last executing test programs: 42.251306038s ago: executing program 1 (id=47): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20008, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800d80f00000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c80000009500000000000000c48f50a375c30b5580c8c246d47a1e2927fe97c6ccc3539f9fead712a19c68841f41d2ed78bea1459a386ec5c692ccd92a0d10a82c74fe0fb63578042a231a2a3275fe1734d03a669520306353f44b76b26ce779ace023deee457065baae9b646808e3a64ab18df60000000000"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x0, 0x4e24, 0xfffc, 0x2, 0x0, 0x0, 0x5c}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x3}, {0x800000000000, 0x3, 0x1ffffffffffd}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x494, 0x2b}, 0x2, @in=@remote, 0x3505, 0x0, 0x3, 0xff, 0x2, 0x2, 0x40}, {{@in=@remote, 0x4d5, 0x24}, 0x2, @in=@multicast1, 0x7, 0x2, 0x3, 0x9, 0xfffffff9, 0x0, 0x3}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001bc0)=""/126, 0x7e}], 0x1, 0x111, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x3}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000017c0)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r5) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r7, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_PAN_ID={0xfffffe7b}]}, 0x48}, 0x4, 0x700000000000000}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8050) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000030000000000000000000000000000010500000010000002000000000000000e"], 0x0, 0x4e}, 0x28) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf250b00000008000300", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r11) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r11, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r12, 0x1, 0x60bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_clone3(&(0x7f0000000600)={0x301020000, &(0x7f0000000280), &(0x7f0000000340)=0x0, &(0x7f00000003c0), {0x3a}, &(0x7f00000004c0)=""/35, 0x23, &(0x7f0000000500)=""/148, &(0x7f00000005c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r1}}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)={0x6c, r4, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0xffffffffffffffa2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_PHY={0x0, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r13}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_NETNS_FD={0x0, 0x1d, r1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004814}, 0x44000) 38.974678872s ago: executing program 1 (id=64): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x0, 0x4, 0x70bd2f, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24028090}, 0x200408c4) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000)=0xccb, 0x4) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) getpeername$tipc(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 38.915716505s ago: executing program 1 (id=66): r0 = msgget$private(0x0, 0x722) msgsnd(r0, &(0x7f0000000940)={0x1}, 0x2000, 0x800) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="900000000002010400000000000000000a0000073c0001802c00018014000300fc0200000700000000000000004a47e8e507999a73cab84c8200000114000400fe8000000000000000000000000000140c0002800500010011000000040003"], 0x90}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) syz_mount_image$ext4(&(0x7f0000000640)='ext2\x00', &(0x7f0000000680)='./file0\x00', 0x1000000, &(0x7f0000000080)={[{@sysvgroups}], [{@dont_hash}, {@measure}, {@dont_measure}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}, {@context={'context', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '\x01$'}}]}, 0x1, 0x62f, &(0x7f0000000700)="$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") ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f00000001c0)={0x80, 0x7, 0x0, 0xfffffffb, 0x8000}) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20008040) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x13e) ioctl$BLKPG(r5, 0xc0c0128e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r6, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/45, 0x2d}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000d40)={0x0, 0x4, 0x9b9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) getsockopt$sock_buf(r2, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 38.782911281s ago: executing program 1 (id=68): prctl$PR_MCE_KILL(0x21, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x1, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0xfcc8, 0x1222, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='ext3\x00', 0x110418, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x800000000e, r2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x5c, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x0, 0x4, 0x3, 0x2, 0x9, 0x1}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000600)={0x80, 0x6, 0x200, 0x6, 0x0, 0x3, 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x800012, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 38.111714133s ago: executing program 1 (id=75): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = gettid() r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x453) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000000000000a00000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000001c00)='syzkaller\x00', 0x5, 0x27, &(0x7f0000001c40)=""/39, 0x100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 37.900567953s ago: executing program 1 (id=78): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40440c1}, 0x20008800) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd7000fcdbdf250100080008001c00000079af0e6bf6ab6fb9b5fa6d55553956243969313c0d34b2b525e17c4400000800060006000000"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4004840) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000)={[{@utf8}, {@map_off}, {@sbsector={'sbsector', 0x3d, 0xfffdffeb}}, {@session={'session', 0x3d, 0x21}}, {@unhide}, {@overriderock}, {@cruft}, {@block={'block', 0x3d, 0x200}}, {@session={'session', 0x3d, 0x60}}]}, 0x41, 0x543, &(0x7f00000004c0)="$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") (async) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000)={[{@utf8}, {@map_off}, {@sbsector={'sbsector', 0x3d, 0xfffdffeb}}, {@session={'session', 0x3d, 0x21}}, {@unhide}, {@overriderock}, {@cruft}, {@block={'block', 0x3d, 0x200}}, {@session={'session', 0x3d, 0x60}}]}, 0x41, 0x543, &(0x7f00000004c0)="$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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) (async) connect$inet(r1, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x103992, 0x1, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0) write(r2, &(0x7f0000000000), 0x0) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cifs\x00', 0x1ed) statfs(&(0x7f0000000ac0)='.