last executing test programs: 1m56.756042706s ago: executing program 2 (id=325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x20, 0x4, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4840}, 0x4000810) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x820, 0x2, 0x1000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xec24b4d765ad312c) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@getrule={0x14, 0x22, 0x200, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8044) epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0xd8, 0xa54e) ioprio_set$pid(0x1, 0x0, 0x6000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f00000001c0)) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x6, {{0xa, 0x4e1d, 0x8000, @mcast2, 0xffffffff}}, {{0xa, 0x400, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r6, &(0x7f00000007c0)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r10, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000400)=0x0) sched_setscheduler(r11, 0x2, &(0x7f0000000480)=0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="16000000feffff0ae10000", @ANYBLOB="0600"/20, @ANYBLOB="000000000400"/28, @ANYRESDEC=r0, @ANYRES32=r10, @ANYRES64=0x0, @ANYBLOB="33e14a92d3ed912cf71ad50852967bcfe53496fc9515ec7e2b879b53efa17e8e1d97fe638241", @ANYRESDEC=r10], 0x50) 1m56.696636748s ago: executing program 2 (id=327): r0 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x62, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0xf, 0x7d, {0x7d, 0xd, "f86687d64b04755d9e21c3dfa4a815d85d591eb31b10b008c24135c1813a2aaaa3e11b6167e6d086029ba65311a35f57a72856152b1b7364c59d14fca2ae278260f92bc7b78a60786b5b06717935d4adfc6f1d3a9c51376db52c20412b1c209bb112c3a90481878ca47a8b56f98d178d7f1eb01bfe99a430e5de73"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x0, 0xa, 0x85, "af1f90b8d163b380fbd056a40f275b40802466e477bbbbf562ae25642b7c407ce621d7241f01d3ffa877f9eb1eb27fcfb7ddcefbc304b3b43497427837c43f51780e94bb8f8969069d34ffc7c736ecb6f7acc05ba1d319a4f571ebdb7302a5c79b003552793181c37251a73ef7c257993b63fac509c2eedc9b754c9e680fac943b09ad05f0"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xf3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)=ANY=[@ANYBLOB="f30505000000feb6863bdb"], &(0x7f0000000400)={0x40, 0x5, 0x4, "88b57480"}}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x9}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r1, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3, @remote, 0x5}, 0x80, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x4c810) bind$netlink(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xffffffffffffffff, 0xc}, 0x10c0f8, 0x0, 0x0, 0x5, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x80002, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r3) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005a000100fcffff"], 0x1c}}, 0x4000074) fallocate(0xffffffffffffffff, 0x3, 0x8000c65, 0x8000c62) 1m54.350212553s ago: executing program 2 (id=333): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg$sock(r4, &(0x7f0000002840)=[{{&(0x7f0000000600)=@can={0x1d, r3}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000680)="f91e31b6f783648e18", 0x9}], 0x1}}], 0x1, 0x40050) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg$sock(r5, &(0x7f0000002840)=[{{&(0x7f0000000600)=@can={0x1d, r1}, 0x80, 0x0}}], 0x1, 0x40050) 1m54.013676434s ago: executing program 2 (id=334): set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000500)='autofs\x00', 0x0, &(0x7f0000000280)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18(\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x97\xda8\xc8\xd0\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf89S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88N\xb5\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p)1\x00u\xa5\x8c\n\x91l\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]\xc6\x0f\x9a\xf5)g\x8c\x98\x9e\xe6\x9b\xbd\x96\xc3\xb6}3\x98r\\.o\xe0\xee\x1d\x80\x0f\x8c\xa0%>]\x9a{=\xdd\x80\x13.\x96\xf9]u\x96P\xdb+A\xaa\xce\x9dP\xde\v\x16\x1d\x05\xbe\xd3\x8c\x99\xb2\x1b\xccX\xfdy\x05\xb0Q]bB') ioperm(0x0, 0x1, 0x1) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024", @ANYBLOB="97b61e88553572fd2efdef5bcdc603f5cf17a49bf1d8457078ace3df30c7c941b1103b86953f4b1b43816a58622af5d511ff04c37a8893dc5ea494888e218c88326783f69ee710da511f74fe812d33a93825fb7eb8eca7196d483f5689286f28bf447eca9c6676aad40948ce1a2154e82ce6ecb85f76965d75d05e46"], 0xfe, 0x2dd, &(0x7f0000000bc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) getdents(r0, 0xfffffffffffffffd, 0xbb) ioperm(0x8, 0x3, 0x9) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ioperm(0x0, 0x40, 0x0) 1m52.798692523s ago: executing program 2 (id=340): r0 = eventfd2(0x3efbda00, 0x800) write$eventfd(r0, &(0x7f0000000140)=0x260, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') write$sndseq(r1, &(0x7f00000003c0)=[{0xb, 0x6, 0x0, 0x3, @time={0x80000001, 0x3}, {0x0, 0xa}, {0x6, 0xff}, @queue={0x4, {0x4a, 0x5}}}, {0x0, 0x4, 0xb9, 0x6, @time={0xffffffff, 0x2c1}, {0x3, 0x3}, {0x8, 0x81}, @time=@time={0x7, 0x1}}, {0x9, 0xd3, 0xe, 0x0, @tick=0x4, {0x10, 0x4}, {0x2, 0x4}, @control={0x3, 0x565c, 0x5}}], 0x54) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000090180ffff00fdff34eb2aa3d03dd0c8a4fcc6279a89ff90b5305c0009", @ANYRES32=r1, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x7fffffff, 0x6b, &(0x7f0000000080)=""/107, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x1, 0x80, 0xa14}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x5, 0x4, 0xc, 0x8}], 0x10, 0x6}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000001c0)={0x81, 0x6, 0x3, 0x7}, 0x8) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xecb0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) unshare(0x10000400) 1m52.455043724s ago: executing program 2 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r5 = open(&(0x7f0000000340)='./file1\x00', 0x14b27e, 0x6) fallocate(r5, 0x0, 0x9, 0x41001f3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) splice(r6, 0x0, r6, 0x0, 0xffffffffffffff56, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) move_pages(r7, 0x6, &(0x7f00000001c0)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0) 1m52.370903327s ago: executing program 32 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r5 = open(&(0x7f0000000340)='./file1\x00', 0x14b27e, 0x6) fallocate(r5, 0x0, 0x9, 0x41001f3) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) splice(r6, 0x0, r6, 0x0, 0xffffffffffffff56, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) move_pages(r7, 0x6, &(0x7f00000001c0)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0) 1m39.064819123s ago: executing program 5 (id=386): socket$kcm(0x21, 0x2, 0x2) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000540)={0xc, 0x6, 0x42, 0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0x5}, 0x10}, 0x94) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 1m37.435499126s ago: executing program 5 (id=394): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) get_mempolicy(0x0, 0xfffffffffffffffe, 0x7, &(0x7f0000555000/0x1000)=nil, 0x3) 1m37.285213531s ago: executing program 5 (id=396): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000017000200400006803c00040067636d2861657329000000000000000041e0bf0000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198962936917"], 0x54}, 0x1, 0x0, 0x0, 0x20004}, 0x4000004) 1m37.147170335s ago: executing program 5 (id=398): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket(0x6, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x833a1000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) tkill(r1, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a01000000000061114c0000000000850000000200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8000080}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x1) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@deltaction={0xdc, 0x31, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'sample\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x32, 0x3, 0x5}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd5}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbedit\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000ff}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@migrate={0xec, 0x21, 0x409, 0x70bd2d, 0x25dfdbfd, {{@in=@empty, @in=@loopback, 0x4e22, 0x7f, 0x4e21, 0xb, 0xa, 0x0, 0x0, 0x32}, 0x6e6bb0, 0x2}, [@migrate={0x9c, 0x11, [{@in=@empty, @in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast2, 0xff, 0x2, 0x0, 0x3506, 0xa, 0x2}, {@in6=@empty, @in=@multicast2, @in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x6c, 0x1, 0x0, 0x0, 0xb, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20008000}, 0x94) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 1m36.251048844s ago: executing program 5 (id=408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x800}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000340)=0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x10, 0x7c, 0x6, 0x4, 0x0, 0x1, 0x40009, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x8000000000000000, 0x9}, 0x100041, 0x0, 0x1, 0x0, 0x1, 0x709, 0x9, 0x0, 0x3, 0x0, 0x6}, r10, 0xb, 0xffffffffffffffff, 0x2) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xfe58}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m35.831114597s ago: executing program 5 (id=414): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002180)={r1}, 0x4) process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 1m35.830333347s ago: executing program 33 (id=414): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002180)={r1}, 0x4) process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 17.275590556s ago: executing program 4 (id=916): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffe, 0x0, @loopback, 0x10080bff}, @ib={0x1b, 0x1000, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x7ffffffffffffffe, 0x7, 0x4}}}, 0x118) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 12.291606256s ago: executing program 4 (id=939): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) utime(0x0, 0xfffffffffffffffc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000300)={@id={0x2, 0x0, @auto="b9808e3e3ba8bd5e3feec4605bfc539f"}}) r1 = syz_open_dev$usbfs(0x0, 0x76, 0x109a41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000800000000000000000008500000060000000850000008800000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000280)=@int=0x1, 0x4) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB=' \x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) listen(r0, 0xfffffffc) open$dir(&(0x7f0000000180)='./file0\x00', 0x40000, 0x9) r4 = socket$netlink(0x10, 0x3, 0xf) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r4) 12.084614212s ago: executing program 4 (id=940): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmmsg$sock(r2, &(0x7f0000002840), 0x0, 0x40050) 12.007231805s ago: executing program 4 (id=941): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32=r2, @ANYBLOB="803a5981f93cfd78714e1de6adf4aafc042ee95768461071ad4fe83b7d97a9e0a14f02931d579a6bbec2289ca50e0000000000000000cfad00b7813a149648b208e8977d742e4915d944c7c6fb70e2484a2340cb9c2894926c32ef77ed923a851bd87dc18de73bc0ca4ff35e1667755f0d813c5080605893ddfddda2f5c7147a9ec391bb1dd43a416581b4d3b2b0567c324344bd91f06314243ad1925b50f79628866ba2e92647f2c5691d84930cc15bfe8cc02c740248606322bed6439b4752e08da8a1644bc5d1dd7fe136750da6b0a28c7aa92f10c48660b9bd72ec34ec09e1b3983f15b08e75ab5f74304a2d4d2ceb295c1d128206bc6a863203bf2103bc96f334e51ba059e63ff0d5b2f9742ea1007ee63979ce708a0c233ecf7b8c9d2c2a3eb34947d291a9ca626f4a9d1ee66fba270574d6f6709a13d3411c7174fce1fbafdbc36264a44b6e6cfceb3927765a7ba3177712dca25b102de0dd156d65e3e0d8ea461cb1e7ba142d77998d900d3b27be21843ca7eb6d18ecdcbf33c43c"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mlock(&(0x7f000019e000/0xc00000)=nil, 0xc00000) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 11.255150039s ago: executing program 4 (id=944): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) 11.081070625s ago: executing program 3 (id=945): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x4000) syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x394, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x364, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x9, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f, 0x0, 0x0, 0x0, 0x4}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x394}}, 0x0) 10.373353367s ago: executing program 4 (id=949): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffe, 0x0, @loopback, 0x10080bff}, @ib={0x1b, 0x1000, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x7ffffffffffffffe, 0x7, 0x4}}}, 0x118) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 10.342146988s ago: executing program 3 (id=951): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) utime(0x0, 0xfffffffffffffffc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000300)={@id={0x2, 0x0, @auto="b9808e3e3ba8bd5e3feec4605bfc539f"}}) r1 = syz_open_dev$usbfs(0x0, 0x76, 0x109a41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000800000000000000000008500000060000000850000008800000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000280)=@int=0x1, 0x4) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB=' \x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) listen(r0, 0xfffffffc) open$dir(&(0x7f0000000180)='./file0\x00', 0x40000, 0x9) r4 = socket$netlink(0x10, 0x3, 0xf) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r4) 10.048993988s ago: executing program 3 (id=952): r0 = socket(0x1e, 0x805, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r2}, 0x14) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x8084) sendmsg$kcm(r0, &(0x7f0000001c00)={&(0x7f00000006c0)=@nfc_llcp={0x1e, 0x0, 0x0, 0x3, 0x5, 0x4, "23d801224f459230c88edd26212f64d1bdcbf3c303c5c1a8f30b81090a95cdf5cbc66aa1f1efcf83bf88d0362e48d0f1e9991e41572d2f11bde194a51197ff"}, 0x80, 0x0, 0x0, &(0x7f0000001ac0)=ANY=[], 0x120}, 0x4040080) 9.417178628s ago: executing program 6 (id=957): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getrlimit(0x8, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000180)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x9c8, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7fff}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000300f8ffff13000000000000002900000043"], 0x30}}], 0x1, 0x240080c1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r9, 0x110, 0x1, 0x0, 0x0) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.4346048s ago: executing program 3 (id=958): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000fedbdf250a001400000000080f21010014000200fc020000"], 0x4c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000040400000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000240fc020000000000000000000000005b"], 0x5c}}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"], 0xfc}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) 6.390722535s ago: executing program 3 (id=959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x98, 0x2, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xaa}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xe0}]}}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040880}, 0x0) 5.318394639s ago: executing program 3 (id=963): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$eJzs3V9rW+UfAPDvSZv9//3WwRgqIgUvnMyla+ufCV7Max0O9H6WNiuj6TKadKx14HbhrmV4oTgQLwXx2svhG/DC1zBQYcgoeuFN5KQnWdombbqlaTSfD5zyPOec9Hm+ec7z5Dl5EhLA0BpP/+Qino+Iz5OI4xGRZMdGIzs4vn7e2uNbs+mWRK324R9J/bw03/hfjccdzTLPRcRPn0WcyW0tt7KyujBTKhWXsvxEdfH6RGVl9ezVxZn54nzx2tT09Pk3pqfefuvNnsX66qW/vvrgwUiWO3EviQtxLMu1xvEMbrdmxmM8e07ycWHTiZM9KGyQJG33/tD3erA7I1k/z0c6BhyPkazXA/99n0ZEDRhSya77/y/5vakJ0F+NeUDj3n7n++Dv+jAr6Z9H767fAG2Nf3T9vZE4FPn4Mo6sJRvujNL73bEelJ+W8eNv9++lW/TufQiAHd2+ExHnRke3jn9JNv49vXNdnLO5DOMf9M+DdP7zWrv5T645/0ltnv8cbdN3n8bO/T830oNiOkrnf++0nf82F63GRrLc/+pzvnxy5WqpmI5t/4+I05E/mOa3W885v/aw1ulY6/wv3dLyG3PBrB6/jx7c+Ji5merMs8Tc6tGdiBfazn+TZvsnbdo/fT4udVnGqeL9lzod2zn+vVX7NuKVtu3/ZEUr2X59cqJ+PUw0roqt/rx76udO5e93/Gn7H9k+/rGkdb22svsyvjn0dzGa68kbbYg/ur/+DyQf1dMHsn03Z6rVpcmIA8n7zf25xv6pJ49t5Bvnp/Gffnn78a/d9X84Ij7uMv67J79/sdOxQWj/ubbt37y73dT+HRONC2bLoYfvffJ1dqy2eSDsbvx7vZ46ne3pZvxrU8GkXRDP9OQBAAAAAADAgMlFxLFIcoVmOpcrFNY/33EyjuRK5Ur1zJXy8rW5qH9XdizyucZK9/GWz0NMZiuGjfzUpvx0RJyIiC9GDtfzhdlyaW6/gwcAAAAAAAAAAAAAAAAAAIABcbTD9/9Tv+7pLy8AA8FPfsPw2rH/9+KXnoCB5PUfhpf+D8Nrl/0/2at6AP3n9R+Gl/4Pw0v/h+HV0v8X9rMeQP95/QcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunTxYrrV1h7fmk3zczdWlhfKN87OFSsLhcXl2cJseel6Yb5cni8VC7PlxZ3+X6lcvj45Fcs3J6rFSnWisrJ6ebG8fK16+erizHzxcjHfl6gAAAAAAAAAAAAAAAAAAADg36WysrowUyoVlyQknioxOhjV6CoRuYiWPQf3uz6DnNjvkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnvgnAAD//64qL2Y=") socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x1000, 