213][T14233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 724.991708][T14236] bond7: entered promiscuous mode [ 725.038068][T14236] 8021q: adding VLAN 0 to HW filter on device bond7 [ 725.126263][T14240] 8021q: adding VLAN 0 to HW filter on device bond7 [ 725.142963][T14240] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 725.179909][T14240] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 725.216365][T14240] bond7: (slave ip6gre1): making interface the new active one [ 725.241668][T14240] ip6gre1: entered promiscuous mode [ 725.257718][T14240] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 725.272279][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.299659][T14253] syzkaller1: entered promiscuous mode [ 725.314308][T14253] syzkaller1: entered allmulticast mode [ 725.437658][T14271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14036'. [ 725.473969][T14271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14036'. [ 725.500685][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14038'. [ 725.521609][T14278] netlink: 'syz.3.14038': attribute type 30 has an invalid length. [ 725.551898][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14038'. [ 725.817934][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14048'. [ 725.957012][T14325] loop3: detected capacity change from 0 to 512 [ 726.006735][T14325] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.14052: bg 0: block 5: invalid block bitmap [ 726.048903][T14325] loop3: lost filesystem error report for type 5 error -117 [ 726.049977][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 726.055760][T14325] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 726.060287][ C0] EXT4-fs (loop3): initial error at time 1781218567: ext4_validate_block_bitmap:432 [ 726.091766][ C0] EXT4-fs (loop3): last error at time 1781218567: ext4_validate_block_bitmap:432 [ 726.094444][T14325] loop3: lost filesystem error report for type 5 error -117 [ 726.126097][T14325] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.14052: invalid indirect mapped block 3 (level 2) [ 726.209082][T14325] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 726.209753][T14325] EXT4-fs (loop3): 2 truncates cleaned up [ 726.257413][T14325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 726.377150][ T1150] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.094163][T14390] netlink: 'syz.4.14079': attribute type 3 has an invalid length. [ 727.102449][T14390] netlink: 'syz.4.14079': attribute type 4 has an invalid length. [ 727.115021][T14390] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.14079'. [ 727.235115][T14396] loop2: detected capacity change from 0 to 8192 [ 727.281735][T14396] loop2: p1 p2 p3 p4 [ 727.286746][T14396] loop2: p1 start 16777216 is beyond EOD, truncated [ 727.293741][T14396] loop2: p2 start 268435456 is beyond EOD, truncated [ 727.307246][T14396] loop2: p4 size 33554432 extends beyond EOD, truncated [ 727.323682][T14407] tipc: New replicast peer: 172.30.0.1 [ 727.360023][T14407] tipc: Enabled bearer , priority 10 [ 727.374440][T14405] net_ratelimit: 509 callbacks suppressed [ 727.374461][T14405] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 727.386651][T14405] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 727.402831][T14410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14087'. [ 727.412637][T14410] tipc: Disabling bearer [ 727.501705][ T8777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.699169][T14433] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 727.959512][T14436] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 728.010184][T14451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.018649][T14451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.028133][T14451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.037803][T14451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.051273][T14451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.061007][T14451] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.025568][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14115'. [ 729.295165][T14491] loop4: detected capacity change from 0 to 512 [ 729.342518][T14491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 729.380600][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 729.380640][ T28] audit: type=1400 audit(1781218570.952:18228): avc: denied { write } for pid=14490 comm="syz.4.14123" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 729.451059][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.783050][T14524] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 730.523044][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14142'. [ 730.532696][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14142'. [ 730.593043][T14548] netlink: 'syz.0.14144': attribute type 1 has an invalid length. [ 730.611362][T14548] bond8: entered promiscuous mode [ 730.622779][T14548] 8021q: adding VLAN 0 to HW filter on device bond8 [ 730.650617][T14552] 8021q: adding VLAN 0 to HW filter on device bond8 [ 730.674150][T14552] bond8: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 730.713818][ T28] audit: type=1400 audit(1781218572.262:18229): avc: denied { setopt } for pid=14553 comm="syz.4.14145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 730.738021][T14552] bond8: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 730.769754][T14552] bond8: (slave ip6gre2): making interface the new active one [ 730.785679][T14552] ip6gre2: entered promiscuous mode [ 730.801500][T14552] bond8: (slave ip6gre2): Enslaving