last executing test programs: 4m26.993409114s ago: executing program 4 (id=673): syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000380)=ANY=[@ANYBLOB="636865636b3d7374726963742c636865636b3d7374886963742c73686f776173736f632c6e6f726f636b2c6e6f726f636b2c6e6f726f636b2c6d61703d61636f726e2c6e6f726f636b2c00"], 0x2, 0x553, &(0x7f0000000b00)="$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") socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x840, r0}, 0x38) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x46) recvmmsg(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) write(r3, &(0x7f0000000300)='sub:evt:mod:', 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x18, 0x32, 0x1, 0x0, 0x0, {0x7a}, [{0x4}]}, 0x18}}, 0x0) syz_clone(0x20243400, 0x0, 0x1b, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{0x0}], 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x3}, [], {0x4, 0x1}, [], {0x20, 0x6}, {0x20, 0x2}}, 0x1c, 0x2) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001040)=ANY=[@ANYBLOB="1b000000000000"], 0x50) syz_emit_ethernet(0xbbf, &(0x7f0000004840)={@link_local, @remote, @void, {@x25={0x805, {0x3, 0x5, 0x9, "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"}}}}, 0x0) ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) 4m26.475295028s ago: executing program 4 (id=676): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8521, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100002, 0x4, 0x0, 0x5, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ptrace$pokeuser(0x6, 0x0, 0x388, 0x7ffffffffd) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xf}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x45, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x2f) ptrace$pokeuser(0x6, 0x0, 0x388, 0x5) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fstat(0xffffffffffffffff, 0x0) 4m25.797665215s ago: executing program 4 (id=685): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f00000009c0)='\\', 0x1, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback={0x44}, 0x5}, 0x1c) 4m25.670914028s ago: executing program 4 (id=686): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50e, &(0x7f0000000200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0xdc) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x41) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x100000001) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0) write(r1, &(0x7f0000001340)="f03af296bdee9b641dc9837b87a7ba86421942f59f3284a0eee4ee5623649403a3055fd0df6ef90f95e041e667f957a6dbdea5cb580d", 0x36) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000008510000001000000950000000000000018400000020000000000000000850000008a000000950000000078a09b3300"/72], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x706}, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100, 0x400000, 0x0, 0x0, 0x80000001, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x9cf}, 0x0, 0xfffffffffffffffe, r1, 0xb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000001280)={0x3, 0x400, 0x6, 0x4, 0x30000}) sendmsg$NFT_BATCH(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) getuid() mount$cgroup(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20000, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000001240)}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) readv(r0, &(0x7f0000001300)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) write(r4, &(0x7f0000000140)='\x00\x00\x00', 0x3) 4m25.433519835s ago: executing program 4 (id=692): syz_io_uring_setup(0x263f, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x5}, 0x8012, 0x4, 0x1, 0x2, 0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) chmod(0x0, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x42, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0xffffffffffffffff) 4m25.069975074s ago: executing program 4 (id=693): pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r0) socket$kcm(0xa, 0x922000000003, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x176) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) set_mempolicy(0x6, 0x0, 0xe0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wg2\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x2, 0x8}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000280)='tracefs\x00', 0x28c0028, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) r2 = socket$kcm(0x10, 0x2, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x7fffffff, @loopback, 0x3}, 0x1c) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f", 0x46}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000640)=""/247, 0xf7}, {&(0x7f0000000740)=""/236, 0xec}, {&(0x7f0000000840)=""/238, 0xee}, {&(0x7f0000000940)=""/156, 0x9c}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x5, &(0x7f0000001a80)=""/189, 0xbd}, 0xfffffffb}, {{&(0x7f0000001b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001bc0)=""/109, 0x6d}], 0x1, &(0x7f0000001c80)=""/251, 0xfb}, 0x5}, {{&(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001e00)=""/131, 0x83}, {&(0x7f0000001ec0)=""/11, 0xb}, {&(0x7f0000001f00)=""/210, 0xd2}, {&(0x7f0000002000)=""/147, 0x93}], 0x4, &(0x7f0000002100)=""/192, 0xc0}, 0x1}, {{&(0x7f00000021c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002300)=[{&(0x7f0000002240)=""/153, 0x99}], 0x1, &(0x7f0000002340)=""/106, 0x6a}, 0x6}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002580)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)}, {&(0x7f0000002540)=""/1, 0x1}], 0x3, &(0x7f00000025c0)=""/27, 0x1b}, 0x5}, {{&(0x7f0000002600)=@xdp, 0x80, &(0x7f0000002880)=[{&(0x7f0000002680)=""/232, 0xe8}, {&(0x7f0000002780)=""/208, 0xd0}], 0x2, &(0x7f00000028c0)=""/241, 0xf1}, 0x7}, {{&(0x7f00000029c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000004000)=[{&(0x7f0000002a40)=""/177, 0xb1}, {&(0x7f0000002b00)=""/66, 0x42}, {&(0x7f0000002b80)=""/99, 0x63}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/169, 0xa9}, {&(0x7f0000003cc0)=""/199, 0xc7}, {&(0x7f0000003dc0)=""/41, 0x29}, {&(0x7f0000003e00)=""/96, 0x60}, {&(0x7f0000003e80)=""/238, 0xee}, {&(0x7f0000003f80)=""/119, 0x77}], 0xa}, 0x4}, {{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f00000040c0)=""/4096, 0x1000}], 0x1, &(0x7f0000005100)=""/4096, 0x1000}, 0x5}], 0x8, 0xd7da377f4e8873e2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r4, 0x0) setreuid(r4, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f00000001c0)=@filename='./tracefs/instances/foo\x00', r4, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000c3000400100100009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x0, 0x32}, 0x28) 4m25.016104695s ago: executing program 32 (id=693): pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r0) socket$kcm(0xa, 0x922000000003, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x176) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) set_mempolicy(0x6, 0x0, 0xe0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wg2\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x2, 0x8}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000280)='tracefs\x00', 0x28c0028, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) r2 = socket$kcm(0x10, 0x2, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x7fffffff, @loopback, 0x3}, 0x1c) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f", 0x46}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000640)=""/247, 0xf7}, {&(0x7f0000000740)=""/236, 0xec}, {&(0x7f0000000840)=""/238, 0xee}, {&(0x7f0000000940)=""/156, 0x9c}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x5, &(0x7f0000001a80)=""/189, 0xbd}, 0xfffffffb}, {{&(0x7f0000001b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001bc0)=""/109, 0x6d}], 0x1, &(0x7f0000001c80)=""/251, 0xfb}, 0x5}, {{&(0x7f0000001d80)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001e00)=""/131, 0x83}, {&(0x7f0000001ec0)=""/11, 0xb}, {&(0x7f0000001f00)=""/210, 0xd2}, {&(0x7f0000002000)=""/147, 0x93}], 0x4, &(0x7f0000002100)=""/192, 0xc0}, 0x1}, {{&(0x7f00000021c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002300)=[{&(0x7f0000002240)=""/153, 0x99}], 0x1, &(0x7f0000002340)=""/106, 0x6a}, 0x6}, {{&(0x7f00000023c0)=@xdp, 0x80, &(0x7f0000002580)=[{&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)}, {&(0x7f0000002540)=""/1, 0x1}], 0x3, &(0x7f00000025c0)=""/27, 0x1b}, 0x5}, {{&(0x7f0000002600)=@xdp, 0x80, &(0x7f0000002880)=[{&(0x7f0000002680)=""/232, 0xe8}, {&(0x7f0000002780)=""/208, 0xd0}], 0x2, &(0x7f00000028c0)=""/241, 0xf1}, 0x7}, {{&(0x7f00000029c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000004000)=[{&(0x7f0000002a40)=""/177, 0xb1}, {&(0x7f0000002b00)=""/66, 0x42}, {&(0x7f0000002b80)=""/99, 0x63}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/169, 0xa9}, {&(0x7f0000003cc0)=""/199, 0xc7}, {&(0x7f0000003dc0)=""/41, 0x29}, {&(0x7f0000003e00)=""/96, 0x60}, {&(0x7f0000003e80)=""/238, 0xee}, {&(0x7f0000003f80)=""/119, 0x77}], 0xa}, 0x4}, {{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f00000040c0)=""/4096, 0x1000}], 0x1, &(0x7f0000005100)=""/4096, 0x1000}, 0x5}], 0x8, 0xd7da377f4e8873e2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r4, 0x0) setreuid(r4, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f00000001c0)=@filename='./tracefs/instances/foo\x00', r4, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000900000000230000000000001820000056a0bdec02581e2ea77a0d7897207539d18547280bc8df96f986a585924b85c766a0a14a80208dd97cca0e0acb6468c18eccec117cdb31e690710e1bb3a911db406e2b3323b0441a4b36fa0d67499ed2ca8f87abf0b02c5d4b62f8617c8edb6caea7bcfe83813ef66021f24aee0369577cede8f8055195f9bbb02fe3351b1ddad72975710909e46686ebfcb17798f6bc0aecaae0eedb9a9435277f36bb70ffab67f38dc84f3074fec2e7d5e1d971a889943bafc3ba048bc881d6bf17595b959cc8404551993a14c2481745af8c4c6dffbed83de112d19701d6554a6f62c31336be6e5ddf376387f29c076547dc52eee9c8fae7e0722c36b1b152df0c3e2377f4eec2650f5c1b819a8ff522feccbf238c4bfdf99269e71d22ff3e1384d1895aa22f", @ANYRES32=r5, @ANYBLOB="0000000000000000c3000400100100009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x0, 0x32}, 0x28) 4m12.83378364s ago: executing program 2 (id=799): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x388, 0x7ffffffffd) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xf}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed000062030000000000003e440000000000007a0a00fe00ffffffd703000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x45, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x2f) ptrace$pokeuser(0x6, r0, 0x388, 0x5) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fstat(0xffffffffffffffff, 0x0) 4m12.140966078s ago: executing program 2 (id=808): syz_io_uring_setup(0x263f, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x5}, 0x8012, 0x4, 0x1, 0x2, 0x1, 0x80, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) chmod(0x0, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x42, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0xffffffffffffffff) 4m11.920285114s ago: executing program 2 (id=811): eventfd2(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000012640)={'#! ', './mnt'}, 0x9) ftruncate(r0, 0xf) 4m11.842343136s ago: executing program 2 (id=812): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200000c0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xc0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10c43b, 0x0, 0xfffffffe, 0x6, 0x10000, 0xefd, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x100, 0x81, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890c, &(0x7f0000000000)) r7 = add_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e", 0x52f, r7) setsockopt(r0, 0x11b, 0x9, 0x0, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) setxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0xa4d31519f3f4be27) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x1) 4m11.800086917s ago: executing program 2 (id=813): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x3eb, 0x4}, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000600), 0xe}, 0x0, 0x2, 0x790, 0x0, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2d, 0x2, 0x0) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs_dir/buffer_size_kb\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000840)=""/253, 0xfd}], 0x1) 4m10.747065454s ago: executing program 2 (id=819): bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x3, 0x4, &(0x7f0000000400)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x33}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x17}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0xdd7, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38) 4m10.746611954s ago: executing program 33 (id=819): bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x3, 0x4, &(0x7f0000000400)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x33}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x17}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0xdd7, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38) 3m55.727171744s ago: executing program 1 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1ff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfbfffffc, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf254c0000000c00a600feffffffffffffff0e0001006e657464657673696d0000000f0002006e6574646576736951d40000"], 0x40}, 0x1, 0x0, 0x0, 0x600000c4}, 0x40080) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000800)={[{@minixdf}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@noauto_da_alloc}, {@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x47e, &(0x7f0000001340)="$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") ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) creat(0x0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="07030500e3a20200140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="030d0459e6deccba1831222893ad5526ae76bcd60e160c71759ccb2e8f34500fc784249116f035088ba5dd7b58f800329eb6f13d1eee42e4aedfb11b133e6b31d608c705c5e3d0510f00b168f33bdb83dc314fe98e1299c07925674f7ff7ee8b8cfe91c5b7dc102f837828511d8e67413ab0b77a9ceddcaafb288c0a494adb6be9be27e273bbd82a7c2cbdd64232cea958523de1eea81eef93b488c58380687838edf0dc289e08391018cf004dbcb2a740f3"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f000038b000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0xffffc000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000080)=0x6, 0x4) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5af, 0x48}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "eb64105d8e26f5335821352d12"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e28f3a1c77"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000004000002000001000000000000", @ANYRES32=0x0, @ANYBLOB="938000006882000008000500", @ANYRES32=r3, @ANYBLOB="140012800c0001006d616376746170000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x26008884}, 0x4054) write(0xffffffffffffffff, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0xffffffff, @empty, 0x800}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)=@delchain={0x3c, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x1ffe6, 0x5}, {0xfff1, 0xffff}, {0xfffa, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffff01}, @TCA_CHAIN={0x8, 0xb, 0x10}, @TCA_RATE={0x6, 0x5, {0xe5, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) 3m55.145122339s ago: executing program 1 (id=984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) (async) syz_open_dev$MSR(0x0, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000001140)="$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") (async) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000200), 0x4) (async) unshare(0x28000600) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x8, 0x0) (async) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x401, 0x800) (async) msgrcv(r4, 0x0, 0x0, 0x969edffe39095fd4, 0x3800) (async) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 3m53.011867665s ago: executing program 1 (id=1002): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) setns(0xc9, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) timer_create(0xfffffffc, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x25dfdbff, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20, 0x0, 0x5e}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x7, 0xffffffffffffffff}, 0xfffffffe, 0x6e6bc0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) write(r0, &(0x7f0000000000)='3', 0x4e) socket(0x1, 0x5, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0) 3m52.8290437s ago: executing program 1 (id=1005): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x6, 0x1}, 0x0, 0x0, 0xc40, 0x8, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e00c681337", @ANYRES32=r2], 0x1000f) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x804, 0x0) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x4, 0x0, 0x0, 