last executing test programs: 23m24.084270832s ago: executing program 32 (id=428): kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) (fail_nth: 8) 22m50.13351018s ago: executing program 33 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="a85faa91a18f2d49f8a2107aa73b944ac5dd2d8f924b06f99a778c22ce70b45008428d43e8c2c1e6710fec8635c330917cc3d711263c78dfcc5e892696337e8b11337926bee130f41486670af4077a136a740f8872670222b1bef7ed7f673806ff1b4dee2f861afc80c38cd3c1a29e6988937620669d46cdee", 0x79}], 0x1, 0x0, 0x0, 0xd4}, 0x20000000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}, 0x1, 0x0, 0x1200}, 0x0) 22m19.997780606s ago: executing program 34 (id=989): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x2, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x84, 0x30, 0xffff, 0x20, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0) 21m24.557816382s ago: executing program 35 (id=1344): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="180800001200000000000000fbffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900fdffffff0055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080001000080db9af0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000015000000760000007b987600000000005608000002000000a500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 20m8.972678715s ago: executing program 36 (id=2054): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x60a7, 0x10000, 0x2, 0x2cf}, &(0x7f0000000080), &(0x7f0000000400), &(0x7f0000000000)) io_uring_enter(r0, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1e61, 0x9296, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000100)={0xf6, 0xffffffffffffffff, 0x24, {0x100000001, 0x200}, 0x1}, 0x1) 14m11.057287195s ago: executing program 7 (id=4863): stat(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = creat(0x0, 0x0) close(r0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10020f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x21c90c, &(0x7f0000001340)={[{@delalloc}, {@noblock_validity}, {@jqfmt_vfsold}, {@nodelalloc}, {@errors_remount}, {@nomblk_io_submit}, {@nojournal_checksum}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1e, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sPxzssD1kgWVhybDDFsmOl8TsIdtgbE+Bbdl75tmyMZYtY8lJbMLmsD9gMEZb6FOf+lLoH1Ao+RNKIdC+l7a0lDZpHwpto6IrKXEcKXaILKXW5wNHOvfoXn3P0UVH99x7uAqgb52KiNMR8aBarZ6NiOFGeaaRYrOeauvdv3drppaSqFavfp5EJPWy2mpjW97zSGOzgxHxtz9H/DN5Mm55fWNxulgsrDaW85WllXx5fePcwtL0fGG+sDw5OXFx6tLUhanxjrRzKCIu//Hjl/77+p8uv/3rGx9c+3TsX0mjPOJROzqt3vRs+lk0DUbE6l4E65HBtIUAAPwQNI/zfxERZ2M4BtKjOQAAAGA/qf5uKL5NIqoAAADAvpVJ58AmmVxjHsBQZDK5XH0O70/icKZYKld+NVdaW56tz5UdiWxmbqFYGG/MFR6JbFJbnkjzj5bPb1uejIhjEfH/4UPpcm6mVJzt9ckPAAAA6BNHto3/vxquj/+3+KZnlQMAAAA6Z6TXFQAAAAD2nPE/AAAA7H/G/wAAALCv/eXKlVqqNv//evb6+tpi6fq52UJ5Mbe0NpObKa2u5OZLpfn0nn1LO71fsVRa+U0sr93MVwrlSr68vnFtqbS2XLm28NhfYAMAAABddOznd95PImLzt4fSVHOg15UCumLwWVb+aO/qAXTfQK8rAPTMM/3+A/tKttcVAHou2eH1tpN33ul8XQAAgL0x+tPW1/8Hdjw3sJnpUhWBPeL8H/Qv1/+hf7n+D/0rGwNhIA/9badbgD7/9f9q9ZkqBAAAdNxQmpJMLiI9DzAUmUwuF3E0HRNkk7mFYmG8MSfgveHsj2rLE+mWyY5zhgEAAAAAAAAAAAAAAAAAAAAAAACAumo1iSoAAACwr0VkPknSu/lHjA6fGdp+fuBA8vVwNO7/f+PVqy/fnK5UVidq5V88LK+80ig/34szGAAAAMB2zXF6cxwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ10/96tmWbqZtzP/hARI63iD8bB9PlgZCPi8JdJDG7ZLomIgQ7E37wdEcdbxU9q1YqRRi1axT/U4/hHOhAf+tmdWv/z+1bfv0ycSp9bf/8upj3U82vf/2Ue9n8DLeLXyo7uMsaJu2/m28a/HXFisHX/04yftOl/Tu8y/j/+vrHR7rXqaxGjLX9/ksdi5StLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1Pj+bmFYqHx2DLG/3721oOntf9wm/gjO7T/zC7b/93dm/d+XM9mH26ePIo/drr1/j/eJn6msf9/2cjXXh9t5jfr+a1OvvHuyae1f7ZN+3fa/2O7bP/Zv/7nw12uCgB0QXl9Y3G6WCys9nXmuT6N2mHRC9GKFzNT+1xfgGq0zPx7D965dmTe63Z1ItPTbgkAANgDT46BAQAAAAAAAAAAAAAAAAAAgG7rxu3EsttibqaPnbh7PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA53wfAAD//3pF0kU=") 14m10.56872901s ago: executing program 7 (id=4866): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x80030) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x78) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0xc8) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) clock_adjtime(0x1, &(0x7f0000000380)={0x402, 0x80007, 0x4101, 0x4000000000000b, 0xffffffffffffffff, 0x7, 0x400000400, 0x80000000000d, 0x5, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x82, 0x761c9020, 0x3ff, 0x0, 0x2, 0x8, 0x9, 0x8001, 0x7, 0x0, 0x3, 0x72a3, 0xe}) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac141421000000000000000000000000200100000000000000000a000000000000000000000000000000020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) 14m10.477931823s ago: executing program 7 (id=4868): setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xf3ffffff}, 0x10}, 0x4a) 14m10.413666165s ago: executing program 7 (id=4871): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 14m10.26586976s ago: executing program 7 (id=4875): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0x39e59eac, 0x6, 0xcd2, 0x100000001, 0xffffffff, 0xff]}, &(0x7f00000002c0)=0x78) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x8, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x442, &(0x7f0000000e00)="$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") r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) fchown(r3, 0xffffffffffffffff, 0xee01) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xc, 0x10}, {0x3, 0xffe0}, {0x4, 0xfff3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6c7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8080c61) ioctl$RTC_UIE_OFF(r6, 0x7004) 14m10.150747234s ago: executing program 7 (id=4879): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x1d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="23090000000000000000010000000500070000000000080009e4ffffff00060002000100000008000a0000000000080017"], 0x3c}}, 0x0) 13m54.818895625s ago: executing program 37 (id=4879): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007100000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x1d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="23090000000000000000010000000500070000000000080009e4ffffff00060002000100000008000a0000000000080017"], 0x3c}}, 0x0) 10m50.521885402s ago: executing program 5 (id=5972): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffffffffe9d, 0x10, &(0x7f0000002e00), &(0x7f00000000c0), 0xffffff6f, 0xa0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x7, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0x10, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x5, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x5, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x10000009, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x400000, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@private2, @in=@multicast2, 0x4e1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in=@rand_addr=0x64010101, 0x0, 0x3c}, @in6=@mcast1, {0x0, 0x5, 0x2, 0x100, 0x10000000, 0xffffffffffffffff}, {0x7, 0x200000, 0x7, 0x4}, {0x40000, 0xfffffffd, 0xae8}, 0x70bd2b, 0x0, 0xa, 0x2, 0x0, 0x34}}, 0xf0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 10m50.415639275s ago: executing program 5 (id=5975): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x20) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x44, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) close(r6) openat$hwrng(0xffffffffffffff9c, 0x0, 0x200, 0x0) 10m49.206518814s ago: executing program 5 (id=5977): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) pwritev(r3, 0x0, 0x0, 0x10001, 0x9) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty, 0x100}, 0x1, {[0x0, 0x0, 0x0, 0x80000000, 0x2000, 0x3]}}, 0x5c) 10m48.024350962s ago: executing program 5 (id=5982): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) getpgrp(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$dupfd(r5, 0x0, r5) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r7, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a79000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000414000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000540)="$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") syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) syz_clone3(&(0x7f00000009c0)={0x90000000, &(0x7f0000000180), &(0x7f0000000380), &(0x7f00000003c0), {0x35}, &(0x7f00000007c0)=""/143, 0x8f, &(0x7f0000000880)=""/221, 0x0}, 0x58) 10m46.431349353s ago: executing program 5 (id=5987): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x11, 0x21, &(0x7f0000000740)=ANY=[@ANYRES16, @ANYRES32, @ANYRES16, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001bc0)=[0x1, 0xffffffffffffffff], &(0x7f0000001c00)=[{0x1, 0x2, 0xf, 0x1}, {0x2, 0x2, 0x200, 0x1}, {0x5, 0x3, 0x1000000f}], 0x10, 0x7f}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000000080), &(0x7f0000000700)=0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}], 0x1, 0x300100, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0xcd47}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9f7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480c0}, 0x90) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000014, &(0x7f00000008c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES64, @ANYRESDEC, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024", @ANYRES64], 0xfe, 0x2f0, &(0x7f00000005c0)="$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") syz_open_procfs(0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x40000f, 0x8041) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0xa1ff, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 10m46.139971782s ago: executing program 5 (id=5990): prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071162a000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 10m30.27060452s ago: executing program 38 (id=5990): prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071162a000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 8m54.045133684s ago: executing program 2 (id=6717): ioperm(0x1000, 0x1000, 0x8000000000000001) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, @val=@netfilter={0x3, 0x0, 0x27f, 0x1}}, 0x20) r0 = fsopen(0x0, 0x0) fsmount(r0, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x34a01800, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) r1 = semget(0x1, 0x4, 0x69c) semop(r1, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r1, &(0x7f00000000c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x480, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0xfff3, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x450, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x7, 0x3, 0x1, {0x3, 0x0, 0xa, 0x6, 0xfffc, 0x401}, {0x7, 0x0, 0xba, 0x8, 0x200, 0x200}, 0x10001, 0xffffff80}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x2, 0x7fff, 0x90a, 0x0, 0xd, 0x4, 0x1, 0x3, 0x9, 0x8, 0x6ac, 0x6, 0x0, 0xfffffff2, 0x238000, 0x8, 0x8c7, 0x50, 0x101, 0x2, 0x6, 0x2, 0xa, 0x5, 0x80000000, 0x1, 0x5, 0x9, 0x2, 0x7, 0x5, 0x0, 0x4, 0x1, 0x4f, 0x4, 0x2f91, 0x5, 0x6, 0x8, 0x40, 0x1, 0x5, 0x9, 0x9, 0x1, 0x5, 0xff, 0x4, 0xffffffff, 0x3, 0x0, 0x3, 0xaea3, 0x7ff, 0x1, 0x5, 0x0, 0xf, 0x3ff, 0x7, 0x6, 0x4, 0x2, 0xe7f6, 0x2, 0xfffffff9, 0x3, 0xda, 0x100, 0x7, 0x8, 0x2, 0x2, 0x8001, 0x6, 0x82bc, 0x0, 0x2, 0xffffffff, 0xff, 0xf7b, 0x6, 0x9, 0x7ff, 0x6, 0x5, 0x6, 0x6, 0x9, 0x1, 0xa09, 0x8001, 0x1000, 0x8, 0x7, 0x100, 0x100081, 0x5, 0x7b, 0x1, 0x10, 0x0, 0x6, 0xe0, 0x1ff, 0x1, 0x7e, 0x7a42, 0x7, 0x225, 0x7, 0xa, 0x8, 0x80, 0x1, 0x3ef, 0x7, 0x6, 0x174, 0x18, 0x0, 0x6, 0x9, 0x5, 0x458, 0x2, 0x6, 0x10000, 0xb, 0x9, 0xb, 0x5, 0x8, 0x6, 0xaf0, 0x4, 0x3, 0x1, 0xd, 0xf, 0xc, 0x4b0, 0x1, 0x3, 0x100, 0x4, 0x9, 0x4, 0x6, 0x10, 0x7fffffff, 0xfffffffd, 0x6, 0x2, 0x3, 0x4, 0x2000001, 0x26a99613, 0x7, 0x7, 0x8, 0x8, 0x401, 0x80000000, 0x2, 0x0, 0x5, 0x3, 0x6, 0x2, 0x53d0, 0x100, 0x401, 0x3, 0x1, 0x8, 0x4ad2, 0xed, 0x4, 0x9b402b0, 0x10000008, 0xff, 0x7, 0x8e, 0xffff, 0x1, 0x4, 0x9, 0x7, 0x6, 0x2000001, 0x1, 0x8, 0x7ff, 0xb04, 0x5, 0x1, 0x7, 0x6, 0x3, 0x9, 0x101, 0xfffffffe, 0x4, 0x8, 0x5, 0x8, 0x9, 0x13, 0x0, 0x5, 0x5, 0x3, 0x0, 0xc000000, 0x7dab19e1, 0x5, 0xff, 0x9, 0x2, 0x2, 0x6, 0x9, 0x8297, 0x9, 0x0, 0x7fffffff, 0x1ff, 0x9e, 0x3, 0x9, 0x7fff, 0x4, 0x40bf, 0x4, 0x8, 0x49eb, 0x100003, 0x7fffffff, 0x7, 0x2, 0x7, 0x4, 0x9, 0xb, 0x1, 0x84, 0x3, 0x80, 0x3ff, 0x25460ab5, 0x75b4, 0x952, 0x3]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x92}]}}]}, 0x480}, 0x1, 0x4000000, 0x0, 0x50}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="030f000000000000000034000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x5, &(0x7f0000000100)=[{0xf16b, 0x6, 0x7, 0x1}, {0x6, 0x9, 0x7, 0x8001}, {0x8, 0x9, 0x9, 0x6}, {0x9, 0xf4, 0xb7, 0x1}, {0x9, 0x6, 0x9, 0x5}]}) r6 = io_uring_setup(0x1b7b, &(0x7f00000003c0)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 8m52.27249243s ago: executing program 2 (id=6722): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0xfffffffe}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x105400, 0x40) pwrite64(r2, &(0x7f0000000000)='3', 0x1, 0x4fed0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r3, &(0x7f0000000600)={0x7, 0x4d, 0x2}, 0xfffffe4c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) r6 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x6, 0x6}, 0x1d637, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x10000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r7, 0x400, 0x1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r8, &(0x7f0000001440)=""/123, 0x7b, 0x841) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000280)={0xe, 0x0, 0x9, 0x2000000, 0x79ab}) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e21, 0x3, 'sed\x00', 0x1, 0x6, 0x60}, 0x2c) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb01001800000000000000d8000000d8000000030000000000000c02000000010000000000000b0000000004000000030000130b00000007000000030000000000900004000000f8ffffff000000000e0000000100008006000000070000000000000e01000000010000000b000000070000060400000003000000810000000b00000001000000060000000400000000000000610400000d0000000600000009000000020000000600000040000000000000000400000d000000000700000003000000000000000240000009000000050000000405b8d08f967c12abcd160400aa52000000040000000e0000000000000e0300000000000000005f00"], &(0x7f00000008c0)=""/238, 0xf3, 0xee, 0x1, 0x8475}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x7, 0x0, &(0x7f0000000080), &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', r11, @fallback=0x24, r12, 0x8, &(0x7f0000000a40)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0xd, 0xc0, 0x9}, 0x10, 0x0, r5, 0x7, 0x0, &(0x7f0000000ac0)=[{0x1, 0x3, 0xe, 0x3}, {0x0, 0x7fffffff, 0x3, 0x1}, {0x2, 0x3, 0xe, 0x1}, {0x4, 0x3, 0x4, 0x9}, {0x1, 0x3, 0xe, 0xb}, {0x5, 0x2, 0x5, 0x4}, {0x0, 0x3, 0xf, 0xc}], 0x10, 0x8}, 0x94) r13 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r13, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r9) 8m51.620617421s ago: executing program 2 (id=6731): socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x6048800) 8m50.581940645s ago: executing program 2 (id=6735): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000004000000010000850200000000000000010000000000000400002000da"], 0x0, 0x52}, 0x20) 8m50.560159995s ago: executing program 2 (id=6737): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xfffffffffffff801, 0xffffffffffffff26}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, 0x0, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000305000ab9d2e3e175ddabe60a6a652c000000001c000000000000", @ANYRES32=0x0, @ANYBLOB="55010200000000001c0012800b00010062726964676500000c0002800500170000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) prlimit64(0x0, 0x4, &(0x7f0000000040)={0x9, 0x1000008b}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x20) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r3, &(0x7f0000000000)=@known='system.posix_acl_default\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m50.317910653s ago: executing program 2 (id=6738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010048000000000000020040490900010073797a30a000000014000000020a05"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 8m35.297177704s ago: executing program 39 (id=6738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010048000000000000020040490900010073797a30a000000014000000020a05"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 8m21.635434102s ago: executing program 6 (id=6988): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="fffe01000100000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") chown(&(0x7f0000000340)='./file1\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x8, 0xa, 0x5}) mknodat$null(r1, &(0x7f0000000180)='./file1\x00', 0x20, 0x103) r2 = socket$packet(0x11, 0x2, 0x300) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="fffe01000100000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x80) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") (async) chown(&(0x7f0000000340)='./file1\x00', 0x0, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x8, 0xa, 0x5}) (async) mknodat$null(r1, &(0x7f0000000180)='./file1\x00', 0x20, 0x103) (async) socket$packet(0x11, 0x2, 0x300) (async) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async) 8m21.229802815s ago: executing program 6 (id=6997): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000018) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x189802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x4) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async, rerun: 64) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) (async, rerun: 64) unshare(0x22020400) (async, rerun: 32) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) (async, rerun: 32) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 8m20.987476193s ago: executing program 6 (id=7001): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a4000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80940, 0xd2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x4c895) write$nci(0xffffffffffffffff, 0x0, 0x4) ioprio_get$pid(0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x50, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}, 0x1, 0x0, 0x900000000000000}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r3, 0x2) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) r4 = socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 8m20.713762601s ago: executing program 6 (id=7005): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)={0x4c, 0x0, 0x800, 0x3, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000008) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x40010002, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000003c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x3ff, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, r2, 0x8) keyctl$unlink(0x9, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r7, r5, 0x11, 0x0, r7}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1100000000000000", @ANYRES32=r4, @ANYBLOB="221155aacbfc98c918b6cbbc034ee351cb654def94d933ca4a08f00cb555a70b5c094038f086ee62fd2ceb7323b632045bd14256e2ee9a5ff6cbe100f666344ea7aa9f94f24548ab20387cabae766094aa8fa25a6a7fde3c4d55c94771f3c2519e5e2e5459700b80948e4ee240c7d3870529f476ad793e7f4de7d914eacf4e7c28410f4699eb5260da95afa5d25c", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x11) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x90) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x3110d1, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') r9 = io_uring_setup(0x7d52, &(0x7f00000002c0)={0x0, 0xb833, 0x10000, 0x2, 0x2d1}) io_uring_register$IORING_REGISTER_BUFFERS2(r9, 0xf, 0x0, 0x20) preadv(r8, &(0x7f0000000300)=[{&(0x7f0000000040)=""/3, 0x3}], 0x1, 0x0, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x80101c, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x110400a, &(0x7f0000000b00), 0x1, 0xbdd, &(0x7f00000014c0)="$eJzs3M1rXNcVAPDznkZj2VY9ciml7qYqpdhQOpZcZGpTqF1cuumi0G4LFvLICI0/kBQcyVqMkn8gJFkHsgkkMQlZxGTpTUKyzSaxtwlZBExQrARCSBTefEhja0aS4xk/Yf9+cDX3vjsz55x5jN69MDMBPLVGsz9pxJGIOJ9ElJrH04go1ntDEbXG/dZWl6e+XV2eSmJ9/b9fJZFExL3V5anWcyXN24PNwVBEfPyPJH75/Na484tLs5PVamWuOT6+cOnq8fnFpT/PXJq8WLlYuTx+8q8TJyZOjp2a6Fmt33125uY3v//XF7Xv3/jhxtcvvZbEmRhuzrXX0SujMbrxmrQrRMRkr4PlZKBZT3udSWGHB6V9TgoAgK7StjXcr6MUA7G5eCvF+5/kmhwAAADQE+sDEesAAADAEy6x/wcAAIAnXOtzAPdWl6daLd9PJDxed89GxEij/rVma8wUola/HYrBiDhwL4n2r7UmjYc9stGI+PzOqbezFn36HvJ2aisR8ZtO5z+p1z9S/xb31vrTiBjrQfzRB8Y71D/Qg5D3eZT6z/Qg/kPWDwA9cets40K29fqXbqx/osP1r9Dh2vVzdLj+9fwav53W+m9ty/pvs/6BtvqLzcdl67//7DLG9ddfudZtLqv/bzf/+VarZfGz28bse4Ndn3THH1nZnbsrEb8tdKo/2ag/6bL+Pb/LGKUfr1W6zW1ff/+tvxpxNDrX35Js//tEx6dnqpWxxt+OMVY+mnizW/y868/O/4Eu9bd+/6nb+b+6yxj/P3funS0H72x2t68//bKY/K/ea733np1cWJgbjygm/956/MT2ubTu03qOrP5jf9j+/d+p/ux/Qq35OmR7gZXmbTZ+7oGYf79x/d1u+bT2f3me/wtdzn97/R8Wtp7/F3YZ448fvHis21z7/jdrWfzWXhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWtKIGI4kLW/007RcjjgYEb+KA2n1yvzCn6avPHP5QjYXMRKD6fRMtTIWEaXGOMnG4/X+5vjEA+O/RMThiHi5tL8+Lk9dqV7Iu3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HIyI4UjSckSkEbFWStNyOe+sAAAAgJ47lHcCAAAAQN+N5J0AAAAA0Hf2/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTZ4d/dup1ERO30/nrLFJtzg7lmBvRbmncCQG4G8k4AyE0h7wSA3DzkHt9yAZ5AyQ7zQ11n9vU8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2rqNHbt1OIqJ2en+9ZYrNucFcMwP6Lc07ASA3A90mhiKi8HhzAR4vb3F4etnjA8kO80Ob96ndP7OvbzkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsPcM11uSliOi2DxWLkf8IiJGYjCZnqlWxiLiUER8Whrcl43Hc84ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3ptfXJqdrFYrc1knjWZn44jOZidpvGK1vZKPziN2irEn0tijnbz/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkIf5xaXZyWq1MjefdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3uYXl2Ynq9XKXB87edcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB+fgoAAP//LdIK5Q==") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x39040fb, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0\x00') 8m19.464034922s ago: executing program 6 (id=7016): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000050030000fe8000000000000000000000000000bbac1414210000000000000000000000002001000000000000000000000000000000000000000000000350020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) 8m18.775184624s ago: executing program 6 (id=7021): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) faccessat2(0xffffffffffffffff, 0x0, 0x112, 0x2200) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) mbind(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x3, &(0x7f0000000180)=0x8001, 0x6, 0x4) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m18.758325494s ago: executing program 40 (id=7021): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) faccessat2(0xffffffffffffffff, 0x0, 0x112, 0x2200) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) mbind(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x3, &(0x7f0000000180)=0x8001, 0x6, 0x4) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m52.738794519s ago: executing program 0 (id=13701): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) flock(0xffffffffffffffff, 0x6) rename(&(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='./file0\x00') 1m52.685974081s ago: executing program 0 (id=13702): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}], 0x7}}], 0x1, 0x4008440) ppoll(&(0x7f0000000480)=[{r1, 0x4808}], 0x1, 0x0, 0x0, 0x0) 1m51.840380618s ago: executing program 0 (id=13705): r0 = getpgrp(0xffffffffffffffff) waitid(0x3, r0, &(0x7f0000000440), 0x4, 0x0) 1m51.825975228s ago: executing program 0 (id=13706): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 1m51.76998908s ago: executing program 0 (id=13707): r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4031, 0x2b) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000006040)=""/4086, 0x38}, {0x0}], 0x2}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 1m50.921876627s ago: executing program 0 (id=13710): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 1m35.886759419s ago: executing program 41 (id=13710): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 5.151271115s ago: executing program 1 (id=15033): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 3.75021484s ago: executing program 1 (id=15037): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.694804591s ago: executing program 1 (id=15038): fsmount(0xffffffffffffffff, 0x0, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x1, 0xff, 0x3}, 0xfe}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfb, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x14, r6, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) ioperm(0x2, 0x7ff, 0x8) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r7}, 0xc) socket$inet(0x2, 0x2, 0x1) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000140)=ANY=[], 0x3, 0x805, &(0x7f0000001580)="$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") 2.045607325s ago: executing program 8 (id=15090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}}, 0x0) 2.045214565s ago: executing program 8 (id=15091): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 1.985798346s ago: executing program 8 (id=15092): memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef01090212"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x667, &(0x7f0000000140)={0x0, 0x4067, 0x1000, 0x2, 0x235}) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.745601164s ago: executing program 9 (id=15100): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r1}}) 1.717415555s ago: executing program 9 (id=15101): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x4090, 0x9, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a834"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d18d"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1.670662476s ago: executing program 9 (id=15104): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f00000001c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) faccessat2(0xffffffffffffffff, 0x0, 0x112, 0x2200) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) mbind(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x3, &(0x7f0000000180)=0x8001, 0x6, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x502, &(0x7f0000000600)="$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") pselect6(0x40, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8000100ffffe}, 0x0, 0x0, 0x0, 0x0) 1.580831639s ago: executing program 3 (id=15105): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002500010025bd7000fc5b2383de"], 0x14}, 0x1, 0x0, 0x0, 0x3800c957}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) socket$kcm(0x2, 0x200000000000001, 0x106) 1.473887043s ago: executing program 8 (id=15106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 1.384278046s ago: executing program 3 (id=15107): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c8694f90324fc60", 0x14}], 0x1}, 0x40080) recvmmsg(r0, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}, 0x26a}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000080)=""/33, 0x21}, {0x0}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x4}, 0x5}], 0x2, 0x2000, 0x0) 1.365701766s ago: executing program 3 (id=15108): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x4000010}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000014000000b702000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x183200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1000008]}}) 1.319427168s ago: executing program 3 (id=15109): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x6, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) 1.318407788s ago: executing program 8 (id=15110): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRESOCT], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb9, &(0x7f000000cf3d)=""/185, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r2, r0, 0x4, r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r3, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) unshare(0x62000000) syz_emit_ethernet(0x3e, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)={'raw\x00', 0x0, [0x401, 0x9, 0xfffffff9, 0x20b, 0x6]}, &(0x7f0000000040)=0x54) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001040), 0x3}, 0x0, 0xc8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) migrate_pages(r4, 0x2, &(0x7f0000000180)=0x8, &(0x7f0000000240)=0x1ff) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x2284, &(0x7f00000003c0)) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x6, 0x80, 0x0, 0x0, 0x0, 0xe, 0x0, 0x4d31, 0xc40c1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x42a, 0x8000007, 0x7fff, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x8000010, 0xffffffffffffffff, 0x1) 792.989504ms ago: executing program 3 (id=15112): bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18050000080400000000000003000002180100002020703e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000bbf5ffff850000000600000085000000d000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 787.182755ms ago: executing program 1 (id=15122): memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef01090212"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x667, &(0x7f0000000140)={0x0, 0x4067, 0x1000, 0x2, 0x235}) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 648.780479ms ago: executing program 4 (id=15113): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 621.64435ms ago: executing program 4 (id=15114): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 582.180691ms ago: executing program 4 (id=15115): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x6c}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x2, @in=@rand_addr=0x64010101, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x2, 0x8}, {{@in=@remote, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3506, 0x5, 0x0, 0x0, 0x0, 0x9}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 581.841651ms ago: executing program 4 (id=15116): memfd_create(&(0x7f0000000080)='\x00\x00\x00', 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef01090212"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x667, &(0x7f0000000140)={0x0, 0x4067, 0x1000, 0x2, 0x235}) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 390.445438ms ago: executing program 8 (id=15117): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) fchdir(r3) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 390.069268ms ago: executing program 3 (id=15118): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x8, 0x40000000000000]}}) open$dir(&(0x7f0000000140)='./file0\x00', 0x100800, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) write$tun(r2, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) fchdir(r4) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 357.755118ms ago: executing program 9 (id=15119): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002500010025bd7000fc5b2383de"], 0x14}, 0x1, 0x0, 0x0, 0x3800c957}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) socket$kcm(0x2, 0x200000000000001, 0x106) 300.169091ms ago: executing program 9 (id=15120): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x8000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x4000010}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000014000000b702000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x183200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b4a0d93481b232b11b819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x1000008]}}) 225.758333ms ago: executing program 9 (id=15121): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}], 0x8}}], 0x1, 0x4008440) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 183.488154ms ago: executing program 1 (id=15123): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x6, &(0x7f0000000100)=[{0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) 96.839377ms ago: executing program 1 (id=15124): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) fchdir(r3) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 36.748549ms ago: executing program 4 (id=15125): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x20140) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 4 (id=15126): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000019080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002500010025bd7000fc5b2383de"], 0x14}, 0x1, 0x0, 0x0, 0x3800c957}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) kernel console output (not intermixed with test programs): for pid=14332 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1307.118748][T14358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12514'. [ 1307.139172][ T28] audit: type=1400 audit(2000000842.007:7318): avc: denied { write } for pid=14341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1307.660516][ T28] audit: type=1400 audit(2000000842.497:7319): avc: denied { write } for pid=14364 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1307.803343][ T28] audit: type=1400 audit(2000000842.677:7320): avc: denied { write } for pid=14376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1308.398921][ T28] audit: type=1400 audit(2000000843.267:7321): avc: denied { write } for pid=14393 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1308.820978][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12528'. [ 1308.880658][ T28] audit: type=1400 audit(2000000843.747:7322): avc: denied { write } for pid=14400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1308.933865][ T28] audit: type=1400 audit(2000000843.807:7323): avc: denied { write } for pid=14428 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1309.670784][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12534'. [ 1310.545682][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12539'. [ 1310.556892][T14467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.577504][T14467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.755549][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12546'. [ 1311.496949][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1311.497035][ T28] audit: type=1400 audit(2000000846.367:7328): avc: denied { write } for pid=14506 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1312.018978][ T28] audit: type=1400 audit(2000000846.887:7329): avc: denied { write } for pid=14530 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1312.202160][T14535] netlink: 'syz.3.12554': attribute type 1 has an invalid length. [ 1312.507901][T14535] macvlan3: entered promiscuous mode [ 1312.523784][T14535] macvlan3: entered allmulticast mode [ 1312.589962][T14547] netlink: 87 bytes leftover after parsing attributes in process `syz.3.12557'. [ 1313.070688][T14581] binfmt_misc: register: failed to install interpreter file ./file0 [ 1313.117479][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12574'. [ 1313.852618][ T28] audit: type=1400 audit(2000000848.727:7330): avc: denied { listen } for pid=14619 comm="syz.0.12592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1314.037661][T14635] netlink: 'syz.3.12597': attribute type 10 has an invalid length. [ 1314.048451][T14635] syz_tun: entered promiscuous mode [ 1314.058419][T14635] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1314.098006][T14637] sch_tbf: peakrate 4 is lower than or equals to rate 8 ! [ 1314.514056][T14664] loop9: detected capacity change from 0 to 512 [ 1314.534461][T14664] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.12611: corrupted in-inode xattr: e_value out of bounds [ 