as an active interface with an up link [ 730.819691][T14558] tipc: Started in network mode [ 730.824815][T14558] tipc: Node identity ac14140f, cluster identity 4711 [ 730.831901][T14558] tipc: New replicast peer: 172.30.0.5 [ 730.838199][T14558] tipc: Enabled bearer , priority 10 [ 730.851673][T14561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14148'. [ 730.866870][T14561] tipc: Disabling bearer [ 731.011115][T14563] SELinux: failed to load policy [ 731.259455][T14598] netlink: 'syz.0.14166': attribute type 12 has an invalid length. [ 731.268522][T14598] netlink: 'syz.0.14166': attribute type 29 has an invalid length. [ 731.278029][ T28] audit: type=1326 audit(1781218572.852:18230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14599 comm="syz.1.14167" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0191b4ce59 code=0x0 [ 731.292021][T14598] netlink: 148 bytes leftover after parsing attributes in process `syz.0.14166'. [ 731.320807][T14598] netlink: 'syz.0.14166': attribute type 1 has an invalid length. [ 731.343461][T14598] netlink: 'syz.0.14166': attribute type 1 has an invalid length. [ 731.351566][T14598] netlink: 'syz.0.14166': attribute type 2 has an invalid length. [ 731.360211][T14604] netlink: 'syz.0.14166': attribute type 12 has an invalid length. [ 731.383922][T14604] netlink: 'syz.0.14166': attribute type 29 has an invalid length. [ 731.394382][T14604] netlink: 148 bytes leftover after parsing attributes in process `syz.0.14166'. [ 731.403737][T14604] netlink: 'syz.0.14166': attribute type 1 has an invalid length. [ 731.412013][T14604] netlink: 'syz.0.14166': attribute type 1 has an invalid length. [ 731.906615][ T28] audit: type=1326 audit(1781218573.472:18231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14626 comm="syz.4.14178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e816ce59 code=0x7ffc0000 [ 731.936938][T14627] loop4: detected capacity change from 0 to 512 [ 731.960927][T14627] EXT4-fs: Ignoring removed i_version option [ 732.003962][ T28] audit: type=1326 audit(1781218573.472:18232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14626 comm="syz.4.14178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e816ce59 code=0x7ffc0000 [ 732.042133][ T28] audit: type=1326 audit(1781218573.472:18233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14626 comm="syz.4.14178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6e816ce59 code=0x7ffc0000 [ 732.068405][ T28] audit: type=1326 audit(1781218573.472:18234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14626 comm="syz.4.14178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd6e816ce59 code=0x7ffc0000 [ 732.111878][T14627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.134654][T14627] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 732.169279][ T28] audit: type=1326 audit(1781218573.472:18235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14626 comm="syz.4.14178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd6e816cbc2 code=0x7ffc0000 [ 732.195228][ T28] audit: type=1326 audit(1781218573.512:18236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14626 comm="syz.4.14178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd6e812d68e code=0x7ffc0000 [ 732.221335][ T28] audit: type=1326 audit(1781218573.512:18237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14626 comm="syz.4.14178" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd6e816cc87 code=0x7ffc0000 [ 732.688439][ C1] net_ratelimit: 17 callbacks suppressed [ 732.688454][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.180067][ T8809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.247103][T12184] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.293734][T14660] bridge0: entered promiscuous mode [ 733.304312][T14660] bridge0: entered allmulticast mode [ 733.571035][T14684] bond1: entered promiscuous mode [ 733.576477][T14684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 733.609393][T14684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 733.628696][T14684] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 733.644643][T14684] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 733.656452][T14684] bond1: (slave ip6gre1): making interface the new active one [ 733.664148][T14684] ip6gre1: entered promiscuous mode [ 733.671429][T14684] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 734.045733][T14720] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 734.091527][T14720] SELinux: failed to load policy [ 734.114356][T14726] SELinux: failed to load policy [ 734.136480][T14731] netlink: 72 bytes leftover after parsing attributes in process `syz.4.14222'. [ 734.220771][T14738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14226'. [ 734.371318][ T8798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.336033][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14245'. [ 735.347552][T14767] loop2: detected capacity change from 0 to 512 [ 735.374381][T14767] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 735.418389][T14774] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.14239'. [ 735.441462][T14767] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 735.472779][T14767] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.14238: Corrupt directory, running e2fsck is recommended [ 735.510495][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.547645][T14767] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 735.572595][T14767] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.14238: corrupted in-inode