\x00', &(0x7f0000000b00)=""/228) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 31.049148163s ago: executing program 0 (id=136): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x4, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001f0)='./trace/trace_marker\x00', 0x1, 0x0) close(r0) 30.962902688s ago: executing program 0 (id=137): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01080000"], 0x88}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x400000000000000, 0x0, 0x4000004}, 0x1f0230df47e618b1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) 30.844590333s ago: executing program 0 (id=138): r0 = socket$kcm(0x11, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xac9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x11b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6", 0x23}], 0x2}, 0x40000) 30.777831616s ago: executing program 0 (id=139): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x840, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x2c) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000000)=0x68f) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000240)="0400000000000000000000003801000000000000000000fffffffffffffffe000000000000000fffff000000000000002e2e") write$cgroup_subtree(r0, 0x0, 0x32600) 30.603617735s ago: executing program 0 (id=140): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x9) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x2}, 0x10) write(r1, &(0x7f00000002c0)="04", 0xfd) 29.865790139s ago: executing program 0 (id=147): syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x3008000, &(0x7f0000000100)={[{@block_validity}]}, 0xfe, 0x539, &(0x7f0000000700)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="41060000000000000000090000001c000480040007801300010009726f6173742d6c696e6b0000000000"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01fffff0000000000000200100000c000280080002006c6f0000180003800400010008000200050000000800040076"], 0x38}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setreuid(0xffffffffffffffff, 0xee01) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000f80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d00)={0x1fc, r6, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xf9b7, 0x17}}}}, [@NL80211_ATTR_IE={0x33, 0x2a, [@peer_mgmt={0x75, 0x16, {0x1, 0x9, @void, @val=0x39, @val="6dcf67384e6f4ad46c1429b9cb1ff4b7"}}, @cf={0x4, 0x6, {0xdb, 0x1, 0x1, 0x65}}, @dsss={0x3, 0x1, 0x2c}, @ibss={0x6, 0x2, 0x5}, @channel_switch={0x25, 0x3, {0x1, 0x5, 0xd}}, @challenge={0x10, 0x1, 0x99}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x23, 0x34, @random="1d91ddcde52860a5ed23b05264ce249b8761a4d3c2eb2a0df421916f120503"}, @NL80211_ATTR_IE={0x11, 0x2a, [@supported_rates={0x1, 0x2, [{0x60, 0x1}, {0x3}]}, @mesh_config={0x71, 0x7, {0x6, 0x1, 0x1, 0x0, 0x2, 0xa, 0x41}}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@supported_rates={0x1, 0x4, [{0xc, 0x1}, {0x36}, {0x48}, {0x30}]}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="86a4944d7762"}, @NL80211_ATTR_IE={0x13e, 0x2a, [@mesh_chsw={0x76, 0x6, {0x9f, 0x80, 0xb, 0xfff7}}, @fast_bss_trans={0x37, 0x52, {0x1, 0x0, "03444457d7476490efb4c27a460d8953", "4f56584bc3e01f3a62fa3f04406bf7e097333e619b49be4e6c9eed5d82b0a05e", "cc07350f9ec9b9d48f4d164434658c2b9b33fbadcc4f7491bd2161be556ec7e5"}}, @channel_switch={0x25, 0x3, {0x0, 0x6, 0x1}}, @mic={0x8c, 0x18, {0x732, "79fc3f68382a", @long="26313ca121d73f345740adfb10a001ec"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @ibss={0x6, 0x2}, @random={0xfa, 0x9f, "2062e89ab44ce100b8f3b246075eb8c774efbe76ebb826735220606d663de846cb666fe7b7ed0d0a729c8437e277361c9b78f963b3dcbc6672f8502525fffa6f3fb466a831617852b0b6cb4cac5cf72dbb3d76553bfb85073c0396806816493da2a3dd95806ca6553420d348d5b4c041a32a2a59818100792e3cb7c80d3889f9c8baf2a7a667dadb0b76f640152e47fed36415f52d2b5076e1a02036255de9"}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x33, 0x7f, @device_a, 0x0, 0x2, 0x4}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x240008d1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01062abd7000ffdbdf2506"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r8) sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\b\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fedbdf25010000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000010) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x9c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3c2e450a}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x11, 0x75d8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6817}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r9, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 29.796641873s ago: executing program 32 (id=147): syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x3008000, &(0x7f0000000100)={[{@block_validity}]}, 0xfe, 0x539, &(0x7f0000000700)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="41060000000000000000090000001c000480040007801300010009726f6173742d6c696e6b0000000000"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01fffff0000000000000200100000c000280080002006c6f0000180003800400010008000200050000000800040076"], 0x38}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setreuid(0xffffffffffffffff, 0xee01) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000f80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d00)={0x1fc, r6, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xf9b7, 0x17}}}}, [@NL80211_ATTR_IE={0x33, 0x2a, [@peer_mgmt={0x75, 0x16, {0x1, 0x9, @void, @val=0x39, @val="6dcf67384e6f4ad46c1429b9cb1ff4b7"}}, @cf={0x4, 0x6, {0xdb, 0x1, 0x1, 0x65}}, @dsss={0x3, 0x1, 0x2c}, @ibss={0x6, 0x2, 0x5}, @channel_switch={0x25, 0x3, {0x1, 0x5, 0xd}}, @challenge={0x10, 0x1, 0x99}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x23, 0x34, @random="1d91ddcde52860a5ed23b05264ce249b8761a4d3c2eb2a0df421916f120503"}, @NL80211_ATTR_IE={0x11, 0x2a, [@supported_rates={0x1, 0x2, [{0x60, 0x1}, {0x3}]}, @mesh_config={0x71, 0x7, {0x6, 0x1, 0x1, 0x0, 0x2, 0xa, 0x41}}]}, @NL80211_ATTR_IE={0x12, 0x2a, [@supported_rates={0x1, 0x4, [{0xc, 0x1}, {0x36}, {0x48}, {0x30}]}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="86a4944d7762"}, @NL80211_ATTR_IE={0x13e, 0x2a, [@mesh_chsw={0x76, 0x6, {0x9f, 0x80, 0xb, 0xfff7}}, @fast_bss_trans={0x37, 0x52, {0x1, 0x0, "03444457d7476490efb4c27a460d8953", "4f56584bc3e01f3a62fa3f04406bf7e097333e619b49be4e6c9eed5d82b0a05e", "cc07350f9ec9b9d48f4d164434658c2b9b33fbadcc4f7491bd2161be556ec7e5"}}, @channel_switch={0x25, 0x3, {0x0, 0x6, 0x1}}, @mic={0x8c, 0x18, {0x732, "79fc3f68382a", @long="26313ca121d73f345740adfb10a001ec"}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @ibss={0x6, 0x2}, @random={0xfa, 0x9f, "2062e89ab44ce100b8f3b246075eb8c774efbe76ebb826735220606d663de846cb666fe7b7ed0d0a729c8437e277361c9b78f963b3dcbc6672f8502525fffa6f3fb466a831617852b0b6cb4cac5cf72dbb3d76553bfb85073c0396806816493da2a3dd95806ca6553420d348d5b4c041a32a2a59818100792e3cb7c80d3889f9c8baf2a7a667dadb0b76f640152e47fed36415f52d2b5076e1a02036255de9"}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x33, 0x7f, @device_a, 0x0, 0x2, 0x4}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x240008d1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01062abd7000ffdbdf2506"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r8) sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\b\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fedbdf25010000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000010) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x9c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3c2e450a}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x11, 