1314.548703][T14664] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1314.548972][T14664] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.12611: couldn't read orphan inode 15 (err -117) [ 1314.558156][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1314.558182][ C0] EXT4-fs (loop9): initial error at time 2000000849: ext4_iget_extra_inode:5180: inode 15 [ 1314.558221][ C0] EXT4-fs (loop9): last error at time 2000000849: ext4_iget_extra_inode:5180: inode 15 [ 1314.599431][T14664] loop9: lost filesystem error report for type 5 error -117 [ 1314.600634][T14664] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1314.680200][ T28] audit: type=1400 audit(2000000849.527:7331): avc: denied { write } for pid=14663 comm="syz.9.12611" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1314.770829][T10363] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.539197][T14693] netlink: 52 bytes leftover after parsing attributes in process `syz.9.12622'. [ 1315.596039][T14693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.603336][T14693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.621665][T14695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12623'. [ 1315.737915][T14709] netlink: 'syz.1.12630': attribute type 4 has an invalid length. [ 1316.887322][T14738] netlink: 'syz.3.12643': attribute type 1 has an invalid length. [ 1316.928067][T14738] bond11: (slave bridge11): making interface the new active one [ 1316.936479][T14738] bond11: (slave bridge11): Enslaving as an active interface with an up link [ 1316.951041][T14738] macvlan4: entered promiscuous mode [ 1316.956836][T14738] macvlan4: entered allmulticast mode [ 1317.440728][T14752] tmpfs: Bad value for 'mpol' [ 1317.562483][T14767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.571179][T14767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.879256][T14795] netlink: 'syz.4.12663': attribute type 1 has an invalid length. [ 1317.898691][T14795] bond7: (slave bridge6): making interface the new active one [ 1317.906942][T14795] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 1317.917668][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12663'. [ 1317.971732][T14802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12666'. [ 1317.981549][T14802] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12666'. [ 1318.744933][T14820] netlink: 'syz.3.12674': attribute type 1 has an invalid length. [ 1318.810687][T14820] bond12: (slave bridge12): making interface the new active one [ 1318.820822][T14820] bond12: (slave bridge12): Enslaving as an active interface with an up link [ 1318.832296][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12674'. [ 1318.875515][T14827] tmpfs: Bad value for 'mpol' [ 1318.940217][T14831] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12679'. [ 1318.956919][T14831] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12679'. [ 1319.074222][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12684'. [ 1319.109848][T14851] netlink: 'syz.1.12688': attribute type 1 has an invalid length. [ 1319.264934][T14857] bond1: (slave bridge1): making interface the new active one [ 1319.273402][T14857] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1319.288549][T14861] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1319.288732][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12688'. [ 1319.306594][T14860] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12691'. [ 1319.368109][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12689'. [ 1319.382608][T14866] macsec1: entered promiscuous mode [ 1319.388038][T14866] batadv0: entered promiscuous mode [ 1319.393667][T14866] macsec1: entered allmulticast mode [ 1319.398997][T14866] batadv0: entered allmulticast mode [ 1319.404920][T14866] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1319.415360][T14866] batadv0: left allmulticast mode [ 1319.420491][T14866] batadv0: left promiscuous mode [ 1320.812333][T14915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.821268][T14915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.155169][ T28] audit: type=1400 audit(2000000856.987:7332): avc: denied { setopt } for pid=14954 comm="syz.4.12728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1322.792044][T14874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1323.008304][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12741'. [ 1324.071109][T12931] bond0: (slave syz_tun): Releasing backup interface [ 1324.277152][T15044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.284447][T15044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.291938][T15044] bridge_slave_0: entered allmulticast mode [ 1324.299069][T15044] bridge_slave_0: entered promiscuous mode [ 1324.306384][T15044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.313685][T15044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.320987][T15044] bridge_slave_1: entered allmulticast mode [ 1324.327724][T15044] bridge_slave_1: entered promiscuous mode [ 1324.348297][T15044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.359129][T15044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.380247][T15044] team0: Port device team_slave_0 added [ 1324.387470][T15044] team0: Port device team_slave_1 added [ 1324.405377][T15044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1324.412458][T15044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1324.438896][T15044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.450681][T15044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.457841][T15044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1324.484050][T15044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.516877][T15044] hsr_slave_0: entered promiscuous mode [ 1324.523290][T15044] hsr_slave_1: entered promiscuous mode [ 1324.529323][T15044] debugfs: 'hsr0' already exists in 'hsr' [ 1324.535274][T15044] Cannot create hsr debugfs directory [ 1324.608085][T15044] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.646033][T15044] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.717738][T15044] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.785877][T15044] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.977683][T15078] loop9: detected capacity change from 0 to 1024 [ 1325.984980][T15078] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1325.994059][T15078] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1326.005069][T15078] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1326.013222][T15078] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1326.019676][T14987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1326.021002][T15078] EXT4-fs error (device loop9): __ext4_get_inode_loc:4886: comm syz.9.12771: Invalid inode table block 0 in block_group 0 [ 1326.042275][T15078] loop9: lost filesystem error report for type 5 error -117 [ 1326.042462][T15078] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1326.042528][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1326.042551][ C1] EXT4-fs (loop9): initial error at time 2000000860: __ext4_get_inode_loc:4886 [ 1326.042576][ C1] EXT4-fs (loop9): last error at time 2000000860: __ext4_get_inode_loc:4886 [ 1326.083774][T15078] loop9: lost filesystem error report for type 5 error -117 [ 1326.089706][T15078] EXT4-fs error (device loop9): ext4_quota_write:7430: inode #3: comm syz.9.12771: mark_inode_dirty error [ 1326.100076][T15044] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1326.108823][T15078] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1326.117800][T15078] Quota error (device loop9): write_blk: dquota write failed [ 1326.134844][T15078] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1326.147584][T15044] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1326.155457][T15078] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.12771: Failed to acquire dquot type 0 [ 1326.167119][T15044] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1326.174079][T15078] loop9: lost filesystem error report for type 5 error -117 [ 1326.175412][T15078] EXT4-fs error (device loop9): __ext4_get_inode_loc:4886: comm syz.9.12771: Invalid inode table block 0 in block_group 0 [ 1326.199078][T15044] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1326.224603][T15044] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1326.231939][T15078] loop9: lost filesystem error report for type 5 error -117 [ 1326.236012][T15078] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1326.259899][T15044] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1326.269086][T15044] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1326.276388][T15078] loop9: lost filesystem error report for type 5 error -117 [ 1326.276653][T15078] EXT4-fs error (device loop9): ext4_ext_truncate:4557: inode #15: comm syz.9.12771: mark_inode_dirty error [ 1326.308867][T15078] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1326.309479][T15044] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1326.328848][T15078] EXT4-fs error (device loop9): __ext4_get_inode_loc:4886: comm syz.9.12771: Invalid inode table block 0 in block_group 0 [ 1326.351397][T15078] loop9: lost filesystem error report for type 5 error -117 [ 1326.352465][T15078] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1326.462836][T15089] tmpfs: Bad value for 'mpol' [ 1326.490583][T15044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1326.542401][T15044] 8021q: adding VLAN 0 to HW filter on device team0 [ 1326.594349][ T3803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.601584][ T3803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1326.701706][T22472] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.708864][T22472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1326.756272][T15044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1326.768332][T15044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1326.836255][T15078] loop9: lost filesystem error report for type 5 error -117 [ 1326.836374][T15078] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 1326.852320][T15078] loop9: lost filesystem error report for type 5 error -117 [ 1326.852523][T15078] EXT4-fs error (device loop9): __ext4_get_inode_loc:4886: comm syz.9.12771: Invalid inode table block 0 in block_group 0 [ 1326.881468][T15078] loop9: lost filesystem error report for type 5 error -117 [ 1326.882315][T15078] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1326.907593][T15078] loop9: lost filesystem error report for type 5 error -117 [ 1326.907692][T15078] EXT4-fs error (device loop9): ext4_truncate:4691: inode #15: comm syz.9.12771: mark_inode_dirty error [ 1326.926789][T15078] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1326.927509][T15078] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 1326.950520][T15078] EXT4-fs (loop9): 1 truncate cleaned up [ 1326.958597][T15078] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1326.997509][T15117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12784'. [ 1327.007234][T15078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.017003][T15078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.090547][T15132] qrtr: Invalid version 0 [ 1327.091447][T15044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1327.182012][T15044] veth0_vlan: entered promiscuous mode [ 1327.190813][T15044] veth1_vlan: entered promiscuous mode [ 1327.212132][T15044] veth0_macvtap: entered promiscuous mode [ 1327.220356][T15044] veth1_macvtap: entered promiscuous mode [ 1327.232186][T15044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1327.245254][T15044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1327.256582][ T6038] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.265599][ T6021] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.276395][ T6038] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.285395][ T6038] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.566512][T10363] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1327.634598][T15164] netlink: 'syz.9.12796': attribute type 1 has an invalid length. [ 1327.656019][T15164] bond8: (slave bridge8): making interface the new active one [ 1327.664424][T15164] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 1327.675154][T15164] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12796'. [ 1328.211056][T15184] qrtr: Invalid version 0 [ 1328.256285][T15188] netlink: 'syz.9.12807': attribute type 1 has an invalid length. [ 1328.294433][T15188] bond9: (slave bridge9): making interface the new active one [ 1328.302775][T15188] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 1328.314110][T15188] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12807'. [ 1329.158284][T15214] qrtr: Invalid version 0 [ 1329.205209][T15220] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12822'. [ 1330.189423][T15248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.198155][T15248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.248932][T15151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1330.348821][T15268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.357491][T15268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1330.901439][ T28] audit: type=1400 audit(2000000865.767:7333): avc: denied { ioctl } for pid=15275 comm="syz.0.12846" path="socket:[160639]" dev="sockfs" ino=160639 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1330.951553][T15280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.960714][T15280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.873761][ T28] audit: type=1400 audit(2000000866.737:7334): avc: denied { unmount } for pid=15315 comm="syz.4.12863" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1331.971086][T15329] netlink: 'syz.3.12868': attribute type 1 has an invalid length. [ 1332.174947][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12868'. [ 1332.700609][T15369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.709799][T15369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.743091][T15375] nfs: Bad value for 'source' [ 1332.765895][T15379] netlink: 256 bytes leftover after parsing attributes in process `syz.3.12892'. [ 1332.874851][T15395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.885292][T15395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.551624][T15420] RDS: rds_bind could not find a transport for ::ffff:0:0:fc02, load rds_tcp or rds_rdma? [ 1333.740320][T15443] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1333.777638][T15444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12912'. [ 1333.894147][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12923'. [ 1333.903990][T15448] netlink: 'syz.3.12923': attribute type 5 has an invalid length. [ 1333.912616][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12923'. [ 1333.921962][T15448] netlink: 'syz.3.12923': attribute type 5 has an invalid length. [ 1334.327114][T15476] netlink: 76 bytes leftover after parsing attributes in process `syz.4.12934'. [ 1334.725118][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12955'. [ 1334.838489][T15537] qrtr: Invalid version 0 [ 1335.163308][T15544] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12962'. [ 1335.172462][T15544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12962'. [ 1335.181747][T15544] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12962'. [ 1335.317677][T15553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12966'. [ 1335.655189][T15590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=15590 comm=syz.4.12983 [ 1335.670484][T15592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.691646][T15592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.764353][T15595] loop3: detected capacity change from 0 to 1024 [ 1335.771990][T15595] EXT4-fs: dax option not supported [ 1336.330832][T15637] qrtr: Invalid version 0 [ 1336.991389][T15653] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1337.473755][T15493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1338.576588][T15763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.585714][T15763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.595489][T15763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.604098][T15763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.673330][T15710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1341.411038][T15825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.419720][T15825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.707366][T15837] netlink: 172 bytes leftover after parsing attributes in process `syz.4.13090'. [ 1341.763436][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13091'. [ 1341.772840][T15839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13091'. [ 1341.782074][T15839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13091'. [ 1342.201136][T15871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.209779][T15871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.546267][T15919] tmpfs: Bad value for 'mpol' [ 1344.398172][T15820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1344.448947][T15951] loop3: detected capacity change from 0 to 128 [ 1344.568169][T15951] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1344.580583][T15951] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1344.604820][ T28] audit: type=1326 audit(2000000879.417:7335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.4.13144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb332d8ce59 code=0x7ffc0000 [ 1344.626405][T15964] netlink: 416 bytes leftover after parsing attributes in process `syz.4.13145'. [ 1344.634421][T15044] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1344.643207][ T28] audit: type=1326 audit(2000000879.417:7336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.4.13144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb332d8ce59 code=0x7ffc0000 [ 1344.675420][ T28] audit: type=1326 audit(2000000879.417:7337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.4.13144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb332d8ce59 code=0x7ffc0000 [ 1344.717744][ T28] audit: type=1326 audit(2000000879.417:7338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.4.13144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb332d8ce59 code=0x7ffc0000 [ 1344.744135][ T28] audit: type=1326 audit(2000000879.417:7339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.4.13144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb332d8cbc2 code=0x7ffc0000 [ 1344.778550][ T28] audit: type=1326 audit(2000000879.417:7340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.4.13144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb332d4d68e code=0x7ffc0000 [ 1344.807801][ T28] audit: type=1326 audit(2000000879.417:7341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.4.13144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb332d8cc87 code=0x7ffc0000 [ 1344.914201][ T28] audit: type=1326 audit(2000000879.417:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.4.13144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb332d4d68e code=0x7ffc0000 [ 1345.254866][ T28] audit: type=1326 audit(2000000879.417:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.4.13144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb332d4d68e code=0x7ffc0000 [ 1345.293807][ T28] audit: type=1326 audit(2000000879.417:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15961 comm="syz.4.13144" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb332d8ce59 code=0x7ffc0000 [ 1345.441944][T15981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.491308][T15982] tmpfs: Bad value for 'mpol' [ 1345.674189][T15981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.208419][T15996] netlink: 416 bytes leftover after parsing attributes in process `syz.0.13157'. [ 1347.008421][T16015] tmpfs: Bad value for 'mpol' [ 1347.246897][T16042] netlink: 416 bytes leftover after parsing attributes in process `syz.0.13177'. [ 1347.295100][T16048] tmpfs: Bad value for 'mpol' [ 1348.086838][T16072] netlink: 416 bytes leftover after parsing attributes in process `syz.3.13188'. [ 1348.274725][T16081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.282152][T16081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.394789][T16091] netlink: 7 bytes leftover after parsing attributes in process `syz.0.13199'. [ 1348.406887][T16085] loop3: detected capacity change from 0 to 512 [ 1348.463383][T16085] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1348.482412][T16085] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1348.499306][T16085] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1348.506681][T16085] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.13196: Allocating blocks 41-42 which overlap fs metadata [ 1348.520972][T16085] fserror_report: 1 callbacks suppressed [ 1348.520989][T16085] loop3: lost filesystem error report for type 5 error -117 [ 1348.527022][T16085] EXT4-fs (loop3): Remounting filesystem read-only [ 1348.534372][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1348.534388][ C1] EXT4-fs (loop3): initial error at time 2000000883: ext4_mb_mark_diskspace_used:4222 [ 1348.534417][ C1] EXT4-fs (loop3): last error at time 2000000883: ext4_mb_mark_diskspace_used:4222 [ 1348.566942][T16085] EXT4-fs (loop3): 1 truncate cleaned up [ 1348.573290][T16085] EXT4-fs (loop3): pa ffff8881074adbd0: logic 1, phys. 41, len 23 [ 1348.579521][T16099] netlink: 416 bytes leftover after parsing attributes in process `syz.0.13202'. [ 1348.595240][T16085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1348.623069][T15044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1348.698990][T16105] netlink: 'syz.0.13206': attribute type 1 has an invalid length. [ 1348.828261][T16107] bond6: (slave bridge7): making interface the new active one [ 1348.837702][T16107] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 1349.361881][T16134] vlan2: entered promiscuous mode [ 1349.368685][T16134] bridge0: entered promiscuous mode [ 1349.377380][T16134] bridge0: port 3(vlan2) entered blocking state [ 1349.404444][T16134] bridge0: port 3(vlan2) entered disabled state [ 1349.457231][T16134] vlan2: entered allmulticast mode [ 1349.508046][T16134] bridge0: entered allmulticast mode [ 1349.705697][T16144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13219'. [ 1349.762772][T16134] vlan2: left allmulticast mode [ 1349.795543][T16134] bridge0: left allmulticast mode [ 1349.962795][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 1349.962812][ T28] audit: type=1326 audit(2000000884.827:7359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16156 comm="syz.1.13224" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1271dce59 code=0x7ffc0000 [ 1350.012796][ T28] audit: type=1326 audit(2000000884.827:7360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16156 comm="syz.1.13224" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1271dce59 code=0x7ffc0000 [ 1350.038574][ T28] audit: type=1326 audit(2000000884.827:7361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16156 comm="syz.1.13224" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1271dce59 code=0x7ffc0000 [ 1350.100771][ T28] audit: type=1326 audit(2000000884.827:7362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16156 comm="syz.1.13224" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe1271dce59 code=0x7ffc0000 [ 1350.168764][ T28] audit: type=1326 audit(2000000884.827:7363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16156 comm="syz.1.13224" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1271dce59 code=0x7ffc0000 [ 1350.922802][ T28] audit: type=1326 audit(2000000884.827:7364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16156 comm="syz.1.13224" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1271dce59 code=0x7ffc0000 [ 1351.059122][T16173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13231'. [ 1351.098333][ T28] audit: type=1326 audit(2000000884.827:7365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16156 comm="syz.1.13224" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1271dce59 code=0x7ffc0000 [ 1351.124034][ T28] audit: type=1326 audit(2000000884.827:7366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16156 comm="syz.1.13224" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1271dce59 code=0x7ffc0000 [ 1351.169183][ T28] audit: type=1326 audit(2000000884.827:7367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16156 comm="syz.1.13224" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fe1271dce59 code=0x7ffc0000 [ 1351.201916][ T28] audit: type=1326 audit(2000000884.827:7368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16156 comm="syz.1.13224" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1271dce59 code=0x7ffc0000 [ 1351.237128][T16191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.258729][T16191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.352836][T16210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13247'. [ 1351.529824][T16226] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1351.751149][T16238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13261'. [ 1352.600824][T16271] netlink: 416 bytes leftover after parsing attributes in process `syz.4.13273'. [ 1352.684619][T16276] loop3: detected capacity change from 0 to 512 [ 1352.691971][T16276] EXT4-fs: Ignoring removed oldalloc option [ 1352.818809][T16276] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.13271: Parent and EA inode have the same ino 15 [ 1352.831305][T16276] loop3: lost filesystem error report for type 5 error -117 [ 1352.832198][T16276] EXT4-fs (loop3): Remounting filesystem read-only [ 1352.839526][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1352.839542][ C0] EXT4-fs (loop3): initial error at time 2000000887: ext4_xattr_inode_iget:437 [ 1352.839562][ C0] EXT4-fs (loop3): last error at time 2000000887: ext4_xattr_inode_iget:437 [ 1352.870399][T16276] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -30) [ 1352.879455][T16276] EXT4-fs (loop3): 1 orphan inode deleted [ 1352.886077][T16276] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1353.251433][T15044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1353.269856][T16299] netlink: 416 bytes leftover after parsing attributes in process `syz.3.13284'. [ 1353.842382][T16323] netlink: 396 bytes leftover after parsing attributes in process `syz.4.13295'. [ 1353.927515][T16333] netlink: 'syz.4.13300': attribute type 9 has an invalid length. [ 1355.020301][T16373] loop9: detected capacity change from 0 to 128 [ 1355.067307][T16373] ext4: Unknown parameter 'smackfsfloor' [ 1355.144540][T16256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1355.181537][T16373] loop9: detected capacity change from 0 to 512 [ 1355.232465][T16373] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.13316: inode has both inline data and extents flags [ 1355.240405][T16380] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1355.252691][T16373] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1355.253702][T16373] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.13316: couldn't read orphan inode 15 (err -117) [ 1355.262917][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1355.262934][ C1] EXT4-fs (loop9): initial error at time 2000000890: ext4_orphan_get:1399: inode 15 [ 1355.262958][ C1] EXT4-fs (loop9): last error at time 2000000890: ext4_orphan_get:1399: inode 15 [ 1355.302143][T16373] loop9: lost filesystem error report for type 5 error -117 [ 1355.598746][ T3803] bridge_slave_1: left allmulticast mode [ 1355.676241][ T3803] bridge_slave_1: left promiscuous mode [ 1355.718753][ T3803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.782469][ T3803] bridge_slave_0: left allmulticast mode [ 1355.809454][ T3803] bridge_slave_0: left promiscuous mode [ 1355.833076][ T3803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.977449][ T3803] gretap0 (unregistering): left promiscuous mode [ 1355.985757][ T3803] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 1356.012773][ T3803] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 1356.024913][ T3803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1356.036482][T16373] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1356.054379][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 1356.054397][ T28] audit: type=1400 audit(2000000890.927:7383): avc: denied { write } for pid=16372 comm="syz.9.13316" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1356.090413][T10363] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1356.102168][ T3803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1356.112769][ T3803] bond0 (unregistering): Released all slaves [ 1356.121178][ T3803] bond1 (unregistering): Released all slaves [ 1356.138159][ T3803] bond2 (unregistering): (slave bond3): Releasing backup interface [ 1356.165682][ T3803] bond2 (unregistering): Released all slaves [ 1356.173134][T16402] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13326'. [ 1356.180212][ T3803] bond3 (unregistering): Released all slaves [ 1356.191998][ T3803] bond4 (unregistering): Released all slaves [ 1356.201847][ T3803] bond5 (unregistering): Released all slaves [ 1356.211326][ T3803] bond6 (unregistering): Released all slaves [ 1356.238946][ T3803] bond7 (unregistering): Released all slaves [ 1356.291443][ T3803] tipc: Left network mode [ 1356.305294][ T3803] veth1_to_team: left promiscuous mode [ 1356.315205][ T3803] hsr_slave_0: left promiscuous mode [ 1356.320957][ T3803] hsr_slave_1: left promiscuous mode [ 1356.327281][ T3803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1356.335069][ T3803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.343175][ T3803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1356.350756][ T3803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.368242][ T3803] veth1_macvtap: left promiscuous mode [ 1356.374013][ T3803] veth0_macvtap: left promiscuous mode [ 1356.379624][ T3803] veth1_vlan: left promiscuous mode [ 1356.385724][ T3803] veth0_vlan: left promiscuous mode [ 1356.469949][ T3803] team0 (unregistering): Port device team_slave_1 removed [ 1356.480887][T16443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13340'. [ 1356.491971][ T3803] team0 (unregistering): Port device team_slave_0 removed [ 1357.580391][T16485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.591266][T16485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.033633][T16513] netlink: 48 bytes leftover after parsing attributes in process `syz.9.13371'. [ 1359.159471][T16523] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13375'. [ 1359.273385][T16411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1359.894783][T16539] program syz.3.13382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1360.550113][T16557] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13388'. [ 1360.564496][T16557] batadv0: entered promiscuous mode [ 1360.569972][T16557] macsec1: entered promiscuous mode [ 1360.575524][T16557] macsec1: entered allmulticast mode [ 1360.580830][T16557] batadv0: entered allmulticast mode [ 1360.587499][T16557] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1360.603067][T16557] batadv0: left allmulticast mode [ 1360.608453][T16557] batadv0: left promiscuous mode [ 1361.377057][T16573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13393'. [ 1361.695125][T16591] loop3: detected capacity change from 0 to 512 [ 1361.704690][T16591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1361.731861][T15044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1362.028631][T16605] netlink: 'syz.4.13406': attribute type 6 has an invalid length. [ 1362.414655][T16613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.425905][T16613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.645391][T16559] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1363.810409][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13426'. [ 1363.967574][T16655] netlink: 'syz.9.13427': attribute type 83 has an invalid length. [ 1364.116440][T16659] netlink: 60 bytes leftover after parsing attributes in process `syz.9.13429'. [ 1364.127160][T16659] unsupported nlmsg_type 40 [ 1364.321786][T16663] loop3: detected capacity change from 0 to 256 [ 1364.787033][T16694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.797501][T16694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.288067][ T28] audit: type=1326 audit(2000000903.157:7384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16817 comm="syz.9.13495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fd30e406bd7 code=0x0 [ 1370.898143][T16781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1371.243955][T16911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.252739][T16911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.266007][T16910] netlink: 48 bytes leftover after parsing attributes in process `syz.9.13532'. [ 1371.515361][T16937] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13545'. [ 1371.578638][T16948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.588336][T16948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.925127][T16963] netlink: 288 bytes leftover after parsing attributes in process `syz.1.13556'. [ 1372.042093][T16969] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13558'. [ 1372.123251][T16984] 9p: Bad value for 'rfdno' [ 1372.729016][T17017] loop3: detected capacity change from 0 to 1024 [ 1372.743921][T17017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1373.143556][T17029] loop9: detected capacity change from 0 to 128 [ 1373.389333][T17046] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13592'. [ 1373.450271][T17050] 9p: Bad value for 'rfdno' [ 1373.924166][T15044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1374.075201][T17072] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13603'. [ 1374.307173][T17097] loop3: detected capacity change from 0 to 128 [ 1374.323948][T17097] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1374.338218][T17097] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1374.424768][T17102] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13610'. [ 1375.970677][T15044] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1376.236327][T17182] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13628'. [ 1376.675610][T17212] 9p: Bad value for 'rfdno' [ 1378.160496][T17294] loop9: detected capacity change from 0 to 512 [ 1378.169611][T17294] EXT4-fs (loop9): external journal device major/minor numbers have changed [ 1378.204621][T17294] EXT4-fs (loop9): failed to open journal device unknown-block(1,4351) -ENXIO [ 1378.230349][T17300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.239944][T17300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.250509][T17300] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13679'. [ 1379.319831][ T28] audit: type=1326 audit(2000525202.185:7385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.0.13699" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5bc4ce59 code=0x7ffc0000 [ 1379.345757][ T28] audit: type=1326 audit(2000525202.185:7386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.0.13699" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5bc4ce59 code=0x7ffc0000 [ 1379.372487][ T28] audit: type=1326 audit(2000525202.185:7387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.0.13699" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5bc4ce59 code=0x7ffc0000 [ 1379.398789][ T28] audit: type=1326 audit(2000525202.185:7388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.0.13699" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d5bc4ce59 code=0x7ffc0000 [ 1379.424774][ T28] audit: type=1326 audit(2000525202.185:7389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.0.13699" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5bc4ce59 code=0x7ffc0000 [ 1379.451799][ T28] audit: type=1326 audit(2000525202.185:7390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.0.13699" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5bc4ce59 code=0x7ffc0000 [ 1379.478093][ T28] audit: type=1326 audit(2000525202.185:7391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.0.13699" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5bc4ce59 code=0x7ffc0000 [ 1379.504416][ T28] audit: type=1326 audit(2000525202.185:7392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.0.13699" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5d5bc4ce59 code=0x7ffc0000 [ 1379.533356][ T28] audit: type=1326 audit(2000525202.185:7393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.0.13699" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5bc4ce59 code=0x7ffc0000 [ 1379.559159][ T28] audit: type=1326 audit(2000525202.185:7394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.0.13699" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5bc4ce59 code=0x7ffc0000 [ 1381.752710][T17330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1384.014551][T17506] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13759'. [ 1385.057337][T17536] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13771'. [ 1385.147664][T17435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1385.857375][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 1385.857393][ T28] audit: type=1400 audit(2000525208.727:7416): avc: denied { lock } for pid=17571 comm="syz.9.13780" path="socket:[168057]" dev="sockfs" ino=168057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1385.949867][T17553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.964796][T17553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.985002][T17553] bridge_slave_0: entered allmulticast mode [ 1385.998935][T17553] bridge_slave_0: entered promiscuous mode [ 1386.030320][T17553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.061936][T17553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.099449][T17553] bridge_slave_1: entered allmulticast mode [ 1386.107161][T17588] netlink: 104 bytes leftover after parsing attributes in process `syz.9.13785'. [ 1386.117392][T17553] bridge_slave_1: entered promiscuous mode [ 1386.172916][T17553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1386.209689][T17553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.240693][T17553] team0: Port device team_slave_0 added [ 1386.248809][T17553] team0: Port device team_slave_1 added [ 1386.265979][T17553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1386.273066][T17553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.299558][T17553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1386.311554][T17553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1386.318557][T17553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.344640][T17553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1386.374272][T17553] hsr_slave_0: entered promiscuous mode [ 1386.380673][T17553] hsr_slave_1: entered promiscuous mode [ 1386.386674][T17553] debugfs: 'hsr0' already exists in 'hsr' [ 1386.392510][T17553] Cannot create hsr debugfs directory [ 1386.576332][T17606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.585157][T17606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.721449][T17553] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1386.730516][T17553] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1386.738320][T17553] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1386.750170][T17553] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1386.760129][T17553] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1386.770616][T17553] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1386.779120][T17553] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1386.788255][T17553] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1386.831337][T17553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.844409][T17553] 8021q: adding VLAN 0 to HW filter on device team0 [ 1386.865411][T17553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1386.876167][T17553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1386.889115][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.896295][ T6021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1386.906321][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.913444][ T6021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1387.042099][T17553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1387.325071][T17553] veth0_vlan: entered promiscuous mode [ 1387.334316][T17553] veth1_vlan: entered promiscuous mode [ 1387.352898][T17553] veth0_macvtap: entered promiscuous mode [ 1387.361313][T17553] veth1_macvtap: entered promiscuous mode [ 1387.840850][T17553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1387.850175][T17553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1387.864647][ T6042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.873656][ T6042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.887737][ T6042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.912024][ T6042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.304361][ T28] audit: type=1326 audit(2000525211.158:7417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17654 comm="syz.1.13802" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1271dce59 code=0x0 [ 1388.336048][T17670] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13802'. [ 1388.881975][T17679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13810'. [ 1389.891951][ T28] audit: type=1400 audit(2000525212.768:7418): avc: denied { read } for pid=17701 comm="syz.4.13817" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1389.921633][ T28] audit: type=1400 audit(2000525212.768:7419): avc: denied { open } for pid=17701 comm="syz.4.13817" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1390.020957][T17712] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13822'. [ 1391.009486][T17743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.019241][T17743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.651361][T17755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.663737][T17755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.232436][ T28] audit: type=1326 audit(2000525215.109:7420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17771 comm="syz.4.13847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c2f1ce59 code=0x7ffc0000 [ 1392.258746][ T28] audit: type=1326 audit(2000525215.109:7421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17771 comm="syz.4.13847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c2f1ce59 code=0x7ffc0000 [ 1392.284659][ T28] audit: type=1326 audit(2000525215.109:7422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17771 comm="syz.4.13847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c2f1ce59 code=0x7ffc0000 [ 1392.313190][ T28] audit: type=1326 audit(2000525215.109:7423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17771 comm="syz.4.13847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c2f1ce59 code=0x7ffc0000 [ 1392.341255][ T28] audit: type=1326 audit(2000525215.109:7424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17771 comm="syz.4.13847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6c2f1ce59 code=0x7ffc0000 [ 1392.366979][ T28] audit: type=1326 audit(2000525215.109:7425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17771 comm="syz.4.13847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c2f1ce59 code=0x7ffc0000 [ 1392.392883][ T28] audit: type=1326 audit(2000525215.109:7426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17771 comm="syz.4.13847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c2f1ce59 code=0x7ffc0000 [ 1392.422130][ T28] audit: type=1326 audit(2000525215.109:7427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17771 comm="syz.4.13847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c2f1ce59 code=0x7ffc0000 [ 1392.449620][ T28] audit: type=1326 audit(2000525215.109:7428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17771 comm="syz.4.13847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc6c2f1ce59 code=0x7ffc0000 [ 1392.475471][ T28] audit: type=1326 audit(2000525215.109:7429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17771 comm="syz.4.13847" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6c2f1ce59 code=0x7ffc0000 [ 1393.000193][T17709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1393.869341][T17819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.879401][T17819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.732018][T17835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13873'. [ 1394.749006][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13875'. [ 1394.758231][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13875'. [ 1395.292959][T17900] loop9: detected capacity change from 0 to 1024 [ 1395.300021][T17900] EXT4-fs: Ignoring removed bh option [ 1395.306651][T17900] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1395.327946][T17900] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1396.519492][T17926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.526644][T17926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.534234][T17926] bridge_slave_0: entered allmulticast mode [ 1396.541063][T17926] bridge_slave_0: entered promiscuous mode [ 1396.548204][T17926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.555336][T17926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.562790][T17926] bridge_slave_1: entered allmulticast mode [ 1396.569456][T17926] bridge_slave_1: entered promiscuous mode [ 1396.578553][ T6038] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.608127][T17926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1396.619079][T17926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1396.644392][T17926] team0: Port device team_slave_0 added [ 1396.651355][T17926] team0: Port device team_slave_1 added [ 1396.667677][T17926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.674626][T17926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.700581][T17926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.716452][T17926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.723491][T17926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.749567][T17926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.762771][ T6038] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.792235][T17926] hsr_slave_0: entered promiscuous mode [ 1396.798585][T17926] hsr_slave_1: entered promiscuous mode [ 1396.804567][T17926] debugfs: 'hsr0' already exists in 'hsr' [ 1396.810417][T17926] Cannot create hsr debugfs directory [ 1396.824530][ T6038] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.899655][ T6038] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.989371][ T6038] bridge_slave_1: left allmulticast mode [ 1396.995167][ T6038] bridge_slave_1: left promiscuous mode [ 1397.001116][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.009039][ T6038] bridge_slave_0: left allmulticast mode [ 1397.014718][ T6038] bridge_slave_0: left promiscuous mode [ 1397.020612][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.074786][ T6038] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1397.091846][ T6038] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1397.102077][ T6038] bond2 (unregistering): (slave bridge2): Releasing active interface [ 1397.112774][ T6038] bond3 (unregistering): (slave bridge3): Releasing active interface [ 1397.124976][ T6038] bond4 (unregistering): (slave bridge4): Releasing active interface [ 1397.135359][ T6038] bond5 (unregistering): (slave bridge5): Releasing active interface [ 1397.148850][ T6038] bond6 (unregistering): (slave bridge7): Releasing active interface [ 1397.161645][ T6038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1397.171774][ T6038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1397.182044][ T6038] bond0 (unregistering): (slave team0): Releasing backup interface [ 1397.190709][ T6038] bond0 (unregistering): Released all slaves [ 1397.199097][ T6038] bond1 (unregistering): Released all slaves [ 1397.208148][ T6038] bond2 (unregistering): Released all slaves [ 1397.216969][ T6038] bond3 (unregistering): Released all slaves [ 1397.225730][ T6038] bond4 (unregistering): Released all slaves [ 1397.234494][ T6038] bond5 (unregistering): Released all slaves [ 1397.243862][ T6038] bond6 (unregistering): Released all slaves [ 1397.252466][ T6038] bond7 (unregistering): Released all slaves [ 1397.296418][ T6038] hsr_slave_0: left promiscuous mode [ 1397.302329][ T6038] hsr_slave_1: left promiscuous mode [ 1397.308305][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1397.316173][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1397.323933][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1397.331878][ T6038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1397.343014][ T6038] veth1_macvtap: left promiscuous mode [ 1397.348820][ T6038] veth0_macvtap: left promiscuous mode [ 1397.354580][ T6038] veth1_vlan: left promiscuous mode [ 1397.362965][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 1397.362988][ T28] audit: type=1400 audit(2000525220.240:7445): avc: denied { write } for pid=17960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1397.422304][ T28] audit: type=1400 audit(2000525220.280:7446): avc: denied { write } for pid=17971 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1397.488416][ T6038] team0 (unregistering): Port device team_slave_1 removed [ 1397.510391][ T28] audit: type=1400 audit(2000525220.390:7447): avc: denied { write } for pid=17973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1397.536768][ T6038] team0 (unregistering): Port device team_slave_0 removed [ 1397.557314][ T28] audit: type=1400 audit(2000525220.430:7448): avc: denied { write } for pid=17984 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1397.661688][ T28] audit: type=1400 audit(2000525220.540:7449): avc: denied { write } for pid=17987 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1397.698000][ T28] audit: type=1400 audit(2000525220.580:7450): avc: denied { write } for pid=18003 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1397.823445][ T28] audit: type=1400 audit(2000525220.700:7451): avc: denied { write } for pid=18005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1397.869679][ T28] audit: type=1400 audit(2000525220.750:7452): avc: denied { write } for pid=18019 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1397.961844][ T28] audit: type=1400 audit(2000525220.840:7453): avc: denied { write } for pid=18021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1397.995177][ T28] audit: type=1400 audit(2000525220.870:7454): avc: denied { write } for pid=18032 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1398.270079][T17893] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1398.292863][T10363] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1398.438800][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1398.623697][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1398.760628][T17926] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1398.790566][T17926] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1398.826814][T17926] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1398.858136][T17926] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1398.882270][T17926] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1398.928904][T17926] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1398.969695][T17926] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1399.000927][T17926] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1399.201223][T17926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.222170][T17926] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.239771][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.246899][ T5600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.272845][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1399.293365][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.300524][ T5600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1399.504159][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1399.638404][T17926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.859212][T18189] loop3: detected capacity change from 0 to 764 [ 1400.753263][T18199] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1401.055620][T17926] veth0_vlan: entered promiscuous mode [ 1401.091306][T17926] veth1_vlan: entered promiscuous mode [ 1401.154203][T17926] veth0_macvtap: entered promiscuous mode [ 1401.180907][T17926] veth1_macvtap: entered promiscuous mode [ 1401.238498][T17926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1401.284855][T17926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1401.309591][T24926] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.330425][T24926] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.356991][T24926] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.367220][T24926] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1401.517310][T18239] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13955'. [ 1401.537257][T18239] veth1_to_team: entered promiscuous mode [ 1401.543833][T18239] gretap0: entered promiscuous mode [ 1401.568212][T18239] debugfs: 'hsr1' already exists in 'hsr' [ 1401.581664][T18239] Cannot create hsr debugfs directory [ 1401.597307][T18239] hsr1: entered promiscuous mode [ 1401.833923][T18267] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13963'. [ 1401.874448][ T6032] bond0: (slave bond_slave_0): interface is now down [ 1401.896424][ T6032] bond0: (slave bond_slave_1): interface is now down [ 1401.913569][ T6032] bond0: now running without any active interface! [ 1401.976110][T18285] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13966'. [ 1402.033737][T18269] bridge0: port 3(team0) entered blocking state [ 1402.046092][T18269] bridge0: port 3(team0) entered disabled state [ 1402.056422][T18269] team0: entered allmulticast mode [ 1402.062287][T18269] team_slave_0: entered allmulticast mode [ 1402.076323][T18269] team_slave_1: entered allmulticast mode [ 1402.091795][T18269] team0: entered promiscuous mode [ 1402.096862][T18269] team_slave_0: entered promiscuous mode [ 1402.102671][T18269] team_slave_1: entered promiscuous mode [ 1402.270529][T18324] netlink: 32 bytes leftover after parsing attributes in process `syz.9.13976'. [ 1402.294900][ T6032] bond0: (slave team0): link status definitely down, disabling slave [ 1402.532299][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 1402.532332][ T28] audit: type=1400 audit(2000525225.311:7471): avc: denied { write } for pid=18301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1402.825508][ T28] audit: type=1400 audit(2000525225.702:7472): avc: denied { write } for pid=18348 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1403.363614][ T28] audit: type=1400 audit(2000525226.242:7473): avc: denied { write } for pid=18357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1403.555802][ T28] audit: type=1400 audit(2000525226.292:7474): avc: denied { write } for pid=18376 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1404.478695][ T28] audit: type=1400 audit(2000525227.362:7475): avc: denied { write } for pid=18380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1404.506779][T18447] loop8: detected capacity change from 0 to 512 [ 1404.536395][T18457] 9p: Could not find request transport: fd0x0000000000000005 [ 1404.553983][ T28] audit: type=1400 audit(2000525227.392:7476): avc: denied { write } for pid=18469 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1404.625333][T18471] bridge0: port 3(team0) entered blocking state [ 1404.634583][T18471] bridge0: port 3(team0) entered disabled state [ 1404.645497][T18471] team0: entered allmulticast mode [ 1404.651334][T18471] team_slave_0: entered allmulticast mode [ 1404.659156][T18471] team_slave_1: entered allmulticast mode [ 1404.700232][T18447] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1404.761503][T17926] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1404.762673][T18471] team0: entered promiscuous mode [ 1404.775622][T18471] team_slave_0: entered promiscuous mode [ 1404.781441][T18471] team_slave_1: entered promiscuous mode [ 1404.788335][T18471] bridge0: port 3(team0) entered blocking state [ 1404.794640][T18471] bridge0: port 3(team0) entered forwarding state [ 1404.842927][T18485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.865335][T18485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.685939][T18611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.717149][T18611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.780590][T18620] netlink: 'syz.1.14036': attribute type 1 has an invalid length. [ 1405.813719][T18620] macvlan2: entered promiscuous mode [ 1405.819198][T18620] macvlan2: entered allmulticast mode [ 1405.825616][T18620] bond3: entered promiscuous mode [ 1405.830963][T18620] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1405.842405][T18620] bond3: left promiscuous mode [ 1406.198983][T13268] kernel read not supported for file [fscontext] (pid: 13268 comm: kworker/0:13) [ 1406.350459][T18682] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14060'. [ 1406.432806][T18684] netlink: 48 bytes leftover after parsing attributes in process `syz.8.14061'. [ 1408.277804][T18700] syzkaller0: entered promiscuous mode [ 1408.283500][T18700] syzkaller0: entered allmulticast mode [ 1409.065402][T18652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1409.150779][T18712] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14072'. [ 1409.168049][T18719] netlink: 'syz.1.14075': attribute type 1 has an invalid length. [ 1409.274415][T18724] macvlan2: entered promiscuous mode [ 1409.291282][T18724] macvlan2: entered allmulticast mode [ 1409.309493][T18724] bond4: entered promiscuous mode [ 1409.316105][T18724] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1409.333313][T18724] bond4: left promiscuous mode [ 1409.341258][T18733] netlink: 'syz.8.14078': attribute type 1 has an invalid length. [ 1412.329448][T18728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1413.140619][T18811] loop8: detected capacity change from 0 to 764 [ 1415.132810][T18873] loop8: detected capacity change from 0 to 764 [ 1415.733898][T18875] netlink: 'syz.3.14132': attribute type 1 has an invalid length. [ 1415.758082][T18875] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1415.777327][T18875] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1415.793311][T18875] macvlan2: entered promiscuous mode [ 1415.798814][T18875] macvlan2: entered allmulticast mode [ 1415.805077][T18875] bond1: entered promiscuous mode [ 1415.810273][T18875] bridge2: entered promiscuous mode [ 1415.819641][T18875] gretap1: entered promiscuous mode [ 1415.825490][T18875] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1415.833360][T18875] bond1: left promiscuous mode [ 1415.838273][T18875] bridge2: left promiscuous mode [ 1415.843995][T18875] gretap1: left promiscuous mode [ 1415.943342][T18878] syzkaller0: entered promiscuous mode [ 1415.948987][T18878] syzkaller0: entered allmulticast mode [ 1416.027073][ T28] audit: type=1400 audit(2000525238.905:7477): avc: denied { write } for pid=18879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1416.086077][ T28] audit: type=1400 audit(2000525238.945:7478): avc: denied { write } for pid=18890 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1416.799637][T18817] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1416.829963][ T28] audit: type=1400 audit(2000525239.695:7479): avc: denied { write } for pid=18899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1416.871245][ T28] audit: type=1400 audit(2000525239.705:7480): avc: denied { write } for pid=18910 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1416.919029][T18913] syzkaller0: entered promiscuous mode [ 1416.927864][T18913] syzkaller0: entered allmulticast mode [ 1417.503651][ T28] audit: type=1400 audit(2000525240.385:7481): avc: denied { write } for pid=18921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1417.621925][ T28] audit: type=1400 audit(2000525240.506:7482): avc: denied { write } for pid=18941 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1417.819465][ T28] audit: type=1400 audit(2000525240.696:7483): avc: denied { write } for pid=18948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1417.896767][ T28] audit: type=1400 audit(2000525240.726:7484): avc: denied { write } for pid=18967 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1417.902423][T18976] netlink: 'syz.1.14148': attribute type 1 has an invalid length. [ 1417.964371][T18976] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 1418.001319][T18976] macvlan2: entered promiscuous mode [ 1418.008416][T18976] macvlan2: entered allmulticast mode [ 1418.035276][T18976] bond5: entered promiscuous mode [ 1418.040838][T18976] bridge3: entered promiscuous mode [ 1418.046602][T18976] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1418.055135][T18976] bond5: left promiscuous mode [ 1418.060131][T18976] bridge3: left promiscuous mode [ 1418.081231][T18983] syzkaller0: entered promiscuous mode [ 1418.088138][T18983] syzkaller0: entered allmulticast mode [ 1418.371794][T18944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.378939][T18944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.386381][T18944] bridge_slave_0: entered allmulticast mode [ 1418.397831][T18944] bridge_slave_0: entered promiscuous mode [ 1418.409179][T18944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.416518][T18944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.424413][T18944] bridge_slave_1: entered allmulticast mode [ 1418.434921][T18944] bridge_slave_1: entered promiscuous mode [ 1418.655589][T18944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.697923][T18944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.776214][T18944] team0: Port device team_slave_0 added [ 1418.798985][T18944] team0: Port device team_slave_1 added [ 1419.352711][T18944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.380754][T18944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1419.410576][T18944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1419.422661][T18944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1419.429710][T18944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1419.460114][T18944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1419.517530][T18944] hsr_slave_0: entered promiscuous mode [ 1419.523767][T18944] hsr_slave_1: entered promiscuous mode [ 1419.529937][T18944] debugfs: 'hsr0' already exists in 'hsr' [ 1419.535690][T18944] Cannot create hsr debugfs directory [ 1419.880542][T18944] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.275875][T19044] syzkaller0: entered promiscuous mode [ 1420.281568][T19044] syzkaller0: entered allmulticast mode [ 1420.297999][T18944] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.382882][T18944] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.432985][T18944] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.548549][T18944] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1420.572162][T18944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1420.587224][T18944] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1420.604222][T18944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1420.612581][T18944] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1420.621452][T18944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1420.630193][T18944] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1420.639394][T18944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1420.687344][T18944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1420.702098][T18944] 8021q: adding VLAN 0 to HW filter on device team0 [ 1420.712679][T17166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.719778][T17166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1420.744670][T17166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.751855][T17166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1420.939241][T18944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1421.001881][T19123] 9p: Bad value for 'wfdno' [ 1421.075373][T18944] veth0_vlan: entered promiscuous mode [ 1421.084680][T18944] veth1_vlan: entered promiscuous mode [ 1421.107256][T18944] veth0_macvtap: entered promiscuous mode [ 1421.115644][T18944] veth1_macvtap: entered promiscuous mode [ 1421.131328][T18944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1421.146097][T18944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1421.160905][T24926] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.172857][T24926] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.182818][T24926] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.192320][T24926] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.257406][T19142] netlink: 'syz.4.14200': attribute type 1 has an invalid length. [ 1421.271187][T19145] netlink: 'syz.9.14144': attribute type 1 has an invalid length. [ 1421.315617][T19151] netlink: 'syz.3.14202': attribute type 1 has an invalid length. [ 1421.352456][T19153] bond1: (slave gretap1): making interface the new active one [ 1421.360849][T19153] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1421.376202][T19153] macvlan2: entered promiscuous mode [ 1421.381646][T19153] macvlan2: entered allmulticast mode [ 1421.387409][T19153] bond1: entered promiscuous mode [ 1421.393977][T19153] gretap1: entered promiscuous mode [ 1421.399629][T19153] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1421.407719][T19153] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1421.423962][T19153] bond1: left promiscuous mode [ 1421.428783][T19153] gretap1: left promiscuous mode [ 1421.445610][T19151] macvlan2: entered promiscuous mode [ 1421.451207][T19151] macvlan2: entered allmulticast mode [ 1421.457324][T19151] bond2: entered promiscuous mode [ 1421.463132][T19151] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1421.480524][T19151] bond2: left promiscuous mode [ 1421.529832][T19161] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14205'. [ 1421.727492][T19171] syzkaller0: entered promiscuous mode [ 1421.738717][T19171] syzkaller0: entered allmulticast mode [ 1422.080374][T19197] netlink: 56 bytes leftover after parsing attributes in process `syz.8.14219'. [ 1422.216586][T19211] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1422.249881][T19216] syzkaller0: entered promiscuous mode [ 1422.255600][T19216] syzkaller0: entered allmulticast mode [ 1422.424711][T19228] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14231'. [ 1422.457899][T19233] netlink: 'syz.8.14234': attribute type 1 has an invalid length. [ 1422.485554][T19233] bond2: (slave gretap1): making interface the new active one [ 1422.494184][T19233] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1422.512563][T19233] macvlan2: entered promiscuous mode [ 1422.517907][T19233] macvlan2: entered allmulticast mode [ 1422.523968][T19233] bond2: entered promiscuous mode [ 1422.529237][T19233] gretap1: entered promiscuous mode [ 1422.534896][T19233] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1422.543019][T19233] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1422.560200][T19233] bond2: left promiscuous mode [ 1422.565065][T19233] gretap1: left promiscuous mode [ 1422.612309][T19239] loop3: detected capacity change from 0 to 4096 [ 1422.696520][T19239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1422.820278][ T28] audit: type=1400 audit(2000525245.707:7485): avc: denied { write } for pid=19238 comm="syz.3.14235" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1422.940813][T19239] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.14235: corrupted inode contents [ 1422.954609][T19239] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #15: comm syz.3.14235: mark_inode_dirty error [ 1422.966822][T19239] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.14235: corrupted inode contents [ 1422.979345][T19239] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.14235: mark_inode_dirty error [ 1422.991651][T19260] syzkaller0: entered promiscuous mode [ 1422.997341][T19260] syzkaller0: entered allmulticast mode [ 1422.998033][T19239] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.14235: corrupted inode contents [ 1423.015939][T19239] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.14235: mark_inode_dirty error [ 1423.032658][T19239] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.14235: corrupted inode contents [ 1423.045827][T19239] EXT4-fs error (device loop3): ext4_truncate:4691: inode #15: comm syz.3.14235: mark_inode_dirty error [ 1423.058906][T19239] EXT4-fs error (device loop3) in ext4_setattr:6172: Corrupt filesystem [ 1423.068255][T19256] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #15: comm syz.3.14235: corrupted inode contents [ 1423.082201][T19263] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14243'. [ 1423.107911][T15044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1423.230436][T19286] netlink: 'syz.9.14253': attribute type 1 has an invalid length. [ 1423.333227][T19301] 9pnet_fd: Insufficient options for proto=fd [ 1423.379461][T19309] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14256'. [ 1423.997307][T19416] syzkaller0: entered promiscuous mode [ 1424.003214][T19416] syzkaller0: entered allmulticast mode [ 1424.052923][T19425] netlink: 'syz.4.14267': attribute type 1 has an invalid length. [ 1424.074900][T19425] macvlan2: entered promiscuous mode [ 1424.080317][T19425] macvlan2: entered allmulticast mode [ 1424.086387][T19425] bond2: entered promiscuous mode [ 1424.091935][T19425] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1424.101946][T19425] bond2: left promiscuous mode [ 1425.315428][T19537] syzkaller0: entered promiscuous mode [ 1425.322428][T19537] syzkaller0: entered allmulticast mode [ 1425.351642][T19537] tipc: Started in network mode [ 1425.361052][T19537] tipc: Node identity 62a6f25ee887, cluster identity 4711 [ 1425.368657][T19537] tipc: Enabled bearer , priority 0 [ 1425.377476][T19537] tipc: Resetting bearer [ 1425.390295][T19536] tipc: Resetting bearer [ 1425.420755][T19536] tipc: Disabling bearer [ 1425.550948][T19562] loop3: detected capacity change from 0 to 128 [ 1425.559544][T19562] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1425.609185][T19568] netlink: 'syz.8.14299': attribute type 1 has an invalid length. [ 1425.662010][T19564] syzkaller0: entered promiscuous mode [ 1425.667619][T19564] syzkaller0: entered allmulticast mode [ 1425.967514][T19568] macvlan2: entered promiscuous mode [ 1425.990829][T19568] macvlan2: entered allmulticast mode [ 1426.009039][T19568] bond3: entered promiscuous mode [ 1426.015493][T19568] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1426.029807][T19568] bond3: left promiscuous mode [ 1426.369695][T19597] netlink: 72 bytes leftover after parsing attributes in process `syz.9.14309'. [ 1426.452161][T19599] syzkaller0: entered promiscuous mode [ 1426.458292][T19599] syzkaller0: entered allmulticast mode [ 1426.485237][T19606] syzkaller0: entered promiscuous mode [ 1426.490821][T19606] syzkaller0: entered allmulticast mode [ 1426.503487][T19606] tipc: Started in network mode [ 1426.508528][T19606] tipc: Node identity b2818efc9819, cluster identity 4711 [ 1426.515810][T19606] tipc: Enabled bearer , priority 0 [ 1426.535684][T19603] tipc: Resetting bearer [ 1426.543599][T19602] tipc: Resetting bearer [ 1426.551914][T19602] tipc: Disabling bearer [ 1426.926442][T19629] loop3: detected capacity change from 0 to 128 [ 1426.941742][T19629] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1427.070289][T19632] syzkaller0: entered promiscuous mode [ 1427.075912][T19632] syzkaller0: entered allmulticast mode [ 1427.304859][T19637] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14327'. [ 1427.851057][T19666] netlink: 'syz.4.14340': attribute type 1 has an invalid length. [ 1428.056293][T19666] macvlan2: entered promiscuous mode [ 1428.062428][T19666] macvlan2: entered allmulticast mode [ 1428.071133][T19666] bond3: entered promiscuous mode [ 1428.077104][T19666] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1428.089588][T19666] bond3: left promiscuous mode [ 1428.472600][T19677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14341'. [ 1428.514701][T19680] netlink: 'syz.1.14343': attribute type 1 has an invalid length. [ 1428.626240][T19685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14343'. [ 1428.700459][T19680] macvlan2: entered promiscuous mode [ 1428.710062][T19680] macvlan2: entered allmulticast mode [ 1428.716261][T19680] bond6: entered promiscuous mode [ 1428.722346][T19680] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1428.747470][T19680] bond6: left promiscuous mode [ 1429.113048][T19717] netlink: 'syz.1.14352': attribute type 1 has an invalid length. [ 1429.158829][T19717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14352'. [ 1429.168043][T19717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14352'. [ 1429.233523][T19717] macvlan2: entered promiscuous mode [ 1429.240092][T19717] macvlan2: entered allmulticast mode [ 1429.246180][T19717] bond7: entered promiscuous mode [ 1429.252725][T19717] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1429.286258][T19717] bond7: left promiscuous mode [ 1429.405254][T19722] netlink: 'syz.1.14354': attribute type 1 has an invalid length. [ 1429.451467][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14354'. [ 1429.467467][T19722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14354'. [ 1429.486484][T19722] macvlan2: entered promiscuous mode [ 1429.493631][T19722] macvlan2: entered allmulticast mode [ 1429.500137][T19722] bond8: entered promiscuous mode [ 1429.505627][T19722] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1429.516180][T19722] bond8: left promiscuous mode [ 1430.084447][T19740] tc action pedit 'at' offset 18618 out of bounds [ 1430.252692][T19749] netlink: 'syz.4.14364': attribute type 5 has an invalid length. [ 1430.261658][T19749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14364'. [ 1430.261658][T19750] loop8: detected capacity change from 0 to 128 [ 1431.273408][T19766] loop3: detected capacity change from 0 to 764 [ 1431.768683][T19776] netlink: 'syz.8.14371': attribute type 1 has an invalid length. [ 1432.213662][T19776] macvlan2: entered promiscuous mode [ 1432.232633][T19776] macvlan2: entered allmulticast mode [ 1432.243557][T19776] bond4: entered promiscuous mode [ 1432.248968][T19776] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1432.269967][T19776] bond4: left promiscuous mode [ 1434.242022][T19857] loop3: detected capacity change from 0 to 764 [ 1434.452006][T19861] syzkaller0: entered promiscuous mode [ 1434.470522][T19861] syzkaller0: entered allmulticast mode [ 1434.764136][T19888] syzkaller0: entered promiscuous mode [ 1434.793554][T19888] syzkaller0: entered allmulticast mode [ 1435.604637][T19910] netlink: 'syz.4.14423': attribute type 1 has an invalid length. [ 1435.628167][T19910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14423'. [ 1435.713096][T19919] syzkaller0: entered promiscuous mode [ 1435.718797][T19919] syzkaller0: entered allmulticast mode [ 1435.784648][T19910] macvlan2: entered promiscuous mode [ 1435.790110][T19910] macvlan2: entered allmulticast mode [ 1435.796301][T19910] bond4: entered promiscuous mode [ 1435.801660][T19910] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1435.946216][T19910] bond4: left promiscuous mode [ 1436.406501][T19926] bridge0: port 3(team0) entered blocking state [ 1436.413004][T19926] bridge0: port 3(team0) entered disabled state [ 1436.419946][T19926] team0: entered allmulticast mode [ 1436.425246][T19926] team_slave_0: entered allmulticast mode [ 1436.431264][T19926] team_slave_1: entered allmulticast mode [ 1436.438946][T19926] team0: entered promiscuous mode [ 1436.444106][T19926] team_slave_0: entered promiscuous mode [ 1436.450173][T19926] team_slave_1: entered promiscuous mode [ 1436.456356][T19926] bridge0: port 3(team0) entered blocking state [ 1436.462739][T19926] bridge0: port 3(team0) entered forwarding state [ 1437.481477][T19994] syzkaller0: entered promiscuous mode [ 1437.487884][T19994] syzkaller0: entered allmulticast mode [ 1438.051600][T20012] loop3: detected capacity change from 0 to 512 [ 1438.882868][T20012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1438.904008][T20048] netlink: 'syz.9.14453': attribute type 1 has an invalid length. [ 1438.926964][T20048] bond1: (slave bridge1): making interface the new active one [ 1438.935011][T20048] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1438.957754][T20048] macvlan2: entered promiscuous mode [ 1438.963204][T20048] macvlan2: entered allmulticast mode [ 1438.969090][T20048] bond1: entered promiscuous mode [ 1438.974150][T20048] bridge1: entered promiscuous mode [ 1438.979775][T20048] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1438.989831][T20048] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1439.006206][T20048] bond1: left promiscuous mode [ 1439.011091][T20048] bridge1: left promiscuous mode [ 1439.118107][T15044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1439.491959][T20073] loop9: detected capacity change from 0 to 1024 [ 1439.515650][T20073] EXT4-fs: Ignoring removed bh option [ 1439.534689][T20073] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1439.628375][T20073] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1439.894338][T18944] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1440.404073][T20096] loop9: detected capacity change from 0 to 512 [ 1441.124083][T20096] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1441.172909][T20106] loop3: detected capacity change from 0 to 1024 [ 1441.197902][T20106] EXT4-fs: Ignoring removed bh option [ 1441.203663][T20106] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1441.263881][T18944] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1441.764068][T20106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1443.608371][T15044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.636563][T20139] netlink: 'syz.9.14485': attribute type 1 has an invalid length. [ 1443.797454][T20142] netlink: 60 bytes leftover after parsing attributes in process `syz.9.14485'. [ 1444.245536][T20141] bond2: (slave bridge2): making interface the new active one [ 1444.274084][T20141] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1444.299229][T20143] macvlan2: entered promiscuous mode [ 1444.744615][T20143] macvlan2: entered allmulticast mode [ 1444.750694][T20143] bond2: entered promiscuous mode [ 1444.756216][T20143] bridge2: entered promiscuous mode [ 1444.763419][T20143] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1444.788552][T20143] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1444.808431][T20143] bond2: left promiscuous mode [ 1444.813574][T20143] bridge2: left promiscuous mode [ 1444.846499][T20156] netlink: 'syz.3.14489': attribute type 1 has an invalid length. [ 1445.013198][T20156] bond3: (slave bridge3): making interface the new active one [ 1445.021535][T20156] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1445.039543][T20156] macvlan2: entered promiscuous mode [ 1445.045081][T20156] macvlan2: entered allmulticast mode [ 1445.051005][T20156] bond3: entered promiscuous mode [ 1445.056529][T20156] bridge3: entered promiscuous mode [ 1445.062270][T20156] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1445.070741][T20156] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1445.087154][T20156] bond3: left promiscuous mode [ 1445.092035][T20156] bridge3: left promiscuous mode [ 1445.178818][T20177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14496'. [ 1445.188090][T20177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14496'. [ 1445.197827][T20177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14496'. [ 1445.423582][T20177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14496'. [ 1446.313891][T20204] netlink: 92 bytes leftover after parsing attributes in process `syz.1.14506'. [ 1446.748103][T20227] tmpfs: Bad value for 'mpol' [ 1446.776849][T20229] netlink: 92 bytes leftover after parsing attributes in process `syz.9.14518'. [ 1447.372551][T20304] tmpfs: Bad value for 'mpol' [ 1447.429415][T20310] tmpfs: Bad value for 'mpol' [ 1447.469572][T20316] netlink: 320 bytes leftover after parsing attributes in process `syz.1.14530'. [ 1447.505480][T20319] netlink: 92 bytes leftover after parsing attributes in process `syz.1.14531'. [ 1447.922256][T20159] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1448.198488][T20369] netlink: 320 bytes leftover after parsing attributes in process `syz.8.14537'. [ 1449.299710][T20447] loop9: detected capacity change from 0 to 512 [ 1449.439465][T20447] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1449.718777][T20503] netlink: 'syz.1.14552': attribute type 1 has an invalid length. [ 1449.743639][T20503] bond9: (slave bridge6): making interface the new active one [ 1449.752103][T20503] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 1449.769051][T20503] __nla_validate_parse: 1 callbacks suppressed [ 1449.769070][T20503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14552'. [ 1449.784928][T20503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14552'. [ 1451.333412][T20523] netlink: 256 bytes leftover after parsing attributes in process `syz.1.14559'. [ 1451.374960][T20527] bridge0: port 3(team0) entered blocking state [ 1451.382743][T20527] bridge0: port 3(team0) entered disabled state [ 1451.390082][T20527] team0: entered allmulticast mode [ 1451.396156][T20527] team_slave_0: entered allmulticast mode [ 1451.402380][T20527] team_slave_1: entered allmulticast mode [ 1451.414428][T20527] team0: entered promiscuous mode [ 1451.419916][T20527] team_slave_0: entered promiscuous mode [ 1451.428371][T20527] team_slave_1: entered promiscuous mode [ 1451.449539][T20527] bridge0: port 3(team0) entered blocking state [ 1451.457167][T20527] bridge0: port 3(team0) entered forwarding state [ 1451.612029][T20374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1451.666324][T18944] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1452.904067][T20650] netlink: 'syz.3.14580': attribute type 1 has an invalid length. [ 1452.931283][T20650] bond4: (slave bridge5): making interface the new active one [ 1452.939509][T20650] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 1452.958486][T20650] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14580'. [ 1453.027326][T20659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.037084][T20659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.288476][T20662] loop3: detected capacity change from 0 to 764 [ 1454.939102][T20593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1455.242546][T20688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1455.259770][T20688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1455.443085][T20699] netlink: 48 bytes leftover after parsing attributes in process `syz.9.14598'. [ 1455.760747][T20722] loop9: detected capacity change from 0 to 764 [ 1457.700128][T20759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.716898][T20759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.840225][T20775] 9p: Bad value for 'rfdno' [ 1458.442599][T20856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.451441][T20856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.776726][T20946] loop3: detected capacity change from 0 to 764 [ 1460.377575][T20965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.387291][T20965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.354227][T21002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.363860][T21002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.387602][T21005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14727'. [ 1461.581491][T13292] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1461.591016][T13292] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1461.639810][T21033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14739'. [ 1461.646532][T21029] fido_id[21029]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1462.552706][T13265] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1462.565139][T13265] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1462.610262][T21067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14751'. [ 1462.621048][T21065] fido_id[21065]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1462.661420][T21076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.679682][T21076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.842004][T13292] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1462.889173][T13292] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1463.346697][T21112] fido_id[21112]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1463.426747][T13292] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1463.434812][T13292] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1463.603697][T21143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.612410][T21138] loop3: detected capacity change from 0 to 764 [ 1463.650139][T21143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.843134][T21172] loop3: detected capacity change from 0 to 1024 [ 1463.894398][T21172] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1463.913458][T21172] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.14787: lblock 2 mapped to illegal pblock 2 (length 1) [ 1463.927672][T21172] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1463.927839][T21172] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1463.945039][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1463.945063][ C0] EXT4-fs (loop3): initial error at time 2000525286: ext4_map_blocks:791: inode 3: block 2 [ 1463.945110][ C0] EXT4-fs (loop3): last error at time 2000525286: ext4_map_blocks:791: inode 3: block 2 [ 1463.971474][T21172] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.14787: lblock 0 mapped to illegal pblock 48 (length 1) [ 1463.985807][T21172] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1463.998916][T21172] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 1464.059646][T21172] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.14787: Failed to acquire dquot type 0 [ 1464.071194][T21172] loop3: lost filesystem error report for type 5 error -117 [ 1464.071408][T21172] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1464.088567][T21172] loop3: lost filesystem error report for type 5 error -117 [ 1464.088676][T21172] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.14787: mark_inode_dirty error [ 1464.127523][T21172] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1464.127827][T21172] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1464.149872][T21172] EXT4-fs (loop3): 1 orphan inode deleted [ 1464.156852][T21172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1464.592874][T24926] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:61: lblock 1 mapped to illegal pblock 1 (length 1) [ 1464.674844][T24926] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 1464.689651][T24926] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:61: Failed to release dquot type 0 [ 1464.761964][T21223] loop9: detected capacity change from 0 to 764 [ 1464.840593][ T28] audit: type=1400 audit(2000525287.738:7486): avc: denied { write } for pid=21171 comm="syz.3.14787" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1464.916306][ T28] audit: type=1400 audit(2000525287.738:7487): avc: denied { create } for pid=21171 comm="syz.3.14787" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1464.996282][T21247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.004891][T21247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.028783][T15044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1465.038738][T24926] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:61: lblock 1 mapped to illegal pblock 1 (length 1) [ 1465.053092][T24926] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1465.054493][T24926] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 1465.071960][T24926] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:61: Failed to release dquot type 0 [ 1465.083529][T24926] loop3: lost filesystem error report for type 5 error -117 [ 1465.088643][T15044] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1465.108755][T15044] loop3: lost filesystem error report for type 5 error -117 [ 1465.112689][T15044] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1465.129377][T15044] loop3: lost filesystem error report for type 5 error -117 [ 1465.129721][T15044] EXT4-fs error (device loop3): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 1465.151266][T15044] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1465.466758][T21318] netlink: 416 bytes leftover after parsing attributes in process `syz.4.14818'. [ 1465.793025][T21377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.801717][T21377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.983975][T21410] loop9: detected capacity change from 0 to 764 [ 1467.080536][T21413] qrtr: Invalid version 0 [ 1467.716155][T21416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14838'. [ 1468.413415][T21434] 9pnet_fd: Insufficient options for proto=fd [ 1469.110628][T21448] loop9: detected capacity change from 0 to 128 [ 1470.150595][T21560] loop8: detected capacity change from 0 to 1024 [ 1470.173766][T21566] 9pnet_fd: Insufficient options for proto=fd [ 1470.188090][T21560] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1470.219807][T21560] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 2: comm syz.8.14859: lblock 2 mapped to illegal pblock 2 (length 1) [ 1470.239785][T21560] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1470.239971][T21560] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 1470.249176][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1470.249202][ C1] EXT4-fs (loop8): initial error at time 2000525293: ext4_map_blocks:791: inode 3: block 2 [ 1470.249249][ C1] EXT4-fs (loop8): last error at time 2000525293: ext4_map_blocks:791: inode 3: block 2 [ 1470.288105][T21560] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 48: comm syz.8.14859: lblock 0 mapped to illegal pblock 48 (length 1) [ 1470.304063][T21560] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1470.304206][T21560] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 1470.322475][T21560] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.14859: Failed to acquire dquot type 0 [ 1470.334120][T21560] loop8: lost filesystem error report for type 5 error -117 [ 1470.334302][T21560] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1470.351562][T21560] loop8: lost filesystem error report for type 5 error -117 [ 1470.351705][T21560] EXT4-fs error (device loop8): ext4_evict_inode:267: inode #11: comm syz.8.14859: mark_inode_dirty error [ 1470.370973][T21560] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1470.371087][T21560] EXT4-fs warning (device loop8): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1470.393381][T21560] EXT4-fs (loop8): 1 orphan inode deleted [ 1470.402549][T21560] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1470.449808][T24926] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:61: lblock 1 mapped to illegal pblock 1 (length 1) [ 1470.464523][T24926] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 1470.473417][T24926] EXT4-fs error (device loop8): ext4_release_dquot:7077: comm kworker/u8:61: Failed to release dquot type 0 [ 1470.486195][T17926] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1470.495535][T17926] EXT4-fs error (device loop8): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1470.511061][T17926] loop8: lost filesystem error report for type 5 error -117 [ 1470.511726][T17926] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1470.528656][T17926] loop8: lost filesystem error report for type 5 error -117 [ 1470.528860][T17926] EXT4-fs error (device loop8): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 1470.544304][T21583] loop3: detected capacity change from 0 to 128 [ 1470.548166][T17926] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1471.254898][T21601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14872'. [ 1471.638571][T21616] loop9: detected capacity change from 0 to 512 [ 1471.725251][T21616] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1471.805213][T18944] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1471.897420][T21639] bridge0: port 3(team0) entered blocking state [ 1471.904696][T21639] bridge0: port 3(team0) entered disabled state [ 1471.918772][T21639] team0: entered allmulticast mode [ 1471.924455][T21639] team_slave_0: entered allmulticast mode [ 1471.936309][T21639] team_slave_1: entered allmulticast mode [ 1471.956548][T21639] team0: entered promiscuous mode [ 1471.961629][T21639] team_slave_0: entered promiscuous mode [ 1471.967341][T21639] team_slave_1: entered promiscuous mode [ 1471.973329][T21639] bridge0: port 3(team0) entered blocking state [ 1471.979613][T21639] bridge0: port 3(team0) entered forwarding state [ 1471.991046][T21633] loop3: detected capacity change from 0 to 512 [ 1472.090460][T21633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1472.118838][T15044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1472.252173][T21668] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14886'. [ 1474.374931][T21756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.385580][T21756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.205825][T21815] loop9: detected capacity change from 0 to 128 [ 1476.319236][T21821] netlink: 'syz.8.14919': attribute type 1 has an invalid length. [ 1476.359049][T21821] bond5: (slave bridge3): making interface the new active one [ 1476.367279][T21821] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 1476.591979][T21826] loop3: detected capacity change from 0 to 764 [ 1477.369830][T21835] netlink: 256 bytes leftover after parsing attributes in process `syz.4.14924'. [ 1477.617635][T21851] netlink: 320 bytes leftover after parsing attributes in process `syz.3.14921'. [ 1478.043545][T21880] loop8: detected capacity change from 0 to 764 [ 1480.490411][T21841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1480.598291][T21898] qrtr: Invalid version 0 [ 1481.573830][T21934] qrtr: Invalid version 0 [ 1481.787958][T21951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1481.796731][T21951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.551003][T21979] qrtr: Invalid version 0 [ 1482.594340][T21985] loop9: detected capacity change from 0 to 1024 [ 1482.603879][T21985] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1482.620982][T21985] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 2: comm syz.9.14976: lblock 2 mapped to illegal pblock 2 (length 1) [ 1482.647495][T21985] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1482.649179][T21985] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 1482.658396][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1482.658419][ C1] EXT4-fs (loop9): initial error at time 2000525305: ext4_map_blocks:791: inode 3: block 2 [ 1482.658466][ C1] EXT4-fs (loop9): last error at time 2000525305: ext4_map_blocks:791: inode 3: block 2 [ 1482.693138][T21985] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 48: comm syz.9.14976: lblock 0 mapped to illegal pblock 48 (length 1) [ 1482.707537][T21985] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1482.707798][T21985] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 1482.727322][T21985] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.14976: Failed to acquire dquot type 0 [ 1482.738889][T21985] loop9: lost filesystem error report for type 5 error -117 [ 1482.739014][T21985] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1482.756163][T21985] loop9: lost filesystem error report for type 5 error -117 [ 1482.756272][T21985] EXT4-fs error (device loop9): ext4_evict_inode:267: inode #11: comm syz.9.14976: mark_inode_dirty error [ 1482.775297][T21985] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1482.775413][T21985] EXT4-fs warning (device loop9): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1482.794914][T21985] EXT4-fs (loop9): 1 orphan inode deleted [ 1482.801123][T21985] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1482.814532][ T6032] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 1482.832140][ T6032] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 1482.842583][ T6032] EXT4-fs error (device loop9): ext4_release_dquot:7077: comm kworker/u8:28: Failed to release dquot type 0 [ 1482.857441][T18944] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1482.867274][T18944] EXT4-fs error (device loop9): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1482.880239][T18944] loop9: lost filesystem error report for type 5 error -117 [ 1482.880537][T18944] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1482.897400][T18944] loop9: lost filesystem error report for type 5 error -117 [ 1482.897588][T18944] EXT4-fs error (device loop9): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 1482.916287][T18944] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1483.061417][T22009] qrtr: Invalid version 0 [ 1483.071182][T22001] loop9: detected capacity change from 0 to 512 [ 1483.178218][T22001] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1484.177953][T22034] tmpfs: Bad value for 'mpol' [ 1484.198067][T22036] qrtr: Invalid version 0 [ 1484.829377][T21954] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1484.894467][T18944] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1484.986495][T22157] netlink: 'syz.1.15003': attribute type 1 has an invalid length. [ 1485.110297][T22157] bond10: (slave bridge7): making interface the new active one [ 1485.124494][T22175] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15003'. [ 1485.165421][T22157] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 1485.195156][T22183] macvlan2: entered promiscuous mode [ 1485.206439][T22182] loop8: detected capacity change from 0 to 1024 [ 1485.219213][T22183] macvlan2: entered allmulticast mode [ 1485.229415][T22182] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1485.240382][T22183] bond10: entered promiscuous mode [ 1485.248525][T22183] bridge7: entered promiscuous mode [ 1485.254376][T22183] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1485.262044][T22182] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 2: comm syz.8.15011: lblock 2 mapped to illegal pblock 2 (length 1) [ 1485.263952][T22183] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1485.295452][T22183] bond10: left promiscuous mode [ 1485.300346][T22183] bridge7: left promiscuous mode [ 1485.300697][T22182] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1485.306041][T22182] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 1485.315130][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1485.315154][ C0] EXT4-fs (loop8): initial error at time 2000525308: ext4_map_blocks:791: inode 3: block 2 [ 1485.315224][ C0] EXT4-fs (loop8): last error at time 2000525308: ext4_map_blocks:791: inode 3: block 2 [ 1485.351780][T22182] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 48: comm syz.8.15011: lblock 0 mapped to illegal pblock 48 (length 1) [ 1485.367405][T22182] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1485.367605][T22182] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 1485.386356][T22182] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.15011: Failed to acquire dquot type 0 [ 1485.402033][T22182] loop8: lost filesystem error report for type 5 error -117 [ 1485.402192][T22182] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1485.429076][T22182] loop8: lost filesystem error report for type 5 error -117 [ 1485.429216][T22182] EXT4-fs error (device loop8): ext4_evict_inode:267: inode #11: comm syz.8.15011: mark_inode_dirty error [ 1485.453422][T22200] netlink: 320 bytes leftover after parsing attributes in process `syz.4.15016'. [ 1485.472567][T22182] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1485.472815][T22182] EXT4-fs warning (device loop8): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1485.496940][T22182] EXT4-fs (loop8): 1 orphan inode deleted [ 1485.503262][T22182] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1485.515435][ T6025] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 1485.536072][ T6025] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 1485.563267][ T6025] EXT4-fs error (device loop8): ext4_release_dquot:7077: comm kworker/u8:21: Failed to release dquot type 0 [ 1485.584503][T17926] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1485.597284][T17926] EXT4-fs error (device loop8): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1485.620752][T17926] loop8: lost filesystem error report for type 5 error -117 [ 1485.620916][T17926] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1485.638039][T17926] loop8: lost filesystem error report for type 5 error -117 [ 1485.638135][T17926] EXT4-fs error (device loop8): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 1485.656853][T17926] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1485.676599][T22218] loop8: detected capacity change from 0 to 128 [ 1485.951243][T22263] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15026'. [ 1486.449884][T22343] netlink: 320 bytes leftover after parsing attributes in process `syz.1.15028'. [ 1486.525960][T22351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.534832][T22351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.383960][T22194] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1488.539653][T22371] netlink: 320 bytes leftover after parsing attributes in process `syz.9.15041'. [ 1489.005538][T22438] netlink: 320 bytes leftover after parsing attributes in process `syz.3.15053'. [ 1489.024863][T22436] loop9: detected capacity change from 0 to 1024 [ 1489.031896][T22436] EXT4-fs: Ignoring removed bh option [ 1489.110449][T22436] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1489.136962][T22436] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1489.211116][T18944] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1489.218514][T22441] loop3: detected capacity change from 0 to 512 [ 1489.356587][T22488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.389187][T22488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.680387][T22513] tmpfs: Bad value for 'mpol' [ 1489.705311][T22515] netlink: 'syz.9.15073': attribute type 1 has an invalid length. [ 1489.720855][T22441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1489.752810][T22515] bond3: (slave bridge3): making interface the new active one [ 1489.761103][T22515] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1490.038110][T22540] tmpfs: Bad value for 'mpol' [ 1490.191033][T22558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1490.199748][T22558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.225022][T15044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1490.470792][T22577] 9p: Bad value for 'wfdno' [ 1490.772865][T22583] loop9: detected capacity change from 0 to 512 [ 1491.023132][T22583] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1491.427563][T22611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1491.445334][T22611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1491.632090][T22621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1491.640854][T22621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1491.848768][T18944] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1492.375303][T22641] ================================================================== [ 1492.383446][T22641] BUG: KCSAN: data-race in autofs_wait / autofs_wait [ 1492.390152][T22641] [ 1492.392497][T22641] read to 0xffffffff86e015c0 of 4 bytes by task 22623 on cpu 1: [ 1492.400156][T22641] autofs_wait+0x8b1/0xbd0 [ 1492.404613][T22641] autofs_mount_wait+0xc2/0x100 [ 1492.409523][T22641] autofs_d_automount+0x3fd/0x570 [ 1492.414609][T22641] __traverse_mounts+0x256/0x420 [ 1492.419585][T22641] step_into_slowpath+0x2d5/0x4c0 [ 1492.424664][T22641] path_lookupat+0x2eb/0x4c0 [ 1492.429305][T22641] filename_lookup+0x18f/0x390 [ 1492.434124][T22641] user_path_at+0x3e/0x100 [ 1492.438585][T22641] __x64_sys_umount+0x85/0xe0 [ 1492.443316][T22641] x64_sys_call+0x103b/0x3020 [ 1492.448040][T22641] do_syscall_64+0x136/0x3c0 [ 1492.452670][T22641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.458590][T22641] [ 1492.460938][T22641] write to 0xffffffff86e015c0 of 4 bytes by task 22641 on cpu 0: [ 1492.468690][T22641] autofs_wait+0x8dc/0xbd0 [ 1492.473152][T22641] autofs_mount_wait+0xc2/0x100 [ 1492.478050][T22641] autofs_d_automount+0x3fd/0x570 [ 1492.483122][T22641] __traverse_mounts+0x256/0x420 [ 1492.488102][T22641] step_into_slowpath+0x2d5/0x4c0 [ 1492.493174][T22641] path_lookupat+0x2eb/0x4c0 [ 1492.497808][T22641] filename_lookup+0x18f/0x390 [ 1492.502610][T22641] user_path_at+0x3e/0x100 [ 1492.507072][T22641] __x64_sys_umount+0x85/0xe0 [ 1492.511782][T22641] x64_sys_call+0x103b/0x3020 [ 1492.516490][T22641] do_syscall_64+0x136/0x3c0 [ 1492.521121][T22641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.527048][T22641] [ 1492.529400][T22641] value changed: 0x0000ebdf -> 0x0000ebe0 [ 1492.535143][T22641] [ 1492.537488][T22641] Reported by Kernel Concurrency Sanitizer on: [ 1492.543677][T22641] CPU: 0 UID: 0 PID: 22641 Comm: syz.1.15124 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1492.554739][T22641] Tainted: [W]=WARN [ 1492.558569][T22641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1492.568649][T22641] ================================================================== [ 1495.227117][T22646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512