0x0, 0xfffffffc}, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000005c0), 0x3f, r0}, 0x38) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x2) 4.36105834s ago: executing program 6 (id=964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0xf0, 0x0, 0x1}]}}, "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"}}, 0xfce) syz_emit_ethernet(0x68, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x10, [], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x22eb, 0xfffffffc, {{}, 0x2, {0x8, 0x6}}}}}}}}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a01"], 0x24}}, 0x0) 4.123152747s ago: executing program 0 (id=966): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x3, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x9, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f, 0x0, 0x0, 0x0, 0x4}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) 4.122868458s ago: executing program 6 (id=967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e21, 0x1, @mcast1, 0x9}, 0x1c) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r2) openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) fcntl$setstatus(r2, 0x4, 0x2c00) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x128, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x5}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_STAB={0x6c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x0, 0x4, 0x9c1, 0x1, 0x3, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x1, 0xcd, 0xee5, 0xff, 0x1, 0x7, 0xf}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x2, 0x9, 0x7, 0x2, 0x600, 0x3ff, 0x3}}, {0xa, 0x2, [0x6, 0x3, 0x200]}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_bond\x00', 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@deltfilter={0x68, 0x2d, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc, 0xffff}, {0xa, 0xc}, {0xf, 0xd}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xfff1, 0xb}}, @TCA_BPF_FD={0x8, 0x6, r2}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000306050000000000000000000200000850e33a3ee143fb380900020073796ccd2e4783ddb4abae6b"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sync() r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) 3.973589473s ago: executing program 0 (id=968): ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'veth0_macvtap\x00', 0x800}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2bc, &(0x7f0000000580)="$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") r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x80, 0x8}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x4004e01110e0ab67}, 0x0, 0x8, r5, 0x0) close(0x4) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa19, &(0x7f0000000d00)="$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") r6 = dup(0xffffffffffffffff) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40603d07, &(0x7f0000000000)={0xfffffffe, 0xc}) socket$pppl2tp(0x18, 0x1, 0x1) 2.547490418s ago: executing program 6 (id=970): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) utime(0x0, 0xfffffffffffffffc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000300)={@id={0x2, 0x0, @auto="b9808e3e3ba8bd5e3feec4605bfc539f"}}) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x109a41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000800000000000000000008500000060000000850000008800000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000280)=@int=0x1, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB=' \x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) listen(0xffffffffffffffff, 0xfffffffc) open$dir(&(0x7f0000000180)='./file0\x00', 0x40000, 0x9) r3 = socket$netlink(0x10, 0x3, 0xf) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) 2.297801716s ago: executing program 0 (id=971): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getrlimit(0x8, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000180)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x9c8, @dev={0xfe, 0x80, '\x00', 0x12}, 0x7fff}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000300f8ffff13000000000000002900000043"], 0x30}}], 0x1, 0x240080c1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, 0x0, 0x0) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.143314731s ago: executing program 6 (id=972): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x812080, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x10817, &(0x7f00000008c0)={[{@i_version}, {@nogrpid}, {@bh}, {@noblock_validity}, {@quota}], [{@subj_type}, {@dont_measure}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x1) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bond_slave_1\x00', 0x10) sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="280000000000000029000000020000006b210acfeda5a0d6c477d874f77fffff17"], 0x28}}], 0x1, 0x4000000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='dirsync\x00', &(0x7f0000000100)='./file0/file0\x00', r2) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r5, &(0x7f0000000480)=""/177, 0xb1, 0xe0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {0x13}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000a00)=ANY=[@ANYBLOB="900000004287951aa8744c7ba45ccce93da23b5c713683ab488da3d28e5dac9abd589feaa9733590740109b1707f6ea506a72a2c4e1469f78232c17d24ba1ed15243e9e8ef1f6e03e9f49977d1926bfcfff4002158f2ec69f15cc4c762767d09b287cf4afbb80bf42ffcd09ab0b4b33191b31046c3caa4fc1c34724636aee05fec7de31efd089ec4bd1736c2d0bc881c2693", @ANYRES16=r7, @ANYBLOB="00082dbd7000fddbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b00ff030000060011000000000008001500ffff0000000001006e657464657673696d000000000002006e657464657673696d300000f8fd03000300000008000b000300000006001100ffff00000800150008000000"], 0x90}, 0x1, 0x0, 0x0, 0x8084}, 0x8010) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r8, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r8, r8, 0x0, 0x7a680000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_create_resource$binfmt(0x0) 2.142460781s ago: executing program 1 (id=973): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0x98, 0x2, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xaa}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xe0}]}}, @CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040880}, 0x0) 1.087162155s ago: executing program 1 (id=974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast1, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x21, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x8c, 0x20}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x800) 1.086875855s ago: executing program 6 (id=975): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0xe, &(0x7f0000000080)={[{@resuid}, {@errors_remount}, {@acl}, {@usrquota}]}, 0x1, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) r1 = socket(0x2b, 0x1, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getpgid(0x0) r2 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1000002}, 0x1101, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f4070009", 0xe) listen(r1, 0x5) setsockopt$inet_tcp_int(r1, 0x6, 0x17, 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) listen(r3, 0x50) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet6(0xa, 0x2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 879.272222ms ago: executing program 1 (id=976): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="880000001000ffff263d7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba00180a04006000128009000100766c616e00000000500002800600010004000000100003800c000100c000000004000000340004800c00010000000000060000000c0001000b000000f1ffffff1a00010000009145ae423f6a648b00000000e0441b8573601b178228f54180124318812844b57c8d0fb6b759338e9a4106c293591116632e7b2e695c4454b782fc1423ddadaffc6138979cd08866785d777ca2382d6512ed5282f2ba652cf6b3dddcf59fbdca06b0b91673a4e2b4272bb3d99310e9b3", @ANYRES32=r2, @ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) 752.344096ms ago: executing program 1 (id=977): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb, 0x9, 0x0, 0x1, 0x4100}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 383.852448ms ago: executing program 0 (id=978): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x3, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x9, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1f, 0x0, 0x0, 0x0, 0x4}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 230.192432ms ago: executing program 1 (id=979): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x5}, 0x10c0e8, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000001400078008000840000000000800174000000004050005000a000000050001000700000005000400000000000900020073513d31000000000d0003006c6973743a736574"], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008114) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 191.373913ms ago: executing program 1 (id=980): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f646f74732c646f733178666c6f7070792c646f74732c6e6f646f74732c6e6f646f74732c666c7573682c6e66733d6e6f7374616c655f726f2c646f74732c646f74732c00d4a846633f09dc68a058c949de25d955883e6c0c9f3df385846071bb1bf9e0ae5f621e9cc98ce9fee7"], 0x1, 0x159, &(0x7f00000004c0)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080)) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x2}, 0xff2c}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010800000000000000000a00000008000240000000010900010073797a300000000014ba0000001100010000000000000000000200000a"], 0x50}}, 0x0) 176.932274ms ago: executing program 0 (id=981): socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r0, &(0x7f0000000ec0)=""/4096, 0x1000) socket$pptp(0x18, 0x1, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000200)=[{0x80000006, 0x66, 0x0, 0x30}]}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="300000002e00030500"/20, @ANYRES32], 0x30}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xd, 0x9, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r6, 0x0, 0x20000000}, 0x20) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002700)=""/4087, 0xff7}, {0x0}, {0x0}, {&(0x7f0000000340)=""/51, 0x33}, {0x0}, {&(0x7f00000016c0)=""/198, 0xc6}], 0x6}, 0x32120) close(0x4) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_attach_bpf(r8, 0x10e, 0xb, &(0x7f0000000180), 0x4) 0s ago: executing program 0 (id=982): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r1 = syz_clone(0x100000, &(0x7f0000000080)="ff9fcd05996633b4814195cee6a6370b09fce5ccc50bb8ba6b80edb52e273898990def0ee8108247e3816ddfaa853934aad0c31684836981fe0994c753db45b84dcb84c4ccc77c915c2a7aa23a752b88f8f90fbeda3603f4bdb57b4f1fcd353a30dcd06c7072", 0x66, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="419b06ab38fa1344c278ecd93fc97d77f88aab15a22cbcbfb5939aaeb5ddf648f999b4bd58a512e484cb5e2a2223db4f9867225f64a5c4289440d7d8429fbbecbae7cf42fefcc9f2e1bc78e2a4f4cddbce76d5b16ecb1e182d037170bed65591044f") ptrace$setregs(0xf, r1, 0x8, &(0x7f00000013c0)="f71079895809fa3ffa78e3dae0d36f7b70f6bbb28b268ea61647726781bf585aa629899b484d286e620d929a4af594cd0f7376ff22ad90da4673eeb135c9e35b460ebbaae7ee8e996e5c8a129d8dd16ea2d7bc8bab129b3383177fa725f19a8345585fd9db314a14425316b51b521b8458dfe205c5d88a67b71490d420b16191cf61038a9b91cb12862b16e89130f028700e2e1312dc08c64f975761a8eca2a5b1469246c79cdb829e0d227b59b5c84eec5ecab5cb1d0192cff58556b8199a1a887621b3d0ac7a05bb7fa34bc7714e656684121ba055e648a5d7a204ae992e9a4767af4a9211f082f09f5b39bf") bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000040), 0x4) recvmmsg(r0, &(0x7f0000005780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/4096, 0x1000}}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$inet6(0xa, 0xa, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x2, 0x0, {}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x2, 0x0, {}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) kernel console output (not intermixed with test programs): 8/2026 [ 65.477000][ T4111] Call Trace: [ 65.477007][ T4111] [ 65.477082][ T4111] __dump_stack+0x1d/0x30 [ 65.477113][ T4111] dump_stack_lvl+0x95/0xd0 [ 65.477134][ T4111] dump_stack+0x15/0x1b [ 65.477155][ T4111] should_fail_ex+0x263/0x280 [ 65.477205][ T4111] should_failslab+0x8c/0xb0 [ 65.477254][ T4111] kmem_cache_alloc_noprof+0x66/0x3f0 [ 65.477289][ T4111] ? security_inode_alloc+0x37/0x100 [ 65.477319][ T4111] security_inode_alloc+0x37/0x100 [ 65.477394][ T4111] inode_init_always_gfp+0x4a0/0x4e0 [ 65.477432][ T4111] ? __pfx_sock_alloc_inode+0x10/0x10 [ 65.477541][ T4111] alloc_inode+0x58/0x170 [ 65.477595][ T4111] __sock_create+0x120/0x580 [ 65.477631][ T4111] ? mutex_lock+0x57/0x90 [ 65.477654][ T4111] ? mutex_unlock+0x4e/0x90 [ 65.477750][ T4111] ? fput+0x8f/0xc0 [ 65.477774][ T4111] __sys_socket+0xaf/0x180 [ 65.477842][ T4111] __x64_sys_socket+0x3f/0x50 [ 65.477872][ T4111] x64_sys_call+0x11fc/0x3020 [ 65.477899][ T4111] do_syscall_64+0x12c/0x3b0 [ 65.477983][ T4111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.478005][ T4111] RIP: 0033:0x7fd2fe70ce59 [ 65.478022][ T4111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.478042][ T4111] RSP: 002b:00007fd2fd15f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 65.478131][ T4111] RAX: ffffffffffffffda RBX: 00007fd2fe985fa0 RCX: 00007fd2fe70ce59 [ 65.478150][ T4111] RDX: 0000000000000084 RSI: 0000000000000004 RDI: 0000000000000002 [ 65.478173][ T4111] RBP: 00007fd2fd15f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.478186][ T4111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.478204][ T4111] R13: 00007fd2fe986038 R14: 00007fd2fe985fa0 R15: 00007ffd86a88018 [ 65.478223][ T4111] [ 65.482417][ T4111] socket: no more sockets [ 65.498921][ T4109] EXT4-fs: test_dummy_encryption option not supported [ 65.597625][ T4114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 65.834107][ T4117] syz_tun: entered allmulticast mode [ 65.892710][ T4122] loop2: detected capacity change from 0 to 512 [ 65.988473][ T4117] syz_tun: left allmulticast mode [ 66.120284][ T4122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.339107][ T4122] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.395619][ T4130] netlink: 'syz.4.174': attribute type 1 has an invalid length. [ 66.484431][ T4122] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.173: corrupted xattr block 33: invalid header [ 66.512039][ T4134] netlink: 32 bytes leftover after parsing attributes in process `syz.0.177'. [ 66.558654][ T4136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.177'. [ 66.611472][ T4122] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 66.628610][ T4137] 9p: Bad value for 'wfdno' [ 66.650363][ T4130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.691493][ T4122] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.173: corrupted xattr block 33: invalid header [ 66.834286][ T4122] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 66.867733][ T4144] netlink: 92 bytes leftover after parsing attributes in process `syz.0.179'. [ 66.919317][ T4122] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.173: corrupted xattr block 33: invalid header [ 66.940967][ T4144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 67.063261][ T4122] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 67.109280][ T4150] netlink: 'syz.4.181': attribute type 27 has an invalid length. [ 67.754419][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.200292][ T4150] bond0: (slave bond_slave_1): Releasing backup interface [ 68.535243][ T4172] loop3: detected capacity change from 0 to 128 [ 69.607898][ T28] kauditd_printk_skb: 123 callbacks suppressed [ 69.607917][ T28] audit: type=1400 audit(1779444895.888:536): avc: denied { create } for pid=4177 comm="syz.0.