last executing test programs: 1m55.993398354s ago: executing program 32 (id=242): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) unshare(0x8000400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x0, @any, 0xc, 0x2}, 0xe) 1m53.091511006s ago: executing program 0 (id=500): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r4, r0, 0x4, r0}, 0x10) 1m53.091283546s ago: executing program 0 (id=501): r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7ffff}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000003}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close(r1) 1m52.916440123s ago: executing program 0 (id=504): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000100)={[{@debug}, {@nobh}, {@quota}]}, 0x5, 0x560, &(0x7f00000009c0)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) inotify_init() open(&(0x7f0000000100)='./bus\x00', 0x6c840, 0x50) truncate(0x0, 0x86) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2040) socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 1m52.734926783s ago: executing program 0 (id=506): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8) io_setup(0x1, &(0x7f00000004c0)=0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x3]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x10d) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='i', 0xa800, 0xe00}]) 1m52.246166486s ago: executing program 0 (id=509): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x3, 0x7, 0x6, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key(&(0x7f0000000400)='rxrpc\x00', 0x0, &(0x7f0000000600)="0100000002000800ffffff05000000", 0xf, 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r0, 0x6d5a) r1 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) mlockall(0x7) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) preadv(r2, &(0x7f00000014c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 1m51.870465698s ago: executing program 0 (id=516): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x251, &(0x7f0000000900)="$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") mkdir(&(0x7f0000000040)='my_sys\x00', 0xd6) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x6) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1m51.870232669s ago: executing program 33 (id=516): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x251, &(0x7f0000000900)="$eJzs2k9rXFUYB+D3pq1NU9KJ+I8WxIMu1M2lydpFgzQgBhTtCFWQ3pobHXKdCblDYERMVnXrR3AtLt0J0qWbbPwELtxINll2IV7JzGiaEiVZpBP1eTbzwjk/zns5h8NZzO5rX326tlrnq0U/prIspm7EdjzIYi6m4k/b8erLt398/t3b77+5uLx8852UlhZvzS+klK688MMHn3/74v3+5fe+u/L9xdiZ+3B3b+GXnWd3ru7+fuuTTp06der2+qlId3u9fnG3KtNKp17LU3q7Kou6TJ1uXW4cGl+teuvrg1R0V2Zn1jfKuk5Fd5DWykHq91J/Y5CKj4tON+V5nmZngkctXTr+3PY3D5om9poLd6Jpmktfx+X7MftztCJ7MmVP3cieuZM9t51d3Wua1mm2zMTY//+3hy716Yjqy832Znv0OxpfXI1OVFHG9WjFb7F/TMZG9dIbyzevp6G5uFdtjfNbm+1zh/Pz0Yq5o/Pzo3yKe9WvT4yW3dpsX4yZiAsR4/xCtOLpo/MLB/nh+ueG60/HKy89tH4erfjpo+hFFSuxnz3IfzGf0utvLafD/V8bzvsn06e8NwAApyFPfzny/Zbnfzc+yp/gffjI++p8XDs/2W8noh58tlZUVblxrGJ/R489+V9YTJ+NNv4LRUQ2PGDZ+KBNuh/FCYuJXks8JgebPulOAAAAAAAAAAAAOInH8XfCSX8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwtv0RAAD//11yztI=") mkdir(&(0x7f0000000040)='my_sys\x00', 0xd6) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) truncate(&(0x7f0000000240)='./file1\x00', 0x6) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1m49.77439286s ago: executing program 3 (id=547): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write(r1, &(0x7f0000000140)='\x00\x00\b\x00E', 0x5) 1m49.377297709s ago: executing program 3 (id=552): r0 = epoll_create1(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x6b) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r3, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 1m49.029206104s ago: executing program 3 (id=556): prctl$PR_SET_ENDIAN(0x14, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1cb1, 0x1c080, 0xa, 0x20002fb}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) io_uring_enter(r1, 0x2219, 0x7721, 0x3c, 0x0, 0x0) 1m48.846491273s ago: executing program 3 (id=560): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000180)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x4000, 0x40, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 1m47.912647398s ago: executing program 3 (id=576): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1m47.006468975s ago: executing program 3 (id=588): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 1m31.95814696s ago: executing program 34 (id=588): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 1m30.295705423s ago: executing program 4 (id=753): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='cert_serial\x00', &(0x7f0000000180)='1234\x00', 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_aout(r2, 0x0, 0xff2e) 1m30.294698103s ago: executing program 4 (id=754): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x27, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) 1m30.210199666s ago: executing program 4 (id=756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x60800, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 1m29.90182081s ago: executing program 4 (id=758): syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[], 0x0, 0x24c, &(0x7f0000000980)="$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") r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace(0x10, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) wait4(0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r0, 0x0) close(0xffffffffffffffff) waitid$P_PIDFD(0x3, r2, 0x0, 0x2, 0x0) 1m28.958483788s ago: executing program 4 (id=768): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x17, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 1m28.84142443s ago: executing program 4 (id=769): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x6, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) open(0x0, 0x53c282, 0x78e22799f4a46e8e) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfff}}], 0x18}, 0x200040c4) 1m28.825678394s ago: executing program 35 (id=769): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x6, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) open(0x0, 0x53c282, 0x78e22799f4a46e8e) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfff}}], 0x18}, 0x200040c4) 1m27.418778018s ago: executing program 8 (id=770): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r2 = dup(r1) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2}}, 0x20) 1m26.446402773s ago: executing program 8 (id=786): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a16d, 0x0, 0x7, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x112013, 0x0, 0xffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000180)='\x00', 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'syztnl1\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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") open(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xffffefff}, {0x6}]}, 0x10) 1m25.958901736s ago: executing program 8 (id=794): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xefffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1195012, 0x0, 0x40, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x80, 0x0) read(r2, &(0x7f0000000300), 0x1) read(r2, &(0x7f0000000400), 0x120) close_range(r0, 0xffffffffffffffff, 0x0) 1m25.83433645s ago: executing program 8 (id=796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x4, 0x2, 0x1000, 0x7, 0xfffffff9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x5, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r5, 0x1, 0x0, 0x6, @remote}, 0x14) 1m23.700076152s ago: executing program 8 (id=819): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1e64, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x7fff, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m23.586331203s ago: executing program 8 (id=820): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4e381, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x8002000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1m15.005916433s ago: executing program 7 (id=884): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) lstat(&(0x7f00000001c0)='./file0\x00', 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', 0x0) 1m14.749212843s ago: executing program 7 (id=886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) 1m14.530378463s ago: executing program 7 (id=889): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x80c84, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1m14.403605037s ago: executing program 7 (id=891): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_bp={0x0, 0x2}, 0x204, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000200)={[{@nouid32}, {@nolazytime}]}, 0x1, 0x469, &(0x7f0000000600)="$eJzs3M+PE1UcAPDvtF1Wfm5F/AGiomgk/thlF1QOXjQx8aCJiR7wuC4LQQprYE2EbNzFELyYKAl3Y+LFxL/AEyeinky84t2QEMMF9FQzdFq63XYpbWlZ+vkkw87bvvZ9vzPzOm/eMBvA0NqV/pNEbIqIKxExFhG5+grrK0ta7+b1hZl/ry/MJFEuf/hPkr4tblxfmKlWTbKfGyuFQvpBuXNJFJu0e+r0mWPTpdLsyaw8MX/8s4lTp8+8evT49JHZI7Mnpg4c2L9v8o3Xp17rSZ5pTDd2fDm3c/u7H194f+bghU9++7kSb7l88fLeZXn0xkhELNS2SaMXetvYwG2uW08KAwyEuzIaEYXsaL0SY5E/t6X22li889VAgwPuqXK5XJ5q/fJSGXiAJTHoCIDBqJ7o0+vf6tKnocd94dpblQugNO+b2VJ5pRBnszojDde3vbQrIg4u/fd9ukTDfAoAwL1wKR3/vNJk/FeMeKyu3pZsKUbEwxGxNSIeiYhtEfFoVOo+HhFP3GX7uxrKK8c/uaudZdaedPz3ZnZva/n4r3YXrJjPSptv5T+SHD5amt2bbY89MTKaliebfnoSsZT+/PPbVu3Xj//SJW2/OhbM4rhaGF3+nkPT89NdJ565djZiR6FZ/kkUbmcR2yNiR4dtHH3pp53Lf5Ovrd05/1X04D5T+YeIFyv7fyka8q9KVr8/OfFQlGb3TlSPikaX4vc/zn/Qqv2u8u+BdP9vaHr81/IvJvX3a/MrPmLdndo4/9fXLa9pOj3+1yUfLWv8i+n5+ZOTEeuS91b+vm6Cu1qu1k/z37O7ef/fGre3xJMRkR7ET0XE0xHxTBb7sxHxXETsXiX/X99+/tPO87+30vwX72b/d7CSP3b5l1btt7f/91cLt4Jq5/uv3QC72XYAAACwVuQiYlMkufHaei43Pl75//LbYkOuNHdq/uXDc5+fOFR5RqAYI7nqTNdY3XzoZDY3XC1PZeXFrLwvmze+mF9/qzw+M1c6NOjkYchtbNH/U3+vnOsFHjSe14Lhpf/D8Oq8//vmgLXuDr041684gP5zFofh1az/Lw4gDqD/nP9heNX6/3dtVK573Kvx4U1g7XH+h+Gl/8NQ6ua5/vtiJX6MWL1O0l0To4PJ65tu3l7oQ4SRuz8OgD6uTOUjBhhGod2/ahGny4tdNzrobyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDe+D8AAP//Gvzn2A==") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f00000001c0)='./file0\x00') symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 1m13.941449293s ago: executing program 7 (id=893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=r0], 0x5, 0x25e, &(0x7f0000000100)="$eJzs2s9rnEUcB+Dvm6a0pqQbf9uCOOhBvbw0OXtokBTEBUEboQrSt+aNLnndDXmXwIrYnBQ89ezJs3j0IAjSo5dc/As86CmXHHsQX0k2adM2YsVmN9jnuezAzIeZd2Z2mMNsvXbjk5XlyVgu+jGRZTFxMTbiVhYzMRH7NuLVl6/8/Pw7V957c77dXng7pUvzl2fnUkpnX/jp/c++e/Fm/8y735/98VRsznywtT332+Yzm+e2/rz8cadOnTp1e/1UpGu9Xr+4VpVpqVOv5CndqMqiLlOnW5drd9UvV73V1UEqukvTU6trZV2nojtIK+Ug9XupvzZIxUdFp5vyPE/TU8F/sfjtraaJ7ebk1Wia5rFv4szNmP41WpE9nrInL2ZPX82e3cjObTdNa9xD5UhY/0fbgUP9dET15fri+uLwd1g/vxydqKKMC9GKP2Jnm+wZli+90V64kNJuOr6oru/lr68vntjNf7Wfn41WzByen01Dd+dPxdTB/ud+eCKeuj//+4n2wtyh+dPxyksH8nm04pcPoxdVLMVO9k7/n8+m9Ppb7Xvy53fbAQD83+TptpnD7m95/nf1w/wD3w/vu59NxvnJ8X47EfXg05Wiqsq1kRR29tQDNO6NYDzZ3gT8c+PnJkY2P+MpfH08hnFEheE5FrfX+yF38VD/RCf3NuT+wTjOqRvDYcTI3Vn0cY8EAAAAAAAAAACAf+OeR3+to3hyOO5vBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjre/AgAA//8eicLG") capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0x3fffff) r1 = syz_open_dev$rtc(&(0x7f0000000380), 0x8, 0x40) ioctl$RTC_PIE_ON(r1, 0x7005) 1m13.716504824s ago: executing program 7 (id=897): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xc851) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) 1m13.692964161s ago: executing program 36 (id=897): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xc851) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) 1m8.504911616s ago: executing program 37 (id=820): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4e381, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x8002000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.586200585s ago: executing program 6 (id=1490): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4812) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r0, &(0x7f00000002c0)={0x0, 0x8, 0x2, 0xfc, 0x1}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_io_uring_setup(0x11f7, &(0x7f00000012c0)={0x0, 0x7071, 0x80000, 0x0, 0x2f6}, 0x0, &(0x7f0000001180), &(0x7f0000001200)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$ITER_CREATE(0x21, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) unshare(0x22020600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0\x00', 0x1000}) fcntl$setownex(r4, 0xf, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x4000000, 0x20) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 2.509295076s ago: executing program 6 (id=1492): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), 0x0, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./proc_mnt/net/sctp/assocs\x00', 0xfa) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, @perf_config_ext={0x1, 0x400}, 0x100200, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$zero(0xffffffffffffff9c, 0x0, 0x30002, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) unshare(0x22020600) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7ff, 0x1}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, 0x0, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000050400"/20, @ANYRES32, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e"], 0x44}}, 0x0) pread64(r1, &(0x7f0000000240)=""/203, 0xcb, 0x204) 2.31112159s ago: executing program 6 (id=1497): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000400)='./file0\x00', 0xe3808, &(0x7f0000000bc0)=ANY=[], 0xfe, 0x2c1, &(0x7f00000006c0)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100)={[{@mb_optimize_scan}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@errors_remount}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) r0 = open(0x0, 0x66842, 0x21) pwritev2(r0, 0x0, 0x0, 0x2000, 0x0, 0x3) mkdir(0x0, 0x18b) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x2c, 0x7, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000800) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f00000003c0), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x8, 0x0, 0x30) 1.582487038s ago: executing program 6 (id=1505): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x1a, r0, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) close(r2) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 1.573403761s ago: executing program 6 (id=1506): mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40, 0xc594}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3, 0x0, 0x81}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000080000007910000000000000d31030001001000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") chmod(&(0x7f0000000040)='./file0\x00', 0x44) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0x2, 0x1, 0x5c4842ee, 0x6}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0003000000000004086aa42d"], 0x30}}, 0x20000000) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x5, 0x7, 0x4, 0xffff8000, 0xc, 0xe2, 0x7ff}, 0x1c) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4800"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003ac0)={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.507920469s ago: executing program 2 (id=1509): r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xdea, 0x7}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000002b400000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) pipe2(&(0x7f0000000040), 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0xb8}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) pipe2$9p(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = fspick(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x9, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x8, 0x7ffc0001}]}) r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) 1.458721682s ago: executing program 1 (id=1511): perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x10001}, 0x8) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x14}, 0x400, 0x1fe, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40086602, 0x110e22fff2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000074000000060a01040000000000000000020000000900010073797a30000000000900020073797a300000000048000480440001800a0001006d61746368000000340002800d00010064657667726f757000000000080002400000000018000300000000000000000000000000000000000000000014"], 0xfc}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r2}, 0x38) 1.39335742s ago: executing program 1 (id=1513): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000003c0)={[{}, {@lazytime}]}, 0x2, 0x246, &(0x7f0000000ac0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x22e542, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0xc5) r2 = socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x4d5, 0x9}, 0x0, 0x20000, 0x0, 0x8, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x50, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x5}, 0x400c001) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x24, 0x0, 0x0) write$tcp_mem(r1, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', &(0x7f00000004c0), 