last executing test programs: 1m22.373225557s ago: executing program 3 (id=578): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000080)={0x1d, r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000480)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r4, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r4}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="18070000000000000000000000800000851000000300000018110000", @ANYRES32=r5, @ANYBLOB="00000000000000009500007b00000000850000002300000095"], &(0x7f0000000700)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@can={{0x4, 0x0, 0x0, 0x1}, 0x3, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) set_mempolicy(0x3, &(0x7f00000003c0)=0x5, 0x92) syz_open_dev$tty1(0xc, 0x4, 0x4) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000002c0)=""/253, 0xfd}], 0x2}, 0x5c2b8000}], 0x1, 0x40000043, 0x0) connect$llc(r0, &(0x7f0000001740)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0xaa, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmmsg(r0, &(0x7f00000017c0), 0x3fffffffffffeed, 0x0) 1m21.181701826s ago: executing program 3 (id=588): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2, @ANYBLOB="0abf8ebeed6b444654f5ee94017231ae28ca78b95951b6d60e31ebfbbccb6028232e86ce650db357ad16c4325be392043b06d9590222d9457314"], 0x3c}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x20008}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 1m20.963385462s ago: executing program 3 (id=591): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x181042, 0x124) truncate(&(0x7f0000000140)='./file1\x00', 0x6) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000a) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000100033062cbd7000000000006401010200000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000000000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005e000000000000000a00000000000000010000000000000000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000640)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000680)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffc}, {0x1, 0xfffffffffffffffd, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb5, 0x2, 0x2}}, 0xe8) write(r1, 0x0, 0x0) (fail_nth: 2) 1m20.575002751s ago: executing program 3 (id=595): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0x65, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x7, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x541a, &(0x7f0000000140)) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0xf6, 0x7e0301) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000240)=ANY=[]) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x2982, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023896) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000005c0)='\x00', 0x9801) move_mount(r4, &(0x7f0000000600)='.\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0) mount$bind(&(0x7f0000000680)='./file0/../file0\x00', &(0x7f00000006c0)='./file0/file0\x00', 0x0, 0x28b100e, 0x0) mount$bind(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) listen(r5, 0xa) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000240)={{r6}, 0xb3, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/kmsg\x00', 0x1, 0x0) lseek(r7, 0x20000, 0x3) 1m20.099565293s ago: executing program 3 (id=598): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x10}, 0x10000d, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/raw6\x00') preadv(r0, &(0x7f00000004c0), 0x0, 0x7, 0x0) 1m19.00457159s ago: executing program 3 (id=602): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x181042, 0x124) truncate(&(0x7f0000000140)='./file1\x00', 0x6) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000a) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000100033062cbd7000000000006401010200000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000000000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005e000000000000000a00000000000000010000000000000000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000640)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000680)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffc}, {0x1, 0xfffffffffffffffd, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb5, 0x2, 0x2}}, 0xe8) write(r1, 0x0, 0x0) 1m18.98736446s ago: executing program 32 (id=602): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x181042, 0x124) truncate(&(0x7f0000000140)='./file1\x00', 0x6) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000a) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000100033062cbd7000000000006401010200000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa0000000000000000000000000100000000000000030000000000000009000000000000000000000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005e000000000000000a00000000000000010000000000000000000000000100000000000002000000230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000640)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000680)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffc}, {0x1, 0xfffffffffffffffd, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb5, 0x2, 0x2}}, 0xe8) write(r1, 0x0, 0x0) 25.815067376s ago: executing program 5 (id=986): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = io_uring_setup(0x220c, &(0x7f0000000040)={0x0, 0xa893, 0x40, 0x1, 0x6f}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9d4, 0x7fffffff}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0xd557, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x24, 0xa9, &(0x7f0000000500)=""/169, 0x40f00, 0x8}, 0x94) setns(0xc9, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000600)={0x20080522}, &(0x7f0000000640)) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000680)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0x8000, &(0x7f00000006c0)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000700)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) openat(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0x289c2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000900), 0x318, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000940)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000a00)={0x0, 0x9cf0, 0xc002, 0x8, 0x2bb}) clock_adjtime(0x0, &(0x7f0000000140)={0xfffffffffffffff9, 0xf6d, 0x0, 0x1000000000d, 0x7fffffff, 0xfffffffffffffffe, 0x5, 0x200000000000000, 0xbd, 0x8, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x5988, 0x8000000000005a, 0x3}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'syz_tun\x00'}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0], 0x0, 0x5b, 0x0, 0x0, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r2, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001040), 0x0, 0x8c, &(0x7f0000001080)=[{}], 0x8, 0x10, &(0x7f00000010c0), &(0x7f0000001100), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000001140)}}, 0x10) mount(&(0x7f0000001180), 0x0, &(0x7f00000011c0)='9p\x00', 0x8c, &(0x7f0000001200)='trans=rdma,') io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000001240), 0x0) 24.874530559s ago: executing program 5 (id=993): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000e00)={r0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x1) creat(0x0, 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./myproc/scsi/device_info\x00', 0x1, 0x3) write(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="0002"], 0x18) 24.767660242s ago: executing program 5 (id=994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0, 0x8}, 0x8804, 0xff, 0x20008, 0x0, 0xc283, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) r3 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0x10050, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x8, 0x0, 0xb, 0x2, 0x731b, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) mmap(&(0x7f00005ae000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 23.875043333s ago: executing program 5 (id=996): timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x14d27e, 0x2) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)="5c00000014006b05c84e21000ab16d6e2306010001000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40044) bind$rds(r3, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/98, 0x62}], 0x1}, 0x4000000) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000002340)={0x0, 0x24000, 0xd}}) open_by_handle_at(r3, 0x0, 0xa0002) msync(&(0x7f00007e2000/0x2000)=nil, 0x2000, 0x1) getpid() syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r6, 0x400454c9, 0xffffffffffffffff) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @remote}, 0x10) 22.727186991s ago: executing program 5 (id=1002): setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000340)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000380)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4890}, 0x40000) syz_mount_image$vfat(&(0x7f0000000740), &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10452, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x3, 0x27b, &(0x7f0000000980)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x7, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0xe92}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000001000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000005000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4, r3}, 0xc) timer_settime(r1, 0x1, &(0x7f00000003c0), &(0x7f0000000400)) 22.278726333s ago: executing program 5 (id=1006): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) setns(0xc9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000180)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000580)={0x0, 0x7, 0x5, 0x8}, &(0x7f00000005c0)=0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9d4, 0x7fffffff}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0xd557, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000400)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)='X', 0x8030000}], 0x11) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000004c0)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8012, 0x4, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1ff) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x10000000}]}}]}, 0x3c}}, 0x2004c840) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$SG_BLKTRACESTART(r5, 0x1274, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14002400010727"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) 22.278504802s ago: executing program 33 (id=1006): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) setns(0xc9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000180)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000580)={0x0, 0x7, 0x5, 0x8}, &(0x7f00000005c0)=0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9d4, 0x7fffffff}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0xd557, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000400)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)='X', 0x8030000}], 0x11) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000004c0)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8012, 0x4, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1ff) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x10000000}]}}]}, 0x3c}}, 0x2004c840) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$SG_BLKTRACESTART(r5, 0x1274, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14002400010727"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) 6.661056866s ago: executing program 0 (id=1099): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x92, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, 0x0, 0x9a, 0x300) syz_mount_image$ext4(&(0x7f0000000380)='ext2\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000400), 0x1, 0x27e, &(0x7f0000000440)="$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") r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5.582785913s ago: executing program 0 (id=1108): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xf}, 0x960, 0x6d2, 0x0, 0x5, 0xfff, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x743, 0x10400) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000080)=0xfffffffffffffff7, 0x9) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x10, &(0x7f00000007c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000880)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r5, r7, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x2e, &(0x7f0000000900)={@random="4b2a97745d78", @random="81a53bd1ce72", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x9, 0x20, 0x67, 0x0, 0x3, 0x11, 0x0, @loopback, @local}, {0x4e24, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x5, 0x100, @void}}}}}}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000380), 0xa002a0}], &(0x7f00000003c0), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0x1c, &(0x7f0000000b40)=ANY=[@ANYBLOB="1808000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000003f9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.967335818s ago: executing program 2 (id=1111): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000880), 0x9, 0x624, &(0x7f0000001340)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 4.317855394s ago: executing program 1 (id=1116): r0 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000480)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000500)=""/124, 0x7c}], 0x1, &(0x7f00000005c0)=""/63, 0x3f}, 0x100) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x8, 0x7}, 0x20b0, 0xc, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000400), 0x1) setns(0xc9, 0x0) socket(0x2a, 0x2, 0x9) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x870, 0x1000002, 0x401d031, r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f00000003c0), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x2) 4.110736829s ago: executing program 0 (id=1119): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x296600, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x80000}, &(0x7f0000000040)=0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x29, 0x0, &(0x7f00000001c0)) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000100)={0x0, r0, r2, 0x7ff, 0x5, '\x00', {0x2, 0xbc06, 0x6ff, 0x3, 0x0, 0x7, 0xff, 0xf, {0x7, 0x2}, {0x0, 0x6}, {0x0, 0x2}, 0x6, 0x4, 0x94, 0x4, 0x6, 0x8001, 0x7, 0x7, 0x401, 0xff74, '\x00', 0x2, 0x43cc, 0x8c, 0x7f}}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0x0, 0x7fffffff, 0x5, 0xa, 0x4, "49e9799e61c64efe7bc800f245d71736d35d2a", 0x7, 0x80}) 3.902698334s ago: executing program 0 (id=1120): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007000000000000000000e0000002000000000000000000000000200100000000000000000000000000024e200000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff020000000000000000000000000001000000002b0000000000000000000000000000000000000100000000000000000000000000000000020000000000000005000000000000000080001000000000050000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe60a0000000000000135000002000100340000000000000014000e0000000000000000000000ffffac14145f"], 0x104}, 0x1, 0x0, 0x0, 0xc000}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) lsm_list_modules(&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=0x40, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r3, 0x0, 0x0, 0x60010000, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f0000000340)={0x11, 0x3d, 0x9, 0x3, 0x5}) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x14}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000440)='\xa0\xc1t\x9f\\\xd3:A\x83\xe5\xb4u$\x95\aY\xbeU\xcd\x1c.j\x90\xaf\xbdG.%\xe9\xb4\xbb\v\xc6K\x1b\xab\x1d\xd2c\x99y\x8b\x90S\xc9\t\x96\x14\xa0Y\xab@31\xb2@\xe9\ag\x91\xdd\xd7\xbb`\xc64\x8ca\x97\x06\xf6\x8f\xd7k\xcbT\xea\aqn\xff\xe2\xae}\x00\xb2\'qy*$\x91\x13\x00\xbc\x01\xe0\xcc\xef\x14\xd3\b\xb0\xf0l\x97g\xa4\xe6 \xd6\xa6\x89\x89b.\xc7\xd8/\a\x88\xe2\x9e\xb2\xf7h$\rl:\xba\xcbH/\xcd\x1a\xf1V\xbb.\xd4\xf7O}\xc3\x04\xc4e\n\xe9\xa9\xcaC\xfb\x00\xe1|\xd1\xa4L\x1f\'aO\xb612+\x92t\x9c\xceub:\x00\xb6\xbf\xa4\xcd@\xe9\x85\x8a\x02\xfe\xfc?h\xdc\x82\xad\x8f\x1aL\x80\\\xca;\xb8\x11\xe8\xc8\\\x00'/232) getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000a00), &(0x7f0000000a40)='./bus\x00', 0x204b82f, 0x0, 0x83, 0x0, &(0x7f0000000a80)) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000ac0)='.\x00', 0x0, 0x2) chdir(&(0x7f0000000b00)='./bus\x00') unlinkat(r6, &(0x7f0000000b40)='./bus\x00', 0x200) unlink(&(0x7f0000000b80)='./file0\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000680), 0x0, 0x0) ioctl$EVIOCRMFF(r8, 0x40004580, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r5, @ANYBLOB="27f1a7d21215d01c36e6"], 0x3c}}, 0x8004) sendmsg$sock(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="931e30cb5f0e97832510bfaa4dc3ccef905088bd6ddc24e479f2b0d2507027026cd5d4cce2756c4d0c42f7092096618b499c0334ea7956dc5d000c8091399a0181182dc9587ec92e5ccdd5a4c35a5577fc8465d01871fb5586bf153ff59869f6", 0x60}, {&(0x7f00000008c0)="09a2f4367591fda23e2e6b339be4", 0xe}, {&(0x7f0000000900)="9401f21cb2db7429b57fb6470233563f89d9000dfcdd952f398c9908c0f95e50c96dd089035ab6efe7a7607cbeee812460e8d8d914bb17ae80e8ab65d85351246fcd966b6cb967d1594f7e3ff2be5228314880869dacfa3b68726c58df89e2ba39bcf7a207e86880b83ea88f2151b029333154b932d0824152082f6a8d1031fe69c883d700db7ce7633dda8734f5bf0d8346460787b70a903422d2045d6fb6ef0f4999bc09170ce1daae0c6794105ef07a94315055d39fb4cba07964c1ee29c1c1fe83f2c5923d78c01516b55c5e94c392881b7195", 0xd5}], 0x3}, 0x8044) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="230000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB='\b\x00'/12, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="010000000300"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0), &(0x7f0000000e00), 0x407f, r10, 0x4}, 0x38) 3.902407464s ago: executing program 2 (id=1121): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x301f699}, 0x250, 0x1, 0xbd6, 0xe, 0x4, 0x3ff, 0xfc01, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000ac0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) 3.555017122s ago: executing program 1 (id=1122): pipe2$9p(0x0, 0x80000) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sysvipc/shm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dvmrp1\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000380), 0x1, 0x50f, &(0x7f0000000fc0)="$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") io_submit(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x2, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x8, 0x0, 0xff, 0x0, 0x0, 0xc0ae, 0x8048d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000300), 0xa}, 0x2, 0x71e, 0x8000, 0x9, 0x1000004, 0xfffffff9, 0x0, 0x0, 0xfffffffd, 0x0, 0x100000000000}, 0x0, 0x8, 0xffffffffffffffff, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e23, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x81}}, 0x21, 0xffff, 0x97, 0x4, 0x5, 0x4, 0x1}, &(0x7f0000000500)=0x9c) bind$tipc(0xffffffffffffffff, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200, 0x29008, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x8012, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x10, 0x0, 0x5, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a900000c4d1f3aec45a2d0200003aa1b8194c70f3ae0000000a0004050900010073797a310000000064000480600001800a000100696e6e65720000005000028008000440000000172c0005800c00010070070000006164001c000280080003400000002d1e98846f6d080002400000000108000440000000000800034000000002080002400000008408000140000000000900020073797a1600000000140000001100010000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000680), 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000340)={0x1d, r3}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000006c0)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000b40)=@canfd={{0x0, 0x1, 0x0, 0x1}, 0x12, 0x1, 0x0, 0x0, "429f12504a0ab9ffe6c8eb46c67cdf75e2b2c5e4bdad67def7cbc21df58634d45ea7065ef176c0b7b6ed75f5e50064bc69574a0737fa9a289f7ebb250c4ea6e4"}, 