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 69.660170][ T4183] netlink: 'syz.0.188': attribute type 2 has an invalid length. [ 70.181665][ T28] audit: type=1400 audit(1779444896.458:537): avc: denied { setopt } for pid=4196 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 70.218679][ T4199] netlink: 64 bytes leftover after parsing attributes in process `syz.2.195'. [ 70.268620][ T28] audit: type=1400 audit(1779444896.488:538): avc: denied { listen } for pid=4196 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 70.304233][ T4202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.197'. [ 70.553202][ T4217] netlink: 44 bytes leftover after parsing attributes in process `syz.3.201'. [ 70.687436][ T4219] netlink: 200 bytes leftover after parsing attributes in process `syz.3.201'. [ 70.746108][ T4219] loop3: detected capacity change from 0 to 1024 [ 70.783693][ T4219] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.795292][ T4218] netlink: 44 bytes leftover after parsing attributes in process `syz.3.201'. [ 70.910297][ T4219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.967459][ T28] audit: type=1400 audit(1779444897.248:539): avc: denied { write } for pid=4216 comm="syz.3.201" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.469445][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.518250][ T28] audit: type=1400 audit(1779444897.358:540): avc: denied { read } for pid=4186 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.543982][ T4231] loop1: detected capacity change from 0 to 2048 [ 71.586248][ T28] audit: type=1400 audit(1779444897.868:541): avc: denied { allowed } for pid=4236 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 71.626608][ T4239] loop3: detected capacity change from 0 to 512 [ 71.654097][ T28] audit: type=1400 audit(1779444897.888:542): avc: denied { remount } for pid=4230 comm="syz.1.203" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.679103][ T4239] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.723623][ T28] audit: type=1400 audit(1779444897.958:543): avc: denied { read write } for pid=4240 comm="syz.1.208" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.733989][ T4243] loop1: detected capacity change from 0 to 512 [ 71.771372][ T4239] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 71.773904][ T28] audit: type=1400 audit(1779444897.958:544): avc: denied { open } for pid=4240 comm="syz.1.208" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 71.790234][ T4248] loop0: detected capacity change from 0 to 128 [ 71.811736][ T28] audit: type=1400 audit(1779444897.998:545): avc: denied { read } for pid=4236 comm="iou-wrk-4237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 71.850763][ T4239] EXT4-fs (loop3): 1 truncate cleaned up [ 71.858336][ T4239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.888213][ T4243] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.906860][ T4243] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.924155][ T4248] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 71.942406][ T4253] loop4: detected capacity change from 0 to 128 [ 71.950638][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.960550][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.988847][ T4253] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.081930][ T4253] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.126700][ T4270] netlink: 44 bytes leftover after parsing attributes in process `syz.2.216'. [ 72.145315][ T4253] netlink: 44 bytes leftover after parsing attributes in process `syz.4.211'. [ 72.165688][ T4271] netlink: 200 bytes leftover after parsing attributes in process `syz.0.214'. [ 72.194711][ T4271] loop0: detected capacity change from 0 to 1024 [ 72.204374][ T4271] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.253941][ T4271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.321098][ T4278] netlink: 200 bytes leftover after parsing attributes in process `syz.2.216'. [ 72.344646][ T4278] loop2: detected capacity change from 0 to 1024 [ 72.389540][ T4278] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.424167][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.448956][ T4278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.471542][ T4282] netlink: 'syz.1.219': attribute type 3 has an invalid length. [ 72.500999][ T4273] loop3: detected capacity change from 0 to 1024 [ 72.516158][ T4282] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 72.635778][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.693871][ T4273] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 72.735066][ T4273] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 72.864341][ T4273] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: inode #32: comm syz.3.217: iget: special inode unallocated [ 72.935345][ T4273] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 72.943826][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 72.960556][ C1] EXT4-fs (loop3): initial error at time 1779444899: ext4_get_journal_inode:5896: inode 32 [ 72.970704][ C1] EXT4-fs (loop3): last error at time 1779444899: ext4_get_journal_inode:5896: inode 32 [ 72.997979][ T4273] EXT4-fs (loop3): no journal found [ 73.095498][ T4273] EXT4-fs (loop3): can't get journal size [ 73.272162][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.298573][ T4273] EXT4-fs (loop3): filesystem is read-only [ 73.311343][ T4273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.475796][ T4273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.217'. [ 73.603474][ T4310] EXT4-fs error (device loop3): ext4_lookup:1777: inode #2: comm syz.3.217: bad inode number: 12 [ 73.962573][ T4322] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 74.011853][ T4323] loop0: detected capacity change from 0 to 512 [ 74.039757][ T4323] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.229: corrupted inode contents [ 74.052958][ T4323] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.053299][ T4323] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.229: mark_inode_dirty error [ 74.062778][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 74.062798][ C1] EXT4-fs (loop0): initial error at time 1779444900: ext4_do_update_inode:5690: inode 16 [ 74.062846][ C1] EXT4-fs (loop0): last error at time 1779444900: ext4_do_update_inode:5690: inode 16 [ 74.101720][ T4323] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.103753][ T4323] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.229: corrupted inode contents [ 74.125414][ T4323] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.125670][ T4323] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.229: mark_inode_dirty error [ 74.147943][ T4323] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.148234][ T4323] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.229: corrupted inode contents [ 74.170420][ T4323] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.170689][ T4323] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 74.188697][ T4323] loop0: lost filesystem error report for type 5 error -117 [ 74.189013][ T4323] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.229: corrupted inode contents [ 74.208801][ T4323] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.212734][ T4323] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.229: mark_inode_dirty error [ 74.233741][ T4323] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.233997][ T4323] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 74.253204][ T4323] loop0: lost filesystem error report for type 5 error -117 [ 74.253733][ T4323] EXT4-fs (loop0): 1 truncate cleaned up [ 74.267859][ T4323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.280795][ T4323] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.334699][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.493687][ T49] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 74.613484][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888126e99600: rx timeout, send abort [ 75.123823][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888126e99600: abort rx timeout. Force session deactivation [ 75.818933][ T4336] netlink: 200 bytes leftover after parsing attributes in process `syz.3.232'. [ 76.248166][ T4340] loop3: detected capacity change from 0 to 1024 [ 76.323221][ T4340] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.395158][ T4340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.496356][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 76.496374][ T28] audit: type=1400 audit(1779444902.778:557): avc: denied { write } for pid=4331 comm="syz.3.232" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.536017][ T4344] netlink: 44 bytes leftover after parsing attributes in process `syz.4.234'. [ 76.562625][ T4346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 76.580308][ T390] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.590284][ T4346] loop2: detected capacity change from 0 to 128 [ 76.610063][ T390] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.625783][ T4346] loop2: detected capacity change from 0 to 128 [ 76.636975][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.646667][ T390] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.675378][ T390] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.690521][ T4344] loop4: detected capacity change from 0 to 4096 [ 76.704081][ T4348] loop3: detected capacity change from 0 to 256 [ 76.711047][ T4346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'. [ 76.724019][ T4344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.890631][ T4348] loop3: detected capacity change from 0 to 2048 [ 76.955929][ T4348] Alternate GPT is invalid, using primary GPT. [ 76.962392][ T4348] loop3: p1 p2 p3 [ 76.966279][ T4348] loop3: partition table partially beyond EOD, truncated [ 77.481656][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.685934][ T28] audit: type=1400 audit(1779444903.958:558): avc: denied { setopt } for pid=4362 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.921187][ T4369] loop2: detected capacity change from 0 to 128 [ 77.943825][ T4372] loop3: detected capacity change from 0 to 128 [ 78.276401][ T4378] sctp: [Deprecated]: syz.4.244 (pid 4378) Use of int in max_burst socket option deprecated. [ 78.276401][ T4378] Use struct sctp_assoc_value instead [ 78.390086][ T4378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.244'. [ 78.814059][ T4386] loop4: detected capacity change from 0 to 512 [ 78.827030][ T4382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.245'. [ 78.848730][ T4386] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 78.881101][ T4386] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 78.903823][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 78.910409][ C1] EXT4-fs (loop4): initial error at time 1779444905: mb_free_blocks:2049: inode 11: block 64 [ 78.921624][ C1] EXT4-fs (loop4): last error at time 1779444905: mb_free_blocks:2049: inode 11: block 64 [ 79.015823][ T4386] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.248: corrupted inode contents [ 79.053877][ T4386] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 79.054213][ T4386] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #11: comm syz.4.248: mark_inode_dirty error [ 79.119294][ T4386] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 79.120741][ T4386] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.248: invalid indirect mapped block 1 (level 1) [ 79.166771][ T4386] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 79.167358][ T4386] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.248: corrupted inode contents [ 79.213841][ T4386] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 79.214073][ T4386] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 79.253608][ T4386] loop4: lost filesystem error report for type 5 error -117 [ 79.253940][ T4386] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.248: corrupted inode contents [ 79.293937][ T4386] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 79.295650][ T4386] EXT4-fs error (device loop4): ext4_truncate:4690: inode #11: comm syz.4.248: mark_inode_dirty error [ 79.333976][ T4406] loop2: detected capacity change from 0 to 512 [ 79.353850][ T4386] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 79.354166][ T4386] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 79.392095][ T4386] loop4: lost filesystem error report for type 5 error -117 [ 79.392366][ T4386] EXT4-fs (loop4): 1 truncate cleaned up [ 79.419335][ T4386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.648592][ T4414] bridge0: port 2(bridge_slave_1) entered listening state [ 79.689349][ T4414] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.965061][ T28] audit: type=1400 audit(1779444906.218:559): avc: denied { write } for pid=4385 comm="syz.4.248" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.083044][ T4416] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 80.097262][ T4416] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 80.109892][ T4416] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.254: Corrupt directory, running e2fsck is recommended [ 80.149698][ T4416] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 80.161912][ T4416] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.254: corrupted in-inode xattr: e_name out of bounds [ 80.178649][ T4416] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 80.180372][ T4416] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.254: couldn't read orphan inode 15 (err -117) [ 80.190660][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 80.190841][ C0] EXT4-fs (loop2): initial error at time 1779444906: ext4_iget_extra_inode:5128: inode 15 [ 80.191385][ C0] EXT4-fs (loop2): last error at time 1779444906: ext4_iget_extra_inode:5128: inode 15 [ 80.242029][ T4416] loop2: lost filesystem error report for type 5 error -117 [ 80.267523][ T4416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.991157][ T28] audit: type=1400 audit(1779444906.638:560): avc: denied { connect } for pid=4409 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 81.536849][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.550717][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.853412][ T4429] set_capacity_and_notify: 1 callbacks suppressed [ 81.853455][ T4429] loop2: detected capacity change from 0 to 128 [ 82.650172][ T4449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.264'. [ 82.677040][ T28] audit: type=1326 audit(1779444908.958:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.3.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 82.727853][ T4453] loop1: detected capacity change from 0 to 128 [ 82.753966][ T28] audit: type=1326 audit(1779444908.958:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.3.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 82.782323][ T4453] FAT-fs (loop1): count of clusters too big (2147483774) [ 82.830877][ T4453] FAT-fs (loop1): Can't find a valid FAT filesystem [ 82.833907][ T28] audit: type=1326 audit(1779444908.958:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.3.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 82.884129][ T4455] sctp: [Deprecated]: syz.2.265 (pid 4455) Use of int in max_burst socket option deprecated. [ 82.884129][ T4455] Use struct sctp_assoc_value instead [ 82.919339][ T28] audit: type=1326 audit(1779444908.958:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.3.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 83.141536][ T4465] netlink: 44 bytes leftover after parsing attributes in process `syz.3.268'. [ 83.329351][ T4464] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.548792][ T4463] loop4: detected capacity change from 0 to 4096 [ 83.671769][ T28] audit: type=1326 audit(1779444908.958:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.3.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 83.697948][ T28] audit: type=1326 audit(1779444908.958:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.3.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 83.795902][ T4471] loop2: detected capacity change from 0 to 512 [ 83.900879][ T4471] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 83.913562][ T4471] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 83.923667][ T4471] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.269: Corrupt directory, running e2fsck is recommended [ 83.939016][ T4471] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 83.948553][ T4471] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.269: corrupted in-inode xattr: e_name out of bounds [ 83.962846][ T4471] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.963771][ T4471] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.269: couldn't read orphan inode 15 (err -117) [ 83.963827][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 83.991595][ C0] EXT4-fs (loop2): initial error at time 1779444910: ext4_iget_extra_inode:5128: inode 15 [ 84.001684][ C0] EXT4-fs (loop2): last error at time 1779444910: ext4_iget_extra_inode:5128: inode 15 [ 84.012053][ T4471] loop2: lost filesystem error report for type 5 error -117 [ 84.014859][ T4471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.075474][ T4463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.110878][ T4477] netlink: 136 bytes leftover after parsing attributes in process `syz.3.270'. [ 84.170024][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.183983][ T28] audit: type=1326 audit(1779444908.958:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.3.