0x4000) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @hyper=0x300}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), 0xffffffffffffffff) 1.314230462s ago: executing program 2 (id=1515): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0x4}, {}, {0xd, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200410d0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x19e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xb}, 0x142c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000005080)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x0, {}, [{0x34, 0x1, [@m_ife={0x30, 0x10, 0x0, 0x0, {{0x8}, {0x4}, {0x6, 0x6, "8034"}, {0xc, 0x7, {0x92f52d05a60322be, 0xc58826ad51c40e66}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x40810) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x1}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='io\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r4, &(0x7f0000000100)=""/185, 0xb9, 0x3c) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup=r0, r3, 0x18, 0x2000, 0x0, @value=r4}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x1c, &(0x7f0000000240)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) preadv(r3, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r7, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x40000) 1.313950522s ago: executing program 1 (id=1516): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x1a, r0, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) close(r2) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 1.258520557s ago: executing program 1 (id=1517): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x1a, r0, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 1.224429206s ago: executing program 9 (id=1518): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='try'], 0xc) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x18, 0x200, 0x0}) socket$kcm(0x29, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x509, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_config_ext={0x5, 0xb}, 0x11efe1, 0x1224, 0x0, 0x2, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x200000101ffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x80008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='TIPCv2\x00', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$sock_proto_private(r0, 0x89eb, &(0x7f0000000440)="be5f37cc1ed2a0f0816cc94cae3248ab7d6829ef41527e62e81b6cb3f3be12e9f0231a93268d1dc377c50a924f23410092046bc7d4ad59d1044793757f75bdb7ab798f2b9c813a0814814a9a9ed22cffa9fbd3ed21ad52fae4f69b5838cde786087d3648ca8cc2de7c7d39912cfb32e503bed1726e54718fdfa898f9f2ced0606caf8482d2ae680d17700e37d0a537db1271a69f880f82c58ead1c679c2273e376fc8296b67ce8e9a7d272aea32b6f9da1f2554dabda9e99a9eb6ebd6b6f25fa4d8eeb") socket$kcm(0x29, 0x2, 0x0) 1.165553662s ago: executing program 5 (id=1519): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x8000000, 0x0, 0x2, 0x1, 0xbfec, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x8, 0x0, 0x4c}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f0000000080)={{0xc, @multicast2, 0x4e22, 0x800002, 'nq\x00', 0x0, 0x3, 0x10003}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffd, 0x1, 0x8, 0x8, 0x2000050}}, 0x44) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0xe, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = epoll_create1(0x80000) r4 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket(0x1f, 0x4, 0x2) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={0x0, 0x0}, 0x28) close(r0) 1.164707352s ago: executing program 1 (id=1520): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x7fffffff}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x24040810) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$peekuser(0x3, r0, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r4, 0x9) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r3, &(0x7f0000000b40)=[{&(0x7f0000000cc0)=""/154, 0xfdef}, {0x0}, {0x0}], 0x3) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) prctl$PR_SET_SECUREBITS(0x1c, 0x15) 1.106175808s ago: executing program 2 (id=1521): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x1a, r0, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 1.001960787s ago: executing program 5 (id=1522): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20004000) socket$netlink(0x10, 0x3, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'team_slave_0\x00'}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001500)={'veth0_to_team\x00', 0x0}) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x7, 0x1, 0x40000}, 0x1) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753") ptrace$getregset(0x4205, r1, 0x2, &(0x7f00000002c0)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x243) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="200000001d14ffff"], 0x20}, 0x1, 0x0, 0x0, 0x40084}, 0x0) 998.872578ms ago: executing program 2 (id=1523): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_clone(0x1050000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0x541b, 0x0) setns(0xc9, 0x0) r4 = socket(0x8, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000080)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x2c) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000200)={r5, 0x8a2}, 0x8) bind(r4, &(0x7f0000000100)=@generic={0x8, "0000ffff01002000"}, 0xc) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x54, r6, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}]}]}, 0x54}}, 0x0) 957.129599ms ago: executing program 9 (id=1524): socket$nl_xfrm(0x10, 0x3, 0x6) setresuid(0xee01, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) unshare(0x22020600) syz_io_uring_setup(0x1f9b, &(0x7f0000000340)={0x0, 0xffffff7c, 0x82, 0x2, 0x345}, 0x0, &(0x7f0000000600), &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x10, 0x1, 0x8000) fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) openat(0xffffffffffffff9c, 0x0, 0x109142, 0x5) signalfd4(0xffffffffffffffff, &(0x7f0000000500)={[0xfc49]}, 0x8, 0x800) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x10680, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = socket(0x1d, 0x2, 0x6) recvmsg$kcm(r1, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x40002100) r2 = syz_open_dev$usbfs(0x0, 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) socket$kcm(0x29, 0x7, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2c}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x4, 0x46f, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFt+IyviDxC1isbGH1sooBy8aDTxoImJFzzWthBkoYbWRAgRNAaPhsTEo/Fo4l/gSS9GPZl41bshIYaL6GnM7M6022W73ZYtK93PJ9nueztv+t533rzdN/N2AxhYo/mfJGJHRPweEbsa2aUFRhtPN29cnPrnxsWpJLLs7b+Serm/b1ycKouW+20vMmNpRPppEg+3qXfu/IXTk7XazLkiPz5/5v3xufMXnj91ZvLkzMmZsxPHjh05fOjFFyaO9iTOe/O27vtodv/e19+5+ubU8avv/vxtUsbfEkePjHba+FSW9bi6/trZlE6Gu9hhaB0bQ9fybsi7a6Q+/nfFUCx23q547ZO+Ng5YV1lhmc2XM2ADS6LfLQD6o/ygz69/y8edm3303/WXGxdAedw3i0djy3CkRZmRluvbXhqNiOOX//0qf8Tq70O4igYAVu37fP7z3C3zv62t5e6JzfW1oUqxlrI7Iu6LiD0RcX9EPBARD0bEQ+0q6bAg0LpIcuv8J7221ti6kc//XirWtpbO/8rZX1SGitzOevxH04jazMH6MYkYi5HNJ07VZg51qOOHV3/7fLltzfO//JHXX84Fi3ZcG968dJ/pyfnJ24m52fWPI/YNt4s/WVgJSCJib0TsW2Mdp575Zv9y21aOv4Nu1plWkH0d8XSj/y9HS/ylpPP65PiW/HwYz8+Cg23r+OXXK28tV/9txd8Def9va3v+L8RfSZrXa+dW898bo/vKH58te01TXdP5v/jCpuL5w8n5+XOHIjYlbzQa3fz6xOK+Zb4sn8c/dqD9+N9df84WDkR+Ej8SEY9GxGNFdI9HxBMRcaDDUfjplSff63SE2se/pcN/7J08/umW/q8sLdLS/4uJTdH6SvvE0Okfv1v6H7uJv5T3/5F6aqx4pf7+92XnuLpp12rPZgAAALhbpRGxI5K0upBO02q18R3+PbEtrc3OzT97YvaDs9ON3whUYiQt73Q17gePJOX9z0pTfqIlf7i4b/zF0NZ6vjo1W5vud/Aw4LY3j//yTme18fSnb5fAxteDdTTgLmX8w+Ay/mFwGf8wuNqM/1u+AA5sTO0+/y/1oR3Andcy/i37wQBx/Q+Da7jpR47AYGn+/PdGAANjbmus/CP5jZDIsiz7HzRj4yQi7bbwpX43deVEss6jYEe/A1x9ot/vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xXwAAAP//BL/saw==") lseek(r0, 0x10001, 0x0) 500.086404ms ago: executing program 5 (id=1525): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000008000000080000000204000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000012e1007a0d000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) unshare(0x22020600) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3, 0x4, 0x10000, 0x4}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='name', 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x238, 0xc8, 0x8, 0x238, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}, @common=@rt={{0x138}, {0x6, [0x2, 0x6], 0x6, 0x20, 0x6, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, @private0, @dev={0xfe, 0x80, '\x00', 0x34}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x15}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, @private1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0xc}, @private0={0xfc, 0x0, '\x00', 0x1}], 0x7}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x2, 0x100, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 465.018213ms ago: executing program 6 (id=1526): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/240, 0x302000, 0x1000, 0x5, 0x3}, 0x20) syz_clone3(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x200000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x10011, &(0x7f00000003c0)={0x3d, 0x2c, 0x2}) ptrace$ARCH_GET_CPUID(0x1e, r1, 0x0, 0x1011) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 463.658244ms ago: executing program 5 (id=1527): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x1a, r0, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) close(r2) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 445.984499ms ago: executing program 9 (id=1528): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0x1e, 0x4, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0xa04, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000004640)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000090542b3c5917422254e9adfa195e81bfb02520127ed6d02a271b0561eb71d2c75f68819cf61a0dcedeb162dc7dcd9ecc30", @ANYRES16=r1], 0x2c}, 0x1, 0x0, 0x0, 0x40881}, 0x20040000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r3, 0x0, 0x20) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r4, 0x0) 409.894228ms ago: executing program 2 (id=1529): perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f000000dd80)={0x82058000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1a}, 0xe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc, 0x800) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x1f, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_setup(0x20, 0x0) io_submit(0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x260402, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000080)=0x7) getpid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xf0}}, 0x20000844) lsetxattr$security_selinux(0x0, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 407.677329ms ago: executing program 5 (id=1530): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = socket(0xa, 0x3, 0x87) sendto(r0, &(0x7f00000003c0), 0x0, 0x800, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x84, 0x0, 0x80000, 0x0, 0x3, 0x0, 0x5, 0x0, 0x8ea}, 0xffffffffffffffff, 0x400000000001, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x192d, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) io_uring_enter(r1, 0x6219, 0x7721, 0x1e, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r3, 0xfe, 0xdcb6, 0xfffffffffffffffe}) 372.136788ms ago: executing program 9 (id=1531): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x1a, r0, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) close(0xffffffffffffffff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 343.670487ms ago: executing program 2 (id=1532): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x1, 0x4, 0x4, 0x1, 0x1, 0x0}) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000003c0)={'filter\x00', 0x0, 0x0, 0x0, [0x99c9, 0xd, 0x382, 0x10001, 0xfffffffffffffffd, 0x9]}, &(0x7f0000000440)=0x78) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r2, &(0x7f0000000280)={0xffffffffffffffff, r3, 0x4}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040840) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x5, 0x5, 0x0, 0x130, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) 266.881097ms ago: executing program 9 (id=1533): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x1a, r0, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 225.522919ms ago: executing program 1 (id=1534): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002130000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000893ad4cf00000000000000000000000000fc0100"/47, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000"], 0xfc}}, 0x408) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x1103, r1}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%+9llu \x00'}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000880), 0x531c, r4}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) 70.602231ms ago: executing program 9 (id=1535): syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x20c019, &(0x7f0000005340)={[{@map_acorn}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@check_strict}, {@hide}, {@mode={'mode', 0x3d, 0xa7c}}, {@utf8}, {@utf8}]}, 0x0, 0x567, &(0x7f0000000200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000, 0x10000}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x10) setxattr(0x0, &(0x7f0000000080)=@random={'trusted.', '}\x00'}, &(0x7f00000000c0)='-\'\x00', 0x3, 0x2) r1 = socket(0x2, 0x3, 0xff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmmsg$inet(r1, 0x0, 0x0, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000006b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000000e148b69"], 0x48}, 0x1, 0x0, 0x0, 0xc080}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x6}, 0x110220, 0x2, 0xfffffffe, 0x0, 0x400000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r3, 0x0, 0x5005) timer_create(0x7, &(0x7f0000000a40)={0x0, 0x39, 0x0, @thr={&(0x7f0000000940)="bad1070d585eb8f73b670a422a7653829dab942e3e52572be0eda0dfab79", &(0x7f0000000980)}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000ac0), &(0x7f0000000b00)) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) 0s ago: executing program 5 (id=1536): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @empty, 0xf66e}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5597c7114de75d6a, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)=0x68) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xa, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) kernel console output (not intermixed with test programs): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 87.456721][ T6151] loop6: detected capacity change from 0 to 512 [ 87.474711][ T6146] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 2: comm syz.7.783: lblock 2 mapped to illegal pblock 2 (length 1) [ 87.474769][ T6146] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 87.474934][ T6146] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 87.475006][ T6146] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 48: comm syz.7.783: lblock 0 mapped to illegal pblock 48 (length 1) [ 87.475041][ T6146] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 87.475146][ T6146] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 87.475240][ T6146] EXT4-fs error (device loop7): ext4_acquire_dquot:7069: comm syz.7.783: Failed to acquire dquot type 0 [ 87.475312][ T6146] loop7: lost filesystem error report for type 5 error -117 [ 87.475413][ T6146] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 87.475429][ T6146] loop7: lost filesystem error report for type 5 error -117 [ 87.475484][ T6146] EXT4-fs error (device loop7): ext4_evict_inode:269: inode #11: comm syz.7.783: mark_inode_dirty error [ 87.475537][ T6146] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 87.475608][ T6146] EXT4-fs warning (device loop7): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 87.475640][ T6146] EXT4-fs (loop7): 1 orphan inode deleted [ 87.476044][ T6146] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.482011][ T6151] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.482088][ T6151] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.492150][ T113] EXT4-fs error (device loop7): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.492410][ T113] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 87.492427][ T113] EXT4-fs error (device loop7): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 0 [ 87.558120][ T4916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.712544][ T6157] loop8: detected capacity change from 0 to 128 [ 87.717429][ T6157] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 87.740016][ T5853] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.740380][ T5853] EXT4-fs error (device loop7): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 87.740408][ T5853] loop7: lost filesystem error report for type 5 error -117 [ 87.740476][ T5853] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 87.740494][ T5853] loop7: lost filesystem error report for type 5 error -117 [ 87.740617][ T5853] EXT4-fs error (device loop7): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 87.740640][ T5853] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 87.740699][ T5853] EXT4-fs error (device loop7): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 87.740726][ T5853] loop7: lost filesystem error report for type 5 error -117 [ 87.823108][ T6157] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 87.834246][ T29] audit: type=1400 audit(1790372830.247:1446): avc: denied { write } for pid=6163 comm="syz.6.