0x48}, 0x1, 0x0, 0x0, 0x4092}, 0xd209f6d81486b3d6) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/77, 0x4d}, {0x0}], 0x2}}], 0x1, 0x82, 0x0) unshare(0x20100) 3.552882972s ago: executing program 4 (id=1123): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x17, &(0x7f00000000c0)=0x3, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) sendto$inet(r1, &(0x7f0000000180)="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", 0xffffff5d, 0x12, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xecb0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x3, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff7000/0x4000)=nil) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001400)={0x7, {"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", 0x1000}}, 0x1006) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80c42, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000400)=0x200) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x79}}, './file0\x00'}) mmap(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x2000002, 0x20010, r7, 0x9c533000) 3.552003432s ago: executing program 2 (id=1131): unshare(0x4000400) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0xa) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x90a3b4a3e4f91378) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) r2 = openat(0xffffffffffffff9c, 0x0, 0x80042, 0x1bd) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0), 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000700)={0xffffffffffffffff, r4, 0x4, r3}, 0x10) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000740)={{0x2, 0x4e20, @empty}, {0x0, @multicast}, 0x0, {0x2, 0x4e23, @multicast2}, 'sit0\x00'}) r5 = socket$inet(0x2, 0x2, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000007c0), 0x0) close(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, &(0x7f00000008c0)='syzkaller\x00', 0x2, 0x21, &(0x7f0000000900)=""/33, 0x41000, 0x13, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000940)=[r6, r2], &(0x7f0000000980)=[{0x5, 0x2, 0x0, 0xb}, {0x5, 0x5, 0xe, 0x4}, {0x4, 0x3, 0x9, 0xb}, {0x4, 0x1, 0x4, 0x2}], 0x10, 0x5}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x268, 0x206, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0xb07, 0x302, 0x20, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffffff, 'macvlan0\x00', 'dvmrp0\x00', {0xff}, {}, 0x6, 0x2, 0x4a}, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0xfffffffe, 0x0, 0xc, 0x0, 0x531aeecb, 0xc07, 0x0, 0x18}, {0xfff}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@private0, [0xff, 0xffffff00], 0x4e22, 0x2b, 0x2, 0x4e20, 0x8, 0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x3, 0x3, 0xd, '\x00', 'syz0\x00', {0x54}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 3.25190227s ago: executing program 2 (id=1124): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000013c0)=@o_path={0x0, 0x0, 0x4000, r0}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000016c0)={'syztnl2\x00', &(0x7f0000001640)={'tunl0\x00', 0x0, 0x80, 0x1, 0x7, 0x7fffffff, {{0xa, 0x4, 0x1, 0x18, 0x28, 0x68, 0x0, 0x5, 0x29, 0x0, @empty, @private=0xa010102, {[@noop, @rr={0x7, 0xb, 0xa6, [@private=0xa010100, @loopback]}, @noop, @timestamp_prespec={0x44, 0x4, 0xee, 0x3, 0x7}]}}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./trace\x00', &(0x7f00000011c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x0) write(r1, &(0x7f0000001240)="707265765f636f6d6d207e20222122d5", 0x10) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./bus\x00', 0x2000c12, &(0x7f0000000680)={[{@block={'block', 0x3d, 0x800}}, {@showassoc}, {@gid}, {}, {@overriderock}, {@hide}, {@session={'session', 0x3d, 0x32}}, {@unhide}, {@map_acorn}, {@mode={'mode', 0x3d, 0xb2e8}}, {@check_relaxed}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@map_normal}]}, 0x4, 0xa0e, &(0x7f0000000780)="$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") socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0xfffffffffffffce1, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000081}, 0x24008880) openat$cgroup(0xffffffffffffffff, &(0x7f0000001280)='syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'bond0\x00'}) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) io_uring_setup(0x8, &(0x7f0000001300)={0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000240001002dbd7000ffdcdf25050000000600030000000000"], 0x1c}}, 0x200480c4) perf_event_open(&(0x7f0000001480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c08, 0x40000000, 0xb0, 0x7, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xf, 0x32, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000001500)='asymmetric\x00', 0x0, &(0x7f0000001700)="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", 0x559, 0xfffffffffffffffd) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x3, 0xc, &(0x7f0000001d40)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000018000000180100002020642500000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095000000000100"/96], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e00)={r5, 0x0, 0xe, 0x0, &(0x7f0000001e80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, 0x0, &(0x7f0000001ec0)=0x2f) add_key$keyring(&(0x7f0000001f00), &(0x7f0000001f40)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000001f80), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.187080862s ago: executing program 0 (id=1125): unshare(0x4000400) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0xa) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x90a3b4a3e4f91378) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) r2 = openat(0xffffffffffffff9c, 0x0, 0x80042, 0x1bd) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0), 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000700)={0xffffffffffffffff, r4, 0x4, r3}, 0x10) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000740)={{0x2, 0x4e20, @empty}, {0x0, @multicast}, 0x0, {0x2, 0x4e23, @multicast2}, 'sit0\x00'}) r5 = socket$inet(0x2, 0x2, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000007c0), 0x0) close(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, &(0x7f00000008c0)='syzkaller\x00', 0x2, 0x21, &(0x7f0000000900)=""/33, 0x41000, 0x13, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000940)=[r6, r2], &(0x7f0000000980)=[{0x5, 0x2, 0x0, 0xb}, {0x5, 0x5, 0xe, 0x4}, {0x4, 0x3, 0x9, 0xb}, {0x4, 0x1, 0x4, 0x2}], 0x10, 0x5}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x268, 0x206, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0xb07, 0x302, 0x20, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffffff, 'macvlan0\x00', 'dvmrp0\x00', {0xff}, {}, 0x6, 0x2, 0x4a}, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0xfffffffe, 0x0, 0xc, 0x0, 0x531aeecb, 0xc07, 0x0, 0x18}, {0xfff}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@private0, [0xff, 0xffffff00], 0x4e22, 0x2b, 0x2, 0x4e20, 0x8, 0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x3, 0x3, 0xd, '\x00', 'syz0\x00', {0x54}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 2.86458941s ago: executing program 0 (id=1127): mq_notify(0xffffffffffffffff, 0x0) socketpair(0x18, 0x2, 0x2, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830a}, 0x0, 0x2, 0xfffffffa, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) io_submit(0x0, 0x0, &(0x7f0000000d80)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000e00)='ext4\x00', &(0x7f0000000e40)='./file1\x00', 0x1800040, &(0x7f0000000200)={[{@barrier}, {@nodioread_nolock}, {@grpquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@jqfmt_vfsv1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}]}, 0x1, 0x59c, &(0x7f0000000f40)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="0000000006a00000140003006d6163766c616e30000000000000000008001c00", @ANYRES32=0xc9, @ANYBLOB="6c1ef957fd7758f39b04690a46b54849f76c818dd37cfd38aecedf1674ed7ab90dfcfa0f163fe09d0485b4159e97ccf347fb2b6a2281387433939276528aff570f8b43372832410b"], 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r2, @ANYBLOB="21042abd7000fedbdf251a00000007002100626200000500920001000000f80022"], 0x11c}, 0x1, 0x0, 0x0, 0x4088}, 0x44840) r3 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000001540)='2', 0x1, 0x7) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, r4) r6 = add_key(&(0x7f0000000500)='asymmetric\x00', 0x0, &(0x7f0000001580)="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", 0x559, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000001b00)='asymmetric\x00', &(0x7f0000001b40)=@chain={'key_or_keyring:', r6}) keyctl$revoke(0x3, r6) add_key(&(0x7f0000001b80)='asymmetric\x00', 0x0, &(0x7f0000001bc0)="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", 0x559, r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x6c, r8, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e26, 0x44, @loopback={0x5f0000000000002e, 0x2d}, 0x7f2a}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffc, @mcast2, 0x5}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000600)={0x2ec, r8, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x55b7}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc8f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @mcast2, 0xffff}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc70}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x877d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg1\x00'}}]}, @TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x64}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x683}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x8080}, 0xc041) 2.864001559s ago: executing program 4 (id=1128): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x404c2, 0x0) close(r0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000180)={&(0x7f0000000240)=@id, 0x10, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), 0x1004014, &(0x7f0000000640)=ANY=[@ANYBLOB="74000000000100001b72bb8774380a", @ANYBLOB="35721159be526af4489e4a1b5320f795a867d97c695b1793c2c7a89d27d5be39938fef7363960e0547e645793dea2de9", @ANYBLOB="2ce24be907000000ad2d00000000", @ANYRESHEX=r2, @ANYBLOB=',\x00']) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfffffffffffffead) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd0e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x2, @perf_bp={&(0x7f0000000340)}, 0x19183, 0xfffffffffffffff7, 0x5, 0xb, 0xa, 0x904813a5, 0x3, 0x0, 0x1ff, 0x0, 0xffffffffffff0000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 2.798773261s ago: executing program 2 (id=1129): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x262002) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000040)={0x2, 0x3, 0x8, 0x3, 0x9, 0x98000000}) socket$netlink(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x10000000, 0x0) fchdir(r2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@getaddr={0x14, 0x16, 0x1, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8044010}, 0x20041040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000002640)=ANY=[@ANYBLOB="9feb01001800040000000000200000002000000004000825135d7c9f1fb6000c02000900000000000100000d0000000000"], 0x0, 0x3c, 0x0, 0x0, 0x10}, 0x28) r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400), 0x200002, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001440), 0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000001480), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000014c0)) writev(r4, &(0x7f0000002600)=[{&(0x7f0000001600)="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", 0x1000}], 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000015c0)={'syzkaller0\x00', 0x7101}) getpgrp(0xffffffffffffffff) r7 = socket$inet6(0xa, 0x1, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) 2.798497411s ago: executing program 4 (id=1130): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0xff, @remote, @local, {[], @time_exceed={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @dev, @mcast1, [@dstopts={0x3c}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xc00000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000500)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x1800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x5}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0x44}}, 0x0) 2.637132495s ago: executing program 1 (id=1132): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) unshare(0x26020480) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x18100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d7ce8, 0x4, @perf_config_ext={0x9, 0x9}, 0x1020, 0x0, 0xfffffffd, 0x5, 0x2f9e, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./mnt\x00', 0x840, &(0x7f00000000c0)={[], [{@smackfsdef={'smackfsdef', 0x3d, 'ip_vti0\x00'}}, {@dont_appraise}, {@subj_user={'subj_user', 0x3d, 'ext4\x00'}}, {@audit}]}, 0x1, 0x242, &(0x7f00000002c0)="$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") ioctl$FITRIM(0xffffffffffffffff, 0x40e8662e, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000fc0)={0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x0, &(0x7f0000000e00)=""/127, 0x9, 0x0, 0x55, 0x37, &(0x7f0000000e80)="56ee96282da0a363072cefd63d5b9f892f4470b7eaa62512798bbd1e39ef4f4c8dc3f3b1684f145b4d8e4ee2f9a6b6fd804d6641dd57885fa8e77254f22a49cf9ddf572f2be4aee4b2681e66ef3e9baaaf5ff8b4df", &(0x7f0000000f40)="59d4dd0308ed1af9fc643efb21f1c8cea6a8f43a9009364e0ca3d41569189c4720efa9e9b7dece0cb373d735ac2722e19e5992d6f2affe", 0x2, 0x0, 0x8}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x3c, r2, 0x1, 0xffffffff, 0x8000000, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x3c}}, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x810, 0xffffffffffffffff, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/39, 0x27}, {&(0x7f0000001980)=""/4089, 0xff9}], 0x2, &(0x7f0000008640), 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0xb8e9, 0x0, 0x1, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000680)=0x20000017) 2.330217963s ago: executing program 2 (id=1133): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffefffc, 0x4e0e7b2abb8edb28, @perf_config_ext={0x6, 0x7}, 0x1c639, 0x201221, 0x0, 0x7, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000680)={'netdevsim0\x00', 0x0}) r1 = creat(&(0x7f00000006c0)='./file0\x00', 0x40) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="f00000001000040026bd7000fedbdf25fe800000000000000000000000000011ac1414390000000000000000000000004e237fff6e230000020020002e000000", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB="ffffffff00000000000000000000000053f08a000004fe8000000000000000000000000000aa0200000000230000ff0f00000000000005000000000000000500000000000000d1f000000000000005000000000000000100000000000000090000000000000007000000000000000900000000000000070000000100000038060000000000000400000006000000100000002abd7000ff3400000200020ec0000000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4010}, 0x1179909462e53601) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0xc02, &(0x7f0000002200)=ANY=[], 0x5, 0x2a6, &(0x7f0000000b80)="$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") epoll_create(0x8) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000300)=0xf) ioctl$FS_IOC_FSGETXATTR(r3, 0x400455c8, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 2.248145815s ago: executing program 34 (id=1133): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffefffc, 0x4e0e7b2abb8edb28, @perf_config_ext={0x6, 0x7}, 0x1c639, 0x201221, 0x0, 0x7, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000680)={'netdevsim0\x00', 0x0}) r1 = creat(&(0x7f00000006c0)='./file0\x00', 0x40) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="f00000001000040026bd7000fedbdf25fe800000000000000000000000000011ac1414390000000000000000000000004e237fff6e230000020020002e000000", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB="ffffffff00000000000000000000000053f08a000004fe8000000000000000000000000000aa0200000000230000ff0f00000000000005000000000000000500000000000000d1f000000000000005000000000000000100000000000000090000000000000007000000000000000900000000000000070000000100000038060000000000000400000006000000100000002abd7000ff3400000200020ec0000000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4010}, 0x1179909462e53601) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0xc02, &(0x7f0000002200)=ANY=[], 0x5, 0x2a6, &(0x7f0000000b80)="$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") epoll_create(0x8) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000300)=0xf) ioctl$FS_IOC_FSGETXATTR(r3, 0x400455c8, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 2.150826987s ago: executing program 6 (id=1136): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x80000000, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./trace\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./trace/dynamic_events\x00', 0x2, 0x0) write(r0, 0x0, 0x0) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) 2.004202331s ago: executing program 6 (id=1137): r0 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000480)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000500)=""/124, 0x7c}], 0x1, &(0x7f00000005c0)=""/63, 0x3f}, 0x100) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_config_ext={0x8, 0x7}, 0x20b0, 0xc, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000400), 0x1) setns(0xc9, 0x0) socket(0x2a, 0x2, 0x9) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x870, 0x1000002, 0x401d031, r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f00000003c0), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x2) 1.867210294s ago: executing program 4 (id=1138): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0xd03af, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd75, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) truncate(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_marker\x00', 0x1, 0x5a) chroot(&(0x7f0000000180)='./mnt/trace_pipe\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_pipe\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb79500"/72], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(r1, &(0x7f0000000400)=""/16384, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000004400)='./proc\x00', 0x47) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000004900)=@mangle={'mangle\x00', 0x1f, 0x6, 0x740, 0x140, 0x238, 0x378, 0x238, 0x4a0, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, &(0x7f0000004880), {[{{@ipv6={@remote, @mcast2, [0xff, 0x1fe000000, 0xff000000, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00], 'vlan0\x00', 'caif0\x00', {}, {0xff}, 0x2e, 0x6, 0x4, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@private=0xa010100, 0x2e, 0x2a}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x25}, [0xff, 0xffffff00, 0xff000000, 0xff], [0x0, 0xff, 0xff000000, 0xffffff00], 'veth0_to_bond\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2c, 0x91, 0x4, 0x20}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"0d12", 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0xfb}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@ipv6header={{0x28}, {0xbb, 0x20, 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x8, 0x9, 0x800}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d5], 0x7, 0x8, 0x3}}, @common=@eui64={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x56e3}}}, {{@ipv6={@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff], [0xff, 0xff, 0xff, 0xff000000], 'batadv_slave_1\x00', 'syzkaller0\x00', {}, {0xff}, 0x2f, 0x5, 0x5, 0x27}, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@icmp6={{0x28}, {0x8, "7603"}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0xff, 0xff000000, 0xffffff00, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xffffffff, 0x0, 0xffffff00], @ipv6=@remote, [0xff000000, 0xff000000, 0xffffff00, 0xffffff00], 0x5, 0x3, 0x8, 0x4e24, 0x4e21, 0x4e21, 0x4e20, 0x240, 0x2808}, 0x80, 0x20}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private2, @ipv6=@mcast1, 0x5, 0x2c, 0x93}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) mount(0x0, &(0x7f0000004440)='./proc\x00', &(0x7f0000004480)='proc\x00', 0x82081, 0x0) syz_emit_ethernet(0x36, &(0x7f00000044c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa85a8908a01c90800458600280064002107069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50040002907800e7"], 0x0) io_uring_setup(0x1b78, &(0x7f0000004540)={0x0, 0xca72, 0xc000, 0x2, 0x249}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000045c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r2 = syz_open_dev$evdev(&(0x7f0000004600), 0xb7e, 0x0) r3 = epoll_create1(0x80000) epoll_pwait(r3, &(0x7f00000050c0)=[{}], 0x1, 0x6e, &(0x7f0000005100)={[0x7f]}, 0x8) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) socket$unix(0x1, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000051c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005200)=0x14) sendmsg$nl_route(r1, &(0x7f00000052c0)={&(0x7f0000004500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005280)={&(0x7f0000005240)=ANY=[@ANYBLOB="280000c8", @ANYRES32=r4, @ANYBLOB="08000800010000000800090003000000"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000004680)={0x0, 0x0, &(0x7f00000046c0)={&(0x7f0000004700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1000, 0x13}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004780)={&(0x7f00000047c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x8, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x3, 0xfffffffc, 0x800007ff}}]}, {0x4, 0x3f}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x200000) 1.846242474s ago: executing program 6 (id=1139): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001800)={&(0x7f0000001140)={0x688, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x490, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc1, 0x4, "e2bf0e9d1d8d101fef4cc8b319649891655c1a0dff7344e02f4a9f7b3c69adfa4ce9e9d30914394314c2fb1fc083681f27637877b0f89bc377bd2354228b085f15dc5a6ad7d9d1658b81b10785b82c0e0f543b1f4b4c3f7cd977a287c1dbd4ded348a606e37c5e03b27ce89fca8954b73ca319395b56ba516cd7a4e1191ed1c880a7b727e0d2f518f44b1a2ac4c6d426626d6e699e7b0754d7c2b80c8283cf7bfb0f74965d607ae6d9f1edf6831a000ab3bf540303478f87511c2fcc3c"}, @ETHTOOL_A_BITSET_MASK={0xef, 0x5, "26f1f7156c74ad7083c51ddb417d8bd5480da2ae22a38b2035ea5be0b9d42bd9dfe6d0ab03fed66a910230ab7800d1248aac859548470fdad5e62d465634c2e00f45385571b686c35e978a33488a1663779f10402cb472a985ce6195a36d7317c2930b49d5fc9e53c14d22f3295a6f636d3ca3a3aa53344cc026d29daa93480f23a2616bd966a3305b1030f242ea0fc302f6ac79f32bde83f251244755840b5afcd91c37c189be27efc8332d054ee207aac9c2ec3a645807f090270f2b4313aa9d0c2316ac3334addca06030a5302c04d272b3b2cfdffd0311b9c264b3f0e1e7cc12855fbebcba3d393a02"}, @ETHTOOL_A_BITSET_MASK={0xe5, 0x5, "d5fe535ae7046cc7116a129bd86e203278c9438e3e35e04c6c569b62043e4f034ba8883be75a037e9c6639417b1d784f462b3a6b0bfe0a4ee527c0c4a59a6599c4939dea1d4bd816b83a734a3de4a5e06f849e4f438dcc5cfe04b27d7bd9d172d514267a488b3f5d72df5a557dcc01449bf1fd64d3912a96aecfa77fcc41cd469df89eabdf5e2dd994050f92d4cd26a7d025e3be796a5afa9b00e7af679f8c6eed6336999d2ce874e692eed401f8ace18f06cb683ff3919d57eab5acb19e1959701efc670b29396358752d7aef37b611bf020500fc5f78c773f846378ebc8b5a95"}, @ETHTOOL_A_BITSET_MASK={0x8c, 0x5, "d067a8bf45828b97dbac43193e50900589c9e6d073072c013219510238355f42fe150fe1dea24f902d5d340106d6cfa4365165224e3ef1a87c89331aaf65e216fa6a3e1e1c09bb662fd641c07d860184c845718d9bafe98616cb4d7f122ec30b8cd2b5a2bcd41931c2f93e7a76dc0a425c30b845260a91e8a828ff0bf06b735909da423c9d016600"}, @ETHTOOL_A_BITSET_BITS={0xb4, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\'\'#)!\xf2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#]{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!\\\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x27f3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'U@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x90c}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\xa9(({k%\\*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_VALUE={0x44, 0x4, "dc506a4b6bf22568f52b37ab6cb48f9cf559a15a3a21b41f9ff943ac3cb2532e16103fe447b43319e85a60a86a7d8abbf508d9c757cbb4b1b79ab03e45da5fd3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x63, 0x5, "596f5845eca90b3dee340712057f2730a66c5a64ee10fea50465d35733387e8b95dd73550ffa7518972026c38f43bb9f81c00a790c0ccd91f29a1e7a190f9a2cf02eeca302271d94538e7637ae71da4163bdedf398bb99f94bb81eb42fc0a6"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[[[\xe9%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x688}, 0x1, 0x0, 0x0, 0x8800}, 0x10004) write(0xffffffffffffffff, &(0x7f00000003c0)="fc0000004800071fab092504090007000aab60000a0000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/icmp\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/165, 0xa5}], 0x1, 0x180, 0x9) 1.497935043s ago: executing program 6 (id=1140): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x404c2, 0x0) close(r0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000180)={&(0x7f0000000240)=@id, 0x10, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), 0x1004014, &(0x7f0000000640)=ANY=[@ANYBLOB="74000000000100001b72bb8774380a", @ANYBLOB="35721159be526af4489e4a1b5320f795a867d97c695b1793c2c7a89d27d5be39938fef7363960e0547e645793dea2de9", @ANYBLOB="2ce24be907000000ad2d00000000", @ANYRESHEX=r2, @ANYBLOB=',\x00']) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfffffffffffffead) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x0, 0x0, 0x2, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x6}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000380)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000480)={r3, 0x1}, &(0x7f00000004c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 1.496018483s ago: executing program 4 (id=1141): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0xff, @remote, @local, {[], @time_exceed={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @dev, @mcast1, [@dstopts={0x3c}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xc00000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r3, &(0x7f00000004c0), 0x0}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000500)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x1800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x5}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0x44}}, 0x0) 1.359743176s ago: executing program 6 (id=1142): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x26020480) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc3, 0x4, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xfffffffd, 0x6, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./mnt\x00', 0x840, &(0x7f0000000180), 0x1, 0x242, &(0x7f00000005c0)="$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") ioctl$FITRIM(0xffffffffffffffff, 0x40e8662e, &(0x7f0000000840)={0xc3e4, 0xd000000, 0x7}) bind$netlink(r1, &(0x7f0000000880)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000008c0), 0x4) syz_mount_image$ext4(&(0x7f0000000900)='ext2\x00', &(0x7f0000000940)='./file0\x00', 0x400, &(0x7f0000000980), 0x1, 0x490, &(0x7f00000009c0)="$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") r2 = open(&(0x7f0000000e80)='.\x00', 0x0, 0x0) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x40) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000202, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000ec0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20000040) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x689, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x20) ioctl$int_in(r3, 0x5421, &(0x7f0000000300)=0x6) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000200)=0x5) syz_genetlink_get_family_id$tipc(&(0x7f0000000fc0), r1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'veth1_to_batadv\x00', &(0x7f0000000280)=@ethtool_modinfo={0x42, 0x3ff, 0x2}}) 1.316666147s ago: executing program 1 (id=1143): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$LINK_DETACH(0x22, &(0x7f0000000280), 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000002c0)={0x1, 0x9006}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond_slave_0\x00'}) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @dev}}}], 0x20}, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2000c091) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xa, &(0x7f0000000540)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4, 0x0, 0x0, 0xffffffff}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x55}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(0x0) mmap$IORING_OFF_SQES(0x0, 0x40, 0x0, 0x12, 0xffffffffffffffff, 0x10000000) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x22) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000640)=""/222) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="52540012345652540012345786dd", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, 0x0, 0x0) 625.335394ms ago: executing program 1 (id=1144): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x743, 0x10400) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000040)) set_mempolicy(0x3, &(0x7f0000000080)=0xfffffffffffffff7, 0x9) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x10, &(0x7f00000007c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800000e2, 0x0, 0x0, 0x0, 0x2000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000880)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r5, r7, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x2e, &(0x7f0000000900)={@random="4b2a97745d78", @random="81a53bd1ce72", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x9, 0x20, 0x67, 0x0, 0x3, 0x11, 0x0, @loopback, @local}, {0x4e24, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x5, 0x100, @void}}}}}}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000380), 0xa002a0}], &(0x7f00000003c0), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0x1c, &(0x7f0000000b40)=ANY=[@ANYBLOB="1808000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000003f9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 130.701276ms ago: executing program 1 (id=1145): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xa, 0x1}, 0x0, 0x0, 0x6, 0x2, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000600)=@ethtool_cmd={0x14, 0x7, 0x1, 0x6bfc, 0x40, 0x72, 0xce, 0x3, 0xf9, 0xe7, 0xe, 0x1, 0x8, 0xff, 0x0, 0x7fff, [0x7ff, 0x2]}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x842, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000180)="d1ca", 0x2}], 0x1) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r5, 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='hugetlbfs\x00', 0x1000, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r6, &(0x7f0000000400), 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0x4, 0x7832}, 0x4, 0x0, 0x10004, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x25, 0x0, @void}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000100)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x100, &(0x7f000011a000/0x4000)=nil, 0x3) 130.514246ms ago: executing program 4 (id=1146): getpgrp(0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0xd27, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000280)='P', 0x1, 0x4008044, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000380)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) poll(&(0x7f0000000440), 0x0, 0x1) 0s ago: executing program 6 (id=1147): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x7) syz_emit_ethernet(0x66, &(0x7f0000000180)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x30, 0x3a, 0xff, @remote, @local, {[], @time_exceed={0x5, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @dev, @mcast1}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xc00000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r3, &(0x7f00000004c0), 0x0}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000500)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x1800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x5}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): d solve the problem. [ 131.827224][ T5962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.940197][ T6023] loop2: detected capacity change from 0 to 2048 [ 131.999366][ T6023] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.059616][ T5766] veth0_vlan: entered promiscuous mode [ 132.071345][ T5962] hsr_slave_0: entered promiscuous mode [ 132.071676][ T5962] hsr_slave_1: entered promiscuous mode [ 132.085600][ T5962] debugfs: 'hsr0' already exists in 'hsr' [ 132.085616][ T5962] Cannot create hsr debugfs directory [ 132.089081][ T5766] veth1_vlan: entered promiscuous mode [ 132.199975][ T5766] veth0_macvtap: entered promiscuous mode [ 132.262771][ T5766] veth1_macvtap: entered promiscuous mode [ 132.391421][ T5962] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.391539][ T5962] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.439753][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.473950][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.531274][ T5962] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.531311][ T5962] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.672946][ T3438] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 132.675907][ T3438] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 132.675936][ T3438] EXT4-fs (loop2): This should not happen!! Data will be lost [ 132.675936][ T3438] [ 132.711031][ T5962] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.711069][ T5962] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.889455][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 132.889477][ T29] audit: type=1400 audit(1792381518.228:1112): avc: denied { mounton } for pid=5766 comm="syz-executor" path="/root/syzkaller.wTJHOj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=11881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 132.940264][ T29] audit: type=1400 audit(1792381518.278:1113): avc: denied { mount } for pid=5766 comm="syz-executor" name="/" dev="gadgetfs" ino=3520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 132.988995][ T5962] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 132.989207][ T5962] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.053527][ T72] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.055008][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.056166][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.056255][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.191779][ T3438] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 2048 with error 28 [ 133.191806][ T3438] EXT4-fs (loop2): This should not happen!! Data will be lost [ 133.191806][ T3438] [ 133.202851][ T3438] EXT4-fs (loop2): Total free blocks count 0 [ 133.202867][ T3438] EXT4-fs (loop2): Free/Dirty block details [ 133.202878][ T3438] EXT4-fs (loop2): free_blocks=0 [ 133.202959][ T3438] EXT4-fs (loop2): dirty_blocks=3952 [ 133.202972][ T3438] EXT4-fs (loop2): Block reservation details [ 133.203042][ T3438] EXT4-fs (loop2): i_reserved_data_blocks=247 [ 133.224481][ T3833] EXT4-fs warning (device loop2): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 133.289666][ T29] audit: type=1400 audit(1792381518.628:1114): avc: denied { setattr } for pid=6048 comm="syz.1.651" name="trigger" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 133.317925][ T6049] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 5 (only 8 groups) [ 133.318352][ T3833] EXT4-fs unmount: 18 callbacks suppressed [ 133.328147][ T5962] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 133.339259][ T5962] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.342509][ T5962] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 133.355789][ T5962] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.360881][ T5962] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 133.366137][ T5962] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.367349][ T5962] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 133.370329][ T5962] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.453948][ T5962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.460538][ T6059] loop5: detected capacity change from 0 to 512 [ 133.494311][ T5962] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.496644][ T6059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.496738][ T6059] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.499123][ T29] audit: type=1400 audit(1792381518.838:1115): avc: denied { write } for pid=6058 comm="syz.5.603" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.516472][ T3438] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.516604][ T3438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.543721][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.543806][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.588272][ T6057] loop2: detected capacity change from 0 to 4096 [ 133.599703][ T6057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.638968][ T29] audit: type=1400 audit(1792381518.978:1116): avc: denied { write } for pid=6050 comm="syz.2.650" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.641708][ T6059] batman_adv: batadv0: Adding interface: syzkaller0 [ 133.641755][ T6059] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.700926][ T6059] batman_adv: batadv0: Interface activated: syzkaller0 [ 133.820961][ T3833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.836024][ T6058] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 133.838820][ T6058] batman_adv: batadv0: Removing interface: syzkaller0 [ 133.919111][ T5962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.959037][ T5766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.141558][ T6082] loop2: detected capacity change from 0 to 128 [ 134.175243][ T6082] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 134.259372][ T6082] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.261606][ T6082] ext2 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.375186][ T3833] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.440256][ T5962] veth0_vlan: entered promiscuous mode [ 134.457479][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'. [ 134.460365][ T5962] veth1_vlan: entered promiscuous mode [ 134.500481][ T6115] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.539113][ T6115] netlink: 28 bytes leftover after parsing attributes in process `syz.2.663'. [ 134.629587][ T6118] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 134.668706][ T29] audit: type=1400 audit(1792381520.008:1117): avc: denied { append } for pid=6119 comm="syz.0.664" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 134.672410][ T6115] bond3 (unregistering): (slave dummy0): Releasing backup interface [ 134.675158][ T6115] bond3 (unregistering): Released all slaves [ 134.696458][ T6120] FAULT_INJECTION: forcing a failure. [ 134.696458][ T6120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.696634][ T6120] CPU: 0 UID: 0 PID: 6120 Comm: syz.0.664 Not tainted syzkaller #0 PREEMPT(lazy) [ 134.696712][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.696756][ T6120] Call Trace: [ 134.696764][ T6120] [ 134.696772][ T6120] __dump_stack+0x1d/0x30 [ 134.696833][ T29] audit: type=1400 audit(1792381520.028:1118): avc: denied { bind } for pid=6119 comm="syz.0.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.696801][ T6120] dump_stack_lvl+0x95/0xd0 [ 134.696858][ T6120] dump_stack+0x15/0x1b [ 134.697018][ T6120] should_fail_ex+0x262/0x280 [ 134.697121][ T6120] should_fail+0xb/0x20 [ 134.697226][ T6120] should_fail_usercopy+0x1a/0x20 [ 134.697307][ T6120] _copy_from_user+0x1c/0xb0 [ 134.697426][ T6120] perf_copy_attr+0x141/0x600 [ 134.697590][ T6120] __se_sys_perf_event_open+0x67/0x1290 [ 134.697655][ T6120] ? do_futex+0x391/0x460 [ 134.697769][ T6120] __x64_sys_perf_event_open+0x67/0x80 [ 134.697888][ T6120] x64_sys_call+0x1f25/0x2550 [ 134.697958][ T6120] do_syscall_64+0x112/0x360 [ 134.698038][ T6120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.698118][ T6120] RIP: 0033:0x7f45e0b5e559 [ 134.698170][ T6120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.698225][ T6120] RSP: 002b:00007f45df5b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 134.698285][ T6120] RAX: ffffffffffffffda RBX: 00007f45e0de5fa0 RCX: 00007f45e0b5e559 [ 134.698328][ T6120] RDX: 0000004000000000 RSI: 00000000000001bc RDI: 0000200000000680 [ 134.698370][ T6120] RBP: 00007f45e0bf5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 134.698467][ T6120] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 134.698513][ T6120] R13: 00007f45e0de6038 R14: 00007f45e0de5fa0 R15: 00007ffec1ffd4b8 [ 134.698576][ T6120] [ 134.739430][ T5962] veth0_macvtap: entered promiscuous mode [ 134.748975][ T5962] veth1_macvtap: entered promiscuous mode [ 134.807321][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.828307][ T5962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.852467][ T3438] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.852633][ T3438] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.852770][ T3438] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.852856][ T3438] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.996461][ T29] audit: type=1326 audit(1792381520.338:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.0.667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e0b5e559 code=0x7ffc0000 [ 134.996500][ T29] audit: type=1326 audit(1792381520.338:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.0.667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e0b5e559 code=0x7ffc0000 [ 135.001878][ T29] audit: type=1326 audit(1792381520.338:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6125 comm="syz.0.667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e0b5e559 code=0x7ffc0000 [ 135.097671][ T6122] loop1: detected capacity change from 0 to 4096 [ 135.122484][ T6122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.205926][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.275372][ T6136] loop1: detected capacity change from 0 to 512 [ 135.327889][ T6136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.328013][ T6136] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.416782][ T6136] batman_adv: batadv0: Adding interface: syzkaller0 [ 135.416815][ T6136] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.416850][ T6136] batman_adv: batadv0: Interface activated: syzkaller0 [ 135.513806][ T6137] loop5: detected capacity change from 0 to 8192 [ 135.557383][ T6134] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 135.559735][ T6134] batman_adv: batadv0: Removing interface: syzkaller0 [ 135.567347][ T6137] loop5: p1 p2 < > p3 p4 < p5 p6 > [ 135.567356][ T6137] loop5: partition table partially beyond EOD, truncated [ 135.567457][ T6137] loop5: p1 start 32768 is beyond EOD, truncated [ 135.567472][ T6137] loop5: p2 start 16776960 is beyond EOD, truncated [ 135.640075][ T6137] loop5: p5 start 32768 is beyond EOD, truncated [ 135.759993][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.773962][ T6151] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.817104][ T6156] loop0: detected capacity change from 0 to 128 [ 135.835548][ T6156] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.841848][ T6156] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.869773][ T4805] udevd[4805]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 135.895645][ T4806] udevd[4806]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 135.897642][ T4807] udevd[4807]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 136.181870][ T6159] loop0: detected capacity change from 0 to 1024 [ 136.315845][ T6161] TCP: TCP_TX_DELAY enabled [ 136.339847][ T6159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.341016][ T6159] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.396624][ T6159] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.676: lblock 0 mapped to illegal pblock 0 (length 2) [ 136.399165][ T6159] EXT4-fs error (device loop0): ext4_ext_remove_space:2977: inode #15: comm syz.0.676: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 136.523101][ T6159] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 136.678314][ T6159] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.676: bg 0: block 112: padding at end of block bitmap is not set [ 136.733333][ T6174] loop5: detected capacity change from 0 to 4096 [ 136.740121][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 136.791776][ T6174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.808428][ T6180] loop1: detected capacity change from 0 to 1024 [ 136.809891][ T6180] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 136.809921][ T6180] EXT4-fs (loop1): group descriptors corrupted! [ 136.986091][ T5766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.278225][ T6194] loop4: detected capacity change from 0 to 128 [ 137.311082][ T6194] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.311280][ T6194] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.537512][ T3438] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.575573][ T6198] loop5: detected capacity change from 0 to 512 [ 137.593195][ T6200] netlink: 36 bytes leftover after parsing attributes in process `syz.0.688'. [ 137.598176][ T6198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.598265][ T6198] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.756614][ T6198] batman_adv: batadv0: Adding interface: syzkaller0 [ 137.756631][ T6198] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.756667][ T6198] batman_adv: batadv0: Interface activated: syzkaller0 [ 137.860421][ T6214] netlink: 136 bytes leftover after parsing attributes in process `syz.1.693'. [ 137.860439][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 137.895048][ T6212] loop0: detected capacity change from 0 to 512 [ 137.907378][ T6195] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 137.932178][ T6195] batman_adv: batadv0: Removing interface: syzkaller0 [ 138.164598][ T6226] loop0: detected capacity change from 0 to 128 [ 138.170881][ T5766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.192541][ T6226] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 138.239871][ T6226] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.255587][ T6226] ext2 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.397830][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.453496][ T6236] loop1: detected capacity change from 0 to 128 [ 138.455809][ T6236] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.497054][ T6236] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 138.564038][ T38] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.206917][ T6250] loop2: detected capacity change from 0 to 4096 [ 139.235566][ T6250] ext3: Unknown parameter 'nouser_xattr' [ 139.292221][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 139.292265][ T29] audit: type=1400 audit(1792381524.578:1295): avc: denied { mounton } for pid=6239 comm="syz.2.700" path="/syzcgroup/cpu/syz2/cpuset.cpus" dev="cgroup" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 139.499984][ T6241] netlink: 120 bytes leftover after parsing attributes in process `syz.2.700'. [ 139.808091][ T6276] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 139.808119][ T6276] EXT4-fs (loop0): group descriptors corrupted! [ 140.723069][ T6285] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 140.756575][ T6285] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #3: block 1: comm syz.2.709: lblock 1 mapped to illegal pblock 1 (length 1) [ 140.756676][ T6285] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 140.757719][ T6285] Quota error (device loop2): write_blk: dquota write failed [ 140.757739][ T6285] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 140.757770][ T6285] EXT4-fs error (device loop2): ext4_acquire_dquot:7079: comm syz.2.709: Failed to acquire dquot type 0 [ 140.757839][ T6285] loop2: lost filesystem error report for type 5 error -117 [ 140.761671][ T6285] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.709: Freeing blocks not in datazone - block = 0, count = 4096 [ 140.761742][ T6285] loop2: lost filesystem error report for type 5 error -117 [ 140.766049][ T6285] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.709: Invalid inode bitmap blk 0 in block_group 0 [ 140.766127][ T6285] loop2: lost filesystem error report for type 5 error -117 [ 140.771396][ T6285] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem [ 140.771447][ T6285] loop2: lost filesystem error report for type 5 error -117 [ 140.773763][ T6285] EXT4-fs (loop2): 1 orphan inode deleted [ 140.777693][ T6285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.784848][ T72] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 140.798508][ T72] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 140.798562][ T72] EXT4-fs error (device loop2): ext4_release_dquot:7115: comm kworker/u8:4: Failed to release dquot type 0 [ 140.799118][ T6292] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 140.799178][ T6292] EXT4-fs (loop0): group descriptors corrupted! [ 140.963285][ T6285] netlink: 220 bytes leftover after parsing attributes in process `syz.2.709'. [ 140.963302][ T6285] tc_dump_action: action bad kind [ 140.990106][ T29] audit: type=1400 audit(1792381526.328:1296): avc: denied { mounton } for pid=6295 comm="syz.5.708" path="/12/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 141.043694][ T6285] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm syz.2.709: Invalid block bitmap block 0 in block_group 0 [ 141.852257][ T3833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.054428][ T6302] set_capacity_and_notify: 4 callbacks suppressed [ 142.054446][ T6302] loop1: detected capacity change from 0 to 128 [ 142.055142][ T6302] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.057714][ T6302] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.167475][ T6310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.713'. [ 142.222705][ T29] audit: type=1400 audit(1792381527.568:1297): avc: denied { write } for pid=6283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.247130][ T38] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.324678][ T29] audit: type=1400 audit(1792381527.668:1298): avc: denied { write } for pid=6320 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.366740][ T6327] loop0: detected capacity change from 0 to 256 [ 142.451082][ T38] Bluetooth: hci0: Frame reassembly failed (-84) [ 142.589799][ T29] audit: type=1400 audit(1792381527.928:1299): avc: denied { write } for pid=6335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.647938][ T6347] loop4: detected capacity change from 0 to 1024 [ 142.662265][ T29] audit: type=1400 audit(1792381528.008:1300): avc: denied { write } for pid=6351 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.663961][ T6347] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 142.663985][ T6347] EXT4-fs (loop4): group descriptors corrupted! [ 142.803371][ T6352] loop5: detected capacity change from 0 to 512 [ 142.812371][ T6354] netlink: 68 bytes leftover after parsing attributes in process `syz.2.719'. [ 142.813127][ T6352] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.722: bg 0: block 5: invalid block bitmap [ 142.813169][ T6352] loop5: lost filesystem error report for type 5 error -117 [ 142.814678][ T6352] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 142.814697][ T6352] loop5: lost filesystem error report for type 5 error -117 [ 142.814840][ T6352] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.722: invalid indirect mapped block 3 (level 2) [ 142.814934][ T6352] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 142.815493][ T6352] EXT4-fs (loop5): 1 orphan inode deleted [ 142.815511][ T6352] EXT4-fs (loop5): 1 truncate cleaned up [ 142.815955][ T6352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.283835][ T5766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.514441][ T6364] loop2: detected capacity change from 0 to 128 [ 143.627215][ T6377] loop4: detected capacity change from 0 to 128 [ 144.199680][ T6364] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 144.201249][ T6379] loop1: detected capacity change from 0 to 8192 [ 144.250430][ T6377] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.276316][ T6364] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.279701][ T6364] ext2 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.297132][ T6377] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.369934][ T29] audit: type=1400 audit(1792381529.708:1301): avc: denied { write } for pid=6362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.479626][ T29] audit: type=1400 audit(1792381529.818:1302): avc: denied { write } for pid=6387 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.487555][ T5817] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.504278][ T3520] Bluetooth: hci0: command 0x1003 tx timeout [ 144.504303][ T5138] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.571143][ T3833] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.592250][ T6390] loop5: detected capacity change from 0 to 128 [ 144.630802][ T6390] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.631819][ T6390] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.816840][ T6397] loop2: detected capacity change from 0 to 1024 [ 144.951881][ T6397] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 144.951961][ T6397] EXT4-fs (loop2): group descriptors corrupted! [ 145.158923][ T6416] loop4: detected capacity change from 0 to 8192 [ 146.052191][ T6390] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.140642][ T29] audit: type=1400 audit(1792381531.478:1303): avc: denied { write } for pid=6396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.234344][ T29] audit: type=1400 audit(1792381531.578:1304): avc: denied { write } for pid=6435 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.298106][ T6444] netlink: 28 bytes leftover after parsing attributes in process `syz.5.741'. [ 146.316851][ T6431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.316961][ T6431] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.353064][ T29] audit: type=1400 audit(1792381531.698:1305): avc: denied { write } for pid=6430 comm="syz.4.736" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.494169][ T29] audit: type=1400 audit(1792381531.838:1306): avc: denied { wake_alarm } for pid=6451 comm="syz.0.743" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 146.498038][ T6458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.745'. [ 146.502963][ T29] audit: type=1326 audit(1792381531.848:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6451 comm="syz.0.743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e0b5e559 code=0x7ffc0000 [ 146.503002][ T29] audit: type=1326 audit(1792381531.848:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6451 comm="syz.0.743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e0b5e559 code=0x7ffc0000 [ 146.524234][ T29] audit: type=1326 audit(1792381531.848:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6451 comm="syz.0.743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e0b5e559 code=0x7ffc0000 [ 146.524261][ T29] audit: type=1326 audit(1792381531.848:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6451 comm="syz.0.743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e0b5e559 code=0x7ffc0000 [ 147.067180][ T6462] ext4: Unknown parameter 'smackfsdef' [ 147.174790][ T313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 147.177977][ T313] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 147.178006][ T313] EXT4-fs (loop4): This should not happen!! Data will be lost [ 147.178006][ T313] [ 147.223423][ T6464] set_capacity_and_notify: 2 callbacks suppressed [ 147.223464][ T6464] loop0: detected capacity change from 0 to 128 [ 147.246820][ T313] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 945 with error 28 [ 147.246950][ T313] EXT4-fs (loop4): This should not happen!! Data will be lost [ 147.246950][ T313] [ 147.246960][ T313] EXT4-fs (loop4): Total free blocks count 0 [ 147.246971][ T313] EXT4-fs (loop4): Free/Dirty block details [ 147.246980][ T313] EXT4-fs (loop4): free_blocks=0 [ 147.246990][ T313] EXT4-fs (loop4): dirty_blocks=960 [ 147.247037][ T313] EXT4-fs (loop4): Block reservation details [ 147.285588][ T6464] ext4: Unknown parameter 'smackfsdef' [ 147.325968][ T5962] EXT4-fs warning (device loop4): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 147.469459][ T6477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.748'. [ 147.745683][ T6481] hsr_slave_0 (unregistering): left promiscuous mode [ 148.635527][ T6507] FAULT_INJECTION: forcing a failure. [ 148.635527][ T6507] name failslab, interval 1, probability 0, space 0, times 0 [ 148.635598][ T6507] CPU: 1 UID: 0 PID: 6507 Comm: syz.4.761 Not tainted syzkaller #0 PREEMPT(lazy) [ 148.635622][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.635641][ T6507] Call Trace: [ 148.635648][ T6507] [ 148.635657][ T6507] __dump_stack+0x1d/0x30 [ 148.635681][ T6507] dump_stack_lvl+0x95/0xd0 [ 148.635756][ T6507] dump_stack+0x15/0x1b [ 148.635780][ T6507] should_fail_ex+0x262/0x280 [ 148.635816][ T6507] should_failslab+0x8c/0xb0 [ 148.635852][ T6507] __kmalloc_node_noprof+0xdb/0x500 [ 148.635970][ T6507] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 148.636046][ T6507] ? __vmalloc_node_range_noprof+0x3ef/0x1000 [ 148.636090][ T6507] __vmalloc_node_range_noprof+0x3ef/0x1000 [ 148.636143][ T6507] ? _raw_spin_unlock+0x9/0x30 [ 148.636186][ T6507] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 148.636215][ T6507] __vmalloc_noprof+0xa4/0xf0 [ 148.636304][ T6507] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 148.636334][ T6507] bpf_prog_alloc_no_stats+0x47/0x390 [ 148.636362][ T6507] ? bpf_prog_alloc+0x2a/0x150 [ 148.636447][ T6507] bpf_prog_alloc+0x3c/0x150 [ 148.636472][ T6507] bpf_prog_load+0x54b/0x1060 [ 148.636495][ T6507] ? avc_has_perm_noaudit+0xac/0x160 [ 148.636526][ T6507] ? vfs_write+0x760/0x9a0 [ 148.636560][ T6507] __sys_bpf+0xbae/0xc30 [ 148.636663][ T6507] ? vfs_write+0x760/0x9a0 [ 148.636699][ T6507] ? vfs_write+0x760/0x9a0 [ 148.636736][ T6507] __x64_sys_bpf+0x69/0x80 [ 148.636757][ T6507] x64_sys_call+0xf26/0x2550 [ 148.636961][ T6507] do_syscall_64+0x112/0x360 [ 148.637031][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.637083][ T6507] RIP: 0033:0x7f36d4bee559 [ 148.637101][ T6507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.637123][ T6507] RSP: 002b:00007f36d3647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.637220][ T6507] RAX: ffffffffffffffda RBX: 00007f36d4e75fa0 RCX: 00007f36d4bee559 [ 148.637235][ T6507] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 148.637281][ T6507] RBP: 00007f36d3647090 R08: 0000000000000000 R09: 0000000000000000 [ 148.637302][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.637314][ T6507] R13: 00007f36d4e76038 R14: 00007f36d4e75fa0 R15: 00007ffcd0f7e1c8 [ 148.637336][ T6507] [ 148.649128][ T6500] batadv_slave_0: entered promiscuous mode [ 148.684756][ T6507] syz.4.761: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 148.685169][ T6507] CPU: 1 UID: 0 PID: 6507 Comm: syz.4.761 Not tainted syzkaller #0 PREEMPT(lazy) [ 148.685236][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.685331][ T6507] Call Trace: [ 148.685348][ T6507] [ 148.685366][ T6507] __dump_stack+0x1d/0x30 [ 148.685434][ T6507] dump_stack_lvl+0x95/0xd0 [ 148.685527][ T6507] dump_stack+0x15/0x1b [ 148.685581][ T6507] warn_alloc+0x146/0x1c0 [ 148.685633][ T6507] ? should_failslab+0x8c/0xb0 [ 148.685740][ T6507] ? __kmalloc_node_noprof+0xdb/0x500 [ 148.685803][ T6507] __vmalloc_node_range_noprof+0x70d/0x1000 [ 148.685842][ T6507] ? _raw_spin_unlock+0x9/0x30 [ 148.685928][ T6507] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 148.685997][ T6507] __vmalloc_noprof+0xa4/0xf0 [ 148.686106][ T6507] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 148.686183][ T6507] bpf_prog_alloc_no_stats+0x47/0x390 [ 148.686250][ T6507] ? bpf_prog_alloc+0x2a/0x150 [ 148.686313][ T6507] bpf_prog_alloc+0x3c/0x150 [ 148.686381][ T6507] bpf_prog_load+0x54b/0x1060 [ 148.686486][ T6507] ? avc_has_perm_noaudit+0xac/0x160 [ 148.686588][ T6507] ? vfs_write+0x760/0x9a0 [ 148.686676][ T6507] __sys_bpf+0xbae/0xc30 [ 148.686818][ T6507] ? vfs_write+0x760/0x9a0 [ 148.686903][ T6507] ? vfs_write+0x760/0x9a0 [ 148.686995][ T6507] __x64_sys_bpf+0x69/0x80 [ 148.687058][ T6507] x64_sys_call+0xf26/0x2550 [ 148.687159][ T6507] do_syscall_64+0x112/0x360 [ 148.687242][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.687310][ T6507] RIP: 0033:0x7f36d4bee559 [ 148.687355][ T6507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.687400][ T6507] RSP: 002b:00007f36d3647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.687488][ T6507] RAX: ffffffffffffffda RBX: 00007f36d4e75fa0 RCX: 00007f36d4bee559 [ 148.687530][ T6507] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 148.687625][ T6507] RBP: 00007f36d3647090 R08: 0000000000000000 R09: 0000000000000000 [ 148.687659][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.687695][ T6507] R13: 00007f36d4e76038 R14: 00007f36d4e75fa0 R15: 00007ffcd0f7e1c8 [ 148.687753][ T6507] [ 148.753570][ T6507] Mem-Info: [ 148.753592][ T6507] active_anon:12033 inactive_anon:0 isolated_anon:0 [ 148.753592][ T6507] active_file:10718 inactive_file:12885 isolated_file:0 [ 148.753592][ T6507] unevictable:0 dirty:442 writeback:0 [ 148.753592][ T6507] slab_reclaimable:3467 slab_unreclaimable:19253 [ 148.753592][ T6507] mapped:32698 shmem:3088 pagetables:1291 [ 148.753592][ T6507] sec_pagetables:0 bounce:0 [ 148.753592][ T6507] kernel_misc_reclaimable:0 [ 148.753592][ T6507] free:1865850 free_pcp:7894 free_cma:0 [ 148.753830][ T6507] Node 0 active_anon:48132kB inactive_anon:0kB active_file:42872kB inactive_file:51540kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130792kB dirty:1768kB writeback:0kB shmem:12352kB kernel_stack:3952kB pagetables:5164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 148.754014][ T6507] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 148.754452][ T6507] lowmem_reserve[]: 0 2878 7856 7856 [ 148.754606][ T6507] Node 0 DMA32 free:2943616kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947140kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 148.754813][ T6507] lowmem_reserve[]: 0 0 4978 4978 [ 148.754885][ T6507] Node 0 Normal free:4504424kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:48132kB inactive_anon:0kB active_file:42872kB inactive_file:51540kB unevictable:0kB writepending:1768kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:28052kB local_pcp:4816kB free_cma:0kB [ 148.761782][ T6507] lowmem_reserve[]: 0 0 0 0 [ 148.762211][ T6507] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 148.767167][ T6507] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943616kB [ 148.774347][ T6507] Node 0 Normal: 712*4kB (UME) 463*8kB (ME) 11*16kB (UM) 77*32kB (UME) 128*64kB (UME) 97*128kB (UME) 79*256kB (UME) 32*512kB (UM) 12*1024kB (ME) 5*2048kB (UM) 1078*4096kB (UM) = 4504424kB [ 148.786658][ T6507] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 148.786710][ T6507] 26686 total pagecache pages [ 148.786737][ T6507] 0 pages in swap cache [ 148.786755][ T6507] Free swap = 124996kB [ 148.786773][ T6507] Total swap = 124996kB [ 148.787070][ T6507] 2097051 pages RAM [ 148.787088][ T6507] 0 pages HighMem/MovableOnly [ 148.787164][ T6507] 81869 pages reserved [ 148.871739][ T6499] batadv_slave_0: left promiscuous mode [ 149.501868][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.767'. [ 149.551122][ T6523] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.560610][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.763'. [ 149.697932][ T6527] bond2: (slave veth3): Enslaving as an active interface with an up link [ 149.729124][ T6523] bond2 (unregistering): (slave veth3): Releasing backup interface [ 149.893636][ T6523] bond2 (unregistering): Released all slaves [ 149.925273][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 149.925289][ T29] audit: type=1400 audit(1792381535.268:1479): avc: denied { mount } for pid=6531 comm="syz.4.768" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 150.052809][ T6522] loop0: detected capacity change from 0 to 1024 [ 150.059937][ T6522] EXT4-fs: inline encryption not supported [ 150.061564][ T6522] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 150.061683][ T6522] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52238!=20869) [ 150.106440][ T6522] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 150.111040][ T6522] EXT4-fs (loop0): invalid journal inode [ 150.111434][ T6522] EXT4-fs (loop0): can't get journal size [ 150.143504][ T6538] loop1: detected capacity change from 0 to 1024 [ 150.160365][ T6538] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 150.160385][ T6538] EXT4-fs (loop1): group descriptors corrupted! [ 150.187915][ T6522] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.219761][ T6540] loop5: detected capacity change from 0 to 128 [ 150.246215][ T6540] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.248079][ T6540] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 150.339274][ T29] audit: type=1400 audit(1792381535.678:1480): avc: denied { unmount } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 150.799672][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.963288][ T6559] loop0: detected capacity change from 0 to 512 [ 150.989449][ T6564] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 150.990707][ T29] audit: type=1400 audit(1792381536.328:1481): avc: denied { relabelto } for pid=6563 comm="syz.2.779" name="140" dev="tmpfs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 150.991326][ T29] audit: type=1400 audit(1792381536.328:1482): avc: denied { associate } for pid=6563 comm="syz.2.779" name="140" dev="tmpfs" ino=799 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 151.165920][ T6559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.166027][ T6559] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.201963][ T29] audit: type=1400 audit(1792381536.538:1483): avc: denied { write } for pid=6557 comm="syz.0.774" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 151.202801][ T29] audit: type=1400 audit(1792381536.548:1484): avc: denied { read write } for pid=6557 comm="syz.0.774" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 151.203612][ T29] audit: type=1400 audit(1792381536.548:1485): avc: denied { open } for pid=6557 comm="syz.0.774" path="/174/bus/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 151.331418][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 151.391821][ T6572] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.433799][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.480244][ T6575] bond2: (slave veth5): Enslaving as an active interface with an up link [ 151.504349][ T6564] loop2: detected capacity change from 0 to 512 [ 151.519601][ T29] audit: type=1400 audit(1792381536.848:1486): avc: denied { write } for pid=6563 comm="syz.2.779" name="140" dev="tmpfs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 151.519642][ T29] audit: type=1400 audit(1792381536.858:1487): avc: denied { add_name } for pid=6563 comm="syz.2.779" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 151.577572][ T29] audit: type=1400 audit(1792381536.918:1488): avc: denied { associate } for pid=6563 comm="syz.2.779" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 151.608558][ T6564] vfat: Unknown parameter 'uÆÀïtf8' [ 151.740238][ T6580] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 151.763014][ T6585] loop4: detected capacity change from 0 to 512 [ 151.772104][ T6585] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 151.772149][ T6585] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.784: corrupted in-inode xattr: e_value size too large [ 151.772183][ T6585] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 151.786824][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 151.786846][ C0] EXT4-fs (loop4): initial error at time 1792381537: ext4_iget_extra_inode:5210: inode 15 [ 151.786874][ C0] EXT4-fs (loop4): last error at time 1792381537: ext4_iget_extra_inode:5210: inode 15 [ 151.836153][ T6585] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.784: couldn't read orphan inode 15 (err -117) [ 151.836278][ T6585] loop4: lost filesystem error report for type 5 error -117 [ 151.839764][ T6585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.900265][ T6583] syz.2.783 uses obsolete (PF_INET,SOCK_PACKET) [ 151.925245][ T6572] bond2 (unregistering): (slave veth5): Releasing backup interface [ 151.931806][ T5962] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.029696][ T6572] bond2 (unregistering): Released all slaves [ 152.099651][ T6598] FAULT_INJECTION: forcing a failure. [ 152.099651][ T6598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.099738][ T6598] CPU: 1 UID: 0 PID: 6598 Comm: syz.4.787 Not tainted syzkaller #0 PREEMPT(lazy) [ 152.099760][ T6598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.099831][ T6598] Call Trace: [ 152.099837][ T6598] [ 152.099843][ T6598] __dump_stack+0x1d/0x30 [ 152.099925][ T6598] dump_stack_lvl+0x95/0xd0 [ 152.099990][ T6598] dump_stack+0x15/0x1b [ 152.100012][ T6598] should_fail_ex+0x262/0x280 [ 152.100044][ T6598] should_fail+0xb/0x20 [ 152.100076][ T6598] should_fail_usercopy+0x1a/0x20 [ 152.100169][ T6598] _copy_from_user+0x1c/0xb0 [ 152.100195][ T6598] __sys_bpf+0x1e2/0xc30 [ 152.100256][ T6598] ? get_pid_task+0x92/0xc0 [ 152.100280][ T6598] ? vfs_write+0x760/0x9a0 [ 152.100321][ T6598] __x64_sys_bpf+0x69/0x80 [ 152.100341][ T6598] x64_sys_call+0xf26/0x2550 [ 152.100384][ T6598] do_syscall_64+0x112/0x360 [ 152.100441][ T6598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.100465][ T6598] RIP: 0033:0x7f36d4bee559 [ 152.100514][ T6598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.100534][ T6598] RSP: 002b:00007f36d3647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 152.100565][ T6598] RAX: ffffffffffffffda RBX: 00007f36d4e75fa0 RCX: 00007f36d4bee559 [ 152.100578][ T6598] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 0000000000000005 [ 152.100589][ T6598] RBP: 00007f36d3647090 R08: 0000000000000000 R09: 0000000000000000 [ 152.100600][ T6598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.100610][ T6598] R13: 00007f36d4e76038 R14: 00007f36d4e75fa0 R15: 00007ffcd0f7e1c8 [ 152.100702][ T6598] [ 152.523357][ T6610] loop1: detected capacity change from 0 to 512 [ 152.535806][ T6610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.535909][ T6610] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.690604][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.777912][ T6620] loop1: detected capacity change from 0 to 2048 [ 152.853733][ T6620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.853793][ T6620] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.927310][ T6624] loop2: detected capacity change from 0 to 128 [ 152.933658][ T6624] ext4: Unknown parameter 'smackfsdef' [ 152.963163][ T6620] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.795: bg 0: block 345: padding at end of block bitmap is not set [ 153.033557][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.124430][ T6628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.798'. [ 153.634583][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.802'. [ 153.693568][ T6648] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.795243][ T6650] bond2: (slave veth7): Enslaving as an active interface with an up link [ 153.820473][ T6648] bond2 (unregistering): (slave veth7): Releasing backup interface [ 153.832207][ T6648] bond2 (unregistering): Released all slaves [ 154.173969][ T6664] loop5: detected capacity change from 0 to 1024 [ 154.205316][ T6664] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 154.205336][ T6664] EXT4-fs (loop5): group descriptors corrupted! [ 154.222348][ T6671] FAULT_INJECTION: forcing a failure. [ 154.222348][ T6671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.234115][ T6671] CPU: 1 UID: 0 PID: 6671 Comm: syz.2.806 Not tainted syzkaller #0 PREEMPT(lazy) [ 154.234183][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.234269][ T6671] Call Trace: [ 154.234290][ T6671] [ 154.234315][ T6671] __dump_stack+0x1d/0x30 [ 154.234414][ T6671] dump_stack_lvl+0x95/0xd0 [ 154.234485][ T6671] dump_stack+0x15/0x1b [ 154.234543][ T6671] should_fail_ex+0x262/0x280 [ 154.234623][ T6671] should_fail+0xb/0x20 [ 154.234686][ T6671] should_fail_usercopy+0x1a/0x20 [ 154.234863][ T6671] strncpy_from_user+0x27/0x250 [ 154.234939][ T6671] do_getname+0x59/0x1c0 [ 154.235003][ T6671] getname_flags+0x1d/0x30 [ 154.235173][ T6671] path_setxattrat+0x21a/0x320 [ 154.235296][ T6671] __x64_sys_lsetxattr+0x71/0x90 [ 154.235363][ T6671] x64_sys_call+0x22c1/0x2550 [ 154.235517][ T6671] do_syscall_64+0x112/0x360 [ 154.235610][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.235683][ T6671] RIP: 0033:0x7f6c86e2e559 [ 154.235739][ T6671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.235831][ T6671] RSP: 002b:00007f6c85887028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 154.235885][ T6671] RAX: ffffffffffffffda RBX: 00007f6c870b5fa0 RCX: 00007f6c86e2e559 [ 154.235937][ T6671] RDX: 0000200000000680 RSI: 0000200000000640 RDI: 0000200000000600 [ 154.235973][ T6671] RBP: 00007f6c85887090 R08: 0000000000000000 R09: 0000000000000000 [ 154.236009][ T6671] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 154.236054][ T6671] R13: 00007f6c870b6038 R14: 00007f6c870b5fa0 R15: 00007ffc268f2e58 [ 154.236128][ T6671] [ 154.633104][ T6686] xfrm0: entered allmulticast mode [ 154.648747][ T6671] loop2: detected capacity change from 0 to 512 [ 154.673181][ T6671] vfat: Unknown parameter 'uÆÀïtf8' [ 154.750072][ T6692] loop4: detected capacity change from 0 to 512 [ 154.761698][ T6692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.761756][ T6692] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.456187][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 155.456205][ T29] audit: type=1400 audit(1792381540.798:1505): avc: denied { write } for pid=6704 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.475514][ T6670] loop1: detected capacity change from 0 to 128 [ 155.485622][ T6670] ext4: Unknown parameter 'smackfsdef' [ 155.566632][ T6710] loop2: detected capacity change from 0 to 512 [ 155.614731][ T5962] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.620338][ T6710] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 155.649853][ T29] audit: type=1400 audit(1792381540.988:1506): avc: denied { mount } for pid=6711 comm="syz.4.815" name="/" dev="hugetlbfs" ino=14913 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 155.652098][ T29] audit: type=1400 audit(1792381540.998:1507): avc: denied { read } for pid=6711 comm="syz.4.815" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 155.652145][ T29] audit: type=1400 audit(1792381540.998:1508): avc: denied { open } for pid=6711 comm="syz.4.815" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 155.663666][ T6710] EXT4-fs (loop2): 1 truncate cleaned up [ 155.664528][ T6710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.762702][ T29] audit: type=1400 audit(1792381541.108:1509): avc: denied { unmount } for pid=5962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 155.976527][ T3833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.194356][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 156.763686][ T6745] FAULT_INJECTION: forcing a failure. [ 156.763686][ T6745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.763808][ T6745] CPU: 0 UID: 0 PID: 6745 Comm: syz.4.821 Not tainted syzkaller #0 PREEMPT(lazy) [ 156.763838][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.763854][ T6745] Call Trace: [ 156.763862][ T6745] [ 156.763871][ T6745] __dump_stack+0x1d/0x30 [ 156.763904][ T6745] dump_stack_lvl+0x95/0xd0 [ 156.763963][ T6745] dump_stack+0x15/0x1b [ 156.764011][ T6745] should_fail_ex+0x262/0x280 [ 156.764047][ T6745] should_fail+0xb/0x20 [ 156.764160][ T6745] should_fail_usercopy+0x1a/0x20 [ 156.764198][ T6745] _copy_from_user+0x1c/0xb0 [ 156.764255][ T6745] ___sys_sendmsg+0xc1/0x1e0 [ 156.764306][ T6745] __x64_sys_sendmsg+0xd4/0x160 [ 156.764345][ T6745] x64_sys_call+0x22ab/0x2550 [ 156.764377][ T6745] do_syscall_64+0x112/0x360 [ 156.764479][ T6745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.764507][ T6745] RIP: 0033:0x7f36d4bee559 [ 156.764527][ T6745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.764551][ T6745] RSP: 002b:00007f36d3647028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.764636][ T6745] RAX: ffffffffffffffda RBX: 00007f36d4e75fa0 RCX: 00007f36d4bee559 [ 156.764655][ T6745] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 156.764672][ T6745] RBP: 00007f36d3647090 R08: 0000000000000000 R09: 0000000000000000 [ 156.764689][ T6745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.764705][ T6745] R13: 00007f36d4e76038 R14: 00007f36d4e75fa0 R15: 00007ffcd0f7e1c8 [ 156.764734][ T6745] [ 156.938333][ T6747] loop5: detected capacity change from 0 to 128 [ 156.997567][ T6747] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 156.998484][ T6747] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.006111][ T29] audit: type=1400 audit(1792381542.348:1510): avc: denied { write } for pid=6746 comm="syz.5.822" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.011436][ T29] audit: type=1400 audit(1792381542.348:1511): avc: denied { write } for pid=6746 comm="syz.5.822" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.011502][ T29] audit: type=1400 audit(1792381542.348:1512): avc: denied { write } for pid=6746 comm="syz.5.822" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.011561][ T29] audit: type=1400 audit(1792381542.348:1513): avc: denied { rename } for pid=6746 comm="syz.5.822" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 157.061422][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.823'. [ 157.130402][ T6749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.246251][ T5766] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.311690][ T6762] loop5: detected capacity change from 0 to 512 [ 157.352529][ T6762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.352615][ T6762] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.592909][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.830'. [ 157.743670][ T6762] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 157.743697][ T6762] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 157.809260][ T5766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.862311][ T6780] FAULT_INJECTION: forcing a failure. [ 157.862311][ T6780] name failslab, interval 1, probability 0, space 0, times 0 [ 157.862400][ T6780] CPU: 0 UID: 0 PID: 6780 Comm: syz.4.833 Not tainted syzkaller #0 PREEMPT(lazy) [ 157.862429][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.862443][ T6780] Call Trace: [ 157.862450][ T6780] [ 157.862459][ T6780] __dump_stack+0x1d/0x30 [ 157.862485][ T6780] dump_stack_lvl+0x95/0xd0 [ 157.862534][ T6780] dump_stack+0x15/0x1b [ 157.862558][ T6780] should_fail_ex+0x262/0x280 [ 157.862616][ T6780] ? alloc_empty_file+0x70/0x1e0 [ 157.862645][ T6780] should_failslab+0x8c/0xb0 [ 157.862835][ T6780] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 157.862873][ T6780] ? alloc_empty_file+0x70/0x1e0 [ 157.862907][ T6780] alloc_empty_file+0x70/0x1e0 [ 157.863001][ T6780] alloc_file_pseudo+0x92/0x120 [ 157.863034][ T6780] sock_alloc_file+0x9c/0x1e0 [ 157.863071][ T6780] __sys_socket+0x118/0x180 [ 157.863094][ T6780] __x64_sys_socket+0x3f/0x50 [ 157.863147][ T6780] x64_sys_call+0x246e/0x2550 [ 157.863177][ T6780] do_syscall_64+0x112/0x360 [ 157.863238][ T6780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.863307][ T6780] RIP: 0033:0x7f36d4bee559 [ 157.863325][ T6780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.863400][ T6780] RSP: 002b:00007f36d3647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 157.863423][ T6780] RAX: ffffffffffffffda RBX: 00007f36d4e75fa0 RCX: 00007f36d4bee559 [ 157.863441][ T6780] RDX: 000000000000008d RSI: 0000000000000003 RDI: 0000000000000002 [ 157.863455][ T6780] RBP: 00007f36d3647090 R08: 0000000000000000 R09: 0000000000000000 [ 157.863471][ T6780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.863486][ T6780] R13: 00007f36d4e76038 R14: 00007f36d4e75fa0 R15: 00007ffcd0f7e1c8 [ 157.863509][ T6780] [ 157.895194][ T6780] loop4: detected capacity change from 0 to 128 [ 157.931596][ T6780] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 157.937466][ T6780] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.953663][ T29] audit: type=1400 audit(1792381543.298:1514): avc: denied { write } for pid=6779 comm="syz.4.833" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.032379][ T6785] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 158.058502][ T5962] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.134350][ T6785] loop5: detected capacity change from 0 to 512 [ 158.143844][ T6785] vfat: Unknown parameter 'uÆÀïtf8' [ 158.403748][ T6789] loop1: detected capacity change from 0 to 128 [ 158.519278][ T6789] ext4: Unknown parameter 'smackfsdef' [ 158.534206][ T6799] loop5: detected capacity change from 0 to 1024 [ 158.537739][ T6799] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 158.537761][ T6799] EXT4-fs (loop5): group descriptors corrupted! [ 159.441273][ T6809] netlink: 'syz.2.842': attribute type 1 has an invalid length. [ 159.514588][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.845'. [ 159.807843][ T6835] FAULT_INJECTION: forcing a failure. [ 159.807843][ T6835] name failslab, interval 1, probability 0, space 0, times 0 [ 159.807873][ T6835] CPU: 1 UID: 0 PID: 6835 Comm: syz.5.848 Not tainted syzkaller #0 PREEMPT(lazy) [ 159.807898][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.807908][ T6835] Call Trace: [ 159.807914][ T6835] [ 159.807920][ T6835] __dump_stack+0x1d/0x30 [ 159.808010][ T6835] dump_stack_lvl+0x95/0xd0 [ 159.808081][ T6835] dump_stack+0x15/0x1b [ 159.808099][ T6835] should_fail_ex+0x262/0x280 [ 159.808129][ T6835] ? __alloc_skb+0x2e0/0x6f0 [ 159.808181][ T6835] should_failslab+0x8c/0xb0 [ 159.808228][ T6835] kmem_cache_alloc_node_noprof+0x82/0x400 [ 159.808267][ T6835] ? __alloc_skb+0x2e0/0x6f0 [ 159.808289][ T6835] ? avc_has_perm+0x101/0x190 [ 159.808316][ T6835] __alloc_skb+0x2e0/0x6f0 [ 159.808371][ T6835] ? __alloc_skb+0x209/0x6f0 [ 159.808396][ T6835] netlink_alloc_large_skb+0xbf/0xf0 [ 159.808523][ T6835] netlink_sendmsg+0x40c/0x6f0 [ 159.808544][ T6835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.808563][ T6835] ____sys_sendmsg+0x532/0x580 [ 159.808641][ T6835] ___sys_sendmsg+0x195/0x1e0 [ 159.808677][ T6835] __x64_sys_sendmsg+0xd4/0x160 [ 159.808703][ T6835] x64_sys_call+0x22ab/0x2550 [ 159.808732][ T6835] do_syscall_64+0x112/0x360 [ 159.808822][ T6835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.808841][ T6835] RIP: 0033:0x7f43965fe559 [ 159.808858][ T6835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.808875][ T6835] RSP: 002b:00007f4395015028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.808908][ T6835] RAX: ffffffffffffffda RBX: 00007f4396886180 RCX: 00007f43965fe559 [ 159.808923][ T6835] RDX: 0000000000004880 RSI: 0000200000000280 RDI: 0000000000000004 [ 159.808948][ T6835] RBP: 00007f4395015090 R08: 0000000000000000 R09: 0000000000000000 [ 159.808959][ T6835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.808969][ T6835] R13: 00007f4396886218 R14: 00007f4396886180 R15: 00007ffe59ea89c8 [ 159.809065][ T6835] [ 159.876633][ T6809] 8021q: adding VLAN 0 to HW filter on device bond3 [ 160.051242][ T6813] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 160.226329][ T6840] loop2: detected capacity change from 0 to 256 [ 160.227045][ T6840] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.764907][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.858'. [ 160.764946][ T6861] netlink: 24 bytes leftover after parsing attributes in process `syz.5.858'. [ 160.769445][ T6856] loop4: detected capacity change from 0 to 128 [ 160.802117][ T6856] ext4: Unknown parameter 'smackfsdef' [ 161.484168][ T6891] syzkaller0: entered promiscuous mode [ 161.484261][ T6891] syzkaller0: entered allmulticast mode [ 161.531809][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 161.531822][ T29] audit: type=1400 audit(1792381546.868:1532): avc: denied { mounton } for pid=6892 comm="syz.5.868" path="/51/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 161.560987][ T29] audit: type=1400 audit(1792381546.878:1533): avc: denied { setopt } for pid=6892 comm="syz.5.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 162.634711][ T6915] loop5: detected capacity change from 0 to 512 [ 162.643575][ T6915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.643641][ T6915] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.644842][ T29] audit: type=1400 audit(1792381547.988:1534): avc: denied { write } for pid=6914 comm="syz.5.873" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.909463][ T6915] batman_adv: batadv0: Adding interface: syzkaller0 [ 162.909534][ T6915] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.909562][ T6915] batman_adv: batadv0: Interface activated: syzkaller0 [ 163.082614][ T6924] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 163.083618][ T6914] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 163.200659][ T6914] batman_adv: batadv0: Removing interface: syzkaller0 [ 163.301554][ T6935] loop2: detected capacity change from 0 to 128 [ 163.314716][ T6935] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.334239][ T6935] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.671586][ T6936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.680144][ T6936] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.693664][ T6936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.235171][ T72] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 166.280697][ T5766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.298553][ T6936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.299663][ T6936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.317825][ T6936] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.317843][ T6936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.319902][ T6936] veth1_vlan: left promiscuous mode [ 166.320496][ T6936] veth0_vlan: left promiscuous mode [ 166.353681][ T6936] veth0_vlan: entered promiscuous mode [ 166.357035][ T6936] veth1_vlan: entered promiscuous mode [ 166.389444][ T6936] veth1_macvtap: left promiscuous mode [ 166.390064][ T6936] veth0_macvtap: left promiscuous mode [ 166.390837][ T6936] veth0_macvtap: entered promiscuous mode [ 166.391319][ T6936] veth1_macvtap: entered promiscuous mode [ 166.417340][ T6936] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.418607][ T29] audit: type=1400 audit(1792381551.758:1535): avc: denied { setopt } for pid=6943 comm="syz.4.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.419141][ T6936] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.420529][ T6936] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.421751][ T6936] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.474241][ T6936] bond1: left promiscuous mode [ 166.474258][ T6936] veth0_to_bond: left promiscuous mode [ 166.475120][ T6936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.550275][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.556547][ T3438] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.556757][ T3438] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.556867][ T3438] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.607157][ T6950] loop0: detected capacity change from 0 to 256 [ 166.652222][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.652259][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.670655][ T72] Bluetooth: hci0: Frame reassembly failed (-84) [ 166.806292][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.806319][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.455606][ T29] audit: type=1400 audit(1792381552.798:1536): avc: denied { write } for pid=6964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.553394][ T29] audit: type=1400 audit(1792381552.898:1537): avc: denied { write } for pid=6991 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.585287][ T29] audit: type=1400 audit(1792381552.928:1538): avc: denied { nlmsg_read } for pid=6984 comm="syz.5.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 167.623943][ T6994] syzkaller0: entered promiscuous mode [ 167.624056][ T6994] syzkaller0: entered allmulticast mode [ 167.974999][ T7005] loop5: detected capacity change from 0 to 512 [ 168.077355][ T7011] loop1: detected capacity change from 0 to 1024 [ 168.107321][ T7011] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 168.107348][ T7011] EXT4-fs (loop1): group descriptors corrupted! [ 168.304397][ T7005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.308629][ T7005] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.407968][ T29] audit: type=1400 audit(1792381553.748:1539): avc: denied { write } for pid=7004 comm="syz.5.894" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.752152][ T5138] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 168.756575][ T5766] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.951256][ T7037] loop4: detected capacity change from 0 to 128 [ 168.962064][ T7037] ext4: Unknown parameter 'smackfsdef' [ 169.161877][ T29] audit: type=1400 audit(1792381554.458:1540): avc: denied { write } for pid=7031 comm="syz.5.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 169.162033][ T29] audit: type=1400 audit(1792381554.498:1541): avc: denied { write } for pid=7018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.187809][ T29] audit: type=1326 audit(1792381554.528:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.1.902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ebe5e559 code=0x7ffc0000 [ 169.188542][ T29] audit: type=1326 audit(1792381554.528:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.1.902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ebe5e559 code=0x7ffc0000 [ 169.295323][ T29] audit: type=1326 audit(1792381554.638:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.1.902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ebe5e559 code=0x7ffc0000 [ 169.295717][ T29] audit: type=1326 audit(1792381554.638:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7044 comm="syz.1.902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f21ebe5e559 code=0x7ffc0000 [ 169.714964][ T7057] loop0: detected capacity change from 0 to 512 [ 169.800565][ T7057] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 169.800649][ T7057] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 169.837988][ T7057] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 169.838226][ T7057] System zones: 1-12 [ 169.839546][ T7057] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.906: bad orphan inode 131072 [ 169.839725][ T7057] loop0: lost filesystem error report for type 5 error -117 [ 169.868373][ T7057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.110986][ T7068] loop1: detected capacity change from 0 to 512 [ 170.164967][ T7068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.165225][ T7068] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 170.246055][ T7068] batman_adv: batadv0: Adding interface: syzkaller0 [ 170.246073][ T7068] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.246116][ T7068] batman_adv: batadv0: Interface activated: syzkaller0 [ 170.316060][ T7066] loop5: detected capacity change from 0 to 164 [ 170.343410][ T7066] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ18446744073709551615 .ÃNÛBþO' [ 170.381519][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.394665][ T7067] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 170.432494][ T7067] batman_adv: batadv0: Removing interface: syzkaller0 [ 170.509868][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.509900][ T7090] loop4: detected capacity change from 0 to 256 [ 171.007588][ T3438] Bluetooth: hci0: Frame reassembly failed (-84) [ 171.403995][ T7102] program syz.1.920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.429790][ T7098] loop5: detected capacity change from 0 to 4096 [ 171.452344][ T7098] EXT4-fs: Ignoring removed bh option [ 171.452387][ T7098] EXT4-fs: Ignoring removed orlov option [ 171.474896][ T7098] EXT4-fs warning (device loop5): ext4_enable_quotas:7314: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 171.475093][ T7098] EXT4-fs (loop5): mount failed [ 171.539108][ T7109] FAULT_INJECTION: forcing a failure. [ 171.539108][ T7109] name failslab, interval 1, probability 0, space 0, times 0 [ 171.539131][ T7109] CPU: 1 UID: 0 PID: 7109 Comm: syz.1.922 Not tainted syzkaller #0 PREEMPT(lazy) [ 171.539159][ T7109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.539174][ T7109] Call Trace: [ 171.539181][ T7109] [ 171.539189][ T7109] __dump_stack+0x1d/0x30 [ 171.539264][ T7109] dump_stack_lvl+0x95/0xd0 [ 171.539283][ T7109] dump_stack+0x15/0x1b [ 171.539303][ T7109] should_fail_ex+0x262/0x280 [ 171.539393][ T7109] should_failslab+0x8c/0xb0 [ 171.539502][ T7109] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 171.539555][ T7109] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 171.539582][ T7109] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 171.539611][ T7109] ? resv_map_alloc+0x57/0x190 [ 171.539629][ T7109] hugetlbfs_alloc_inode+0xbc/0x100 [ 171.539723][ T7109] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 171.539834][ T7109] alloc_inode+0x40/0x170 [ 171.539905][ T7109] new_inode+0x1d/0xe0 [ 171.539928][ T7109] hugetlbfs_get_inode+0x7b/0x330 [ 171.539959][ T7109] ? mutex_unlock+0x4e/0x90 [ 171.539995][ T7109] hugetlb_file_setup+0x192/0x3d0 [ 171.540026][ T7109] ksys_mmap_pgoff+0x13f/0x310 [ 171.540056][ T7109] x64_sys_call+0x23b3/0x2550 [ 171.540082][ T7109] do_syscall_64+0x112/0x360 [ 171.540109][ T7109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.540171][ T7109] RIP: 0033:0x7f21ebe5e559 [ 171.540206][ T7109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.540228][ T7109] RSP: 002b:00007f21ea8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 171.540269][ T7109] RAX: ffffffffffffffda RBX: 00007f21ec0e5fa0 RCX: 00007f21ebe5e559 [ 171.540281][ T7109] RDX: 0000000007000001 RSI: 0000000000800006 RDI: 0000200000800000 [ 171.540292][ T7109] RBP: 00007f21ea8b7090 R08: ffffffffffffffff R09: 0000000000000000 [ 171.540304][ T7109] R10: 000000000006e073 R11: 0000000000000246 R12: 0000000000000001 [ 171.540363][ T7109] R13: 00007f21ec0e6038 R14: 00007f21ec0e5fa0 R15: 00007ffed61754a8 [ 171.540380][ T7109] [ 172.071146][ T7096] loop0: detected capacity change from 0 to 1764 [ 172.308254][ T7127] loop5: detected capacity change from 0 to 128 [ 172.366421][ T7127] ext4: Unknown parameter 'smackfsdef' [ 172.786125][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 172.786145][ T29] audit: type=1400 audit(1792381558.128:1679): avc: denied { create } for pid=7135 comm="syz.1.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 172.789958][ T29] audit: type=1400 audit(1792381558.128:1680): avc: denied { write } for pid=7135 comm="syz.1.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 173.012919][ T7144] loop0: detected capacity change from 0 to 2048 [ 173.025026][ T7144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.102845][ T5138] Bluetooth: hci0: command 0x1003 tx timeout [ 173.102867][ T3520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 173.644528][ T7162] netlink: 16 bytes leftover after parsing attributes in process `syz.2.938'. [ 173.645103][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'. [ 173.647139][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.938'. [ 173.686246][ T7161] loop2: detected capacity change from 0 to 128 [ 173.704515][ T29] audit: type=1326 audit(1792381559.038:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7158 comm="syz.2.938" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c86e2e559 code=0x0 [ 173.914889][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.993620][ T7169] loop5: detected capacity change from 0 to 128 [ 174.024346][ T7169] ext4: Unknown parameter 'smackfsdef' [ 174.028080][ T7174] loop0: detected capacity change from 0 to 128 [ 174.097512][ T7174] ext4: Unknown parameter 'smackfsdef' [ 174.250871][ T29] audit: type=1400 audit(1792381559.588:1682): avc: denied { tracepoint } for pid=7181 comm="syz.0.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 174.316890][ T7184] netlink: 24 bytes leftover after parsing attributes in process `syz.5.946'. [ 174.411095][ T7188] loop0: detected capacity change from 0 to 512 [ 174.485250][ T7188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.485326][ T7188] ext4 filesystem being mounted at /189/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.487216][ T29] audit: type=1400 audit(1792381559.828:1683): avc: denied { write } for pid=7181 comm="syz.0.945" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.490410][ T29] audit: type=1400 audit(1792381559.828:1684): avc: denied { write } for pid=7181 comm="syz.0.945" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.569688][ T29] audit: type=1400 audit(1792381559.908:1685): avc: denied { ioctl } for pid=7181 comm="syz.0.945" path="/189/file2/file2" dev="loop0" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.647760][ T7197] loop2: detected capacity change from 0 to 256 [ 174.682478][ T29] audit: type=1400 audit(1792381560.028:1686): avc: denied { write } for pid=7181 comm="syz.0.945" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 174.684938][ T29] audit: type=1400 audit(1792381560.028:1687): avc: denied { map } for pid=7181 comm="syz.0.945" path="/189/file2/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.765661][ T32] Bluetooth: hci0: Frame reassembly failed (-84) [ 174.828086][ T29] audit: type=1400 audit(1792381560.168:1688): avc: denied { bind } for pid=7206 comm="syz.4.