last executing test programs: 28.835826477s ago: executing program 1 (id=9): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xc, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r3) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000140)={0x0, 0x1, {0xd, 0x23, 0x14, 0x5, 0xb, 0xffff, 0x5, 0x101}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./sys\x00', &(0x7f0000002000)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000003000)='./sys/module/acpi/parameters/debug_level\x00', 0x2, 0x0) read(r4, &(0x7f0000000040)=""/8, 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000000c0)={{0x33, @local, 0x4e21, 0x3, 'sh\x00', 0x1b, 0x80000001, 0x40}, {@broadcast, 0x4e21, 0x1a004, 0x4, 0x2, 0x8}}, 0x44) r5 = dup3(r1, r0, 0x80000) read(r5, &(0x7f0000000200)=""/223, 0xfffffe56) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r6, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x8001, 0x5, 0x9, 0xffffffff, 0x15, "2ea98072973aefba56a9f8e8f77f20fbf5974a"}) 28.28698437s ago: executing program 1 (id=17): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040840) getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r1 = syz_open_procfs(r0, 0x0) preadv(r1, &(0x7f0000000080), 0x0, 0x5fae, 0x5) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000021c0), 0xc1, 0x101000) syz_usb_disconnect(r2) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000140)=r1, 0x4) syz_mount_image$ext4(&(0x7f0000000f80)='ext3\x00', &(0x7f0000000000)='./file2\x00', 0x1898c0f, &(0x7f0000000040)={[{@init_itable_val={'init_itable', 0x3d, 0x8000}}, {@noacl}]}, 0x0, 0x51e, &(0x7f0000000fc0)="$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") 28.117385595s ago: executing program 0 (id=24): perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd900, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0xffff888237d05000, 0x1}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00, 0xffffffff}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000001140)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) link(0x0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd24, 0xffffffff, {0x2, 0x20, 0x14, 0xa0, 0xff, 0x0, 0xff, 0x6, 0x200}, [@RTA_SRC={0x8, 0x2, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0xea5bc50b619917ee) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0), 0x1) r2 = openat$incfs(0xffffffffffffff9c, 0x0, 0x10000, 0x100) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000100)=0xfffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000140), 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000002c0)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', r7, 0x29, 0x2, 0x81, 0xcf57, 0xff42, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0x300}, 0x8000, 0x8000, 0x8, 0x1}}) 27.961710038s ago: executing program 0 (id=28): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x4000840) 27.932499669s ago: executing program 0 (id=29): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000"], 0x18) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wg0\x00'}) sendmsg$nl_generic(r0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0xbd, 0x7, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000001c0)='debugfs\x00', 0x240000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0x3) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40) mkdir(&(0x7f0000000080)='./proc\x00', 0x1ff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20000004) 27.669325225s ago: executing program 0 (id=32): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x800) ioctl$SG_BLKTRACESTOP(r1, 0x1275, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000680)='./file0\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 27.501428659s ago: executing program 1 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x4000840) 27.415293531s ago: executing program 1 (id=35): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x80800c, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRESHEX], 0x0, 0x254, &(0x7f0000000480)="$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") ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4, 0xa18, &(0x7f0000002000)="$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") 27.332811743s ago: executing program 1 (id=37): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xfd9, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000000000000000000500030000000000000100008408000000060000000100000004000000005f000000002e"], &(0x7f00000005c0)=""/13, 0x44, 0xd, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000001705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350604000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c0acd5db6538824c600d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cf6e3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000000000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a511007781be0c7cac07fc508a585f4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_open_dev$sg(0x0, 0x6f5e, 0x2) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200648c5}, 0x8000002) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800006}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 26.729739018s ago: executing program 0 (id=44): prctl$PR_GET_FP_MODE(0x2e) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) chdir(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) prctl$PR_GET_FP_MODE(0x2e) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xd6}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x20044080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, 0x0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES16=r2, @ANYBLOB="00042dbd7000fbdbdf2531000000080001001e00000008005200", @ANYRES32=r3, @ANYBLOB="d14a464fff191b620b73eecc6fee53f80bc761839891212cd07e295654f4f452bba5f5a496ab06000000eab679ab37a441e2b80000009bc8d1cb76d609ed8eee359ea367dd2afd3f8e6adf4dcd3bf9c5e6616c3b21933b508435ead88a3d5965c646e35b33dc001000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x200401) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x200401) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x27dfdbfa, {0x0, 0x0, 0x0, r6, 0x805b, 0x21000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008800}, 0x8c0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @empty}, {0x1, @local}, 0x6, {0x2, 0xe20, @rand_addr=0x64010101}}) 26.592206471s ago: executing program 0 (id=47): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000ff160800154000"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) 26.582141001s ago: executing program 32 (id=47): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000ff160800154000"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) 25.289793043s ago: executing program 1 (id=65): r0 = socket(0x8, 0x2, 0x0) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sendfile(r4, r4, 0x0, 0x24002de8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000300)={r3, 0x0, 0x81}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={r3, 0x9a35, 0x1ff}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e00010000be9cc680000000070000001fe685bd1da5a169492151353e27f09eaa17d15e7ab655e2f56995a0d9cc4f998bf49dd88e37dabd4ed35115ff2cc2b04245701a2688b7167444967af33f548cf3ae07feab6bac57268b6535c0ced570a400000000000000", @ANYRES32=0x0, @ANYBLOB="000000000a0005000000000000000000"], 0x28}}, 0x0) 25.283731893s ago: executing program 33 (id=65): r0 = socket(0x8, 0x2, 0x0) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sendfile(r4, r4, 0x0, 0x24002de8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000300)={r3, 0x0, 0x81}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={r3, 0x9a35, 0x1ff}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e00010000be9cc680000000070000001fe685bd1da5a169492151353e27f09eaa17d15e7ab655e2f56995a0d9cc4f998bf49dd88e37dabd4ed35115ff2cc2b04245701a2688b7167444967af33f548cf3ae07feab6bac57268b6535c0ced570a400000000000000", @ANYRES32=0x0, @ANYBLOB="000000000a0005000000000000000000"], 0x28}}, 0x0) 1.65755415s ago: executing program 6 (id=422): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000200), 0x2}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r0, r0, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) listen(0xffffffffffffffff, 0xfffffffd) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r6, 0x0, 0x6, 0x0) splice(r5, 0x0, r3, 0x0, 0x6, 0x8) vmsplice(r6, &(0x7f0000000280)=[{&(0x7f0000000180)="15", 0x1}], 0x1, 0x0) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)=')', 0x1}], 0x1, 0x6) close_range(r3, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r2) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x2dda, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendfile(r2, r1, 0x0, 0xf03a0005) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r0, r0, 0x2f, 0x0, 0x0, @void, @value=r0}, 0x20) 1.448967315s ago: executing program 6 (id=423): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000010c0)=""/4120, 0x1018}], 0x1, 0x800, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, r2, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map, 0x11, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r3 = syz_open_pts(r0, 0x80) r4 = dup3(r3, r0, 0x80000) read(r4, &(0x7f0000000200)=""/223, 0xfffffe56) 1.350392687s ago: executing program 2 (id=424): socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x1800000000000000}, 0x102cc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfe088b55a42f0b64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7a, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000240)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$unix(0x1, 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x1, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0xfffb, 0x7f, @loopback={0xfe80000000000000}}}}, 0x48) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xc}}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) 1.281585179s ago: executing program 2 (id=425): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x62}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000010c0)=""/4120, 0x1018}], 0x1, 0x800, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x8000000000000002}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, r2, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map, 0x11, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_emit_ethernet(0xd2, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x1, 0x1, 0xc4, 0x68, 0x0, 0x5, 0x11, 0x0, @private=0xa010102, @local, {[@noop, @timestamp={0x44, 0x10, 0xb, 0x0, 0x4, [0x1, 0x5, 0x0]}]}}, {0x4e26, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffe, "20d8d4d6b2f00a9795ccf219ab049f0a5e4d08280f52495896d0b0f076e72bdc", "b4147fed1a085acea00957b0c8c943a409e47311ecbf8fbca2c8d804e89b2e7a7da9a2d4746248b36aa925d5f0e2712c", "e695c8fe83d4c43e88cc5df5b0d466a85b82447c6a7880efd800", {"97c437cd50e41b2c6f7260410fa7cbfb"}}}}}}}, 0x0) gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r3 = syz_open_pts(r0, 0x80) r4 = dup3(r3, r0, 0x80000) read(r4, &(0x7f0000000200)=""/223, 0xfffffe56) 1.186787881s ago: executing program 5 (id=427): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000006c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000280)=""/8, 0x8, 0x0, 0x0, 0x1, 0x10}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 1.120161663s ago: executing program 6 (id=429): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@norecovery}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_continue}]}, 0xfa, 0x4a5, &(0x7f0000000b80)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) mkdir(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xc00000, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000050) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000280)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000002480)=0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 925.285898ms ago: executing program 5 (id=431): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xfd9, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], &(0x7f00000005c0)=""/13, 0x44, 0xd, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_open_dev$sg(0x0, 0x6f5e, 0x2) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200648c5}, 0x8000002) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800006}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 753.703292ms ago: executing program 5 (id=433): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000200), 0x2}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r0, r0, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) listen(0xffffffffffffffff, 0xfffffffd) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r6, 0x0, 0x6, 0x0) splice(r5, 0x0, r3, 0x0, 0x6, 0x8) vmsplice(r6, &(0x7f0000000280)=[{&(0x7f0000000180)="15", 0x1}], 0x1, 0x0) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)=')', 0x1}], 0x1, 0x6) close_range(r3, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r2) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x2dda, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendfile(r2, r1, 0x0, 0xf03a0005) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r0, r0, 0x2f, 0x0, 0x0, @void, @value=r0}, 0x20) 745.853292ms ago: executing program 6 (id=434): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000400)={[{@quota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@errors_remount}, {@sysvgroups}]}, 0x3, 0x79b, &(0x7f0000001200)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0xd, 0x4, 0x6, 0x7, 0x0, 0x24499204}) 697.443273ms ago: executing program 2 (id=436): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, 0x0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES16=r2, @ANYBLOB="00042dbd7000fbdbdf2531000000080001001e00000008005200", @ANYRES32, @ANYBLOB="d14a464fff191b620b73eecc6fee53f80bc761839891212cd07e295654f4f452bba5f5a496ab06000000eab679ab37a441e2b80000009bc8d1cb76d609ed8eee359ea367dd2afd3f8e6adf4dcd3bf9c5e6616c3b21933b508435ead88a3d5965c646e35b33dc001000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x200401) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x200401) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x27dfdbfa, {0x0, 0x0, 0x0, r5, 0x805b, 0x21000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008800}, 0x8c0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @empty}, {0x1, @local}, 0x6, {0x2, 0xe20, @rand_addr=0x64010101}}) 617.716635ms ago: executing program 3 (id=437): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200648c5}, 0x8000002) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800006}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="8500200000000000181000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 605.990225ms ago: executing program 3 (id=439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 564.155346ms ago: executing program 3 (id=440): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) r1 = io_uring_setup(0x588f, &(0x7f00000000c0)={0x0, 0xce13, 0x3018, 0x2, 0x31c}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) io_uring_enter(r1, 0x0, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd28, 0x25cfdc00, {0x60, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x6}, {0x10, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x14d, 0x0, &(0x7f0000000880)="b461802305624431ed33730100010446b20aed0200000000010000d5fe00c6fc6ef8eef9757a601bee93639000195bbd000000003632b69f0eb2062818f298ed60abbc5f6322cbfac4973cf2be3f656d8f630632395fd3377dc1ee6daeeae21d79df2cb07600dbf28eda3f94df97f6296b9bc0a0aa770b5588c5b3ca96e7e20df71b37ba8bb62cd98e8a769e328b576d95a704d70ed5c912892bf262449c11e04358fe042dd0a0b442c1b77214b25c8b3af9b1221037c7c73ef3198a305c307d04359d36d82eb73831e60655d8d9cf32944ba083d99b79ebe813c1d6a87b7a23206895d3d3b4e2670f11302c5fffd356d01235199011ebcdd2d7acdb8f6f2ad2da0ef1ffac4a687847680c3d1d8b78dc3cb1bd4c31f235bb382b04f8fd18697d03baa36c0a05a3f7ac22760485efa4044351a5ad0a4b720b123025a5d0d566a6e5a65e24f9211ed34007ccf27d", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) (async) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2000) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="00000076786c616e00000e00"/21], 0x50}}, 0x4000084) 533.888657ms ago: executing program 2 (id=442): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x48, 0x135, 0x6, 0x5, 0x9, 0xd582343, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1c3040, 0x0) r3 = open$dir(0x0, 0x0, 0xc) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r5 = open$dir(0x0, 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000140)='cpu&\'\'\t|\t') fcntl$notify(r2, 0x402, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="7800000010000304030300"/20, @ANYRES32=0x0, @ANYBLOB="0000000001000000500012800b000100697036746e6c0000400002800400130014000300ff020000000000000000000000000001080014007f00000008000100", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000bb08000a00", @ANYRES32], 0x78}}, 0x8000) 477.716278ms ago: executing program 4 (id=443): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1}, 0x9}, {{&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f00000001c0), 0x10, &(0x7f00000004c0)=""/121, 0x79}, 0x65}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=""/112, 0x70}, 0x7f}], 0x3, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_retopts={{0x10}}], 0x10}, 0x24000844) 477.333398ms ago: executing program 6 (id=444): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7, 0x20, 0x7e2d, 0x5, {{0x11, 0x4, 0x2, 0x6, 0x44, 0x65, 0x0, 0xe, 0x4, 0x0, @broadcast, @broadcast, {[@ra={0x94, 0x4}, @rr={0x7, 0xf, 0xd7, [@multicast1, @loopback, @empty]}, @lsrr={0x83, 0xf, 0xe1, [@rand_addr=0x64010100, @multicast2, @broadcast]}, @rr={0x7, 0xb, 0xc1, [@remote, @broadcast]}]}}}}}) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x0, 0xb005}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'macvtap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f020047540f68a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x300, r2}, 0x14) 476.838718ms ago: executing program 3 (id=445): prctl$PR_GET_FP_MODE(0x2e) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) chdir(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) prctl$PR_GET_FP_MODE(0x2e) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, 0x0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES16=r3, @ANYBLOB="00042dbd7000fbdbdf2531000000080001001e00000008005200", @ANYRES32, @ANYBLOB="d14a464fff191b620b73eecc6fee53f80bc761839891212cd07e295654f4f452bba5f5a496ab06000000eab679ab37a441e2b80000009bc8d1cb76d609ed8eee359ea367dd2afd3f8e6adf4dcd3bf9c5e6616c3b21933b508435ead88a3d5965c646e35b33dc001000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x200401) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x200401) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x27dfdbfa, {0x0, 0x0, 0x0, r6, 0x805b, 0x21000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008800}, 0x8c0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @empty}, {0x1, @local}, 0x6, {0x2, 0xe20, @rand_addr=0x64010101}}) 449.923349ms ago: executing program 3 (id=446): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x88, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000028120700080004008100000008001b00"], 0x30}}, 0x4004090) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000004c0)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff651d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b22b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba34bed8e32e4122bb46aa57a75dab0288098e42f886f09bdf63537db28a454b02a4204a7e7dac3c30a6d4b5c814916b02", @ANYRES8], 0x1, 0x25a, &(0x7f0000000240)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x7, 0x7ffc0001}]}) mremap(&(0x7f0000f2a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r4, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801") sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000060a010400000000000000000a0000010900010073797a31000000003000048020000180080001006c6f67001400028008000540ffffff0807000240402f00000c00018007000100727400000900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 448.467619ms ago: executing program 6 (id=447): r0 = socket$inet6(0x10, 0x800, 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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") getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000a00)="c7", 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x408, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x2a0, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) sendmsg$nl_xfrm(r2, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)=@getsa={0x220, 0x12, 0x400, 0x70bd28, 0x25dfdbfd, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x2, 0x32}, [@replay_esn_val={0x3c, 0x17, {0x8, 0x70bd25, 0x70bd25, 0x70bd2b, 0x70bd28, 0xde9a, [0x7, 0x200, 0x1, 0x5, 0x1, 0x13, 0x3, 0x2]}}, @etimer_thresh={0x8, 0xc, 0x42}, @proto={0x5, 0x19, 0xff}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@local, 0x0, 0xa}}, @tmpl={0x84, 0x5, [{{@in=@loopback, 0x4d2, 0x6c}, 0x2, @in=@private=0xa010101, 0x34ff, 0x2, 0x1, 0x7, 0x0, 0x6}, {{@in=@remote, 0x4d6, 0x32}, 0xa, @in6=@mcast2, 0x3504, 0x3, 0x1, 0x7, 0x4, 0x0, 0x3}]}, @mark={0xc, 0x15, {0x35075d, 0x3}}, @lifetime_val={0x24, 0x9, {0x6, 0x101, 0xeedc, 0x7fffffffffffffff}}, @algo_auth={0xa7, 0x1, {{'sha3-384-generic\x00'}, 0x2f8, "7617bed44a00b7f7d40eb1461d41c38a068e0b5866c8bc60aae791b55414ff4c7dc8b11cc3cdecc34d7abaa80b440bb57e07240456c4aaef062e45a76c194995f584903ebd1338c547c7983383505b0415e2216da3f956a574c2774d942b06"}}, @lifetime_val={0x24, 0x9, {0x4, 0x10000, 0x0, 0xe}}]}, 0x220}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x810, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op={0x0, 0xff2993d31e9c3cfb}], 0x1) setsockopt$inet_int(r6, 0x0, 0x16, &(0x7f0000000180)=0x7ffffffe, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) 423.04103ms ago: executing program 5 (id=448): socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x1800000000000000}, 0x102cc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfe088b55a42f0b64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7a, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000240)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$unix(0x1, 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x1, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0xfffb, 0x7f, @loopback={0xfe80000000000000}}}}, 0x48) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xc}}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) 403.217741ms ago: executing program 5 (id=449): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200648c5}, 0x8000002) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800006}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850020000000000018100000", @ANYRES32, @ANYBLOB="1700000000000000950000000000000045"], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) 364.243111ms ago: executing program 4 (id=450): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1, 0x5}}]}}]}, 0x44}}, 0xb54ee99665a95132) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x6c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}]}}]}, 0x6c}}, 0x0) 363.850331ms ago: executing program 2 (id=451): syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0x2, 0xa, 0x101, 0xf8ee1ad9a6872d1c, @empty, @loopback, 0x1, 0x700, 0x8000, 0x3}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=@ipmr_delroute={0xe4, 0x19, 0x20, 0x70bd28, 0x25dfdbfb, {0x80, 0x20, 0x14, 0x3, 0xfe, 0x3, 0x7b0b98c4ca598125, 0x8, 0x2800}, [@RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010102}, @RTA_FLOW={0x8, 0xb, 0x5f}, @RTA_MARK={0x8, 0x10, 0xbd2}, @RTA_METRICS={0x79, 0x8, 0x0, 0x1, "4e552d304e744742fac6818af34f64f02071193453c617c76f1727379f1bfbb990014afbfbfb62a61317a2762239d69a62ec8f1fe7aa87e6a333436ba4a2ae3d560f7eb0d7fe592d292c38ddd08da11171d4b8fbafc7f16a7785981eb9024c94e2d8b10c6743d1421fc048f4c4f10fbd63d95522d2"}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_NH_ID={0x8, 0x1e, 0x10}, @RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4008811}, 0x2000800) 291.161713ms ago: executing program 4 (id=452): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) lsm_list_modules(&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=0x10, 0x0) socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/'], 0x20) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 201.209425ms ago: executing program 5 (id=453): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb00e3bd6efb4400080000000a000f00000aba8000001201", 0x24}, {&(0x7f0000000200)="cc182c338cba61617516", 0xa}], 0x2}, 0x0) syz_open_dev$usbfs(&(0x7f0000000380), 0x2201, 0x402) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff8100000008004500005c0000000000019078ac1414bbac1414bb050190780a010101400903ff006700025e8401017f000001ac1e0001891be2ffdd852376b9d49b6cfc35b447568192ffffffffffffffac1414bb64010102ac141430ac14143d070f25ac1e0001e0000001000000000000"], 0x0) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x3, 0x8, 0x88c, 0x9, 0x1000, 0x0, 0x5}, &(0x7f0000000100)={0xb, 0x6, 0x712e, 0x0, 0x5, 0x4, 0x9, 0x80}, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000007c0), 0xfe, 0x526, &(0x7f0000001100)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xffffffff, 0x10000, 0x8, 0x7, 0xfffffffc}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4804}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0x0, 0xfff3}, {0x9, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041044}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f00000001c0)) ppoll(&(0x7f00000000c0)=[{}, {}], 0x2, 0x0, 0x0, 0x0) 197.345905ms ago: executing program 4 (id=454): socket$tipc(0x1e, 0x5, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/keycreate\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x804000, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r1]) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) write(0xffffffffffffffff, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mmap(0x0, 0x0, 0x2000003, 0x10010, r3, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) read$usbmon(r3, 0x0, 0x28) 111.838407ms ago: executing program 4 (id=455): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000"], 0x18) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400014008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'wg0\x00'}) sendmsg$nl_generic(r0, 0x0, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0xbd, 0x7, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0x3) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40) mkdir(&(0x7f0000000080)='./proc\x00', 0x1ff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20000004) 63.877168ms ago: executing program 2 (id=456): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1a41e, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) write$P9_RWALK(r0, &(0x7f00000002c0)={0x64, 0x6f, 0x1, {0x7, [{0x40, 0x3, 0x7}, {0x10, 0x0, 0x8}, {0x40, 0x4, 0x2}, {0x8, 0x4, 0x2}, {0x40, 0x1, 0x7}, {0x0, 0x1, 0x4}, {0x20, 0x3, 0x1}]}}, 0x64) 12.0408ms ago: executing program 3 (id=457): prctl$PR_GET_FP_MODE(0x2e) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) chdir(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) prctl$PR_GET_FP_MODE(0x2e) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, 0x0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES16, @ANYBLOB="00042dbd7000fbdbdf2531000000080001001e00000008005200", @ANYRES32=r3, @ANYBLOB="d14a464fff191b620b73eecc6fee53f80bc761839891212cd07e295654f4f452bba5f5a496ab06000000eab679ab37a441e2b80000009bc8d1cb76d609ed8eee359ea367dd2afd3f8e6adf4dcd3bf9c5e6616c3b21933b508435ead88a3d5965c646e35b33dc001000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x200401) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x200401) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x1, 0x70bd25, 0x27dfdbfa, {0x0, 0x0, 0x0, r6, 0x805b, 0x21000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008800}, 0x8c0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @empty}, {0x1, @local}, 0x6, {0x2, 0xe20, @rand_addr=0x64010101}}) 0s ago: executing program 4 (id=458): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000200), 0x2}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r0, r0, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) listen(0xffffffffffffffff, 0xfffffffd) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r6, 0x0, 0x6, 0x0) splice(r5, 0x0, r3, 0x0, 0x6, 0x8) vmsplice(r6, &(0x7f0000000280)=[{&(0x7f0000000180)="15", 0x1}], 0x1, 0x0) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)=')', 0x1}], 0x1, 0x6) close_range(r3, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r2) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x2dda, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendfile(r2, r1, 0x0, 0xf03a0005) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r0, r0, 0x2f, 0x0, 0x0, @void, @value=r0}, 0x20) kernel console output (not intermixed with test programs): eatest stack depth: 11224 bytes left Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts. [ 29.038713][ T28] audit: type=1400 audit(1787091958.544:117): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.061879][ T28] audit: type=1400 audit(1787091958.564:118): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.062731][ T3286] cgroup: Unknown subsys name 'net' [ 29.089836][ T28] audit: type=1400 audit(1787091958.594:119): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.213050][ T3286] cgroup: Unknown subsys name 'cpuset' [ 29.219135][ T3286] cgroup: Unknown subsys name 'rlimit' [ 29.329781][ T28] audit: type=1400 audit(1787091958.834:120): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.353435][ T28] audit: type=1400 audit(1787091958.834:121): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.374177][ T28] audit: type=1400 audit(1787091958.834:122): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.390808][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.398442][ T28] audit: type=1400 audit(1787091958.834:123): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.424114][ T28] audit: type=1400 audit(1787091958.914:124): avc: denied { relabelto } for pid=3288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.449790][ T28] audit: type=1400 audit(1787091958.914:125): avc: denied { write } for pid=3288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.476111][ T28] audit: type=1400 audit(1787091958.934:126): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.483013][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.804830][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.812024][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.819358][ T3298] bridge_slave_0: entered allmulticast mode [ 30.825805][ T3298] bridge_slave_0: entered promiscuous mode [ 30.845393][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.852661][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.859819][ T3298] bridge_slave_1: entered allmulticast mode [ 30.866278][ T3298] bridge_slave_1: entered promiscuous mode [ 30.905781][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.913050][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.920162][ T3297] bridge_slave_0: entered allmulticast mode [ 30.926595][ T3297] bridge_slave_0: entered promiscuous mode [ 30.937996][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.959796][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.967037][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.974162][ T3297] bridge_slave_1: entered allmulticast mode [ 30.980575][ T3297] bridge_slave_1: entered promiscuous mode [ 30.992008][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.027584][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.034742][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.042328][ T3305] bridge_slave_0: entered allmulticast mode [ 31.048853][ T3305] bridge_slave_0: entered promiscuous mode [ 31.062502][ T3298] team0: Port device team_slave_0 added [ 31.074587][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.081646][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.088895][ T3305] bridge_slave_1: entered allmulticast mode [ 31.095224][ T3305] bridge_slave_1: entered promiscuous mode [ 31.106224][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.118530][ T3298] team0: Port device team_slave_1 added [ 31.137723][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.155164][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.162256][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.169494][ T3303] bridge_slave_0: entered allmulticast mode [ 31.176150][ T3303] bridge_slave_0: entered promiscuous mode [ 31.183724][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.201170][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.208183][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.234164][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.244951][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.252262][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.259542][ T3303] bridge_slave_1: entered allmulticast mode [ 31.266122][ T3303] bridge_slave_1: entered promiscuous mode [ 31.273288][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.286461][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.293669][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.300787][ T3304] bridge_slave_0: entered allmulticast mode [ 31.307243][ T3304] bridge_slave_0: entered promiscuous mode [ 31.313729][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.320805][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.346800][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.366679][ T3297] team0: Port device team_slave_0 added [ 31.372345][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.379514][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.386659][ T3304] bridge_slave_1: entered allmulticast mode [ 31.393364][ T3304] bridge_slave_1: entered promiscuous mode [ 31.410079][ T3297] team0: Port device team_slave_1 added [ 31.430029][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.440254][ T3305] team0: Port device team_slave_0 added [ 31.451459][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.458485][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.484487][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.496477][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.506490][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.516389][ T3305] team0: Port device team_slave_1 added [ 31.526654][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.533726][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.559688][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.571490][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.600819][ T3298] hsr_slave_0: entered promiscuous mode [ 31.607056][ T3298] hsr_slave_1: entered promiscuous mode [ 31.626283][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.633253][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.659671][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.671406][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.678372][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.704587][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.718477][ T3304] team0: Port device team_slave_0 added [ 31.724790][ T3303] team0: Port device team_slave_0 added [ 31.731896][ T3303] team0: Port device team_slave_1 added [ 31.749475][ T3304] team0: Port device team_slave_1 added [ 31.794992][ T3305] hsr_slave_0: entered promiscuous mode [ 31.800954][ T3305] hsr_slave_1: entered promiscuous mode [ 31.806796][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 31.812521][ T3305] Cannot create hsr debugfs directory [ 31.818342][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.825402][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.851510][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.864759][ T3297] hsr_slave_0: entered promiscuous mode [ 31.870822][ T3297] hsr_slave_1: entered promiscuous mode [ 31.876695][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 31.882435][ T3297] Cannot create hsr debugfs directory [ 31.888077][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.895025][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.920941][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.937270][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.944260][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.970588][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.984488][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.991542][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.018136][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.080917][ T3303] hsr_slave_0: entered promiscuous mode [ 32.086982][ T3303] hsr_slave_1: entered promiscuous mode [ 32.092739][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 32.098455][ T3303] Cannot create hsr debugfs directory [ 32.114224][ T3304] hsr_slave_0: entered promiscuous mode [ 32.120151][ T3304] hsr_slave_1: entered promiscuous mode [ 32.126021][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 32.131724][ T3304] Cannot create hsr debugfs directory [ 32.277278][ T3298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.285543][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.293299][ T3298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.301666][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.317091][ T3298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.325435][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.337857][ T3298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.346459][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.368906][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.377247][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.386141][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.394878][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.402901][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.411387][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.419139][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.428440][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.457823][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.466757][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.478374][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.487236][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.495083][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.503834][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.516221][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.524958][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.550408][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.558777][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.577166][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.585894][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.593717][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.602252][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.617851][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.626567][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.642291][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.651071][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.659278][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.667934][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.675858][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.684375][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.691827][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.700704][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.717291][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.757513][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.765844][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.778588][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.785740][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.807926][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.818161][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.825256][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.838936][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.846138][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.863613][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.872180][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.886394][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.914597][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.935366][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.945368][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.955182][ T1639] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.962230][ T1639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.978306][ T1639] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.985387][ T1639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.999072][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.023594][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.030850][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.043989][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.051150][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.061531][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.080680][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.087862][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.106515][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.113632][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.216120][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.297427][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.355197][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.388126][ T3297] veth0_vlan: entered promiscuous mode [ 33.409491][ T3297] veth1_vlan: entered promiscuous mode [ 33.426245][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.436896][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.477452][ T3297] veth0_macvtap: entered promiscuous mode [ 33.495293][ T3297] veth1_macvtap: entered promiscuous mode [ 33.524408][ T3304] veth0_vlan: entered promiscuous mode [ 33.542058][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.555908][ T3304] veth1_vlan: entered promiscuous mode [ 33.570402][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.608463][ T3298] veth0_vlan: entered promiscuous mode [ 33.618116][ T3303] veth0_vlan: entered promiscuous mode [ 33.628505][ T3298] veth1_vlan: entered promiscuous mode [ 33.635140][ T3305] veth0_vlan: entered promiscuous mode [ 33.642514][ T310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.659878][ T3305] veth1_vlan: entered promiscuous mode [ 33.673958][ T3303] veth1_vlan: entered promiscuous mode [ 33.681294][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.693311][ T3303] veth0_macvtap: entered promiscuous mode [ 33.703278][ T3303] veth1_macvtap: entered promiscuous mode [ 33.713357][ T310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.733510][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.743520][ T3298] veth0_macvtap: entered promiscuous mode [ 33.751721][ T3298] veth1_macvtap: entered promiscuous mode [ 33.766868][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.777121][ T3305] veth0_macvtap: entered promiscuous mode [ 33.785227][ T3304] veth0_macvtap: entered promiscuous mode [ 33.797559][ T3305] veth1_macvtap: entered promiscuous mode [ 33.808710][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.823372][ T1639] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.833108][ T3304] veth1_macvtap: entered promiscuous mode [ 33.844282][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.852961][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.872919][ T1639] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.885061][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.891265][ T3503] syz.1.2 (3503) used greatest stack depth: 11208 bytes left [ 33.893232][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.907194][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.925329][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.947999][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.963546][ T310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.970964][ T3506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'. [ 33.983491][ T3506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'. [ 34.044621][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 34.044646][ T28] audit: type=1400 audit(1787091963.554:162): avc: denied { create } for pid=3505 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 34.073203][ T310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.084530][ T3506] capability: warning: `syz.1.6' uses 32-bit capabilities (legacy support in use) [ 34.103796][ T1639] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.119079][ T1639] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.124084][ T28] audit: type=1400 audit(1787091963.624:163): avc: denied { mount } for pid=3508 comm="syz.0.1" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 34.129552][ T310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.178417][ T28] audit: type=1400 audit(1787091963.624:164): avc: denied { search } for pid=3508 comm="syz.0.1" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 34.200181][ T28] audit: type=1400 audit(1787091963.624:165): avc: denied { read write } for pid=3508 comm="syz.0.1" name="set_event" dev="tracefs" ino=2062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 34.212451][ T310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.232119][ T3515] sd 0:0:1:0: PR command failed: 1026 [ 34.236953][ T28] audit: type=1400 audit(1787091963.624:166): avc: denied { open } for pid=3508 comm="syz.0.1" path="/0/trace/set_event" dev="tracefs" ino=2062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 34.247502][ T3515] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 34.270724][ T28] audit: type=1400 audit(1787091963.684:167): avc: denied { map_create } for pid=3505 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.281903][ T310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.309635][ T3515] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 34.333647][ T28] audit: type=1400 audit(1787091963.694:168): avc: denied { mount } for pid=3514 comm="syz.4.5" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 34.383172][ T310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.404419][ T310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.411339][ T3525] loop3: detected capacity change from 0 to 2048 [ 34.425470][ T28] audit: type=1400 audit(1787091963.704:169): avc: denied { read write } for pid=3514 comm="syz.4.5" name="sda" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.463339][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.483335][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.523766][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.529307][ T28] audit: type=1400 audit(1787091963.704:170): avc: denied { open } for pid=3514 comm="syz.4.5" path="/0/dev/sda" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.541616][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.566478][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.585808][ T28] audit: type=1400 audit(1787091963.704:172): avc: denied { ioctl } for pid=3514 comm="syz.4.5" path="/0/dev/sda" dev="devtmpfs" ino=136 ioctlcmd=0x70ce scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.589872][ T3525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.636470][ T3533] loop2: detected capacity change from 0 to 1024 [ 34.683278][ T3542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 34.705728][ T3533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.749497][ T3525] ======================================================= [ 34.749497][ T3525] WARNING: The mand mount option has been deprecated and [ 34.749497][ T3525] and is ignored by this kernel. Remove the mand [ 34.749497][ T3525] option from the mount to silence this warning. [ 34.749497][ T3525] ======================================================= [ 34.751405][ T3542] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12'. [ 34.785224][ T3525] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 34.814674][ T3525] EXT4-fs (loop3): can't disable delalloc during remount [ 34.829005][ T3542] syz.0.12 (3542) used greatest stack depth: 11192 bytes left [ 34.906496][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.036679][ T3559] geneve1: entered promiscuous mode [ 35.081638][ T3553] syz.0.16 (3553) used greatest stack depth: 10784 bytes left [ 35.090089][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.153023][ T3556] loop1: detected capacity change from 0 to 512 [ 35.233475][ T3576] loop4: detected capacity change from 0 to 512 [ 35.250571][ T3577] loop3: detected capacity change from 0 to 2048 [ 35.271318][ T3576] EXT4-fs: Mount option(s) incompatible with ext2 [ 35.272104][ T3577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.307370][ T3576] FAULT_INJECTION: forcing a failure. [ 35.307370][ T3576] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.345235][ T3576] CPU: 1 UID: 0 PID: 3576 Comm: syz.4.25 Not tainted syzkaller #0 PREEMPT(lazy) [ 35.345341][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.345359][ T3576] Call Trace: [ 35.345367][ T3576] [ 35.345376][ T3576] __dump_stack+0x1d/0x30 [ 35.345402][ T3576] dump_stack_lvl+0x95/0xd0 [ 35.345445][ T3576] dump_stack+0x15/0x1b [ 35.345540][ T3576] should_fail_ex+0x25e/0x270 [ 35.345570][ T3576] should_fail+0xb/0x20 [ 35.345595][ T3576] should_fail_usercopy+0x1a/0x20 [ 35.345686][ T3576] _copy_from_user+0x1c/0xb0 [ 35.345715][ T3576] __se_sys_move_pages+0xeb6/0x1510 [ 35.345746][ T3576] ? get_pid_task+0x92/0xc0 [ 35.345795][ T3576] ? ksys_write+0x194/0x1a0 [ 35.345819][ T3576] __x64_sys_move_pages+0x78/0x90 [ 35.345849][ T3576] x64_sys_call+0x2f0e/0x3050 [ 35.345920][ T3576] do_syscall_64+0x136/0x3c0 [ 35.345992][ T3576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.346068][ T3576] RIP: 0033:0x7fa97aa3e0d9 [ 35.346153][ T3576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.346172][ T3576] RSP: 002b:00007fa979497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 35.346193][ T3576] RAX: ffffffffffffffda RBX: 00007fa97acc5fa0 RCX: 00007fa97aa3e0d9 [ 35.346206][ T3576] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000 [ 35.346238][ T3576] RBP: 00007fa979497090 R08: 0000200000000040 R09: 0300000000000000 [ 35.346292][ T3576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.346352][ T3576] R13: 00007fa97acc6038 R14: 00007fa97acc5fa0 R15: 00007ffd35903118 [ 35.346370][ T3576] [ 35.553357][ T3589] syz.2.30 uses obsolete (PF_INET,SOCK_PACKET) [ 35.566209][ T3577] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 35.586237][ T3577] EXT4-fs (loop3): can't disable delalloc during remount [ 35.606291][ T3591] FAULT_INJECTION: forcing a failure. [ 35.606291][ T3591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 35.608134][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.620411][ T3591] CPU: 0 UID: 0 PID: 3591 Comm: syz.4.31 Not tainted syzkaller #0 PREEMPT(lazy) [ 35.620438][ T3591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.620451][ T3591] Call Trace: [ 35.620458][ T3591] [ 35.620630][ T3591] __dump_stack+0x1d/0x30 [ 35.620659][ T3591] dump_stack_lvl+0x95/0xd0 [ 35.620681][ T3591] dump_stack+0x15/0x1b [ 35.620702][ T3591] should_fail_ex+0x25e/0x270 [ 35.620731][ T3591] should_fail+0xb/0x20 [ 35.620773][ T3591] should_fail_usercopy+0x1a/0x20 [ 35.620802][ T3591] _copy_from_iter+0xcc/0xe70 [ 35.620887][ T3591] ? selinux_file_open+0x2e6/0x330 [ 35.620917][ T3591] tun_get_user+0x14e/0x2820 [ 35.620944][ T3591] ? _parse_integer_limit+0x177/0x1a0 [ 35.621016][ T3591] ? _parse_integer+0x27/0x40 [ 35.621038][ T3591] ? ref_tracker_alloc+0x1eb/0x2f0 [ 35.621070][ T3591] tun_chr_write_iter+0x15a/0x210 [ 35.621122][ T3591] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 35.621149][ T3591] vfs_write+0x57d/0x990 [ 35.621174][ T3591] ksys_write+0xdc/0x1a0 [ 35.621238][ T3591] __x64_sys_write+0x40/0x50 [ 35.621260][ T3591] x64_sys_call+0x29fc/0x3050 [ 35.621285][ T3591] do_syscall_64+0x136/0x3c0 [ 35.621374][ T3591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.621468][ T3591] RIP: 0033:0x7fa97aa3e0d9 [ 35.621492][ T3591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.621527][ T3591] RSP: 002b:00007fa979497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 35.621560][ T3591] RAX: ffffffffffffffda RBX: 00007fa97acc5fa0 RCX: 00007fa97aa3e0d9 [ 35.621576][ T3591] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000003 [ 35.621642][ T3591] RBP: 00007fa979497090 R08: 0000000000000000 R09: 0000000000000000 [ 35.621657][ T3591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.621681][ T3591] R13: 00007fa97acc6038 R14: 00007fa97acc5fa0 R15: 00007ffd35903118 [ 35.621702][ T3591] [ 35.844381][ T3597] loop1: detected capacity change from 0 to 128 [ 35.885800][ T3600] loop2: detected capacity change from 0 to 128 [ 35.896049][ T3600] FAT-fs (loop2): bogus number of reserved sectors [ 35.902629][ T3600] FAT-fs (loop2): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 35.913789][ T3600] FAT-fs (loop2): Can't find a valid FAT filesystem [ 35.929022][ T3600] netlink: 132 bytes leftover after parsing attributes in process `syz.2.36'. [ 35.939357][ T3600] loop2: detected capacity change from 0 to 128 [ 35.980064][ T3600] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.008101][ T3600] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 36.055019][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.123457][ T3416] IPVS: starting estimator thread 0... [ 36.135296][ T3610] loop3: detected capacity change from 0 to 512 [ 36.154194][ T3610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.167567][ T3610] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.185140][ T3619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=3619 comm=syz.2.41 [ 36.204758][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.214024][ T3614] IPVS: using max 2208 ests per chain, 110400 per kthread [ 36.240105][ T3621] FAULT_INJECTION: forcing a failure. [ 36.240105][ T3621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.259324][ T3621] CPU: 1 UID: 0 PID: 3621 Comm: syz.3.42 Not tainted syzkaller #0 PREEMPT(lazy) [ 36.259352][ T3621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.259366][ T3621] Call Trace: [ 36.259378][ T3621] [ 36.259386][ T3621] __dump_stack+0x1d/0x30 [ 36.259424][ T3621] dump_stack_lvl+0x95/0xd0 [ 36.259444][ T3621] dump_stack+0x15/0x1b [ 36.259461][ T3621] should_fail_ex+0x25e/0x270 [ 36.259486][ T3621] should_fail+0xb/0x20 [ 36.259507][ T3621] should_fail_usercopy+0x1a/0x20 [ 36.259599][ T3621] _copy_from_iter+0xcc/0xe70 [ 36.259627][ T3621] ? __alloc_skb+0x511/0x6f0 [ 36.259655][ T3621] ? __alloc_skb+0x205/0x6f0 [ 36.259743][ T3621] netlink_sendmsg+0x4a4/0x6f0 [ 36.259853][ T3621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 36.259878][ T3621] ____sys_sendmsg+0x532/0x580 [ 36.259912][ T3621] ___sys_sendmsg+0x195/0x1e0 [ 36.259983][ T3621] __x64_sys_sendmsg+0xd4/0x160 [ 36.260096][ T3621] x64_sys_call+0x18e8/0x3050 [ 36.260118][ T3621] do_syscall_64+0x136/0x3c0 [ 36.260142][ T3621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.260165][ T3621] RIP: 0033:0x7f0d2b08e0d9 [ 36.260185][ T3621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.260205][ T3621] RSP: 002b:00007f0d29ae7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.260284][ T3621] RAX: ffffffffffffffda RBX: 00007f0d2b315fa0 RCX: 00007f0d2b08e0d9 [ 36.260300][ T3621] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 36.260392][ T3621] RBP: 00007f0d29ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.260407][ T3621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.260422][ T3621] R13: 00007f0d2b316038 R14: 00007f0d2b315fa0 R15: 00007fff56fde658 [ 36.260446][ T3621] [ 36.547503][ T3623] loop4: detected capacity change from 0 to 512 [ 36.557953][ T3631] netlink: 'syz.3.46': attribute type 1 has an invalid length. [ 36.609579][ T3623] SELinux: context truncated [ 36.616069][ T3623] SELinux: invalid ocon [ 36.625873][ T3623] SELinux: failed to load policy [ 36.700817][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.739319][ T3638] netlink: 64 bytes leftover after parsing attributes in process `syz.3.46'. [ 36.797162][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.869061][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.874858][ T3631] 9p: Bad value for 'wfdno' [ 36.942123][ T3654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 36.953117][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.968010][ T3654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 36.989598][ T3656] FAULT_INJECTION: forcing a failure. [ 36.989598][ T3656] name failslab, interval 1, probability 0, space 0, times 1 [ 37.006519][ T3656] CPU: 0 UID: 0 PID: 3656 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.006555][ T3656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.006568][ T3656] Call Trace: [ 37.006575][ T3656] [ 37.006583][ T3656] __dump_stack+0x1d/0x30 [ 37.006606][ T3656] dump_stack_lvl+0x95/0xd0 [ 37.006624][ T3656] dump_stack+0x15/0x1b [ 37.006641][ T3656] should_fail_ex+0x25e/0x270 [ 37.006665][ T3656] should_failslab+0x8c/0xb0 [ 37.006688][ T3656] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 37.006709][ T3656] ? vm_area_dup+0x33/0x2c0 [ 37.006729][ T3656] ? vm_area_dup+0x33/0x2c0 [ 37.006749][ T3656] vm_area_dup+0x33/0x2c0 [ 37.006769][ T3656] __split_vma+0xe9/0x640 [ 37.006790][ T3656] ? can_vma_merge_right+0xeb/0x3a0 [ 37.006823][ T3656] vma_modify+0xb29/0xc80 [ 37.006855][ T3656] vma_modify_flags+0x182/0x210 [ 37.006885][ T3656] madvise_vma_behavior+0x13f2/0x20e0 [ 37.006913][ T3656] ? find_vma_prev+0x9c/0xe0 [ 37.006943][ T3656] madvise_do_behavior+0x591/0x990 [ 37.006972][ T3656] do_madvise+0x1bd/0x220 [ 37.007003][ T3656] __x64_sys_madvise+0x63/0x80 [ 37.007026][ T3656] x64_sys_call+0x20ee/0x3050 [ 37.007048][ T3656] do_syscall_64+0x136/0x3c0 [ 37.007073][ T3656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.007096][ T3656] RIP: 0033:0x7f0d2b08e0d9 [ 37.007113][ T3656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.007130][ T3656] RSP: 002b:00007f0d29ae7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 37.007148][ T3656] RAX: ffffffffffffffda RBX: 00007f0d2b315fa0 RCX: 00007f0d2b08e0d9 [ 37.007161][ T3656] RDX: 000000000000000a RSI: 86ac726dff2f4713 RDI: 0000200000bdc000 [ 37.007173][ T3656] RBP: 00007f0d29ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.007187][ T3656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.007200][ T3656] R13: 00007f0d2b316038 R14: 00007f0d2b315fa0 R15: 00007fff56fde658 [ 37.007217][ T3656] [ 37.428780][ T68] bridge_slave_1: left allmulticast mode [ 37.435167][ T68] bridge_slave_1: left promiscuous mode [ 37.464121][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.494580][ T68] bridge_slave_0: left allmulticast mode [ 37.509000][ T68] bridge_slave_0: left promiscuous mode [ 37.534530][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.636285][ T3704] FAULT_INJECTION: forcing a failure. [ 37.636285][ T3704] name failslab, interval 1, probability 0, space 0, times 0 [ 37.660844][ T3704] CPU: 0 UID: 0 PID: 3704 Comm: syz.2.64 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.660895][ T3704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.660907][ T3704] Call Trace: [ 37.660914][ T3704] [ 37.660985][ T3704] __dump_stack+0x1d/0x30 [ 37.661008][ T3704] dump_stack_lvl+0x95/0xd0 [ 37.661028][ T3704] dump_stack+0x15/0x1b [ 37.661046][ T3704] should_fail_ex+0x25e/0x270 [ 37.661075][ T3704] should_failslab+0x8c/0xb0 [ 37.661154][ T3704] __kmalloc_node_track_caller_noprof+0xd5/0x4c0 [ 37.661184][ T3704] ? sidtab_sid2str_get+0xa0/0x130 [ 37.661207][ T3704] ? sidtab_sid2str_get+0xa0/0x130 [ 37.661290][ T3704] kmemdup_noprof+0x2b/0x70 [ 37.661320][ T3704] sidtab_sid2str_get+0xa0/0x130 [ 37.661343][ T3704] security_sid_to_context_core+0x1eb/0x2e0 [ 37.661374][ T3704] security_sid_to_context+0x27/0x40 [ 37.661469][ T3704] avc_audit_post_callback+0x10f/0x520 [ 37.661495][ T3704] ? audit_log_lsm_data+0x78c/0xbb0 [ 37.661516][ T3704] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 37.661545][ T3704] common_lsm_audit+0x1ba/0x230 [ 37.661580][ T3704] ? avc_update_node+0x225/0x5a0 [ 37.661603][ T3704] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 37.661634][ T3704] slow_avc_audit+0x14c/0x190 [ 37.661700][ T3704] avc_has_extended_perms+0x617/0x890 [ 37.661758][ T3704] ioctl_has_perm+0x273/0x2c0 [ 37.661785][ T3704] selinux_file_ioctl+0x33c/0x3c0 [ 37.661861][ T3704] ? __fget_files+0x184/0x1c0 [ 37.661943][ T3704] ? mutex_lock+0x57/0x90 [ 37.661975][ T3704] security_file_ioctl+0x44/0x80 [ 37.661998][ T3704] __se_sys_ioctl+0x47/0x140 [ 37.662019][ T3704] __x64_sys_ioctl+0x43/0x50 [ 37.662038][ T3704] x64_sys_call+0x16a2/0x3050 [ 37.662092][ T3704] do_syscall_64+0x136/0x3c0 [ 37.662132][ T3704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.662152][ T3704] RIP: 0033:0x7f3e9b9be0d9 [ 37.662168][ T3704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.662210][ T3704] RSP: 002b:00007f3e9a417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.662233][ T3704] RAX: ffffffffffffffda RBX: 00007f3e9bc45fa0 RCX: 00007f3e9b9be0d9 [ 37.662295][ T3704] RDX: 0000200000000400 RSI: 000000000000890b RDI: 0000000000000004 [ 37.662308][ T3704] RBP: 00007f3e9a417090 R08: 0000000000000000 R09: 0000000000000000 [ 37.662320][ T3704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.662332][ T3704] R13: 00007f3e9bc46038 R14: 00007f3e9bc45fa0 R15: 00007fff7ae612c8 [ 37.662350][ T3704] [ 37.976269][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.990004][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.001199][ T68] bond0 (unregistering): Released all slaves [ 38.050439][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 38.066943][ T3635] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.082571][ T3635] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.095184][ T3635] bridge_slave_0: entered allmulticast mode [ 38.101854][ T3635] bridge_slave_0: entered promiscuous mode [ 38.131742][ T68] hsr_slave_0: left promiscuous mode [ 38.142062][ T68] hsr_slave_1: left promiscuous mode [ 38.149525][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.157283][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.165920][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.173687][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.192734][ T68] veth1_macvtap: left promiscuous mode [ 38.200028][ T68] veth0_macvtap: left promiscuous mode [ 38.205903][ T68] veth1_vlan: left promiscuous mode [ 38.211270][ T68] veth0_vlan: left promiscuous mode [ 38.287921][ T68] team0 (unregistering): Port device team_slave_1 removed [ 38.299345][ T68] team0 (unregistering): Port device team_slave_0 removed [ 38.330170][ T3635] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.337637][ T3635] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.345046][ T3635] bridge_slave_1: entered allmulticast mode [ 38.351605][ T3635] bridge_slave_1: entered promiscuous mode [ 38.380893][ T3635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.399158][ T3635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.449066][ T3736] xt_hashlimit: size too large, truncated to 1048576 [ 38.477815][ T3635] team0: Port device team_slave_0 added [ 38.493564][ T3635] team0: Port device team_slave_1 added [ 38.543071][ T3635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.561666][ T3635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.603859][ T3635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.625157][ T3754] capability: warning: `syz.2.73' uses deprecated v2 capabilities in a way that may be insecure [ 38.667034][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 38.675590][ T3635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.686858][ T3635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.717554][ T3635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.738972][ T3754] program syz.2.73 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.830635][ T3635] hsr_slave_0: entered promiscuous mode [ 38.841932][ T3635] hsr_slave_1: entered promiscuous mode [ 38.848368][ T3635] debugfs: 'hsr0' already exists in 'hsr' [ 38.854769][ T3635] Cannot create hsr debugfs directory [ 38.870328][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.898637][ T3764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.75'. [ 38.991081][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.142276][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.232678][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.290387][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 39.290403][ T28] audit: type=1400 audit(1787091968.794:257): avc: denied { write } for pid=3774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.325435][ T3770] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 39.363606][ T3790] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=3790 comm=syz.4.77 [ 39.377772][ T35] IPVS: starting estimator thread 0... [ 39.390890][ T28] audit: type=1400 audit(1787091968.834:258): avc: denied { write } for pid=3787 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.403563][ T3790] SELinux: Context is not valid (left unmapped). [ 39.425584][ T28] audit: type=1400 audit(1787091968.934:259): avc: denied { relabelto } for pid=3789 comm="syz.4.77" name="blkio.bfq.io_serviced" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 39.451228][ T28] audit: type=1400 audit(1787091968.934:260): avc: denied { associate } for pid=3789 comm="syz.4.77" name="blkio.bfq.io_serviced" dev="tmpfs" ino=115 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 39.473330][ T3791] IPVS: using max 2112 ests per chain, 105600 per kthread [ 39.477171][ T28] audit: type=1400 audit(1787091968.934:261): avc: denied { append } for pid=3789 comm="syz.4.77" path="/18/blkio.bfq.io_serviced" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 39.509545][ T28] audit: type=1400 audit(1787091969.004:262): avc: denied { getopt } for pid=3789 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.530331][ T28] audit: type=1400 audit(1787091969.004:263): avc: denied { create } for pid=3789 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 39.532009][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 39.589665][ T28] audit: type=1400 audit(1787091969.084:264): avc: denied { unlink } for pid=3298 comm="syz-executor" name="blkio.bfq.io_serviced" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="" [ 39.704899][ T3635] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.724331][ T28] audit: type=1400 audit(1787091969.134:265): avc: denied { write } for pid=3796 comm="syz.4.78" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.751403][ T3635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.793659][ T12] bridge_slave_1: left allmulticast mode [ 39.800489][ T12] bridge_slave_1: left promiscuous mode [ 39.806556][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.814255][ T28] audit: type=1400 audit(1787091969.154:266): avc: denied { ioctl } for pid=3796 comm="syz.4.78" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.846866][ T12] bridge_slave_0: left allmulticast mode [ 39.852822][ T12] bridge_slave_0: left promiscuous mode [ 39.860019][ T3802] Zero length message leads to an empty skb [ 39.861375][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.956311][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.966860][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.977849][ T12] bond0 (unregistering): Released all slaves [ 40.001011][ T3635] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.010429][ T3635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.019736][ T3635] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.029760][ T3635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.037786][ T3711] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.047662][ T3809] set_capacity_and_notify: 2 callbacks suppressed [ 40.047679][ T3809] loop3: detected capacity change from 0 to 128 [ 40.048741][ T3711] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.067754][ T3711] bridge_slave_0: entered allmulticast mode [ 40.074506][ T3711] bridge_slave_0: entered promiscuous mode [ 40.085591][ T3809] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.101375][ T3635] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.108564][ T3809] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.146407][ T3635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.165236][ T3711] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.192598][ T3711] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.201782][ T3711] bridge_slave_1: entered allmulticast mode [ 40.209173][ T3711] bridge_slave_1: entered promiscuous mode [ 40.227084][ T12] hsr_slave_0: left promiscuous mode [ 40.232898][ T12] hsr_slave_1: left promiscuous mode [ 40.238662][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.246442][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.254169][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.261577][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.271069][ T12] veth1_macvtap: left promiscuous mode [ 40.276707][ T12] veth0_macvtap: left promiscuous mode [ 40.282254][ T12] veth1_vlan: left promiscuous mode [ 40.288096][ T12] veth0_vlan: left promiscuous mode [ 40.344361][ T12] team0 (unregistering): Port device team_slave_1 removed [ 40.353671][ T12] team0 (unregistering): Port device team_slave_0 removed [ 40.400197][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 40.425946][ T3711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.436503][ T3711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.472418][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.472594][ T3711] team0: Port device team_slave_0 added [ 40.488722][ T3711] team0: Port device team_slave_1 added [ 40.496951][ T3635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.503197][ T3843] FAULT_INJECTION: forcing a failure. [ 40.503197][ T3843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.516906][ T3843] CPU: 1 UID: 0 PID: 3843 Comm: syz.2.87 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.516931][ T3843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.516943][ T3843] Call Trace: [ 40.516950][ T3843] [ 40.516958][ T3843] __dump_stack+0x1d/0x30 [ 40.516981][ T3843] dump_stack_lvl+0x95/0xd0 [ 40.517073][ T3843] dump_stack+0x15/0x1b [ 40.517095][ T3843] should_fail_ex+0x25e/0x270 [ 40.517125][ T3843] should_fail+0xb/0x20 [ 40.517146][ T3843] should_fail_usercopy+0x1a/0x20 [ 40.517226][ T3843] _copy_from_user+0x1c/0xb0 [ 40.517293][ T3843] snd_seq_ioctl+0x127/0x2d0 [ 40.517345][ T3843] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 40.517535][ T3843] __se_sys_ioctl+0xce/0x140 [ 40.517559][ T3843] __x64_sys_ioctl+0x43/0x50 [ 40.517582][ T3843] x64_sys_call+0x16a2/0x3050 [ 40.517634][ T3843] do_syscall_64+0x136/0x3c0 [ 40.517658][ T3843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.517680][ T3843] RIP: 0033:0x7f3e9b9be0d9 [ 40.517698][ T3843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.517792][ T3843] RSP: 002b:00007f3e9a417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.517810][ T3843] RAX: ffffffffffffffda RBX: 00007f3e9bc45fa0 RCX: 00007f3e9b9be0d9 [ 40.517823][ T3843] RDX: 00002000000001c0 RSI: 0000000040505330 RDI: 0000000000000003 [ 40.517836][ T3843] RBP: 00007f3e9a417090 R08: 0000000000000000 R09: 0000000000000000 [ 40.517931][ T3843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.517943][ T3843] R13: 00007f3e9bc46038 R14: 00007f3e9bc45fa0 R15: 00007fff7ae612c8 [ 40.517962][ T3843] [ 40.698154][ T3711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.705196][ T3711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.711848][ T3845] loop3: detected capacity change from 0 to 256 [ 40.732569][ T3711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.755734][ T3711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.762971][ T3711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.819072][ T3850] netlink: 'syz.4.89': attribute type 16 has an invalid length. [ 40.827106][ T3711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.837824][ T3850] netlink: 'syz.4.89': attribute type 17 has an invalid length. [ 40.971123][ T3853] FAT-fs (loop3): error, clusters badly computed (2 != 1) [ 40.981059][ T3853] FAT-fs (loop3): Filesystem has been set read-only [ 40.989513][ T3850] geneve1: left promiscuous mode [ 41.023261][ T3635] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.046070][ T1639] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.053174][ T1639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.137312][ T3711] hsr_slave_0: entered promiscuous mode [ 41.149856][ T3866] loop4: detected capacity change from 0 to 164 [ 41.151870][ T3711] hsr_slave_1: entered promiscuous mode [ 41.181770][ T3711] debugfs: 'hsr0' already exists in 'hsr' [ 41.193941][ T3711] Cannot create hsr debugfs directory [ 41.246243][ T1639] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.253343][ T1639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.410749][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 41.492420][ T3711] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 41.518376][ T3711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.553938][ T3711] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 41.578065][ T3711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.603076][ T3711] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 41.614537][ T3880] loop2: detected capacity change from 0 to 128 [ 41.628549][ T3711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.666644][ T3880] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.692340][ T3711] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 41.703338][ T3711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.710938][ T3880] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.811060][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 41.866942][ T3635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.875637][ T3931] loop4: detected capacity change from 0 to 512 [ 41.883450][ T3931] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.885885][ T3711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.905486][ T3931] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 41.911941][ T3931] EXT4-fs (loop4): mount failed [ 41.922596][ T310] ip6_tunnel: K xmit: Local address not yet configured! [ 41.948358][ T310] ip6_tunnel: K xmit: Local address not yet configured! [ 41.954669][ T3934] mmap: syz.2.100 (3934) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.955705][ T3413] ip6_tunnel: K xmit: Local address not yet configured! [ 41.988168][ T3711] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.006890][ T3393] kernel read not supported for file /80/net/arp (pid: 3393 comm: kworker/0:3) [ 42.022173][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.029360][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.050855][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.058006][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.081188][ T3937] loop4: detected capacity change from 0 to 512 [ 42.093556][ T3937] EXT4-fs: inline encryption not supported [ 42.106081][ T3711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.124063][ T3937] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 42.151376][ T3937] EXT4-fs error (device loop4): ext4_iget_extra_inode:5152: inode #15: comm syz.4.102: corrupted in-inode xattr: e_value size too large [ 42.190680][ T3937] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.192069][ T3937] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.102: couldn't read orphan inode 15 (err -117) [ 42.201249][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 42.201271][ C1] EXT4-fs (loop4): initial error at time 1787091971: ext4_iget_extra_inode:5152: inode 15 [ 42.201305][ C1] EXT4-fs (loop4): last error at time 1787091971: ext4_iget_extra_inode:5152: inode 15 [ 42.239659][ T3937] loop4: lost filesystem error report for type 5 error -117 [ 42.245222][ T3937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.316401][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.344268][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 42.373203][ T3635] veth0_vlan: entered promiscuous mode [ 42.396973][ T3635] veth1_vlan: entered promiscuous mode [ 42.426926][ T3635] veth0_macvtap: entered promiscuous mode [ 42.439200][ T3635] veth1_macvtap: entered promiscuous mode [ 42.457195][ T3711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.478122][ T3635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.506775][ T3635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.582631][ T1639] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.612538][ T1639] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.655201][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 42.692693][ T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.706432][ T40] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.719269][ T4008] loop4: detected capacity change from 0 to 512 [ 42.730362][ T4008] EXT4-fs: inline encryption not supported [ 42.750361][ T4008] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 42.790510][ T4008] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.105: bad orphan inode 15 [ 42.802520][ T4008] loop4: lost filesystem error report for type 5 error -117 [ 42.803369][ T3393] ip6_tunnel: K xmit: Local address not yet configured! [ 42.806316][ T4008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.816175][ T3345] ip6_tunnel: K xmit: Local address not yet configured! [ 42.823289][ T3853] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 198) [ 42.852318][ T4020] netlink: 24 bytes leftover after parsing attributes in process `syz.5.108'. [ 42.915600][ T3711] veth0_vlan: entered promiscuous mode [ 42.930081][ T3711] veth1_vlan: entered promiscuous mode [ 42.951051][ T3711] veth0_macvtap: entered promiscuous mode [ 42.965667][ T3711] veth1_macvtap: entered promiscuous mode [ 42.976256][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.984000][ T3711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.013081][ T3711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.042710][ T1639] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.060925][ T1639] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.064607][ T4035] loop2: detected capacity change from 0 to 512 [ 43.092466][ T40] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.109105][ T4035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.111132][ T40] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.131260][ T4035] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.148094][ T4033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.112'. [ 43.167750][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.306742][ T3413] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 43.315389][ T3413] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 43.323051][ T3413] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 43.331803][ T3413] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 43.339366][ T3413] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 43.346980][ T3413] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 43.354492][ T3413] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 43.361930][ T3413] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 43.370766][ T3413] hid-generic 0000:0000:0001.0001: hidraw0: HID v0.10 Device [syz0] on syz1 [ 43.447959][ T4074] sch_fq: defrate 0 ignored. [ 43.506106][ T4081] netlink: 12 bytes leftover after parsing attributes in process `syz.6.127'. [ 43.635109][ T4092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.644412][ T4092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.668697][ T4085] syz.6.128 (4085) used greatest stack depth: 10248 bytes left [ 43.907370][ T4115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.138'. [ 43.940352][ T4118] loop5: detected capacity change from 0 to 512 [ 43.947777][ T4118] EXT4-fs: Ignoring removed bh option [ 43.954429][ T4118] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 43.980778][ T4120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.140'. [ 43.991337][ T4120] netlink: 28 bytes leftover after parsing attributes in process `syz.5.140'. [ 44.047174][ T4122] all (unregistering): Released all slaves [ 44.081076][ T4132] loop5: detected capacity change from 0 to 256 [ 44.103929][ T4122] tap0: tun_chr_ioctl cmd 1074025678 [ 44.122822][ T4122] tap0: group set to 0 [ 44.315308][ T28] kauditd_printk_skb: 200 callbacks suppressed [ 44.315322][ T28] audit: type=1400 audit(1787091973.824:467): avc: denied { mount } for pid=4141 comm="syz.6.147" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 44.344497][ T28] audit: type=1400 audit(1787091973.824:468): avc: denied { watch } for pid=4141 comm="syz.6.147" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 44.517851][ T4152] EXT4-fs: inline encryption not supported [ 44.525481][ T4152] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 44.544728][ T4152] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.150: bad orphan inode 15 [ 44.577763][ T4152] loop4: lost filesystem error report for type 5 error -117 [ 44.582404][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 44.596213][ C0] EXT4-fs (loop4): initial error at time 1787091974: ext4_orphan_get:1425 [ 44.604776][ C0] EXT4-fs (loop4): last error at time 1787091974: ext4_orphan_get:1425 [ 44.614149][ T4152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.669475][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.757389][ T28] audit: type=1400 audit(1787091974.264:469): avc: denied { read write } for pid=4158 comm="syz.4.152" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 44.793044][ T28] audit: type=1400 audit(1787091974.264:470): avc: denied { open } for pid=4158 comm="syz.4.152" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 44.825692][ T4161] EXT4-fs (loop4): 1 orphan inode deleted [ 44.832026][ T4161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.845064][ T310] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 44.856243][ T310] EXT4-fs error (device loop4): ext4_release_dquot:7085: comm kworker/u8:5: Failed to release dquot type 1 [ 44.867984][ T310] loop4: lost filesystem error report for type 5 error -117 [ 44.869402][ T4161] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.954267][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.006165][ T4167] xt_hashlimit: size too large, truncated to 1048576 [ 45.324530][ T4178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'. [ 45.344938][ T4182] set_capacity_and_notify: 2 callbacks suppressed [ 45.344952][ T4182] loop4: detected capacity change from 0 to 256 [ 45.364588][ T4184] netlink: 12 bytes leftover after parsing attributes in process `syz.5.160'. [ 45.426835][ T4182] syz.4.159: attempt to access beyond end of device [ 45.426835][ T4182] loop4: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 45.443943][ T28] audit: type=1400 audit(1787091974.944:471): avc: denied { ioctl } for pid=4194 comm="syz.6.164" path="socket:[7563]" dev="sockfs" ino=7563 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.485501][ T46] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.501870][ T4201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 45.506575][ T28] audit: type=1400 audit(1787091975.004:472): avc: denied { kexec_image_load } for pid=4194 comm="syz.6.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 45.536932][ T4201] netlink: 20 bytes leftover after parsing attributes in process `syz.3.165'. [ 45.565856][ T4206] loop5: detected capacity change from 0 to 512 [ 45.619363][ T4206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.663497][ T4197] SELinux: context truncated [ 45.668158][ T4197] SELinux: invalid ocon [ 45.807547][ T28] audit: type=1400 audit(1787091975.314:473): avc: denied { write } for pid=4221 comm="syz.4.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 45.808240][ T4224] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 45.841073][ T4224] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 45.855367][ T4197] SELinux: failed to load policy [ 45.876600][ T28] audit: type=1326 audit(1787091975.384:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.3.173" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2b08e0d9 code=0x7ffc0000 [ 45.901964][ T28] audit: type=1326 audit(1787091975.384:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4226 comm="syz.3.173" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d2b08e0d9 code=0x7ffc0000 [ 45.937833][ T3635] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.118962][ T4248] loop6: detected capacity change from 0 to 4096 [ 46.127931][ T4248] ext2: Unknown parameter 'uid>00000000000000000000' [ 46.242559][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 46.269618][ T4262] loop6: detected capacity change from 0 to 164 [ 46.277055][ T4262] iso9660: Unknown parameter 'ÿÿÿÿ' [ 46.318305][ T4262] loop6: detected capacity change from 0 to 512 [ 46.323193][ T4266] loop4: detected capacity change from 0 to 512 [ 46.352109][ T4266] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 46.363155][ T4262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 46.371680][ T4266] EXT4-fs error (device loop4): ext4_iget_extra_inode:5152: inode #15: comm syz.4.189: corrupted in-inode xattr: e_value size too large [ 46.387615][ T4262] ext4 filesystem being mounted at /25/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.401054][ T4266] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.401449][ T4266] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.189: couldn't read orphan inode 15 (err -117) [ 46.413260][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 46.413289][ C0] EXT4-fs (loop4): initial error at time 1787091975: ext4_iget_extra_inode:5152: inode 15 [ 46.413386][ C0] EXT4-fs (loop4): last error at time 1787091975: ext4_iget_extra_inode:5152: inode 15 [ 46.456726][ T4266] loop4: lost filesystem error report for type 5 error -117 [ 46.459772][ T4266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.500881][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.546434][ T3711] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 46.876836][ T4287] loop6: detected capacity change from 0 to 4096 [ 46.935844][ T4287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.169122][ T3711] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.260965][ T4311] loop3: detected capacity change from 0 to 512 [ 47.288988][ T4311] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.354275][ T4311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.389660][ T4311] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.452017][ T4317] loop6: detected capacity change from 0 to 512 [ 47.464852][ T4317] EXT4-fs: inline encryption not supported [ 47.491622][ T4317] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 47.532159][ T4317] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.207: bad orphan inode 15 [ 47.542539][ T4317] loop6: lost filesystem error report for type 5 error -117 [ 47.544798][ T4317] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.550051][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.588994][ T3711] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.723944][ T4334] loop2: detected capacity change from 0 to 512 [ 47.739427][ T4334] ext4: Bad value for 'max_dir_size_kb' [ 47.788007][ T4334] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 47.935857][ T4353] EXT4-fs: inline encryption not supported [ 47.976628][ T4353] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 47.995435][ T4353] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.222: bad orphan inode 15 [ 48.042047][ T4353] loop4: lost filesystem error report for type 5 error -117 [ 48.057716][ T4353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.097893][ T4366] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.112752][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.122526][ T4366] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.228307][ T3711] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.264713][ T4378] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.284377][ T4378] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.372266][ T4378] FAULT_INJECTION: forcing a failure. [ 48.372266][ T4378] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 48.388238][ T4378] CPU: 1 UID: 0 PID: 4378 Comm: syz.4.231 Not tainted syzkaller #0 PREEMPT(lazy) [ 48.388273][ T4378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.388287][ T4378] Call Trace: [ 48.388294][ T4378] [ 48.388302][ T4378] __dump_stack+0x1d/0x30 [ 48.388368][ T4378] dump_stack_lvl+0x95/0xd0 [ 48.388441][ T4378] dump_stack+0x15/0x1b [ 48.388458][ T4378] should_fail_ex+0x25e/0x270 [ 48.388482][ T4378] should_fail_alloc_page+0xf2/0x100 [ 48.388518][ T4378] __alloc_frozen_pages_noprof+0x108/0x350 [ 48.388604][ T4378] alloc_pages_mpol+0xa9/0x1d0 [ 48.388650][ T4378] folio_alloc_noprof+0x96/0x150 [ 48.388683][ T4378] filemap_alloc_folio_noprof+0x92/0x220 [ 48.388749][ T4378] __filemap_get_folio_mpol+0x2a0/0x840 [ 48.388784][ T4378] ? ext4_inode_journal_mode+0xd7/0x1c0 [ 48.388837][ T4378] ? ext4_chunk_trans_extent+0x178/0x1a0 [ 48.388874][ T4378] ext4_write_begin+0x2f4/0xe90 [ 48.388899][ T4378] ? __rcu_read_unlock+0x4e/0x70 [ 48.388931][ T4378] ? avc_has_perm+0x101/0x190 [ 48.388998][ T4378] ext4_da_write_begin+0x1e7/0x690 [ 48.389025][ T4378] ? balance_dirty_pages_ratelimited_flags+0x41f/0x800 [ 48.389058][ T4378] generic_perform_write+0x186/0x490 [ 48.389089][ T4378] ext4_buffered_write_iter+0x2e2/0x480 [ 48.389127][ T4378] ext4_file_write_iter+0x38e/0xef0 [ 48.389158][ T4378] ? __rcu_read_unlock+0x4e/0x70 [ 48.389186][ T4378] ? get_pid_task+0x92/0xc0 [ 48.389268][ T4378] ? avc_policy_seqno+0x15/0x30 [ 48.389297][ T4378] ? selinux_file_permission+0x1dc/0x310 [ 48.389376][ T4378] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 48.389406][ T4378] vfs_write+0x57d/0x990 [ 48.389434][ T4378] __x64_sys_pwrite64+0xfd/0x150 [ 48.389487][ T4378] x64_sys_call+0xad5/0x3050 [ 48.389520][ T4378] do_syscall_64+0x136/0x3c0 [ 48.389546][ T4378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.389598][ T4378] RIP: 0033:0x7fa97aa3e0d9 [ 48.389656][ T4378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.389679][ T4378] RSP: 002b:00007fa979497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 48.389702][ T4378] RAX: ffffffffffffffda RBX: 00007fa97acc5fa0 RCX: 00007fa97aa3e0d9 [ 48.389718][ T4378] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005 [ 48.389733][ T4378] RBP: 00007fa979497090 R08: 0000000000000000 R09: 0000000000000000 [ 48.389800][ T4378] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 48.389815][ T4378] R13: 00007fa97acc6038 R14: 00007fa97acc5fa0 R15: 00007ffd35903118 [ 48.389837][ T4378] [ 48.710885][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.761257][ T4393] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.781734][ T4393] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.848031][ T3298] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.964615][ T4389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.151468][ T4409] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 49.350285][ T28] kauditd_printk_skb: 569 callbacks suppressed [ 49.350300][ T28] audit: type=1400 audit(1787091978.854:1045): avc: denied { write } for pid=4419 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.404360][ T28] audit: type=1326 audit(1787091978.914:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.4.247" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa97aa3e0d9 code=0x0 [ 49.463290][ T28] audit: type=1400 audit(1787091978.974:1047): avc: denied { create } for pid=4423 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.508722][ T28] audit: type=1400 audit(1787091978.974:1048): avc: denied { bind } for pid=4423 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.587291][ T28] audit: type=1400 audit(1787091978.994:1049): avc: denied { write } for pid=4423 comm="syz.4.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.657628][ T28] audit: type=1400 audit(1787091979.164:1050): avc: denied { write } for pid=3305 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.689596][ T28] audit: type=1400 audit(1787091979.164:1051): avc: denied { remove_name } for pid=3305 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.691727][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.716959][ T28] audit: type=1400 audit(1787091979.164:1052): avc: denied { rmdir } for pid=3305 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.746406][ T4444] __nla_validate_parse: 9 callbacks suppressed [ 49.746424][ T4444] netlink: 28 bytes leftover after parsing attributes in process `syz.5.253'. [ 49.764624][ T28] audit: type=1400 audit(1787091979.164:1053): avc: denied { write } for pid=3305 comm="syz-executor" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.821218][ T28] audit: type=1400 audit(1787091979.164:1054): avc: denied { unlink } for pid=3305 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.015344][ T4465] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.037260][ T4465] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.046405][ T4465] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.058272][ T4470] xt_hashlimit: size too large, truncated to 1048576 [ 50.079198][ T4374] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.087373][ T4465] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.260: Allocating blocks 41-42 which overlap fs metadata [ 50.107619][ T4374] EXT4-fs error (device loop2): __ext4_fill_super:5608: inode #2: comm syz.2.228: iget: special inode unallocated [ 50.137044][ T4474] netlink: 'syz.3.262': attribute type 3 has an invalid length. [ 50.151899][ T4465] loop5: lost filesystem error report for type 5 error -117 [ 50.152118][ T4465] EXT4-fs (loop5): Remounting filesystem read-only [ 50.159447][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 50.159466][ C0] EXT4-fs (loop5): initial error at time 1787091979: ext4_mb_mark_diskspace_used:4222 [ 50.159490][ C0] EXT4-fs (loop5): last error at time 1787091979: ext4_mb_mark_diskspace_used:4222 [ 50.176772][ T4374] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 50.202904][ T4465] EXT4-fs (loop5): 1 truncate cleaned up [ 50.203564][ T4474] netlink: 'syz.3.262': attribute type 6 has an invalid length. [ 50.212459][ T4465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.223756][ T4374] EXT4-fs (loop2): get root inode failed [ 50.238054][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 50.238080][ C1] EXT4-fs (loop2): initial error at time 1787091979: __ext4_fill_super:5608: inode 2 [ 50.238111][ C1] EXT4-fs (loop2): last error at time 1787091979: __ext4_fill_super:5608: inode 2 [ 50.254131][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 50.289237][ T4374] EXT4-fs (loop2): mount failed [ 50.356634][ T4374] set_capacity_and_notify: 8 callbacks suppressed [ 50.356657][ T4374] loop2: detected capacity change from 0 to 512 [ 50.375679][ T4474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.262'. [ 50.446069][ T4374] EXT4-fs (loop2): orphan cleanup on readonly fs [ 50.461447][ T4374] EXT4-fs warning (device loop2): ext4_enable_quotas:7284: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 50.486820][ T4374] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 50.509111][ T4374] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.228: couldn't read orphan inode 26 (err -116) [ 50.553789][ T4374] loop2: lost filesystem error report for type 5 error -116 [ 50.554829][ T4374] EXT4-fs (loop2): Remounting filesystem read-only [ 50.562569][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 50.562591][ C0] EXT4-fs (loop2): initial error at time 1787091980: ext4_orphan_get:1404 [ 50.562610][ C0] EXT4-fs (loop2): last error at time 1787091980: ext4_orphan_get:1404 [ 50.631992][ T4374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.019375][ T3635] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.029005][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.156379][ T4496] loop5: detected capacity change from 0 to 256 [ 53.557189][ T4528] loop2: detected capacity change from 0 to 256 [ 53.568221][ T4531] loop3: detected capacity change from 0 to 512 [ 53.586274][ T4535] loop6: detected capacity change from 0 to 512 [ 53.595898][ T4528] FAULT_INJECTION: forcing a failure. [ 53.595898][ T4528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.614531][ T4535] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 53.633247][ T4528] CPU: 1 UID: 0 PID: 4528 Comm: syz.2.276 Not tainted syzkaller #0 PREEMPT(lazy) [ 53.633294][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.633307][ T4528] Call Trace: [ 53.633315][ T4528] [ 53.633323][ T4528] __dump_stack+0x1d/0x30 [ 53.633350][ T4528] dump_stack_lvl+0x95/0xd0 [ 53.633374][ T4528] dump_stack+0x15/0x1b [ 53.633396][ T4528] should_fail_ex+0x25e/0x270 [ 53.633439][ T4528] should_fail+0xb/0x20 [ 53.633465][ T4528] should_fail_usercopy+0x1a/0x20 [ 53.633560][ T4528] strncpy_from_user+0x27/0x250 [ 53.633583][ T4528] do_getname+0x59/0x1c0 [ 53.633614][ T4528] __se_sys_mkdirat+0x21/0xf0 [ 53.633647][ T4528] __x64_sys_mkdirat+0x43/0x50 [ 53.633668][ T4528] x64_sys_call+0x2d35/0x3050 [ 53.633700][ T4528] do_syscall_64+0x136/0x3c0 [ 53.633770][ T4528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.633797][ T4528] RIP: 0033:0x7f3e9b9bcf47 [ 53.633815][ T4528] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.633834][ T4528] RSP: 002b:00007f3e9a416e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 53.633911][ T4528] RAX: ffffffffffffffda RBX: 00007f3e9a416ee0 RCX: 00007f3e9b9bcf47 [ 53.633927][ T4528] RDX: 00000000000001ff RSI: 0000200000000280 RDI: 00000000ffffff9c [ 53.633971][ T4528] RBP: 0000200000000180 R08: 0000200000000000 R09: 0000000000000000 [ 53.633986][ T4528] R10: 0000200000000180 R11: 0000000000000246 R12: 0000200000000280 [ 53.634001][ T4528] R13: 00007f3e9a416ea0 R14: 0000000000000000 R15: 00002000000001c0 [ 53.634020][ T4528] [ 53.663738][ T4535] EXT4-fs (loop6): group descriptors corrupted! [ 53.815964][ T4531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.834483][ T4555] FAULT_INJECTION: forcing a failure. [ 53.834483][ T4555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.848243][ T4531] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.871705][ T4555] CPU: 1 UID: 0 PID: 4555 Comm: syz.2.279 Not tainted syzkaller #0 PREEMPT(lazy) [ 53.871796][ T4555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.871814][ T4555] Call Trace: [ 53.871822][ T4555] [ 53.871832][ T4555] __dump_stack+0x1d/0x30 [ 53.871877][ T4555] dump_stack_lvl+0x95/0xd0 [ 53.871897][ T4555] dump_stack+0x15/0x1b [ 53.871914][ T4555] should_fail_ex+0x25e/0x270 [ 53.871967][ T4555] should_fail+0xb/0x20 [ 53.871990][ T4555] should_fail_usercopy+0x1a/0x20 [ 53.872064][ T4555] strncpy_from_user+0x27/0x250 [ 53.872142][ T4555] __se_sys_memfd_create+0x20f/0x3b0 [ 53.872166][ T4555] __x64_sys_memfd_create+0x31/0x40 [ 53.872186][ T4555] x64_sys_call+0x2d82/0x3050 [ 53.872212][ T4555] do_syscall_64+0x136/0x3c0 [ 53.872313][ T4555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.872333][ T4555] RIP: 0033:0x7f3e9b9be0d9 [ 53.872388][ T4555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.872408][ T4555] RSP: 002b:00007f3e9a416e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 53.872504][ T4555] RAX: ffffffffffffffda RBX: 000000000000061f RCX: 00007f3e9b9be0d9 [ 53.872520][ T4555] RDX: 00007f3e9a416ee0 RSI: 0000000000000000 RDI: 00007f3e9ba55204 [ 53.872536][ T4555] RBP: 0000200000000b00 R08: 00000000ffffffff R09: 0000000000000000 [ 53.872552][ T4555] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 53.872566][ T4555] R13: 00007f3e9a416ee0 R14: 00007f3e9a416ea0 R15: 00002000000005c0 [ 53.872585][ T4555] [ 53.968130][ T4531] syz.3.275 (4531) used greatest stack depth: 9744 bytes left [ 54.081379][ T4573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 54.084485][ T4571] loop5: detected capacity change from 0 to 512 [ 54.102622][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.133925][ T4571] EXT4-fs: inline encryption not supported [ 54.152231][ T4580] netlink: 8 bytes leftover after parsing attributes in process `syz.6.287'. [ 54.176542][ T4571] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 54.195005][ T4580] syz_tun: refused to change device tx_queue_len [ 54.206940][ T4571] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.281: bad orphan inode 15 [ 54.227450][ T4571] loop5: lost filesystem error report for type 5 error -117 [ 54.229300][ T4571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.312288][ T4594] loop4: detected capacity change from 0 to 512 [ 54.349551][ T4594] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.377575][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 54.377591][ T28] audit: type=1400 audit(1787091983.884:1091): avc: denied { write } for pid=4601 comm="syz.2.293" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.459744][ T3635] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.464526][ T28] audit: type=1400 audit(1787091983.934:1092): avc: denied { write } for pid=4595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.476107][ T4594] EXT4-fs (loop4): 1 truncate cleaned up [ 54.501201][ T28] audit: type=1400 audit(1787091983.954:1093): avc: denied { write } for pid=4613 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.537706][ T4594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.574544][ T28] audit: type=1400 audit(1787091984.084:1094): avc: denied { setattr } for pid=4593 comm="syz.4.290" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.625748][ T28] audit: type=1400 audit(1787091984.104:1095): avc: denied { audit_control } for pid=4623 comm="syz.2.295" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.656868][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.690966][ T28] audit: type=1400 audit(1787091984.194:1096): avc: denied { setopt } for pid=4630 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.735060][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 54.759320][ T28] audit: type=1400 audit(1787091984.264:1097): avc: denied { write } for pid=4616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.815732][ T28] audit: type=1400 audit(1787091984.324:1098): avc: denied { mount } for pid=4646 comm="syz.6.301" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 54.907072][ T28] audit: type=1400 audit(1787091984.344:1099): avc: denied { write } for pid=4647 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.945065][ T4655] loop4: detected capacity change from 0 to 512 [ 54.953558][ T28] audit: type=1400 audit(1787091984.414:1100): avc: denied { unmount } for pid=3711 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 55.038096][ T4653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 55.049872][ T4667] loop6: detected capacity change from 0 to 512 [ 55.108805][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.6.303'. [ 55.200861][ T4675] loop4: detected capacity change from 0 to 512 [ 55.238561][ T4675] EXT4-fs: inline encryption not supported [ 55.270182][ T4675] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 55.280439][ T4682] bond0: option slaves: interface -v does not exist! [ 55.311279][ T4675] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.304: bad orphan inode 15 [ 55.337007][ T4682] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 55.348978][ T4675] loop4: lost filesystem error report for type 5 error -117 [ 55.363282][ C0] Illegal XDP return value 16128 on prog (id 46) dev bridge0, expect packet loss! [ 55.377932][ T4675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.538168][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.819072][ T4733] SELinux: policydb magic number 0x7279656b does not match expected magic number 0xf97cff8c [ 55.830217][ T4738] bridge_slave_0: left allmulticast mode [ 55.836061][ T4738] bridge_slave_0: left promiscuous mode [ 55.836809][ T4733] SELinux: failed to load policy [ 55.841914][ T4738] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.864422][ T4738] bridge_slave_1: left allmulticast mode [ 55.900621][ T4712] set_capacity_and_notify: 1 callbacks suppressed [ 55.900721][ T4712] loop6: detected capacity change from 0 to 1024 [ 55.921383][ T4738] bridge_slave_1: left promiscuous mode [ 55.942439][ T4738] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.971860][ T4747] loop5: detected capacity change from 0 to 1024 [ 55.979355][ T4747] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.001259][ T4738] bond0: (slave bond_slave_0): Releasing backup interface [ 56.009534][ T4747] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 56.017852][ T4747] EXT4-fs (loop5): orphan cleanup on readonly fs [ 56.028723][ T4738] bond0: (slave bond_slave_1): Releasing backup interface [ 56.036308][ T4747] EXT4-fs error (device loop5): __ext4_get_inode_loc:4858: comm syz.5.320: Invalid inode table block 0 in block_group 0 [ 56.054889][ T4738] team0: Port device team_slave_0 removed [ 56.064150][ T4747] loop5: lost filesystem error report for type 5 error -117 [ 56.068669][ T4747] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6430: Corrupt filesystem [ 56.076026][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 56.076059][ C0] EXT4-fs (loop5): initial error at time 1787091985: __ext4_get_inode_loc:4858 [ 56.076085][ C0] EXT4-fs (loop5): last error at time 1787091985: __ext4_get_inode_loc:4858 [ 56.076268][ T4712] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.137909][ T4738] team0: Port device team_slave_1 removed [ 56.146809][ T4747] loop5: lost filesystem error report for type 5 error -117 [ 56.147715][ T4747] EXT4-fs error (device loop5): ext4_quota_write:7438: inode #3: comm syz.5.320: mark_inode_dirty error [ 56.151955][ T4738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.155205][ T4747] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 56.174141][ T4738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.185716][ T4747] EXT4-fs error (device loop5): ext4_acquire_dquot:7049: comm syz.5.320: Failed to acquire dquot type 0 [ 56.204135][ T4738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.211525][ T4738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.218837][ T4747] loop5: lost filesystem error report for type 5 error -117 [ 56.219646][ T4747] EXT4-fs error (device loop5): __ext4_get_inode_loc:4858: comm syz.5.320: Invalid inode table block 0 in block_group 0 [ 56.243735][ T4747] loop5: lost filesystem error report for type 5 error -117 [ 56.247280][ T4747] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6430: Corrupt filesystem [ 56.260198][ T4757] loop3: detected capacity change from 0 to 512 [ 56.264579][ T4747] loop5: lost filesystem error report for type 5 error -117 [ 56.274982][ T4747] EXT4-fs error (device loop5): ext4_ext_truncate:4557: inode #15: comm syz.5.320: mark_inode_dirty error [ 56.284962][ T4738] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 56.294157][ T4757] EXT4-fs: inline encryption not supported [ 56.315901][ T4747] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.316097][ T4747] EXT4-fs error (device loop5): __ext4_get_inode_loc:4858: comm syz.5.320: Invalid inode table block 0 in block_group 0 [ 56.339565][ T4741] team0: Failed to send options change via netlink (err -105) [ 56.347431][ T4757] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 56.356544][ T4741] team0: Mode changed to "loadbalance" [ 56.362842][ T4747] loop5: lost filesystem error report for type 5 error -117 [ 56.367908][ T4747] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6430: Corrupt filesystem [ 56.385069][ T4757] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.321: bad orphan inode 15 [ 56.395861][ T4747] loop5: lost filesystem error report for type 5 error -117 [ 56.395975][ T4747] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 56.412692][ T4757] loop3: lost filesystem error report for type 5 error -117 [ 56.413436][ T4747] EXT4-fs error (device loop5): __ext4_get_inode_loc:4858: comm syz.5.320: Invalid inode table block 0 in block_group 0 [ 56.440939][ T4757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.443582][ T4747] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6430: Corrupt filesystem [ 56.463969][ T4747] EXT4-fs error (device loop5): ext4_truncate:4663: inode #15: comm syz.5.320: mark_inode_dirty error [ 56.481088][ T4747] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.482434][ T4747] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 56.500970][ T4747] EXT4-fs (loop5): 1 truncate cleaned up [ 56.507351][ T4747] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.510744][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 56.540998][ T3711] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.616848][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.702510][ T4775] vlan3: entered promiscuous mode [ 56.720279][ T4775] bridge0: entered promiscuous mode [ 56.737406][ T4775] vlan3: entered allmulticast mode [ 56.752316][ T4775] bridge0: entered allmulticast mode [ 56.759354][ T4775] bridge0: port 3(vlan3) entered blocking state [ 56.766073][ T4747] EXT4-fs (loop5): shut down requested (0) [ 56.772715][ T4775] bridge0: port 3(vlan3) entered disabled state [ 56.827400][ T3635] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.876044][ T4788] netlink: 'syz.4.332': attribute type 10 has an invalid length. [ 56.895841][ T4791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.335'. [ 56.913097][ T4788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.942690][ T4788] team0: Port device bond0 added [ 56.968617][ T4800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.338'. [ 57.015331][ T4800] bridge1: entered promiscuous mode [ 57.031408][ T4800] bridge1: entered allmulticast mode [ 57.145611][ T4823] random: crng reseeded on system resumption [ 57.221406][ T4831] loop5: detected capacity change from 0 to 128 [ 57.272306][ T4836] netlink: 'syz.6.351': attribute type 49 has an invalid length. [ 57.288724][ T4840] netlink: 72 bytes leftover after parsing attributes in process `syz.2.349'. [ 57.487768][ T4836] ip6gretap0: entered promiscuous mode [ 57.497942][ T4836] ip6gretap0: entered allmulticast mode [ 57.594940][ T4871] loop2: detected capacity change from 0 to 256 [ 57.707210][ T4882] loop4: detected capacity change from 0 to 256 [ 57.746074][ T4885] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 57.787072][ T4885] FAT-fs (loop2): Filesystem has been set read-only [ 57.797467][ T4888] netlink: 12 bytes leftover after parsing attributes in process `syz.5.362'. [ 57.804205][ T4885] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 57.829807][ T4893] loop3: detected capacity change from 0 to 256 [ 57.843021][ T4885] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 57.876437][ T4897] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 57.891222][ T4885] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 198) [ 57.903243][ T4897] FAT-fs (loop4): Filesystem has been set read-only [ 57.940931][ T4897] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 57.955190][ T4897] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 57.972266][ T4897] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 58.217815][ T4909] loop6: detected capacity change from 0 to 256 [ 58.521110][ T4911] netlink: 260 bytes leftover after parsing attributes in process `syz.2.366'. [ 58.550754][ T4911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 58.816539][ T4916] loop3: detected capacity change from 0 to 164 [ 58.836768][ T4916] x_tables: unsorted entry at hook 2 [ 58.885782][ T4918] FAULT_INJECTION: forcing a failure. [ 58.885782][ T4918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.899267][ T4918] CPU: 0 UID: 0 PID: 4918 Comm: syz.3.369 Not tainted syzkaller #0 PREEMPT(lazy) [ 58.899292][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.899303][ T4918] Call Trace: [ 58.899380][ T4918] [ 58.899389][ T4918] __dump_stack+0x1d/0x30 [ 58.899415][ T4918] dump_stack_lvl+0x95/0xd0 [ 58.899436][ T4918] dump_stack+0x15/0x1b [ 58.899527][ T4918] should_fail_ex+0x25e/0x270 [ 58.899557][ T4918] should_fail+0xb/0x20 [ 58.899583][ T4918] should_fail_usercopy+0x1a/0x20 [ 58.899615][ T4918] _copy_to_user+0x20/0xa0 [ 58.899690][ T4918] simple_read_from_buffer+0xb5/0x130 [ 58.899719][ T4918] proc_fail_nth_read+0x10e/0x150 [ 58.899745][ T4918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.899867][ T4918] vfs_read+0x18e/0x7c0 [ 58.899950][ T4918] ? __rcu_read_unlock+0x4e/0x70 [ 58.900009][ T4918] ? __fget_files+0x184/0x1c0 [ 58.900078][ T4918] ? mutex_lock+0x57/0x90 [ 58.900111][ T4918] ksys_read+0xdc/0x1a0 [ 58.900134][ T4918] __x64_sys_read+0x40/0x50 [ 58.900196][ T4918] x64_sys_call+0x292b/0x3050 [ 58.900222][ T4918] do_syscall_64+0x136/0x3c0 [ 58.900250][ T4918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.900272][ T4918] RIP: 0033:0x7f0d2b04e90e [ 58.900290][ T4918] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 58.900318][ T4918] RSP: 002b:00007f0d29ae6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.900340][ T4918] RAX: ffffffffffffffda RBX: 00007f0d29ae76c0 RCX: 00007f0d2b04e90e [ 58.900357][ T4918] RDX: 000000000000000f RSI: 00007f0d29ae70a0 RDI: 0000000000000005 [ 58.900371][ T4918] RBP: 00007f0d29ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.900386][ T4918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.900401][ T4918] R13: 00007f0d2b316038 R14: 00007f0d2b315fa0 R15: 00007fff56fde658 [ 58.900423][ T4918] [ 59.256282][ T4948] netlink: 12 bytes leftover after parsing attributes in process `syz.6.374'. [ 59.430587][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 59.430602][ T28] audit: type=1400 audit(1787091988.924:1140): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 59.466779][ T4974] loop2: detected capacity change from 0 to 128 [ 59.487910][ T4974] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.627121][ T4974] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.660127][ T4978] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 59.671199][ T4978] EXT4-fs (loop6): group descriptors corrupted! [ 59.765719][ T3393] IPVS: starting estimator thread 0... [ 59.945653][ T4980] IPVS: using max 2256 ests per chain, 112800 per kthread [ 59.958437][ T28] audit: type=1400 audit(1787091989.464:1141): avc: denied { bind } for pid=4985 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.990953][ T28] audit: type=1400 audit(1787091989.484:1142): avc: denied { setopt } for pid=4985 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.013285][ T4989] macsec1: entered promiscuous mode [ 60.018230][ T28] audit: type=1400 audit(1787091989.484:1143): avc: denied { nlmsg_read } for pid=4985 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.022874][ T4990] EXT4-fs: dax option not supported [ 60.049159][ T4989] macsec1: entered allmulticast mode [ 60.061529][ T28] audit: type=1400 audit(1787091989.484:1144): avc: denied { write } for pid=4972 comm="syz.2.378" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.098929][ T28] audit: type=1400 audit(1787091989.484:1145): avc: denied { create } for pid=4972 comm="syz.2.378" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 60.183149][ T28] audit: type=1400 audit(1787091989.484:1146): avc: denied { write } for pid=4972 comm="syz.2.378" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.217643][ T28] audit: type=1400 audit(1787091989.484:1147): avc: denied { write } for pid=4972 comm="syz.2.378" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.240487][ T28] audit: type=1400 audit(1787091989.484:1148): avc: denied { create } for pid=4972 comm="syz.2.378" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.284895][ T28] audit: type=1400 audit(1787091989.494:1149): avc: denied { write } for pid=4972 comm="syz.2.378" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.307981][ T4997] __nla_validate_parse: 3 callbacks suppressed [ 60.308059][ T4997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 60.311444][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.637283][ T5022] EXT4-fs: inline encryption not supported [ 60.645589][ T5022] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 60.682248][ T5022] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.394: bad orphan inode 15 [ 60.692978][ T5022] fserror_report: 4 callbacks suppressed [ 60.692991][ T5022] loop2: lost filesystem error report for type 5 error -117 [ 60.701466][ T5022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.752101][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.834471][ T5029] bond1: (slave bond_slave_1): Device is not our slave [ 60.841349][ T5029] bond1: option active_slave: invalid value (bond_slave_1) [ 60.849584][ T5029] bond1 (unregistering): Released all slaves [ 60.894776][ T5034] netlink: 64 bytes leftover after parsing attributes in process `syz.4.398'. [ 60.903786][ T5034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 60.912926][ T5034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 60.948963][ T5036] netlink: 12 bytes leftover after parsing attributes in process `syz.5.399'. [ 61.001352][ T5045] Cannot find set identified by id 65535 to match [ 61.063766][ T5052] set_capacity_and_notify: 3 callbacks suppressed [ 61.063781][ T5052] loop2: detected capacity change from 0 to 256 [ 61.094640][ T5052] msdos: Unknown parameter 'nodotse' [ 61.296265][ T5072] netlink: 'syz.3.410': attribute type 1 has an invalid length. [ 61.355058][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.414'. [ 61.364683][ T5079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.414'. [ 61.374438][ T5083] netlink: 12 bytes leftover after parsing attributes in process `syz.6.415'. [ 61.492405][ T5092] usb usb5: usbfs: process 5092 (syz.5.419) did not claim interface 0 before use [ 61.518880][ T5094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.528134][ T5094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.080151][ T897] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 62.110810][ T897] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 62.130329][ T5116] loop4: detected capacity change from 0 to 1024 [ 62.140230][ T897] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 62.158824][ T5118] loop6: detected capacity change from 0 to 512 [ 62.166635][ T897] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 62.175474][ T5118] EXT4-fs: inline encryption not supported [ 62.181798][ T897] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 62.189653][ T897] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 62.189762][ T5116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 62.197357][ T897] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 62.218184][ T897] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 62.226178][ T897] hid-generic 0000:0000:0001.0002: hidraw0: HID v0.10 Device [syz0] on syz1 [ 62.233179][ T5118] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 62.237130][ T5116] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.271874][ T5123] fido_id[5123]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.288243][ T5118] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.429: bad orphan inode 15 [ 62.302497][ T5118] loop6: lost filesystem error report for type 5 error -117 [ 62.303000][ T5118] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.344441][ T5116] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.428: Freeing blocks not in datazone - block = 0, count = 16 [ 62.360778][ T5116] EXT4-fs (loop4): Remounting filesystem read-only [ 62.397783][ T5128] loop3: detected capacity change from 0 to 128 [ 62.411366][ T5116] usb usb7: check_ctrlrecip: process 5116 (syz.4.428) requesting ep 01 but needs 81 [ 62.441117][ T5128] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.457863][ T5128] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.469092][ T5116] EXT4-fs (loop4): shut down requested (2) [ 62.480049][ T3378] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 62.487700][ T3378] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 62.495658][ T3378] hid-generic 0000:0000:0001.0003: hidraw0: HID v0.10 Device [syz0] on syz1 [ 62.516997][ T3711] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.519902][ T5132] fido_id[5132]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.611394][ T5134] loop6: detected capacity change from 0 to 2048 [ 62.660637][ T5134] EXT4-fs error (device loop6): ext4_ext_precache:631: inode #2: comm syz.6.434: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 62.679983][ T5134] EXT4-fs (loop6): Remounting filesystem read-only [ 62.705780][ T5154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.441'. [ 62.817739][ T5173] loop6: detected capacity change from 0 to 256 [ 62.936693][ T5172] loop3: detected capacity change from 0 to 128 [ 62.940803][ T5195] FAT-fs (loop6): error, clusters badly computed (2 != 1) [ 62.977667][ T5195] FAT-fs (loop6): Filesystem has been set read-only [ 62.984521][ T5193] loop2: detected capacity change from 0 to 2048 [ 63.009267][ T5195] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 198) [ 63.022070][ T5195] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 63.024702][ T5172] device-mapper: ioctl: Invalid ioctl structure: uuid aaaaaaaaaaaaaaaadevtmpfs, name , dev 41100 [ 63.031510][ T5195] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 198) [ 63.057094][ T5199] netlink: 14 bytes leftover after parsing attributes in process `syz.5.453'. [ 63.062174][ T5181] kernel write not supported for file /286/attr/keycreate (pid: 5181 comm: kworker/1:7) [ 63.164318][ T5205] loop2: detected capacity change from 0 to 512 [ 63.294872][ T5177] ================================================================== [ 63.302994][ T5177] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 63.311001][ T5177] [ 63.313321][ T5177] write to 0xffff8881076b621c of 4 bytes by task 5173 on cpu 1: [ 63.320957][ T5177] xas_set_mark+0x12b/0x140 [ 63.325463][ T5177] tag_pages_for_writeback+0xe3/0x2e0 [ 63.330837][ T5177] writeback_iter+0x332/0x7c0 [ 63.335507][ T5177] __mpage_writepages+0x8a/0x1370 [ 63.340523][ T5177] fat_writepages+0x26/0x30 [ 63.345020][ T5177] do_writepages+0x1b9/0x300 [ 63.349605][ T5177] file_write_and_wait_range+0x178/0x2f0 [ 63.355257][ T5177] simple_fsync_noflush+0x42/0x120 [ 63.360364][ T5177] fat_file_fsync+0x7e/0x100 [ 63.364943][ T5177] vfs_fsync_range+0xc5/0xe0 [ 63.369532][ T5177] generic_file_write_iter+0x1a3/0x1f0 [ 63.374983][ T5177] iter_file_splice_write+0x6a0/0xa60 [ 63.380351][ T5177] direct_splice_actor+0x156/0x280 [ 63.385460][ T5177] splice_direct_to_actor+0x2f9/0x680 [ 63.390829][ T5177] do_splice_direct+0x119/0x1a0 [ 63.395690][ T5177] do_sendfile+0x37d/0x640 [ 63.400101][ T5177] __x64_sys_sendfile64+0x105/0x150 [ 63.405297][ T5177] x64_sys_call+0x2e27/0x3050 [ 63.409975][ T5177] do_syscall_64+0x136/0x3c0 [ 63.414564][ T5177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.420627][ T5177] [ 63.422941][ T5177] read to 0xffff8881076b621c of 4 bytes by task 5177 on cpu 0: [ 63.430481][ T5177] file_write_and_wait_range+0x130/0x2f0 [ 63.436117][ T5177] simple_fsync_noflush+0x42/0x120 [ 63.441227][ T5177] fat_file_fsync+0x7e/0x100 [ 63.445810][ T5177] vfs_fsync_range+0xc5/0xe0 [ 63.450400][ T5177] generic_file_write_iter+0x1a3/0x1f0 [ 63.455850][ T5177] iter_file_splice_write+0x6a0/0xa60 [ 63.461223][ T5177] direct_splice_actor+0x156/0x280 [ 63.466328][ T5177] splice_direct_to_actor+0x2f9/0x680 [ 63.471695][ T5177] do_splice_direct+0x119/0x1a0 [ 63.476539][ T5177] do_sendfile+0x37d/0x640 [ 63.480952][ T5177] __x64_sys_sendfile64+0x105/0x150 [ 63.486173][ T5177] x64_sys_call+0x2e27/0x3050 [ 63.491192][ T5177] do_syscall_64+0x136/0x3c0 [ 63.495779][ T5177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.501664][ T5177] [ 63.503972][ T5177] value changed: 0x02000021 -> 0x04000021 [ 63.509670][ T5177] [ 63.511975][ T5177] Reported by Kernel Concurrency Sanitizer on: [ 63.518108][ T5177] CPU: 0 UID: 0 PID: 5177 Comm: syz.6.447 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.527294][ T5177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.537426][ T5177] ================================================================== [ 63.556509][ T5199] loop5: detected capacity change from 0 to 512 [ 63.616593][ T5199] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 63.626259][ T5199] EXT4-fs (loop5): orphan cleanup on readonly fs [ 63.634637][ T5199] EXT4-fs warning (device loop5): ext4_enable_quotas:7284: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.656436][ T5199] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 63.667783][ T5199] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #16: comm syz.5.453: inode has both inline data and extents flags [ 63.692714][ T5199] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 63.695654][ T5199] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.453: couldn't read orphan inode 16 (err -117) [ 63.705616][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 63.705765][ C0] EXT4-fs (loop5): initial error at time 1787091993: ext4_orphan_get:1399: inode 16 [ 63.705977][ C0] EXT4-fs (loop5): last error at time 1787091993: ext4_orphan_get:1399: inode 16 [ 63.751673][ T5199] loop5: lost filesystem error report for type 5 error -117 [ 68.881114][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 68.881188][ T28] audit: type=1400 audit(1787091998.384:1247): avc: denied { write } for pid=5224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.918599][ T28] audit: type=1400 audit(1787091998.414:1248): avc: denied { write } for pid=5235 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.608172][ T28] audit: type=1400 audit(1787091999.114:1249): avc: denied { write } for pid=5238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.631244][ T28] audit: type=1400 audit(1787091999.134:1250): avc: denied { write } for pid=5249 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.362772][ C1] ip6_tunnel: K xmit: Local address not yet configured!