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 87.834800][ T29] audit: type=1400 audit(1790372830.247:1447): avc: denied { read } for pid=6164 comm="syz.7.788" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 87.834937][ T29] audit: type=1400 audit(1790372830.247:1448): avc: denied { open } for pid=6164 comm="syz.7.788" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 87.839680][ T29] audit: type=1400 audit(1790372830.247:1449): avc: denied { ioctl } for pid=6164 comm="syz.7.788" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 87.955876][ T6168] netlink: 165 bytes leftover after parsing attributes in process `syz.6.790'. [ 88.033146][ T6065] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.110297][ T6178] netlink: 'syz.6.795': attribute type 12 has an invalid length. [ 88.137221][ T6181] syzkaller0: entered promiscuous mode [ 88.137242][ T6181] syzkaller0: entered allmulticast mode [ 88.255264][ T6184] capability: warning: `syz.1.797' uses 32-bit capabilities (legacy support in use) [ 88.870955][ T6174] loop7: detected capacity change from 0 to 4096 [ 88.927487][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.803'. [ 88.968889][ T6174] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.032092][ T6174] netlink: 'syz.7.793': attribute type 21 has an invalid length. [ 89.032416][ T6174] netlink: 132 bytes leftover after parsing attributes in process `syz.7.793'. [ 89.106133][ T5853] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.449240][ T29] audit: type=1326 audit(1790372831.857:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6229 comm="syz.7.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89210e159 code=0x7ffc0000 [ 89.450226][ T29] audit: type=1326 audit(1790372831.857:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6229 comm="syz.7.814" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff89210e159 code=0x7ffc0000 [ 89.832425][ T6237] loop7: detected capacity change from 0 to 512 [ 89.866199][ T6237] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 89.907872][ T6237] EXT4-fs (loop7): 1 truncate cleaned up [ 89.918470][ T6237] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.097117][ T5853] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.338848][ T6266] TC_ACT_REPEAT abuse ? [ 91.497323][ T1529] hid-generic 0000:0008:0000.0003: unknown main item tag 0x0 [ 91.497355][ T1529] hid-generic 0000:0008:0000.0003: unknown main item tag 0x0 [ 91.497685][ T1529] hid-generic 0000:0008:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 91.594238][ T6277] fido_id[6277]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 92.848095][ T6308] loop7: detected capacity change from 0 to 256 [ 93.846855][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.5.844'. [ 93.969016][ T6374] loop5: detected capacity change from 0 to 512 [ 94.012928][ T6374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.013256][ T6374] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.019488][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 94.019512][ T29] audit: type=1400 audit(1790372836.427:1465): avc: denied { write } for pid=6373 comm="syz.5.845" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.074578][ T5370] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.085415][ T6383] netlink: 'syz.1.847': attribute type 1 has an invalid length. [ 94.121044][ T6383] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.147375][ T6383] bond1: (slave veth3): Enslaving as an active interface with a down link [ 94.165200][ T6383] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 94.168620][ T6383] bond1: (slave batadv1): making interface the new active one [ 94.171522][ T6383] batadv1: entered promiscuous mode [ 94.173666][ T6383] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 94.201997][ T6383] veth5: entered allmulticast mode [ 94.203918][ T6383] bond1: (slave veth5): Enslaving as an active interface with a down link [ 94.938690][ T29] audit: type=1400 audit(1790372837.347:1466): avc: denied { write } for pid=6409 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.072091][ T29] audit: type=1400 audit(1790372837.487:1467): avc: denied { write } for pid=6439 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.339562][ T29] audit: type=1400 audit(1790372837.747:1468): avc: denied { write } for pid=6446 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.406100][ T29] audit: type=1400 audit(1790372837.817:1469): avc: denied { write } for pid=6473 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.448548][ T6372] loop6: detected capacity change from 0 to 4096 [ 95.467921][ T6441] loop5: detected capacity change from 0 to 512 [ 95.504654][ T29] audit: type=1400 audit(1790372837.917:1470): avc: denied { mounton } for pid=6440 comm="syz.5.854" path="/33/file0" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 95.578422][ T6372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.611256][ T6441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.611856][ T6441] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.631053][ T6441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.632397][ T6372] netlink: 40 bytes leftover after parsing attributes in process `syz.6.846'. [ 95.702925][ T4916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.850652][ T6499] syzkaller0: entered promiscuous mode [ 95.850671][ T6499] syzkaller0: entered allmulticast mode [ 95.883798][ T29] audit: type=1326 audit(1790372838.297:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6507 comm="syz.5.858" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd670fe159 code=0x7ffc0000 [ 95.883829][ T29] audit: type=1326 audit(1790372838.297:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6507 comm="syz.5.858" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd670fe159 code=0x7ffc0000 [ 95.885286][ T29] audit: type=1326 audit(1790372838.297:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6507 comm="syz.5.858" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd670fe159 code=0x7ffc0000 [ 95.885317][ T29] audit: type=1326 audit(1790372838.297:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6507 comm="syz.5.858" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd670fe159 code=0x7ffc0000 [ 96.060366][ T6531] loop5: detected capacity change from 0 to 128 [ 97.011619][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.865'. [ 97.255256][ T6581] sctp: [Deprecated]: syz.1.869 (pid 6581) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.255256][ T6581] Use struct sctp_sack_info instead [ 97.296523][ T6579] loop7: detected capacity change from 0 to 512 [ 97.331731][ T6579] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.334172][ T6579] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 97.360906][ T6579] EXT4-fs (loop7): mount failed [ 97.454563][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.7.871'. [ 97.454628][ T6587] openvswitch: netlink: Flow key attr not present in new flow. [ 99.101338][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 99.101355][ T29] audit: type=1400 audit(1790372841.427:1504): avc: denied { mount } for pid=6627 comm="syz.7.884" name="/" dev="autofs" ino=15078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 99.402346][ T29] audit: type=1400 audit(1790372841.807:1505): avc: denied { getopt } for pid=6636 comm="syz.6.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.474252][ T29] audit: type=1400 audit(1790372841.887:1506): avc: denied { append } for pid=6643 comm="syz.7.889" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.670838][ T6649] loop7: detected capacity change from 0 to 512 [ 99.689934][ T6649] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 99.778380][ T6649] EXT4-fs (loop7): orphan cleanup on readonly fs [ 99.787470][ T6649] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:521: comm syz.7.891: Block bitmap for bg 0 marked uninitialized [ 99.787543][ T6649] loop7: lost filesystem error report for type 5 error -117 [ 99.788047][ T6649] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 99.788077][ T6649] loop7: lost filesystem error report for type 5 error -117 [ 99.788563][ T6649] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:521: comm syz.7.891: Block bitmap for bg 0 marked uninitialized [ 99.788584][ T6649] loop7: lost filesystem error report for type 5 error -117 [ 99.788874][ T6649] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 99.789082][ T6649] loop7: lost filesystem error report for type 5 error -117 [ 99.789477][ T6649] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:521: comm syz.7.891: Block bitmap for bg 0 marked uninitialized [ 99.789498][ T6649] loop7: lost filesystem error report for type 5 error -117 [ 99.790021][ T6649] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 99.790188][ C1] EXT4-fs (loop7): error count since last fsck: 5 [ 99.790267][ C1] EXT4-fs (loop7): initial error at time 1790372842: ext4_read_block_bitmap_nowait:521 [ 99.790355][ C1] EXT4-fs (loop7): last error at time 1790372842: ext4_read_block_bitmap_nowait:521 [ 99.844327][ T6649] loop7: lost filesystem error report for type 5 error -117 [ 99.886042][ T6649] EXT4-fs (loop7): 1 orphan inode deleted [ 99.939463][ T6649] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 99.982370][ T29] audit: type=1400 audit(1790372842.397:1507): avc: denied { mounton } for pid=6648 comm="syz.7.891" path="/29/file1/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.044749][ T5853] EXT4-fs error (device loop7): ext4_readdir:280: inode #2: block 13: comm syz-executor: path /29/file1: bad entry in directory: directory entry overrun - offset=92, inode=16, rec_len=196732, size=1024 fake=0 [ 100.045068][ T5853] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 100.045341][ T5853] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 100.125689][ T29] audit: type=1400 audit(1790372842.537:1508): avc: denied { create } for pid=6656 comm="syz.1.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.126618][ T29] audit: type=1400 audit(1790372842.537:1509): avc: denied { bind } for pid=6656 comm="syz.1.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.261592][ T5853] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.267638][ T3431] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.346056][ T3431] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.373813][ T3431] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.377870][ T29] audit: type=1400 audit(1790372842.787:1510): avc: denied { sys_module } for pid=6665 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 100.420860][ T3431] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.501308][ T29] audit: type=1400 audit(1790372842.917:1511): avc: denied { map } for pid=6673 comm="syz.1.901" path="socket:[15722]" dev="sockfs" ino=15722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.547630][ T3431] bridge_slave_1: left allmulticast mode [ 100.547653][ T3431] bridge_slave_1: left promiscuous mode [ 100.547774][ T3431] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.549198][ T3431] bridge_slave_0: left allmulticast mode [ 100.549234][ T3431] bridge_slave_0: left promiscuous mode [ 100.549314][ T3431] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.633672][ T3431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.634781][ T3431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.635556][ T3431] bond0 (unregistering): Released all slaves [ 100.687150][ T3431] hsr_slave_0: left promiscuous mode [ 100.687471][ T3431] hsr_slave_1: left promiscuous mode [ 100.687927][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.687943][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.688492][ T3431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.688548][ T3431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.732846][ T3431] veth1_macvtap: left promiscuous mode [ 100.732875][ T3431] veth0_macvtap: left promiscuous mode [ 100.732913][ T3431] veth1_vlan: left promiscuous mode [ 100.733012][ T3431] veth0_vlan: left promiscuous mode [ 100.817526][ T29] audit: type=1400 audit(1790372843.227:1512): avc: denied { write } for pid=6685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.846513][ T3431] team0 (unregistering): Port device team_slave_1 removed [ 100.849089][ T3431] team0 (unregistering): Port device team_slave_0 removed [ 100.880191][ T29] audit: type=1400 audit(1790372843.287:1513): avc: denied { write } for pid=6697 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.921454][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 101.605576][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.605629][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.605765][ T6665] bridge_slave_0: entered allmulticast mode [ 101.606423][ T6665] bridge_slave_0: entered promiscuous mode [ 101.613758][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.906'. [ 101.656973][ T6728] netlink: 'syz.5.906': attribute type 1 has an invalid length. [ 101.657005][ T6728] netlink: 'syz.5.906': attribute type 2 has an invalid length. [ 101.657781][ T3023] 8021q: adding VLAN 0 to HW filter on device eth14 [ 101.658415][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.658445][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.658503][ T6665] bridge_slave_1: entered allmulticast mode [ 101.659080][ T6665] bridge_slave_1: entered promiscuous mode [ 101.718965][ T6665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.720092][ T6665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.783670][ T6665] team0: Port device team_slave_0 added [ 101.786735][ T6665] team0: Port device team_slave_1 added [ 101.868156][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.868169][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.868198][ T6665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.872814][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.872828][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.872858][ T6665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.893206][ T6740] loop6: detected capacity change from 0 to 256 [ 101.964054][ T6740] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.982621][ T6665] hsr_slave_0: entered promiscuous mode [ 101.987826][ T6740] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.990495][ T6665] hsr_slave_1: entered promiscuous mode [ 101.990774][ T6665] debugfs: 'hsr0' already exists in 'hsr' [ 101.990788][ T6665] Cannot create hsr debugfs directory [ 102.044186][ T3023] 8021q: adding VLAN 0 to HW filter on device eth15 [ 102.213709][ T6765] syzkaller0: entered promiscuous mode [ 102.213731][ T6765] syzkaller0: entered allmulticast mode [ 102.272027][ T6665] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 102.275090][ T6665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.278510][ T6665] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 102.742467][ T6665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.784314][ T6665] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 102.799292][ T6665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.800211][ T3023] 8021q: adding VLAN 0 to HW filter on device eth16 [ 102.814659][ T6665] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 102.829715][ T6665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.923848][ T6665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.939567][ T6665] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.948748][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.948783][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.978011][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.978041][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.995412][ T6802] syzkaller0: entered promiscuous mode [ 102.995438][ T6802] syzkaller0: entered allmulticast mode [ 103.240786][ T6817] loop6: detected capacity change from 0 to 256 [ 103.304135][ T6806] netlink: 28 bytes leftover after parsing attributes in process `syz.5.921'. [ 103.304605][ T6806] netlink: 28 bytes leftover after parsing attributes in process `syz.5.921'. [ 103.704889][ T6806] syz.5.921 (6806) used greatest stack depth: 9480 bytes left [ 103.863835][ T6665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.210549][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 104.210564][ T29] audit: type=1400 audit(1790372846.617:1541): avc: denied { connect } for pid=6841 comm="syz.1.