0x40005, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x400, 0x0, 0x0, 0x0, 0xe45}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000175627ad7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000800008b350600140012804b00010065010001006e000200000080"], 0x34}, 0x1, 0x0, 0x0, 0x15}, 0xc094) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r4}) 3m52.194310826s ago: executing program 1 (id=1011): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000012640)={'#! ', './mnt'}, 0x9) ftruncate(r0, 0xf) 3m52.106094678s ago: executing program 1 (id=1013): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="070000000000001100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) capset(&(0x7f0000000400)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000ec0)={0x380, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x79}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0xbc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf3}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff907d}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x76}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000000}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x255}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x785e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33b1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}]}]}, 0x380}, 0x1, 0x0, 0x0, 0x20040044}, 0xbf82f86e4477d5c1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00-\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$inet6(0xa, 0x80003, 0xff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x6, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m52.01134195s ago: executing program 34 (id=1013): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="070000000000001100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) capset(&(0x7f0000000400)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d40)={&(0x7f0000000ec0)={0x380, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xf4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x79}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0xbc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf3}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff907d}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x76}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000000}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x255}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x785e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33b1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}]}]}, 0x380}, 0x1, 0x0, 0x0, 0x20040044}, 0xbf82f86e4477d5c1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00-\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$inet6(0xa, 0x80003, 0xff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x6, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.390824401s ago: executing program 0 (id=3694): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup(r0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x24002094) 3.157976907s ago: executing program 0 (id=3697): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) unshare(0x6020400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000900000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffff7, r3, 0x4, 0x1c6f}, 0x38) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2.791799767s ago: executing program 0 (id=3702): socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2.530031814s ago: executing program 0 (id=3708): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) (async) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) (async) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) (async) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) (async) getpid() (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x68903, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f0000000300)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@noload}, {@noblock_validity}, {@noblock_validity}, {@grpjquota}]}, 0x1, 0x625, &(0x7f0000000800)="$eJzs3c1vFOUfAPDvbLfvv58txKh4kCbGQKK0tIIhxkS4G4IvN71UWgihUEJrYpHEkuhN48WDiScP4l9hJPHqP+DBiydDQozhIIbImpmdbaftbunb7pT280mGzsvuPN8Bvn2effZ5ZgLYt0bSPyoRhyLiWhIxVDhWjfzgSP119/+6eT5dkqjV3v0ziZufJovFcyX5zwP5m/8diiR9+8GJH9eUO7dw4/LkzMz09WyrN9+7cOPYpSuTF6cvTl+deG3i1MkTJ0+NH9/+9RUvJ+L97799mIz/8NvZJE7Ho676zvS6Vr+3d1slp2WPRK3uQXF/GsipbZ57t/h7aPkvtq4/kmpp4bBJF/L/j90R8WwMRVfhX3MoPn+71OCAtqol0aijgH0n2VL+9+18IECHNdoBjc/2zT4Hr1Vpc6sE6IR7Z+odAPXc746IRv5X876zvqxvYOB+sqKfJ4mI7fXM1aVl/PLz2c/SJVr0wwHtsXirN++3X13/J1luDkdftjVwv7Ii/yuFJd3/zhbLH1m1Lf+hcxZvRcRzef3fE5vK/5FC/n+4xfLlPwAAAAAAAOycO2ci4pVm4/8qS+N/epqM/xmMiNM7UP7jv/+r3M1Xkh0oDii4dybijabjf5fG+A535Vv/z8YDdCcXLs1MH4+IpyLiaHT3ptvjq85bHCF87MuD37Qqvzj+L13S8htjAfMz3a2umog7NTk/ud3rBiLu3Yp4Phv/ezjfs3L8T1r/J03q/zS/r22wjIMv3T7X6tjj8x9ol9p3EUea1v/Lze10bWz+yrWxuab35xjL2gNjjVZBw3IL4IVPvhpsVf46+e8uEtBmaf0/sH7+9ybF+/XMbe78PRHx6kK11ur4Vtv/Pcl7XY3zpz6enJ+/Ph7Rk7y1dv/E5mKGvaqRD418SfP/6Ivr9/8ttf8LedgfEYurT96ih+6ZR4O/t4pH+x/Kk+b/1Pr1//DK+n/zKxO3h39qVf65DdX/J7I6/Wi+R/8fFK29H8eaLByIpglaSrgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ISrRMT/IqmMLq1XKqOjEYMR8XQMVGZm5+ZfvjD70dWp9Fj2/P9K40m/Q/XtpPH8/+HC9sTK7f60rAMR8XVXf3Z89PzszFTZFw8AAAAAAAAAAAAAAAAAAAC7xGA257/Wu3r+f+qPrrKjA9qumv9czvee0mIBOivP/y8+2PQ7a707Hw3QSdWyAwBKs/H8725rHEDntc7/Bw9rmY6GA3SQ9j/sX1vMf18Pwh6g/of9aoN9en3tjgMog/ofAAAAAAD2lAOH7/yaRMTi6/3ZEoXJvwb7w95WKTsAoDTG8ML+VZ0tOwKgLD7jA8nS2j9NJ/u3Hv2ftCcgAAAAAAAAAAAAAGCNI4fM/4f9av35/8b2w162zvz/LPmzRwM8rG3g5cCTpvWjP9T9sNet8xnfA79gn3hcbW/+PwAAAAAAAAAAAADsAn03Lk/OzExfn1t48lbe3B1hbG5lcXJXhLHdlf6IWNrzqD1ldUdE+Ve6cyvViMrGXty4BUeJMZf8ewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFjyXwAAAP//CHogwg==") 2.343865148s ago: executing program 6 (id=3711): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r0, &(0x7f0000010440)=[{&(0x7f0000029480)=""/167, 0xa7}], 0x1, 0xc03, 0x0) 2.254385251s ago: executing program 6 (id=3713): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000"], 0x128}}, 0x0) 2.183418623s ago: executing program 7 (id=3714): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r1, &(0x7f0000000000), 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[0x0]) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x242, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfbfffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) preadv(0xffffffffffffffff, &(0x7f0000010440)=[{&(0x7f0000029480)=""/167, 0xa7}], 0x1, 0xc03, 0x0) 2.112047795s ago: executing program 6 (id=3715): setitimer(0x1, 0x0, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0) 2.037881817s ago: executing program 6 (id=3716): syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54535153e1098319, @perf_config_ext={0x90, 0xfffffffffffff359}, 0x0, 0x80000000, 0x1, 0x9, 0x800000, 0x43, 0x2, 0x0, 0x100, 0x0, 0xfffffffffffffffd}, 0x0, 0x400d, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000001c0)={0x3, &(0x7f0000000300)=[{0xf50, 0x8, 0xa, 0xa}, {0x5, 0xc0, 0x7a, 0xfffffffb}, {0xffff, 0x4, 0xda, 0x1}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x2, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x28) listen(r1, 0x5) write(r0, &(0x7f0000000300)='*:', 0x2) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2240, 0x0) copy_file_range(r2, 0x0, r2, 0x0, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x102030405060708, {}, 0xfe}, 0x18) connect$can_j1939(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a6ddf0000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038780000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000004c000380480000800800034000000002180002801400028008000180fffffffc"], 0x10c}}, 0x0) 2.037244907s ago: executing program 5 (id=3717): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x200000000000011, 0x2, 0xd) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, 0x0, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x1, 0x1, 0x3}}, {@canfd={0xd, {{0x1, 0x1}, 0x25, 0x0, 0x0, 0x0, "0df2ac31adff3af1aae26071376071a5a506a4f8afccb7d827e1733feb132283de1856210000000000000000000000000000000000008000"}}}}, 0x0) 1.92031261s ago: executing program 6 (id=3718): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x8b}, 0x11ece8, 0x1222, 0xfffffffb, 0x8, 0x2, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000002060300000000000000000007000000140007800800114000000000080012400000ffff0500010006000040050005000200000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x91c, 0x4) write(r0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000200)=""/146, 0x92, 0x2021, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x800, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x1856, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x14080}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) r5 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x9, 0x3, 0x320, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x21}, @private1, [0xffffff00, 0xffff00, 0xffffff00], [0xffffffff, 0xff], 'vlan0\x00', 'team0\x00', {}, {}, 0x1d, 0x5, 0x6, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xd79c, 0x9, 0xc, 'snmp\x00', {0x400}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1d}, @ipv4={'\x00', '\xff\xff', @multicast2}, [0xff, 0xffffffff, 0xff, 0xffffffff], [0x0, 0xff000000, 0xffffff00], 'macvlan0\x00', 'syz_tun\x00', {0xff}, {}, 0x2f, 0x80, 0x1, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x5, 0x2d7, 0xc2, 'syz0\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x24, 0x25, 0x301, 0x70bd28, 0x25dfdbfc, {0x15}, [@typed={0x10, 0x11e, 0x0, 0x0, @binary="2c766d4f5d919d97ab015a3c"}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c841}, 0x0) 1.827876102s ago: executing program 5 (id=3719): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e21, 0x80000, @local}, 0x1c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.711680425s ago: executing program 5 (id=3721): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x1, 0x1, 0x3}}, {@canfd={0xd, {{0x1, 0x1}, 0x25, 0x0, 0x0, 0x0, "0df2ac31adff3af1aae26071376071a5a506a4f8afccb7d827e1733feb132283de1856210000000000000000000000000000000000008000"}}}}, 0x0) 1.566732829s ago: executing program 5 (id=3723): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r1, &(0x7f0000000000), 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[0x0]) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x242, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfbfffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r6, &(0x7f0000010440)=[{&(0x7f0000029480)=""/167, 0xa7}], 0x1, 0xc03, 0x0) 1.566623649s ago: executing program 0 (id=3724): fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1, 0x8000000000005, 0x5, 0x80006, 0xfffffffe, 0x7}) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x7fffffffffffffff, 0x590}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)) connect$can_bcm(r1, &(0x7f0000000000), 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 928.696505ms ago: executing program 7 (id=3729): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x200000000000011, 0x2, 0xd) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, 0x0, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x1, 0x1, 0x3}}, {@canfd={0xd, {{0x1, 0x1}, 0x25, 0x0, 0x0, 0x0, "0df2ac31adff3af1aae26071376071a5a506a4f8afccb7d827e1733feb132283de1856210000000000000000000000000000000000008000"}}}}, 0x0) 858.034398ms ago: executing program 3 (id=3730): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xffffffff) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 687.913442ms ago: executing program 3 (id=3731): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000001000300000000000400000000000000100004000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x0) mount(0x0, &(0x7f0000000100)='./dbg\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x33) lseek(r1, 0x800, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 643.646083ms ago: executing program 7 (id=3732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), 0x0}, 0x20) 537.291036ms ago: executing program 3 (id=3733): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 455.101838ms ago: executing program 7 (id=3734): r0 = socket$rxrpc(0x21, 0x2, 0x2) listen(r0, 0xa) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) 420.561969ms ago: executing program 3 (id=3735): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800"], 0x128}}, 0x0) 352.598131ms ago: executing program 7 (id=3736): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 267.745613ms ago: executing program 3 (id=3737): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101100, 0x24) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 193.963295ms ago: executing program 5 (id=3738): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xffffffff) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 166.104095ms ago: executing program 7 (id=3739): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x158}}, 0x0) 119.974386ms ago: executing program 3 (id=3740): syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54535153e1098319, @perf_config_ext={0x90, 0xfffffffffffff359}, 0x0, 0x80000000, 0x1, 0x9, 0x800000, 0x43, 0x2, 0x0, 0x100, 0x0, 0xfffffffffffffffd}, 0x0, 0x400d, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000001c0)={0x3, &(0x7f0000000300)=[{0xf50, 0x8, 0xa, 0xa}, {0x5, 0xc0, 0x7a, 0xfffffffb}, {0xffff, 0x4, 0xda, 0x1}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x2, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x28) listen(r1, 0x5) write(r0, &(0x7f0000000300)='*:', 0x2) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2240, 0x0) copy_file_range(r2, 0x0, r2, 0x0, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x102030405060708, {}, 0xfe}, 0x18) connect$can_j1939(r3, &(0x7f0000000180)={0x1d, r4, 0x0, {0x0, 0xee}, 0xff}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 104.859867ms ago: executing program 0 (id=3741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 51.106888ms ago: executing program 6 (id=3742): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x200000000000011, 0x2, 0xd) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, 0x0, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x1, 0x1, 0x3}}, {@canfd={0xd, {{0x1, 0x1}, 0x25, 0x0, 0x0, 0x0, "0df2ac31adff3af1aae26071376071a5a506a4f8afccb7d827e1733feb132283de1856210000000000000000000000000000000000008000"}}}}, 0x0) 0s ago: executing program 5 (id=3743): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x200000000000011, 0x2, 0xd) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@multicast, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x1, 0x1, 0x3}}, {@canfd={0xd, {{0x1, 0x1}, 0x25, 0x0, 0x0, 0x0, "0df2ac31adff3af1aae26071376071a5a506a4f8afccb7d827e1733feb132283de1856210000000000000000000000000000000000008000"}}}}, 0x0) kernel console output (not intermixed with test programs): _alloc_lru_noprof+0x7f/0x3f0 [ 228.861812][T10202] ? sock_alloc_inode+0x36/0xf0 [ 228.861846][T10202] ? sock_alloc_inode+0x36/0xf0 [ 228.861907][T10202] ? selinux_socket_create+0xfd/0x180 [ 228.861949][T10202] ? __pfx_sock_alloc_inode+0x10/0x10 [ 228.861975][T10202] sock_alloc_inode+0x36/0xf0 [ 228.862000][T10202] alloc_inode+0x40/0x170 [ 228.862045][T10202] __sock_create+0x121/0x580 [ 228.862110][T10202] ? trace_event_raw_event_sys_enter+0x195/0x1f0 [ 228.862176][T10202] __sys_socket+0xaf/0x180 [ 228.862286][T10202] __x64_sys_socket+0x3f/0x50 [ 228.862324][T10202] x64_sys_call+0x246e/0x2550 [ 228.862364][T10202] do_syscall_64+0x112/0x360 [ 228.862420][T10202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.862478][T10202] RIP: 0033:0x7f9c2798e159 [ 228.862538][T10202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.862568][T10202] RSP: 002b:00007f9c263e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 228.862605][T10202] RAX: ffffffffffffffda RBX: 00007f9c27c15fa0 RCX: 00007f9c2798e159 [ 228.862627][T10202] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 228.862654][T10202] RBP: 00007f9c27a25024 R08: 0000000000000000 R09: 0000000000000000 [ 228.862681][T10202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.862697][T10202] R13: 00007f9c27c16038 R14: 00007f9c27c15fa0 R15: 00007ffc01bcfe68 [ 228.862722][T10202] [ 228.862856][T10202] socket: no more sockets [ 229.493609][T10208] loop7: detected capacity change from 0 to 512 [ 229.494512][T10208] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.511894][T10208] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 229.791269][T10208] EXT4-fs (loop7): failed to open journal device unknown-block(0,3) -ENXIO [ 230.115500][ T29] audit: type=1400 audit(486.088:1885): avc: denied { create } for pid=10237 comm="syz.7.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 230.126911][ T29] audit: type=1400 audit(486.088:1886): avc: denied { bind } for pid=10237 comm="syz.7.