0x75d8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6817}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r9, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 21.897670573s ago: executing program 33 (id=78): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40440c1}, 0x20008800) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd7000fcdbdf250100080008001c00000079af0e6bf6ab6fb9b5fa6d55553956243969313c0d34b2b525e17c4400000800060006000000"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4004840) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24000845) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000)={[{@utf8}, {@map_off}, {@sbsector={'sbsector', 0x3d, 0xfffdffeb}}, {@session={'session', 0x3d, 0x21}}, {@unhide}, {@overriderock}, {@cruft}, {@block={'block', 0x3d, 0x200}}, {@session={'session', 0x3d, 0x60}}]}, 0x41, 0x543, &(0x7f00000004c0)="$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") (async) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000)={[{@utf8}, {@map_off}, {@sbsector={'sbsector', 0x3d, 0xfffdffeb}}, {@session={'session', 0x3d, 0x21}}, {@unhide}, {@overriderock}, {@cruft}, {@block={'block', 0x3d, 0x200}}, {@session={'session', 0x3d, 0x60}}]}, 0x41, 0x543, &(0x7f00000004c0)="$eJzs3V9v09YbwPHHpf0R5SdV05gQqgocyiYVqQQngaCIK885SQ8kdmQ7qL1CFU1RRQoTZdLaG8YN26TtRXC7F7F3hPYSNtlO+oc2MdA/qbrvJ4JzYh/7PCdYfnAbHwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDLrdl20ZKm8TpLaji3Fvit3bf9rQ8skFv7ihH9iljxH8nl5Eq66Mo3u6svx3/NyWz6blZycZGT7f9f/urBpcmJwfYjAj4Vm1vbz1d6ve6rcQdygq5eHL6uoT0T+qblNLQyoa+qlYp9Z7Eeqrpp6nA5jHRLuYF2Ij9Q8+4tVaxWy0oXlv2O16g5TT1YeP92ybYr6mGhrZ0g9L07Dwuhu2iaTeM1kjbx6rjN/fhAfGQiFWmnpdTaeq9bzhpA3Kj4KY1KWY1KdqlULJZKxcq96r37tj15YIH9ETnQYvwHLcbrGM/ewNFM9PO/NMWIJx1ZEnXoy5WaBOJLa8j6vkH+/+6OHtnv3vw/yPJXdlfPSJL/r6Xvrg3L/0NiOb3XpmzJtjyXFelJT7ryauwRne6rIVo8MRKKL0Za4iRLVH+JkqpUpCK2PJFFqUsoSupipClaQlmWUCLRyRHlSiBaHInEl0CUzIsrt0RJUapSlbIo0VKQZfGlI540pCZOspc1WU8+97Ioa1iMO42KQ4eRHxx3XSmNGO3x5v/pff+Bxn/FsZ6/gaP4Z5D/AQAAAADAuWUlP32Pr/+n5GpSq5umtscdFgAAAAAAOEbJb/5n42Iqrl0Vi+t/AAAAAADOGyu5x84SkbxcT2trYiW3S/FDAAAAAAAAzonk9//X4iKZA+W6WDvTpXD9DwAAAADAOfFr5hz7Yfui9dffEgRT1tv20rfWRjI3r7NxId3uwsd7jOoz1nR/J0lRSYvJSVfPWrm00c4kmB/6xVpWHNZuAM5OAD9/TgCXJuV3uZG2ubGalquDNWkv+bpp6oLrNx8UxXGmJyK9FP34Yv0nSYb/m9eatnKy3usWnr7srSaxvI338najP4HigXkUR8TyOplvIbnn4tARTyU3YvT7zVuytt7r2nvHP5FuPrG/xzfTI/p8J3Npq7n+jLf5/ePPxX0WC8NG34+ieMSRv5ObaZub8zfT4pAoSllRlPZGcfhncfQoyllRlI8YBQCMy1pGFrLkQN79grPcl2V3+czs/k7m0zbzM8mJdXLmkDO6nXVGt4+Y3f488AykYTk27vePj7Lq+3iD90P7DZslK/4IL7ze+EEub25t317fWHnWfdZ9USqVK/Zd275XkqlkGP2C3AMAOET2M3YyW1h3M66qv975SkFBnspL6cmqLCR3GyTfODh0r/k9X0NYyLhqzSdpMn3Cy8KIq7r/JXc5DPZbGtl2fwzlk/+HAADgFM1l5OFPyf8LGdfd+3P56Kvj/J6ntQEAgJOhgw9WPvrFCgLTflKsVotOtKhV4LuPVGBqDa2MF+nAXXS8hlbtwI9812/GlcempkMVdtptP4hU3Q9U2w/NUjJ9oOo/+j3ULceLjBu2m9oJtXJ9L3LcSNVM6Kp25/umCRd1kGwctrVr6sZ1IuN7KvQ7gasLSoVa72loatqLTN3EVU+1A9Nygpx67Dc7La1qOnQD0478dIeDvoxX94NWstvCuD9sAADOiM2t7ecrvV731QlWxj1GAACwH1kaAAAAAAAAAAAAAAAAAAAAAICz7zTu/6PyRRXpz9B7VuIZXhlMBX1W4qFyHIdfljcne2YCcNL+DQAA//86i0tB") r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) (async) connect$inet(r1, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x103992, 0x1, 0x8, 0x6, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0) write(r2, &(0x7f0000000000), 0x0) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$eJzs3T9rc1UYAPDnpmmSV4dkcJKCF3RwKm1XlxRpoZhJyaAOWmwL0gShhYJ/MHZydXH0EwiCm1/CxW8guApudihcuTf3mqSmaSNN9S2/39LTc89zznNOz6V0yNMPN4anR2mcXH7xa7RaSdS68SyukuhELSpfxYzuNwEAPM+usiz+yMaWiUsiorW6tACAFVr69/+PK08JAFixd959763dXm/v7TRtxf7w64t+/pd9/nX8fPckPo5BHMdWtOM6IvvbuL2fZdmonuY68dpwdNHPI4cf/FzOv/t7RBG/He3oFF2z8Qe9ve10bCp+lOfxQrl+N4/fiXa8NGf9g97ezpz46Dfi9Ven8t+MdvzyUXwSgzgqkpjEf7mdpm9m3/75+ft5enl8MrroN4txE9naI/9oAAAAAAAAAAAAAAAAAAAAAAB4wjbL2jnNKOr35F1l/Z216/yb9Ugrndn6POP4pJroRn2gURbfVfV1ttI0zcqBk/h6vFyP+n+zawAAAAAAAAAAAAAAAAAAAPh/Of/0s9PDweD47EEaVTWA6mP9/3ae7lTPK7F4cHOyVq1sLpg51qoxScTCNPJNPNCx3NV4dlvO3/+w7IStu8esLzqfh2lUt+v0MJl/hs2oelrVJflpekwj7rlW47ZHG0UC1eW4a57G3EftpffeeLFojBaMiWTRe/HGb+OEy57k5kvUKE51bvh62ZgKv3E3brvP1SnNvin/kKjWAQAAAAAAAAAAAAAAAAAAKzX5GPCch5cLQ2tZc2VpAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCjmvz//yUaozL4HoMbcXY+f+X6Y24TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ+6vAAAA//+lillR") mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cifs\x00', 0x1ed) statfs(&(0x7f0000000ac0)='.\x00', &(0x7f0000000b00)=""/228) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 11.52249697s ago: executing program 2 (id=298): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x9, 0x6, 0x2, 0x2, 0xb24, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = io_uring_setup(0x8d7, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000240)={0x6, 0x0, '\x00', @zc_export={r0}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x0, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x4000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fallocate(r1, 0x2a, 0xe000000000, 0x3) unshare(0x40400) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c0000"], 0x0, 0x4c}, 0x28) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000004000a5012bbd700000000000047c00000400c2800c0001"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) 11.242963443s ago: executing program 2 (id=302): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f00000004c0)=0x800, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x5, 0x2, 0x7, 0x0, 0x1, 0x335}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f00000002c0), &(0x7f0000000380)=r2}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, r3, &(0x7f0000000140)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) r4 = socket(0x11, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000640)=[{0x800000000, 0x0, 0x7}], 0x1, 0x1, 0x61, 0x0, 0x0, 0x6e}) setsockopt(r4, 0x107, 0x1, &(0x7f0000000580)="030000001e00030000201a80330061cc", 0x47) setsockopt(r4, 0x107, 0x1, &(0x7f0000000300)="110000000200060000071a806d8be201", 0x10) accept$inet6(r4, 0x0, &(0x7f00000001c0)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001680), 0x0, 0x2090) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x601, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x400}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x29e}]}}]}, 0x40}}, 0x4008000) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x83000) 10.921733148s ago: executing program 2 (id=308): syz_mount_image$ext4(&(0x7f00000003c0)='ext2\x00', &(0x7f0000000240)='./file1\x00', 0x4c010, &(0x7f00000004c0)={[{@jqfmt_vfsv0}]}, 0x2, 0xbd8, &(0x7f00000083c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) write(r1, 0x0, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_robust_list(r0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x4a, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) accept4$unix(r6, 0x0, &(0x7f00000000c0), 0x80800) sendto$unix(r6, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) write$nbd(r5, &(0x7f0000000280)={0x67446698, 0x0, 0x3, 0x4, 0x2}, 0x10) recvfrom$unix(r7, 0x0, 0x0, 0x10102, 0x0, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 9.16795794s ago: executing program 2 (id=316): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000001100)=ANY=[@ANYBLOB='uni_xlate=1,shortname=winnt,shortname=lower,nfs=nostale_ro,uni_xlate=1,uni_xlate=0,sys_immutable,shortname=mixed,fmask=00000000000000000001577,shortname=mixed,nonumtail=0,utf8=0,shortname=winnt,\x00'], 0x1, 0x2bd, &(0x7f0000001240)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000240)='\x0eS\x1b>\xb7\xf5\xa35]\xf6\xc4u\x8ep\x17\x83\x10-$') bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0xfc, 0x9, 0x8e, 0x9, 0x0, 0x4, 0x60003, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xb8, 0x6, @perf_config_ext={0xd, 0x7}, 0x102, 0x7, 0x6, 0x8, 0x7, 0xe, 0x8, 0x0, 0x86, 0x0, 0x8001}, 0xffffffffffffffff, 0x7, r0, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000070020000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xee00) syz_clone3(&(0x7f0000003000)={0x4000000, 0x0, 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=[0xffffffffffffffff], 0x1}, 0x58) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmmsg$inet(r3, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r3, &(0x7f0000000400), 0x5a, 0x40000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="1100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="e08729a3b51088b0355af42d01df5dc5da90a249dffd8684f302c7bf3a89e1581ca36d3d838669bfca6d647fe9e590ed7376e7270ee2efe5ddc7e1817d708925bd39b8607f4345b120f0b58ec0f8deffad98c314f7fe93d29868431ade370d3e65418fbfc6c9e9ec91f70000", @ANYRES64=0x0], 0x11) mq_unlink(&(0x7f0000000080)='..\x00') r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090200000000fedbdf2501000000050002000a00000014000700ff0000000000000000000000000000010500040001"], 0x38}}, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) 9.061932935s ago: executing program 2 (id=320): socket$kcm(0x11, 0xa, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x16d}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) 8.845262356s ago: executing program 2 (id=326): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffbffffffffff, 0x180f81) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000000)={r0, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x22020600) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) (async) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) 8.844793825s ago: executing program 34 (id=326): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffbffffffffff, 0x180f81) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000000)={r0, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x22020600) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) (async) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) 7.711965649s ago: executing program 6 (id=340): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = fcntl$getown(r2, 0x9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r4}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast1, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000180012800b0001006709000000650000080002800400060008000400b2000000"], 0x40}}, 0x40800) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x800010, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x47c, &(0x7f0000000640)="$eJzs3EtsG0UfAPD/bl5NH1/ylfJoaSFQEBWPpEkf9MAFBBIHkJDgUMQpJGlV6jaoCRKtKigcyhFV4o44InFH4gQXBBwQEle4o0pV1UsLJ6O1d1PHsRMndusU/37SOjO768z8PTv2eMZ2AD1rLLtJIrZHxB8RMVLNLj9hrPrn1o2LM3/fuDiTRLn85vWkct7NGxdnilOL+22rZsrliKEsOdSg3MvvREyXSnPn8vzE4pn3JxbOX3ju1Jnpk3Mn585OHTt2+NC+waNTR9qKL83/ZnHd3PPR/N7dr7595fWZ41fe/fmbrL7b8+O1cWxIFm2dseqjW+/R7ObJtgrbVH7NbnbU7Ej6m588fhcqROv6IiJrroFK/x+JvhheOjYSr3za1coBd1S5XC43en3OXSoD/2FJdLsGQHcUL/TZ+99iu0tDj03h2ovVN0BZ3LfyrXqkf2nuYKDu/W0njUXE8Uv/fJlt0Yl5CACANXyfjX+ebTT+S+OBmvP+l6+hjEbE/yNiZ0TcFxG7IuL+iMq5D0bEQ+ssv36FZOX4J726ocBalI3/XsjXtpaP/4rRX4z25bkdlfgHkhOnSnMH88fkQAwMZfnJVcr44eXfPy/SW+qO1Y7/si0rvxgL5vW42l83QTc7vTjdbtyFa59E7OlvFH8SxTJOEhG7I2LPBss49fTXe5sdWzv+VayyztSq8lcRT1Xb/1Isi/92UyVN1ycnnz86dWRiS5TmDk4UV8VKv/x2+Y1m5bcVfwdk7b+14fW/tAo8mmyJWDh/4XRlvXZh/WVc/vOzmj69bHU5iz/9NmLd1/9g8lYlPZjv+3B6cfHcZMRg8trK/VO371vki/Oz+A/sb9z/d9bU+OGIyC7ifRHxSL6Im7XdYxHxeETsXyX+n1564r1mx1a0/3AR/yqz8h2UxT+7VvtHbfuvP9F3+sfvWo6/YfsfrqQO5Htaef5rtYLtPHYAAABwr0grn4FP0vGldJqOj1c/w78rtqal+YXFZ07Mf3B2tvpZ+dEYSIuZrpGa+dDJfG64yE/V5Q/l88Zf9A1X8uMz86XZbgcPPW5bk/6f+auv27UD7rgOrKMB9yj9H3qX/g+9S/+H3qX/Q+9q1P8/7kI9gLvP6z/0Lv0fepf+D71L/4ee1PS78WlbX/nvcqL47YQ2/s/17kfRdmL4ThYRafcDXCtR/IbPZqnPhhL97VzGrSSGGh7q4pMSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAB/0bAAD//9cM3tg=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200010000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/276], 0x15c}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4f21, 0x400, @dev={0xfe, 0x80, '\x00', 0x30}, 0x3}, 0x1c, &(0x7f0000000180), 0x129}}], 0x1, 0x931766f6319e6d44) shutdown(r8, 0x1) 4.621839994s ago: executing program 6 (id=365): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094013000000035c0461c1d67f6f94007134cf6efb8007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d33dfe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000", 0xd8}], 0x1}, 0x8084) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000140)="9157468db877213c20004822604be748b76c547137e5a58e878acdb92295a7d3e9610478cf5374af2f2f6cbe4b14be4bd330f41b07b283badf81cfa9589413cfc458994a46a62f4c26fa8e3e5c2b9f6bcb4a2ddf0ca04677d29166b275e369f3aaa672967990390943b5ac39dd796370ad57aaeee7f2726632105263bc004fbd261a4fdda8f5457663eaf3dd276aa6b200071e812934764e2671006ad772436fe3d6d2d8360af7150cd1f81b93a4a895e0cc0cc76e61866e6530b103765fbb6da69966752b54ea9c6e3e208ea8d54af925b8d686c2dd39e734753443bc02cdc8670786764ce73bcd0535b3b17b8aaacbbb635d84ae3289dc", 0xf8}, {&(0x7f00000003c0)="070ef2a594113d547dc4254863262721bdf058f79bc4e6cda8424e8bbe5fae1ff0246cd241aa0771fa874d755923c14ee80e3580e06cd5816d189d18a3d3c4334bd6fef2868bdbc1af7a046b3d6532b76bf5e3f350f0400bb1eb990354eae69a3e007f0cdc59954c72a5402e4a459eeac2d89bf64e6dc9f001a68ba4275eea38178b854012ff82201d672eaccb3b227b342a7b94fbb133f6ef93f53f91dbd820372555c17593004566cbcaea62c866c627aeb7ed", 0xb4}], 0x2, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xc2e8}}], 0x18}, 0x20000000) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) r3 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10001, '\x00', r2, r4, 0x4, 0x1, 0x2}, 0x50) 4.546083727s ago: executing program 6 (id=366): r0 = socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0xecf86c37d53049cc) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8}, 0x10f8eb, 0x1224, 0x2, 0x5, 0xc, 0x5, 0x8, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8994, 0x0) mkdir(&(0x7f0000002600)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcd) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000001040), 0x201, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa88000301"], 0x0) lsetxattr$security_capability(0x0, &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfb, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="380000002d000100020000000000000008000000", @ANYRES32, @ANYBLOB="08000037de1fd700", @ANYRES32=r2], 0x38}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40082, 0x22) write(r3, &(0x7f0000000000)='3', 0x4e) r4 = getpid() setns(0xc9, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x9, 0x9, 0x5, 0x3, 0x800]}, &(0x7f00000000c0)=0x54) r6 = syz_pidfd_open(r4, 0x0) setns(r6, 0x24020000) socket$inet(0x2, 0x1, 0x8) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='0', 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') 4.130216147s ago: executing program 6 (id=368): creat(&(0x7f0000000040)='./file0\x00', 0x44) (async) socket$tipc(0x1e, 0x5, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) (async) syz_ublk_setup_io_uring(0x666a, 0x0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) (async) r0 = syz_ublk_setup_io_uring(0x60b2, &(0x7f0000000300)={0x0, 0x9f1d, 0x4, 0x3, 0x4b}, 0x0, 0x0, &(0x7f0000000400)) r1 = io_uring_setup(0x16c7, &(0x7f0000000100)={0x0, 0xc91, 0x80, 0x200004, 0x26, 0x0, r0}) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6(0xa, 0x2, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x4d, 0x0, 0x0) getsockname$unix(r2, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) bind$inet6(r3, 0x0, 0x0) (async) connect$inet6(r3, 0x0, 0x0) (async) sendmmsg$inet6(r3, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000280)='\f7x', 0x3}], 0x1}}], 0x1, 0x4c0c0) (async) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$inet6(0xa, 0x3, 0x1) (async) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b40)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e24000002000000000000007f68e3fcf34dfc50cb747145935f1839487ecc399dfc7f44", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff803500004000638877fbac14142ce934a0a662079f4b4d2f87e56dca6aab055013f286dd1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) (async) splice(r3, 0x0, r2, 0x0, 0x7ffff000, 0x6) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x2000000, &(0x7f00000014c0)=[{0x0}], 0x0}, 0x20) 2.157799459s ago: executing program 5 (id=405): syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000840)={0x0, 0x7, 0x800}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000c40)={r2, "1a5cd2d20d581f15a7aee65ee5583221"}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000008c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="08002a0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40852) bind$rxrpc(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10408, 0x1, 0x0, 0x3, 0x800002, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r8 = add_key$keyring(0x0, &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, r7) keyctl$instantiate(0xc, r7, 0x0, 0x2b, r8) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x113, r7) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2048050}, 0x4040) r10 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x4289c2, 0x1) fcntl$setlease(r10, 0x400, 0x1) fremovexattr(r10, &(0x7f0000000040)=@known='system.posix_acl_default\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ed) mount(0x0, 0x0, 0x0, 0x0, 0x0) 1.905465961s ago: executing program 5 (id=406): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x116078, 0x0, 0x0, 0x3, 0x6, 0x8001, 0xf}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2f, 0x0, &(0x7f0000000180)="b461802305624431ed337301000000010000986919d5d5fe00c6fc6ef8eef9757a601bee936390009c5bbd00000000", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4002}, 0x50) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$iso9660(&(0x7f0000000480), &(0x7f0000000080)='./file2\x00', 0x800040, &(0x7f00000004c0)=ANY=[], 0x1, 0x5db, &(0x7f0000000ac0)="$eJzs3V1v29Ydx/EfHXt2VSwLtiEIsjQ9c7rBATyHkhsHQq846kjmIokCSRf2VRc0dhFEaYEUAxrftL5Y9oy9ht0Oew3DXsXewK6LXQ8Y5oFPsWJTdmLLVtB+P0bCI/LwnP+hGJ5QFs8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQ47dct+6oG/Q3Ns14fisKe8dsL8u7/dLimHolJ/2jhQVdy1dd++HB5qvpX4u6kb+6oYV0saDdt69e+eAHszPl/scEdCE+f7b7+MFwuP309XabKVp5XmFdmI69r7+FQc/rWBPEoWmurbl31tuxaQddG2/Fie0ZP7JeEkZmyb9t6s3mqrErW+FGv9PyurZcee9nDdddM7+u5celf+cXK7G/HnS7Qb+T5Uk3p3nupSfi/SAxifV6xuw8Gm6vjgturzi+aab6ka2HTp40U+Ok5jbcRqNebzTqa3ebd++57uyRFe4hGs3x3X+57uz0T1pM16Qu3cCZzRT9v7oK1NeGNmUqf3y1FClUb8z2Qtn//+SOPbbe0f6/7OWvHWy+rqz/v6lf/nRBujmu/x8Ty2v/zKfFF+n/7e/vv8I+l3+UR/pMu3qsBxpqqG09nVREE/wpnUfZHVn1FShWqEA9edkaU6wxampNa3L1kdbVViyjtgJ1ZRVrS7ES2eyM8hXJytMfFCqS0ZJ83ZZRXU01tSojqxVtKdSG+uqoJS8rZUePsuO+elz7y0z1V8nUOCbTGfv/LAf9/7fdBK/ewNnsl/0/AAAAAAD4xnKyT9/T+/85vZOl/rOfm3ZkAAAAAABgUrLf/N9IF3Np6is57aBr3WmHBQAAAAAAJsjRzeJTgJrezVPlk1B8CAAAAAAAwDdE9vv/m+kiG3vtXTmvdP8/d2EBAgAAAACAM/vtuDH2/5GtdRzFg3nn7/9WFM05e4PN95wnXrrBe3Ip3+/S4RKT9nXnclFItlibLV759oZTjH55MAhmVqu+3hmJw6ka69d5OYCDDyAqAvizqgPQH/XjvFll3ofllryWt4rV3Q/q8rzLM4ndTH716aMvlDX/d/3ebJHh48+GD7NY9tJXe0+KAo+Mozj+YMwvl3neqR7deC57EKOot+Zo59Fw2x19A4pZBGaq6qyVdepKvjJv5XMt5i8Xi5H2ay+3fyGts74yrvWdLIp5SVnLndO1XM91K89za+lWvqiIolEZRfq2F8eiMdh8bz8//jM67licJYrVsceiiGJ19Cw4RRQAMC072ag/lb3Q74shgA53/Ke4yu2cNJOPM4H/Xui5lvI8S9ezC+vs9YorunvSFd09W7+uvx6ZA2lcH5vW+6cX9dazev+Sxq2x9cbdhqMFLXzxz4N1Dz7Z/mT700Zjdc1933XvNjSXNaNY0PcAACosZt//15E5dvadco6dcTkO+u73s7vqdOPDPOehu+rvv/hKwYo+1mca6qGWs6cNsm8cjJR65UWptXKft/Mo82Cr71prIzO8LJ9wV1cbmejl1fOuVh+870z+/QAA4CIsVvbDo3Psndz/L59w310b+Urh8gl3x6N9OQAAOB82+tqpJb9xoigYfFRvNutesm5NFPr3TRS0OtYE/cRG/rrX71gziMIk9MNumvgwaNnYxBuDQRglph1GZhDGwWY287sppn6Pbc/rJ4EfD7rWi63xw37i+YlpBbFvBhs/7wbxuo2yneOB9YN24HtJEPZNHH4lacWY2NoyYzkvQdAObGSCvhlEQc+LtsyHYXejZ03Lxn4UDJIwL7CsK+i3w6iXFbsy7YMNAMAb4vNnu48fDIfbTw8n5tJb8+pNr5uYdhsBAMDL6KUBAAAAAAAAAAAAAAAAAAAAAHjzHfPcntee0PN/RWJep9p9RrtXKzaVDZhkhAehTrrANzzxlt6IMMrEl5KKNftfavS0KQedPrfaL42u+d55nmOHE3vS6f6BTCSx89/DtU/negTg4vw/AAD//0FMRg8=") socket(0x11, 0x800000003, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x803, 0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xffffff78, 0x1, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x2e9c, 0x2}, 0x8, 0x5, 0xa, 0x0, 0x2, 0x20000, 0x0}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000300)={0x7, 0x9, 0x6, 0xca37, 0x2, 0x0, [{0x3, 0x2, 0x8, '\x00', 0x2000}, {0x1, 0x100, 0x636c, '\x00', 0x2000}]}) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) 1.592678305s ago: executing program 5 (id=413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) r3 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f00000008c0)='fdinfo/3\x00') waitid(0x0, r3, 0x0, 0x80000000, &(0x7f00000003c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf252100000009001f0070687931000000000c0005000000c5af00000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmsg$inet(r7, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000cc0)={&(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10, 0x0}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r1, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) 1.592408596s ago: executing program 7 (id=414): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x10eccc, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_settime(0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 1.569800317s ago: executing program 7 (id=418): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60006000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 1.388018075s ago: executing program 4 (id=421): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="8bce98ec00000008000000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0x4932, 0x4, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r2, 0x100000000000000}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r11, 0x800, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) r12 = openat(r4, &(0x7f0000000340)='./file0\x00', 0x202820, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00012cbd7000fbdbc725010000000c0006000200000000000000340007800c1f7ee287dd3fa09fb140ef00008008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r12, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x240000d0}, 0x4008004) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0xc62, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x547}, 0x4, r8}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES8=r1], 0x20}, 0x1, 0x0, 0x0, 0x88d5}, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x128, r5, 0x20, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r13}, {0x100, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x95, 0xd, 0x3}, {0x2, 0x6, 0x4, 0x7ff7ffff}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4080}, 0x81) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.387541845s ago: executing program 3 (id=422): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test/memory.oom_control/../file0\x00', 0x8000, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x7, 0x0, 0x30}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="28880000", @ANYRES16=r2, @ANYBLOB="0100fd0400010000000003000000140001800e0001006574683a766c616e30000000"], 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) 1.358079856s ago: executing program 7 (id=423): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)}}], 0x1, 0x20008000) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000000)="8003000000000000", 0x8, 0x0, &(0x7f0000000280)={0xa, 0x1234, 0x0, @loopback}, 0x1c) r3 = perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}}, 0x0) ioctl$OCFS2_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x8, 0x2a, 0x9b}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000080)={r8, 0x1ff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000100)={r9}, 0x8) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f0000000140)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x19, 0xfeff}, [@ldst={0x1, 0x1, 0x4, 0x3, 0xa, 0xffffffffffffffd4}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='mysys/module/printk/parameters/time\x00', 0x0, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) fstat(r3, &(0x7f0000000500)) 1.251528332s ago: executing program 4 (id=424): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x0) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x50, 0x0, &(0x7f00000000c0)=0x84) lseek(r3, 0x0, 0x3) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000240)=0x122500, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x110a0a1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="5c00000013006bcc9e3be35c6e179b31076b876c1c0000007ea60864160af3653c000cc00800040081000200300001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b1", 0x47}, {&(0x7f00000001c0)="a8067d08f2ada5f799c1dda64b51640135154f9f75", 0x15}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4054) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x180000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) 1.251330541s ago: executing program 3 (id=425): r0 = socket$kcm(0x11, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0xac9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x11b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6", 0x23}], 0x2}, 0x40000) 1.221978913s ago: executing program 3 (id=426): select(0xff44, &(0x7f0000000000)={0x200000000000000, 0x0, 0x0, 0x300}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) 1.210897914s ago: executing program 7 (id=427): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001540)=[{{&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000600)="153f988278af205fab03591a9647c80ee2f8d2f80163465a8c918a98ff7dafafeb75208268c0f38ea3530a0d4c08af55bfcf3e9f4ad31c45116c9560930ceca467bdf160b6371483dc24e948d41649855280b76337c7867d0f85ea85", 0x5c}, {&(0x7f0000000680)="9982dcf77b8bc38c07416fcf910e239e782c759bad48b3d322e7ba803ff12fdf4fc2af6f62caaf2e072f0bd59e31035472199eb35a5fb58ab8b93590a41b4e62e226d1ad0e0c098c5fad0813d8b2a5d01253995d906c41536fce2ebeebe20a2bcf24fb4c94d9f5259d699f3511c3a2425d09d0921c4f75212ba13e82b216c25b5756c8d1e9ef0a5294ad840df9d6b2104df9b1634db70e4d3a9253a8c1896f9e0781ae564a294531a852b8233e057cda4098dbf80abda3531e892c8cf948ba", 0xbf}], 0x2, &(0x7f0000000880)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}], 0xe0, 0x4801}}, {{&(0x7f0000000980)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000000a00)="7a3dd9190bfc92539dbd1ac1cb4a099f262d8d189b84f35c604f2f616a514ff2ac2cda3d6bc11d804d1a5872653f069702489efed07b60c1c389324956f27ae30889c05355b193d2d697079fe833cb0c8afb506cf53228a53645be1d283c94d620805e596cf18b14921422e0d121ef083506d4cab502bbf64b46e3f890334a695709", 0x82}, {&(0x7f0000000ac0)="35f5a01a6760be71d8d1e3cad8b08269a7f432b07b0c70acfad6f734ad4588f2076873003803eda2b43a74bcfa580785abd0af4ec036d28b67689b8f0aef1154a9aabde2561979e64ad67321af4bb9f6affd24b89a34bd66ebbb9bb0efeaa7e0ca100ffa40c24692bd68de0ecb85c4271d572fc3bb8b8260648a060be4848e40316ca4e95e8a591df61f0d4632a357aede5a0b", 0x93}, {&(0x7f0000000b80)="4bd15f0a841a8eb1d26b7f36822673f5488f22a00aedaf168838bd2f5bc15e69815053984a64f17223e122b0ec53d847eaa14d066a69a2945f380d0fec6926773e84b52c4e48885faa58e095f882dc50fb46831885b85d8bcec83f6d73c98c89dbcefd52cd5fe859ef45f42103aa0d64a64f60e04bb255afa897", 0x7a}, {&(0x7f0000001240)="78d1e863fa1962e68d0f644c6148733778c6a771cbd75298f06dc0c197f398ac0b942cf271ecf5945e5e71cd4b7d99d8a4831c67c9c7f7c7501ff0adaf583db521a5cc024a060650cb4a248e8af3883b3083e1b1a9115d4e1b4a8d0b21be5b2cd9b45b74240c975a26448ff4e4f7f4293b8377d93446470358b59b946e76215c23673669f3e067e70a14d70216cfa98e9bd9bd98dff64f4fee494ba5ee2e5eaa53de9ac19079099eeb76cd19d8fe36476842088ceb67cbd675355065a33520e3a542cbadfee1d080a843bb9f5bcb61ada984e743888d54527cd6a1fa2e4b3df648b23ebb4d9675c5b2939bf78fe5c0ba8e21", 0xf2}, {&(0x7f0000001340)="d5945416fde72a6aa5b5e48cdd57ba99c943e8d573a8045a2af9", 0x1a}], 0x5, &(0x7f0000001640)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0, 0x8080}}], 0x2, 0x4000) r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa10}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000}]}}}]}, 0x58}}, 0x4000084) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) quotactl$Q_GETINFO(0x0, &(0x7f0000000080)=@filename='./file0\x00', 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001380)) geteuid() 1.171534865s ago: executing program 3 (id=428): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200088d1, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xb, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006b", 0xc, 0xffffffffffffffff) 1.171032025s ago: executing program 7 (id=429): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x4000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) unshare(0x2c020400) r4 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x2000, 0x0) msgrcv(r4, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x20050800) r5 = io_uring_setup(0x4199, &(0x7f00000002c0)={0x0, 0x653f, 0x10000, 0xffffffff, 0x292}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff8000000001000008000f0100811b01a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d896075c01000000e1000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.144405886s ago: executing program 3 (id=430): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1018ed8, &(0x7f0000000800)={[{@sysvgroups}, {@nojournal_checksum}, {@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}, {@discard}, {@minixdf}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x2, 0x8, 0x7, 0x4, 0xfffffffffffffffc}, @ldst={0x0, 0x3, 0x2, 0x3, 0xa, 0x8, 0xffffffffffffffff}], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xa4, &(0x7f0000000300)=""/164, 0x41000, 0x9dff5b0f9f18a88c, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0xd, 0x7f, 0x6c6}, 0x10, 0x2f369, r1, 0x5, &(0x7f0000000600)=[r2, r3], &(0x7f0000000640)=[{0x4, 0x4, 0x6, 0x9}, {0x2, 0x3, 0x0, 0x1}, {0x0, 0x5, 0x4, 0xa}, {0x4, 0x2, 0xa, 0x1}, {0x3, 0x1, 0x0, 0x9}], 0x10, 0x6c1d}, 0x94) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1804013, 0x0, 0xfc, 0x0, &(0x7f00000003c0)) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x807e9, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd}) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x88002, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x100011, 0x2, 0x8000}) 1.038975502s ago: executing program 6 (id=431): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)=@secondary) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x40104d00, &(0x7f0000000a00)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xfc, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x48}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x1ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc4}, 0xd0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) 1.038653142s ago: executing program 3 (id=432): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @dev={0xfe, 0x80, '\x00', 0x17}}, r1, 0x5}}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00001a0000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000272000/0x3000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000050a000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time_for_children\x00') fsetxattr$security_selinux(r2, &(0x7f00000002c0), &(0x7f0000000300)='system_u:object_r:cpu_online_t:s0\x00', 0x22, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='3', 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x40d00, 0x0) r7 = io_uring_setup(0x4246, &(0x7f0000000380)={0x0, 0xc8a1, 0x2, 0xfffffffd, 0x3d, 0x0, r6}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000200)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160020000a00000000e000e218bcddf66ed538f252325000", 0x78, 0x2400c090, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x7, 0x43a1bd76, 0x9, 0x9, 0x6, 0x7, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x80004000000000, 0xffffffffffffffff, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r11 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f00000000c0)='mountaddr\x00', &(0x7f0000000040)='\x83\xe5\xc14\xa7\xba\x81\x1f7E\xf4\xc4\xf2(\xfa\xc8}\x86\x9e\x12\x17\xf6\xc2\x83\x90\xb4jz\b\x87\x1f\xf3\xef\x1a~\xb0\x00\xff\xa7\xda\xe4<\xa4\xcd\x0e\xf5\xb0\x17\xa5D\xcd\"\xfa4\x9e\xf7\xd7z*\xb1\x8cs \x05\x93\xb8i\x11\xa0\xef\xffg(\x8f?\x1d\xed', 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x9, 0x0, 0x0, 0xc5fffffe) 848.407501ms ago: executing program 5 (id=433): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_vif\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0) write(r1, &(0x7f0000000180)='hist:keys=common_timestamp.usecs', 0x20) pread64(r0, &(0x7f0000000780)=""/185, 0xb9, 0x3c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x4000, 0x61, 0x11, 0x64}, [@initr0]}, 0x0}, 0x94) r2 = msgget$private(0x0, 0x722) msgsnd(r2, &(0x7f0000000940)=ANY=[@ANYBLOB="0500000000000000"], 0x2000, 0x800) 822.137812ms ago: executing program 5 (id=434): r0 = socket$kcm(0x11, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xac9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x11b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6", 0x23}], 0x2}, 0x40000) 264.195538ms ago: executing program 7 (id=435): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nodioread_nolock}, {@lazytime}]}, 0xff, 0x501, &(0x7f0000000e80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r1, &(0x7f0000004200)='t', 0x1) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000140)=0x8) sendfile(r1, r0, 0x0, 0x7fffffff) (async) sendfile(r1, r0, 0x0, 0x7fffffff) 260.267538ms ago: executing program 5 (id=436): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xcb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x18105, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000007}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x2000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1, 0xc, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socketpair(0x1a, 0xa, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f049e", 0x9}, {&(0x7f0000000100)="68cabf690a010080a8ffff6a0750c0c20d53", 0x12}], 0x2}, 0x0) 177.794622ms ago: executing program 4 (id=437): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xac9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x11b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000340)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6", 0x23}], 0x2}, 0x40000) 58.299128ms ago: executing program 6 (id=438): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) setpriority(0x0, 0x0, 0x2a14b58) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x90) r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x4, 0x1, 0x3, 0x4, 0x0, 0x2, 0x2, 0x18, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0}, 0x10044b, 0xff, 0x10001, 0x9, 0x80000000, 0xfff, 0x7ff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x9) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7fff, 0x9040, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x5}, 0x0, 0x2, 0xfffffffe, 0x8, 0x3, 0x0, 0x81}, 0x0, 0xfff7ffffffffffff, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r2, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000280)=""/114, 0x72}, {&(0x7f0000000740)=""/101, 0x65}], 0x3, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e08540ef2ae1ada000000000690", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x85, &(0x7f0000000000)={[{@i_version}, {@noblock_validity}, {@noquota}, {@nouid32}, {@norecovery}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@noauto_da_alloc}, {@resuid, 0x32}]}, 0x1, 0x527, &(0x7f0000001380)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 44.850858ms ago: executing program 4 (id=439): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair(0x1, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 699.14µs ago: executing program 4 (id=440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001540)=[{{&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000600)="153f988278af205fab03591a9647c80ee2f8d2f80163465a8c918a98ff7dafafeb75208268c0f38ea3530a0d4c08af55bfcf3e9f4ad31c45116c9560930ceca467bdf160b6371483dc24e948d41649855280b76337c7867d0f85ea85", 