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.263873][ T29] audit: type=1400 audit(1790372846.677:1542): avc: denied { read } for pid=6841 comm="syz.1.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.365695][ T6849] binfmt_misc: register: failed to install interpreter ./file0 [ 104.408236][ T6665] veth0_vlan: entered promiscuous mode [ 104.424477][ T6665] veth1_vlan: entered promiscuous mode [ 104.443988][ T6665] veth0_macvtap: entered promiscuous mode [ 104.448316][ T6665] veth1_macvtap: entered promiscuous mode [ 104.464983][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.476895][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.501347][ T70] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.503366][ T6849] loop6: detected capacity change from 0 to 512 [ 104.530561][ T3431] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.532309][ T113] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.532401][ T113] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.595232][ T6849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.595615][ T6849] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.672634][ T29] audit: type=1400 audit(1790372847.057:1543): avc: denied { write } for pid=6845 comm="syz.6.925" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.672699][ T29] audit: type=1400 audit(1790372847.077:1544): avc: denied { write } for pid=6845 comm="syz.6.925" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.725909][ T4916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.798976][ T29] audit: type=1400 audit(1790372847.207:1545): avc: denied { connect } for pid=6870 comm="syz.9.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.800616][ T29] audit: type=1400 audit(1790372847.217:1546): avc: denied { setopt } for pid=6870 comm="syz.9.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.822511][ T29] audit: type=1400 audit(1790372847.237:1547): avc: denied { write } for pid=6870 comm="syz.9.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 104.895215][ T6867] ip_tables: iptables: counters copy to user failed while replacing table [ 105.653042][ T6895] ip6erspan0: entered allmulticast mode [ 105.659966][ T42] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.736959][ T42] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.776373][ T42] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.859857][ T42] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.875195][ T6902] loop6: detected capacity change from 0 to 128 [ 105.929835][ T6885] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.929871][ T6885] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.930084][ T6885] bridge_slave_0: entered allmulticast mode [ 105.952248][ T6885] bridge_slave_0: entered promiscuous mode [ 105.965000][ T6885] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.965033][ T6885] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.965259][ T6885] bridge_slave_1: entered allmulticast mode [ 105.965891][ T6885] bridge_slave_1: entered promiscuous mode [ 105.978869][ T6902] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.979431][ T6902] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.982269][ T29] audit: type=1400 audit(1790372848.397:1548): avc: denied { write } for pid=6901 comm="syz.6.940" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.023362][ T6885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.026095][ T6885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.039398][ T6885] team0: Port device team_slave_0 added [ 106.040543][ T6885] team0: Port device team_slave_1 added [ 106.167320][ T29] audit: type=1400 audit(1790372848.577:1549): avc: denied { execute } for pid=6901 comm="syz.6.940" path="/99/file1/file1" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 106.201725][ T4916] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.347869][ T298] batadv1: left promiscuous mode [ 106.431381][ T42] bridge_slave_1: left allmulticast mode [ 106.431400][ T42] bridge_slave_1: left promiscuous mode [ 106.431702][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.432872][ T42] bridge_slave_0: left allmulticast mode [ 106.432887][ T42] bridge_slave_0: left promiscuous mode [ 106.433119][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.559198][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.570458][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.571315][ T42] bond0 (unregistering): Released all slaves [ 106.615129][ T6885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.615145][ T6885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.615196][ T6885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.615792][ T6885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.615803][ T6885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.615891][ T6885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.617829][ T42] hsr_slave_0: left promiscuous mode [ 106.618132][ T42] hsr_slave_1: left promiscuous mode [ 106.618795][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.618807][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.619392][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.619403][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.783535][ T42] veth1_macvtap: left promiscuous mode [ 106.783646][ T42] veth0_macvtap: left promiscuous mode [ 106.783683][ T42] veth1_vlan: left promiscuous mode [ 106.785169][ T42] veth0_vlan: left promiscuous mode [ 106.870916][ T42] team0 (unregistering): Port device team_slave_1 removed [ 106.873232][ T42] team0 (unregistering): Port device team_slave_0 removed [ 106.927714][ T6925] team0: Port device vxlan0 added [ 106.990919][ T6935] loop6: detected capacity change from 0 to 256 [ 106.991547][ T6885] hsr_slave_0: entered promiscuous mode [ 106.992044][ T6885] hsr_slave_1: entered promiscuous mode [ 106.992233][ T6885] debugfs: 'hsr0' already exists in 'hsr' [ 106.992242][ T6885] Cannot create hsr debugfs directory [ 107.021252][ T113] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.021293][ T113] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.021327][ T113] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.021377][ T113] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.093958][ T6931] loop9: detected capacity change from 0 to 128 [ 107.324827][ T29] audit: type=1400 audit(1790372849.737:1550): avc: denied { write } for pid=6940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.446561][ T3023] 8021q: adding VLAN 0 to HW filter on device eth17 [ 107.924719][ T7000] loop9: detected capacity change from 0 to 1024 [ 107.927209][ T7000] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 107.928015][ T7000] JBD2: no valid journal superblock found [ 107.928025][ T7000] EXT4-fs (loop9): Could not load journal inode [ 108.203714][ T3023] 8021q: adding VLAN 0 to HW filter on device eth18 [ 108.311820][ T6885] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.313983][ T6885] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.316300][ T6885] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.318260][ T6885] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.318956][ T6885] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.321332][ T6885] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.321966][ T6885] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.329141][ T6885] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.429038][ T6885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.438927][ T6885] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.442489][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.442523][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.447299][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.447333][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.516473][ T7053] loop9: detected capacity change from 0 to 512 [ 108.543783][ T7053] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.543934][ T7053] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.593178][ T3023] 8021q: adding VLAN 0 to HW filter on device eth20 [ 108.651121][ T6885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.771224][ T6885] veth0_vlan: entered promiscuous mode [ 108.775658][ T6885] veth1_vlan: entered promiscuous mode [ 108.814415][ T3023] 8021q: adding VLAN 0 to HW filter on device eth19 [ 108.819222][ T6885] veth0_macvtap: entered promiscuous mode [ 108.826761][ T6885] veth1_macvtap: entered promiscuous mode [ 108.836032][ T6885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.842355][ T6885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.892062][ T113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.892103][ T113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.892147][ T113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.892182][ T113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.167591][ T6665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.310259][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 109.310282][ T29] audit: type=1400 audit(1790372851.707:1573): avc: denied { ioctl } for pid=7119 comm="syz.9.964" path="socket:[17664]" dev="sockfs" ino=17664 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 109.687134][ T29] audit: type=1400 audit(1790372852.097:1574): avc: denied { ioctl } for pid=7127 comm="syz.9.966" path="socket:[17695]" dev="sockfs" ino=17695 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 109.730296][ T7137] syzkaller0: entered promiscuous mode [ 109.730317][ T7137] syzkaller0: entered allmulticast mode [ 109.736306][ T29] audit: type=1400 audit(1790372852.147:1575): avc: denied { ioctl } for pid=7138 comm="syz.1.969" path="socket:[17244]" dev="sockfs" ino=17244 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.736339][ T29] audit: type=1400 audit(1790372852.147:1576): avc: denied { bind } for pid=7138 comm="syz.1.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.736362][ T29] audit: type=1400 audit(1790372852.147:1577): avc: denied { connect } for pid=7138 comm="syz.1.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.736476][ T29] audit: type=1400 audit(1790372852.147:1578): avc: denied { setopt } for pid=7138 comm="syz.1.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.787180][ T7147] lo: entered promiscuous mode [ 109.789460][ T7147] bond0: entered promiscuous mode [ 109.792053][ T7147] dummy0: entered promiscuous mode [ 109.793121][ T7147] eql: entered promiscuous mode [ 109.793535][ T7147] ifb0: entered promiscuous mode [ 109.794005][ T7147] ifb1: entered promiscuous mode [ 109.794357][ T7147] virtio_net virtio1 eth0: entered promiscuous mode [ 109.795485][ T7147] ieee802154 phy0 wpan0: entered promiscuous mode [ 109.811371][ T7147] ieee802154 phy1 wpan1: entered promiscuous mode [ 109.811958][ T7147] teql0: entered promiscuous mode [ 109.812334][ T7147] tunl0: entered promiscuous mode [ 109.812723][ T7147] gre0: entered promiscuous mode [ 109.812950][ T7147] gretap0: entered promiscuous mode [ 109.821752][ T7147] erspan0: entered promiscuous mode [ 109.822185][ T7147] ip_vti0: entered promiscuous mode [ 109.822569][ T7147] ip6_vti0: entered promiscuous mode [ 109.822850][ T7147] sit0: entered promiscuous mode [ 109.823055][ T7147] ip6tnl0: entered promiscuous mode [ 109.823492][ T7147] ip6gre0: entered promiscuous mode [ 109.824519][ T7147] lapb0: entered promiscuous mode [ 109.825455][ T7147] lapb1: entered promiscuous mode [ 109.827785][ T7147] lapb2: entered promiscuous mode [ 109.830321][ T7147] lapb3: entered promiscuous mode [ 109.830875][ T7147] lowpan0: entered promiscuous mode [ 109.831528][ T7147] netdevsim netdevsim0 eth5: entered promiscuous mode [ 109.832848][ T7147] netdevsim netdevsim0 eth6: entered promiscuous mode [ 109.839587][ T7147] netdevsim netdevsim0 eth7: entered promiscuous mode [ 109.843889][ T7147] netdevsim netdevsim0 eth8: entered promiscuous mode [ 109.857152][ T7147] netdevsim netdevsim3 eth9: entered promiscuous mode [ 109.863341][ T7147] netdevsim netdevsim3 eth10: entered promiscuous mode [ 109.867911][ T7147] netdevsim netdevsim3 eth11: entered promiscuous mode [ 109.891902][ T7147] netdevsim netdevsim3 eth12: entered promiscuous mode [ 109.896163][ T7147] netdevsim netdevsim7 eth13: entered promiscuous mode [ 109.922452][ T7147] netdevsim netdevsim7 eth14: entered promiscuous mode [ 109.936895][ T7147] netdevsim netdevsim7 eth15: entered promiscuous mode [ 109.950875][ T29] audit: type=1400 audit(1790372852.347:1579): avc: denied { write } for pid=7116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.974370][ T7147] netdevsim netdevsim7 eth16: entered promiscuous mode [ 109.984690][ T7147] netdevsim netdevsim8 eth17: entered promiscuous mode [ 109.986908][ T7147] netdevsim netdevsim8 eth18: entered promiscuous mode [ 109.990129][ T7147] netdevsim netdevsim8 eth19: entered promiscuous mode [ 110.005630][ T7147] netdevsim netdevsim8 eth20: entered promiscuous mode [ 110.063457][ T29] audit: type=1400 audit(1790372852.467:1580): avc: denied { write } for pid=7156 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.246807][ T29] audit: type=1400 audit(1790372852.657:1581): avc: denied { write } for pid=7164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.288149][ T29] audit: type=1400 audit(1790372852.697:1582): avc: denied { write } for pid=7175 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.313807][ T7194] FAULT_INJECTION: forcing a failure. [ 112.313807][ T7194] name failslab, interval 1, probability 0, space 0, times 0 [ 112.313837][ T7194] CPU: 1 UID: 0 PID: 7194 Comm: syz.2.976 Not tainted syzkaller #0 PREEMPT(lazy) [ 112.313864][ T7194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.313878][ T7194] Call Trace: [ 112.313886][ T7194] [ 112.313929][ T7194] __dump_stack+0x1d/0x30 [ 112.313953][ T7194] dump_stack_lvl+0x95/0xd0 [ 112.314027][ T7194] dump_stack+0x15/0x1b [ 112.314048][ T7194] should_fail_ex+0x262/0x280 [ 112.314071][ T7194] ? __se_sys_mount+0xef/0x2e0 [ 112.314107][ T7194] should_failslab+0x8c/0xb0 [ 112.314143][ T7194] __kmalloc_cache_noprof+0x7a/0x400 [ 112.314181][ T7194] ? __se_sys_mount+0xef/0x2e0 [ 112.314199][ T7194] ? memdup_user+0x99/0xd0 [ 112.314268][ T7194] __se_sys_mount+0xef/0x2e0 [ 112.314332][ T7194] ? restore_fpregs_from_fpstate+0x61/0x110 [ 112.314354][ T7194] __x64_sys_mount+0x67/0x80 [ 112.314374][ T7194] x64_sys_call+0xc3b/0x2550 [ 112.314428][ T7194] do_syscall_64+0x112/0x360 [ 112.314452][ T7194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.314472][ T7194] RIP: 0033:0x7fbd8b3de159 [ 112.314487][ T7194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.314512][ T7194] RSP: 002b:00007fbd89e37028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 112.314535][ T7194] RAX: ffffffffffffffda RBX: 00007fbd8b665fa0 RCX: 00007fbd8b3de159 [ 112.314549][ T7194] RDX: 0000200000000180 RSI: 0000000000000000 RDI: 0000200000000040 [ 112.314632][ T7194] RBP: 00007fbd8b47506b R08: 00002000000001c0 R09: 0000000000000000 [ 112.314647][ T7194] R10: 0000000002000808 R11: 0000000000000246 R12: 0000000000000000 [ 112.314660][ T7194] R13: 00007fbd8b666038 R14: 00007fbd8b665fa0 R15: 00007ffd7362d9b8 [ 112.314682][ T7194] [ 112.360878][ T7199] netlink: 56 bytes leftover after parsing attributes in process `syz.1.979'. [ 112.486046][ T7206] futex_wake_op: syz.1.982 tries to shift op by 144; fix this program [ 112.550426][ T7208] loop2: detected capacity change from 0 to 164 [ 113.478302][ T7253] loop2: detected capacity change from 0 to 512 [ 113.593935][ T7253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.610753][ T7253] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.972029][ T6885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.099551][ T7306] loop6: detected capacity change from 0 to 512 [ 114.100091][ T7306] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 114.106427][ T7306] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm syz.6.997: Invalid block bitmap block 0 in block_group 0 [ 114.106614][ T7306] loop6: lost filesystem error report for type 5 error -117 [ 114.106783][ T7306] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 114.106805][ T7306] loop6: lost filesystem error report for type 5 error -117 [ 114.106977][ T7306] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.997: attempt to clear invalid blocks 983261 len 1 [ 114.107060][ T7306] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 114.107228][ T7306] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz.6.997: Invalid inode table block 0 in block_group 0 [ 114.107252][ T7306] loop6: lost filesystem error report for type 5 error -117 [ 114.107340][ T7306] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 114.107359][ T7306] loop6: lost filesystem error report for type 5 error -117 [ 114.107521][ T7306] EXT4-fs error (device loop6) in ext4_orphan_del:304: Corrupt filesystem [ 114.107538][ T7306] loop6: lost filesystem error report for type 5 error -117 [ 114.107648][ T7306] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz.6.997: Invalid inode table block 0 in block_group 0 [ 114.107673][ T7306] loop6: lost filesystem error report for type 5 error -117 [ 114.107855][ T7306] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 114.107873][ T7306] loop6: lost filesystem error report for type 5 error -117 [ 114.108041][ T7306] EXT4-fs error (device loop6): ext4_truncate:4721: inode #11: comm syz.6.997: mark_inode_dirty error [ 114.108065][ T7306] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 114.108181][ T7306] EXT4-fs error (device loop6) in ext4_process_orphan:346: Corrupt filesystem [ 114.108199][ T7306] loop6: lost filesystem error report for type 5 error -117 [ 114.108360][ T7306] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz.6.997: Invalid inode table block 0 in block_group 0 [ 114.108387][ T7306] loop6: lost filesystem error report for type 5 error -117 [ 114.108528][ T7306] EXT4-fs (loop6): 1 truncate cleaned up [ 114.111922][ T7306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.248161][ T4916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.361172][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 114.361187][ T29] audit: type=1400 audit(1790372856.777:1597): avc: denied { write } for pid=7316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.435177][ T29] audit: type=1400 audit(1790372856.847:1598): avc: denied { write } for pid=7334 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.518085][ T29] audit: type=1400 audit(1790372856.927:1599): avc: denied { bind } for pid=7307 comm="syz.1.