xattr: e_name out of bounds [ 735.602989][T14767] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 735.603251][T14767] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.14238: couldn't read orphan inode 15 (err -117) [ 735.612648][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 735.612686][ C0] EXT4-fs (loop2): initial error at time 1781218577: ext4_iget_extra_inode:5128: inode 15 [ 735.612727][ C0] EXT4-fs (loop2): last error at time 1781218577: ext4_iget_extra_inode:5128: inode 15 [ 735.731367][T14767] loop2: lost filesystem error report for type 5 error -117 [ 735.732006][T14767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 735.806854][T14807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14254'. [ 735.816781][ T1478] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.881879][T14812] ref_ctr_offset mismatch. inode: 0xf83 offset: 0x0 ref_ctr_offset(old): 0x300000000000000 ref_ctr_offset(new): 0x0 [ 735.964481][ T8798] Bluetooth: hci0: Frame reassembly failed (-84) [ 736.012479][T14828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.023284][T14828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.031691][T14828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.042779][T14828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.051443][T14828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.060126][T14828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.102358][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 736.102375][ T28] audit: type=1400 audit(1781218577.672:18271): avc: denied { write } for pid=14821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.168008][ T28] audit: type=1400 audit(1781218577.732:18272): avc: denied { write } for pid=14838 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.221085][T14843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14263'. [ 736.345142][ T28] audit: type=1400 audit(1781218577.912:18273): avc: denied { write } for pid=14845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.395364][ T28] audit: type=1400 audit(1781218577.962:18274): avc: denied { write } for pid=14866 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.498144][T14870] ================================================================== [ 736.506288][T14870] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 736.515002][T14870] [ 736.517355][T14870] write to 0xffff8881041ee160 of 8 bytes by task 14869 on cpu 0: [ 736.525097][T14870] shmem_file_splice_read+0x40e/0x5a0 [ 736.530511][T14870] splice_direct_to_actor+0x26e/0x670 [ 736.535962][T14870] do_splice_direct+0x119/0x1a0 [ 736.540849][T14870] do_sendfile+0x382/0x650 [ 736.545294][T14870] __x64_sys_sendfile64+0x105/0x150 [ 736.550513][T14870] x64_sys_call+0x2dc4/0x3020 [ 736.555218][T14870] do_syscall_64+0x12c/0x3b0 [ 736.559892][T14870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.565821][T14870] [ 736.568166][T14870] write to 0xffff8881041ee160 of 8 bytes by task 14870 on cpu 1: [ 736.575901][T14870] shmem_file_splice_read+0x40e/0x5a0 [ 736.581409][T14870] splice_direct_to_actor+0x26e/0x670 [ 736.586818][T14870] do_splice_direct+0x119/0x1a0 [ 736.591694][T14870] do_sendfile+0x382/0x650 [ 736.596133][T14870] __x64_sys_sendfile64+0x105/0x150 [ 736.601461][T14870] x64_sys_call+0x2dc4/0x3020 [ 736.606183][T14870] do_syscall_64+0x12c/0x3b0 [ 736.610818][T14870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.616739][T14870] [ 736.619077][T14870] value changed: 0x0000000000001754 -> 0x000000000000175c [ 736.626200][T14870] [ 736.628543][T14870] Reported by Kernel Concurrency Sanitizer on: [ 736.634715][T14870] CPU: 1 UID: 0 PID: 14870 Comm: syz.4.14268 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 736.645779][T14870] Tainted: [W]=WARN [ 736.649676][T14870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 736.659737][T14870] ================================================================== [ 736.756815][ T28] audit: type=1400 audit(1781218578.322:18275): avc: denied { write } for pid=14871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.800906][ T28] audit: type=1400 audit(1781218578.372:18276): avc: denied { write } for pid=14882 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.916810][ T28] audit: type=1400 audit(1781218578.482:18277): avc: denied { write } for pid=14884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.962896][ T28] audit: type=1400 audit(1781218578.532:18278): avc: denied { write } for pid=14895 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.086570][ T28] audit: type=1400 audit(1781218578.652:18279): avc: denied { write } for pid=14897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.133267][ T28] audit: type=1400 audit(1781218578.702:18280): avc: denied { write } for pid=14908 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.769702][ T8798] net_ratelimit: 18 callbacks suppressed [ 737.769778][ T8798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.029573][ T4314] Bluetooth: hci0: command 0x1003 tx timeout [ 738.029578][ T3628] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 738.889789][ T8781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.989681][ T8809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.099766][ T8809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.199834][ T8809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.330179][ T8798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.459706][ T8798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.559728][ T8809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog