last executing test programs: 22.844022952s ago: executing program 1 (id=62): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x56530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x100902, 0x4, 0x0, 0x6, 0x8, 0x8, 0x4, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x11d905, 0x4, 0x1004000, 0x2, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 22.603761984s ago: executing program 1 (id=64): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000000)='rose0\x00') setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 22.240670142s ago: executing program 1 (id=71): r0 = memfd_create(&(0x7f0000000080)='\x02A\xbb\xcc\x96\x0eg\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00\xa8\'\x87\xdc\xbb\xb7~e\x126D\x88\xcfh,H2!zT\xdcV\xbc\x01\x00\x00\x00\x00\x00\x00\x00\xc1\xbb\xa5\x00/\xde?-\xa5\x1d\x86\xd8ZV+\xa3\xd14\xe4\xf9\xa8b\xd5\xf8U\xed\xd7\xec\x18\x83\xb0\v\x8de\x80\xd6\xb4Z^\xa17\xce\x90\xbaU[H\xc1\xe4j6\t\x882\x86\x91A\x1d&\xb4\x8bi\xfc\xc0}\xc3\x84\x1a\xbf,c \x1b\x01\\\xbd\vUC\x0e!\vNA\x8e}3\x14ei\x90\xf8\xf4\x1fg\xf9\xc3\xe7', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf705000000000000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 22.06699654s ago: executing program 1 (id=75): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000700000000000000004000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x1, 0x0, &(0x7f0000000240)) sendto$inet(r1, &(0x7f0000000500)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6b814f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f81005e08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57dd7e5bf88f4cf3cb9aede83a5fb5278162883af0", 0xfffffe96, 0x81, 0x0, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x5}, 0x8) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000049ed003f09bd7000fddbdf250a001000", @ANYRES32=0x0, @ANYBLOB="78bfffff080002000600000014000100fe8000000000000000000000000000bb"], 0x38}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000280)={{0x1, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e20, 0x3, 'rr\x00', 0x24, 0x9, 0x64}, {@rand_addr=0x64010100, 0x4e23, 0x1, 0x7, 0x8, 0xd}}, 0x44) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8518}, 0x10000, 0xe7e, 0x0, 0x8, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x0, 0xffffffff, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0xfca6ccc1c610dd49, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)={0x0, 0x7, 0x1000, 0x4, 0x4, 0xc49, 0x5, 0xf64, 0xffffffff}) 20.883040266s ago: executing program 1 (id=88): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 20.590842739s ago: executing program 1 (id=94): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x200, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r0, &(0x7f0000000540)=[{&(0x7f0000000880)="d7", 0x1}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05210000000000007911ab00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket(0x2000000015, 0x80005, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xf7ffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x400, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x6, 0x10000}, 0x2, 0xfffc, 0x0, 0x8, 0x585, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001fc0)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd26, 0x25dfdbed, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfff3}, {0x9, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'erspan0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 20.575733532s ago: executing program 32 (id=94): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x200, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r0, &(0x7f0000000540)=[{&(0x7f0000000880)="d7", 0x1}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05210000000000007911ab00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket(0x2000000015, 0x80005, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xf7ffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x400, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x6, 0x10000}, 0x2, 0xfffc, 0x0, 0x8, 0x585, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001fc0)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd26, 0x25dfdbed, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfff3}, {0x9, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'erspan0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 2.137275918s ago: executing program 3 (id=279): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10e848, 0x6, 0x9, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)='10 1', 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_clone(0x808a3000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, r3, 0x0, 0x0, 0x0}, 0x30) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', '', [{0x20, '\x0f\x10\t5\v\xbd\xc3\x95-|\xe1\x06\b\v@\xae\xc8\x01\xe3\xd9(\x81\xaa8\x18\x19\xb2\x8d\xfe\xe9h!\xd2\xa2\xb3=\xdd\xa9\x03\xb2\xa8'}]}, 0x2e) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 2.111874334s ago: executing program 2 (id=281): unshare(0x6a060000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) socket(0x1e, 0x4, 0x0) write$nci(r0, 0x0, 0x14) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r5 = syz_open_dev$sg(0x0, 0x8e, 0x20402) r6 = mq_open(0x0, 0x42, 0x0, 0x0) mq_getsetattr(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0xd8c4000, @empty, 0x7fff}, 0x1c) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) writev(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.072837162s ago: executing program 3 (id=282): open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)='15', 0xfffffdd2}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 1.908089387s ago: executing program 3 (id=283): unshare(0x6a060000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@usrquota}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a01040000000000000000010000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000081054d6f2d3a1a388af3d6c8b187db91dcad8eafdd3808ecf1f5aead7fe62baf2a27877980656f7c3b16e6d39fcb9cf918231dd80000000000000000", @ANYRES16=r2], 0xc4}}, 0x8c0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r1, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) socket(0x1e, 0x4, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x14) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r5 = syz_open_dev$sg(0x0, 0x8e, 0x20402) r6 = mq_open(0x0, 0x42, 0x0, 0x0) mq_getsetattr(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0xd8c4000, @empty, 0x7fff}, 0x1c) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) writev(r7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.721188598s ago: executing program 5 (id=286): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x1) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000d0429bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="9b060000000000001c00128009000100626f6e64002000000c0002800500010004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket(0x1, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4015}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010009af2c2ad2b0500000000000000009fb6b5cb72a9be8a81fc6e4d4522acf513ac69bf47275ac4f3e276fea312c43fc21de29b3120c84f36fcddb6484bb2c09b8187eb263cfacf4b3f8600d11a5b1c082f11cdd5fba0f5184fc41b063233647bee0f0de978758a1f5a398dfa0ae584f94b55842e8a7546bbd75109b07708100576e00d33b1974ed00b057ea00800f7456ec6ae0e35d4705d021f10d4458d1fa5fef2", @ANYRES32=0x0, @ANYBLOB="0100000001000000140003007665746830000000000000000000000008000a00", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x68a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d401000010000000180000000000000001000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000140)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff000089497d727bdbcf2e21ae6fc9a9cdb3dae0ef5792f36727e4a6fcc19b0c649d88e269676e8be4db54cdd52b5cd17e4510aa125ea5e46441f8ff7cc68da2a8700096cec1c8f1895f3330ee09747680b3ce", 0x76, 0x0, &(0x7f0000000800)={0x11, 0x300, r11, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626174616476300000000000000000007d6c73db"], 0x34}}, 0xc0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) 1.663844361s ago: executing program 4 (id=287): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101003) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x6, 0x80000000}, 0x10c0c4, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syslog(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x18b) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x2, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x1000) io_uring_enter(r1, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x9, &(0x7f0000000100)=[{0xe, 0x4, 0xe9, 0x60}, {0x1, 0x3, 0x2, 0x80e0}, {0x8, 0x2, 0x4, 0x86b}, {0x401, 0x63, 0x5, 0x10}, {0x4, 0x9, 0x4, 0x8146}, {0xf, 0xf7, 0x8, 0x2c5f}, {0x0, 0x6, 0xff, 0x80}, {0x0, 0x5, 0x8, 0x1ff}, {0xfffa, 0x80, 0x4}]}) dup(0xffffffffffffffff) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x71) ftruncate(r6, 0x200002) 1.535716548s ago: executing program 2 (id=288): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0xa8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x78, 0x2, {{0x8002, 0x5a, 0x0, 0x0, 0x5, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x94, 0x70d}}, @TCA_NETEM_LOSS={0x4}, @TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x2, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9c000000, 0x0, 0x8000, 0xfffffffc}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x4, 0x3, 0x7, 0x80000000}}]}, @TCA_NETEM_DELAY_DIST={0x6, 0x2, "3885"}]}}}]}, 0xa8}}, 0xc000000) 1.445354447s ago: executing program 0 (id=289): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80000000, 0x8, 0x10000000, 0x20001, 0xa}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8a}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xe1c}}, 0x0) 1.425835901s ago: executing program 4 (id=290): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0}, 0x94) 1.38687392s ago: executing program 4 (id=291): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000300, 0x0, 0x0, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000f9ffff00000000000000000000000000000000000000007100000100400000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000020000000000000000000000000000000000000000000000000000000000feffffff000000"]}, 0x108) 1.309260757s ago: executing program 4 (id=292): r0 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0x7, 0x2003) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8040) unshare(0x64000400) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000480)={{{@in6, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@empty}}, &(0x7f0000000580)=0xe8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e1c}, [@typed={0x8, 0x100, 0x0, 0x0, @u32}, @nested={0x4, 0x2}]}, 0x20}}, 0x20048800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) setns(0xffffffffffffffff, 0x20000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) setresuid(r4, 0xee00, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x1, 0xff, 0x6, 0x7}, {0x7, 0x5, 0xc, 0x8}, {0x1000, 0x0, 0x0, 0x5}, {0x5, 0x2, 0x8, 0x8}, {0x3, 0xc4, 0x1, 0x8001}]}) setpriority(0x1, 0x0, 0x31e9) 1.284690392s ago: executing program 2 (id=293): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="000017010000000000", 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4327e96d5a40268c75358061e75633ebe43e946f2bad55973c81fff7d4843dd1db36180dd3b5692f98ace6805c67a9e20216aac908b9a6111c6", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 1.126709777s ago: executing program 0 (id=294): r0 = syz_ublk_setup_io_uring(0x4c48, &(0x7f0000000000)={0x0, 0xf6d9, 0x20, 0x1, 0x2cf}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000280)={0x1, 0x2, 0x8a3, 0x0, &(0x7f0000000180)={&(0x7f0000000140)="3bf6ca296643b4506f0ce6b0fb", 0xd, 0x81, 0x0, 0x994}, &(0x7f0000000240)={&(0x7f00000001c0)="bb6ccd9c224ac7ab23c3f8a59317881e7b9d78f6417c316d97500e30b95614caf5cf15ce33f02714e53799093e5508aaf336b016c3499784a4668055f146a729fc82cab1", 0x44, 0x1, 0x6, 0xe629}, {0xffffffff, 0x5, 0x2}, 0x2, 0x4}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x8}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000480)=0x6, 0x12) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x81, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x7, &(0x7f0000000580)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x600000, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], &(0x7f00000005c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xe9, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000600)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xf, 0xfffffffc, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000680)=[r6, r6, 0x1, r6, r6], &(0x7f00000006c0)=[{0x0, 0x4, 0x6, 0xa}, {0x1, 0x3, 0x7, 0x4}, {0x1, 0x5, 0x6, 0x3}, {0x4, 0x1, 0x2, 0xc}, {0x0, 0x5, 0x4}, {0x4, 0x2, 0xf}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r6, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000800)=r7}, 0x20) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x61b, 0x3000001, 0x11, r6, 0x20000000) fstat(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(r6, &(0x7f0000000900)='./file1\x00', 0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) ioctl(r11, 0xfffffffc, &(0x7f0000000940)="5b95d7cd788a757002f78a664f823f302303fa8065e36e0374324e52d5392374bd9443d48e6ba99f6b6b2236558e51409365a889f54cefd12abe4679f373583af0d361541134772f78127dea10151768e6a89fa11ff507d0baeb54cb51e97f13c4d3893423725e41d66f28c5641f4dd2560cbca97a0664be60813c7e48cc1ae6824757a0d239ecd92a7ec606c123fcf74071992705c0184ffdee6978d3e533070ce3e9afcb57ceb573526de46a59679b64fedbd5be81e1b91c4c2f21728863a3de52f57b26eef5bf930eef02c19f7c1b1584") pipe2$watch_queue(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, 0x1401, 0x20, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4064801}, 0x20040840) r14 = socket$key(0xf, 0x3, 0x2) r15 = syz_clone(0x11a04000, &(0x7f00000013c0)="37932225e5c4ec5570ca8d9af0d7bbc5661ccc51701d1109afe86228f7bfd1e33387dd9b19056e82969b98d56a36bd54224166c553b88c63544a27d235e9f0bfbad8a3d7466b517400f491d4c89134c945b4a43a827964da7688c60dcb5fe9d0ad1f726e6a3648baadb4aef8d5c61413637483533f7bb663bff2a8c30b4ba4e36e93b12acb7d8bb8146c0983f82dbe07000734a558057dc214fc74f7b44ddc7a08c5d182de30ecf4af1b52b578d5c060f202102251", 0xb5, &(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)="1e1c467948e0e5c34904058620ea2f79e29c5e21cb7557c8f31f450d20dbaa62b13c00413256d90c37a097a2eabef5e8f2ae874a70ca38d2d69ed91fb8e5b48ce7084e29b89e70c11db1e82458cca0616ef97e2cc229ae7ca9912110329ce416058d5a7a083e") r16 = getpid() getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000001580)={0x0}, &(0x7f00000015c0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001600)={0x0}, &(0x7f0000001640)=0xc) r19 = openat$cgroup_freezer_state(r13, &(0x7f0000001680), 0x2, 0x0) ioctl$BLKTRACESETUP(r13, 0xc0481273, &(0x7f0000001980)={'\x00', 0x1, 0x10001, 0x0, 0x3ff, 0x10, 0xffffffffffffffff}) r21 = getpgrp(0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f0000002c00)='./file1\x00', &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) fcntl$getownex(r12, 0x10, &(0x7f0000002cc0)={0x0, 0x0}) sendmmsg$unix(r8, &(0x7f00000030c0)=[{{&(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000c00)="2e5dc0a39d8100d65391eb052f53b564631b2c0ef7bcf1b8043823a507c14bfe916b5d3481d2f49212d41ee0b9ee98b5da5603623054448332cc32688c5763d1efe85786c3d8f3a8286bc121fdca365d21bb0795edb8876f531b00a042dd05544ce3a88e2969b01d3ceb5ab7232345fea02a551b3374d4c16fd371b5e8bba2aac19f2af993146c1bc72400f4f6258c431680bad5eb1a82081a92cb76fc0fc62cd5c6629a3b01b9fe27c778f82248aa435a", 0xb1}, {&(0x7f0000000cc0)="7f6e0cee89d80f27d2654bf0f50e0c1f93578365bee03fd60be8bddf0a9034b5470deca9", 0x24}, {&(0x7f0000000d00)="d90205396e0c87447f8c86d347aa6847230ca4978435094f7312b84f0c5c7bd5918c47bea1efd3b1e562f6673bb28561beecaf5d48876881356031c5d465bf3b8b709a75ecb9f16d6da25c647aae5028f5cfc507c5f104c39725543448a4474c4e58cc6b83c5ef6e6c49d9f3e5a327d3022378ac2f22d8676b4b966228cc9bca02f86df3fcc24009daebfa7430ea5980bf00c31a839c19fd8e1071c051f076d733e2a2ea4cbfc4264c5ca40efb", 0xad}, {&(0x7f0000000dc0)="c0b2d7251b7da7d3320576fe1be71ef2b568489370ad70e85639eaf558c69c748492493ee89e5e2a06788ef7352516bd388b3137ac04f94bda3903a273881238549017130b92ab3fba2d0bf4e57c3ae58892893cc90215d26f0b5acfbc6317aa12f0e327aa9c8570a15c82ba9f739a586cbc86d1622bfa97d0508dce8c05bee9fc94e2730b1db86a9746d2fe29f3ac2e10a2303eca05f49e2ed0c747c8c76155a8cef8b6290f6820eb7ff71f141f9d8787341c62f39292bbe50f643825a9c5d09c83936bbbf47a2e60da032694d95e9f50121929da8ce37b04ec4b6db5b9b8a0fa55add15618ef4f0096dc", 0xeb}, {&(0x7f0000000ec0)="0dfe87804cc2abeef94e7f610503d3250f5691217a57c4a2c32657a1a12840c8fa98781816a81403d52d960af91f2787a940f0809fa6b42cb505d60ec05a4974c63cb661989d8bcb46ec536f28ab34207fcde15cd12fd7d75a157e4f0dc41246fac7201033c2d5abbd", 0x69}, {&(0x7f0000000f40)="9927bc097c2fdcad1ecc5249bdebbd898e62ea4e2f8ea721b70ffd71fe1faba31681e167eb927bb466ca2b31ea1e163e5d7c586414e5bc61dfd3691929d8feeeca38bd0a32823af85f10495b39a9e53cbd714d2a743b58ae0767c2b153e7ac71523fc97d67c0942bcca097fde105ce9e5e7095a17e565ce441345a8fa6609157413fd81a3b1d8bff6f61b1420e19dc36b120d274f4431195cb998b48855cf25dfb5761c99103ce4d8811b4afb29173d3954ea71a715daf5e8dfd1cb4113070319487cc679cfcbbf0c445caec6b4078", 0xcf}, {&(0x7f0000001040)="ebc251ab385d749b69f5358ff1d082f144a2f5853c7a7b1b39a5c9d5fdc42f799c", 0x21}], 0x7, &(0x7f0000001100)=[@rights={{0x28, 0x1, 0x1, [r7, r3, r14, r1, r14, r14]}}, @rights={{0x28, 0x1, 0x1, [r7, r8, r6, r3, r14, r6]}}], 0x50, 0x1}}, {{&(0x7f0000001180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001200)="b263d5d37d1bfc2ecb9294b1555c6ceb76538b7bea3f584d5213fa3da764566b3284484bbfbc3e3a67a5e03de9a47e7ae734ca9d120a4bf5a9f36970dbe97d1076fe511937eaaf7ba4466b97a0d70cbbf76deb0de142ca49f297e3720a745729612b06ec0ed51a9ed2ae686f2cc49a22dba3634b01e62ecab359443626ce84fb5a51a17d05883c270933f3483602c8039fab008ad52ada0ac0b2c25648134c9ed186dbaad3909f495214a914f9a367f63bb81becb337ccf4bb2fc90721e502c85cefc37a15b98eec6af448ef74c0e6ce6b26c50580efdbc3ea293bfb1465def316ff32bd79a9954a9623b82bb49e30a0ba31", 0xf2}, {&(0x7f0000001300)="34908772d049eb3243a2f6c804f37ca8e34ad2230268cd995ab10d599ef65088e3e5285fb5b0abf0b2d9c54f8b3947ddca12c1677cecf82c719c1376640782441fcd8796a04ec579a715cba45b6f234c19710ea6fddb15e22e28468dddbfe544048a4778864b3a", 0x67}], 0x2, &(0x7f00000016c0)=[@cred={{0x1c, 0x1, 0x2, {r15, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r16, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r17, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r18, r9, r10}}}, @rights={{0x1c, 0x1, 0x1, [r12, r8, r19]}}], 0xa0, 0x5}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001780)="cb471f72de91b931ba3305bf4566ba08af42641eed7d990823219099c0eb99cc99edc6eb3629d713c95a91a06055c7f65d8416ae73a88e2513bf2d083f926a73cc30321b5bebed3dc9f4876fface84a82bdce5d83040fa5fa2c38822b6bb6121", 0x60}, {&(0x7f0000001800)="755a410c0a12a396cbae36f601dc0ffbe197105e1b52876360aef16198e4732b93e6f1262f14e14c5e959e422e7274fa74a737629503a121ad7fbf9cc0205020f73db5b0ae1799b76e86937ef9d64f98263dde4b222e11e199a717ce1333c73d9568d854a66ffc961288c48d1d79e91f750aace3dcdf6592311aa9d7", 0x7c}, {&(0x7f0000001880)="01232be0fc8bc33b9b8efd22152c5043c0cdb14fd85b7d3410568b25f02cf241c2d68094ed", 0x25}, {&(0x7f00000018c0)="f3daa591ccf8b897e881e0d810e5f4e4e18168d687ca3a4b277a247ad814116257d3ed2629c254e2cbcf0a211c89bee5e933e44efda5fc59c823080514445cbbd8", 0x41}], 0x4, &(0x7f0000001a00)=[@cred={{0x1c, 0x1, 0x2, {r20, r9, r10}}}], 0x20, 0x20000001}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001a40)="040b369a61d8426b962c8cd0cedd51c6a623cfb459a0a2d66600e1f555482546257686948b8ceefd81c87266567a35228e36665f208c7ee4adbc0821177fb2613ceacae8b5bff9069beb00215d0b6a13f496d121fac5cb756f0bbdd59227d951768cae8d39a26d201b2e87614399704bf18859b446f255c14e15b7c67443b8af0a21458e1be006dfadf1e09a340ec81c4fe80724ac7c617041b3ec4ca81a80f838829dcc8fc2d5203b1dacc96c81820dd2bd56e727ca74b4624b617241a5b066f5", 0xc1}, {&(0x7f0000001b40)="448ec7ad253ab0d95401162f8f421eb48ed15f7c74d4a72113144453bc1d7dfb3fa8292d868acc2c7cc526773d16dd32b951c40b2fc6898422db5b61e7558c75efa33061ef1e3d0df488426404327daa95d68079cd2c302ef27c5c116366441fd550dd588614187bacc4ceb8c51e", 0x6e}, {&(0x7f0000001bc0)="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", 0x1000}], 0x3, &(0x7f0000002fc0)=[@cred={{0x1c, 0x1, 0x2, {r21, r9, r22}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r23, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, r10}}}], 0xe0, 0x100}}], 0x4, 0x20000000) 1.025281888s ago: executing program 3 (id=295): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8400, &(0x7f0000000840)={[{@uid}, {@session={'session', 0x3d, 0x5f}}, {@block={'block', 0x3d, 0x400}}, {@hide}, {@overriderock}, {@nocompress}, {@mode={'mode', 0x3d, 0x10011}}, {@session={'session', 0x3d, 0x35}}, {@map_normal}, {@gid}]}, 0x0, 0x691, &(0x7f0000000f00)="$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") 981.005308ms ago: executing program 0 (id=296): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0xa, 0x3, 0x7) sendmmsg(r1, &(0x7f0000001e40)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, 0x80, 0x0}}, {{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x100, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[{0x10, 0x29, 0x4}], 0x10}, 0xff00}], 0x2, 0x20000010) 880.97484ms ago: executing program 5 (id=297): r0 = syz_open_procfs(0x0, &(0x7f00000012c0)='coredump_filter\x00') writev(r0, &(0x7f0000000340)=[{0x0}], 0x1) 761.397505ms ago: executing program 0 (id=298): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") socket$key(0xf, 0x3, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setuid(r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 745.148149ms ago: executing program 5 (id=299): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5}, 0x10e848, 0x6, 0x9, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={&(0x7f0000000100), 0x5}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) mmap(0x0, 0x0, 0x3, 0x2010, r0, 0x959ef000) membarrier(0x8, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x1, 0xdd, &(0x7f0000000040)}, &(0x7f0000000300)="eded501ef663", 0x0, 0x840802, 0x10030, 0x1000, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000280)=0xe) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\xb8@'}, {0x20, '}*'}, {}], 0xa, "440ad382fa52669212a8bbcdd3a072142f188efda135fa3860ba7264baf0c3a904d4caf48d44b351c9fc7e266e763c8e96e408d0257323cdbc76238fa189d6fc7394f29e88e3274131beac4e48a87977697ca1756334f53a6f3217386da474e63c086e85f08efa762a02"}, 0x7c) syz_socket_connect_nvme_tcp() r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x2002, 0x98) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = socket$rxrpc(0x21, 0x2, 0x2) close_range(r4, r5, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x4d, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) 690.409091ms ago: executing program 2 (id=300): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030db3fb83ef0400000000000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x68}}, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r1, 0x2) (async) shutdown(r1, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) (async) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 621.106456ms ago: executing program 0 (id=301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f00000000c0), 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x4000090) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc3, 0x4, @perf_bp={0x0}, 0x1020, 0x0, 0xfffffffd, 0x6, 0x3, 0x8000, 0x1, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}}, 0x8445) sendmmsg(r5, 0x0, 0x0, 0xfc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"/278, @ANYRES32=0x0, @ANYBLOB="c40000003a95942a9a3e424a71ccfc113bc339d3b1b077478dbdb17bfe53a16c508d193b8be9602092bf8f7e38ca152ef554c5650add6c777f", @ANYBLOB], 0x1dc}}, 0x44004) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 566.037708ms ago: executing program 3 (id=302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) removexattr(&(0x7f0000000980)='./cgroup\x00', 0x0) futex(0x0, 0x3, 0x4, 0x0, 0x0, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x2) setgid(0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0xf5, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 561.585368ms ago: executing program 2 (id=303): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000009, 0x204031, 0xffffffffffffffff, 0xec772000) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f00000000c0)=0x1) (fail_nth: 3) 353.185773ms ago: executing program 4 (id=304): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 342.824156ms ago: executing program 2 (id=305): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write(r1, &(0x7f0000000140)="000008004500001c12340000402fe5c8ac141401ac18140204d204d2", 0x1c) 231.74822ms ago: executing program 5 (id=306): r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000840)="6800000030000505010000000000000000000000540001805000018009000100676174650000000040000280180002000000000000000000000008000000000000000000180005800e000000000000000000000008000300640000000c000700e803ffe400000000", 0x68, 0x20001000, 0x0, 0x0) 62.631916ms ago: executing program 5 (id=307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x4800, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.95254ms ago: executing program 0 (id=308): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x4) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) bind$netlink(r2, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfe, 0x281a5faa01ef99b3}, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xffffffff}, 0x8) close(r1) 1.855929ms ago: executing program 5 (id=309): r0 = syz_open_procfs(0x0, &(0x7f00000012c0)='coredump_filter\x00') writev(r0, &(0x7f0000000340)=[{0x0}], 0x1) 329.69µs ago: executing program 3 (id=310): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) getsockname$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c) 0s ago: executing program 4 (id=311): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ftruncate(0xffffffffffffffff, 0x2007ffb) r0 = socket(0x8, 0x80000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xa1, &(0x7f0000000000)={@empty, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x6b, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xff, 0x0, 0x200, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x18, 0x1, "00000000040026"}]}}}}}}, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x20, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r2, &(0x7f0000000180)="3b826a86", 0x4, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x4, 0x6, @multicast}, 0x14) socket$inet6(0xa, 0xb70939ce6dc8c39e, 0x6) kernel console output (not intermixed with test programs): [ 25.407390][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 25.407409][ T29] audit: type=1400 audit(1790636854.373:122): avc: denied { write } for pid=3254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.446722][ T29] audit: type=1400 audit(1790636854.413:123): avc: denied { write } for pid=3265 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.556426][ T29] audit: type=1400 audit(1790636854.523:124): avc: denied { write } for pid=3268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.589660][ T29] audit: type=1400 audit(1790636854.563:125): avc: denied { write } for pid=3279 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. [ 32.916290][ T29] audit: type=1400 audit(1790636861.883:126): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.916620][ T29] audit: type=1400 audit(1790636861.883:127): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.917277][ T3289] cgroup: Unknown subsys name 'net' [ 32.917557][ T29] audit: type=1400 audit(1790636861.883:128): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.031877][ T3289] cgroup: Unknown subsys name 'cpuset' [ 33.032623][ T3289] cgroup: Unknown subsys name 'rlimit' [ 33.141007][ T29] audit: type=1400 audit(1790636862.103:129): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.143866][ T29] audit: type=1400 audit(1790636862.113:130): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.145334][ T29] audit: type=1400 audit(1790636862.113:131): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.145496][ T29] audit: type=1400 audit(1790636862.113:132): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.164667][ T29] audit: type=1400 audit(1790636862.133:133): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.168065][ T29] audit: type=1400 audit(1790636862.133:134): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.183290][ T29] audit: type=1400 audit(1790636862.153:135): avc: denied { read } for pid=3025 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.291887][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.354705][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.797244][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.797356][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.797420][ T3299] bridge_slave_0: entered allmulticast mode [ 34.797883][ T3299] bridge_slave_0: entered promiscuous mode [ 34.799366][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.799480][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.799621][ T3299] bridge_slave_1: entered allmulticast mode [ 34.800790][ T3299] bridge_slave_1: entered promiscuous mode [ 34.893200][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.894646][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.911801][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.911887][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.912125][ T3305] bridge_slave_0: entered allmulticast mode [ 34.913317][ T3305] bridge_slave_0: entered promiscuous mode [ 34.915973][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.916078][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.916239][ T3305] bridge_slave_1: entered allmulticast mode [ 34.917382][ T3305] bridge_slave_1: entered promiscuous mode [ 34.982829][ T3299] team0: Port device team_slave_0 added [ 34.983843][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.983967][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.983995][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.984051][ T3304] bridge_slave_0: entered allmulticast mode [ 34.984610][ T3304] bridge_slave_0: entered promiscuous mode [ 34.986405][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.986512][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.986757][ T3300] bridge_slave_0: entered allmulticast mode [ 34.987666][ T3300] bridge_slave_0: entered promiscuous mode [ 35.001735][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.002151][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.002247][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.002480][ T3300] bridge_slave_1: entered allmulticast mode [ 35.003472][ T3300] bridge_slave_1: entered promiscuous mode [ 35.005582][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.005686][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.005752][ T3304] bridge_slave_1: entered allmulticast mode [ 35.006610][ T3304] bridge_slave_1: entered promiscuous mode [ 35.042798][ T3299] team0: Port device team_slave_1 added [ 35.078943][ T3305] team0: Port device team_slave_0 added [ 35.117121][ T3305] team0: Port device team_slave_1 added [ 35.117709][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.117753][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.117837][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.121348][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.125530][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.126255][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.126285][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.126394][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.145182][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.161367][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.211038][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.211267][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.211451][ T3306] bridge_slave_0: entered allmulticast mode [ 35.213097][ T3306] bridge_slave_0: entered promiscuous mode [ 35.244510][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.244545][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.244692][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.245246][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.245347][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.245548][ T3306] bridge_slave_1: entered allmulticast mode [ 35.246696][ T3306] bridge_slave_1: entered promiscuous mode [ 35.260649][ T3300] team0: Port device team_slave_0 added [ 35.263507][ T3300] team0: Port device team_slave_1 added [ 35.268720][ T3299] hsr_slave_0: entered promiscuous mode [ 35.269480][ T3299] hsr_slave_1: entered promiscuous mode [ 35.273038][ T3304] team0: Port device team_slave_0 added [ 35.273625][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.273672][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.273799][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.298250][ T3304] team0: Port device team_slave_1 added [ 35.317363][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.341559][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.354796][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.354845][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.354992][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.378106][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.378148][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.378244][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.379178][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.379214][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.379316][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.407129][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.407167][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.407357][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.422367][ T3305] hsr_slave_0: entered promiscuous mode [ 35.424947][ T3305] hsr_slave_1: entered promiscuous mode [ 35.425533][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 35.425573][ T3305] Cannot create hsr debugfs directory [ 35.475888][ T3306] team0: Port device team_slave_0 added [ 35.498341][ T3300] hsr_slave_0: entered promiscuous mode [ 35.499351][ T3300] hsr_slave_1: entered promiscuous mode [ 35.499899][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 35.499940][ T3300] Cannot create hsr debugfs directory [ 35.503003][ T3306] team0: Port device team_slave_1 added [ 35.595238][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.595287][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.595389][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.603709][ T3304] hsr_slave_0: entered promiscuous mode [ 35.606267][ T3304] hsr_slave_1: entered promiscuous mode [ 35.606932][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 35.606968][ T3304] Cannot create hsr debugfs directory [ 35.613888][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.613926][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.614016][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.835780][ T3306] hsr_slave_0: entered promiscuous mode [ 35.836202][ T3306] hsr_slave_1: entered promiscuous mode [ 35.836556][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 35.836569][ T3306] Cannot create hsr debugfs directory [ 35.959805][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.962604][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.966092][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.978494][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.992209][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.994405][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.999974][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.002606][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.035575][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.038458][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.049741][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.059558][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.068184][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.074437][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.082977][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.087296][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.103482][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.105375][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.111684][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.122158][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.123501][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.128579][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.142701][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.149021][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.173909][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.176014][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.182270][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.192035][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.204320][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.214125][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.227707][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.229598][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.252660][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.254472][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.255111][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.257290][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.257860][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.259878][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.260433][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.266405][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.302864][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.313311][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.338919][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.338948][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.340458][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.340484][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.400763][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.435274][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.437761][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.447799][ T1701] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.447832][ T1701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.472623][ T1836] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.472665][ T1836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.477505][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.495757][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.495794][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.519062][ T1701] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.519100][ T1701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.540897][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.576981][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.582645][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.612253][ T1701] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.612311][ T1701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.615331][ T1701] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.615371][ T1701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.655948][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.683097][ T1701] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.683135][ T1701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.691727][ T1836] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.691828][ T1836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.800001][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.910373][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.943389][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.977934][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.009926][ T3304] veth0_vlan: entered promiscuous mode [ 37.018808][ T3304] veth1_vlan: entered promiscuous mode [ 37.036816][ T3304] veth0_macvtap: entered promiscuous mode [ 37.038667][ T3304] veth1_macvtap: entered promiscuous mode [ 37.057198][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.068797][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.111187][ T38] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.111640][ T38] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.111679][ T38] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.111719][ T38] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.115206][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.196654][ T3305] veth0_vlan: entered promiscuous mode [ 37.205908][ T3304] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.226210][ T3305] veth1_vlan: entered promiscuous mode [ 37.265057][ T3305] veth0_macvtap: entered promiscuous mode [ 37.269866][ T3305] veth1_macvtap: entered promiscuous mode [ 37.299317][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.312263][ T3499] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3'. [ 37.322133][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.329701][ T3306] veth0_vlan: entered promiscuous mode [ 37.349526][ T3306] veth1_vlan: entered promiscuous mode [ 37.370685][ T3299] veth0_vlan: entered promiscuous mode [ 37.387650][ T3299] veth1_vlan: entered promiscuous mode [ 37.418597][ T3306] veth0_macvtap: entered promiscuous mode [ 37.428315][ T3306] veth1_macvtap: entered promiscuous mode [ 37.451676][ T1701] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.452042][ T1701] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.453926][ T65] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.473298][ T3299] veth0_macvtap: entered promiscuous mode [ 37.478053][ T3300] veth0_vlan: entered promiscuous mode [ 37.489460][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.496666][ T3299] veth1_macvtap: entered promiscuous mode [ 37.501253][ T1701] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.523394][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.543813][ T3300] veth1_vlan: entered promiscuous mode [ 37.547676][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.551715][ T142] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.551923][ T142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.552052][ T142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.552211][ T142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.585999][ T3511] usb usb1: usbfs: process 3511 (syz.0.1) did not claim interface 0 before use [ 37.610212][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.631539][ T65] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.632775][ T65] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.632848][ T65] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.650994][ T3513] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 37.689406][ T3513] Zero length message leads to an empty skb [ 37.721840][ T65] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.736273][ T3300] veth0_macvtap: entered promiscuous mode [ 37.750025][ T3300] veth1_macvtap: entered promiscuous mode [ 37.770025][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.780607][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.841921][ T142] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.842031][ T142] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.842145][ T142] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.842182][ T142] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.936413][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 37.936446][ T29] audit: type=1400 audit(1790636866.903:195): avc: denied { create } for pid=3531 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 37.936489][ T29] audit: type=1400 audit(1790636866.903:196): avc: denied { read } for pid=3531 comm="syz.2.11" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 37.936523][ T29] audit: type=1400 audit(1790636866.903:197): avc: denied { open } for pid=3531 comm="syz.2.11" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 38.037189][ T29] audit: type=1400 audit(1790636867.003:198): avc: denied { write } for pid=3531 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.037533][ T3535] loop3: detected capacity change from 0 to 256 [ 38.037786][ T3535] ======================================================= [ 38.037786][ T3535] WARNING: The mand mount option has been deprecated and [ 38.037786][ T3535] and is ignored by this kernel. Remove the mand [ 38.037786][ T3535] option from the mount to silence this warning. [ 38.037786][ T3535] ======================================================= [ 38.044565][ T3537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11'. [ 38.074236][ T3527] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 38.074403][ T3527] SELinux: failed to load policy [ 38.074626][ T29] audit: type=1400 audit(1790636867.043:199): avc: denied { load_policy } for pid=3526 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 38.124387][ T29] audit: type=1400 audit(1790636867.093:200): avc: denied { mount } for pid=3534 comm="syz.3.12" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.169018][ T3537] bond0: ARP target 8.4.0.0 is already present [ 38.169048][ T3537] bond0: option arp_ip_target: invalid value (1032) [ 38.189658][ T3540] loop4: detected capacity change from 0 to 512 [ 38.207298][ T29] audit: type=1400 audit(1790636867.173:201): avc: denied { create } for pid=3531 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.259875][ T29] audit: type=1400 audit(1790636867.223:202): avc: denied { allowed } for pid=3534 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.297587][ T29] audit: type=1400 audit(1790636867.263:203): avc: denied { map_read map_write } for pid=3539 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.332261][ T29] audit: type=1400 audit(1790636867.293:204): avc: denied { create } for pid=3534 comm="syz.3.12" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.454267][ T3546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14'. [ 38.546137][ T3551] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13'. [ 39.359675][ T3567] loop4: detected capacity change from 0 to 512 [ 39.376467][ T38] kworker/u8:2: attempt to access beyond end of device [ 39.376467][ T38] loop3: rw=1, sector=1800, nr_sectors = 32 limit=256 [ 39.376582][ T38] kworker/u8:2: attempt to access beyond end of device [ 39.376582][ T38] loop3: rw=1, sector=1864, nr_sectors = 32 limit=256 [ 39.376630][ T38] kworker/u8:2: attempt to access beyond end of device [ 39.376630][ T38] loop3: rw=1, sector=1928, nr_sectors = 32 limit=256 [ 39.376788][ T38] kworker/u8:2: attempt to access beyond end of device [ 39.376788][ T38] loop3: rw=1, sector=1992, nr_sectors = 32 limit=256 [ 39.377006][ T38] kworker/u8:2: attempt to access beyond end of device [ 39.377006][ T38] loop3: rw=1, sector=2056, nr_sectors = 32 limit=256 [ 39.377177][ T38] kworker/u8:2: attempt to access beyond end of device [ 39.377177][ T38] loop3: rw=1, sector=2120, nr_sectors = 32 limit=256 [ 39.377310][ T38] kworker/u8:2: attempt to access beyond end of device [ 39.377310][ T38] loop3: rw=1, sector=2184, nr_sectors = 32 limit=256 [ 39.377428][ T38] kworker/u8:2: attempt to access beyond end of device [ 39.377428][ T38] loop3: rw=1, sector=2248, nr_sectors = 32 limit=256 [ 39.377567][ T38] kworker/u8:2: attempt to access beyond end of device [ 39.377567][ T38] loop3: rw=1, sector=2312, nr_sectors = 32 limit=256 [ 39.377686][ T38] kworker/u8:2: attempt to access beyond end of device [ 39.377686][ T38] loop3: rw=1, sector=2376, nr_sectors = 32 limit=256 [ 39.459040][ T3567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.459244][ T3567] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.595660][ T3575] loop0: detected capacity change from 0 to 512 [ 39.624399][ T3575] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.624420][ T3575] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.652082][ T3550] syz.2.15 (3550) used greatest stack depth: 10792 bytes left [ 39.653618][ T3575] EXT4-fs (loop0): 1 truncate cleaned up [ 39.654060][ T3575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.712367][ T3565] syz.4.18 (3565) used greatest stack depth: 10784 bytes left [ 39.713190][ T3575] EXT4-fs (loop0): shut down requested (0) [ 39.715717][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.798171][ T3582] netlink: 8628 bytes leftover after parsing attributes in process `syz.3.20'. [ 39.936566][ T3590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.25'. [ 39.936655][ T3590] FAULT_INJECTION: forcing a failure. [ 39.936655][ T3590] name failslab, interval 1, probability 0, space 0, times 1 [ 39.936695][ T3590] CPU: 1 UID: 0 PID: 3590 Comm: syz.4.25 Not tainted syzkaller #0 PREEMPT(lazy) [ 39.936727][ T3590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.936811][ T3590] Call Trace: [ 39.936818][ T3590] [ 39.936827][ T3590] __dump_stack+0x1d/0x30 [ 39.936859][ T3590] dump_stack_lvl+0x95/0xd0 [ 39.936918][ T3590] dump_stack+0x15/0x1b [ 39.936945][ T3590] should_fail_ex+0x262/0x280 [ 39.937031][ T3590] should_failslab+0x8c/0xb0 [ 39.937075][ T3590] __kvmalloc_node_noprof+0x168/0x5c0 [ 39.937100][ T3590] ? nf_hook_entries_grow+0x1cb/0x460 [ 39.937126][ T3590] ? nf_hook_entries_grow+0x1cb/0x460 [ 39.937190][ T3590] nf_hook_entries_grow+0x1cb/0x460 [ 39.937221][ T3590] ? call_rcu+0x2be/0x440 [ 39.937257][ T3590] __nf_register_net_hook+0x187/0x480 [ 39.937298][ T3590] nf_register_net_hook+0x88/0x130 [ 39.937325][ T3590] nf_register_net_hooks+0x44/0x150 [ 39.937355][ T3590] nf_defrag_ipv4_enable+0x6e/0xc0 [ 39.937424][ T3590] nf_ct_netns_do_get+0x13c/0x3a0 [ 39.937455][ T3590] nf_ct_netns_get+0xf1/0x2c0 [ 39.937506][ T3590] nft_synproxy_do_init+0x14b/0x2d0 [ 39.937541][ T3590] nft_synproxy_obj_init+0x2c/0x40 [ 39.937571][ T3590] nft_obj_init+0x185/0x220 [ 39.937664][ T3590] nf_tables_newobj+0x76b/0x1160 [ 39.937705][ T3590] nfnetlink_rcv+0xbf7/0x1740 [ 39.937771][ T3590] netlink_unicast+0x5a9/0x680 [ 39.937892][ T3590] netlink_sendmsg+0x5be/0x6f0 [ 39.937921][ T3590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.937946][ T3590] ____sys_sendmsg+0x532/0x580 [ 39.938053][ T3590] ___sys_sendmsg+0x195/0x1e0 [ 39.938231][ T3590] __x64_sys_sendmsg+0xd4/0x160 [ 39.938267][ T3590] x64_sys_call+0x22ab/0x2550 [ 39.938370][ T3590] do_syscall_64+0x112/0x360 [ 39.938400][ T3590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.938463][ T3590] RIP: 0033:0x7f527f19e159 [ 39.938484][ T3590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.938503][ T3590] RSP: 002b:00007f527dbf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.938527][ T3590] RAX: ffffffffffffffda RBX: 00007f527f425fa0 RCX: 00007f527f19e159 [ 39.938545][ T3590] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 39.938557][ T3590] RBP: 00007f527f23506b R08: 0000000000000000 R09: 0000000000000000 [ 39.938591][ T3590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.938606][ T3590] R13: 00007f527f426038 R14: 00007f527f425fa0 R15: 00007ffdfa9e5168 [ 39.938632][ T3590] [ 40.216250][ T3590] syz.4.25 (3590) used greatest stack depth: 10600 bytes left [ 40.274194][ T3603] macvlan1: entered promiscuous mode [ 40.295055][ T3603] macvlan1: left promiscuous mode [ 40.461670][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.508575][ T3578] loop1: detected capacity change from 0 to 4096 [ 40.524836][ T3578] EXT4-fs: test_dummy_encryption option not supported [ 40.628940][ T3615] loop3: detected capacity change from 0 to 512 [ 40.649590][ T3615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.649771][ T3615] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.659323][ T3613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.31'. [ 40.748873][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.828623][ T3608] loop4: detected capacity change from 0 to 512 [ 40.987268][ T3624] loop3: detected capacity change from 0 to 1764 [ 40.999504][ T3624] iso9660: Unknown parameter 'ÿÿÿÿ01777777777777777777777ÿÿñDïVjª&Ú¾¶ô0ßícF¬( [ 40.999504][ T3624] о0¬þ1>i¢úlþgŒaÉô  ký™¾È â½¥(ªé7%à´ûðÏ…·ûC~4Gõvö2v‘Q\µF' [ 41.384539][ T3642] netlink: 44 bytes leftover after parsing attributes in process `syz.2.40'. [ 41.588142][ T3657] loop2: detected capacity change from 0 to 512 [ 41.598430][ T3659] syzkaller0: entered promiscuous mode [ 41.598453][ T3659] syzkaller0: entered allmulticast mode [ 41.609216][ T3657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.609470][ T3657] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.980186][ T3676] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.996429][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.024647][ T3676] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.044467][ T3678] FAULT_INJECTION: forcing a failure. [ 42.044467][ T3678] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.044506][ T3678] CPU: 0 UID: 0 PID: 3678 Comm: syz.2.50 Not tainted syzkaller #0 PREEMPT(lazy) [ 42.044543][ T3678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.044559][ T3678] Call Trace: [ 42.044568][ T3678] [ 42.044578][ T3678] __dump_stack+0x1d/0x30 [ 42.044611][ T3678] dump_stack_lvl+0x95/0xd0 [ 42.044642][ T3678] dump_stack+0x15/0x1b [ 42.044674][ T3678] should_fail_ex+0x262/0x280 [ 42.044753][ T3678] should_fail+0xb/0x20 [ 42.044856][ T3678] should_fail_usercopy+0x1a/0x20 [ 42.044889][ T3678] _copy_from_user+0x1c/0xb0 [ 42.044921][ T3678] __se_sys_splice+0x197/0x3a0 [ 42.045036][ T3678] __x64_sys_splice+0x78/0x90 [ 42.045060][ T3678] x64_sys_call+0x1797/0x2550 [ 42.045087][ T3678] do_syscall_64+0x112/0x360 [ 42.045148][ T3678] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 42.045189][ T3678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.045213][ T3678] RIP: 0033:0x7fb442c9e159 [ 42.045248][ T3678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.045273][ T3678] RSP: 002b:00007fb4416f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 42.045300][ T3678] RAX: ffffffffffffffda RBX: 00007fb442f25fa0 RCX: 00007fb442c9e159 [ 42.045343][ T3678] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 [ 42.045356][ T3678] RBP: 00007fb4416f7090 R08: 0000200000000005 R09: 0000000000000006 [ 42.045374][ T3678] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 42.045392][ T3678] R13: 00007fb442f26038 R14: 00007fb442f25fa0 R15: 00007fff99a70a68 [ 42.045418][ T3678] [ 42.159624][ T3676] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.222994][ T3682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.51'. [ 42.310668][ T3687] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 42.345794][ T3676] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.370113][ T3685] netlink: 'syz.2.53': attribute type 4 has an invalid length. [ 42.384367][ T3685] netlink: 'syz.2.53': attribute type 4 has an invalid length. [ 42.436933][ T3691] FAULT_INJECTION: forcing a failure. [ 42.436933][ T3691] name failslab, interval 1, probability 0, space 0, times 0 [ 42.436965][ T3691] CPU: 0 UID: 0 PID: 3691 Comm: syz.1.54 Not tainted syzkaller #0 PREEMPT(lazy) [ 42.437046][ T3691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.437067][ T3691] Call Trace: [ 42.437073][ T3691] [ 42.437081][ T3691] __dump_stack+0x1d/0x30 [ 42.437104][ T3691] dump_stack_lvl+0x95/0xd0 [ 42.437125][ T3691] dump_stack+0x15/0x1b [ 42.437149][ T3691] should_fail_ex+0x262/0x280 [ 42.437198][ T3691] should_failslab+0x8c/0xb0 [ 42.437230][ T3691] ? alloc_slab_obj_exts+0x9c/0x110 [ 42.437316][ T3691] __kmalloc_flags_noprof+0x105/0x500 [ 42.437396][ T3691] ? alloc_slab_obj_exts+0x9c/0x110 [ 42.437459][ T3691] alloc_slab_obj_exts+0x9c/0x110 [ 42.437498][ T3691] __memcg_slab_post_alloc_hook+0x462/0x8d0 [ 42.437595][ T3691] kmem_cache_alloc_lru_noprof+0x1f4/0x3f0 [ 42.437697][ T3691] ? bdev_alloc_inode+0x35/0xb0 [ 42.437725][ T3691] ? bdev_alloc_inode+0x35/0xb0 [ 42.437757][ T3691] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 42.437783][ T3691] bdev_alloc_inode+0x35/0xb0 [ 42.437938][ T3691] alloc_inode+0x40/0x170 [ 42.437967][ T3691] new_inode+0x1d/0xe0 [ 42.437999][ T3691] bdev_alloc+0x2e/0x1f0 [ 42.438035][ T3691] __alloc_disk_node+0xbe/0x340 [ 42.438109][ T3691] __blk_alloc_disk+0x68/0xd0 [ 42.438154][ T3691] dm_create+0x36d/0x850 [ 42.438180][ T3691] dev_create+0x141/0x290 [ 42.438210][ T3691] dm_ctl_ioctl+0x80b/0xad0 [ 42.438310][ T3691] ? __pfx_dev_create+0x10/0x10 [ 42.438392][ T3691] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 42.438427][ T3691] __se_sys_ioctl+0xce/0x140 [ 42.438475][ T3691] __x64_sys_ioctl+0x43/0x50 [ 42.438574][ T3691] x64_sys_call+0x239d/0x2550 [ 42.438609][ T3691] do_syscall_64+0x112/0x360 [ 42.438644][ T3691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.438773][ T3691] RIP: 0033:0x7f84fcf6e159 [ 42.438796][ T3691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.438900][ T3691] RSP: 002b:00007f84fb9c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.438927][ T3691] RAX: ffffffffffffffda RBX: 00007f84fd1f5fa0 RCX: 00007f84fcf6e159 [ 42.438945][ T3691] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 42.438958][ T3691] RBP: 00007f84fd00506b R08: 0000000000000000 R09: 0000000000000000 [ 42.438970][ T3691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.438983][ T3691] R13: 00007f84fd1f6038 R14: 00007f84fd1f5fa0 R15: 00007fffc5630c18 [ 42.439061][ T3691] [ 42.496494][ T38] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.529810][ T38] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.531358][ T38] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.582294][ T38] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.761609][ T3699] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 42.789063][ T3699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.57'. [ 43.009973][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 43.009992][ T29] audit: type=1400 audit(1790636871.973:267): avc: denied { mount } for pid=3708 comm="syz.0.61" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.063205][ T29] audit: type=1400 audit(1790636872.023:268): avc: denied { create } for pid=3708 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 43.063652][ T29] audit: type=1400 audit(1790636872.033:269): avc: denied { ioctl } for pid=3708 comm="syz.0.61" path="socket:[5625]" dev="sockfs" ino=5625 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 43.137905][ T29] audit: type=1400 audit(1790636872.103:270): avc: denied { perfmon } for pid=3712 comm="syz.4.63" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.200240][ T29] audit: type=1400 audit(1790636872.163:271): avc: denied { bpf } for pid=3716 comm="syz.1.64" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.233788][ T3718] loop4: detected capacity change from 0 to 256 [ 43.253014][ T3718] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 43.253043][ T3718] FAT-fs (loop4): Filesystem has been set read-only [ 43.253096][ T3718] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 43.254900][ T3718] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 43.279899][ T29] audit: type=1326 audit(1790636872.243:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.4.63" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f19e159 code=0x7ffc0000 [ 43.280953][ T29] audit: type=1326 audit(1790636872.243:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.4.63" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f19e159 code=0x7ffc0000 [ 43.281106][ T29] audit: type=1326 audit(1790636872.243:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.4.63" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f19e159 code=0x7ffc0000 [ 43.282272][ T29] audit: type=1326 audit(1790636872.243:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.4.63" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f527f19e159 code=0x7ffc0000 [ 43.282627][ T29] audit: type=1326 audit(1790636872.243:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3712 comm="syz.4.63" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527f19e159 code=0x7ffc0000 [ 43.542836][ T3717] syz.1.64 (3717) used greatest stack depth: 10576 bytes left [ 43.596887][ T3736] netlink: 40 bytes leftover after parsing attributes in process `syz.0.72'. [ 43.627690][ T3736] FAULT_INJECTION: forcing a failure. [ 43.627690][ T3736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.627718][ T3736] CPU: 0 UID: 0 PID: 3736 Comm: syz.0.72 Not tainted syzkaller #0 PREEMPT(lazy) [ 43.627776][ T3736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.627789][ T3736] Call Trace: [ 43.627795][ T3736] [ 43.627930][ T3736] __dump_stack+0x1d/0x30 [ 43.627955][ T3736] dump_stack_lvl+0x95/0xd0 [ 43.627982][ T3736] dump_stack+0x15/0x1b [ 43.628029][ T3736] should_fail_ex+0x262/0x280 [ 43.628063][ T3736] should_fail+0xb/0x20 [ 43.628088][ T3736] should_fail_usercopy+0x1a/0x20 [ 43.628125][ T3736] _copy_from_user+0x1c/0xb0 [ 43.628165][ T3736] keyctl_pkey_params_get_2+0x7c/0x3e0 [ 43.628226][ T3736] keyctl_pkey_e_d_s+0x54/0x260 [ 43.628272][ T3736] __se_sys_keyctl+0x5fb/0xb70 [ 43.628300][ T3736] ? __se_sys_futex+0x2f6/0x370 [ 43.628380][ T3736] ? xfd_validate_state+0x45/0xf0 [ 43.628415][ T3736] ? restore_fpregs_from_fpstate+0x61/0x110 [ 43.628439][ T3736] __x64_sys_keyctl+0x67/0x80 [ 43.628481][ T3736] x64_sys_call+0x1fe0/0x2550 [ 43.628539][ T3736] do_syscall_64+0x112/0x360 [ 43.628572][ T3736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.628601][ T3736] RIP: 0033:0x7f42e56ce159 [ 43.628622][ T3736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.628643][ T3736] RSP: 002b:00007f42e4127028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 43.628724][ T3736] RAX: ffffffffffffffda RBX: 00007f42e5955fa0 RCX: 00007f42e56ce159 [ 43.628738][ T3736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001b [ 43.628750][ T3736] RBP: 00007f42e576506b R08: 0000000000000000 R09: 0000000000000000 [ 43.628763][ T3736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.628774][ T3736] R13: 00007f42e5956038 R14: 00007f42e5955fa0 R15: 00007ffc84b44d78 [ 43.628797][ T3736] [ 43.673819][ T3736] netlink: 40 bytes leftover after parsing attributes in process `syz.0.72'. [ 43.834842][ T3736] FAULT_INJECTION: forcing a failure. [ 43.834842][ T3736] name fail_futex, interval 1, probability 0, space 0, times 1 [ 43.834999][ T3736] CPU: 0 UID: 0 PID: 3736 Comm: syz.0.72 Not tainted syzkaller #0 PREEMPT(lazy) [ 43.835075][ T3736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.835130][ T3736] Call Trace: [ 43.835150][ T3736] [ 43.835172][ T3736] __dump_stack+0x1d/0x30 [ 43.835272][ T3736] dump_stack_lvl+0x95/0xd0 [ 43.835364][ T3736] dump_stack+0x15/0x1b [ 43.835487][ T3736] should_fail_ex+0x262/0x280 [ 43.835589][ T3736] should_fail+0xb/0x20 [ 43.835669][ T3736] get_futex_key+0x12d/0xb10 [ 43.835753][ T3736] ? __rcu_read_unlock+0x4e/0x70 [ 43.835926][ T3736] ? hrtimer_start_range_ns_common+0x4c5/0x7d0 [ 43.836010][ T3736] futex_wake+0x89/0x400 [ 43.836161][ T3736] ? perf_lock_task_context+0x24b/0x2c0 [ 43.836272][ T3736] do_futex+0x3f8/0x460 [ 43.836384][ T3736] mm_exit_exec_release+0xab/0x190 [ 43.836534][ T3736] exit_mm+0x37/0x1b0 [ 43.836628][ T3736] do_exit+0x438/0x1510 [ 43.836815][ T3736] do_group_exit+0xfe/0x140 [ 43.836964][ T3736] ? get_signal+0xe00/0xf10 [ 43.837082][ T3736] get_signal+0xe07/0xf10 [ 43.837208][ T3736] arch_do_signal_or_restart+0x96/0x480 [ 43.837390][ T3736] exit_to_user_mode_loop+0x15d/0x8c0 [ 43.837515][ T3736] do_syscall_64+0x212/0x360 [ 43.837667][ T3736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.837739][ T3736] RIP: 0033:0x7f42e56ce159 [ 43.837799][ T3736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.837855][ T3736] RSP: 002b:00007f42e41270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 43.837928][ T3736] RAX: fffffffffffffe00 RBX: 00007f42e5955fa8 RCX: 00007f42e56ce159 [ 43.837977][ T3736] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f42e5955fa8 [ 43.838030][ T3736] RBP: 00007f42e5955fa0 R08: 0000000000000000 R09: 0000000000000000 [ 43.838077][ T3736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.838121][ T3736] R13: 00007f42e5956038 R14: 00007ffc84b44c90 R15: 00007ffc84b44d78 [ 43.838216][ T3736] [ 43.935101][ T3750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.74'. [ 43.954569][ T3749] loop1: detected capacity change from 0 to 512 [ 44.026740][ T3749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.026956][ T3749] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.193970][ T3760] syz_tun: entered allmulticast mode [ 44.198377][ T3760] syz_tun: left allmulticast mode [ 44.211760][ T3759] loop3: detected capacity change from 0 to 2048 [ 44.236506][ T3759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.244168][ T3759] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 44.252627][ T3759] EXT4-fs (loop3): Remounting filesystem read-only [ 44.289014][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.341467][ T3763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60745 sclass=netlink_route_socket pid=3763 comm=syz.1.75 [ 44.408893][ T3769] capability: warning: `syz.1.75' uses 32-bit capabilities (legacy support in use) [ 44.452293][ T3757] loop2: detected capacity change from 0 to 512 [ 44.481520][ T3757] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.493629][ T3757] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c018, mo2=0082] [ 44.498489][ T3757] EXT4-fs (loop2): 1 truncate cleaned up [ 44.506505][ T3757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.568686][ T3764] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 44.659153][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.696754][ T3790] loop2: detected capacity change from 0 to 2048 [ 44.706215][ T3790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.723542][ T3789] netlink: 128 bytes leftover after parsing attributes in process `syz.2.84'. [ 44.811642][ T3796] loop3: detected capacity change from 0 to 512 [ 44.819293][ T3796] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 44.819310][ T3796] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c01c, mo2=0002] [ 44.819436][ T3796] EXT4-fs (loop3): orphan cleanup on readonly fs [ 44.850335][ T3763] IPVS: set_ctl: invalid protocol: 1 172.20.20.67:20000 [ 44.858485][ T3796] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #13: comm syz.3.86: iget: bad i_size value: 12154761577498 [ 44.858607][ T3796] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 44.858821][ T3796] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.86: couldn't read orphan inode 13 (err -117) [ 44.858857][ T3796] loop3: lost filesystem error report for type 5 error -117 [ 44.859398][ T3796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 44.908678][ T3299] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 44.909354][ T3299] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 44.940957][ T3796] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.86: dx entry: limit 65535 != root limit 120 [ 44.941018][ T3796] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.86: Corrupt directory, running e2fsck is recommended [ 44.997824][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.134890][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.182386][ T3804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.260710][ T3822] 9p: Bad value for 'wfdno' [ 45.268770][ T38] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.335047][ T38] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.385804][ T38] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.446719][ T38] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.577797][ T38] bridge_slave_1: left allmulticast mode [ 45.577821][ T38] bridge_slave_1: left promiscuous mode [ 45.577952][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.620303][ T38] bridge_slave_0: left allmulticast mode [ 45.620380][ T38] bridge_slave_0: left promiscuous mode [ 45.620563][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.697026][ T3839] loop3: detected capacity change from 0 to 1764 [ 45.715971][ T3839] iso9660: Unknown parameter 'ÿÿÿÿ01777777777777777777777ÿÿñDïVjª&Ú¾¶ô0ßícF¬( [ 45.715971][ T3839] о0¬þ1>i¢úlþgŒaÉô  ký™¾È â½¥(ªé7%à´ûðÏ…·ûC~4Gõvö2v‘Q\µF' [ 45.898178][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.921989][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.930455][ T38] bond0 (unregistering): Released all slaves [ 46.027333][ T38] hsr_slave_0: left promiscuous mode [ 46.030842][ T38] hsr_slave_1: left promiscuous mode [ 46.031448][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.031463][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.039414][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.039463][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.052557][ T38] veth1_macvtap: left promiscuous mode [ 46.052631][ T38] veth0_macvtap: left promiscuous mode [ 46.052788][ T38] veth1_vlan: left promiscuous mode [ 46.052882][ T38] veth0_vlan: left promiscuous mode [ 46.187001][ T3884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'. [ 46.335171][ T38] team0 (unregistering): Port device team_slave_1 removed [ 46.337928][ T38] team0 (unregistering): Port device team_slave_0 removed [ 46.376779][ T3025] 8021q: adding VLAN 0 to HW filter on device eth1 [ 46.519182][ T3884] team0: Port device team_slave_0 removed [ 46.546932][ T3896] gretap0: entered promiscuous mode [ 47.148992][ T3829] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.149032][ T3829] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.149096][ T3829] bridge_slave_0: entered allmulticast mode [ 47.172813][ T3829] bridge_slave_0: entered promiscuous mode [ 47.180127][ T3829] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.180179][ T3829] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.196297][ T3829] bridge_slave_1: entered allmulticast mode [ 47.196846][ T3829] bridge_slave_1: entered promiscuous mode [ 47.254761][ T3934] loop2: detected capacity change from 0 to 128 [ 47.282775][ T3025] 8021q: adding VLAN 0 to HW filter on device eth2 [ 47.286476][ T3829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.290016][ T3829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.342616][ T3829] team0: Port device team_slave_0 added [ 47.343498][ T3829] team0: Port device team_slave_1 added [ 47.359446][ T3829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.359460][ T3829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.359496][ T3829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.361988][ T3829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.362000][ T3829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.362070][ T3829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.413987][ T3829] hsr_slave_0: entered promiscuous mode [ 47.419556][ T3829] hsr_slave_1: entered promiscuous mode [ 47.477584][ T3938] netlink: 60 bytes leftover after parsing attributes in process `syz.3.123'. [ 47.477652][ T3938] netlink: 60 bytes leftover after parsing attributes in process `syz.3.123'. [ 47.514504][ T3941] futex_wake_op: syz.0.124 tries to shift op by 144; fix this program [ 47.580124][ T51] IPVS: starting estimator thread 0... [ 47.680488][ T3829] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.697945][ T3947] random: crng reseeded on system resumption [ 47.734335][ T3951] IPVS: using max 2400 ests per chain, 120000 per kthread [ 47.737737][ T3829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.738479][ T3829] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.740242][ T3829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.770696][ T3829] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.781584][ T3829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.782334][ T3829] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.808830][ T3829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.004053][ T3947] netlink: 'syz.2.125': attribute type 21 has an invalid length. [ 48.005178][ T3947] netlink: 128 bytes leftover after parsing attributes in process `syz.2.125'. [ 48.010183][ T3947] netlink: 'syz.2.125': attribute type 4 has an invalid length. [ 48.010806][ T3947] netlink: 'syz.2.125': attribute type 5 has an invalid length. [ 48.011348][ T3947] netlink: 3 bytes leftover after parsing attributes in process `syz.2.125'. [ 48.136350][ T3829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.139063][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 48.139197][ T29] audit: type=1400 audit(1790636877.103:604): avc: denied { write } for pid=3983 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.230272][ T3829] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.411446][ T29] audit: type=1400 audit(1790636877.383:605): avc: denied { create } for pid=3991 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.413720][ T3829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.413845][ T3829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.514869][ T3025] 8021q: adding VLAN 0 to HW filter on device eth4 [ 48.536563][ T3992] loop4: detected capacity change from 0 to 512 [ 48.790893][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.790930][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.794231][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.794335][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.835840][ T3992] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 48.835972][ T3992] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 48.836027][ T3992] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.132: Corrupt directory, running e2fsck is recommended [ 48.964984][ T3992] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 48.966673][ T3992] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.132: corrupted in-inode xattr: invalid ea_ino [ 48.966771][ T3992] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.966917][ T3992] EXT4-fs (loop4): Remounting filesystem read-only [ 48.967270][ T3992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.968568][ T3992] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 48.968922][ T3992] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.062656][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 49.062695][ T4008] netlink: 84 bytes leftover after parsing attributes in process `syz.2.134'. [ 49.147033][ T29] audit: type=1400 audit(1790636878.113:606): avc: denied { setopt } for pid=3991 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.188283][ T29] audit: type=1400 audit(1790636878.153:607): avc: denied { write } for pid=3996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.243893][ T4016] loop2: detected capacity change from 0 to 512 [ 49.288254][ T4016] EXT4-fs (loop2): 1 orphan inode deleted [ 49.288846][ T4016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.316153][ T4016] ext4 filesystem being mounted at /30/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.354480][ T29] audit: type=1400 audit(1790636878.323:608): avc: denied { write } for pid=4024 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.429903][ T3025] 8021q: adding VLAN 0 to HW filter on device eth3 [ 49.492804][ T29] audit: type=1400 audit(1790636878.463:609): avc: denied { create } for pid=4026 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 49.536153][ T3829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.792909][ T29] audit: type=1400 audit(1790636878.763:610): avc: denied { create } for pid=4026 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 49.797110][ T38] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 49.797144][ T38] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 1 [ 49.799627][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.839315][ T3829] veth0_vlan: entered promiscuous mode [ 49.857303][ T3829] veth1_vlan: entered promiscuous mode [ 49.888984][ T29] audit: type=1400 audit(1790636878.853:611): avc: denied { create } for pid=4052 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.889296][ T29] audit: type=1400 audit(1790636878.853:612): avc: denied { setopt } for pid=4052 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.953676][ T3829] veth0_macvtap: entered promiscuous mode [ 49.957428][ T3829] veth1_macvtap: entered promiscuous mode [ 49.982329][ T3829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.991398][ T3829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.021337][ T65] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.051248][ T38] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.051338][ T38] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.051412][ T38] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.246277][ T4068] loop5: detected capacity change from 0 to 128 [ 50.256027][ T4068] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.256160][ T4068] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.323573][ T3829] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.578699][ T4084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 50.591873][ T4088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 50.599233][ T4089] netlink: 72 bytes leftover after parsing attributes in process `syz.4.150'. [ 50.616911][ T4084] loop0: detected capacity change from 0 to 512 [ 50.618992][ T4084] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 50.619022][ T4084] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 50.619038][ T4084] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.148: Corrupt directory, running e2fsck is recommended [ 50.661008][ T4084] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 50.661346][ T4084] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.148: corrupted in-inode xattr: invalid ea_ino [ 50.661500][ T4084] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.662080][ T4084] EXT4-fs (loop0): Remounting filesystem read-only [ 50.667179][ T4084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.674944][ T4084] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 50.675852][ T4084] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.707876][ T4088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.768587][ T4095] loop0: detected capacity change from 0 to 512 [ 50.784070][ T4095] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 50.784101][ T4095] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 50.784137][ T4095] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.148: Corrupt directory, running e2fsck is recommended [ 50.787293][ T4108] netlink: 'syz.3.153': attribute type 64 has an invalid length. [ 50.790421][ T4106] loop2: detected capacity change from 0 to 1024 [ 50.843081][ T4106] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 50.846793][ T4106] JBD2: no valid journal superblock found [ 50.846831][ T4106] EXT4-fs (loop2): Could not load journal inode [ 50.893899][ T4095] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 50.893993][ T4095] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.148: corrupted in-inode xattr: invalid ea_ino [ 50.894022][ T4095] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.894398][ T4095] EXT4-fs (loop0): Remounting filesystem read-only [ 50.942805][ T4095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.969681][ T4112] loop4: detected capacity change from 0 to 164 [ 50.976430][ T4112] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ .ÃNÛBþO' [ 51.067439][ T4095] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 51.067803][ T4095] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.310060][ T4127] loop4: detected capacity change from 0 to 128 [ 53.324068][ T4127] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 53.329936][ T4120] loop3: detected capacity change from 0 to 512 [ 53.337316][ T4127] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.339046][ T4120] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.339495][ T4120] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 53.487778][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 53.487794][ T29] audit: type=1400 audit(1790636882.243:632): avc: denied { write } for pid=4125 comm="syz.4.159" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.511652][ T4120] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 53.514205][ T4120] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 53.514914][ T4120] System zones: 0-2, 18-18, 34-34 [ 53.531597][ T4120] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.157: bad orphan inode 15 [ 53.531668][ T4120] loop3: lost filesystem error report for type 5 error -117 [ 53.537255][ T4120] ext4_test_bit(bit=14, block=18) = 1 [ 53.537450][ T4120] is_bad_inode(inode)=0 [ 53.537480][ T4120] NEXT_ORPHAN(inode)=2264924160 [ 53.537502][ T4120] max_ino=32 [ 53.537522][ T4120] i_nlink=0 [ 53.539617][ T4120] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #15: comm syz.3.157: corrupted inode contents [ 53.539701][ T4120] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.545980][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 53.546038][ C0] EXT4-fs (loop3): initial error at time 1790636882: ext4_orphan_get:1429 [ 53.546128][ C0] EXT4-fs (loop3): last error at time 1790636882: ext4_do_update_inode:5801: inode 15 [ 53.549854][ T4120] EXT4-fs error (device loop3): ext4_dirty_inode:6736: inode #15: comm syz.3.157: mark_inode_dirty error [ 53.549934][ T4120] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.557605][ T4120] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #15: comm syz.3.157: corrupted inode contents [ 53.557688][ T4120] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.561987][ T4120] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.157: mark_inode_dirty error [ 53.562075][ T4120] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.567545][ T4120] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2965: inode #15: comm syz.3.157: mark inode dirty (error -117) [ 53.567636][ T4120] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.569664][ T4120] EXT4-fs warning (device loop3): ext4_evict_inode:288: xattr delete (err -117) [ 53.589985][ T4120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.640940][ T4120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.157'. [ 54.311133][ T29] audit: type=1400 audit(1790636883.069:633): avc: denied { write } for pid=4119 comm="syz.3.157" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.316442][ T4146] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.157: bg 0: block 80: padding at end of block bitmap is not set [ 54.501002][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.504918][ T4120] syz.3.157 (4120) used greatest stack depth: 10568 bytes left [ 54.709183][ T29] audit: type=1400 audit(1790636883.447:634): avc: denied { write } for pid=4155 comm="syz.2.168" name="trace" dev="tracefs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 54.709291][ T29] audit: type=1400 audit(1790636883.447:635): avc: denied { open } for pid=4155 comm="syz.2.168" path="/37/my_tracefs/trace" dev="tracefs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 54.936387][ T4156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.936479][ T4156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.958003][ T4156] ip_tables: iptables: counters copy to user failed while replacing table [ 54.977232][ T29] audit: type=1400 audit(1790636883.694:636): avc: denied { read } for pid=4164 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.980649][ T29] audit: type=1400 audit(1790636883.694:637): avc: denied { shutdown } for pid=4164 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.040388][ T4169] loop5: detected capacity change from 0 to 512 [ 55.057605][ T4169] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.058837][ T4169] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.171: iget: bad i_size value: 38620345925642 [ 55.059013][ T4169] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.059203][ T4169] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.171: couldn't read orphan inode 15 (err -117) [ 55.059308][ T4169] loop5: lost filesystem error report for type 5 error -117 [ 55.061518][ T4169] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.075567][ T29] audit: type=1400 audit(1790636883.788:638): avc: denied { write } for pid=4167 comm="syz.5.171" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.092736][ T29] audit: type=1400 audit(1790636883.807:639): avc: denied { create } for pid=4167 comm="syz.5.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 55.158880][ T4168] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.171: bg 0: block 5: invalid block bitmap [ 55.159841][ T4168] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 55.159914][ T4168] EXT4-fs (loop5): This should not happen!! Data will be lost [ 55.159914][ T4168] [ 55.160018][ T4168] EXT4-fs (loop5): Total free blocks count 0 [ 55.160055][ T4168] EXT4-fs (loop5): Free/Dirty block details [ 55.160085][ T4168] EXT4-fs (loop5): free_blocks=0 [ 55.160172][ T4168] EXT4-fs (loop5): dirty_blocks=1 [ 55.160208][ T4168] EXT4-fs (loop5): Block reservation details [ 55.160347][ T4168] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 55.176215][ T29] audit: type=1400 audit(1790636883.873:640): avc: denied { ioctl } for pid=4172 comm="syz.0.172" path="socket:[8200]" dev="sockfs" ino=8200 ioctlcmd=0x6183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 55.177102][ T4168] syz.5.171 (4168) used greatest stack depth: 9480 bytes left [ 55.211900][ T3829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.219741][ T29] audit: type=1400 audit(1790636883.921:641): avc: denied { getopt } for pid=4172 comm="syz.0.172" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.235107][ T1836] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.236001][ T1836] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.236103][ T1836] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.236283][ T1836] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.411133][ T4185] netlink: 'syz.0.175': attribute type 2 has an invalid length. [ 55.443219][ T4190] loop5: detected capacity change from 0 to 764 [ 55.461136][ T4190] rock: corrupted directory entry. extent=32, offset=0, size=83886085 [ 55.506873][ T4199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.177'. [ 55.507412][ T4199] netlink: 56 bytes leftover after parsing attributes in process `syz.0.177'. [ 55.549543][ T1836] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.835816][ T4199] loop0: detected capacity change from 0 to 1764 [ 55.866245][ T4199] iso9660: Unknown parameter 'ÿÿÿÿ01777777777777777777777ÿÿñDïVjª&Ú¾¶ô0ßícF¬( [ 55.866245][ T4199] о0¬þ1>i¢úlþgŒaÉô  ký™¾È â½¥(ªé7%à´ûðÏ…·ûC~4Gõvö2v‘Q\µF' [ 55.869907][ T4223] loop2: detected capacity change from 0 to 1764 [ 56.078726][ T4235] loop0: detected capacity change from 0 to 2048 [ 56.126835][ T4235] loop0: p2 p3 p7 [ 56.151131][ T2986] loop0: p2 p3 p7 [ 56.157827][ T4235] netlink: 32 bytes leftover after parsing attributes in process `syz.0.185'. [ 56.157892][ T4235] netlink: 32 bytes leftover after parsing attributes in process `syz.0.185'. [ 56.182257][ T4239] Cannot find add_set index 0 as target [ 56.455831][ T3300] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.538248][ T4252] loop5: detected capacity change from 0 to 1024 [ 56.538682][ T4252] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.539192][ T4252] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.539418][ T4252] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.555132][ T4252] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz.5.192: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 56.555285][ T4252] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 56.556974][ T4252] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.192: couldn't read orphan inode 11 (err -117) [ 56.557067][ T4252] loop5: lost filesystem error report for type 5 error -117 [ 56.563801][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 56.563862][ C1] EXT4-fs (loop5): initial error at time 1790636885: ext4_ext_check_inode:521: inode 11 [ 56.564142][ C1] EXT4-fs (loop5): last error at time 1790636885: ext4_orphan_get:1408 [ 56.567317][ T4252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.665160][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.191'. [ 56.748186][ T4258] random: crng reseeded on system resumption [ 56.845764][ T3829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.036618][ T4266] hub 8-0:1.0: USB hub found [ 57.036786][ T4266] hub 8-0:1.0: 8 ports detected [ 57.536956][ T4270] loop4: detected capacity change from 0 to 164 [ 57.537284][ T4270] iso9660: Unknown parameter '' [ 57.538429][ T4270] sctp: [Deprecated]: syz.4.196 (pid 4270) Use of int in maxseg socket option. [ 57.538429][ T4270] Use struct sctp_assoc_value instead [ 57.620852][ T4275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.197'. [ 57.676669][ T4280] FAULT_INJECTION: forcing a failure. [ 57.676669][ T4280] name failslab, interval 1, probability 0, space 0, times 0 [ 57.676783][ T4280] CPU: 0 UID: 0 PID: 4280 Comm: syz.4.200 Not tainted syzkaller #0 PREEMPT(lazy) [ 57.676817][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.676839][ T4280] Call Trace: [ 57.676846][ T4280] [ 57.676854][ T4280] __dump_stack+0x1d/0x30 [ 57.676886][ T4280] dump_stack_lvl+0x95/0xd0 [ 57.676909][ T4280] dump_stack+0x15/0x1b [ 57.676975][ T4280] should_fail_ex+0x262/0x280 [ 57.677035][ T4280] ? alloc_fs_context+0x41/0x570 [ 57.677065][ T4280] should_failslab+0x8c/0xb0 [ 57.677099][ T4280] __kmalloc_cache_noprof+0x7a/0x400 [ 57.677209][ T4280] ? alloc_fs_context+0x41/0x570 [ 57.677237][ T4280] alloc_fs_context+0x41/0x570 [ 57.677262][ T4280] ? fs_context_for_mount+0x11/0x30 [ 57.677287][ T4280] fs_context_for_mount+0x22/0x30 [ 57.677333][ T4280] do_new_mount+0xe7/0x8d0 [ 57.677357][ T4280] ? security_capable+0x7b/0x90 [ 57.677464][ T4280] path_mount+0x4ad/0xb90 [ 57.677490][ T4280] __se_sys_mount+0x28c/0x2e0 [ 57.677576][ T4280] __x64_sys_mount+0x67/0x80 [ 57.677598][ T4280] x64_sys_call+0xc3b/0x2550 [ 57.677699][ T4280] do_syscall_64+0x112/0x360 [ 57.677724][ T4280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.677753][ T4280] RIP: 0033:0x7f527f19e159 [ 57.677780][ T4280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.677877][ T4280] RSP: 002b:00007f527dbf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 57.677904][ T4280] RAX: ffffffffffffffda RBX: 00007f527f425fa0 RCX: 00007f527f19e159 [ 57.677944][ T4280] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 57.677957][ T4280] RBP: 00007f527f23506b R08: 0000000000000000 R09: 0000000000000000 [ 57.677970][ T4280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.677983][ T4280] R13: 00007f527f426038 R14: 00007f527f425fa0 R15: 00007ffdfa9e5168 [ 57.678011][ T4280] [ 57.683880][ T4280] netlink: 36 bytes leftover after parsing attributes in process `syz.4.200'. [ 57.689450][ T4278] netlink: 36 bytes leftover after parsing attributes in process `syz.0.201'. [ 57.701619][ T4278] loop0: detected capacity change from 0 to 512 [ 57.707066][ T4278] EXT4-fs (loop0): #blocks per group too big: 65535 [ 57.749938][ T3554] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.361038][ T4295] loop3: detected capacity change from 0 to 512 [ 58.388586][ T4295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.388733][ T4295] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.522952][ T4302] netlink: 188 bytes leftover after parsing attributes in process `syz.2.199'. [ 58.566421][ T4282] loop5: detected capacity change from 0 to 164 [ 58.662353][ T4306] EXT4-fs: Ignoring removed oldalloc option [ 58.702761][ T4304] iso9660: Unknown parameter '00000000000000000004ÿÿÿÿÿÿÿÿ0x00000000000000050x0000000000000003' [ 58.704713][ T4306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.149501][ T4319] __nla_validate_parse: 1 callbacks suppressed [ 59.149521][ T4319] netlink: 168 bytes leftover after parsing attributes in process `syz.0.208'. [ 59.338048][ T4324] Cannot find add_set index 0 as target [ 59.480609][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 59.480626][ T29] audit: type=1400 audit(1790636887.861:663): avc: denied { read write } for pid=4328 comm="syz.0.212" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 59.480705][ T29] audit: type=1400 audit(1790636887.861:664): avc: denied { read write open } for pid=4328 comm="syz.0.212" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 59.617127][ T3829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.757534][ T29] audit: type=1400 audit(1790636888.111:665): avc: denied { create } for pid=4330 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.932938][ T29] audit: type=1400 audit(1790636888.157:666): avc: denied { setopt } for pid=4334 comm="syz.5.213" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.021741][ T29] audit: type=1400 audit(1790636888.369:667): avc: denied { mount } for pid=4340 comm="syz.5.216" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 60.072783][ T29] audit: type=1400 audit(1790636888.406:668): avc: denied { bind } for pid=4340 comm="syz.5.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.105109][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.154112][ T29] audit: type=1400 audit(1790636888.489:669): avc: denied { create } for pid=4354 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.186921][ T29] audit: type=1400 audit(1790636888.517:670): avc: denied { unmount } for pid=3829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 60.212850][ T29] audit: type=1400 audit(1790636888.526:671): avc: denied { ioctl } for pid=4355 comm="syz.3.218" path="socket:[7717]" dev="sockfs" ino=7717 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.259482][ T29] audit: type=1400 audit(1790636888.581:672): avc: denied { connect } for pid=4364 comm="syz.5.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.473773][ T4411] FAULT_INJECTION: forcing a failure. [ 60.473773][ T4411] name failslab, interval 1, probability 0, space 0, times 0 [ 60.473807][ T4411] CPU: 1 UID: 0 PID: 4411 Comm: syz.4.228 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.473833][ T4411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.473885][ T4411] Call Trace: [ 60.473890][ T4411] [ 60.473898][ T4411] __dump_stack+0x1d/0x30 [ 60.473927][ T4411] dump_stack_lvl+0x95/0xd0 [ 60.473947][ T4411] dump_stack+0x15/0x1b [ 60.473966][ T4411] should_fail_ex+0x262/0x280 [ 60.474008][ T4411] should_failslab+0x8c/0xb0 [ 60.474043][ T4411] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 60.474085][ T4411] ? __request_module+0x1c4/0x3c0 [ 60.474111][ T4411] ? __request_module+0x1df/0x3c0 [ 60.474137][ T4411] ? __request_module+0x1df/0x3c0 [ 60.474164][ T4411] ? __kmalloc_cache_noprof+0x19b/0x400 [ 60.474224][ T4411] kstrdup+0x3e/0xd0 [ 60.474326][ T4411] __request_module+0x1df/0x3c0 [ 60.474345][ T4411] ? string+0x200/0x220 [ 60.474381][ T4411] ? crypto_alg_lookup+0x310/0x360 [ 60.474463][ T4411] crypto_alg_mod_lookup+0xa1/0x490 [ 60.474501][ T4411] crypto_alloc_tfm_node+0x91/0x280 [ 60.474533][ T4411] crypto_alloc_aead+0x2d/0x40 [ 60.474563][ T4411] esp6_init_state+0x3ec/0xa00 [ 60.474654][ T4411] ? should_failslab+0x8c/0xb0 [ 60.474685][ T4411] __xfrm_init_state+0x6b9/0xb40 [ 60.474710][ T4411] xfrm_init_state+0x1e/0x80 [ 60.474743][ T4411] pfkey_add+0xfc5/0x12b0 [ 60.474929][ T4411] pfkey_sendmsg+0x839/0x970 [ 60.474957][ T4411] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 60.474979][ T4411] ____sys_sendmsg+0x532/0x580 [ 60.475012][ T4411] ___sys_sendmsg+0x195/0x1e0 [ 60.475074][ T4411] __x64_sys_sendmsg+0xd4/0x160 [ 60.475101][ T4411] x64_sys_call+0x22ab/0x2550 [ 60.475172][ T4411] do_syscall_64+0x112/0x360 [ 60.475258][ T4411] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 60.475292][ T4411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.475322][ T4411] RIP: 0033:0x7f527f19e159 [ 60.475343][ T4411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.475449][ T4411] RSP: 002b:00007f527dbf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.475556][ T4411] RAX: ffffffffffffffda RBX: 00007f527f425fa0 RCX: 00007f527f19e159 [ 60.475576][ T4411] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 60.475643][ T4411] RBP: 00007f527f23506b R08: 0000000000000000 R09: 0000000000000000 [ 60.475656][ T4411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.475669][ T4411] R13: 00007f527f426038 R14: 00007f527f425fa0 R15: 00007ffdfa9e5168 [ 60.475693][ T4411] [ 60.552024][ T4420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 60.732715][ T4424] device-mapper: dirty region log: invalid region size 1024 [ 60.733038][ T4424] device-mapper: table: 252:0: mirror: Error creating mirror dirty log (-EINVAL) [ 60.733142][ T4424] device-mapper: ioctl: error adding target to table [ 60.808108][ T4432] cgroup: Need name or subsystem set [ 60.985720][ T4443] set_capacity_and_notify: 6 callbacks suppressed [ 60.985741][ T4443] loop0: detected capacity change from 0 to 512 [ 61.027348][ T4443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.027517][ T4443] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.335811][ T4494] 8021q: VLANs not supported on gre0 [ 61.367478][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.551278][ T4501] loop0: detected capacity change from 0 to 512 [ 61.551745][ T4501] EXT4-fs: Ignoring removed nobh option [ 61.586492][ T4501] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #3: comm syz.0.242: corrupted inode contents [ 61.586517][ T4501] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.586643][ T4501] EXT4-fs (loop0): Remounting filesystem read-only [ 61.589371][ T4501] EXT4-fs (loop0): 1 truncate cleaned up [ 61.597906][ T4501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.598176][ T4501] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.602766][ T4501] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.791670][ T4552] FAULT_INJECTION: forcing a failure. [ 61.791670][ T4552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.791707][ T4552] CPU: 0 UID: 0 PID: 4552 Comm: syz.4.252 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.791739][ T4552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.791835][ T4552] Call Trace: [ 61.791843][ T4552] [ 61.791859][ T4552] __dump_stack+0x1d/0x30 [ 61.791892][ T4552] dump_stack_lvl+0x95/0xd0 [ 61.791922][ T4552] dump_stack+0x15/0x1b [ 61.791949][ T4552] should_fail_ex+0x262/0x280 [ 61.791999][ T4552] should_fail+0xb/0x20 [ 61.792030][ T4552] should_fail_usercopy+0x1a/0x20 [ 61.792074][ T4552] _copy_from_iter+0xcc/0xe70 [ 61.792150][ T4552] ? kmem_cache_alloc_noprof+0x7c/0x3f0 [ 61.792189][ T4552] ? bio_alloc_bioset+0x2a5/0x600 [ 61.792223][ T4552] ? bio_associate_blkg+0x3b/0x2c0 [ 61.792390][ T4552] copy_page_from_iter+0x15d/0x1f0 [ 61.792426][ T4552] blk_rq_map_user_iov+0xaad/0xfa0 [ 61.792459][ T4552] ? import_iovec+0x60/0x80 [ 61.792551][ T4552] blk_rq_map_user_io+0x22d/0x280 [ 61.792587][ T4552] sg_common_write+0xaef/0xc10 [ 61.792638][ T4552] sg_new_write+0x6f7/0x7d0 [ 61.792688][ T4552] ? do_vfs_ioctl+0x848/0xe50 [ 61.792812][ T4552] sg_ioctl+0xbec/0x1330 [ 61.792852][ T4552] ? __pfx_sg_ioctl+0x10/0x10 [ 61.792880][ T4552] __se_sys_ioctl+0xce/0x140 [ 61.792969][ T4552] __x64_sys_ioctl+0x43/0x50 [ 61.793040][ T4552] x64_sys_call+0x239d/0x2550 [ 61.793105][ T4552] do_syscall_64+0x112/0x360 [ 61.793138][ T4552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.793163][ T4552] RIP: 0033:0x7f527f19e159 [ 61.793256][ T4552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.793281][ T4552] RSP: 002b:00007f527dbf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.793307][ T4552] RAX: ffffffffffffffda RBX: 00007f527f425fa0 RCX: 00007f527f19e159 [ 61.793397][ T4552] RDX: 00002000000004c0 RSI: 0000000000002285 RDI: 0000000000000003 [ 61.793414][ T4552] RBP: 00007f527dbf7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.793428][ T4552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.793441][ T4552] R13: 00007f527f426038 R14: 00007f527f425fa0 R15: 00007ffdfa9e5168 [ 61.793468][ T4552] [ 61.832200][ T4547] loop2: detected capacity change from 0 to 512 [ 61.861330][ T4547] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.250: bg 0: block 385: padding at end of block bitmap is not set [ 61.861687][ T4547] loop2: lost filesystem error report for type 5 error -117 [ 61.866070][ T4547] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 61.866127][ T4547] loop2: lost filesystem error report for type 5 error -117 [ 61.871975][ T4547] EXT4-fs (loop2): 2 truncates cleaned up [ 61.880701][ T4547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.115871][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.137427][ T4565] loop3: detected capacity change from 0 to 128 [ 62.151801][ T4565] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 62.194698][ T4565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.194812][ T4565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.198825][ T4570] loop0: detected capacity change from 0 to 1024 [ 62.199738][ T4570] EXT4-fs: Ignoring removed bh option [ 62.225452][ T4570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 62.364542][ T4593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.256'. [ 62.364567][ T4593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.256'. [ 62.364585][ T4593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.256'. [ 62.469244][ T4591] Cannot find set identified by id 0 to match [ 62.711291][ T4611] netlink: 'syz.4.266': attribute type 32 has an invalid length. [ 62.794227][ T4659] random: crng reseeded on system resumption [ 62.861305][ T4659] Restarting kernel threads ... [ 62.861519][ T4659] Done restarting kernel threads. [ 62.927988][ T11] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.928924][ T11] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 63.102911][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 63.208975][ T4825] xt_hashlimit: size too large, truncated to 1048576 [ 63.310946][ T4817] mmap: syz.2.269 (4817) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.345716][ T4830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'. [ 63.369298][ T4832] FAULT_INJECTION: forcing a failure. [ 63.369298][ T4832] name failslab, interval 1, probability 0, space 0, times 0 [ 63.369402][ T4832] CPU: 0 UID: 0 PID: 4832 Comm: syz.2.275 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.369442][ T4832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.369458][ T4832] Call Trace: [ 63.369465][ T4832] [ 63.369474][ T4832] __dump_stack+0x1d/0x30 [ 63.369505][ T4832] dump_stack_lvl+0x95/0xd0 [ 63.369574][ T4832] dump_stack+0x15/0x1b [ 63.369653][ T4832] should_fail_ex+0x262/0x280 [ 63.369685][ T4832] ? dst_alloc+0xbd/0x100 [ 63.369712][ T4832] should_failslab+0x8c/0xb0 [ 63.369756][ T4832] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 63.369849][ T4832] ? dst_alloc+0xbd/0x100 [ 63.369875][ T4832] dst_alloc+0xbd/0x100 [ 63.369922][ T4832] ip_route_output_key_hash_rcu+0xed9/0x1320 [ 63.369961][ T4832] ip_route_output_flow+0x65/0x110 [ 63.370008][ T4832] udp_sendmsg+0x12ce/0x14e0 [ 63.370128][ T4832] ? __rcu_read_unlock+0x4e/0x70 [ 63.370161][ T4832] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 63.370341][ T4832] ? __pfx_udp_sendmsg+0x10/0x10 [ 63.370444][ T4832] ? __pfx_inet_sendmsg+0x10/0x10 [ 63.370488][ T4832] inet_sendmsg+0xac/0xd0 [ 63.370525][ T4832] __sys_sendto+0x3be/0x470 [ 63.370616][ T4832] __x64_sys_sendto+0x76/0x90 [ 63.370642][ T4832] x64_sys_call+0x200c/0x2550 [ 63.370675][ T4832] do_syscall_64+0x112/0x360 [ 63.370701][ T4832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.370779][ T4832] RIP: 0033:0x7fb442c9e159 [ 63.370796][ T4832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.370813][ T4832] RSP: 002b:00007fb4416f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 63.370833][ T4832] RAX: ffffffffffffffda RBX: 00007fb442f25fa0 RCX: 00007fb442c9e159 [ 63.370870][ T4832] RDX: 0000000000000004 RSI: 0000200000000200 RDI: 0000000000000006 [ 63.370888][ T4832] RBP: 00007fb4416f7090 R08: 0000200000000300 R09: 0000000000000010 [ 63.370939][ T4832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.370956][ T4832] R13: 00007fb442f26038 R14: 00007fb442f25fa0 R15: 00007fff99a70a68 [ 63.370983][ T4832] [ 63.740265][ T4847] FAULT_INJECTION: forcing a failure. [ 63.740265][ T4847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.740335][ T4847] CPU: 0 UID: 0 PID: 4847 Comm: syz.0.280 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.740365][ T4847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.740377][ T4847] Call Trace: [ 63.740383][ T4847] [ 63.740391][ T4847] __dump_stack+0x1d/0x30 [ 63.740443][ T4847] dump_stack_lvl+0x95/0xd0 [ 63.740472][ T4847] dump_stack+0x15/0x1b [ 63.740499][ T4847] should_fail_ex+0x262/0x280 [ 63.740558][ T4847] should_fail+0xb/0x20 [ 63.740652][ T4847] should_fail_usercopy+0x1a/0x20 [ 63.740690][ T4847] _copy_from_user+0x1c/0xb0 [ 63.740720][ T4847] __sys_bind+0x106/0x290 [ 63.740757][ T4847] __x64_sys_bind+0x3f/0x50 [ 63.740853][ T4847] x64_sys_call+0x1ac7/0x2550 [ 63.740888][ T4847] do_syscall_64+0x112/0x360 [ 63.740922][ T4847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.740944][ T4847] RIP: 0033:0x7f42e56ce159 [ 63.741012][ T4847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.741037][ T4847] RSP: 002b:00007f42e4106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 63.741063][ T4847] RAX: ffffffffffffffda RBX: 00007f42e5956090 RCX: 00007f42e56ce159 [ 63.741081][ T4847] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000007 [ 63.741098][ T4847] RBP: 00007f42e4106090 R08: 0000000000000000 R09: 0000000000000000 [ 63.741114][ T4847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.741152][ T4847] R13: 00007f42e5956128 R14: 00007f42e5956090 R15: 00007ffc84b44d78 [ 63.741174][ T4847] [ 63.757308][ T4847] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.280'. [ 63.963375][ T4853] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.281'. [ 64.062349][ T4864] loop3: detected capacity change from 0 to 512 [ 64.066543][ T4864] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.283: Invalid inode bitmap blk 4 in block_group 0 [ 64.066582][ T4864] loop3: lost filesystem error report for type 5 error -117 [ 64.067090][ T4864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.076020][ T4864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'. [ 64.137474][ T4864] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.283'. [ 64.282946][ T4863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.283271][ T4863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.290259][ T4863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.290307][ T4863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.713066][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.036593][ T4897] loop0: detected capacity change from 0 to 128 [ 65.127836][ T4907] __nla_validate_parse: 1 callbacks suppressed [ 65.127855][ T4907] netlink: 72 bytes leftover after parsing attributes in process `syz.2.300'. [ 65.131507][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 65.131583][ T29] audit: type=1400 audit(1790636893.077:712): avc: denied { shutdown } for pid=4903 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.170031][ T4907] netlink: 72 bytes leftover after parsing attributes in process `syz.2.300'. [ 65.196676][ T4902] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 65.196697][ T4902] audit: out of memory in audit_log_start [ 65.230226][ T29] audit: type=1400 audit(1790636893.169:713): avc: denied { write } for pid=4883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.272136][ T4919] FAULT_INJECTION: forcing a failure. [ 65.272136][ T4919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.272163][ T4919] CPU: 1 UID: 0 PID: 4919 Comm: syz.2.303 Not tainted syzkaller #0 PREEMPT(lazy) [ 65.272266][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.272282][ T4919] Call Trace: [ 65.272290][ T4919] [ 65.272300][ T4919] __dump_stack+0x1d/0x30 [ 65.272367][ T4919] dump_stack_lvl+0x95/0xd0 [ 65.272395][ T4919] dump_stack+0x15/0x1b [ 65.272414][ T4919] should_fail_ex+0x262/0x280 [ 65.272529][ T4919] should_fail+0xb/0x20 [ 65.272561][ T4919] should_fail_usercopy+0x1a/0x20 [ 65.272596][ T4919] _copy_to_user+0x20/0xa0 [ 65.272628][ T4919] simple_read_from_buffer+0xb5/0x130 [ 65.272661][ T4919] proc_fail_nth_read+0x10e/0x150 [ 65.272688][ T4919] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.272711][ T4919] vfs_read+0x18e/0x7c0 [ 65.272779][ T4919] ? __get_user_4+0x14/0x30 [ 65.272836][ T4919] ? __rcu_read_unlock+0x4e/0x70 [ 65.272873][ T4919] ? __fget_files+0x184/0x1c0 [ 65.272901][ T4919] ? mutex_lock+0x57/0x90 [ 65.272944][ T4919] ksys_read+0xdc/0x1a0 [ 65.273067][ T4919] __x64_sys_read+0x40/0x50 [ 65.273107][ T4919] x64_sys_call+0x2135/0x2550 [ 65.273142][ T4919] do_syscall_64+0x112/0x360 [ 65.273251][ T4919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.273285][ T4919] RIP: 0033:0x7fb442c5e98e [ 65.273307][ T4919] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 65.273333][ T4919] RSP: 002b:00007fb4416f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.273362][ T4919] RAX: ffffffffffffffda RBX: 00007fb4416f76c0 RCX: 00007fb442c5e98e [ 65.273382][ T4919] RDX: 000000000000000f RSI: 00007fb4416f70a0 RDI: 0000000000000004 [ 65.273460][ T4919] RBP: 00007fb4416f7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.273479][ T4919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.273496][ T4919] R13: 00007fb442f26038 R14: 00007fb442f25fa0 R15: 00007fff99a70a68 [ 65.273523][ T4919] [ 65.331634][ T29] audit: type=1400 audit(1790636893.261:714): avc: denied { setopt } for pid=4920 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.434846][ T4913] netlink: 3084 bytes leftover after parsing attributes in process `syz.0.301'. [ 65.434923][ T4913] netlink: 'syz.0.301': attribute type 1 has an invalid length. [ 65.476497][ T4913] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.301'. [ 65.566571][ T29] audit: type=1400 audit(1790636893.483:715): avc: denied { write } for pid=4925 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.793484][ T2986] ================================================================== [ 65.793524][ T2986] BUG: KCSAN: data-race in d_delete / lookup_fast [ 65.793559][ T2986] [ 65.793564][ T2986] read-write to 0xffff88811b499840 of 4 bytes by task 4845 on cpu 1: [ 65.793579][ T2986] d_delete+0x15a/0x180 [ 65.793611][ T2986] d_delete_notify+0x32/0x100 [ 65.793632][ T2986] vfs_unlink+0x287/0x490 [ 65.793652][ T2986] filename_unlinkat+0x1dc/0x410 [ 65.793673][ T2986] __se_sys_unlink+0x2b/0xe0 [ 65.793702][ T2986] __x64_sys_unlink+0x1f/0x30 [ 65.793724][ T2986] x64_sys_call+0x18ee/0x2550 [ 65.793755][ T2986] do_syscall_64+0x112/0x360 [ 65.793780][ T2986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.793799][ T2986] [ 65.793806][ T2986] read to 0xffff88811b499840 of 4 bytes by task 2986 on cpu 0: [ 65.793825][ T2986] lookup_fast+0xf1/0x320 [ 65.793855][ T2986] path_lookupat+0x120/0x4c0 [ 65.793879][ T2986] filename_lookup+0x18f/0x390 [ 65.793899][ T2986] do_readlinkat+0x74/0x2f0 [ 65.793921][ T2986] __x64_sys_readlink+0x47/0x60 [ 65.793945][ T2986] x64_sys_call+0x1d41/0x2550 [ 65.793975][ T2986] do_syscall_64+0x112/0x360 [ 65.793998][ T2986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.794023][ T2986] [ 65.794028][ T2986] value changed: 0x00300180 -> 0x00004080 [ 65.794041][ T2986] [ 65.794045][ T2986] Reported by Kernel Concurrency Sanitizer on: [ 65.794058][ T2986] CPU: 0 UID: 0 PID: 2986 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 65.794081][ T2986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.794093][ T2986] ================================================================== [ 65.852425][ T29] audit: type=1400 audit(1790636893.741:716): avc: denied { create } for pid=4946 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 65.857074][ T29] audit: type=1400 audit(1790636893.741:717): avc: denied { bind } for pid=4947 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.937056][ T29] audit: type=1400 audit(1790636893.825:718): avc: denied { connect } for pid=4946 comm="syz.4.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.850738][ T29] audit: type=1400 audit(1790636895.588:719): avc: denied { write } for pid=4952 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1