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.518784][ T29] audit: type=1400 audit(1790372856.927:1600): avc: denied { listen } for pid=7307 comm="syz.1.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.519591][ T29] audit: type=1400 audit(1790372856.927:1601): avc: denied { accept } for pid=7307 comm="syz.1.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 114.551091][ T7337] syzkaller0: entered promiscuous mode [ 114.551111][ T7337] syzkaller0: entered allmulticast mode [ 114.555598][ T7337] tipc: Started in network mode [ 114.555627][ T7337] tipc: Node identity 1a972df01d03, cluster identity 4711 [ 114.555691][ T7337] tipc: Enabled bearer , priority 0 [ 114.609749][ T7335] tipc: Resetting bearer [ 114.613707][ T7335] tipc: Disabling bearer [ 114.658703][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1003'. [ 114.690226][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1002'. [ 114.730223][ T29] audit: type=1400 audit(1790372857.137:1602): avc: denied { firmware_load } for pid=7336 comm="syz.9.1002" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 114.917873][ T29] audit: type=1400 audit(1790372857.327:1603): avc: denied { write } for pid=7341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.092708][ T29] audit: type=1400 audit(1790372857.507:1604): avc: denied { write } for pid=7358 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.221250][ T7325] loop6: detected capacity change from 0 to 1024 [ 115.251146][ T7325] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 115.278973][ T7325] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 2: comm syz.6.1000: lblock 2 mapped to illegal pblock 2 (length 1) [ 115.279084][ T7325] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 115.279418][ T7325] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 115.279509][ T7325] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 48: comm syz.6.1000: lblock 0 mapped to illegal pblock 48 (length 1) [ 115.279549][ T7325] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 115.280158][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 115.280195][ C0] EXT4-fs (loop6): initial error at time 1790372857: ext4_map_blocks:790: inode 3: block 2 [ 115.280223][ C0] EXT4-fs (loop6): last error at time 1790372857: ext4_map_blocks:790: inode 3: block 48 [ 115.280823][ T7325] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 115.280852][ T7325] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.1000: Failed to acquire dquot type 0 [ 115.280903][ T7325] loop6: lost filesystem error report for type 5 error -117 [ 115.281448][ T7325] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 115.283231][ T7325] EXT4-fs error (device loop6): ext4_evict_inode:269: inode #11: comm syz.6.1000: mark_inode_dirty error [ 115.283261][ T7325] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 115.283573][ T7325] EXT4-fs warning (device loop6): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 115.283654][ T7325] EXT4-fs (loop6): 1 orphan inode deleted [ 115.289575][ T7325] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.331268][ T51] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 115.331540][ T51] EXT4-fs error (device loop6): ext4_release_dquot:7105: comm kworker/u8:3: Failed to release dquot type 0 [ 115.404727][ T4916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.405783][ T4916] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 115.406051][ T4916] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 115.406188][ T4916] EXT4-fs error (device loop6): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 115.406210][ T4916] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 115.406356][ T4916] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 115.590871][ T7373] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1006'. [ 115.975020][ T7389] bond0: (slave bond_slave_0): Releasing backup interface [ 115.994355][ T7389] bond0: (slave bond_slave_1): Releasing backup interface [ 116.045050][ T7389] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 116.049932][ T7389] bond0: entered allmulticast mode [ 116.049961][ T7389] dummy0: entered allmulticast mode [ 116.230383][ T7408] syzkaller0: entered promiscuous mode [ 116.230405][ T7408] syzkaller0: entered allmulticast mode [ 116.362337][ T7401] loop2: detected capacity change from 0 to 512 [ 116.423738][ T7401] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.445157][ T7401] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 116.450476][ T7401] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.1012: bg 0: block 248: padding at end of block bitmap is not set [ 116.465665][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 116.465684][ C0] EXT4-fs (loop2): last error at time 1790372858: ext4_validate_block_bitmap:445 [ 116.467160][ T7401] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.1012: Failed to acquire dquot type 1 [ 116.492512][ T7422] veth1_vlan: entered allmulticast mode [ 116.507283][ T7401] EXT4-fs (loop2): 1 truncate cleaned up [ 116.510785][ T7422] bridge0: port 3(syz_tun) entered blocking state [ 116.510820][ T7422] bridge0: port 3(syz_tun) entered disabled state [ 116.511006][ T7422] syz_tun: entered allmulticast mode [ 116.511399][ T7422] syz_tun: entered promiscuous mode [ 116.511586][ T7422] bridge0: port 3(syz_tun) entered blocking state [ 116.511706][ T7422] bridge0: port 3(syz_tun) entered forwarding state [ 116.528598][ T7401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 116.596222][ T7424] Cannot find set identified by id 0 to match [ 116.611983][ T7422] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 116.680510][ T7401] syz.2.1012 (7401) used greatest stack depth: 9352 bytes left [ 116.695969][ T7434] bond1: entered allmulticast mode [ 116.696236][ T7434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.702406][ T6885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 116.856441][ T7445] loop6: detected capacity change from 0 to 128 [ 116.870726][ T7445] FAT-fs (loop6): bogus number of reserved sectors [ 116.870784][ T7445] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 116.870925][ T7445] FAT-fs (loop6): Can't find a valid FAT filesystem [ 117.049651][ T7448] loop6: detected capacity change from 0 to 256 [ 117.420824][ T70] bridge0: port 3(syz_tun) entered disabled state [ 118.080538][ T7481] syzkaller0: entered promiscuous mode [ 118.080562][ T7481] syzkaller0: entered allmulticast mode [ 118.109051][ T7481] tipc: Enabled bearer , priority 0 [ 118.121969][ T7481] tipc: Resetting bearer [ 118.139682][ T7479] tipc: Resetting bearer [ 118.158588][ T7479] tipc: Disabling bearer [ 118.198068][ T7496] veth0_vlan: entered allmulticast mode [ 118.218488][ T7496] : renamed from vlan1 [ 118.792975][ T7535] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1043'. [ 119.241387][ T7574] loop2: detected capacity change from 0 to 128 [ 119.255891][ T7574] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 119.257255][ T7564] loop9: detected capacity change from 0 to 512 [ 119.267716][ T7574] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.370503][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 119.370517][ T29] audit: type=1326 audit(1790372861.787:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7571 comm="syz.5.1056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd670be98e code=0x7ffc0000 [ 119.372556][ T29] audit: type=1326 audit(1790372861.787:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7571 comm="syz.5.1056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd670be98e code=0x7ffc0000 [ 119.374721][ T29] audit: type=1326 audit(1790372861.787:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7571 comm="syz.5.1056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd670be98e code=0x7ffc0000 [ 119.375818][ T29] audit: type=1326 audit(1790372861.787:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7571 comm="syz.5.1056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd670be98e code=0x7ffc0000 [ 119.377430][ T29] audit: type=1326 audit(1790372861.787:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7571 comm="syz.5.1056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd670be98e code=0x7ffc0000 [ 119.379020][ T29] audit: type=1326 audit(1790372861.787:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7571 comm="syz.5.1056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd670be98e code=0x7ffc0000 [ 119.380830][ T29] audit: type=1326 audit(1790372861.797:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7571 comm="syz.5.1056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd670be98e code=0x7ffc0000 [ 119.382362][ T29] audit: type=1326 audit(1790372861.797:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7571 comm="syz.5.1056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd670be98e code=0x7ffc0000 [ 119.383896][ T29] audit: type=1326 audit(1790372861.797:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7571 comm="syz.5.1056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd670be98e code=0x7ffc0000 [ 119.385394][ T29] audit: type=1326 audit(1790372861.797:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7571 comm="syz.5.1056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd670be98e code=0x7ffc0000 [ 119.492851][ T7564] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.1053: bg 0: block 385: padding at end of block bitmap is not set [ 119.493011][ T7564] fserror_report: 6 callbacks suppressed [ 119.493087][ T7564] loop9: lost filesystem error report for type 5 error -117 [ 119.499227][ T7564] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 119.499407][ T7564] loop9: lost filesystem error report for type 5 error -117 [ 119.509046][ T7564] EXT4-fs (loop9): 2 truncates cleaned up [ 119.521130][ T7564] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.091573][ T7601] netlink: 'syz.6.1060': attribute type 10 has an invalid length. [ 120.091628][ T7601] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1060'. [ 120.091956][ T7601] veth1_virt_wifi: entered promiscuous mode [ 120.092516][ T7601] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 120.092670][ T7601] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 120.093384][ T7601] veth1_virt_wifi: entered allmulticast mode [ 120.099588][ T7601] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 120.099728][ T7601] bridge0: port 3(veth1_virt_wifi) entered forwarding state [ 120.442435][ T7607] erspan0: left promiscuous mode [ 120.443611][ T7607] bridge3: port 1(erspan0) entered disabled state [ 121.554391][ T6665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.594603][ T7611] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.609976][ T7607] bridge_slave_0: left promiscuous mode [ 121.619576][ T7607] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.638850][ T6885] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.639190][ T7607] bridge_slave_1: left promiscuous mode [ 121.639536][ T7607] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.693345][ T7607] bond0: (slave bond_slave_0): Releasing backup interface [ 121.728149][ T7607] team0: Port device team_slave_0 removed [ 121.754083][ T7607] team0: Port device team_slave_1 removed [ 121.755134][ T7607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.775129][ T7607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.797576][ T7607] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 121.874170][ T7630] loop9: detected capacity change from 0 to 512 [ 121.881855][ T7630] EXT4-fs: Ignoring removed i_version option [ 121.881885][ T7630] ext2: Unknown parameter 'obj_user' [ 122.103717][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1077'. [ 122.156610][ T7645] loop2: detected capacity change from 0 to 512 [ 122.162366][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1075'. [ 122.237295][ T7645] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.255068][ T7645] EXT4-fs (loop2): 1 truncate cleaned up [ 122.265109][ T7645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.395762][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1077'. [ 122.395804][ T7651] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1077'. [ 122.729814][ T6885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.914283][ T7669] netlink: 'syz.6.1083': attribute type 32 has an invalid length. [ 122.946723][ T7669] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 122.962805][ T7669] bond1 (unregistering): Released all slaves [ 123.177660][ T7677] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 123.407156][ T7685] ip_tables: iptables: counters copy to user failed while replacing table [ 123.493338][ T7692] netlink: 'syz.5.1090': attribute type 12 has an invalid length. [ 123.493355][ T7692] netlink: 'syz.5.1090': attribute type 29 has an invalid length. [ 123.493370][ T7692] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1090'. [ 123.493452][ T7692] netlink: 'syz.5.1090': attribute type 1 has an invalid length. [ 123.493467][ T7692] netlink: 'syz.5.1090': attribute type 2 has an invalid length. [ 123.546051][ T7687] loop9: detected capacity change from 0 to 512 [ 123.575024][ T7687] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.575237][ T7687] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.634169][ T7700] loop2: detected capacity change from 0 to 128 [ 123.668633][ T6665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.688282][ T7700] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 123.709795][ T7700] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.741265][ T7710] netlink: 'syz.9.1095': attribute type 30 has an invalid length. [ 123.767619][ T6885] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.899855][ T7720] loop9: detected capacity change from 0 to 512 [ 123.913382][ T7720] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 123.917106][ T7720] EXT4-fs (loop9): 1 truncate cleaned up [ 123.917536][ T7720] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.148605][ T7726] loop2: detected capacity change from 0 to 512 [ 124.204864][ T7726] EXT4-fs: Ignoring removed nobh option [ 124.689173][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 124.689190][ T29] audit: type=1400 audit(1790372866.687:1783): avc: denied { kexec_image_load } for pid=7733 comm="syz.1.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 124.802409][ T7726] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 124.805519][ T7726] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1102: attempt to clear invalid blocks 1 len 1 [ 124.805556][ T7726] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 124.806545][ T7726] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 124.809495][ T7726] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1102: invalid indirect mapped block 1819239214 (level 0) [ 124.809736][ T7726] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 124.810165][ C0] EXT4-fs (loop2): error count since last fsck: 3 [ 124.810185][ C0] EXT4-fs (loop2): initial error at time 1790372867: ext4_clear_blocks:876: inode 13 [ 124.810211][ C0] EXT4-fs (loop2): last error at time 1790372867: ext4_free_branches:1023: inode 13 [ 124.908385][ T7726] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1102: invalid indirect mapped block 1819239214 (level 1) [ 124.908515][ T7726] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 124.929548][ T7726] EXT4-fs (loop2): 1 truncate cleaned up [ 124.964098][ T7726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.022235][ T29] audit: type=1400 audit(1790372867.427:1784): avc: denied { setattr } for pid=7740 comm="syz.5.1106" name="NETLINK" dev="sockfs" ino=18306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 125.094828][ T6885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.104744][ T6665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.178571][ T7746] FAULT_INJECTION: forcing a failure. [ 125.178571][ T7746] name fail_futex, interval 1, probability 0, space 0, times 0 [ 125.178614][ T7746] CPU: 1 UID: 0 PID: 7746 Comm: syz.6.1108 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.178641][ T7746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.178653][ T7746] Call Trace: [ 125.178664][ T7746] [ 125.178672][ T7746] __dump_stack+0x1d/0x30 [ 125.178730][ T7746] dump_stack_lvl+0x95/0xd0 [ 125.178750][ T7746] dump_stack+0x15/0x1b [ 125.178773][ T7746] should_fail_ex+0x262/0x280 [ 125.178803][ T7746] should_fail+0xb/0x20 [ 125.178908][ T7746] get_futex_key+0x12d/0xb10 [ 125.179010][ T7746] futex_wake+0x89/0x400 [ 125.179054][ T7746] ? __rcu_read_unlock+0x4e/0x70 [ 125.179093][ T7746] do_futex+0x3f8/0x460 [ 125.179144][ T7746] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 125.179170][ T7746] __se_sys_futex+0x2f6/0x370 [ 125.179212][ T7746] __x64_sys_futex+0x78/0x90 [ 125.179295][ T7746] x64_sys_call+0x22e2/0x2550 [ 125.179319][ T7746] do_syscall_64+0x112/0x360 [ 125.179378][ T7746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.179434][ T7746] RIP: 0033:0x7f000303e159 [ 125.179457][ T7746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.179476][ T7746] RSP: 002b:00007f0001a550e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 125.179546][ T7746] RAX: ffffffffffffffda RBX: 00007f00032c6188 RCX: 00007f000303e159 [ 125.179563][ T7746] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f00032c618c [ 125.179579][ T7746] RBP: 00007f00032c6180 R08: 3fffffffffffffff R09: 0000000000000000 [ 125.179593][ T7746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.179609][ T7746] R13: 00007f00032c6218 R14: 00007fffedc8c0e0 R15: 00007fffedc8c1c8 [ 125.179631][ T7746] [ 125.306337][ T7739] kexec: Could not allocate control_code_buffer [ 125.528717][ T7752] loop9: detected capacity change from 0 to 128 [ 125.737533][ T7752] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 125.752717][ T7752] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.824863][ T6665] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.861595][ T7772] loop9: detected capacity change from 0 to 128 [ 125.867240][ T7772] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.867405][ T7772] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.881879][ T7772] Invalid option length (771) for dns_resolver key [ 125.901200][ T6665] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.934497][ T29] audit: type=1400 audit(1790372868.347:1785): avc: denied { write } for pid=7762 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.984312][ T7783] loop9: detected capacity change from 0 to 128 [ 126.001884][ T7783] FAT-fs (loop9): bogus number of reserved sectors [ 126.001953][ T7783] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 126.001981][ T7783] FAT-fs (loop9): Can't find a valid FAT filesystem [ 126.017966][ T29] audit: type=1400 audit(1790372868.427:1786): avc: denied { write } for pid=7786 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.231320][ T7794] veth1_vlan: entered allmulticast mode [ 126.244827][ T7794] bridge0: port 3(syz_tun) entered blocking state [ 126.244864][ T7794] bridge0: port 3(syz_tun) entered disabled state [ 126.244952][ T7794] syz_tun: entered allmulticast mode [ 126.245401][ T7794] syz_tun: entered promiscuous mode [ 126.245714][ T7794] bridge0: port 3(syz_tun) entered blocking state [ 126.245747][ T7794] bridge0: port 3(syz_tun) entered forwarding state [ 126.289035][ T51] bridge0: port 3(syz_tun) entered disabled state [ 126.331117][ T7794] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 126.451205][ T7780] loop6: detected capacity change from 0 to 4096 [ 126.574151][ T7780] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.966865][ T7798] loop2: detected capacity change from 0 to 512 [ 127.072620][ T7798] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 127.076674][ T7798] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1024: comm syz.2.1122: invalid block [ 127.076745][ T7798] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 127.077751][ T7798] EXT4-fs error (device loop2) in ext4_process_orphan:346: IO failure [ 127.077929][ T7798] loop2: lost filesystem error report for type 5 error -5 [ 127.080204][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 127.080252][ C0] EXT4-fs (loop2): initial error at time 1790372869: ext4_get_branch:178: inode 13: block 1024 [ 127.080442][ C0] EXT4-fs (loop2): last error at time 1790372869: ext4_process_orphan:346 [ 127.083210][ T7798] EXT4-fs (loop2): 1 truncate cleaned up [ 127.091496][ T7798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.146406][ T29] audit: type=1400 audit(1790372869.557:1787): avc: denied { setattr } for pid=7797 comm="syz.2.1122" path="/28/file0" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.198887][ T4916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.226643][ T29] audit: type=1400 audit(1790372869.637:1788): avc: denied { write } for pid=7809 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.280184][ T29] audit: type=1400 audit(1790372869.687:1789): avc: denied { write } for pid=7824 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.390057][ T6885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.394510][ T7834] FAULT_INJECTION: forcing a failure. [ 127.394510][ T7834] name failslab, interval 1, probability 0, space 0, times 0 [ 127.394555][ T7834] CPU: 0 UID: 0 PID: 7834 Comm: syz.9.1125 Not tainted syzkaller #0 PREEMPT(lazy) [ 127.394585][ T7834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.394600][ T7834] Call Trace: [ 127.394608][ T7834] [ 127.394616][ T7834] __dump_stack+0x1d/0x30 [ 127.394641][ T7834] dump_stack_lvl+0x95/0xd0 [ 127.394706][ T7834] dump_stack+0x15/0x1b [ 127.394730][ T7834] should_fail_ex+0x262/0x280 [ 127.394831][ T7834] ? create_filter_start+0xcf/0x140 [ 127.394921][ T7834] should_failslab+0x8c/0xb0 [ 127.394953][ T7834] __kmalloc_cache_noprof+0x7a/0x400 [ 127.394993][ T7834] ? create_filter_start+0xcf/0x140 [ 127.395026][ T7834] create_filter_start+0xcf/0x140 [ 127.395059][ T7834] apply_subsystem_event_filter+0x109/0xcd0 [ 127.395112][ T7834] ? __kmalloc_node_track_caller_noprof+0x2e4/0x500 [ 127.395150][ T7834] subsystem_filter_write+0x79/0xd0 [ 127.395174][ T7834] ? __pfx_subsystem_filter_write+0x10/0x10 [ 127.395217][ T7834] vfs_write+0x254/0x9a0 [ 127.395295][ T7834] ? __fget_files+0x184/0x1c0 [ 127.395319][ T7834] ? mutex_lock+0x57/0x90 [ 127.395349][ T7834] ksys_write+0xdc/0x1a0 [ 127.395435][ T7834] __x64_sys_write+0x40/0x50 [ 127.395465][ T7834] x64_sys_call+0x154e/0x2550 [ 127.395493][ T7834] do_syscall_64+0x112/0x360 [ 127.395517][ T7834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.395541][ T7834] RIP: 0033:0x7fce808ae159 [ 127.395599][ T7834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.395619][ T7834] RSP: 002b:00007fce7f307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.395642][ T7834] RAX: ffffffffffffffda RBX: 00007fce80b35fa0 RCX: 00007fce808ae159 [ 127.395657][ T7834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 127.395671][ T7834] RBP: 00007fce8094506b R08: 0000000000000000 R09: 0000000000000000 [ 127.395740][ T7834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.395754][ T7834] R13: 00007fce80b36038 R14: 00007fce80b35fa0 R15: 00007fffa8afa968 [ 127.395775][ T7834] [ 127.756227][ T7827] loop6: detected capacity change from 0 to 512 [ 127.823086][ T7827] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.650525][ T29] audit: type=1400 audit(1790372870.337:1790): avc: denied { write } for pid=7829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.705197][ T7827] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 128.706652][ T7827] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1124: bg 0: block 248: padding at end of block bitmap is not set [ 128.706730][ T7827] loop6: lost filesystem error report for type 5 error -117 [ 128.709250][ T7827] Quota error (device loop6): write_blk: dquota write failed [ 128.709361][ T7827] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 128.709440][ T7827] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.1124: Failed to acquire dquot type 1 [ 128.709575][ T7827] loop6: lost filesystem error report for type 5 error -28 [ 128.724592][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 128.724624][ C1] EXT4-fs (loop6): last error at time 1790372871: ext4_acquire_dquot:7069 [ 128.724682][ T7827] EXT4-fs (loop6): 1 truncate cleaned up [ 128.734511][ T7827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 128.896877][ T7868] loop9: detected capacity change from 0 to 512 [ 128.901487][ T4916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 128.909130][ T7868] EXT4-fs error (device loop9): dx_probe:791: inode #2: comm syz.9.1131: Attempting to read directory block (0) that is past i_size (16) [ 128.909244][ T7868] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 128.909423][ T7868] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 128.909862][ T7868] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.152815][ T7885] loop2: detected capacity change from 0 to 256 [ 129.220970][ T7889] bridge0: port 1(syz_tun) entered blocking state [ 129.221006][ T7889] bridge0: port 1(syz_tun) entered disabled state [ 129.221628][ T7889] syz_tun: entered promiscuous mode [ 129.266097][ T7889] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 129.310076][ T7893] ./dev/sda1: Can't lookup blockdev [ 130.179194][ T6665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.499486][ T7909] loop9: detected capacity change from 0 to 512 [ 130.523983][ T7909] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.544113][ T7909] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 130.545178][ T7909] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.1148: bg 0: block 248: padding at end of block bitmap is not set [ 130.545328][ T7909] loop9: lost filesystem error report for type 5 error -117 [ 130.548591][ T7909] __quota_error: 1 callbacks suppressed [ 130.548619][ T7909] Quota error (device loop9): write_blk: dquota write failed [ 130.548649][ T7909] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 130.548788][ T7909] EXT4-fs error (device loop9): ext4_acquire_dquot:7069: comm syz.9.1148: Failed to acquire dquot type 1 [ 130.548819][ T7909] loop9: lost filesystem error report for type 5 error -28 [ 130.550224][ C0] EXT4-fs (loop9): error count since last fsck: 2 [ 130.550240][ C0] EXT4-fs (loop9): last error at time 1790372872: ext4_acquire_dquot:7069 [ 130.557136][ T7909] EXT4-fs (loop9): 1 truncate cleaned up [ 130.565251][ T7909] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 130.768633][ T7909] syz.9.1148 (7909) used greatest stack depth: 8840 bytes left [ 130.770468][ T6665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 131.582985][ T29] audit: type=1400 audit(1790372873.997:1792): avc: denied { write } for pid=7940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.629061][ T29] audit: type=1400 audit(1790372874.037:1793): avc: denied { write } for pid=7966 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.770416][ T29] audit: type=1400 audit(1790372874.187:1794): avc: denied { name_bind } for pid=7980 comm="syz.5.1169" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 131.780576][ T7981] netlink: 'syz.2.1170': attribute type 10 has an invalid length. [ 131.780620][ T7981] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1170'. [ 131.780782][ T7981] veth1_virt_wifi: entered promiscuous mode [ 131.784099][ T7981] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 131.784368][ T7981] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 131.784620][ T7981] veth1_virt_wifi: entered allmulticast mode [ 131.797456][ T7981] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 131.797539][ T7981] bridge0: port 3(veth1_virt_wifi) entered forwarding state [ 132.076672][ T7996] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7996 comm=syz.9.1173 [ 134.321368][ T8027] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 135.277369][ T8038] loop2: detected capacity change from 0 to 4096 [ 135.495289][ T8052] netlink: 'syz.1.1191': attribute type 10 has an invalid length. [ 135.555864][ T29] audit: type=1400 audit(1790372877.967:1795): avc: denied { unmount } for pid=6665 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 136.748577][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1205'. [ 137.235481][ T8104] loop9: detected capacity change from 0 to 512 [ 137.894960][ T29] audit: type=1400 audit(1790372880.287:1796): avc: denied { read write } for pid=8112 comm="syz.2.1211" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 137.920173][ T29] audit: type=1400 audit(1790372880.287:1797): avc: denied { open } for pid=8112 comm="syz.2.1211" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 138.033264][ T8119] loop2: detected capacity change from 0 to 512 [ 138.067863][ T8119] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.1214: Invalid inode bitmap blk 4 in block_group 0 [ 138.067904][ T8119] loop2: lost filesystem error report for type 5 error -117 [ 138.093425][ T8119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.254337][ T6885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.342993][ T8140] loop2: detected capacity change from 0 to 1024 [ 138.372702][ T8140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 138.373353][ T8140] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.378935][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1221'. [ 138.412374][ T6885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 139.553384][ T8176] loop2: detected capacity change from 0 to 512 [ 139.975266][ T8174] loop6: detected capacity change from 0 to 512 [ 139.990406][ T8174] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.1242: Unrecognised inode hash code 255 [ 139.990485][ T8174] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1242: Corrupt directory, running e2fsck is recommended [ 140.098496][ T8174] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 140.099732][ T8174] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.1242: corrupted in-inode xattr: invalid ea_ino [ 140.099832][ T8174] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 140.100183][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 140.100213][ C0] EXT4-fs (loop6): initial error at time 1790372882: ext4_iget_extra_inode:5210: inode 15 [ 140.100316][ C0] EXT4-fs (loop6): last error at time 1790372882: ext4_iget_extra_inode:5210: inode 15 [ 140.160559][ T8174] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.1242: couldn't read orphan inode 15 (err -117) [ 140.160711][ T8174] loop6: lost filesystem error report for type 5 error -117 [ 140.303289][ T8174] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.318304][ T8191] syzkaller0: entered promiscuous mode [ 140.318323][ T8191] syzkaller0: entered allmulticast mode [ 140.323179][ T8191] tipc: Enabled bearer , priority 0 [ 140.328103][ T8191] tipc: Resetting bearer [ 140.337984][ T8174] EXT4-fs error (device loop6): __ext4_remount:6872: comm syz.6.1242: Abort forced by user [ 140.338497][ T8174] EXT4-fs (loop6): Remounting filesystem read-only [ 140.338575][ T8174] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 140.339090][ T8189] tipc: Resetting bearer [ 140.362917][ T8189] tipc: Disabling bearer [ 140.402634][ T4916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.520054][ T8195] loop6: detected capacity change from 0 to 512 [ 140.537540][ T8195] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 140.561621][ T8195] EXT4-fs (loop6): 1 truncate cleaned up [ 140.567191][ T8195] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.328761][ T4916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.367299][ T8212] loop6: detected capacity change from 0 to 4096 [ 141.380721][ T8212] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.447073][ T29] audit: type=1400 audit(1790372883.847:1798): avc: denied { accept } for pid=8211 comm="syz.6.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 142.201301][ T4916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.409266][ T29] audit: type=1400 audit(1790372884.817:1799): avc: denied { nlmsg_write } for pid=8250 comm="syz.5.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 142.409345][ T29] audit: type=1400 audit(1790372884.817:1800): avc: denied { audit_write } for pid=8250 comm="syz.5.1251" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 142.409372][ T29] audit: type=1107 audit(1790372884.817:1801): pid=8250 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 142.473076][ T8254] loop6: detected capacity change from 0 to 512 [ 142.570344][ T29] audit: type=1400 audit(1790372884.977:1802): avc: denied { read } for pid=8252 comm="syz.2.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 142.935206][ T8262] loop9: detected capacity change from 0 to 512 [ 142.947049][ T8262] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 142.948675][ T8262] EXT4-fs error (device loop9): ext4_iget_extra_inode:5210: inode #15: comm syz.9.1256: corrupted in-inode xattr: e_value size too large [ 142.948706][ T8262] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.948928][ T8262] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.1256: couldn't read orphan inode 15 (err -117) [ 142.949013][ T8262] loop9: lost filesystem error report for type 5 error -117 [ 142.949473][ T8262] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.029430][ T6665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.256392][ T8283] netlink: 'syz.5.1265': attribute type 1 has an invalid length. [ 143.324590][ T8283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.235311][ T8283] bond2: (slave veth3): Enslaving as an active interface with a down link [ 144.299695][ T8288] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 144.309807][ T8288] bond2: (slave batadv1): making interface the new active one [ 144.311187][ T8288] batadv1: entered promiscuous mode [ 144.317805][ T8288] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 144.337366][ T8283] veth5: entered allmulticast mode [ 144.339048][ T8283] bond2: (slave veth5): Enslaving as an active interface with a down link [ 144.478889][ T29] audit: type=1400 audit(1790372886.887:1803): avc: denied { create } for pid=8299 comm="syz.5.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 144.509918][ T29] audit: type=1400 audit(1790372886.917:1804): avc: denied { connect } for pid=8298 comm="syz.2.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.548272][ T8306] loop6: detected capacity change from 0 to 512 [ 144.563353][ T8306] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 144.563397][ T8306] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.1271: corrupted in-inode xattr: e_value size too large [ 144.563486][ T8306] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 144.564027][ T8306] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.1271: couldn't read orphan inode 15 (err -117) [ 144.564128][ T8306] loop6: lost filesystem error report for type 5 error -117 [ 144.566024][ T8306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.665049][ T8312] loop2: detected capacity change from 0 to 512 [ 144.669798][ T8312] EXT4-fs (loop2): invalid journal inode [ 144.669823][ T8312] EXT4-fs (loop2): can't get journal size [ 144.689180][ T8312] EXT4-fs (loop2): 1 truncate cleaned up [ 144.689751][ T8312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.706406][ T29] audit: type=1400 audit(1790372887.117:1805): avc: denied { write } for pid=8311 comm="syz.2.1274" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.708618][ T29] audit: type=1400 audit(1790372887.117:1806): avc: denied { write } for pid=8311 comm="syz.2.1274" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.708675][ T29] audit: type=1400 audit(1790372887.117:1807): avc: denied { create } for pid=8311 comm="syz.2.1274" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 144.709734][ T8314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.794299][ T4916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.934112][ T8323] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.1280'. [ 144.934239][ T8323] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.1280'. [ 144.946928][ T8316] loop9: detected capacity change from 0 to 512 [ 144.968302][ T8316] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 144.985406][ T8316] EXT4-fs (loop9): 1 truncate cleaned up [ 144.988013][ T8316] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.087456][ T6665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.585951][ T8332] loop9: detected capacity change from 0 to 512 [ 146.084317][ T6885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.133102][ T8335] netlink: 'syz.2.1282': attribute type 1 has an invalid length. [ 146.162197][ T8335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.232258][ T8335] bond1: (slave veth3): Enslaving as an active interface with a down link [ 146.397485][ T8345] veth5: entered allmulticast mode [ 146.407697][ T8345] bond1: (slave veth5): Enslaving as an active interface with a down link [ 146.550652][ T8339] loop9: detected capacity change from 0 to 4096 [ 146.649735][ T8335] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 146.670434][ T8335] bond1: (slave batadv1): making interface the new active one [ 146.681146][ T8335] batadv1: entered promiscuous mode [ 146.682476][ T8335] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 146.901545][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 146.901560][ T29] audit: type=1326 audit(1790372889.317:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.1.1292" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe960a6e159 code=0x7ffc0000 [ 146.987287][ T29] audit: type=1400 audit(1790372889.397:1866): avc: denied { create } for pid=8362 comm="syz.6.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 146.988586][ T29] audit: type=1400 audit(1790372889.397:1867): avc: denied { accept } for pid=8362 comm="syz.6.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 147.005997][ T8356] syzkaller0: entered promiscuous mode [ 147.006065][ T8356] syzkaller0: entered allmulticast mode [ 147.011164][ T8363] loop6: detected capacity change from 0 to 512 [ 147.011965][ T8363] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.042854][ T8363] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #2: block 8: comm syz.6.1291: lblock 0 mapped to illegal pblock 8 (length 1) [ 147.042904][ T8363] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 147.052804][ T8363] EXT4-fs (loop6): Remounting filesystem read-only [ 147.052874][ T8363] EXT4-fs warning (device loop6): dx_probe:791: inode #2: lblock 0: comm syz.6.1291: error -EUCLEAN reading directory block [ 147.052919][ T8363] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 147.052975][ T8363] EXT4-fs warning (device loop6): dx_probe:791: inode #2: lblock 0: comm syz.6.1291: error -EUCLEAN reading directory block [ 147.053074][ T8363] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 147.053732][ T8363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.168479][ T4916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.746007][ T8376] loop2: detected capacity change from 0 to 256 [ 147.834148][ T8376] msdos: Unknown parameter '0xffffffffffffffff' [ 147.865138][ T8385] netlink: 'syz.9.1299': attribute type 1 has an invalid length. [ 147.893889][ T8385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.914508][ T8383] loop6: detected capacity change from 0 to 512 [ 147.923538][ T8383] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.940001][ T8383] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 147.953108][ T8385] bond1: (slave veth3): Enslaving as an active interface with a down link [ 147.958517][ T8383] EXT4-fs (loop6): mount failed [ 147.977353][ T8385] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 147.979693][ T8385] bond1: (slave batadv1): making interface the new active one [ 147.995470][ T8385] batadv1: entered promiscuous mode [ 147.995729][ T8385] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 148.052903][ T8369] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1293'. [ 148.109611][ T8385] veth5: entered allmulticast mode [ 148.116960][ T8385] bond1: (slave veth5): Enslaving as an active interface with a down link [ 148.187828][ T29] audit: type=1400 audit(1790372890.597:1868): avc: denied { shutdown } for pid=8400 comm="syz.1.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.244429][ T8396] loop9: detected capacity change from 0 to 8192 [ 148.323814][ T29] audit: type=1400 audit(1790372890.727:1869): avc: denied { mounton } for pid=8395 comm="syz.9.1302" path="/73/file2/file0" dev="loop9" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 148.475623][ T8409] loop2: detected capacity change from 0 to 2048 [ 148.559592][ T8409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.580970][ T8422] loop6: detected capacity change from 0 to 512 [ 148.610975][ T6885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.723669][ T8420] loop9: detected capacity change from 0 to 512 [ 148.746480][ T8420] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 148.862972][ T8420] EXT4-fs (loop9): 1 truncate cleaned up [ 148.896745][ T8420] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.881536][ T8428] loop2: detected capacity change from 0 to 512 [ 149.886191][ T8428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.889137][ T8428] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.966117][ T8428] EXT4-fs (loop2): mount failed [ 149.976424][ T6665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.050227][ T29] audit: type=1400 audit(1790372893.447:1870): avc: denied { unmount } for pid=6885 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 151.856246][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 151.857012][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 151.857377][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 151.857827][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 151.857864][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 154.275116][ T8484] loop6: detected capacity change from 0 to 512 [ 154.406736][ T8487] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 154.778415][ T8484] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 154.784931][ T8484] EXT4-fs (loop6): orphan cleanup on readonly fs [ 154.785051][ T8484] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.1337: bad orphan inode 15 [ 154.785130][ T8484] loop6: lost filesystem error report for type 5 error -117 [ 154.800232][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 154.800294][ C1] EXT4-fs (loop6): initial error at time 1790372897: ext4_orphan_get:1429 [ 154.800391][ C1] EXT4-fs (loop6): last error at time 1790372897: ext4_orphan_get:1429 [ 154.844316][ T8484] ext4_test_bit(bit=14, block=5) = 0 [ 154.855986][ T8484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 154.889156][ T8484] ip_tables: iptables: counters copy to user failed while replacing table [ 154.927688][ T4916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.955123][ T8496] loop2: detected capacity change from 0 to 2048 [ 154.994328][ T8496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.998400][ T8496] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 155.022039][ T29] audit: type=1400 audit(1790372897.407:1871): avc: denied { write } for pid=8495 comm="syz.2.1331" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.022069][ T29] audit: type=1400 audit(1790372897.407:1872): avc: denied { write } for pid=8495 comm="syz.2.1331" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.022094][ T29] audit: type=1400 audit(1790372897.407:1873): avc: denied { write } for pid=8495 comm="syz.2.1331" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.058152][ T8504] ieee802154 phy0 wpan0: encryption failed: -22 [ 155.089504][ T8504] 9p: Bad value for 'rfdno' [ 155.129054][ T8507] tipc: Started in network mode [ 155.129069][ T8507] tipc: Node identity 4, cluster identity 4711 [ 155.129079][ T8507] tipc: Node number set to 4 [ 155.178802][ T29] audit: type=1400 audit(1790372897.587:1874): avc: denied { append } for pid=8495 comm="syz.2.1331" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.229506][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 0 with max blocks 690 with error 28 [ 155.229540][ T51] EXT4-fs (loop2): This should not happen!! Data will be lost [ 155.229540][ T51] [ 155.229554][ T51] EXT4-fs (loop2): Total free blocks count 0 [ 155.229568][ T51] EXT4-fs (loop2): Free/Dirty block details [ 155.229581][ T51] EXT4-fs (loop2): free_blocks=4112 [ 155.229640][ T51] EXT4-fs (loop2): dirty_blocks=704 [ 155.229651][ T51] EXT4-fs (loop2): Block reservation details [ 155.229665][ T51] EXT4-fs (loop2): i_reserved_data_blocks=44 [ 155.242118][ T6885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.319815][ T8513] loop9: detected capacity change from 0 to 512 [ 155.371411][ T8513] EXT4-fs (loop9): 1 orphan inode deleted [ 155.374221][ T8513] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.403595][ T8513] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.423704][ T8513] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1336'. [ 155.424814][ T8513] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1336'. [ 155.444433][ T7449] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 155.444538][ T7449] EXT4-fs error (device loop9): ext4_release_dquot:7105: comm kworker/u8:8: Failed to release dquot type 1 [ 155.445596][ T6665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.418592][ T29] audit: type=1400 audit(1790372899.827:1875): avc: denied { mount } for pid=8537 comm="syz.2.1343" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 157.571093][ T29] audit: type=1400 audit(1790372899.967:1876): avc: denied { mounton } for pid=8537 comm="syz.2.1343" path="/file0" dev="bpf" ino=21260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 157.654064][ T8553] loop6: detected capacity change from 0 to 1024 [ 157.676225][ T8553] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 157.678312][ T8553] JBD2: no valid journal superblock found [ 157.678325][ T8553] EXT4-fs (loop6): Could not load journal inode [ 157.678698][ T8549] loop2: detected capacity change from 0 to 512 [ 157.717730][ T8549] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 157.765798][ T8549] EXT4-fs (loop2): 1 truncate cleaned up [ 157.775108][ T8549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.892746][ T8561] loop9: detected capacity change from 0 to 512 [ 157.905674][ T8561] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 157.935932][ T8561] loop9: detected capacity change from 0 to 128 [ 157.939771][ T8561] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 157.963395][ T6885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.999876][ T8561] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.006032][ T8561] ext2 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.035336][ T29] audit: type=1400 audit(1790372900.447:1877): avc: denied { write } for pid=8559 comm="syz.9.1351" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.194367][ T6665] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.811060][ T8591] loop9: detected capacity change from 0 to 1024 [ 158.827948][ T8591] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 158.841243][ T8591] JBD2: no valid journal superblock found [ 158.841257][ T8591] EXT4-fs (loop9): Could not load journal inode [ 158.962562][ T8603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1366'. [ 158.973830][ T8603] netlink: 'syz.1.1366': attribute type 10 has an invalid length. [ 158.974038][ T8603] bond0: left allmulticast mode [ 158.980720][ T8603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.988173][ T8603] bond0: entered allmulticast mode [ 158.993811][ T8603] team0: Port device bond0 added [ 158.996548][ T8603] vlan0: entered promiscuous mode [ 158.997524][ T8603] vlan0: left allmulticast mode [ 159.100617][ T8606] loop9: detected capacity change from 0 to 128 [ 159.530773][ T8616] loop9: detected capacity change from 0 to 256 [ 159.647865][ T8624] loop6: detected capacity change from 0 to 128 [ 159.701565][ T29] audit: type=1326 audit(1790372902.117:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.6.1371" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000303e159 code=0x7ffc0000 [ 159.704571][ T29] audit: type=1326 audit(1790372902.117:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8623 comm="syz.6.1371" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f000303e159 code=0x7ffc0000 [ 159.882885][ T8628] xt_hashlimit: size too large, truncated to 1048576 [ 162.042836][ T8668] loop9: detected capacity change from 0 to 512 [ 162.142387][ T8668] EXT4-fs: Ignoring removed nobh option [ 162.284761][ T8668] EXT4-fs (loop9): orphan cleanup on readonly fs [ 162.287380][ T8668] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.1383: bg 0: block 7: invalid block bitmap [ 162.287806][ T8668] loop9: lost filesystem error report for type 5 error -117 [ 162.290101][ T8668] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 162.290162][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 162.290192][ C0] EXT4-fs (loop9): initial error at time 1790372904: ext4_validate_block_bitmap:436 [ 162.290242][ C0] EXT4-fs (loop9): last error at