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 230.127048][ T29] audit: type=1400 audit(486.088:1887): avc: denied { listen } for pid=10237 comm="syz.7.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 230.578733][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2081'. [ 230.578799][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2081'. [ 230.666006][T10247] loop3: detected capacity change from 0 to 512 [ 230.707823][T10247] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.737997][T10253] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2083'. [ 230.772307][ T29] audit: type=1400 audit(486.738:1888): avc: denied { write } for pid=10242 comm="syz.3.2080" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.926437][T10259] netlink: 'syz.0.2085': attribute type 28 has an invalid length. [ 230.926545][T10259] netlink: 'syz.0.2085': attribute type 6 has an invalid length. [ 231.092144][ T29] audit: type=1400 audit(487.058:1889): avc: denied { write } for pid=10242 comm="syz.3.2080" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.253880][T10272] ./dev/sda1: Can't lookup blockdev [ 231.396246][T10277] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2093'. [ 231.645766][ T29] audit: type=1400 audit(487.618:1890): avc: denied { accept } for pid=10284 comm="syz.6.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 231.672589][ T29] audit: type=1326 audit(487.638:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10284 comm="syz.6.2096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 231.672728][ T29] audit: type=1326 audit(487.638:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10284 comm="syz.6.2096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 231.672796][ T29] audit: type=1326 audit(487.638:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10284 comm="syz.6.2096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 231.672958][ T29] audit: type=1326 audit(487.638:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10284 comm="syz.6.2096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 231.879698][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.121650][T10301] loop3: detected capacity change from 0 to 128 [ 232.142643][T10301] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 232.260154][T10307] ./dev/sda1: Can't lookup blockdev [ 232.299237][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.496050][T10313] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2108'. [ 232.524664][T10315] FAULT_INJECTION: forcing a failure. [ 232.524664][T10315] name failslab, interval 1, probability 0, space 0, times 0 [ 232.524729][T10315] CPU: 1 UID: 0 PID: 10315 Comm: syz.3.2109 Not tainted syzkaller #0 PREEMPT(lazy) [ 232.524831][T10315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.524848][T10315] Call Trace: [ 232.524859][T10315] [ 232.524871][T10315] __dump_stack+0x1d/0x30 [ 232.524908][T10315] dump_stack_lvl+0x95/0xd0 [ 232.524954][T10315] dump_stack+0x15/0x1b [ 232.524978][T10315] should_fail_ex+0x262/0x280 [ 232.525002][T10315] should_failslab+0x8c/0xb0 [ 232.525112][T10315] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 232.525210][T10315] ? sock_alloc_inode+0x36/0xf0 [ 232.525236][T10315] ? sock_alloc_inode+0x36/0xf0 [ 232.525271][T10315] ? selinux_socket_create+0xfd/0x180 [ 232.525313][T10315] ? __pfx_sock_alloc_inode+0x10/0x10 [ 232.525372][T10315] sock_alloc_inode+0x36/0xf0 [ 232.525421][T10315] alloc_inode+0x40/0x170 [ 232.525524][T10315] __sock_create+0x121/0x580 [ 232.525559][T10315] ? trace_event_raw_event_sys_enter+0x195/0x1f0 [ 232.525658][T10315] __sys_socket+0xaf/0x180 [ 232.525740][T10315] __x64_sys_socket+0x3f/0x50 [ 232.525824][T10315] x64_sys_call+0x246e/0x2550 [ 232.525865][T10315] do_syscall_64+0x112/0x360 [ 232.525905][T10315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.525940][T10315] RIP: 0033:0x7f5b6e57e159 [ 232.526054][T10315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.526086][T10315] RSP: 002b:00007f5b6cfd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 232.526135][T10315] RAX: ffffffffffffffda RBX: 00007f5b6e805fa0 RCX: 00007f5b6e57e159 [ 232.526154][T10315] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 232.526176][T10315] RBP: 00007f5b6e615024 R08: 0000000000000000 R09: 0000000000000000 [ 232.526198][T10315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.526277][T10315] R13: 00007f5b6e806038 R14: 00007f5b6e805fa0 R15: 00007ffdf8f186b8 [ 232.526301][T10315] [ 232.750755][T10315] socket: no more sockets [ 233.300169][T10337] ./dev/sda1: Can't lookup blockdev [ 233.322388][T10339] loop6: detected capacity change from 0 to 128 [ 233.351748][T10339] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.435877][ T6354] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.652884][T10349] bridge0: port 3(syz_tun) entered blocking state [ 233.652971][T10349] bridge0: port 3(syz_tun) entered disabled state [ 233.677974][T10349] syz_tun: entered allmulticast mode [ 233.692675][T10349] syz_tun: entered promiscuous mode [ 233.693654][T10349] bridge0: port 3(syz_tun) entered blocking state [ 233.693767][T10349] bridge0: port 3(syz_tun) entered forwarding state [ 233.770770][T10354] FAULT_INJECTION: forcing a failure. [ 233.770770][T10354] name failslab, interval 1, probability 0, space 0, times 0 [ 233.770904][T10354] CPU: 0 UID: 0 PID: 10354 Comm: syz.0.2123 Not tainted syzkaller #0 PREEMPT(lazy) [ 233.770946][T10354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.770963][T10354] Call Trace: [ 233.770972][T10354] [ 233.771008][T10354] __dump_stack+0x1d/0x30 [ 233.771046][T10354] dump_stack_lvl+0x95/0xd0 [ 233.771150][T10354] dump_stack+0x15/0x1b [ 233.771278][T10354] should_fail_ex+0x262/0x280 [ 233.771369][T10354] should_failslab+0x8c/0xb0 [ 233.771590][T10354] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 233.771715][T10354] ? sock_alloc_inode+0x36/0xf0 [ 233.771750][T10354] ? sock_alloc_inode+0x36/0xf0 [ 233.771855][T10354] ? selinux_socket_create+0xfd/0x180 [ 233.771952][T10354] ? __pfx_sock_alloc_inode+0x10/0x10 [ 233.772116][T10354] sock_alloc_inode+0x36/0xf0 [ 233.772198][T10354] alloc_inode+0x40/0x170 [ 233.772322][T10354] __sock_create+0x121/0x580 [ 233.772429][T10354] ? trace_event_raw_event_sys_enter+0x195/0x1f0 [ 233.772583][T10354] __sys_socket+0xaf/0x180 [ 233.772679][T10354] __x64_sys_socket+0x3f/0x50 [ 233.772813][T10354] x64_sys_call+0x246e/0x2550 [ 233.772968][T10354] do_syscall_64+0x112/0x360 [ 233.773072][T10354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.773185][T10354] RIP: 0033:0x7f691696e159 [ 233.773257][T10354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.773329][T10354] RSP: 002b:00007f69153c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 233.773433][T10354] RAX: ffffffffffffffda RBX: 00007f6916bf5fa0 RCX: 00007f691696e159 [ 233.773487][T10354] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 233.773539][T10354] RBP: 00007f6916a05024 R08: 0000000000000000 R09: 0000000000000000 [ 233.773591][T10354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.773643][T10354] R13: 00007f6916bf6038 R14: 00007f6916bf5fa0 R15: 00007ffd2e9d28b8 [ 233.773717][T10354] [ 233.791875][T10354] socket: no more sockets [ 234.442359][T10370] loop6: detected capacity change from 0 to 128 [ 234.481807][T10370] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.635381][T10375] ./dev/sda1: Can't lookup blockdev [ 234.716421][ T6354] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.039138][T10385] loop6: detected capacity change from 0 to 512 [ 235.042964][T10385] EXT4-fs: Invalid want_extra_isize 7 [ 235.459952][T10389] syz.6.2139 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 235.586342][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 235.586396][ T29] audit: type=1326 audit(491.428:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.6.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 235.586523][ T29] audit: type=1326 audit(491.428:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.6.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 235.586578][ T29] audit: type=1326 audit(491.428:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.6.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 235.586781][ T29] audit: type=1326 audit(491.428:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.6.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 235.586895][ T29] audit: type=1326 audit(491.428:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.6.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 235.587051][ T29] audit: type=1326 audit(491.448:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.6.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 235.587108][ T29] audit: type=1326 audit(491.448:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.6.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 235.587248][ T29] audit: type=1326 audit(491.448:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.6.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 235.587296][ T29] audit: type=1326 audit(491.448:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.6.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 235.587448][ T29] audit: type=1326 audit(491.448:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10387 comm="syz.6.2139" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 238.299921][T10401] loop7: detected capacity change from 0 to 128 [ 238.331454][T10401] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.534467][ T7301] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.671306][T10418] netlink: 'syz.0.2151': attribute type 1 has an invalid length. [ 239.160911][T10432] loop7: detected capacity change from 0 to 512 [ 239.178773][T10432] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 239.211050][T10432] EXT4-fs (loop7): 1 truncate cleaned up [ 239.220255][T10432] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.070970][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.640515][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 240.640584][ T29] audit: type=1400 audit(496.608:1980): avc: denied { write } for pid=10462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.726805][T10488] ./dev/sda1: Can't lookup blockdev [ 240.768439][ T29] audit: type=1400 audit(496.738:1981): avc: denied { write } for pid=10493 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.904554][ T29] audit: type=1400 audit(496.878:1982): avc: denied { name_bind } for pid=10489 comm="syz.6.2172" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 240.979740][T10503] FAULT_INJECTION: forcing a failure. [ 240.979740][T10503] name failslab, interval 1, probability 0, space 0, times 0 [ 240.979868][T10503] CPU: 1 UID: 0 PID: 10503 Comm: syz.7.2176 Not tainted syzkaller #0 PREEMPT(lazy) [ 240.979912][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.979934][T10503] Call Trace: [ 240.979945][T10503] [ 240.979955][T10503] __dump_stack+0x1d/0x30 [ 240.980041][T10503] dump_stack_lvl+0x95/0xd0 [ 240.980075][T10503] dump_stack+0x15/0x1b [ 240.980230][T10503] should_fail_ex+0x262/0x280 [ 240.980259][T10503] should_failslab+0x8c/0xb0 [ 240.980317][T10503] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 240.980361][T10503] ? sock_alloc_inode+0x36/0xf0 [ 240.980388][T10503] ? sock_alloc_inode+0x36/0xf0 [ 240.980412][T10503] ? selinux_socket_create+0xfd/0x180 [ 240.980509][T10503] ? __pfx_sock_alloc_inode+0x10/0x10 [ 240.980617][T10503] sock_alloc_inode+0x36/0xf0 [ 240.980647][T10503] alloc_inode+0x40/0x170 [ 240.980765][T10503] __sock_create+0x121/0x580 [ 240.980800][T10503] ? trace_event_raw_event_sys_enter+0x195/0x1f0 [ 240.980916][T10503] __sys_socket+0xaf/0x180 [ 240.980945][T10503] __x64_sys_socket+0x3f/0x50 [ 240.981012][T10503] x64_sys_call+0x246e/0x2550 [ 240.981051][T10503] do_syscall_64+0x112/0x360 [ 240.981123][T10503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.981154][T10503] RIP: 0033:0x7fcf3d58e159 [ 240.981221][T10503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.981345][T10503] RSP: 002b:00007fcf3bfe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 240.981370][T10503] RAX: ffffffffffffffda RBX: 00007fcf3d815fa0 RCX: 00007fcf3d58e159 [ 240.981390][T10503] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 240.981412][T10503] RBP: 00007fcf3d625024 R08: 0000000000000000 R09: 0000000000000000 [ 240.981501][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.981517][T10503] R13: 00007fcf3d816038 R14: 00007fcf3d815fa0 R15: 00007ffff63cb4b8 [ 240.981548][T10503] [ 241.214586][ T29] audit: type=1400 audit(497.188:1983): avc: denied { create } for pid=10489 comm="syz.6.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 241.255419][T10510] ipt_rpfilter: unknown options [ 241.262989][T10503] socket: no more sockets [ 241.270670][T10510] loop3: detected capacity change from 0 to 128 [ 241.278839][T10510] vfat: Unknown parameter '' [ 241.722237][ T29] audit: type=1326 audit(497.688:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10534 comm="syz.6.2185" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 241.750334][ T29] audit: type=1326 audit(497.728:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10534 comm="syz.6.2185" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 241.784110][ T29] audit: type=1326 audit(497.758:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10534 comm="syz.6.2185" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 241.808540][T10535] ./dev/sda1: Can't lookup blockdev [ 241.810069][ T29] audit: type=1326 audit(497.758:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10534 comm="syz.6.2185" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 241.810154][ T29] audit: type=1326 audit(497.758:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10534 comm="syz.6.2185" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 241.810277][ T29] audit: type=1326 audit(497.758:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10534 comm="syz.6.2185" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 242.861056][T10579] x_tables: duplicate underflow at hook 3 [ 243.467352][T10611] xt_connbytes: Forcing CT accounting to be enabled [ 243.766864][T10624] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.12800.0), cmd(3) [ 244.655674][T10666] ./dev/sda1: Can't lookup blockdev [ 244.697936][T10669] ./dev/sda1: Can't lookup blockdev [ 244.845231][T10665] x_tables: duplicate underflow at hook 3 [ 244.857031][T10676] loop6: detected capacity change from 0 to 128 [ 244.865506][T10676] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 244.899042][ T3674] udevd[3674]: incorrect ext4 checksum on /dev/loop6 [ 245.261277][T10694] ./dev/sda1: Can't lookup blockdev [ 245.357318][T10696] ./dev/sda1: Can't lookup blockdev [ 245.469086][T10699] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2254'. [ 245.696632][T10699] loop6: detected capacity change from 0 to 1024 [ 245.708096][T10699] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 245.751931][T10699] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 2: comm syz.6.2254: lblock 2 mapped to illegal pblock 2 (length 1) [ 245.752006][T10699] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 245.766538][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 245.766570][ C1] EXT4-fs (loop6): initial error at time 501: ext4_map_blocks:790: inode 3: block 2 [ 245.766652][ C1] EXT4-fs (loop6): last error at time 501: ext4_map_blocks:790: inode 3: block 2 [ 245.806750][T10699] __quota_error: 103 callbacks suppressed [ 245.806922][T10699] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 245.807089][T10699] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 48: comm syz.6.2254: lblock 0 mapped to illegal pblock 48 (length 1) [ 245.807138][T10699] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 245.839312][T10699] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 245.839379][T10699] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.2254: Failed to acquire dquot type 0 [ 245.839517][T10699] loop6: lost filesystem error report for type 5 error -117 [ 245.878830][T10699] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 245.878898][T10699] loop6: lost filesystem error report for type 5 error -117 [ 245.886833][T10699] EXT4-fs error (device loop6): ext4_evict_inode:269: inode #11: comm syz.6.2254: mark_inode_dirty error [ 245.886876][T10699] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 245.897652][T10699] EXT4-fs warning (device loop6): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 245.897748][T10699] EXT4-fs (loop6): 1 orphan inode deleted [ 245.898779][T10699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.920700][ T5739] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 245.935973][ T5739] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 245.936075][ T5739] EXT4-fs error (device loop6): ext4_release_dquot:7105: comm kworker/u8:10: Failed to release dquot type 0 [ 246.112846][ T6354] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.117837][ T6354] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 246.117936][ T6354] loop6: lost filesystem error report for type 5 error -117 [ 246.121851][ T6354] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 246.121921][ T6354] loop6: lost filesystem error report for type 5 error -117 [ 246.128851][ T6354] EXT4-fs error (device loop6): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 246.128939][ T6354] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 246.151786][ T6354] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 246.151883][ T6354] loop6: lost filesystem error report for type 5 error -117 [ 246.325828][T10721] ./dev/sda1: Can't lookup blockdev [ 246.394829][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2264'. [ 246.488827][T10726] ./dev/sda1: Can't lookup blockdev [ 247.175069][T10762] ./dev/sda1: Can't lookup blockdev [ 247.281801][ T29] audit: type=1400 audit(503.248:2093): avc: denied { write } for pid=10745 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.379463][ T29] audit: type=1326 audit(503.348:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10774 comm="syz.0.2282" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691696e159 code=0x7ffc0000 [ 247.406479][ T29] audit: type=1326 audit(503.378:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10774 comm="syz.0.2282" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691696e159 code=0x7ffc0000 [ 247.456272][ T29] audit: type=1326 audit(503.428:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10774 comm="syz.0.2282" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691696e159 code=0x7ffc0000 [ 247.456376][ T29] audit: type=1326 audit(503.428:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10774 comm="syz.0.2282" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691696e159 code=0x7ffc0000 [ 247.509680][ T29] audit: type=1326 audit(503.458:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10774 comm="syz.0.2282" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f691696e159 code=0x7ffc0000 [ 247.509869][ T29] audit: type=1326 audit(503.458:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10774 comm="syz.0.2282" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691696e159 code=0x7ffc0000 [ 247.601596][T10771] x_tables: duplicate underflow at hook 3 [ 248.608457][T10821] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2295'. [ 248.905904][T10828] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2298'. [ 249.018099][T10833] loop6: detected capacity change from 0 to 512 [ 249.046542][T10833] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 249.063789][T10833] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.2299: iget: bad i_size value: 38620345925642 [ 249.063848][T10833] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 249.083156][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 249.083221][ C0] EXT4-fs (loop6): initial error at time 505: ext4_orphan_get:1403: inode 15 [ 249.083317][ C0] EXT4-fs (loop6): last error at time 505: ext4_orphan_get:1403: inode 15 [ 249.134068][T10833] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2299: couldn't read orphan inode 15 (err -117) [ 249.134146][T10833] loop6: lost filesystem error report for type 5 error -117 [ 249.145503][T10833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.460384][T10833] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.2299: bg 0: block 5: invalid block bitmap [ 249.475874][T10833] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 249.476000][T10833] EXT4-fs (loop6): This should not happen!! Data will be lost [ 249.476000][T10833] [ 249.476120][T10833] EXT4-fs (loop6): Total free blocks count 0 [ 249.476159][T10833] EXT4-fs (loop6): Free/Dirty block details [ 249.476194][T10833] EXT4-fs (loop6): free_blocks=0 [ 249.476225][T10833] EXT4-fs (loop6): dirty_blocks=1 [ 249.476286][T10833] EXT4-fs (loop6): Block reservation details [ 249.476316][T10833] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 249.574328][T10833] syz.6.2299 (10833) used greatest stack depth: 9104 bytes left [ 249.699000][ T6354] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.915819][T10863] x_tables: duplicate underflow at hook 3 [ 250.538551][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2322'. [ 250.761055][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2325'. [ 250.816242][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 250.816328][ T29] audit: type=1326 audit(506.788:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz.6.2326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 250.816393][ T29] audit: type=1326 audit(506.788:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz.6.2326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 250.816517][ T29] audit: type=1326 audit(506.788:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz.6.2326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 250.816582][ T29] audit: type=1326 audit(506.788:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz.6.2326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 250.816715][ T29] audit: type=1326 audit(506.788:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz.6.2326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 250.849834][ T29] audit: type=1326 audit(506.798:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz.6.2326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 250.849883][ T29] audit: type=1326 audit(506.798:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz.6.2326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 250.849946][ T29] audit: type=1326 audit(506.798:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz.6.2326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 250.849993][ T29] audit: type=1326 audit(506.798:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz.6.2326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 250.850107][ T29] audit: type=1326 audit(506.798:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10897 comm="syz.6.2326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2798e159 code=0x7ffc0000 [ 251.565126][T10928] loop6: detected capacity change from 0 to 512 [ 251.575598][T10928] EXT4-fs: Invalid want_extra_isize 7 [ 251.724581][T10931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2334'. [ 252.294873][T10972] loop7: detected capacity change from 0 to 512 [ 252.304885][T10972] EXT4-fs: Invalid want_extra_isize 7 [ 252.539289][T10977] x_tables: duplicate underflow at hook 3 [ 252.658792][T10989] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2351'. [ 252.999147][T11008] FAULT_INJECTION: forcing a failure. [ 252.999147][T11008] name failslab, interval 1, probability 0, space 0, times 0 [ 252.999253][T11008] CPU: 0 UID: 0 PID: 11008 Comm: syz.0.2356 Not tainted syzkaller #0 PREEMPT(lazy) [ 252.999297][T11008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.999364][T11008] Call Trace: [ 252.999406][T11008] [ 252.999439][T11008] __dump_stack+0x1d/0x30 [ 252.999535][T11008] dump_stack_lvl+0x95/0xd0 [ 252.999617][T11008] dump_stack+0x15/0x1b [ 252.999750][T11008] should_fail_ex+0x262/0x280 [ 252.999827][T11008] ? selinux_netlbl_sock_genattr+0x88/0x260 [ 253.000015][T11008] should_failslab+0x8c/0xb0 [ 253.000133][T11008] __kmalloc_cache_noprof+0x7a/0x400 [ 253.000248][T11008] ? selinux_netlbl_sock_genattr+0x88/0x260 [ 253.000366][T11008] ? selinux_netlbl_sk_security_free+0x18b/0x1d0 [ 253.000558][T11008] selinux_netlbl_sock_genattr+0x88/0x260 [ 253.000681][T11008] selinux_netlbl_socket_post_create+0x66/0x100 [ 253.000799][T11008] selinux_mptcp_add_subflow+0xbd/0xd0 [ 253.000977][T11008] security_mptcp_add_subflow+0x3c/0x70 [ 253.001092][T11008] mptcp_subflow_create_socket+0xe3/0x500 [ 253.001187][T11008] __mptcp_nmpc_sk+0xb5/0x3d0 [ 253.001346][T11008] mptcp_setsockopt+0x1763/0x24f0 [ 253.001460][T11008] sock_common_setsockopt+0x69/0x80 [ 253.001603][T11008] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 253.001697][T11008] __sys_setsockopt+0x184/0x200 [ 253.001832][T11008] __x64_sys_setsockopt+0x64/0x80 [ 253.001955][T11008] x64_sys_call+0x248f/0x2550 [ 253.002088][T11008] do_syscall_64+0x112/0x360 [ 253.002197][T11008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.002293][T11008] RIP: 0033:0x7f691696e159 [ 253.002359][T11008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.002483][T11008] RSP: 002b:00007f69153c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 253.002623][T11008] RAX: ffffffffffffffda RBX: 00007f6916bf5fa0 RCX: 00007f691696e159 [ 253.002681][T11008] RDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000005 [ 253.002725][T11008] RBP: 00007f6916a05024 R08: 0000000000000000 R09: 0000000000000000 [ 253.002823][T11008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.002870][T11008] R13: 00007f6916bf6038 R14: 00007f6916bf5fa0 R15: 00007ffd2e9d28b8 [ 253.002965][T11008] [ 253.502954][T11021] loop3: detected capacity change from 0 to 512 [ 253.512456][T11021] EXT4-fs: Invalid want_extra_isize 7 [ 253.766569][T11032] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2365'. [ 254.057506][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2371'. [ 254.296489][T11055] loop7: detected capacity change from 0 to 512 [ 254.300574][T11055] EXT4-fs: Invalid want_extra_isize 7 [ 254.487177][T11065] loop7: detected capacity change from 0 to 512 [ 254.498139][T11065] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 254.541321][T11065] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.2380: iget: bad i_size value: 38620345925642 [ 254.541392][T11065] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 254.555447][T11065] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.2380: couldn't read orphan inode 15 (err -117) [ 254.555494][T11065] loop7: lost filesystem error report for type 5 error -117 [ 254.580050][T11065] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.780851][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.128511][T11090] x_tables: duplicate underflow at hook 3 [ 255.385206][T11095] random: crng reseeded on system resumption [ 255.845097][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 255.845209][ T29] audit: type=1400 audit(511.818:2327): avc: denied { write } for pid=11106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.123589][ T29] audit: type=1400 audit(512.098:2328): avc: denied { write } for pid=11144 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.932086][ T29] audit: type=1400 audit(512.898:2329): avc: denied { write } for pid=11157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.056033][T11195] x_tables: duplicate underflow at hook 3 [ 257.215721][ T29] audit: type=1400 audit(513.188:2330): avc: denied { write } for pid=11200 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.981452][ T29] audit: type=1400 audit(513.948:2331): avc: denied { write } for pid=11207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.248418][ T29] audit: type=1400 audit(514.218:2332): avc: denied { write } for pid=11249 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.716673][T11263] loop6: detected capacity change from 0 to 4096 [ 258.759351][T11263] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.795247][ T29] audit: type=1400 audit(514.758:2333): avc: denied { write } for pid=11259 comm="syz.6.2436" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 259.420926][T11293] x_tables: duplicate underflow at hook 3 [ 259.617357][ T6354] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.910735][T11309] loop6: detected capacity change from 0 to 512 [ 259.919297][T11309] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 259.939809][T11309] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.2453: iget: bad i_size value: 38620345925642 [ 259.939883][T11309] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 259.945262][T11309] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2453: couldn't read orphan inode 15 (err -117) [ 259.945349][T11309] loop6: lost filesystem error report for type 5 error -117 [ 259.949171][T11309] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.006583][ T29] audit: type=1400 audit(515.928:2334): avc: denied { write } for pid=11307 comm="syz.6.2453" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.309843][T11309] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.2453: bg 0: block 5: invalid block bitmap [ 260.324310][T11309] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 260.324354][T11309] EXT4-fs (loop6): This should not happen!! Data will be lost [ 260.324354][T11309] [ 260.324389][T11309] EXT4-fs (loop6): Total free blocks count 0 [ 260.324410][T11309] EXT4-fs (loop6): Free/Dirty block details [ 260.324426][T11309] EXT4-fs (loop6): free_blocks=0 [ 260.324446][T11309] EXT4-fs (loop6): dirty_blocks=1 [ 260.324468][T11309] EXT4-fs (loop6): Block reservation details [ 260.324486][T11309] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 260.422813][ T6354] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.607496][T11324] 9p: Bad value for 'rfdno' [ 260.627672][ T29] audit: type=1400 audit(516.598:2335): avc: denied { ioctl } for pid=11318 comm="syz.0.2458" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 260.682886][T11321] ip6gretap2: entered allmulticast mode [ 260.988176][T11341] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2468'. [ 261.220116][T11350] 9p: Bad value for 'rfdno' [ 262.194310][T11369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2480'. [ 262.211394][T11366] loop7: detected capacity change from 0 to 512 [ 262.212121][T11366] EXT4-fs: Invalid want_extra_isize 7 [ 262.254264][T11366] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2479'. [ 262.450231][T11379] 9p: Bad value for 'rfdno' [ 262.881932][T11396] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2493'. [ 262.996202][ T29] audit: type=1326 audit(518.968:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.3.2495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6e57e159 code=0x7ffc0000 [ 263.001351][T11399] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2494'. [ 263.033921][ T29] audit: type=1326 audit(519.008:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.3.2495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6e57e159 code=0x7ffc0000 [ 263.067944][ T29] audit: type=1326 audit(519.038:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.3.2495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6e57e159 code=0x7ffc0000 [ 263.068071][ T29] audit: type=1326 audit(519.038:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.3.2495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6e57e159 code=0x7ffc0000 [ 263.118903][ T29] audit: type=1326 audit(519.068:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.3.2495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5b6e57e159 code=0x7ffc0000 [ 263.119032][ T29] audit: type=1326 audit(519.068:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.3.2495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6e57e159 code=0x7ffc0000 [ 263.119173][ T29] audit: type=1326 audit(519.068:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.3.2495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6e57e159 code=0x7ffc0000 [ 263.120789][ T29] audit: type=1326 audit(519.098:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.3.2495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6e57e159 code=0x7ffc0000 [ 263.120970][ T29] audit: type=1326 audit(519.098:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.3.2495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b6e57e159 code=0x7ffc0000 [ 263.123037][ T29] audit: type=1326 audit(519.098:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11400 comm="syz.3.2495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5b6e57e159 code=0x7ffc0000 [ 263.797601][T11425] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2505'. [ 263.797659][T11425] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2505'. [ 264.982714][T11466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2521'. [ 265.116889][T11473] x_tables: duplicate underflow at hook 3 [ 266.237566][T11489] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2527'. [ 266.297112][T11484] loop3: detected capacity change from 0 to 128 [ 266.504861][T11497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2533'. [ 266.977759][T11521] loop7: detected capacity change from 0 to 512 [ 266.978537][T11521] EXT4-fs: Invalid want_extra_isize 7 [ 267.675402][T11532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2546'. [ 267.688045][T11531] ./dev/sda1: Can't lookup blockdev [ 267.779226][T11544] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2550'. [ 268.154051][T11568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2561'. [ 269.197483][T11592] loop7: detected capacity change from 0 to 512 [ 269.198310][T11592] EXT4-fs: Invalid want_extra_isize 7 [ 270.074864][T11626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2582'. [ 270.448575][T11638] x_tables: duplicate underflow at hook 3 [ 270.717869][T11659] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2596'. [ 271.214596][T11676] loop7: detected capacity change from 0 to 512 [ 271.219626][T11676] EXT4-fs: Invalid want_extra_isize 7 [ 271.236535][T11676] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2603'. [ 272.124038][T11712] loop3: detected capacity change from 0 to 512 [ 272.139750][T11712] EXT4-fs: Invalid want_extra_isize 7 [ 272.193155][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2615'. [ 273.071932][T11739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2627'. [ 274.223566][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2642'. [ 274.278972][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2643'. [ 274.399610][T11783] xt_NFQUEUE: number of total queues is 0 [ 275.511559][T11825] loop3: detected capacity change from 0 to 512 [ 275.526267][T11825] EXT4-fs: Invalid want_extra_isize 7 [ 275.540539][T11825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2663'. [ 275.707656][T11829] loop7: detected capacity change from 0 to 512 [ 275.718978][T11829] EXT4-fs: Invalid want_extra_isize 7 [ 276.462189][T11850] x_tables: duplicate underflow at hook 3 [ 277.021284][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2676'. [ 277.653345][T11887] loop6: detected capacity change from 0 to 512 [ 277.678265][T11887] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.701362][T11887] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.2688: iget: bad i_size value: 38620345925642 [ 277.701443][T11887] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 277.714449][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 277.714484][ C0] EXT4-fs (loop6): initial error at time 533: ext4_orphan_get:1403: inode 15 [ 277.714533][ C0] EXT4-fs (loop6): last error at time 533: ext4_orphan_get:1403: inode 15 [ 277.759173][T11887] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.2688: couldn't read orphan inode 15 (err -117) [ 277.759273][T11887] loop6: lost filesystem error report for type 5 error -117 [ 277.778879][T11887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.814034][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 277.814099][ T29] audit: type=1400 audit(533.788:2478): avc: denied { write } for pid=11885 comm="syz.6.2688" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.162072][T11887] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.2688: bg 0: block 5: invalid block bitmap [ 278.176009][T11887] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 278.176058][T11887] EXT4-fs (loop6): This should not happen!! Data will be lost [ 278.176058][T11887] [ 278.176094][T11887] EXT4-fs (loop6): Total free blocks count 0 [ 278.176111][T11887] EXT4-fs (loop6): Free/Dirty block details [ 278.176130][T11887] EXT4-fs (loop6): free_blocks=0 [ 278.176150][T11887] EXT4-fs (loop6): dirty_blocks=1 [ 278.176169][T11887] EXT4-fs (loop6): Block reservation details [ 278.176187][T11887] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 278.328013][ T6354] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.279533][T11951] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2716'. [ 279.460977][T11964] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 279.937960][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2730'. [ 280.088279][T11986] xt_NFQUEUE: number of total queues is 0 [ 281.236799][T12013] 9p: Bad value for 'wfdno' [ 281.407610][T12025] loop7: detected capacity change from 0 to 512 [ 281.419809][T12025] EXT4-fs: Invalid want_extra_isize 7 [ 281.829141][T12051] 9p: Bad value for 'wfdno' [ 282.308200][T12076] 9p: Bad value for 'wfdno' [ 282.432891][T12081] loop6: detected capacity change from 0 to 512 [ 282.447552][T12081] EXT4-fs: Invalid want_extra_isize 7 [ 282.847638][T12096] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 282.867198][T12102] 9p: Bad value for 'rfdno' [ 282.932060][T12104] xt_NFQUEUE: number of total queues is 0 [ 283.064393][T12110] loop3: detected capacity change from 0 to 512 [ 283.076044][T12110] EXT4-fs: Invalid want_extra_isize 7 [ 283.629148][T12151] 9p: Bad value for 'rfdno' [ 284.197245][T12188] 9p: Bad value for 'rfdno' [ 284.313061][T12192] loop3: detected capacity change from 0 to 512 [ 284.322707][T12192] EXT4-fs: Invalid want_extra_isize 7 [ 286.064870][T12254] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2853'. [ 286.238455][T12257] loop3: detected capacity change from 0 to 512 [ 286.249143][T12257] EXT4-fs: Invalid want_extra_isize 7 [ 287.070369][T12288] loop3: detected capacity change from 0 to 512 [ 287.086904][T12288] EXT4-fs: Invalid want_extra_isize 7 [ 287.196089][T12292] x_tables: duplicate underflow at hook 3 [ 287.237250][T12298] 9pnet_fd: Insufficient options for proto=fd [ 288.261377][T12319] loop3: detected capacity change from 0 to 512 [ 288.270841][T12319] EXT4-fs: Invalid want_extra_isize 7 [ 288.614509][ T29] audit: type=1400 audit(544.578:2479): avc: denied { create } for pid=12337 comm="syz.7.2892" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 288.662582][ T29] audit: type=1400 audit(544.628:2480): avc: denied { unlink } for pid=7301 comm="syz-executor" name="file0" dev="tmpfs" ino=2073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 288.928306][T12348] x_tables: duplicate underflow at hook 3 [ 289.022650][T12351] loop6: detected capacity change from 0 to 512 [ 289.027407][T12351] EXT4-fs: Invalid want_extra_isize 7 [ 289.975294][T12376] loop7: detected capacity change from 0 to 512 [ 290.198586][T12376] EXT4-fs (loop7): orphan cleanup on readonly fs [ 290.211348][T12376] EXT4-fs warning (device loop7): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 290.237957][T12376] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 290.246150][T12376] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz.7.2908: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 290.246296][T12376] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 290.265180][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 290.265211][ C0] EXT4-fs (loop7): last error at time 546: ext4_ext_check_inode:521: inode 13 [ 290.296844][T12376] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.2908: couldn't read orphan inode 13 (err -117) [ 290.296948][T12376] loop7: lost filesystem error report for type 5 error -117 [ 290.314499][T12376] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.843981][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.448946][T12418] loop6: detected capacity change from 0 to 512 [ 292.458784][T12418] EXT4-fs: Invalid want_extra_isize 7 [ 292.559952][ T5739] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.696719][ T5739] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.835800][ T5739] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.950920][T12432] x_tables: duplicate underflow at hook 3 [ 293.107977][T12442] loop7: detected capacity change from 0 to 512 [ 293.130798][T12442] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.155562][T12442] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.2931: iget: bad i_size value: 38620345925642 [ 293.155705][T12442] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 293.168718][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 293.168749][ C1] EXT4-fs (loop7): initial error at time 549: ext4_orphan_get:1403: inode 15 [ 293.168819][ C1] EXT4-fs (loop7): last error at time 549: ext4_orphan_get:1403: inode 15 [ 293.210593][T12442] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.2931: couldn't read orphan inode 15 (err -117) [ 293.210734][T12442] loop7: lost filesystem error report for type 5 error -117 [ 293.228356][T12442] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.258749][ T5739] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.320269][ T29] audit: type=1400 audit(549.288:2481): avc: denied { write } for pid=12440 comm="syz.7.2931" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 293.458877][T12394] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.458969][T12394] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.459572][T12394] bridge_slave_0: entered allmulticast mode [ 293.482216][T12394] bridge_slave_0: entered promiscuous mode [ 293.563485][T12394] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.563585][T12394] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.564189][T12394] bridge_slave_1: entered allmulticast mode [ 293.582509][T12394] bridge_slave_1: entered promiscuous mode [ 293.861158][T12456] loop6: detected capacity change from 0 to 1024 [ 293.876733][T12456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 293.876918][T12456] EXT4-fs: Ignoring removed i_version option [ 293.877044][T12456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 293.929994][T12442] EXT4-fs error (device loop7): ext4_validate_block_bitmap:436: comm syz.7.2931: bg 0: block 5: invalid block bitmap [ 293.961228][T12456] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.965461][T12394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.002995][T12442] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 294.003056][T12442] EXT4-fs (loop7): This should not happen!! Data will be lost [ 294.003056][T12442] [ 294.022644][ T5739] bridge_slave_1: left allmulticast mode [ 294.022728][ T5739] bridge_slave_1: left promiscuous mode [ 294.045031][T12442] EXT4-fs (loop7): Total free blocks count 0 [ 294.045127][T12442] EXT4-fs (loop7): Free/Dirty block details [ 294.045163][T12442] EXT4-fs (loop7): free_blocks=0 [ 294.045190][T12442] EXT4-fs (loop7): dirty_blocks=1 [ 294.045220][T12442] EXT4-fs (loop7): Block reservation details [ 294.045252][T12442] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 294.058330][ T29] audit: type=1400 audit(550.018:2482): avc: denied { write } for pid=12455 comm="syz.6.2935" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 294.058526][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.064581][T12456] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.2935: bg 0: block 112: padding at end of block bitmap is not set [ 294.075087][T12456] EXT4-fs (loop6): Remounting filesystem read-only [ 294.135702][T12456] EXT4-fs (loop6): shut down requested (0) [ 294.159450][ T5739] bridge_slave_0: left allmulticast mode [ 294.159512][ T5739] bridge_slave_0: left promiscuous mode [ 294.159725][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.201973][T12457] random: crng reseeded on system resumption [ 294.419496][ T29] audit: type=1400 audit(550.388:2483): avc: denied { write } for pid=12461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.492860][ T29] audit: type=1400 audit(550.458:2484): avc: denied { write } for pid=12473 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.552031][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.202097][ T5739] bond1 (unregistering): Released all slaves [ 295.233520][ T5739] bond2 (unregistering): Released all slaves [ 295.245538][ T5739] bond0 (unregistering): Released all slaves [ 295.256363][ T5739] bond3 (unregistering): Released all slaves [ 295.307858][T12394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.363665][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 295.488094][ T5739] veth1_macvtap: left promiscuous mode [ 295.488167][ T5739] veth0_macvtap: left promiscuous mode [ 295.488288][ T5739] veth1_vlan: left promiscuous mode [ 295.491714][ T5739] veth0_vlan: left promiscuous mode [ 295.541876][ T6354] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 296.056685][T12501] loop7: detected capacity change from 0 to 4096 [ 296.100931][T12501] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.168698][ T29] audit: type=1400 audit(552.138:2485): avc: denied { write } for pid=12500 comm="syz.7.2945" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 296.278667][ T5739] team0 (unregistering): Port device team_slave_1 removed [ 296.302494][ T5739] team0 (unregistering): Port device team_slave_0 removed [ 296.371414][T12508] x_tables: duplicate underflow at hook 3 [ 296.513002][T12394] team0: Port device team_slave_0 added [ 296.555827][T12394] team0: Port device team_slave_1 added [ 296.687421][T12394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.687528][T12394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.687660][T12394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.721513][T12394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.727104][T12394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.727216][T12394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.992035][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.007897][T12394] hsr_slave_0: entered promiscuous mode [ 297.016930][T12394] hsr_slave_1: entered promiscuous mode [ 297.018109][T12394] debugfs: 'hsr0' already exists in 'hsr' [ 297.018145][T12394] Cannot create hsr debugfs directory [ 297.247197][ T5739] IPVS: stop unused estimator thread 0... [ 297.486705][ T29] audit: type=1400 audit(553.448:2486): avc: denied { write } for pid=12510 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.634658][ T29] audit: type=1400 audit(553.598:2487): avc: denied { write } for pid=12543 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.967830][T12558] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2961'. [ 297.971863][T12394] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 297.998624][T12394] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 298.012324][T12394] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 298.043764][T12394] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 298.055184][T12394] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 298.082804][T12394] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 298.091833][T12394] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 298.105673][T12394] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 298.391275][T12394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.488134][T12394] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.520163][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.520336][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.577613][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.577753][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.592927][ T29] audit: type=1400 audit(554.558:2488): avc: denied { write } for pid=12555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.809205][ T29] audit: type=1400 audit(554.778:2489): avc: denied { write } for pid=12598 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.910170][T12599] x_tables: duplicate underflow at hook 3 [ 299.598645][ T29] audit: type=1400 audit(555.568:2490): avc: denied { write } for pid=12614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.849103][ T29] audit: type=1400 audit(555.818:2491): avc: denied { write } for pid=12650 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.926987][T12394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.592246][ T29] audit: type=1400 audit(556.558:2492): avc: denied { write } for pid=12658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.624717][T12394] veth0_vlan: entered promiscuous mode [ 300.668077][T12394] veth1_vlan: entered promiscuous mode [ 300.829177][T12394] veth0_macvtap: entered promiscuous mode [ 300.845270][ T29] audit: type=1400 audit(556.808:2493): avc: denied { write } for pid=12687 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.882081][T12394] veth1_macvtap: entered promiscuous mode [ 301.197176][T12394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.253040][T12394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.314115][ T5739] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.317670][ T38] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.317780][ T38] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.317992][ T38] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.376450][T12701] loop3: detected capacity change from 0 to 512 [ 301.392940][T12701] EXT4-fs: Invalid want_extra_isize 7 [ 301.876251][T12719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3006'. [ 302.123160][T12728] loop7: detected capacity change from 0 to 512 [ 302.152422][T12728] EXT4-fs (loop7): orphan cleanup on readonly fs [ 302.167808][T12728] EXT4-fs warning (device loop7): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 302.185716][T12728] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 302.194835][T12728] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz.7.3008: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 302.194927][T12728] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 302.213447][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 302.213486][ C0] EXT4-fs (loop7): last error at time 558: ext4_ext_check_inode:521: inode 13 [ 302.245008][T12728] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.3008: couldn't read orphan inode 13 (err -117) [ 302.245063][T12728] loop7: lost filesystem error report for type 5 error -117 [ 302.259894][T12728] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 302.636270][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.720275][ T4057] syz_tun (unregistering): left allmulticast mode [ 302.720338][ T4057] syz_tun (unregistering): left promiscuous mode [ 302.720457][ T4057] bridge0: port 3(syz_tun) entered disabled state [ 303.041369][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.041504][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 303.122123][T12746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3013'. [ 303.172051][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.172124][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 303.257514][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3011'. [ 303.385989][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3011'. [ 303.454393][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.454495][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 303.503341][ T38] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.503474][ T38] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.514104][ T38] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.514271][ T38] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.618828][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.618926][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 303.766502][ T29] audit: type=1400 audit(559.738:2494): avc: denied { write } for pid=12749 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.817040][T12760] loop7: detected capacity change from 0 to 1024 [ 303.824222][T12760] EXT4-fs: Ignoring removed nomblk_io_submit option [ 303.824277][T12760] EXT4-fs: Ignoring removed i_version option [ 303.824373][T12760] EXT4-fs: Ignoring removed nomblk_io_submit option [ 303.949170][T12760] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.967975][T12760] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.3017: bg 0: block 112: padding at end of block bitmap is not set [ 303.988886][ T29] audit: type=1400 audit(559.938:2495): avc: denied { write } for pid=12758 comm="syz.7.3017" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 304.012397][T12760] EXT4-fs (loop7): Remounting filesystem read-only [ 304.030381][T12760] EXT4-fs (loop7): shut down requested (0) [ 304.147188][ T29] audit: type=1400 audit(560.108:2496): avc: denied { write } for pid=12779 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.640426][ T31] bridge_slave_1: left allmulticast mode [ 304.640544][ T31] bridge_slave_1: left promiscuous mode [ 304.640786][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.672989][ T31] bridge_slave_0: left allmulticast mode [ 304.673042][ T31] bridge_slave_0: left promiscuous mode [ 304.675966][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.795722][ T29] audit: type=1400 audit(560.768:2497): avc: denied { write } for pid=12782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.928785][ T29] audit: type=1400 audit(560.898:2498): avc: denied { write } for pid=12800 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.329896][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.351990][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.379575][ T31] bond0 (unregistering): Released all slaves [ 305.391129][ T31] bond1 (unregistering): Released all slaves [ 305.418530][ T31] bond2 (unregistering): Released all slaves [ 305.449213][ T31] bond3 (unregistering): Released all slaves [ 306.047652][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 306.192401][ T31] hsr_slave_0: left promiscuous mode [ 306.219724][ T31] hsr_slave_1: left promiscuous mode [ 306.249793][T12837] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3035'. [ 306.320282][ T31] veth1_macvtap: left promiscuous mode [ 306.320388][ T31] veth0_macvtap: left promiscuous mode [ 306.343273][ T31] veth1_vlan: left promiscuous mode [ 306.343359][ T31] veth0_vlan: left promiscuous mode [ 306.747265][ T31] team0 (unregistering): Port device team_slave_1 removed [ 306.770731][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3043'. [ 306.782942][ T31] team0 (unregistering): Port device team_slave_0 removed [ 306.928613][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3044'. [ 306.932213][ T29] audit: type=1400 audit(562.898:2499): avc: denied { ioctl } for pid=12856 comm="syz.5.3044" path="socket:[39220]" dev="sockfs" ino=39220 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 306.986031][T12724] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.986126][T12724] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.004125][T12724] bridge_slave_0: entered allmulticast mode [ 307.011951][T12724] bridge_slave_0: entered promiscuous mode [ 307.023722][T12724] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.023809][T12724] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.040014][T12724] bridge_slave_1: entered allmulticast mode [ 307.048692][T12724] bridge_slave_1: entered promiscuous mode [ 307.147218][T12724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.201300][T12724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.419566][T12724] team0: Port device team_slave_0 added [ 307.457566][T12724] team0: Port device team_slave_1 added [ 307.548112][ T31] IPVS: stop unused estimator thread 0... [ 307.701326][T12880] x_tables: duplicate underflow at hook 3 [ 307.767268][T12724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.767385][T12724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.778595][T12724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.805854][T12724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.806020][T12724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.806123][T12724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.085954][T12895] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3054'. [ 308.174319][T12724] hsr_slave_0: entered promiscuous mode [ 308.196012][T12724] hsr_slave_1: entered promiscuous mode [ 308.196650][ T29] audit: type=1400 audit(564.158:2500): avc: denied { write } for pid=12882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.225518][T12724] debugfs: 'hsr0' already exists in 'hsr' [ 308.225543][T12724] Cannot create hsr debugfs directory [ 308.251188][T12892] x_tables: duplicate underflow at hook 3 [ 308.299374][ T29] audit: type=1400 audit(564.268:2501): avc: denied { write } for pid=12905 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.368979][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 308.600224][T12914] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3058'. [ 308.702030][T12920] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3058'. [ 308.949849][T12930] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 309.086660][T12934] socket: no more sockets [ 309.216183][T12924] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.216716][T12924] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.449661][ T29] audit: type=1400 audit(565.418:2502): avc: denied { write } for pid=12919 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.722789][ T29] audit: type=1400 audit(565.688:2503): avc: denied { write } for pid=12964 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.695757][T12971] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3067'. [ 310.755482][T12925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.780258][T12925] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.921775][T12925] socket: no more sockets [ 310.921885][T12925] wireguard: wg0: Could not create IPv4 socket [ 310.922015][T12925] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 310.962093][T12925] syz.7.3061 (12925) used greatest stack depth: 8512 bytes left [ 310.995988][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 311.044232][ T5739] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.044361][ T5739] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.044416][ T5739] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.044750][ T5739] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.275694][T12981] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3079'. [ 311.578814][T12724] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 311.601081][T12724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 311.618234][T12724] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 311.642856][T12724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 311.663881][T12724] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 311.675842][ T29] audit: type=1400 audit(567.648:2504): avc: denied { write } for pid=12978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.708346][T12724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 311.726121][T12724] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 311.754156][T12724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 311.773266][ T29] audit: type=1400 audit(567.738:2505): avc: denied { write } for pid=13008 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.801778][T13007] 9p: Bad value for 'rfdno' [ 312.157843][T12724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.220875][T12724] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.248284][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.248536][ T5739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.288901][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.289042][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.315423][T13032] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3083'. [ 312.482847][T13036] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3084'. [ 312.552821][T13036] loop7: detected capacity change from 0 to 512 [ 312.567831][T13036] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 312.586521][T13036] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 312.586629][T13036] block device autoloading is deprecated and will be removed. [ 312.586939][T13036] EXT4-fs (loop7): couldn't read superblock of external journal [ 312.801721][ T29] audit: type=1400 audit(568.768:2506): avc: denied { write } for pid=13021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.902916][ T29] audit: type=1400 audit(568.868:2507): avc: denied { write } for pid=13044 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.406920][ T29] audit: type=1400 audit(569.338:2508): avc: denied { write } for pid=13050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.486978][T13077] 9pnet_fd: Insufficient options for proto=fd [ 313.591290][ T29] audit: type=1400 audit(569.558:2509): avc: denied { write } for pid=13078 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.671657][T12724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.689117][T13083] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3093'. [ 313.982594][T13093] loop7: detected capacity change from 0 to 512 [ 314.029297][T13093] EXT4-fs error (device loop7): ext4_read_inode_bitmap:141: comm syz.7.3094: Invalid inode bitmap blk 4 in block_group 0 [ 314.029362][T13093] loop7: lost filesystem error report for type 5 error -117 [ 314.042406][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 314.042451][ C1] EXT4-fs (loop7): initial error at time 569: ext4_read_inode_bitmap:141 [ 314.042493][ C1] EXT4-fs (loop7): last error at time 569: ext4_read_inode_bitmap:141 [ 314.096496][T13093] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.204481][T13093] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.3094: inode has both inline data and extents flags [ 314.218540][ T29] audit: type=1400 audit(570.178:2510): avc: denied { write } for pid=13091 comm="syz.7.3094" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.235442][ T29] audit: type=1400 audit(570.198:2511): avc: denied { write } for pid=13091 comm="syz.7.3094" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 314.343683][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3094'. [ 314.353501][T13104] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 314.410477][ T29] audit: type=1400 audit(570.378:2512): avc: denied { write } for pid=13087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.506871][T13125] loop6: detected capacity change from 0 to 4096 [ 314.537069][T13125] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.631436][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.668286][ T6354] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.764398][T13132] 9pnet_fd: Insufficient options for proto=fd [ 314.814879][ T29] audit: type=1400 audit(570.788:2513): avc: denied { write } for pid=13128 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.829583][T12724] veth0_vlan: entered promiscuous mode [ 314.891677][T13134] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3104'. [ 314.915598][T12724] veth1_vlan: entered promiscuous mode [ 315.121673][T12724] veth0_macvtap: entered promiscuous mode [ 315.138503][T12724] veth1_macvtap: entered promiscuous mode [ 315.208426][T12724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.297807][T12724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.440321][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.456409][ T416] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.459396][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.459622][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.553835][T13158] 9pnet_fd: Insufficient options for proto=fd [ 315.689323][T13162] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 315.736371][T13162] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3116'. [ 316.004900][T13179] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3125'. [ 316.112284][T13181] loop7: detected capacity change from 0 to 512 [ 316.129680][T13181] EXT4-fs: Invalid want_extra_isize 7 [ 316.143903][T13186] 9pnet_fd: Insufficient options for proto=fd [ 316.592970][T13211] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3138'. [ 316.620808][T13213] 9pnet_fd: Insufficient options for proto=fd [ 316.641972][T13214] 9p: Bad value for 'rfdno' [ 316.800045][T13217] loop3: detected capacity change from 0 to 512 [ 316.817689][T13217] EXT4-fs: Invalid want_extra_isize 7 [ 317.238360][T13232] x_tables: duplicate underflow at hook 3 [ 317.472296][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 317.472362][ T29] audit: type=1400 audit(573.438:2515): avc: denied { write } for pid=13245 comm="syz.7.3153" name="cgroup.subtree_control" dev="cgroup2" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 317.472481][ T29] audit: type=1400 audit(573.438:2516): avc: denied { open } for pid=13245 comm="syz.7.3153" path="" dev="cgroup2" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 317.559984][ T29] audit: type=1400 audit(573.528:2517): avc: denied { bind } for pid=13245 comm="syz.7.3153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 317.561038][ T29] audit: type=1400 audit(573.528:2518): avc: denied { listen } for pid=13245 comm="syz.7.3153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 317.672402][T13252] loop6: detected capacity change from 0 to 512 [ 317.673304][T13252] EXT4-fs: Invalid want_extra_isize 7 [ 318.480851][T13284] loop3: detected capacity change from 0 to 512 [ 318.495659][T13284] EXT4-fs: Invalid want_extra_isize 7 [ 318.779336][T13295] loop6: detected capacity change from 0 to 512 [ 318.798597][T13295] EXT4-fs error (device loop6): ext4_read_inode_bitmap:141: comm syz.6.3178: Invalid inode bitmap blk 4 in block_group 0 [ 318.798655][T13295] loop6: lost filesystem error report for type 5 error -117 [ 318.810495][T13295] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.864983][T13295] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.3178: inode has both inline data and extents flags [ 318.869243][ T29] audit: type=1400 audit(574.838:2519): avc: denied { write } for pid=13294 comm="syz.6.3178" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.876575][ T29] audit: type=1400 audit(574.838:2520): avc: denied { write } for pid=13294 comm="syz.6.3178" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 318.941570][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3178'. [ 319.223783][ T6354] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.398766][T13318] loop6: detected capacity change from 0 to 512 [ 319.409330][T13318] EXT4-fs: Invalid want_extra_isize 7 [ 319.622873][T13334] loop7: detected