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.831617][ T7208] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 174.941852][ T7212] loop4: detected capacity change from 0 to 128 [ 174.951521][ T7212] ext4: Unknown parameter 'smackfsdef' [ 175.160455][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.364739][ T7234] loop0: detected capacity change from 0 to 1024 [ 175.365408][ T7234] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 175.365433][ T7234] EXT4-fs (loop0): group descriptors corrupted! [ 176.834083][ T5138] Bluetooth: hci0: command 0x1003 tx timeout [ 176.834183][ T3520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 176.969903][ T7255] loop5: detected capacity change from 0 to 128 [ 176.977506][ T7255] ext4: Unknown parameter 'smackfsdef' [ 177.198008][ T7266] loop4: detected capacity change from 0 to 2048 [ 177.244671][ T7266] loop4: p2 < > p3 < > [ 177.252377][ T2983] loop4: p2 < > p3 < > [ 177.278571][ T7266] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7266 comm=syz.4.974 [ 177.278980][ T7266] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7266 comm=syz.4.974 [ 177.311804][ T4805] udevd[4805]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 177.342735][ T4805] udevd[4805]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 177.561475][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.976'. [ 178.659524][ T7311] loop4: detected capacity change from 0 to 512 [ 178.671504][ T7311] EXT4-fs (loop4): 1 truncate cleaned up [ 178.672004][ T7311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.677730][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 178.677754][ T29] audit: type=1400 audit(1792381564.018:1691): avc: denied { write } for pid=7310 comm="syz.4.988" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.677888][ T29] audit: type=1400 audit(1792381564.018:1692): avc: denied { write } for pid=7310 comm="syz.4.988" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 178.677960][ T29] audit: type=1400 audit(1792381564.018:1693): avc: denied { rename } for pid=7310 comm="syz.4.988" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 178.678043][ T29] audit: type=1400 audit(1792381564.018:1694): avc: denied { unlink } for pid=7310 comm="syz.4.988" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 178.776961][ T5962] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.825878][ T29] audit: type=1400 audit(1792381564.168:1695): avc: denied { bind } for pid=7314 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 178.832402][ T7316] loop0: detected capacity change from 0 to 256 [ 178.886018][ T51] Bluetooth: hci0: Frame reassembly failed (-84) [ 180.031723][ T7323] loop1: detected capacity change from 0 to 1764 [ 180.038956][ T7323] iso9660: Bad value for 'gid' [ 180.038973][ T7323] iso9660: Bad value for 'gid' [ 180.452495][ T7337] netlink: 'syz.5.996': attribute type 2 has an invalid length. [ 180.559184][ T7337] rxe_eth0 speed is unknown, defaulting to 1000 [ 180.893346][ T5138] Bluetooth: hci0: command 0x1003 tx timeout [ 180.897754][ T3520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 181.118988][ T7334] loop1: detected capacity change from 0 to 1764 [ 181.477339][ T7334] loop1: detected capacity change from 0 to 256 [ 181.667959][ T7356] loop0: detected capacity change from 0 to 2048 [ 181.687602][ T7356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.689070][ T29] audit: type=1400 audit(1792381567.028:1696): avc: denied { write } for pid=7355 comm="syz.0.1003" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 181.749142][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.859454][ T4805] udevd[4805]: inotify_add_watch(7, /dev/sda13, 10) failed: No such file or directory [ 182.430162][ T7382] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 182.430261][ T7382] syzkaller0: linktype set to 6 [ 182.663237][ T7373] rxe_eth0 speed is unknown, defaulting to 1000 [ 182.714117][ T32] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.760260][ T7401] loop4: detected capacity change from 0 to 256 [ 182.785948][ T32] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.838664][ T32] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.860684][ T38] Bluetooth: hci0: Frame reassembly failed (-84) [ 182.898983][ T32] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.080485][ T7410] loop0: detected capacity change from 0 to 512 [ 183.088502][ T7410] EXT4-fs (loop0): Invalid log block size: 18 [ 183.196914][ T32] bridge_slave_1: left allmulticast mode [ 183.197201][ T32] bridge_slave_1: left promiscuous mode [ 183.197701][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.204155][ T32] bridge_slave_0: left allmulticast mode [ 183.206108][ T32] bridge_slave_0: left promiscuous mode [ 183.207104][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.487828][ T7392] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 183.689048][ T7417] loop0: detected capacity change from 0 to 8192 [ 183.863519][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.865019][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.866078][ T32] bond0 (unregistering): Released all slaves [ 183.929921][ T7373] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.930159][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.933519][ T7373] bridge_slave_0: entered allmulticast mode [ 183.964337][ T7373] bridge_slave_0: entered promiscuous mode [ 183.976635][ T7373] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.976854][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.977023][ T7373] bridge_slave_1: entered allmulticast mode [ 183.990023][ T7373] bridge_slave_1: entered promiscuous mode [ 184.056362][ T32] hsr_slave_0: left promiscuous mode [ 184.056696][ T32] hsr_slave_1: left promiscuous mode [ 184.057133][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.057149][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.057450][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.057520][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.060417][ T32] veth1_macvtap: left promiscuous mode [ 184.060441][ T32] veth0_macvtap: left promiscuous mode [ 184.060496][ T32] veth1_vlan: left promiscuous mode [ 184.060566][ T32] veth0_vlan: left promiscuous mode [ 184.229134][ T29] audit: type=1400 audit(1792381569.568:1697): avc: denied { write } for pid=7427 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.317979][ T29] audit: type=1400 audit(1792381569.658:1698): avc: denied { write } for pid=7441 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.464377][ T32] team0 (unregistering): Port device team_slave_1 removed [ 184.471773][ T32] team0 (unregistering): Port device team_slave_0 removed [ 184.590314][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 184.600243][ T7373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.620459][ T7373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.720397][ T29] audit: type=1400 audit(1792381570.058:1699): avc: denied { write } for pid=7450 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.832045][ T29] audit: type=1400 audit(1792381570.168:1700): avc: denied { write } for pid=7464 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.862608][ T7373] team0: Port device team_slave_0 added [ 184.893337][ T5138] Bluetooth: hci0: command 0x1003 tx timeout [ 184.893361][ T3520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 184.894148][ T7373] team0: Port device team_slave_1 added [ 184.957007][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 185.009749][ T7373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.009762][ T7373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.009793][ T7373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.027137][ T7373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.027166][ T7373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.027244][ T7373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.190473][ T7373] hsr_slave_0: entered promiscuous mode [ 185.198962][ T7373] hsr_slave_1: entered promiscuous mode [ 185.206760][ T7373] debugfs: 'hsr0' already exists in 'hsr' [ 185.206777][ T7373] Cannot create hsr debugfs directory [ 185.327920][ T29] audit: type=1400 audit(1792381570.668:1701): avc: denied { write } for pid=7469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.371563][ T29] audit: type=1400 audit(1792381570.708:1702): avc: denied { write } for pid=7481 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.417538][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 185.574471][ T7485] loop4: detected capacity change from 0 to 512 [ 185.622531][ T7373] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 185.640699][ T7485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.640825][ T7485] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.684065][ T7373] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 185.699722][ T7373] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 185.714796][ T7373] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 185.717736][ T7373] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 185.740785][ T7373] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 185.756239][ T7373] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 185.774342][ T7373] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 185.885444][ T29] audit: type=1400 audit(1792381571.228:1703): avc: denied { write } for pid=7488 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.972599][ T29] audit: type=1400 audit(1792381571.278:1704): avc: denied { shutdown } for pid=7501 comm="syz.1.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.005475][ T7504] loop1: detected capacity change from 0 to 512 [ 186.042494][ T7502] rxe_eth0 speed is unknown, defaulting to 1000 [ 186.102500][ T5962] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.147034][ T7504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.147099][ T7504] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.148469][ T29] audit: type=1400 audit(1792381571.488:1705): avc: denied { write } for pid=7501 comm="syz.1.1022" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.312021][ T29] audit: type=1400 audit(1792381571.658:1706): avc: denied { write } for pid=7511 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.350372][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1023'. [ 186.475404][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 186.665139][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.780386][ T7528] loop0: detected capacity change from 0 to 8192 [ 186.914183][ T7534] loop4: detected capacity change from 0 to 256 [ 186.950935][ T7535] loop1: detected capacity change from 0 to 1024 [ 186.983064][ T7538] loop0: detected capacity change from 0 to 256 [ 186.988782][ T7373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.005671][ T7535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.005812][ T7535] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.029460][ T7373] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.045894][ T6959] Bluetooth: hci0: Frame reassembly failed (-84) [ 187.051796][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.051867][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.068668][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.068813][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.085945][ T72] Bluetooth: hci1: Frame reassembly failed (-84) [ 187.108740][ T7525] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.1026: lblock 0 mapped to illegal pblock 0 (length 1) [ 187.131654][ T7525] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.1026: lblock 0 mapped to illegal pblock 0 (length 1) [ 187.136713][ T7525] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.1026: lblock 0 mapped to illegal pblock 0 (length 1) [ 187.139564][ T7525] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.1026: lblock 0 mapped to illegal pblock 0 (length 1) [ 187.140685][ T7525] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.1026: lblock 0 mapped to illegal pblock 0 (length 1) [ 187.141082][ T7525] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.1026: lblock 0 mapped to illegal pblock 0 (length 1) [ 187.142704][ T7525] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.1026: lblock 0 mapped to illegal pblock 0 (length 1) [ 187.146865][ T7525] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.1026: lblock 0 mapped to illegal pblock 0 (length 1) [ 187.148694][ T7525] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.1026: lblock 0 mapped to illegal pblock 0 (length 1) [ 187.154537][ T7525] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #15: comm syz.1.1026: lblock 0 mapped to illegal pblock 0 (length 1) [ 187.207581][ T7531] loop2: detected capacity change from 0 to 512 [ 187.229927][ T7531] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.1028: corrupted in-inode xattr: invalid size in ea xattr [ 187.229999][ T7531] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.238984][ T7531] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1028: couldn't read orphan inode 15 (err -117) [ 187.239065][ T7531] loop2: lost filesystem error report for type 5 error -117 [ 187.245824][ T7531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.336922][ T3833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.416918][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 187.446460][ T7556] loop1: detected capacity change from 0 to 512 [ 187.465285][ T7556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.465355][ T7556] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.554057][ T7373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.559387][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.608251][ T3412] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 187.609085][ T3412] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.702664][ T7577] loop1: detected capacity change from 0 to 512 [ 187.730514][ T7577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.730623][ T7577] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.904120][ T7373] veth0_vlan: entered promiscuous mode [ 187.909440][ T7373] veth1_vlan: entered promiscuous mode [ 187.950239][ T7373] veth0_macvtap: entered promiscuous mode [ 187.952858][ T7373] veth1_macvtap: entered promiscuous mode [ 187.956041][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.980787][ T7373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.995537][ T7373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.022779][ T51] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.022820][ T51] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.022851][ T51] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.022912][ T51] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.187508][ T7596] loop1: detected capacity change from 0 to 8192 [ 188.359441][ T7605] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 188.359478][ T7605] EXT4-fs (loop6): group descriptors corrupted! [ 188.392942][ T7608] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.424205][ T7608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1040'. [ 188.526308][ T7612] EXT4-fs: Ignoring removed oldalloc option [ 188.527190][ T7612] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 188.527204][ T7612] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 188.537062][ T7612] EXT4-fs (loop1): 1 truncate cleaned up [ 188.537758][ T7612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.052706][ T3520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 189.065423][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.132065][ T7542] Bluetooth: hci1: command 0x1003 tx timeout [ 189.302214][ T5138] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 189.426428][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 189.426443][ T29] audit: type=1400 audit(1792381574.768:1715): avc: denied { write } for pid=7621 comm="syz.6.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 189.453684][ T7620] tipc: Started in network mode [ 189.453717][ T7620] tipc: Node identity 4, cluster identity 4711 [ 189.454052][ T7620] tipc: Node number set to 4 [ 189.463653][ T7620] tipc: Enabling of bearer rejected, failed to enable media [ 189.493377][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'. [ 189.495532][ T7626] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1045'. [ 189.516156][ T7625] ip6gretap1: entered allmulticast mode [ 189.546888][ T7625] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 189.547512][ T7625] batman_adv: batadv0: Adding interface: ip6gretap1 [ 189.547526][ T7625] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.547568][ T7625] batman_adv: batadv0: Interface activated: ip6gretap1 [ 189.707201][ T7631] Illegal XDP return value 698160158 on prog (id 151) dev syz_tun, expect packet loss! [ 189.763954][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 189.814912][ T29] audit: type=1400 audit(1792381575.158:1716): avc: denied { bind } for pid=7642 comm="syz.4.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 189.876139][ T29] audit: type=1400 audit(1792381575.218:1717): avc: denied { map } for pid=7647 comm="syz.2.1050" path="/196/dev/sda" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.982137][ T7667] netlink: 'syz.0.1053': attribute type 1 has an invalid length. [ 190.008655][ T7667] ebt_among: dst integrity fail: 101 [ 190.431197][ T7721] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 190.432199][ T7721] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 190.432401][ T7721] EXT4-fs (loop1): orphan cleanup on readonly fs [ 190.444775][ T7721] Quota error (device loop1): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 190.444861][ T7721] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 190.444885][ T7721] EXT4-fs error (device loop1): ext4_acquire_dquot:7079: comm syz.1.1057: Failed to acquire dquot type 0 [ 190.444942][ T7721] loop1: lost filesystem error report for type 5 error -117 [ 190.446869][ T7721] Quota error (device loop1): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 190.446934][ T7721] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 190.446959][ T7721] EXT4-fs error (device loop1): ext4_acquire_dquot:7079: comm syz.1.1057: Failed to acquire dquot type 0 [ 190.446999][ T7721] loop1: lost filesystem error report for type 5 error -117 [ 190.449361][ T7721] EXT4-fs error (device loop1): ext4_free_blocks:6719: comm syz.1.1057: Freeing blocks not in datazone - block = 0, count = 4096 [ 190.449430][ T7721] loop1: lost filesystem error report for type 5 error -117 [ 190.462116][ C1] EXT4-fs (loop1): error count since last fsck: 3 [ 190.462191][ C1] EXT4-fs (loop1): initial error at time 1792381575: ext4_acquire_dquot:7079 [ 190.462899][ C1] EXT4-fs (loop1): last error at time 1792381575: ext4_free_blocks:6719 [ 190.488575][ T7723] tipc: Started in network mode [ 190.489071][ T7723] tipc: Node identity 4, cluster identity 4711 [ 190.489106][ T7723] tipc: Node number set to 4 [ 190.495782][ T7723] tipc: Enabled bearer , priority 0 [ 190.512734][ T7721] Quota error (device loop1): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 190.512882][ T7721] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 190.512942][ T7721] EXT4-fs error (device loop1): ext4_acquire_dquot:7079: comm syz.1.1057: Failed to acquire dquot type 0 [ 190.512996][ T7721] loop1: lost filesystem error report for type 5 error -117 [ 190.517787][ T7721] EXT4-fs (loop1): 1 orphan inode deleted [ 190.542471][ T7721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.584345][ T7721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1057'. [ 190.584546][ T7721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1057'. [ 190.657254][ T29] audit: type=1400 audit(1792381575.978:1718): avc: denied { ioctl } for pid=7718 comm="syz.6.1056" path="socket:[18040]" dev="sockfs" ino=18040 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 190.881603][ T7738] set_capacity_and_notify: 4 callbacks suppressed [ 190.881623][ T7738] loop4: detected capacity change from 0 to 1024 [ 190.897174][ T7738] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 190.897200][ T7738] EXT4-fs (loop4): group descriptors corrupted! [ 191.073222][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.327310][ T4805] udevd[4805]: inotify_add_watch(7, /dev/sda13, 10) failed: No such file or directory [ 191.558296][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1060'. [ 191.971384][ T7755] loop1: detected capacity change from 0 to 256 [ 192.017363][ T7746] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 192.070797][ T7710] Bluetooth: hci0: Frame reassembly failed (-84) [ 192.120327][ T7765] loop6: detected capacity change from 0 to 2048 [ 192.134192][ T7765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.134258][ T7765] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.179208][ T7765] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1066: bg 0: block 345: padding at end of block bitmap is not set [ 192.245445][ T7373] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.308423][ T7786] loop6: detected capacity change from 0 to 512 [ 192.350297][ T7786] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.350367][ T7786] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.376202][ T7790] loop4: detected capacity change from 0 to 256 [ 192.568674][ T7373] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.849455][ T7815] loop6: detected capacity change from 0 to 128 [ 192.898867][ T7815] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.937905][ T7815] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.122680][ T7815] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.294544][ T7826] loop6: detected capacity change from 0 to 512 [ 193.313892][ T7826] ext4: Unknown parameter 'euid' [ 193.356134][ T51] IPVS: starting estimator thread 0... [ 193.359291][ T7826] IPVS: sh: FWM 3 0x00000003 - no destination available [ 193.377411][ T7826] program syz.6.1076 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.464000][ T7832] IPVS: using max 2208 ests per chain, 110400 per kthread [ 193.831539][ T7831] loop4: detected capacity change from 0 to 1024 [ 193.920828][ T7839] loop2: detected capacity change from 0 to 2048 [ 193.921116][ T7831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.923948][ T7831] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.085062][ T7847] loop6: detected capacity change from 0 to 1024 [ 194.102903][ T7542] Bluetooth: hci0: command 0x1003 tx timeout [ 194.102927][ T5138] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 194.104839][ T7847] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 194.104864][ T7847] EXT4-fs (loop6): group descriptors corrupted! [ 194.713706][ T7850] tipc: Enabling of bearer rejected, failed to enable media [ 195.035650][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 195.035664][ T29] audit: type=1400 audit(1792381580.378:1728): avc: denied { write } for pid=7853 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.112987][ T5962] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 195.117143][ T7843] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 195.188524][ T29] audit: type=1400 audit(1792381580.528:1729): avc: denied { write } for pid=7864 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.458970][ T7843] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.579609][ T7843] ext2 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.015820][ T7877] set_capacity_and_notify: 1 callbacks suppressed [ 196.015846][ T7877] loop6: detected capacity change from 0 to 128 [ 196.049651][ T29] audit: type=1400 audit(1792381581.388:1730): avc: denied { write } for pid=7880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.054306][ T7877] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.078483][ T7877] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 196.164560][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.182943][ T29] audit: type=1400 audit(1792381581.518:1731): avc: denied { write } for pid=7896 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.482749][ T7908] loop4: detected capacity change from 0 to 512 [ 196.509021][ T7908] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.1092: corrupted in-inode xattr: invalid ea_ino [ 196.509055][ T7908] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 196.509207][ T7908] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.1092: couldn't read orphan inode 15 (err -117) [ 196.509237][ T7908] loop4: lost filesystem error report for type 5 error -117 [ 196.512365][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 196.512465][ C0] EXT4-fs (loop4): initial error at time 1792381581: ext4_iget_extra_inode:5210: inode 15 [ 196.512733][ C0] EXT4-fs (loop4): last error at time 1792381581: ext4_orphan_get:1408 [ 196.517339][ T7908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.525475][ T7877] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.634988][ T29] audit: type=1400 audit(1792381581.978:1732): avc: denied { map } for pid=7912 comm="syz.6.1093" path="pipe:[17227]" dev="pipefs" ino=17227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 196.637172][ T29] audit: type=1400 audit(1792381581.978:1733): avc: denied { nlmsg_read } for pid=7912 comm="syz.6.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 196.637267][ T29] audit: type=1400 audit(1792381581.978:1734): avc: denied { nlmsg_write } for pid=7912 comm="syz.6.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 196.739933][ T29] audit: type=1400 audit(1792381582.078:1735): avc: denied { ioctl } for pid=7907 comm="syz.4.1092" path="socket:[19158]" dev="sockfs" ino=19158 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 196.874151][ T7924] loop6: detected capacity change from 0 to 1024 [ 196.875026][ T7924] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 196.875067][ T7924] EXT4-fs (loop6): group descriptors corrupted! [ 197.581212][ T5962] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.632015][ T7930] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.647012][ T7934] loop4: detected capacity change from 0 to 1024 [ 197.659942][ T7934] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 197.659966][ T7934] EXT4-fs (loop4): group descriptors corrupted! [ 197.886574][ T7948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1104'. [ 197.890942][ T7936] loop0: detected capacity change from 0 to 128 [ 197.925172][ T7948] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.428513][ T7936] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 198.477698][ T7948] bond4: (slave veth7): Enslaving as an active interface with an up link [ 198.568362][ T7936] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.568621][ T7957] bond4 (unregistering): (slave veth7): Releasing backup interface [ 198.571405][ T7957] bond4 (unregistering): Released all slaves [ 198.606121][ T7936] ext2 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.657490][ T7965] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.685573][ T3302] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 199.212030][ T29] audit: type=1400 audit(1792381584.538:1736): avc: denied { mount } for pid=7982 comm="syz.4.1110" name="/" dev="autofs" ino=18306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 199.356630][ T29] audit: type=1400 audit(1792381584.698:1737): avc: denied { write } for pid=7961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.486020][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1113'. [ 199.581517][ T7993] xt_CT: You must specify a L4 protocol and not use inversions on it [ 199.598792][ T7998] loop2: detected capacity change from 0 to 1024 [ 199.602634][ T7998] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 199.602770][ T7998] EXT4-fs (loop2): group descriptors corrupted! [ 200.134586][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 200.134602][ T29] audit: type=1400 audit(1792381585.478:1739): avc: denied { write } for pid=8000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.339732][ T8027] loop4: detected capacity change from 0 to 128 [ 200.359496][ T8027] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 200.376422][ T8027] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.377998][ T8027] ext2 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.383071][ T29] audit: type=1400 audit(1792381585.728:1740): avc: denied { write } for pid=8026 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.623942][ T5962] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.669207][ T8043] netlink: 'syz.0.1120': attribute type 1 has an invalid length. [ 200.822303][ T29] audit: type=1400 audit(1792381586.128:1741): avc: denied { create } for pid=8046 comm="syz.1.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 200.854757][ T8050] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.868908][ T8048] loop1: detected capacity change from 0 to 512 [ 200.974108][ T8043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.975360][ T8048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.975699][ T8048] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.069174][ T29] audit: type=1400 audit(1792381586.408:1742): avc: denied { write } for pid=8046 comm="syz.1.1122" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.070684][ T29] audit: type=1400 audit(1792381586.408:1743): avc: denied { create } for pid=8046 comm="syz.1.1122" name="proc" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 201.209700][ T8061] loop2: detected capacity change from 0 to 1764 [ 201.265120][ T29] audit: type=1400 audit(1792381586.608:1744): avc: denied { write } for pid=8056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.309128][ T29] audit: type=1400 audit(1792381586.648:1745): avc: denied { write } for pid=8077 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.428477][ T8065] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.474606][ T3833] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 201.475513][ T3833] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 201.602070][ T29] audit: type=1400 audit(1792381586.888:1746): avc: denied { write } for pid=8080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.602103][ T29] audit: type=1400 audit(1792381586.938:1747): avc: denied { write } for pid=8098 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.846729][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.863187][ T7633] bond3: (slave syz_tun): Removing an active aggregator [ 201.863492][ T7633] bond3: (slave syz_tun): Releasing backup interface [ 201.944740][ T8092] loop0: detected capacity change from 0 to 1024 [ 202.355985][ T8092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.359383][ T8092] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.504679][ T51] bridge_slave_1: left allmulticast mode [ 202.504701][ T51] bridge_slave_1: left promiscuous mode [ 202.504786][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.508891][ T51] bridge_slave_0: left allmulticast mode [ 202.508909][ T51] bridge_slave_0: left promiscuous mode [ 202.509137][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.552467][ T51] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 202.554995][ T8115] loop1: detected capacity change from 0 to 128 [ 202.579256][ T8115] ext4: Unknown parameter 'smackfsdef' [ 202.612080][ T29] audit: type=1400 audit(1792381587.948:1748): avc: denied { write } for pid=8090 comm="syz.0.1127" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.613880][ T8131] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.1127: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.615272][ T51] batman_adv: batadv0: Removing interface: ip6gretap1 [ 202.620250][ T8131] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.1127: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.671702][ T8131] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.1127: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.677854][ T8131] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.1127: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.684135][ T8131] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.1127: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.690135][ T8131] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.1127: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.695194][ T8131] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.1127: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.696667][ T8131] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.1127: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.702807][ T8131] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.1127: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.708155][ T8131] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.1127: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.801106][ T51] bond1 (unregistering): (slave geneve2): Releasing active interface [ 202.841942][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.842766][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.843200][ T51] bond0 (unregistering): Released all slaves [ 202.846172][ T51] bond1 (unregistering): Released all slaves [ 202.851019][ T51] bond2 (unregistering): Released all slaves [ 202.894145][ T51] bond3 (unregistering): Released all slaves [ 203.509713][ T8146] loop6: detected capacity change from 0 to 128 [ 203.528609][ T8108] rxe_eth0 speed is unknown, defaulting to 1000 [ 203.547943][ T51] hsr_slave_0: left promiscuous mode [ 203.550423][ T51] hsr_slave_1: left promiscuous mode [ 203.550923][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.552207][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.720846][ T51] team0 (unregistering): Port device team_slave_1 removed [ 203.778661][ T51] team0 (unregistering): Port device team_slave_0 removed [ 203.920370][ T8146] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.953096][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 203.957377][ T8146] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 204.277292][ T8108] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.277538][ T8108] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.277693][ T8108] bridge_slave_0: entered allmulticast mode [ 204.281568][ T8146] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.317034][ T8108] bridge_slave_0: entered promiscuous mode [ 204.324605][ T8108] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.324640][ T8108] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.324726][ T8108] bridge_slave_1: entered allmulticast mode [ 204.326599][ T8108] bridge_slave_1: entered promiscuous mode [ 204.355744][ T2983] ================================================================== [ 204.355782][ T2983] BUG: KCSAN: data-race in d_delete / step_into_slowpath [ 204.355828][ T2983] [ 204.355834][ T2983] read-write to 0xffff88811ad343c0 of 4 bytes by task 4807 on cpu 1: [ 204.355851][ T2983] d_delete+0x15a/0x180 [ 204.355882][ T2983] d_delete_notify+0x32/0x100 [ 204.355904][ T2983] vfs_unlink+0x287/0x490 [ 204.355924][ T2983] filename_unlinkat+0x1dc/0x410 [ 204.355942][ T2983] __se_sys_unlink+0x2b/0xe0 [ 204.355958][ T2983] __x64_sys_unlink+0x1f/0x30 [ 204.355973][ T2983] x64_sys_call+0x18ee/0x2550 [ 204.356000][ T2983] do_syscall_64+0x112/0x360 [ 204.356028][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.356051][ T2983] [ 204.356058][ T2983] read to 0xffff88811ad343c0 of 4 bytes by task 2983 on cpu 0: [ 204.356074][ T2983] step_into_slowpath+0x139/0x4c0 [ 204.356096][ T2983] path_lookupat+0x2eb/0x4c0 [ 204.356115][ T2983] filename_lookup+0x18f/0x390 [ 204.356138][ T2983] do_readlinkat+0x74/0x2f0 [ 204.356165][ T2983] __x64_sys_readlink+0x47/0x60 [ 204.356186][ T2983] x64_sys_call+0x1d41/0x2550 [ 204.356206][ T2983] do_syscall_64+0x112/0x360 [ 204.356231][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.356254][ T2983] [ 204.356258][ T2983] value changed: 0x00300180 -> 0x00004080 [ 204.356271][ T2983] [ 204.356275][ T2983] Reported by Kernel Concurrency Sanitizer on: [ 204.356286][ T2983] CPU: 0 UID: 0 PID: 2983 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 204.356314][ T2983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.356328][ T2983] ================================================================== [ 204.640178][ T8108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.652796][ T8108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.655079][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 204.908967][ T8108] team0: Port device team_slave_0 added [ 204.934514][ T8108] team0: Port device team_slave_1 added [ 204.968841][ T8108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.968919][ T8108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.968941][ T8108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.971573][ T8108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.971583][ T8108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.053462][ T8108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.168433][ T8108] hsr_slave_0: entered promiscuous mode [ 205.170443][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 205.171209][ T8108] hsr_slave_1: entered promiscuous mode [ 205.219719][ T8108] debugfs: 'hsr0' already exists in 'hsr' [ 205.219733][ T8108] Cannot create hsr debugfs directory [ 205.351964][ T8108] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 205.355187][ T8108] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 205.357007][ T8108] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 205.359495][ T8108] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 205.361213][ T8108] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 205.402999][ T8108] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 205.403568][ T8108] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 205.406775][ T8108] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 205.453250][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 205.453267][ T29] audit: type=1400 audit(1792381590.788:1753): avc: denied { write } for pid=8207 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.499374][ T29] audit: type=1400 audit(1792381590.838:1754): avc: denied { write } for pid=8225 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.537800][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 205.578989][ T8108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.617692][ T8108] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.649216][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.649252][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.663578][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.663682][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.727908][ T29] audit: type=1400 audit(1792381591.068:1755): avc: denied { write } for pid=8228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.788510][ T29] audit: type=1400 audit(1792381591.128:1756): avc: denied { write } for pid=8242 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.835217][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 205.923529][ T8108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.074498][ T8108] veth0_vlan: entered promiscuous mode [ 206.077095][ T8108] veth1_vlan: entered promiscuous mode [ 206.098229][ T8108] veth0_macvtap: entered promiscuous mode [ 206.109628][ T8108] veth1_macvtap: entered promiscuous mode [ 206.124340][ T8108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.127007][ T8108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.146768][ T51] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.146897][ T51] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.147011][ T51] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.147051][ T51] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.610896][ T29] audit: type=1400 audit(1792381592.948:1757): avc: denied { write } for pid=8272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.659708][ T29] audit: type=1400 audit(1792381592.998:1758): avc: denied { write } for pid=8283 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.038898][ T29] audit: type=1400 audit(1792381594.378:1759): avc: denied { write } for pid=8287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.077752][ T29] audit: type=1400 audit(1792381594.418:1760): avc: denied { write } for pid=8298 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1