time 1790372904: ext4_validate_block_bitmap:436 [ 162.335811][ T8668] loop9: lost filesystem error report for type 5 error -117 [ 162.362224][ T8668] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2933: inode #11: comm syz.9.1383: corrupted xattr block 95: invalid header [ 162.362545][ T8668] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 162.363656][ T8668] EXT4-fs warning (device loop9): ext4_evict_inode:288: xattr delete (err -117) [ 162.364336][ T8668] EXT4-fs (loop9): 1 orphan inode deleted [ 162.423936][ T8668] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 162.429435][ T8668] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.525323][ T8688] random: crng reseeded on system resumption [ 162.525349][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 162.525360][ T29] audit: type=1400 audit(1790372904.937:1931): avc: denied { write } for pid=8687 comm="syz.6.1389" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 162.525432][ T29] audit: type=1400 audit(1790372904.937:1932): avc: denied { open } for pid=8687 comm="syz.6.1389" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 162.898638][ T8697] Restarting kernel threads ... [ 162.898799][ T8697] Done restarting kernel threads. [ 162.899623][ T29] audit: type=1400 audit(1790372905.307:1933): avc: denied { ioctl } for pid=8687 comm="syz.6.1389" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 162.903482][ T7449] batadv1: left promiscuous mode [ 163.226699][ T8704] veth0: entered promiscuous mode [ 163.229735][ T8703] veth0: left promiscuous mode [ 163.290922][ T8711] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1396'. [ 163.294173][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.295042][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.929320][ T8726] loop6: detected capacity change from 0 to 512 [ 164.063017][ T8726] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.063104][ T8726] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.216006][ T8732] Q6`Ҙ: renamed from lo (while UP) [ 164.267366][ T29] audit: type=1400 audit(1790372906.677:1934): avc: denied { write } for pid=8719 comm="syz.6.1399" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.267450][ T29] audit: type=1400 audit(1790372906.677:1935): avc: denied { write } for pid=8719 comm="syz.6.1399" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.328538][ T29] audit: type=1400 audit(1790372906.737:1936): avc: denied { write } for pid=8719 comm="syz.6.1399" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.417000][ T4916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.481010][ T8742] loop2: detected capacity change from 0 to 1024 [ 164.495773][ T8742] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 164.499985][ T8742] JBD2: no valid journal superblock found [ 164.500009][ T8742] EXT4-fs (loop2): Could not load journal inode [ 164.699840][ T8756] loop6: detected capacity change from 0 to 512 [ 164.721964][ T8756] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.722030][ T8756] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.756633][ T29] audit: type=1400 audit(1790372907.167:1937): avc: denied { write } for pid=8755 comm="syz.6.1410" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.923753][ T8769] ./dev/sda1: Can't lookup blockdev [ 165.397151][ T51] batadv1: left promiscuous mode [ 165.430221][ T29] audit: type=1400 audit(1790372907.817:1938): avc: denied { ioctl } for pid=8755 comm="syz.6.1410" path="/180/bus/file1" dev="loop6" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 165.464001][ T4916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.706239][ T29] audit: type=1400 audit(1790372908.117:1939): avc: denied { mounton } for pid=8773 comm="syz.6.1416" path="/181/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 165.974587][ T51] batadv1: left promiscuous mode [ 166.067389][ T29] audit: type=1400 audit(1790372908.477:1940): avc: denied { unlink } for pid=8776 comm="syz.1.1417" name="file1" dev="tmpfs" ino=2017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 166.375417][ T8805] : renamed from vlan1 [ 166.865835][ T8844] loop2: detected capacity change from 0 to 256 [ 166.993033][ T8854] veth0_vlan: entered allmulticast mode [ 167.011541][ T8854] : renamed from vlan1 [ 167.148423][ T8864] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1455'. [ 167.173206][ T8864] veth3: entered promiscuous mode [ 167.173242][ T8864] veth3: entered allmulticast mode [ 167.242757][ T8864] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.244052][ T8864] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.487815][ T8871] binfmt_misc: register: failed to install interpreter ./file0 [ 167.525860][ T8864] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.525908][ T8864] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.562107][ T8871] loop2: detected capacity change from 0 to 512 [ 167.600027][ T8864] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.600089][ T8864] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.637229][ T8871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.637610][ T8871] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.669108][ T29] audit: type=1400 audit(1790372910.077:1941): avc: denied { write } for pid=8870 comm="syz.2.1446" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.697226][ T8864] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.697343][ T8864] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.727850][ T6885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.778292][ T8879] loop2: detected capacity change from 0 to 512 [ 167.778907][ T8879] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 167.797072][ T8879] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm syz.2.1447: Invalid block bitmap block 0 in block_group 0 [ 167.797131][ T8879] loop2: lost filesystem error report for type 5 error -117 [ 167.797443][ T8879] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 167.797476][ T8879] loop2: lost filesystem error report for type 5 error -117 [ 167.797559][ T8879] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.1447: attempt to clear invalid blocks 983261 len 1 [ 167.797670][ T8879] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 167.798734][ T8879] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.1447: Invalid inode table block 0 in block_group 0 [ 167.798807][ T8879] loop2: lost filesystem error report for type 5 error -117 [ 167.800015][ T8879] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 167.800036][ T8879] loop2: lost filesystem error report for type 5 error -117 [ 167.800160][ C1] EXT4-fs (loop2): error count since last fsck: 5 [ 167.800242][ C1] EXT4-fs (loop2): initial error at time 1790372910: ext4_read_block_bitmap_nowait:487 [ 167.800276][ C1] EXT4-fs (loop2): last error at time 1790372910: ext4_reserve_inode_write:6522 [ 167.886029][ T298] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.886064][ T298] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.886377][ T51] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.886407][ T51] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.886445][ T51] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.886525][ T51] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.886609][ T51] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.886700][ T8879] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem [ 167.886719][ T8879] loop2: lost filesystem error report for type 5 error -117 [ 167.886769][ T51] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.887784][ T8879] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.1447: Invalid inode table block 0 in block_group 0 [ 167.887856][ T8879] loop2: lost filesystem error report for type 5 error -117 [ 167.888471][ T8879] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 167.888492][ T8879] loop2: lost filesystem error report for type 5 error -117 [ 167.888617][ T8879] EXT4-fs error (device loop2): ext4_truncate:4721: inode #11: comm syz.2.1447: mark_inode_dirty error [ 167.888681][ T8879] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 167.888898][ T8879] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem [ 167.888997][ T8879] loop2: lost filesystem error report for type 5 error -117 [ 167.889147][ T8879] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.1447: Invalid inode table block 0 in block_group 0 [ 167.889222][ T8879] loop2: lost filesystem error report for type 5 error -117 [ 167.889368][ T8879] EXT4-fs (loop2): 1 truncate cleaned up [ 167.889803][ T8879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.941981][ T6885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.084878][ T8889] netlink: 'syz.1.1452': attribute type 1 has an invalid length. [ 168.217876][ T29] audit: type=1400 audit(1790372910.627:1942): avc: denied { map } for pid=8899 comm="syz.9.1456" path="/105/dev/sda" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.451823][ T8912] loop6: detected capacity change from 0 to 256 [ 168.727467][ T8924] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.1476'. [ 169.400096][ T8944] loop2: detected capacity change from 0 to 512 [ 169.437178][ T8944] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.1472: Invalid inode bitmap blk 4 in block_group 0 [ 169.437369][ T8944] loop2: lost filesystem error report for type 5 error -117 [ 169.443570][ T8944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.480843][ T8944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1472'. [ 169.604303][ T6885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.647796][ T8958] loop2: detected capacity change from 0 to 128 [ 169.718639][ T8959] loop6: detected capacity change from 0 to 512 [ 170.349364][ T8958] syz.2.1478: attempt to access beyond end of device [ 170.349364][ T8958] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 170.369634][ T8959] EXT4-fs (loop6): 1 orphan inode deleted [ 170.370772][ T8959] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.371065][ T8959] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.617068][ T7649] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 170.617097][ T7649] EXT4-fs error (device loop6): ext4_release_dquot:7105: comm kworker/u8:9: Failed to release dquot type 1 [ 170.814143][ T8966] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 170.814672][ T8970] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 170.814672][ T8970] The task syz.5.1480 (8970) triggered the difference, watch for misbehavior. [ 170.960547][ T8981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1484'. [ 171.007033][ T8982] loop2: detected capacity change from 0 to 512 [ 171.031783][ T8982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.031844][ T8982] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.065733][ T8984] ./dev/sda1: Can't lookup blockdev [ 171.100309][ T29] audit: type=1400 audit(1790372913.497:1943): avc: denied { write } for pid=8978 comm="syz.2.1483" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.100359][ T29] audit: type=1400 audit(1790372913.497:1944): avc: denied { write } for pid=8978 comm="syz.2.1483" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.100379][ T29] audit: type=1400 audit(1790372913.497:1945): avc: denied { write } for pid=8978 comm="syz.2.1483" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.219877][ T29] audit: type=1400 audit(1790372913.627:1946): avc: denied { mount } for pid=8988 comm="syz.9.1487" name="/" dev="hugetlbfs" ino=22115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 171.352964][ T4916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.484798][ T6885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.646879][ T9003] loop2: detected capacity change from 0 to 512 [ 171.682387][ T9013] loop6: detected capacity change from 0 to 256 [ 171.693909][ T9012] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 171.694341][ T29] audit: type=1400 audit(1790372914.107:1947): avc: denied { relabelto } for pid=9010 comm="syz.9.1496" name="113" dev="tmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 171.694368][ T29] audit: type=1400 audit(1790372914.107:1948): avc: denied { associate } for pid=9010 comm="syz.9.1496" name="113" dev="tmpfs" ino=636 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 171.695952][ T29] audit: type=1400 audit(1790372914.107:1949): avc: denied { write } for pid=9010 comm="syz.9.1496" name="113" dev="tmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 171.716314][ T9003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.815236][ T6885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.887341][ T9013] loop6: detected capacity change from 0 to 1024 [ 171.902028][ T9023] ./dev/sda1: Can't lookup blockdev [ 172.152421][ T9013] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 172.158270][ T9013] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.354031][ T4916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 172.659757][ T9063] tipc: Enabling of bearer rejected, failed to enable media [ 172.696531][ T9067] netlink: 'syz.2.1515': attribute type 7 has an invalid length. [ 172.696680][ T9067] netlink: 'syz.2.1515': attribute type 8 has an invalid length. [ 172.924203][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 172.924222][ T29] audit: type=1400 audit(1790372915.327:2049): avc: denied { create } for pid=9078 comm="syz.5.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.976800][ T9048] loop6: detected capacity change from 0 to 4096 [ 173.036175][ T29] audit: type=1400 audit(1790372915.447:2050): avc: denied { write } for pid=9092 comm="syz.2.1523" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 173.049417][ T29] audit: type=1400 audit(1790372915.457:2051): avc: denied { read } for pid=9091 comm="syz.9.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 173.154262][ T9090] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1522'. [ 173.302634][ T9048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.409141][ T29] audit: type=1400 audit(1790372915.817:2052): avc: denied { getopt } for pid=9092 comm="syz.2.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 173.440594][ T9048] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1506'. [ 173.442814][ T29] audit: type=1400 audit(1790372915.857:2053): avc: denied { setopt } for pid=9092 comm="syz.2.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 173.443593][ T29] audit: type=1400 audit(1790372915.857:2054): avc: denied { bind } for pid=9092 comm="syz.2.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 173.518172][ T4916] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.575389][ T29] audit: type=1400 audit(1790372915.987:2055): avc: denied { mount } for pid=9108 comm="syz.2.1529" name="/" dev="mqueue" ino=16344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 173.649944][ T9119] loop2: detected capacity change from 0 to 1024 [ 173.750914][ T9119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.785571][ T9126] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1534'. [ 173.930756][ T9130] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1535'. [ 173.933121][ T9128] ================================================================== [ 173.933148][ T9128] BUG: KCSAN: data-race in bpf_obj_memcpy / bpf_obj_memcpy [ 173.933176][ T9128] [ 173.933182][ T9128] write to 0xffff8881239a2018 of 4866 bytes by task 9126 on cpu 1: [ 173.933199][ T9128] bpf_obj_memcpy+0x16a/0x190 [ 173.933223][ T9128] rhtab_map_update_elem+0xec/0xf40 [ 173.933258][ T9128] bpf_map_update_value+0x4ee/0x570 [ 173.933292][ T9128] generic_map_update_batch+0x4d7/0x700 [ 173.933328][ T9128] bpf_map_do_batch+0x25b/0x380 [ 173.933353][ T9128] __sys_bpf+0xa8e/0xc30 [ 173.933374][ T9128] __x64_sys_bpf+0x69/0x80 [ 173.933394][ T9128] x64_sys_call+0xf26/0x2550 [ 173.933417][ T9128] do_syscall_64+0x112/0x360 [ 173.933435][ T9128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.933457][ T9128] [ 173.933463][ T9128] write to 0xffff8881239a2018 of 4866 bytes by task 9128 on cpu 0: [ 173.933478][ T9128] bpf_obj_memcpy+0x16a/0x190 [ 173.933498][ T9128] rhtab_map_update_elem+0xec/0xf40 [ 173.933535][ T9128] bpf_map_update_value+0x4ee/0x570 [ 173.933571][ T9128] generic_map_update_batch+0x4d7/0x700 [ 173.933604][ T9128] bpf_map_do_batch+0x25b/0x380 [ 173.933629][ T9128] __sys_bpf+0xa8e/0xc30 [ 173.933653][ T9128] __x64_sys_bpf+0x69/0x80 [ 173.933672][ T9128] x64_sys_call+0xf26/0x2550 [ 173.933695][ T9128] do_syscall_64+0x112/0x360 [ 173.933712][ T9128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.933731][ T9128] [ 173.933734][ T9128] Reported by Kernel Concurrency Sanitizer on: [ 173.933747][ T9128] CPU: 0 UID: 0 PID: 9128 Comm: syz.1.1534 Not tainted syzkaller #0 PREEMPT(lazy) [ 173.933774][ T9128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.933789][ T9128] ================================================================== [ 174.557521][ T6885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.