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 84.319450][ T28] audit: type=1326 audit(1779444908.958:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.3.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 84.398309][ T4464] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.479096][ T28] audit: type=1326 audit(1779444908.958:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.3.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 84.579642][ T4489] loop0: detected capacity change from 0 to 512 [ 84.589560][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.759182][ T4489] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.344827][ T28] audit: type=1326 audit(1779444908.958:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4445 comm="syz.3.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f714890d68e code=0x7ffc0000 [ 85.391890][ T4489] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 85.412159][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.426272][ T4464] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.455428][ T4489] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 85.523925][ T4489] System zones: 0-2, 18-18, 34-34 [ 85.529697][ T4489] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.274: bad orphan inode 15 [ 85.550346][ T4489] loop0: lost filesystem error report for type 5 error -117 [ 85.550561][ T4489] ext4_test_bit(bit=14, block=18) = 1 [ 85.558263][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 85.558283][ C0] EXT4-fs (loop0): initial error at time 1779444911: ext4_orphan_get:1423 [ 85.558313][ C0] EXT4-fs (loop0): last error at time 1779444911: ext4_orphan_get:1423 [ 85.617097][ T4499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.630453][ T4499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.638613][ T4489] is_bad_inode(inode)=0 [ 85.653351][ T4464] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.656851][ T4489] NEXT_ORPHAN(inode)=2264924160 [ 85.693594][ T4499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'. [ 85.705222][ T4489] max_ino=32 [ 85.708664][ T4489] i_nlink=0 [ 85.712550][ T4489] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.274: corrupted inode contents [ 85.727767][ T4489] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.729020][ T4489] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #15: comm syz.0.274: mark_inode_dirty error [ 85.749219][ T4505] sctp: [Deprecated]: syz.3.279 (pid 4505) Use of int in max_burst socket option deprecated. [ 85.749219][ T4505] Use struct sctp_assoc_value instead [ 85.768210][ T4489] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.773024][ T4489] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.274: corrupted inode contents [ 85.813228][ T4489] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.813582][ T4489] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.274: mark_inode_dirty error [ 85.818829][ T385] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.835560][ T4489] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.867378][ T4489] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.274: mark inode dirty (error -117) [ 85.889986][ T385] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.898840][ T4489] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.900077][ T4489] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 85.911290][ T385] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.940573][ T4489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.954675][ T385] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.984277][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.298007][ T4521] loop4: detected capacity change from 0 to 128 [ 86.326229][ T4521] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 86.354156][ T4521] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.220255][ T4537] loop1: detected capacity change from 0 to 512 [ 87.434519][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.675757][ T4537] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 87.689384][ T4537] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 87.700498][ T4537] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.287: Corrupt directory, running e2fsck is recommended [ 87.739323][ T4537] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 87.749682][ T4537] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.287: corrupted in-inode xattr: e_name out of bounds [ 87.764763][ T4537] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.766113][ T4537] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.287: couldn't read orphan inode 15 (err -117) [ 87.776665][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 87.777005][ C0] EXT4-fs (loop1): initial error at time 1779444914: ext4_iget_extra_inode:5128: inode 15 [ 87.777356][ C0] EXT4-fs (loop1): last error at time 1779444914: ext4_iget_extra_inode:5128: inode 15 [ 87.823433][ T4537] loop1: lost filesystem error report for type 5 error -117 [ 87.845283][ T4537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.948942][ T4542] netlink: 40 bytes leftover after parsing attributes in process `syz.3.288'. [ 87.997409][ T4541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17407 sclass=netlink_route_socket pid=4541 comm=syz.2.290 [ 88.131470][ T4542] 9p: Bad value for 'wfdno' [ 88.229048][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 88.229071][ T28] audit: type=1400 audit(1779444914.508:612): avc: denied { read } for pid=4540 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.382253][ T28] audit: type=1400 audit(1779444914.548:613): avc: denied { ioctl } for pid=4535 comm="syz.3.288" path="socket:[8635]" dev="sockfs" ino=8635 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 88.769931][ T4562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 88.779175][ T4562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.295'. [ 88.933056][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.988497][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 89.001451][ T4567] netlink: 200 bytes leftover after parsing attributes in process `syz.4.295'. [ 89.009312][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 89.010851][ T28] audit: type=1400 audit(1779444915.288:614): avc: denied { connect } for pid=4568 comm="syz.3.298" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.076850][ T4564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.295'. [ 89.117435][ T4571] loop4: detected capacity change from 0 to 1024 [ 89.134936][ T4571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.194274][ T4571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.195637][ T4578] loop3: detected capacity change from 0 to 1164 [ 89.238635][ T4582] loop0: detected capacity change from 0 to 1024 [ 89.270126][ T4582] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 89.300182][ T4578] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 89.317361][ T28] audit: type=1400 audit(1779444915.598:615): avc: denied { write } for pid=4561 comm="syz.4.295" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.353703][ T4582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.376838][ T4578] netlink: 56 bytes leftover after parsing attributes in process `syz.3.300'. [ 89.408427][ T28] audit: type=1400 audit(1779444915.688:616): avc: denied { write } for pid=4579 comm="syz.0.301" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.438807][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.455484][ T4582] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 89.540652][ T28] audit: type=1400 audit(1779444915.818:617): avc: denied { write } for pid=4579 comm="syz.0.301" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.637812][ T28] audit: type=1400 audit(1779444915.918:618): avc: denied { map } for pid=4579 comm="syz.0.301" path="/51/file1/memory.events.local" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 89.652781][ T4599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.301'. [ 89.723919][ T28] audit: type=1326 audit(1779444915.988:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.2.309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517cffce59 code=0x7ffc0000 [ 89.773032][ T4592] loop3: detected capacity change from 0 to 128 [ 89.795259][ T28] audit: type=1326 audit(1779444915.998:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.2.309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517cffce59 code=0x7ffc0000 [ 89.802629][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.833572][ T28] audit: type=1326 audit(1779444915.998:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4602 comm="syz.2.309" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517cffce59 code=0x7ffc0000 [ 89.871507][ T4592] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 89.881542][ T4592] FAT-fs (loop3): Filesystem has been set read-only [ 89.935286][ T4592] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 54) [ 89.947484][ T4607] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 89.958947][ T4609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 90.196080][ T4621] loop1: detected capacity change from 0 to 1024 [ 90.211817][ T4624] loop0: detected capacity change from 0 to 128 [ 90.241834][ T4621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.547553][ T4621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.968553][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.043338][ T4624] FAULT_INJECTION: forcing a failure. [ 91.043338][ T4624] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 91.091656][ T4624] CPU: 0 UID: 0 PID: 4624 Comm: syz.0.316 Not tainted syzkaller #0 PREEMPT(full) [ 91.091691][ T4624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.091706][ T4624] Call Trace: [ 91.091714][ T4624] [ 91.091730][ T4624] __dump_stack+0x1d/0x30 [ 91.091822][ T4624] dump_stack_lvl+0x95/0xd0 [ 91.091912][ T4624] dump_stack+0x15/0x1b [ 91.091935][ T4624] should_fail_ex+0x263/0x280 [ 91.091968][ T4624] should_fail_alloc_page+0xf2/0x100 [ 91.092007][ T4624] __alloc_frozen_pages_noprof+0x108/0x350 [ 91.092085][ T4624] alloc_pages_mpol+0xb3/0x260 [ 91.092107][ T4624] ? cpu_clock_event_add+0x12c/0x140 [ 91.092138][ T4624] folio_alloc_noprof+0x96/0x150 [ 91.092195][ T4624] filemap_alloc_folio_noprof+0x92/0x220 [ 91.092232][ T4624] __filemap_get_folio_mpol+0x295/0x680 [ 91.092322][ T4624] ? domain_dirty_limits+0x283/0x330 [ 91.092346][ T4624] cont_write_begin+0x5ca/0x970 [ 91.092379][ T4624] fat_write_begin+0x52/0xe0 [ 91.092417][ T4624] ? __pfx_fat_get_block+0x10/0x10 [ 91.092447][ T4624] cont_write_begin+0x1b0/0x970 [ 91.092502][ T4624] fat_write_begin+0x52/0xe0 [ 91.092525][ T4624] ? __pfx_fat_get_block+0x10/0x10 [ 91.092548][ T4624] generic_perform_write+0x183/0x490 [ 91.092578][ T4624] __generic_file_write_iter+0xec/0x120 [ 91.092674][ T4624] generic_file_write_iter+0x8d/0x310 [ 91.092695][ T4624] ? timerqueue_linked_add+0x1c9/0x1f0 [ 91.092739][ T4624] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 91.092779][ T4624] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 91.092903][ T4624] ? should_fail_ex+0x30/0x280 [ 91.092964][ T4624] ? copy_fpstate_to_sigframe+0x6d1/0x7c0 [ 91.092990][ T4624] ? _parse_integer_limit+0x170/0x190 [ 91.093020][ T4624] do_iter_readv_writev+0x4fd/0x5a0 [ 91.093115][ T4624] vfs_writev+0x2e1/0x900 [ 91.093143][ T4624] __se_sys_pwritev2+0xfc/0x1c0 [ 91.093181][ T4624] __x64_sys_pwritev2+0x67/0x80 [ 91.093292][ T4624] x64_sys_call+0xe07/0x3020 [ 91.093320][ T4624] do_syscall_64+0x12c/0x3b0 [ 91.093356][ T4624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.093447][ T4624] RIP: 0033:0x7f5df6f9ce59 [ 91.093484][ T4624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.093555][ T4624] RSP: 002b:00007f5df59f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 91.093646][ T4624] RAX: ffffffffffffffda RBX: 00007f5df7215fa0 RCX: 00007f5df6f9ce59 [ 91.093664][ T4624] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 91.093680][ T4624] RBP: 00007f5df59f7090 R08: 0000000000000000 R09: 0000000000000003 [ 91.093696][ T4624] R10: 0000000000009c00 R11: 0000000000000246 R12: 0000000000000001 [ 91.093712][ T4624] R13: 00007f5df7216038 R14: 00007f5df7215fa0 R15: 00007ffca6e25348 [ 91.093741][ T4624] [ 92.553434][ T4658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.591366][ T4658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.116398][ T4668] __nla_validate_parse: 8 callbacks suppressed [ 94.116419][ T4668] netlink: 44 bytes leftover after parsing attributes in process `syz.4.331'. [ 95.066616][ T4674] loop1: detected capacity change from 0 to 512 [ 95.253490][ T4680] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'{!eܚ7 [ 95.253490][ T4680] Ue[%#s' [ 95.256184][ T4680] loop2: detected capacity change from 0 to 128 [ 95.257376][ T4680] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.257572][ T4680] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.258160][ T4682] loop4: detected capacity change from 0 to 128 [ 95.523833][ T4674] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 95.673924][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 95.673953][ T28] audit: type=1400 audit(1779444921.528:654): avc: denied { mounton } for pid=4679 comm="syz.2.334" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 95.786562][ T4674] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 95.808098][ T4674] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.330: bad orphan inode 4 [ 95.818144][ T4674] loop1: lost filesystem error report for type 5 error -117 [ 95.819981][ T4674] EXT4-fs (loop1): 1 orphan inode deleted [ 95.827595][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 95.827629][ C0] EXT4-fs (loop1): initial error at time 1779444922: ext4_orphan_get:1423 [ 95.827655][ C0] EXT4-fs (loop1): last error at time 1779444922: ext4_orphan_get:1423 [ 95.857615][ T4674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.970884][ T4673] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #2: block 4: comm syz.1.330: lblock 0 mapped to illegal pblock 4 (length 1) [ 96.362210][ T28] audit: type=1400 audit(1779444922.238:655): avc: denied { setattr } for pid=4669 comm="syz.1.330" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.388223][ T28] audit: type=1400 audit(1779444922.248:656): avc: denied { write } for pid=4669 comm="syz.1.330" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.428509][ T3304] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 96.463876][ T28] audit: type=1400 audit(1779444922.248:657): avc: denied { create } for pid=4669 comm="syz.1.330" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 96.485863][ T28] audit: type=1400 audit(1779444922.598:658): avc: denied { write } for pid=4681 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 96.521986][ T3304] FAT-fs (loop2): Filesystem has been set read-only [ 96.566800][ T3304] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 96.581451][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.653762][ T4706] netlink: 'syz.1.342': attribute type 1 has an invalid length. [ 96.680147][ T4707] netlink: 'syz.1.342': attribute type 1 has an invalid length. [ 96.795894][ T385] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.985192][ T385] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.271291][ T4725] loop1: detected capacity change from 0 to 512 [ 97.328263][ T4725] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 97.341688][ T4725] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 97.352810][ T4725] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.344: Corrupt directory, running e2fsck is recommended [ 97.384733][ T4725] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 97.399203][ T4725] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.344: corrupted in-inode xattr: e_name out of bounds [ 97.413247][ T4725] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.413810][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 97.429575][ C0] EXT4-fs (loop1): initial error at time 1779444923: ext4_iget_extra_inode:5128: inode 15 [ 97.439655][ C0] EXT4-fs (loop1): last error at time 1779444923: ext4_iget_extra_inode:5128: inode 15 [ 97.454631][ T4725] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.344: couldn't read orphan inode 15 (err -117) [ 97.467663][ T4725] loop1: lost filesystem error report for type 5 error -117 [ 97.480602][ T4725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.549630][ T385] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.718460][ T385] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.923854][ T28] audit: type=1400 audit(1779444924.198:659): avc: denied { read } for pid=3022 comm="dhcpcd" name="n25" dev="tmpfs" ino=3247 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.037315][ T385] bridge_slave_1: left allmulticast mode [ 98.094372][ T385] bridge_slave_1: left promiscuous mode [ 98.181501][ T4731] loop0: detected capacity change from 0 to 128 [ 98.280429][ T28] audit: type=1400 audit(1779444924.198:660): avc: denied { open } for pid=3022 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=3247 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.377233][ T385] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.430871][ T385] bridge_slave_0: left allmulticast mode [ 98.451652][ T385] bridge_slave_0: left promiscuous mode [ 98.474985][ T28] audit: type=1400 audit(1779444924.198:661): avc: denied { getattr } for pid=3022 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=3247 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 98.503725][ T385] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.606747][ T28] audit: type=1400 audit(1779444924.728:662): avc: denied { read } for pid=4733 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.663896][ T28] audit: type=1400 audit(1779444924.728:663): avc: denied { read open } for pid=4733 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.664889][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.767187][ T385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.784986][ T385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.821572][ T385] bond0 (unregistering): Released all slaves [ 98.960504][ T385] hsr_slave_0: left promiscuous mode [ 98.981419][ T385] hsr_slave_1: left promiscuous mode [ 98.991949][ T4750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 99.001517][ T385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.009969][ T4750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.348'. [ 99.010400][ T4745] loop1: detected capacity change from 0 to 256 [ 99.041731][ T385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.107099][ T4751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.348'. [ 99.119838][ T4745] bio_check_eod: 22 callbacks suppressed [ 99.119855][ T4745] syz.1.347: attempt to access beyond end of device [ 99.119855][ T4745] loop1: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 99.227548][ T385] team0 (unregistering): Port device team_slave_1 removed [ 99.238430][ T385] team0 (unregistering): Port device team_slave_0 removed [ 99.283125][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 99.565204][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.572696][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.580168][ T4717] bridge_slave_0: entered allmulticast mode [ 99.587309][ T4717] bridge_slave_0: entered promiscuous mode [ 99.594234][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.621738][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.631376][ T4717] bridge_slave_1: entered allmulticast mode [ 99.639487][ T4717] bridge_slave_1: entered promiscuous mode [ 99.664062][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.787017][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.984623][ T4717] team0: Port device team_slave_0 added [ 99.997425][ T4717] team0: Port device team_slave_1 added [ 100.015933][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 100.263872][ T4803] loop1: detected capacity change from 0 to 512 [ 100.426718][ T4803] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 100.441202][ T4803] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 100.454084][ T4803] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.356: Corrupt directory, running e2fsck is recommended [ 100.488709][ T4803] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 100.508319][ T4803] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.356: corrupted in-inode xattr: e_name out of bounds [ 100.524754][ T4803] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.533838][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 100.549633][ C1] EXT4-fs (loop1): initial error at time 1779444926: ext4_iget_extra_inode:5128: inode 15 [ 100.559843][ C1] EXT4-fs (loop1): last error at time 1779444926: ext4_iget_extra_inode:5128: inode 15 [ 100.572448][ T4803] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.356: couldn't read orphan inode 15 (err -117) [ 100.587193][ T4803] loop1: lost filesystem error report for type 5 error -117 [ 100.797651][ T4803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.023931][ T4688] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 101.503115][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.532005][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.637464][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.704821][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.734456][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.836071][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.954893][ T4717] hsr_slave_0: entered promiscuous mode [ 101.989169][ T4717] hsr_slave_1: entered promiscuous mode [ 102.020860][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 102.043654][ T4717] Cannot create hsr debugfs directory [ 102.093449][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 102.093474][ T28] audit: type=1400 audit(1779444928.368:679): avc: denied { write } for pid=4808 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.148206][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.168551][ T28] audit: type=1400 audit(1779444928.448:680): avc: denied { write } for pid=4820 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.273930][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 102.293724][ T4825] netdevsim netdevsim0: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 102.449129][ T4825] tipc: Enabling of bearer rejected, failed to enable media [ 102.612252][ T4717] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.693133][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.789630][ T4717] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 102.879629][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.915637][ T4717] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 102.945588][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.968119][ T4717] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.005813][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.119921][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.122681][ T28] audit: type=1400 audit(1779444929.398:681): avc: denied { write } for pid=4835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.143966][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.211186][ T4717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 103.221891][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.259237][ T4856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.361'. [ 103.612171][ T4866] loop4: detected capacity change from 0 to 128 [ 103.670057][ T4866] vfat: Unknown parameter '8`v{%1#jBWƌ)ly>ĕM' [ 103.772793][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.780203][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.818808][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.826164][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.834106][ T28] audit: type=1400 audit(1779444930.108:682): avc: denied { write } for pid=4868 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.885584][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 104.068072][ T4871] SELinux: policydb magic number 0x43504954 does not match expected magic number 0xf97cff8c [ 104.141560][ T4871] SELinux: failed to load policy [ 104.163176][ T4871] netlink: 32 bytes leftover after parsing attributes in process `syz.4.365'. [ 104.176192][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.208064][ T4871] netlink: 60 bytes leftover after parsing attributes in process `syz.4.365'. [ 104.249115][ T28] audit: type=1400 audit(1779444930.528:683): avc: denied { setopt } for pid=4899 comm="syz.3.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.489129][ T4717] veth0_vlan: entered promiscuous mode [ 104.501483][ T4717] veth1_vlan: entered promiscuous mode [ 104.522012][ T4717] veth0_macvtap: entered promiscuous mode [ 104.538343][ T4717] veth1_macvtap: entered promiscuous mode [ 104.554361][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.567649][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.579056][ T310] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.655056][ T310] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.664451][ T310] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.739775][ T28] audit: type=1400 audit(1779444931.008:684): avc: denied { read write } for pid=4912 comm="syz.0.369" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 104.764848][ T310] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.763906][ T28] audit: type=1400 audit(1779444931.008:685): avc: denied { open } for pid=4912 comm="syz.0.369" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 105.863873][ T4926] loop1: detected capacity change from 0 to 512 [ 106.757054][ T28] audit: type=1400 audit(1779444932.028:686): avc: denied { mounton } for pid=4717 comm="syz-executor" path="/root/syzkaller.199cWZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 106.782211][ T4936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.375'. [ 108.661722][ T4926] EXT4-fs: error -4 creating inode table initialization thread [ 108.680297][ T4926] EXT4-fs (loop1): mount failed [ 108.792146][ T4940] netlink: 20 bytes leftover after parsing attributes in process `syz.0.376'. [ 109.101283][ T4952] netlink: 80 bytes leftover after parsing attributes in process `syz.0.376'. [ 109.986977][ T4962] loop5: detected capacity change from 0 to 512 [ 110.022042][ T4962] EXT4-fs: quotafile must be on filesystem root [ 110.109403][ T4962] IPv6: Can't replace route, no match found [ 111.238353][ T4984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'. [ 111.829009][ T5006] netlink: 44 bytes leftover after parsing attributes in process `syz.0.393'. [ 111.879072][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'. [ 111.904111][ T5010] netlink: 40 bytes leftover after parsing attributes in process `syz.4.391'. [ 111.930617][ T5010] geneve2: entered promiscuous mode [ 111.943853][ T5010] geneve2: entered allmulticast mode [ 111.953098][ T5017] netlink: 200 bytes leftover after parsing attributes in process `syz.0.393'. [ 112.030018][ T5017] loop0: detected capacity change from 0 to 1024 [ 112.062615][ T28] audit: type=1400 audit(1779444938.338:687): avc: denied { create } for pid=5023 comm="syz.5.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 112.075496][ T5017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.140190][ T5028] loop5: detected capacity change from 0 to 512 [ 112.164029][ T5028] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 112.191161][ T5017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.203764][ T5015] netlink: 44 bytes leftover after parsing attributes in process `syz.0.393'. [ 112.224082][ T5028] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.398: bad orphan inode 131083 [ 112.253908][ T5028] loop5: lost filesystem error report for type 5 error -117 [ 112.254533][ T5028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.265677][ T28] audit: type=1400 audit(1779444938.548:688): avc: denied { write } for pid=5005 comm="syz.0.393" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.316838][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.318727][ T28] audit: type=1326 audit(1779444938.598:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5023 comm="syz.5.398" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbef9aace59 code=0x0 [ 112.428878][ T28] audit: type=1400 audit(1779444938.698:690): avc: denied { write } for pid=5023 comm="syz.5.398" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.475832][ T5053] netlink: 7 bytes leftover after parsing attributes in process `syz.5.398'. [ 112.483937][ T28] audit: type=1400 audit(1779444938.758:691): avc: denied { bind } for pid=5023 comm="syz.5.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.918693][ T5061] netlink: 'syz.3.407': attribute type 21 has an invalid length. [ 113.010430][ T5061] netlink: 'syz.3.407': attribute type 6 has an invalid length. [ 113.048145][ T5061] netlink: 132 bytes leftover after parsing attributes in process `syz.3.407'. [ 113.237536][ T28] audit: type=1400 audit(1779444939.518:692): avc: denied { block_suspend } for pid=5060 comm="syz.3.407" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.289266][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.335297][ T5040] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.397760][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.550883][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.600225][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.739378][ T49] bridge_slave_1: left allmulticast mode [ 113.745451][ T49] bridge_slave_1: left promiscuous mode [ 113.751362][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.760339][ T49] bridge_slave_0: left allmulticast mode [ 113.766754][ T49] bridge_slave_0: left promiscuous mode [ 113.772973][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.898229][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.909348][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.919925][ T49] bond0 (unregistering): Released all slaves [ 113.985149][ T49] hsr_slave_0: left promiscuous mode [ 113.992079][ T49] hsr_slave_1: left promiscuous mode [ 114.005694][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.023127][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.041964][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.049907][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.067446][ T49] veth1_macvtap: left promiscuous mode [ 114.076409][ T49] veth0_macvtap: left promiscuous mode [ 114.089038][ T49] veth1_vlan: left promiscuous mode [ 114.100557][ T49] veth0_vlan: left promiscuous mode [ 114.237480][ T28] audit: type=1400 audit(1779444940.508:693): avc: denied { write } for pid=5098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.319588][ T28] audit: type=1400 audit(1779444940.598:694): avc: denied { create } for pid=5113 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.362903][ T28] audit: type=1400 audit(1779444940.628:695): avc: denied { write } for pid=5115 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.378292][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'. [ 114.389528][ T28] audit: type=1400 audit(1779444940.638:696): avc: denied { write } for pid=5113 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.486163][ T49] team0 (unregistering): Port device team_slave_1 removed [ 114.501052][ T49] team0 (unregistering): Port device team_slave_0 removed [ 114.659414][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 114.731832][ T5132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.854881][ T5132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.961924][ T5132] loop0: detected capacity change from 0 to 256 [ 115.041027][ T5132] vfat: Unknown parameter '0xffffffffffffffff' [ 115.203340][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.215951][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.228850][ T5081] bridge_slave_0: entered allmulticast mode [ 115.240007][ T5081] bridge_slave_0: entered promiscuous mode [ 115.251546][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.262734][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.277663][ T5081] bridge_slave_1: entered allmulticast mode [ 115.306614][ T5081] bridge_slave_1: entered promiscuous mode [ 115.346627][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.357653][ T5137] loop4: detected capacity change from 0 to 512 [ 115.397087][ T5150] loop0: detected