capacity change from 0 to 1024 [ 319.631360][T13334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 319.631452][T13334] EXT4-fs: Ignoring removed i_version option [ 319.631517][T13334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 319.672549][T13334] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.692715][ T29] audit: type=1400 audit(575.658:2521): avc: denied { write } for pid=13324 comm="syz.7.3191" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.693008][T13334] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.3191: bg 0: block 112: padding at end of block bitmap is not set [ 319.737073][T13334] EXT4-fs (loop7): Remounting filesystem read-only [ 319.769412][T13341] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 319.793389][T13341] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3196'. [ 319.965738][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 320.180767][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3197'. [ 320.501900][T13365] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3206'. [ 320.974735][T13373] x_tables: duplicate underflow at hook 3 [ 321.092210][T13377] loop7: detected capacity change from 0 to 512 [ 321.119220][T13377] EXT4-fs error (device loop7): ext4_read_inode_bitmap:141: comm syz.7.3211: Invalid inode bitmap blk 4 in block_group 0 [ 321.119283][T13377] loop7: lost filesystem error report for type 5 error -117 [ 321.132716][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 321.132764][ C1] EXT4-fs (loop7): initial error at time 577: ext4_read_inode_bitmap:141 [ 321.132805][ C1] EXT4-fs (loop7): last error at time 577: ext4_read_inode_bitmap:141 [ 321.170236][T13377] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.269311][ T29] audit: type=1400 audit(577.238:2522): avc: denied { write } for pid=13376 comm="syz.7.3211" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 321.275234][T13377] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.3211: inode has both inline data and extents flags [ 321.279478][ T29] audit: type=1400 audit(577.248:2523): avc: denied { write } for pid=13376 comm="syz.7.3211" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 321.590474][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.647781][T13393] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3218'. [ 322.078308][T13412] loop7: detected capacity change from 0 to 512 [ 322.086399][T13412] EXT4-fs: Invalid want_extra_isize 7 [ 323.042297][T13424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3231'. [ 323.400590][ T29] audit: type=1400 audit(579.368:2524): avc: denied { ioctl } for pid=13427 comm="syz.6.3232" path="socket:[40393]" dev="sockfs" ino=40393 ioctlcmd=0x587f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 323.557642][T13444] loop7: detected capacity change from 0 to 1024 [ 323.565850][T13444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.565999][T13444] EXT4-fs: Ignoring removed i_version option [ 323.566370][T13444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.602448][T13444] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.663997][T13444] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.3240: bg 0: block 112: padding at end of block bitmap is not set [ 323.665851][ T29] audit: type=1400 audit(579.638:2525): avc: denied { write } for pid=13443 comm="syz.7.3240" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 323.672315][T13444] EXT4-fs (loop7): Remounting filesystem read-only [ 323.702904][T13444] EXT4-fs (loop7): shut down requested (0) [ 324.261518][T13455] x_tables: duplicate underflow at hook 3 [ 324.371393][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 325.129751][T13476] loop7: detected capacity change from 0 to 4096 [ 325.149635][T13476] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.166215][ T29] audit: type=1400 audit(581.138:2526): avc: denied { write } for pid=13475 comm="syz.7.3253" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 325.342315][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.808601][T13488] loop3: detected capacity change from 0 to 4096 [ 325.843819][T13488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.914335][ T29] audit: type=1400 audit(581.878:2527): avc: denied { write } for pid=13486 comm="syz.3.3260" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 326.068608][T12724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.438325][T13515] loop6: detected capacity change from 0 to 1024 [ 326.439323][T13515] EXT4-fs: Ignoring removed nomblk_io_submit option [ 326.439392][T13515] EXT4-fs: Ignoring removed i_version option [ 326.439449][T13515] EXT4-fs: Ignoring removed nomblk_io_submit option [ 326.485461][T13515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.511318][ T29] audit: type=1400 audit(582.478:2528): avc: denied { write } for pid=13514 comm="syz.6.3271" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 326.537340][T13515] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.3271: bg 0: block 112: padding at end of block bitmap is not set [ 326.539182][T13515] EXT4-fs (loop6): Remounting filesystem read-only [ 326.548844][T13515] EXT4-fs (loop6): shut down requested (0) [ 326.715133][ T6354] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 327.132192][T13532] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3277'. [ 327.248826][T13532] loop7: detected capacity change from 0 to 512 [ 327.272056][T13532] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 327.272308][T13532] EXT4-fs (loop7): couldn't read superblock of external journal [ 327.827531][T13549] loop7: detected capacity change from 0 to 1024 [ 327.839208][T13549] EXT4-fs: Ignoring removed nomblk_io_submit option [ 327.839296][T13549] EXT4-fs: Ignoring removed i_version option [ 327.839371][T13549] EXT4-fs: Ignoring removed nomblk_io_submit option [ 327.873550][T13556] loop3: detected capacity change from 0 to 512 [ 327.901018][T13549] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.933282][ T29] audit: type=1400 audit(583.898:2529): avc: denied { write } for pid=13546 comm="syz.7.3285" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 327.933360][T13549] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.3285: bg 0: block 112: padding at end of block bitmap is not set [ 327.975595][T13549] EXT4-fs (loop7): Remounting filesystem read-only [ 327.980139][T13549] EXT4-fs (loop7): shut down requested (0) [ 328.017180][T13556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.056980][ T29] audit: type=1400 audit(584.028:2530): avc: denied { write } for pid=13555 comm="syz.3.3289" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.125609][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 328.321528][T13570] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3292'. [ 328.447131][T13570] loop7: detected capacity change from 0 to 512 [ 328.470364][T13570] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 328.470646][T13570] EXT4-fs (loop7): couldn't read superblock of external journal [ 328.502102][T13556] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.3289: iget: bad i_size value: 2533274857506816 [ 328.502330][ T29] audit: type=1400 audit(584.468:2531): avc: denied { write } for pid=13555 comm="syz.3.3289" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.767195][T13576] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 328.795293][T13580] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3298'. [ 328.807617][T13576] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3296'. [ 328.862372][T12724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.045325][T13587] loop6: detected capacity change from 0 to 1024 [ 329.059504][T13587] EXT4-fs: Ignoring removed nomblk_io_submit option [ 329.059656][T13587] EXT4-fs: Ignoring removed i_version option [ 329.059814][T13587] EXT4-fs: Ignoring removed nomblk_io_submit option [ 329.123811][T13587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.155301][T13587] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.3302: bg 0: block 112: padding at end of block bitmap is not set [ 329.172338][ T29] audit: type=1400 audit(585.128:2532): avc: denied { write } for pid=13586 comm="syz.6.3302" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 329.199847][T13587] EXT4-fs (loop6): Remounting filesystem read-only [ 329.201344][T13598] EXT4-fs (loop6): shut down requested (0) [ 329.316916][ T6354] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 330.032918][T13620] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3314'. [ 330.171882][T13622] loop7: detected capacity change from 0 to 512 [ 330.205427][T13622] EXT4-fs error (device loop7): ext4_read_inode_bitmap:141: comm syz.7.3315: Invalid inode bitmap blk 4 in block_group 0 [ 330.205554][T13622] loop7: lost filesystem error report for type 5 error -117 [ 330.222743][T13622] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.410320][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.499684][T13630] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3318'. [ 330.648772][T13634] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3320'. [ 330.656885][T13632] loop3: detected capacity change from 0 to 512 [ 330.684131][T13632] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.3319: Invalid inode bitmap blk 4 in block_group 0 [ 330.684219][T13632] loop3: lost filesystem error report for type 5 error -117 [ 330.697515][T13632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.759498][T13634] loop7: detected capacity change from 0 to 512 [ 330.785738][T13634] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 330.786393][T13634] EXT4-fs (loop7): couldn't read superblock of external journal [ 330.797079][T13632] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.3319: inode has both inline data and extents flags [ 330.800849][ T29] audit: type=1400 audit(586.768:2533): avc: denied { write } for pid=13631 comm="syz.3.3319" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.838916][ T29] audit: type=1400 audit(586.788:2534): avc: denied { write } for pid=13631 comm="syz.3.3319" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 331.148673][T12724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.621936][T13657] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 331.846744][T13669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3336'. [ 331.935376][T13674] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3339'. [ 332.288840][ T29] audit: type=1400 audit(588.258:2535): avc: denied { read } for pid=13684 comm="syz.3.3345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 332.327444][T13687] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 332.557523][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3350'. [ 333.180097][T13727] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3361'. [ 333.315794][T13731] loop7: detected capacity change from 0 to 4096 [ 333.342569][T13731] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.409404][ T29] audit: type=1400 audit(589.378:2536): avc: denied { write } for pid=13729 comm="syz.7.3364" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 333.477988][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.606186][T13740] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3367'. [ 333.861281][T13743] x_tables: duplicate underflow at hook 3 [ 334.655802][T13789] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3389'. [ 334.979690][T13801] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 335.259147][T13814] IPv6: NLM_F_CREATE should be specified when creating new route [ 335.617075][T13832] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3409'. [ 335.776985][T13837] x_tables: duplicate underflow at hook 3 [ 336.293252][T13839] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 336.491524][T13843] IPv6: NLM_F_CREATE should be specified when creating new route [ 337.016937][T13857] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3419'. [ 337.326595][T13865] loop7: detected capacity change from 0 to 512 [ 337.359023][T13865] EXT4-fs error (device loop7): ext4_read_inode_bitmap:141: comm syz.7.3422: Invalid inode bitmap blk 4 in block_group 0 [ 337.359086][T13865] loop7: lost filesystem error report for type 5 error -117 [ 337.375148][T13865] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.424868][ T29] audit: type=1400 audit(593.398:2537): avc: denied { write } for pid=13864 comm="syz.7.3422" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.428570][T13865] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.3422: inode has both inline data and extents flags [ 337.448024][ T29] audit: type=1400 audit(593.398:2538): avc: denied { write } for pid=13864 comm="syz.7.3422" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.634770][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.433795][T13890] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3432'. [ 338.687092][T13893] x_tables: duplicate underflow at hook 3 [ 338.991177][T13898] IPv6: NLM_F_CREATE should be specified when creating new route [ 339.665655][T13921] IPv6: NLM_F_CREATE should be specified when creating new route [ 340.957648][T13949] IPv6: NLM_F_CREATE should be specified when creating new route [ 341.264278][T13962] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3463'. [ 341.331136][T13962] loop7: detected capacity change from 0 to 512 [ 341.345220][T13962] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 341.345954][T13962] EXT4-fs (loop7): couldn't read superblock of external journal [ 341.636921][T13973] loop3: detected capacity change from 0 to 4096 [ 341.680279][T13973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.758673][ T29] audit: type=1400 audit(597.728:2539): avc: denied { write } for pid=13972 comm="syz.3.3469" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 341.857244][T12724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.390850][T14034] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3492'. [ 345.100255][T14048] loop3: detected capacity change from 0 to 1024 [ 345.106957][T14048] EXT4-fs: Ignoring removed nomblk_io_submit option [ 345.106994][T14048] EXT4-fs: Ignoring removed i_version option [ 345.107039][T14048] EXT4-fs: Ignoring removed nomblk_io_submit option [ 345.150620][T14048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.169025][T14048] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.3497: bg 0: block 112: padding at end of block bitmap is not set [ 345.185494][ T29] audit: type=1400 audit(601.138:2540): avc: denied { write } for pid=14044 comm="syz.3.3497" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.185735][T14048] EXT4-fs (loop3): Remounting filesystem read-only [ 345.190087][T14048] EXT4-fs (loop3): shut down requested (0) [ 345.343656][T12724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 345.659764][ T353] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.659832][ T353] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.805546][ T353] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.805634][ T353] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.922731][ T353] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.922810][ T353] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.088300][ T353] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.088376][ T353] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.398900][ T353] bridge_slave_1: left allmulticast mode [ 347.398948][ T353] bridge_slave_1: left promiscuous mode [ 347.399286][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.424274][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.444332][ T353] pimreg: left allmulticast mode [ 347.662282][ T353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.681738][ T353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.696328][ T353] bond0 (unregistering): Released all slaves [ 347.726854][ T353] bond1 (unregistering): Released all slaves [ 347.947535][ T353] hsr_slave_0: left promiscuous mode [ 347.954244][ T353] hsr_slave_1: left promiscuous mode [ 347.966523][T14122] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 347.989538][T14122] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3523'. [ 348.033417][ T353] veth1_macvtap: left promiscuous mode [ 348.033506][ T353] veth0_macvtap: left promiscuous mode [ 348.033866][ T353] veth1_vlan: left promiscuous mode [ 348.318340][T14132] x_tables: duplicate underflow at hook 3 [ 348.451505][ T353] team0 (unregistering): Port device team_slave_1 removed [ 348.481315][ T353] team0 (unregistering): Port device team_slave_0 removed [ 348.924580][T14147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3531'. [ 349.244884][T14054] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.244980][T14054] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.245536][T14054] bridge_slave_0: entered allmulticast mode [ 349.275863][ T29] audit: type=1400 audit(605.248:2541): avc: denied { write } for pid=14140 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.303354][ T353] IPVS: stop unused estimator thread 0... [ 349.310270][T14054] bridge_slave_0: entered promiscuous mode [ 349.329676][T14054] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.329843][T14054] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.330557][T14054] bridge_slave_1: entered allmulticast mode [ 349.365379][T14054] bridge_slave_1: entered promiscuous mode [ 349.561512][ T29] audit: type=1400 audit(605.528:2542): avc: denied { write } for pid=14166 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.591734][T14054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.629249][T14054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.663713][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 349.707609][T14168] loop3: detected capacity change from 0 to 1024 [ 349.724602][T14168] EXT4-fs: Ignoring removed nomblk_io_submit option [ 349.724686][T14168] EXT4-fs: Ignoring removed i_version option [ 349.724768][T14168] EXT4-fs: Ignoring removed nomblk_io_submit option [ 349.746724][T14054] team0: Port device team_slave_0 added [ 349.783561][T14168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.795518][T14054] team0: Port device team_slave_1 added [ 349.829419][T14168] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.3536: bg 0: block 112: padding at end of block bitmap is not set [ 349.829903][ T29] audit: type=1400 audit(605.798:2543): avc: denied { write } for pid=14167 comm="syz.3.3536" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 349.836430][T14168] EXT4-fs (loop3): Remounting filesystem read-only [ 349.852775][T14168] EXT4-fs (loop3): shut down requested (0) [ 350.031950][T14054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.032057][T14054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.032133][T14054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.061416][T14054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.061474][T14054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.061681][T14054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.128230][T14182] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 350.134203][T12724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 350.135120][T14179] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 350.188676][T14179] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3539'. [ 350.215083][T14054] hsr_slave_0: entered promiscuous mode [ 350.225084][T14054] hsr_slave_1: entered promiscuous mode [ 350.245718][T14054] debugfs: 'hsr0' already exists in 'hsr' [ 350.245788][T14054] Cannot create hsr debugfs directory [ 350.705780][T14209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3548'. [ 350.795833][T14209] loop3: detected capacity change from 0 to 512 [ 350.832989][T14209] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 350.833428][T14209] EXT4-fs (loop3): couldn't read superblock of external journal [ 350.901950][ T29] audit: type=1400 audit(606.868:2544): avc: denied { write } for pid=14186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.095903][T14220] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 351.126843][ T29] audit: type=1400 audit(607.098:2545): avc: denied { write } for pid=14223 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.303842][T14228] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 351.332857][T14228] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3555'. [ 351.387599][T14054] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 351.414955][T14054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 351.425101][T14054] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 351.436081][T14054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 351.445975][T14054] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 351.458235][T14054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 351.468023][T14054] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 351.480416][T14054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 351.621752][T14054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.657160][T14054] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.694522][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.694629][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.741411][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.741494][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.860347][ T29] audit: type=1400 audit(607.828:2546): avc: denied { write } for pid=14232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.085722][ T29] audit: type=1400 audit(608.058:2547): avc: denied { write } for pid=14267 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.782173][ T29] audit: type=1400 audit(608.748:2548): avc: denied { write } for pid=14276 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.986434][T14054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.011890][ T29] audit: type=1400 audit(608.978:2549): avc: denied { write } for pid=14321 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.245268][ T29] audit: type=1400 audit(609.218:2550): avc: denied { append } for pid=14331 comm="syz.0.3581" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 353.456221][T14334] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 353.456345][T14334] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 353.456523][T14334] vhci_hcd vhci_hcd.0: Device attached [ 353.484341][T14334] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 353.484383][T14334] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 353.484551][T14334] vhci_hcd vhci_hcd.0: Device attached [ 353.628441][T14352] x_tables: duplicate underflow at hook 3 [ 353.639467][ T29] audit: type=1400 audit(609.618:2551): avc: denied { write } for pid=14327 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.713392][T12950] usb 1-1: new high-speed USB device number 2 using vhci_hcd [ 353.765936][ T29] audit: type=1400 audit(609.738:2552): avc: denied { write } for pid=14358 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 353.908661][T14362] 9p: Bad value for 'rfdno' [ 354.039584][ T29] audit: type=1400 audit(610.008:2553): avc: denied { getopt } for pid=14361 comm="syz.7.3584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 354.077094][T14349] vhci_hcd: connection closed [ 354.078289][T14347] vhci_hcd: connection reset by peer [ 354.078464][ T416] vhci_hcd vhci_hcd.0: stop threads [ 354.078501][ T416] vhci_hcd vhci_hcd.0: release socket [ 354.078589][ T416] vhci_hcd vhci_hcd.0: disconnect device [ 354.081274][ T416] vhci_hcd vhci_hcd.0: stop threads [ 354.081327][ T416] vhci_hcd vhci_hcd.0: release socket [ 354.081484][ T416] vhci_hcd vhci_hcd.0: disconnect device [ 354.205885][T14054] veth0_vlan: entered promiscuous mode [ 354.224956][T14054] veth1_vlan: entered promiscuous mode [ 354.313558][T14054] veth0_macvtap: entered promiscuous mode [ 354.330246][T14054] veth1_macvtap: entered promiscuous mode [ 354.411927][T14054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.437186][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3573'. [ 354.492661][T14054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.592566][ T5739] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.601806][ T416] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.601915][ T416] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.614126][ T98] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.907124][T14388] loop5: detected capacity change from 0 to 512 [ 354.968678][T14388] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.3499: Invalid inode bitmap blk 4 in block_group 0 [ 354.968753][T14388] loop5: lost filesystem error report for type 5 error -117 [ 354.983102][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 354.983190][ C0] EXT4-fs (loop5): initial error at time 610: ext4_read_inode_bitmap:141 [ 354.983231][ C0] EXT4-fs (loop5): last error at time 610: ext4_read_inode_bitmap:141 [ 355.018519][T14388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.085039][T14392] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 355.368029][T14054] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.688007][T14407] x_tables: duplicate underflow at hook 3 [ 355.861994][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3599'. [ 355.890164][T14415] vlan2: entered promiscuous mode [ 355.890224][T14415] syz_tun: entered promiscuous mode [ 356.362736][T14423] tmpfs: Bad value for 'mpol' [ 357.405778][T14454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3615'. [ 357.442147][T14454] loop3: detected capacity change from 0 to 512 [ 357.462148][T14454] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 357.462384][T14454] EXT4-fs (loop3): couldn't read superblock of external journal [ 358.414536][T14474] loop7: detected capacity change from 0 to 1024 [ 358.424494][T14474] EXT4-fs: Ignoring removed nomblk_io_submit option [ 358.424637][T14474] EXT4-fs: Ignoring removed i_version option [ 358.424695][T14474] EXT4-fs: Ignoring removed nomblk_io_submit option [ 358.472536][T14474] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.499884][T14474] EXT4-fs (loop7): shut down requested (0) [ 358.580862][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 358.845566][T12950] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 360.784547][T14511] loop3: detected capacity change from 0 to 1024 [ 360.795424][T14511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 360.795476][T14511] EXT4-fs: Ignoring removed i_version option [ 360.795537][T14511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 360.841179][T14511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.903220][T14511] EXT4-fs (loop3): shut down requested (0) [ 360.997666][T12724] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 361.337297][T14530] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3645'. [ 361.446192][T14531] coredump: 231(syz.3.3642): Core dump to core aborted: cannot preserve file permissions [ 361.550641][ T29] audit: type=1400 audit(617.518:2554): avc: denied { getopt } for pid=14532 comm="syz.5.3646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 362.170342][T14544] loop7: detected capacity change from 0 to 1024 [ 362.179601][T14544] EXT4-fs: Ignoring removed nomblk_io_submit option [ 362.179704][T14544] EXT4-fs: Ignoring removed i_version option [ 362.179803][T14544] EXT4-fs: Ignoring removed nomblk_io_submit option [ 362.222804][T14544] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.355732][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 363.189183][ T29] audit: type=1400 audit(619.158:2555): avc: denied { read write } for pid=14532 comm="syz.5.3646" dev="sockfs" ino=45213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 363.408928][T14570] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 363.516010][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3659'. [ 363.516161][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3659'. [ 363.592755][T14537] 9p: Bad value for 'rfdno' [ 363.798733][T14579] loop7: detected capacity change from 0 to 1024 [ 363.811832][T14579] EXT4-fs: Ignoring removed nomblk_io_submit option [ 363.811895][T14579] EXT4-fs: Ignoring removed i_version option [ 363.811970][T14579] EXT4-fs: Ignoring removed nomblk_io_submit option [ 363.874079][T14579] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.053742][ T7301] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 364.310303][T14592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3667'. [ 365.215201][T14615] loop6: detected capacity change from 0 to 1024 [ 365.221145][T14615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 365.221248][T14615] EXT4-fs: Ignoring removed i_version option [ 365.221337][T14615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 365.267677][T14615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.359744][ T6354] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 365.486853][T14625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3679'. [ 365.618814][T14625] loop3: detected capacity change from 0 to 512 [ 365.638760][T14625] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 365.638959][T14625] EXT4-fs (loop3): couldn't read superblock of external journal [ 366.132124][T14629] loop6: detected capacity change from 0 to 8192 [ 366.260996][T14629] vlan0: entered promiscuous mode [ 366.261061][T14629] bond0: entered promiscuous mode [ 366.261110][T14629] bond_slave_0: entered promiscuous mode [ 366.261331][T14629] bond_slave_1: entered promiscuous mode [ 366.419538][T14629] FAT-fs (loop6): error, invalid access to FAT (entry 0x00003c09) [ 366.419609][T14629] FAT-fs (loop6): Filesystem has been set read-only [ 366.419704][T14629] syz.6.3681: attempt to access beyond end of device [ 366.419704][T14629] loop6: rw=8388608, sector=15583, nr_sectors = 1 limit=8192 [ 366.976004][T14661] coredump: 254(syz.3.3693): Core dump to core aborted: cannot preserve file permissions [ 367.026475][ T29] audit: type=1400 audit(622.998:2556): avc: denied { ioctl } for pid=14659 comm="syz.0.3694" path="socket:[45042]" dev="sockfs" ino=45042 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 367.132710][T14655] loop5: detected capacity change from 0 to 4096 [ 367.194772][T14655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.226816][T14665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3696'. [ 367.276134][T14665] loop3: detected capacity change from 0 to 512 [ 367.294691][T14665] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 367.294834][T14665] EXT4-fs (loop3): couldn't read superblock of external journal [ 367.349764][T14054] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.382427][ T29] audit: type=1400 audit(623.348:2557): avc: denied { append } for pid=14670 comm="syz.6.3698" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 367.382513][ T29] audit: type=1400 audit(623.348:2558): avc: denied { open } for pid=14670 comm="syz.6.3698" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 367.802267][T14691] coredump: 1309(syz.7.3706): Core dump to core aborted: cannot preserve file permissions [ 367.909257][T14695] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 368.102064][T14706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3713'. [ 368.759460][T14721] x_tables: duplicate underflow at hook 3 [ 368.870012][T14734] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3725'. [ 368.917473][T14734] loop3: detected capacity change from 0 to 512 [ 368.935388][T14734] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 368.935596][T14734] EXT4-fs (loop3): couldn't read superblock of external journal [ 369.688510][T14749] coredump: 279(syz.3.3731): Core dump to core aborted: cannot preserve file permissions [ 369.948986][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3735'. [ 370.284417][ T18] ================================================================== [ 370.284467][ T18] BUG: KCSAN: data-race in __set_task_comm / strlen [ 370.284510][ T18] [ 370.284518][ T18] write to 0xffff888104625e18 of 10 bytes by task 14771 on cpu 0: [ 370.284538][ T18] __set_task_comm+0x78/0x180 [ 370.284567][ T18] __se_sys_prctl+0xcb3/0x13b0 [ 370.284605][ T18] __x64_sys_prctl+0x67/0x80 [ 370.284643][ T18] x64_sys_call+0x2421/0x2550 [ 370.284681][ T18] do_syscall_64+0x112/0x360 [ 370.284720][ T18] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.284748][ T18] [ 370.284757][ T18] read to 0xffff888104625e1d of 1 bytes by task 18 on cpu 1: [ 370.284777][ T18] strlen+0x19/0x40 [ 370.284809][ T18] trace_event_raw_event_sched_stat_runtime+0x5a/0x150 [ 370.284842][ T18] update_se+0x153/0x460 [ 370.284868][ T18] update_curr+0x1e/0x210 [ 370.284897][ T18] enqueue_task_fair+0x77/0x850 [ 370.284937][ T18] ttwu_do_activate+0xa7/0x230 [ 370.284960][ T18] try_to_wake_up+0x44f/0x6d0 [ 370.284984][ T18] autoremove_wake_function+0x10/0x50 [ 370.285011][ T18] __wake_up+0x66/0xb0 [ 370.285035][ T18] rcu_exp_sel_wait_wake+0x9be/0xbf0 [ 370.285071][ T18] wait_rcu_exp_gp+0x1e/0x30 [ 370.285094][ T18] kthread_worker_fn+0x251/0x4f0 [ 370.285117][ T18] kthread+0x223/0x270 [ 370.285141][ T18] ret_from_fork+0x146/0x330 [ 370.285176][ T18] ret_from_fork_asm+0x1a/0x30 [ 370.285207][ T18] [ 370.285213][ T18] value changed: 0x78 -> 0x2e [ 370.285227][ T18] [ 370.285234][ T18] Reported by Kernel Concurrency Sanitizer on: [ 370.285251][ T18] CPU: 1 UID: 0 PID: 18 Comm: rcu_exp_gp_kthr Not tainted syzkaller #0 PREEMPT(lazy) [ 370.285282][ T18] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.285300][ T18] ================================================================== [ 370.616698][T14776] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)