capacity change from 0 to 128 [ 115.418223][ T5150] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.430798][ T5150] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.458434][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.553135][ T5137] EXT4-fs: Ignoring removed nobh option [ 115.657724][ T5137] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.710348][ T877] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.801922][ T5150] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.826875][ T5081] team0: Port device team_slave_0 added [ 115.861379][ T5081] team0: Port device team_slave_1 added [ 115.898007][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.905489][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.932396][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.944056][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.952567][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.978885][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.027408][ T5081] hsr_slave_0: entered promiscuous mode [ 116.033660][ T5081] hsr_slave_1: entered promiscuous mode [ 116.041144][ T5081] debugfs: 'hsr0' already exists in 'hsr' [ 116.047092][ T5081] Cannot create hsr debugfs directory [ 116.053090][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 116.073470][ T5137] EXT4-fs (loop4): 1 truncate cleaned up [ 116.266736][ T5081] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 116.431115][ T5137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.464883][ T5081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 116.485719][ T5081] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 116.537373][ T5081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.568899][ T5081] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 116.597947][ T5081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 116.609767][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 116.618443][ T5081] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 116.661020][ T5081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.859202][ T5209] loop1: detected capacity change from 0 to 128 [ 116.883699][ T5209] FAT-fs (loop1): Directory bread(block 162) failed [ 116.907553][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.916317][ T5209] FAT-fs (loop1): Directory bread(block 163) failed [ 116.934133][ T5209] FAT-fs (loop1): Directory bread(block 164) failed [ 116.938554][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.951849][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.959267][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.974822][ T5209] FAT-fs (loop1): Directory bread(block 165) failed [ 116.979630][ T5216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.436'. [ 116.988308][ T5209] FAT-fs (loop1): Directory bread(block 166) failed [ 116.996463][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.005706][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.019490][ T5209] FAT-fs (loop1): Directory bread(block 167) failed [ 117.030722][ T5081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 117.042256][ T5081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.053923][ T5209] FAT-fs (loop1): Directory bread(block 168) failed [ 117.087797][ T5209] FAT-fs (loop1): Directory bread(block 169) failed [ 117.097765][ T5209] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.123027][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 117.123047][ T28] audit: type=1400 audit(1779444943.398:707): avc: denied { write } for pid=5207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.163988][ T5209] FAT-fs (loop1): Directory bread(block 162) failed [ 117.174996][ T5209] FAT-fs (loop1): Directory bread(block 163) failed [ 117.192514][ T5209] syz.1.435: attempt to access beyond end of device [ 117.192514][ T5209] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 117.213350][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 117.213914][ T28] audit: type=1400 audit(1779444943.448:708): avc: denied { write } for pid=5230 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.257714][ T5209] syz.1.435: attempt to access beyond end of device [ 117.257714][ T5209] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 117.277519][ T5223] sctp: [Deprecated]: syz.3.437 (pid 5223) Use of int in max_burst socket option deprecated. [ 117.277519][ T5223] Use struct sctp_assoc_value instead [ 117.298773][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.308310][ T5223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.437'. [ 117.385229][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.423487][ T28] audit: type=1400 audit(1779444943.698:709): avc: denied { write } for pid=5235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.601300][ T28] audit: type=1400 audit(1779444943.878:710): avc: denied { write } for pid=5263 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.872901][ T5277] loop4: detected capacity change from 0 to 512 [ 118.002258][ T5277] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 118.015327][ T5277] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 118.027257][ T5277] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.441: Corrupt directory, running e2fsck is recommended [ 118.065621][ T5277] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 118.081383][ T5277] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.441: corrupted in-inode xattr: e_name out of bounds [ 118.106366][ T5277] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 118.111541][ T5277] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.441: couldn't read orphan inode 15 (err -117) [ 118.122245][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 118.122365][ C0] EXT4-fs (loop4): initial error at time 1779444944: ext4_iget_extra_inode:5128: inode 15 [ 118.122864][ C0] EXT4-fs (loop4): last error at time 1779444944: ext4_iget_extra_inode:5128: inode 15 [ 118.167406][ T5277] loop4: lost filesystem error report for type 5 error -117 [ 118.186401][ T5277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.657370][ T5283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.444'. [ 118.688109][ T5081] veth0_vlan: entered promiscuous mode [ 118.699622][ T5081] veth1_vlan: entered promiscuous mode [ 118.717452][ T5081] veth0_macvtap: entered promiscuous mode [ 118.735571][ T5081] veth1_macvtap: entered promiscuous mode [ 118.805916][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.822533][ T5290] netlink: 'syz.0.446': attribute type 28 has an invalid length. [ 118.861783][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.911780][ T310] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.949529][ T310] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.992677][ T310] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.029190][ T28] audit: type=1400 audit(1779444945.308:711): avc: denied { write } for pid=5281 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.058782][ T310] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.149005][ T28] audit: type=1400 audit(1779444945.408:712): avc: denied { mount } for pid=5081 comm="syz-executor" name="/" dev="gadgetfs" ino=3811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 119.266919][ T28] audit: type=1400 audit(1779444945.428:713): avc: denied { write } for pid=5307 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.294552][ T5313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.330183][ T5313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.482444][ T5313] netlink: 8 bytes leftover after parsing attributes in process `syz.6.416'. [ 119.494516][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.541238][ T28] audit: type=1400 audit(1779444945.818:714): avc: denied { unmount } for pid=5272 comm="syz.3.443" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 119.643922][ T28] audit: type=1400 audit(1779444945.918:715): avc: denied { write } for pid=5314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.713689][ T28] audit: type=1400 audit(1779444945.988:716): avc: denied { write } for pid=5328 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.744602][ T5332] netlink: 32 bytes leftover after parsing attributes in process `syz.0.451'. [ 120.633233][ T5374] sctp: [Deprecated]: syz.6.460 (pid 5374) Use of int in max_burst socket option deprecated. [ 120.633233][ T5374] Use struct sctp_assoc_value instead [ 120.707980][ T5374] netlink: 16 bytes leftover after parsing attributes in process `syz.6.460'. [ 121.529387][ T5412] loop4: detected capacity change from 0 to 512 [ 121.644659][ T5412] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 121.658063][ T5412] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 121.669993][ T5412] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.469: Corrupt directory, running e2fsck is recommended [ 121.902166][ T5412] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 122.149543][ T5412] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.469: corrupted in-inode xattr: e_name out of bounds [ 122.167174][ T5412] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.173808][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 122.189927][ C1] EXT4-fs (loop4): initial error at time 1779444948: ext4_iget_extra_inode:5128: inode 15 [ 122.200375][ C1] EXT4-fs (loop4): last error at time 1779444948: ext4_iget_extra_inode:5128: inode 15 [ 122.913229][ T5412] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.469: couldn't read orphan inode 15 (err -117) [ 122.929595][ T5412] loop4: lost filesystem error report for type 5 error -117 [ 123.016439][ T5412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.336409][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.461998][ T5426] loop6: detected capacity change from 0 to 512 [ 124.584111][ T5426] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 124.600492][ T5426] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 124.617753][ T5426] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.470: Corrupt directory, running e2fsck is recommended [ 124.669946][ T5426] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 124.681435][ T5426] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.470: corrupted in-inode xattr: e_name out of bounds [ 124.697522][ T5426] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.700800][ T5426] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.470: couldn't read orphan inode 15 (err -117) [ 124.710504][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 124.710733][ C0] EXT4-fs (loop6): initial error at time 1779444950: ext4_iget_extra_inode:5128: inode 15 [ 124.711113][ C0] EXT4-fs (loop6): last error at time 1779444950: ext4_iget_extra_inode:5128: inode 15 [ 124.757006][ T5426] loop6: lost filesystem error report for type 5 error -117 [ 124.766465][ T5426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.729796][ T5434] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 125.751996][ T5081] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.772969][ T5440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.791416][ T5440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.818992][ T5440] loop4: detected capacity change from 0 to 256 [ 125.832265][ T5440] vfat: Unknown parameter '0xffffffffffffffff' [ 126.057942][ T5452] loop4: detected capacity change from 0 to 128 [ 126.065696][ T5452] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.084818][ T5452] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 126.185451][ T5157] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 126.387258][ T5452] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 127.256458][ T5427] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.264351][ T5427] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.402383][ T5427] bridge_slave_0: left allmulticast mode [ 127.409948][ T5427] bridge_slave_0: left promiscuous mode [ 127.416217][ T5427] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.431214][ T5427] bridge_slave_1: left allmulticast mode [ 127.437376][ T5427] bridge_slave_1: left promiscuous mode [ 127.443159][ T5427] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.545912][ T5427] bond0: (slave bond_slave_0): Releasing backup interface [ 127.560556][ T5427] bond0: (slave bond_slave_1): Releasing backup interface [ 127.618310][ T5427] team0: Port device team_slave_0 removed [ 127.638735][ T5427] team0: Port device team_slave_1 removed [ 127.685696][ T5427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.717273][ T5427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.750541][ T5427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.781340][ T5427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.862180][ T5427] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 127.968271][ T5498] loop6: detected capacity change from 0 to 512 [ 128.019113][ T5498] ext4: Unknown parameter 'smackfsroot' [ 128.091830][ T5506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.109723][ T5506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.151295][ T5506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.488'. [ 128.240465][ T5521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.258546][ T5521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.269637][ T5521] loop1: detected capacity change from 0 to 256 [ 128.287014][ T5521] vfat: Unknown parameter '0xffffffffffffffff' [ 128.512655][ T5539] loop1: detected capacity change from 0 to 128 [ 128.520596][ T5539] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.596659][ T5539] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.626855][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.761489][ T5539] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.988192][ T5545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.998723][ T5545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.028310][ T5545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.500'. [ 129.052112][ T5547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 129.130990][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 129.131009][ T28] audit: type=1400 audit(1779444955.408:721): avc: denied { setattr } for pid=5550 comm="syz.4.503" name="PACKET" dev="sockfs" ino=12361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 129.229304][ T28] audit: type=1400 audit(1779444955.508:722): avc: denied { create } for pid=5558 comm="syz.4.506" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 129.259836][ T28] audit: type=1400 audit(1779444955.508:723): avc: denied { write } for pid=5558 comm="syz.4.506" name="file0" dev="tmpfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 129.285192][ T28] audit: type=1400 audit(1779444955.508:724): avc: denied { open } for pid=5558 comm="syz.4.506" path="/85/file0" dev="tmpfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 129.309182][ T28] audit: type=1400 audit(1779444955.508:725): avc: denied { ioctl } for pid=5558 comm="syz.4.506" path="/85/file0" dev="tmpfs" ino=487 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 129.339184][ T28] audit: type=1400 audit(1779444955.618:726): avc: denied { unlink } for pid=3303 comm="syz-executor" name="file0" dev="tmpfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 129.745438][ T5590] netlink: 24 bytes leftover after parsing attributes in process `syz.3.516'. [ 130.751201][ T28] audit: type=1400 audit(1779444957.028:727): avc: denied { mount } for pid=5589 comm="syz.3.516" name="/" dev="configfs" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 130.828571][ T28] audit: type=1400 audit(1779444957.028:728): avc: denied { search } for pid=5589 comm="syz.3.516" name="/" dev="configfs" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.865651][ T28] audit: type=1400 audit(1779444957.028:729): avc: denied { search } for pid=5589 comm="syz.3.516" name="/" dev="configfs" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.889407][ T28] audit: type=1400 audit(1779444957.028:730): avc: denied { read } for pid=5589 comm="syz.3.516" name="/" dev="configfs" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 131.027983][ T5597] netlink: 68 bytes leftover after parsing attributes in process `syz.3.518'. [ 131.042834][ T5600] loop6: detected capacity change from 0 to 512 [ 131.104616][ T5600] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.519: inode has both inline data and extents flags [ 131.142633][ T5600] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.142869][ T5600] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.519: couldn't read orphan inode 15 (err -117) [ 131.152157][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 131.152175][ C1] EXT4-fs (loop6): initial error at time 1779444957: ext4_orphan_get:1397: inode 15 [ 131.152204][ C1] EXT4-fs (loop6): last error at time 1779444957: ext4_orphan_get:1397: inode 15 [ 131.360146][ T5600] loop6: lost filesystem error report for type 5 error -117 [ 131.360796][ T5600] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.382915][ T5600] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 131.588067][ T5616] xt_bpf: check failed: parse error [ 131.598624][ T5614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.523'. [ 131.717779][ T5081] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.946234][ T5666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 133.118188][ T5689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.546'. [ 133.128497][ T5689] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.687170][ T5698] netlink: 8 bytes leftover after parsing attributes in process `syz.6.549'. [ 133.929412][ T5710] loop6: detected capacity change from 0 to 512 [ 134.767475][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 134.767491][ T28] audit: type=1400 audit(1779444961.048:742): avc: denied { setattr } for pid=5697 comm="syz.6.549" name="fd" dev="proc" ino=12536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 135.791201][ T5723] netlink: 44 bytes leftover after parsing attributes in process `syz.6.554'. [ 135.831069][ T28] audit: type=1400 audit(1779444962.108:743): avc: denied { write } for pid=5713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.938536][ T5731] netlink: 200 bytes leftover after parsing attributes in process `syz.6.554'. [ 135.939783][ T28] audit: type=1400 audit(1779444962.178:744): avc: denied { write } for pid=5727 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.021384][ T5731] loop6: detected capacity change from 0 to 1024 [ 136.028541][ T5731] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.053208][ T5731] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.152795][ T28] audit: type=1400 audit(1779444962.418:745): avc: denied { wake_alarm } for pid=5738 comm="syz.3.558" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 137.035144][ T5745] sctp: [Deprecated]: syz.4.559 (pid 5745) Use of int in max_burst socket option deprecated. [ 137.035144][ T5745] Use struct sctp_assoc_value instead [ 137.079596][ T28] audit: type=1400 audit(1779444962.428:746): avc: denied { write } for pid=5721 comm="syz.6.554" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.216098][ T28] audit: type=1400 audit(1779444963.498:747): avc: denied { write } for pid=5736 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.329328][ T28] audit: type=1400 audit(1779444963.528:748): avc: denied { write } for pid=5767 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.933227][ T5780] 9p: Bad value for 'rfdno' [ 138.256453][ T5081] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.848208][ T28] audit: type=1326 audit(1779444965.118:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.3.568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 138.921451][ T28] audit: type=1326 audit(1779444965.118:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.3.568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 138.976483][ T28] audit: type=1326 audit(1779444965.118:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5789 comm="syz.3.568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 139.027533][ T5806] netlink: 12 bytes leftover after parsing attributes in process `syz.6.572'. [ 139.143511][ T5809] loop6: detected capacity change from 0 to 128 [ 139.175708][ T5809] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5809 comm=syz.6.572 [ 139.225181][ T5818] sctp: [Deprecated]: syz.3.573 (pid 5818) Use of int in max_burst socket option deprecated. [ 139.225181][ T5818] Use struct sctp_assoc_value instead [ 139.242240][ T5806] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 139.504430][ T5826] loop6: detected capacity change from 0 to 128 [ 139.539952][ T5826] vfat: Unknown parameter '' [ 139.741370][ T5853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.584'. [ 139.774385][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 139.774401][ T28] audit: type=1326 audit(1779444966.058:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.3.582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f714890d68e code=0x7ffc0000 [ 139.844261][ T28] audit: type=1326 audit(1779444966.088:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.3.582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f714890d68e code=0x7ffc0000 [ 139.873991][ T28] audit: type=1326 audit(1779444966.098:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.3.582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f714890d68e code=0x7ffc0000 [ 139.902403][ T28] audit: type=1326 audit(1779444966.098:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.3.582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f714890d68e code=0x7ffc0000 [ 139.946344][ T28] audit: type=1326 audit(1779444966.108:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.3.582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f714890d68e code=0x7ffc0000 [ 140.039193][ T28] audit: type=1326 audit(1779444966.108:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.3.582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f714890d68e code=0x7ffc0000 [ 140.122589][ T28] audit: type=1326 audit(1779444966.108:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.3.582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f714890d68e code=0x7ffc0000 [ 140.178795][ T28] audit: type=1326 audit(1779444966.108:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.3.582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f714890d68e code=0x7ffc0000 [ 140.248623][ T28] audit: type=1326 audit(1779444966.108:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.3.582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f714890d68e code=0x7ffc0000 [ 140.275782][ T28] audit: type=1326 audit(1779444966.108:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5847 comm="syz.3.582" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f714890d68e code=0x7ffc0000 [ 140.887299][ T5872] sctp: [Deprecated]: syz.3.588 (pid 5872) Use of int in max_burst socket option deprecated. [ 140.887299][ T5872] Use struct sctp_assoc_value instead [ 141.031086][ T5877] netlink: 84 bytes leftover after parsing attributes in process `syz.6.590'. [ 141.083629][ T5877] netlink: 232 bytes leftover after parsing attributes in process `syz.6.590'. [ 141.205911][ T5877] netlink: 'syz.6.590': attribute type 39 has an invalid length. [ 141.575728][ T5893] IPv6: Can't replace route, no match found [ 141.847425][ T5902] sctp: [Deprecated]: syz.3.602 (pid 5902) Use of int in max_burst socket option deprecated. [ 141.847425][ T5902] Use struct sctp_assoc_value instead [ 141.866011][ T5902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.602'. [ 141.930626][ T5912] tc_dump_action: action bad kind [ 142.232919][ T5919] netlink: 56 bytes leftover after parsing attributes in process `syz.3.607'. [ 142.423302][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 142.499029][ T5929] IPVS: Unknown mcast interface: vcan0 [ 142.549535][ T5932] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 142.549535][ T5932] program syz.6.612 not setting count and/or reply_len properly [ 142.569629][ T5932] netlink: 56 bytes leftover after parsing attributes in process `syz.6.612'. [ 142.766328][ T5939] sctp: [Deprecated]: syz.6.615 (pid 5939) Use of int in max_burst socket option deprecated. [ 142.766328][ T5939] Use struct sctp_assoc_value instead [ 142.788929][ T5939] netlink: 16 bytes leftover after parsing attributes in process `syz.6.615'. [ 144.034787][ T5971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.062049][ T5971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.095378][ T5971] loop6: detected capacity change from 0 to 256 [ 144.121190][ T5971] vfat: Unknown parameter '0xffffffffffffffff' [ 144.501384][ T5973] loop6: detected capacity change from 0 to 128 [ 144.508967][ T5973] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.525201][ T5973] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.565651][ T49] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.648053][ T5973] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.311710][ T5982] sctp: [Deprecated]: syz.1.630 (pid 5982) Use of int in max_burst socket option deprecated. [ 145.311710][ T5982] Use struct sctp_assoc_value instead [ 145.358760][ T5157] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.403702][ T5157] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.500030][ T5157] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.636558][ T5996] netlink: 548 bytes leftover after parsing attributes in process `syz.0.633'. [ 145.713633][ T5984] bridge1: entered promiscuous mode [ 145.732642][ T5984] bridge1: entered allmulticast mode [ 145.766363][ T5157] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.804794][ T5989] netlink: 'syz.0.633': attribute type 29 has an invalid length. [ 145.866868][ T5993] netlink: 'syz.0.633': attribute type 29 has an invalid length. [ 148.378672][ T6021] netlink: 44 bytes leftover after parsing attributes in process `syz.3.642'. [ 148.848735][ T6031] netlink: 200 bytes leftover after parsing attributes in process `syz.3.642'. [ 149.870795][ T6033] sctp: [Deprecated]: syz.6.646 (pid 6033) Use of int in max_burst socket option deprecated. [ 149.870795][ T6033] Use struct sctp_assoc_value instead [ 149.887701][ T6033] netlink: 16 bytes leftover after parsing attributes in process `syz.6.646'. [ 150.891138][ T6047] netlink: 200 bytes leftover after parsing attributes in process `syz.0.649'. [ 151.184377][ T6052] netlink: 200 bytes leftover after parsing attributes in process `syz.6.650'. [ 151.697868][ T6061] netlink: 44 bytes leftover after parsing attributes in process `syz.3.654'. [ 151.785866][ T6065] IPv6: Can't replace route, no match found [ 151.985362][ T6074] netlink: 200 bytes leftover after parsing attributes in process `syz.3.654'. [ 152.501837][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 152.502090][ T28] audit: type=1326 audit(1779444978.778:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6086 comm="syz.4.661" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd2fe70ce59 code=0x0 [ 152.826446][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.665'. [ 152.859050][ T28] audit: type=1400 audit(1779444979.138:890): avc: denied { map } for pid=6100 comm="syz.1.665" path="socket:[13638]" dev="sockfs" ino=13638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 153.029749][ T6107] IPv6: Can't replace route, no match found [ 153.063481][ T6110] netlink: 200 bytes leftover after parsing attributes in process `syz.6.667'. [ 153.086396][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 156.385158][ T6141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=6141 comm=syz.6.677 [ 156.457973][ T6143] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 156.473504][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.678'. [ 156.699162][ T6154] IPv6: Can't replace route, no match found [ 156.841518][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 157.048032][ T6150] netlink: 80 bytes leftover after parsing attributes in process `syz.4.680'. [ 157.058506][ T6150] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 157.493894][ T5464] IPVS: starting estimator thread 0... [ 157.530358][ T6178] netlink: 200 bytes leftover after parsing attributes in process `syz.6.687'. [ 157.603848][ T6175] IPVS: using max 2496 ests per chain, 124800 per kthread [ 158.691896][ T6191] sctp: [Deprecated]: syz.3.693 (pid 6191) Use of int in max_burst socket option deprecated. [ 158.691896][ T6191] Use struct sctp_assoc_value instead [ 158.870890][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 159.468009][ T6224] netlink: 44 bytes leftover after parsing attributes in process `syz.3.705'. [ 159.624354][ T6224] netlink: 200 bytes leftover after parsing attributes in process `syz.3.705'. [ 160.330640][ T6235] RDS: rds_bind could not find a transport for a0:ff00:20:0:a0:ff00:20:0, load rds_tcp or rds_rdma? [ 160.352986][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'. [ 160.479369][ T6242] netlink: 200 bytes leftover after parsing attributes in process `syz.1.709'. [ 160.491591][ T6225] netlink: 44 bytes leftover after parsing attributes in process `syz.3.705'. [ 160.585447][ T6247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.621255][ T6247] batadv_slave_0: entered allmulticast mode [ 160.650699][ T6247] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 161.998156][ T6269] 9p: Bad value for 'rfdno' [ 164.029813][ T6300] __nla_validate_parse: 1 callbacks suppressed [ 164.029835][ T6300] netlink: 200 bytes leftover after parsing attributes in process `syz.1.727'. [ 164.683888][ T6299] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.127615][ T6320] sctp: [Deprecated]: syz.3.731 (pid 6320) Use of int in max_burst socket option deprecated. [ 167.127615][ T6320] Use struct sctp_assoc_value instead [ 167.147586][ T6320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.731'. [ 167.823806][ T6329] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.939957][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 167.988716][ T6331] netlink: 79 bytes leftover after parsing attributes in process `syz.6.734'. [ 168.133091][ T28] audit: type=1400 audit(1779444994.408:891): avc: denied { read } for pid=6335 comm="syz.6.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 168.190138][ T28] audit: type=1326 audit(1779444994.448:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz.3.737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 168.245877][ T28] audit: type=1326 audit(1779444994.448:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz.3.737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 168.354088][ T28] audit: type=1326 audit(1779444994.448:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz.3.737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 168.464438][ T28] audit: type=1326 audit(1779444994.448:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz.3.737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 168.567066][ T28] audit: type=1326 audit(1779444994.448:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz.3.737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 168.668197][ T28] audit: type=1326 audit(1779444994.448:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz.3.737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 168.785777][ T28] audit: type=1326 audit(1779444994.458:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz.3.737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 168.842867][ T28] audit: type=1326 audit(1779444994.558:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6337 comm="syz.3.737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f714894ce59 code=0x7ffc0000 [ 168.922134][ T28] audit: type=1400 audit(1779444995.168:900): avc: denied { getopt } for pid=6351 comm="syz.6.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.115805][ T6360] netlink: 'syz.6.744': attribute type 13 has an invalid length. [ 169.153792][ T6360] netlink: 'syz.6.744': attribute type 17 has an invalid length. [ 169.172551][ T6349] netlink: 'syz.1.741': attribute type 1 has an invalid length. [ 169.558779][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.566379][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.250001][ T6375] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 170.387686][ T6359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.444659][ T6359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.576688][ T6360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.586290][ T6360] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.598601][ T6360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.616603][ T6360] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.623712][ T6360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.636376][ T6360] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.643913][ T6360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.670093][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.679725][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.696369][ T6360] veth1_vlan: left promiscuous mode [ 170.702893][ T6360] veth0_vlan: left promiscuous mode [ 170.709479][ T6360] veth0_vlan: entered promiscuous mode [ 170.720379][ T6360] veth1_vlan: entered promiscuous mode [ 170.731008][ T6360] veth1_macvtap: left promiscuous mode [ 170.738507][ T6360] veth0_macvtap: left promiscuous mode [ 170.745685][ T6360] veth0_macvtap: entered promiscuous mode [ 170.756793][ T6360] veth1_macvtap: entered promiscuous mode [ 170.767436][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 170.780037][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 170.791732][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 170.803170][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 170.928306][ T6382] xt_l2tp: missing protocol rule (udp|l2tpip) [ 171.127023][ T6392] veth0: entered promiscuous mode [ 171.137037][ T6392] veth0: left promiscuous mode [ 171.479278][ T6395] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.751'. [ 171.490253][ T6395] netlink: zone id is out of range [ 171.496667][ T6395] netlink: zone id is out of range [ 171.510965][ T6395] netlink: zone id is out of range [ 171.743858][ T6395] netlink: set zone limit has 8 unknown bytes [ 172.142176][ T6413] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 172.219009][ T6413] netlink: 36 bytes leftover after parsing attributes in process `syz.0.761'. [ 172.232598][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'. [ 172.276360][ T6418] geneve2: entered promiscuous mode [ 172.321779][ T6418] geneve2: entered allmulticast mode [ 172.374599][ T310] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 50004 - 0 [ 172.427043][ T310] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 50004 - 0 [ 172.548653][ T310] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 50004 - 0 [ 172.564198][ T310] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 50004 - 0 [ 172.862803][ T6433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.767'. [ 172.911158][ T6441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.768'. [ 172.920741][ T6441] netlink: 40 bytes leftover after parsing attributes in process `syz.0.768'. [ 172.966763][ T6448] netlink: 32 bytes leftover after parsing attributes in process `syz.6.771'. [ 172.976294][ T6448] netlink: 32 bytes leftover after parsing attributes in process `syz.6.771'. [ 173.005069][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.6.773'. [ 173.196326][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 173.196345][ T28] audit: type=1326 audit(1779444999.478:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f9ce59 code=0x7ffc0000 [ 173.228245][ T28] audit: type=1326 audit(1779444999.478:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f9ce59 code=0x7ffc0000 [ 173.254126][ T28] audit: type=1326 audit(1779444999.478:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f9ce59 code=0x7ffc0000 [ 173.329305][ T28] audit: type=1326 audit(1779444999.478:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f9ce59 code=0x7ffc0000 [ 173.362714][ T28] audit: type=1326 audit(1779444999.478:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f9ce59 code=0x7ffc0000 [ 173.389203][ T28] audit: type=1326 audit(1779444999.478:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5df6f9ce59 code=0x7ffc0000 [ 173.420442][ T28] audit: type=1326 audit(1779444999.478:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f9ce59 code=0x7ffc0000 [ 173.451422][ T28] audit: type=1326 audit(1779444999.478:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f9ce59 code=0x7ffc0000 [ 173.478278][ T28] audit: type=1326 audit(1779444999.478:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df6f9ce59 code=0x7ffc0000 [ 173.506426][ T28] audit: type=1326 audit(1779444999.478:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6444 comm="syz.0.770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5df6f9ce59 code=0x7ffc0000 [ 173.628679][ T3394] IPVS: starting estimator thread 0... [ 173.723876][ T6473] IPVS: using max 2400 ests per chain, 120000 per kthread [ 173.755863][ T6479] netlink: 'syz.1.784': attribute type 12 has an invalid length. [ 173.912054][ T6496] netlink: 'syz.4.786': attribute type 13 has an invalid length. [ 173.940810][ T6501] netlink: 44 bytes leftover after parsing attributes in process `syz.6.790'. [ 173.955601][ T6496] erspan0: refused to change device tx_queue_len [ 173.992268][ T6496] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 174.432852][ T6510] netlink: 'syz.4.792': attribute type 5 has an invalid length. [ 176.839714][ T6576] netlink: 'syz.3.815': attribute type 20 has an invalid length. [ 176.847659][ T6576] IPv6: NLM_F_CREATE should be specified when creating new route [ 176.855829][ T6576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.863388][ T6576] IPv6: NLM_F_CREATE should be set when creating new route [ 176.872964][ T6577] IPv6: Can't replace route, no match found [ 177.786195][ T6599] __nla_validate_parse: 5 callbacks suppressed [ 177.786216][ T6599] netlink: 44 bytes leftover after parsing attributes in process `syz.4.823'. [ 177.814407][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.821'. [ 177.936823][ T6601] netlink: 200 bytes leftover after parsing attributes in process `syz.4.823'. [ 177.963971][ T6600] netlink: 44 bytes leftover after parsing attributes in process `syz.4.823'. [ 179.483294][ T6648] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 179.826217][ T6651] netlink: 44 bytes leftover after parsing attributes in process `syz.1.837'. [ 180.012771][ T6659] netlink: 200 bytes leftover after parsing attributes in process `syz.1.837'. [ 181.057366][ T6666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.842'. [ 181.249511][ T6658] netlink: 44 bytes leftover after parsing attributes in process `syz.1.837'. [ 181.623190][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 181.623209][ T28] audit: type=1400 audit(1779445007.898:951): avc: denied { execute_no_trans } for pid=6691 comm="syz.1.847" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 181.758174][ T28] audit: type=1400 audit(1779445007.938:952): avc: denied { ioctl } for pid=6691 comm="syz.1.847" path="socket:[15367]" dev="sockfs" ino=15367 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 182.193502][ T6718] openvswitch: netlink: ct_state flags 000070b3 unsupported [ 182.358472][ T6735] mmap: syz.3.850 (6735) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 182.603291][ T6795] netlink: 44 bytes leftover after parsing attributes in process `syz.4.855'. [ 182.686101][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.856'. [ 182.907599][ T6810] IPv6: Can't replace route, no match found [ 183.110209][ T28] audit: type=1326 audit(1779445009.388:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.1.863" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f722e9fce59 code=0x0 [ 183.505327][ T6823] __nla_validate_parse: 3 callbacks suppressed [ 183.505579][ T6823] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.861'. [ 183.523520][ T6823] netlink: zone id is out of range [ 183.529660][ T6823] netlink: zone id is out of range [ 183.541892][ T6823] netlink: zone id is out of range [ 183.837551][ T6823] netlink: set zone limit has 8 unknown bytes [ 184.184467][ T6836] netlink: 44 bytes leftover after parsing attributes in process `syz.4.867'. [ 184.424980][ T6845] ipt_REJECT: ECHOREPLY no longer supported. [ 184.670947][ T6842] netlink: 44 bytes leftover after parsing attributes in process `syz.4.867'. [ 187.443871][ T6885] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.882'. [ 187.453840][ T6885] netlink: zone id is out of range [ 187.459716][ T6885] netlink: zone id is out of range [ 187.473901][ T6885] netlink: zone id is out of range [ 187.675225][ T6891] netlink: 388 bytes leftover after parsing attributes in process `syz.0.884'. [ 187.741544][ T6885] netlink: set zone limit has 8 unknown bytes [ 187.801527][ T28] audit: type=1400 audit(1779445014.078:954): avc: denied { ioctl } for pid=6890 comm="syz.0.884" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=15073 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 188.911261][ T6925] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.890'. [ 189.019563][ T6925] netlink: zone id is out of range [ 189.079417][ T6925] netlink: zone id is out of range [ 189.095087][ T6925] netlink: set zone limit has 8 unknown bytes [ 189.227298][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.893'. [ 190.065826][ T6949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.900'. [ 190.105011][ T6954] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.902'. [ 190.156533][ T6954] netlink: zone id is out of range [ 190.186868][ T6954] netlink: zone id is out of range [ 190.268065][ T6954] netlink: set zone limit has 8 unknown bytes [ 190.341399][ T6956] ip6tnl1: entered promiscuous mode [ 192.681637][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.6.917'. [ 192.776926][ T7006] team0: Port device team_slave_0 removed [ 194.128566][ T7034] netlink: 64 bytes leftover after parsing attributes in process `syz.6.926'. [ 194.142168][ T7037] netlink: 1472 bytes leftover after parsing attributes in process `syz.3.927'. [ 194.167778][ T7037] netlink: 1472 bytes leftover after parsing attributes in process `syz.3.927'. [ 194.197860][ T28] audit: type=1400 audit(1779445276.510:955): avc: denied { nlmsg_write } for pid=7036 comm="syz.3.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 194.249531][ T28] audit: type=1107 audit(1779445276.510:956): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 196.636129][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.933'. [ 197.022383][ T7076] netlink: 200 bytes leftover after parsing attributes in process `syz.3.938'. [ 197.053651][ T7077] sctp: [Deprecated]: syz.4.939 (pid 7077) Use of int in max_burst socket option deprecated. [ 197.053651][ T7077] Use struct sctp_assoc_value instead [ 197.093765][ T7075] netlink: 16 bytes leftover after parsing attributes in process `syz.4.939'. [ 197.700886][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.6.943'. [ 197.756021][ T28] audit: type=1400 audit(1779445280.095:957): avc: denied { create } for pid=7089 comm="syz.6.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 197.761091][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.6.943'. [ 198.474038][ T7100] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.944'. [ 198.487875][ T7100] netlink: zone id is out of range [ 198.495702][ T7100] netlink: zone id is out of range [ 198.507198][ T7100] netlink: zone id is out of range [ 198.710575][ T7100] netlink: set zone limit has 8 unknown bytes [ 199.022442][ T7116] sctp: [Deprecated]: syz.3.951 (pid 7116) Use of int in max_burst socket option deprecated. [ 199.022442][ T7116] Use struct sctp_assoc_value instead [ 199.566485][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.954'. [ 199.617830][ T28] audit: type=1400 audit(1779445281.968:958): avc: denied { read } for pid=7128 comm="syz.1.955" path="socket:[15825]" dev="sockfs" ino=15825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 199.672206][ T28] audit: type=1400 audit(1779445282.029:959): avc: denied { bind } for pid=7128 comm="syz.1.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.852710][ T7140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.958'. [ 200.876083][ T7140] netlink: 60 bytes leftover after parsing attributes in process `syz.3.958'. [ 203.916657][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.961'. [ 203.956754][ T7155] netlink: 48 bytes leftover after parsing attributes in process `syz.1.961'. [ 204.767467][ T7159] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.962'. [ 204.777471][ T7159] netlink: zone id is out of range [ 204.783910][ T7159] netlink: zone id is out of range [ 204.795322][ T7159] netlink: zone id is out of range [ 204.952999][ T7159] netlink: set zone limit has 8 unknown bytes [ 205.191499][ T7172] xt_TCPMSS: Only works on TCP SYN packets [ 205.268258][ T7177] netlink: 24 bytes leftover after parsing attributes in process `syz.6.967'. [ 206.972187][ T7191] sctp: [Deprecated]: syz.6.970 (pid 7191) Use of int in max_burst socket option deprecated. [ 206.972187][ T7191] Use struct sctp_assoc_value instead [ 208.413831][ T7207] netlink: 104 bytes leftover after parsing attributes in process `syz.1.976'. [ 208.613619][ T28] audit: type=1326 audit(1779445291.015:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.1.977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e9fce59 code=0x7ffc0000 [ 208.768270][ T28] audit: type=1326 audit(1779445291.015:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.1.977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e9fce59 code=0x7ffc0000 [ 208.860324][ T28] audit: type=1326 audit(1779445291.055:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.1.977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e9fce59 code=0x7ffc0000 [ 208.887682][ T28] audit: type=1326 audit(1779445291.055:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.1.977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e9fce59 code=0x7ffc0000 [ 208.916201][ T28] audit: type=1326 audit(1779445291.055:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.1.977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f722e9fce59 code=0x7ffc0000 [ 208.944391][ T28] audit: type=1326 audit(1779445291.055:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.1.977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e9fce59 code=0x7ffc0000 [ 208.998227][ T28] audit: type=1326 audit(1779445291.055:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.1.977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f722e9fce59 code=0x7ffc0000 [ 209.082011][ T28] audit: type=1326 audit(1779445291.055:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.1.977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f722e9bd68e code=0x7ffc0000 [ 209.132298][ T28] audit: type=1326 audit(1779445291.065:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.1.977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f722e9bd68e code=0x7ffc0000 [ 209.160538][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.981'. [ 209.213652][ T28] audit: type=1326 audit(1779445291.065:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.1.977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f722e9bd68e code=0x7ffc0000 [ 209.273065][ T7222] ================================================================== [ 209.281487][ T7222] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace [ 209.289262][ T7222] [ 209.291800][ T7222] write to 0xffff888103f86d00 of 8 bytes by task 7221 on cpu 1: [ 209.299466][ T7222] mas_wmb_replace+0x234/0x1760 [ 209.304532][ T7222] mas_wr_store_entry+0x54ff/0x5ad0 [ 209.309846][ T7222] mas_store_prealloc+0x43e/0x690 [ 209.315165][ T7222] vma_complete+0x3c7/0x850 [ 209.319910][ T7222] __split_vma+0x5db/0x640 [ 209.324715][ T7222] vma_modify+0xbee/0xca0 [ 209.329954][ T7222] vma_modify_flags+0x182/0x210 [ 209.334936][ T7222] mprotect_fixup+0x3a2/0x680 [ 209.339939][ T7222] do_mprotect_pkey+0x6ae/0x960 [ 209.344818][ T7222] __x64_sys_mprotect+0x48/0x60 [ 209.349780][ T7222] x64_sys_call+0x2768/0x3020 [ 209.354589][ T7222] do_syscall_64+0x12c/0x3b0 [ 209.360792][ T7222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.366984][ T7222] [ 209.369337][ T7222] read to 0xffff888103f86d00 of 8 bytes by task 7222 on cpu 0: [ 209.376988][ T7222] mas_walk+0x176/0x370 [ 209.381190][ T7222] lock_vma_under_rcu+0xc9/0x210 [ 209.386509][ T7222] do_user_addr_fault+0x232/0x1050 [ 209.391831][ T7222] exc_page_fault+0x62/0xa0 [ 209.396365][ T7222] asm_exc_page_fault+0x26/0x30 [ 209.401338][ T7222] [ 209.403675][ T7222] value changed: 0xffff8881090d2f81 -> 0xffff888103f86d00 [ 209.410797][ T7222] [ 209.413392][ T7222] Reported by Kernel Concurrency Sanitizer on: [ 209.419732][ T7222] CPU: 0 UID: 0 PID: 7222 Comm: syz.0.982 Not tainted syzkaller #0 PREEMPT(full) [ 209.429561][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.439648][ T7222] ================================================================== [ 209.519532][ T7227] sctp: [Deprecated]: syz.6.983 (pid 7227) Use of int in max_burst socket option deprecated. [ 209.519532][ T7227] Use struct sctp_assoc_value instead [ 209.572512][ T7227] netlink: 16 bytes leftover after parsing attributes in process `syz.6.983'.