0x5c}, {&(0x7f0000000680)="9982dcf77b8bc38c07416fcf910e239e782c759bad48b3d322e7ba803ff12fdf4fc2af6f62caaf2e072f0bd59e31035472199eb35a5fb58ab8b93590a41b4e62e226d1ad0e0c098c5fad0813d8b2a5d01253995d906c41536fce2ebeebe20a2bcf24fb4c94d9f5259d699f3511c3a2425d09d0921c4f75212ba13e82b216c25b5756c8d1e9ef0a5294ad840df9d6b2104df9b1634db70e4d3a9253a8c1896f9e0781ae564a294531a852b8233e057cda4098dbf80abda3531e892c8cf948ba", 0xbf}], 0x2, &(0x7f0000000880)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}], 0xe0, 0x4801}}, {{&(0x7f0000000980)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000000a00)="7a3dd9190bfc92539dbd1ac1cb4a099f262d8d189b84f35c604f2f616a514ff2ac2cda3d6bc11d804d1a5872653f069702489efed07b60c1c389324956f27ae30889c05355b193d2d697079fe833cb0c8afb506cf53228a53645be1d283c94d620805e596cf18b14921422e0d121ef083506d4cab502bbf64b46e3f890334a695709", 0x82}, {&(0x7f0000000ac0)="35f5a01a6760be71d8d1e3cad8b08269a7f432b07b0c70acfad6f734ad4588f2076873003803eda2b43a74bcfa580785abd0af4ec036d28b67689b8f0aef1154a9aabde2561979e64ad67321af4bb9f6affd24b89a34bd66ebbb9bb0efeaa7e0ca100ffa40c24692bd68de0ecb85c4271d572fc3bb8b8260648a060be4848e40316ca4e95e8a591df61f0d4632a357aede5a0b", 0x93}, {&(0x7f0000000b80)="4bd15f0a841a8eb1d26b7f36822673f5488f22a00aedaf168838bd2f5bc15e69815053984a64f17223e122b0ec53d847eaa14d066a69a2945f380d0fec6926773e84b52c4e48885faa58e095f882dc50fb46831885b85d8bcec83f6d73c98c89dbcefd52cd5fe859ef45f42103aa0d64a64f60e04bb255afa897", 0x7a}, {&(0x7f0000001240)="78d1e863fa1962e68d0f644c6148733778c6a771cbd75298f06dc0c197f398ac0b942cf271ecf5945e5e71cd4b7d99d8a4831c67c9c7f7c7501ff0adaf583db521a5cc024a060650cb4a248e8af3883b3083e1b1a9115d4e1b4a8d0b21be5b2cd9b45b74240c975a26448ff4e4f7f4293b8377d93446470358b59b946e76215c23673669f3e067e70a14d70216cfa98e9bd9bd98dff64f4fee494ba5ee2e5eaa53de9ac19079099eeb76cd19d8fe36476842088ceb67cbd675355065a33520e3a542cbadfee1d080a843bb9f5bcb61ada984e743888d54527cd6a1fa2e4b3df648b23ebb4d9675c5b2939bf78fe5c0ba8e21", 0xf2}, {&(0x7f0000001340)="d5945416fde72a6aa5b5e48cdd57ba99c943e8d573a8045a2af9", 0x1a}], 0x5, &(0x7f0000001640)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0, 0x8080}}], 0x2, 0x4000) r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa10}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x40000}]}}}]}, 0x58}}, 0x4000084) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) quotactl$Q_GETINFO(0x0, &(0x7f0000000080)=@filename='./file0\x00', 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001380)) geteuid() 0s ago: executing program 4 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8008, 0x20000008b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x62}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x4e}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1346, &(0x7f00000002c0)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r4, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r5, &(0x7f0000019080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x2080, 0x0) mlock2(&(0x7f00005d3000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x10, &(0x7f0000001280), 0x4) sendto$inet6(r6, &(0x7f0000000000)='s', 0x1, 0x800, 0x0, 0x0) kernel console output (not intermixed with test programs): 26.039:195): avc: denied { create } for pid=3537 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.603532][ T29] audit: type=1400 audit(1789638626.039:197): avc: denied { create } for pid=3525 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 34.608164][ T29] audit: type=1400 audit(1789638626.069:198): avc: denied { write } for pid=3525 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 34.629268][ T29] audit: type=1400 audit(1789638626.039:196): avc: denied { open } for pid=3525 comm="syz.0.8" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.629622][ T29] audit: type=1400 audit(1789638626.089:199): avc: denied { write } for pid=3525 comm="syz.0.8" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 34.647385][ T3542] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.5: bg 0: block 248: padding at end of block bitmap is not set [ 34.654898][ T3543] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0 [ 34.685832][ T29] audit: type=1400 audit(1789638626.129:200): avc: denied { setopt } for pid=3539 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.693008][ T29] audit: type=1326 audit(1789638626.149:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3525 comm="syz.0.8" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91541de159 code=0x7ffc0000 [ 34.693242][ T29] audit: type=1326 audit(1789638626.149:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3525 comm="syz.0.8" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91541de159 code=0x7ffc0000 [ 34.811258][ T3548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 34.867056][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.893273][ T3547] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 34.965046][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 35.075162][ T3547] Zero length message leads to an empty skb [ 35.081052][ T3556] ALSA: seq fatal error: cannot create timer (-19) [ 35.209100][ T3547] syz.1.12 (3547) used greatest stack depth: 10768 bytes left [ 35.214016][ T3560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15'. [ 35.277421][ T3563] loop3: detected capacity change from 0 to 256 [ 35.281622][ T3563] ======================================================= [ 35.281622][ T3563] WARNING: The mand mount option has been deprecated and [ 35.281622][ T3563] and is ignored by this kernel. Remove the mand [ 35.281622][ T3563] option from the mount to silence this warning. [ 35.281622][ T3563] ======================================================= [ 35.327797][ T3562] loop1: detected capacity change from 0 to 512 [ 35.328110][ T3562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.367618][ T3562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.367727][ T3562] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.390598][ T3562] veth1_macvtap: left promiscuous mode [ 35.390675][ T3562] macsec0: entered promiscuous mode [ 35.503375][ T3569] team_slave_1: entered allmulticast mode [ 35.504264][ T3569] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 35.538485][ T3553] loop2: detected capacity change from 0 to 1024 [ 35.586265][ T3553] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 35.588524][ T3553] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 35.596493][ T3553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.607163][ T3571] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19'. [ 35.636423][ T3553] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 35.682603][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.689438][ T3562] syz.1.17 (3562) used greatest stack depth: 10760 bytes left [ 35.728840][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.785814][ T3580] FAULT_INJECTION: forcing a failure. [ 35.785814][ T3580] name failslab, interval 1, probability 0, space 0, times 1 [ 35.785935][ T3580] CPU: 1 UID: 0 PID: 3580 Comm: syz.1.21 Not tainted syzkaller #0 PREEMPT(lazy) [ 35.785967][ T3580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.785993][ T3580] Call Trace: [ 35.786000][ T3580] [ 35.786009][ T3580] __dump_stack+0x1d/0x30 [ 35.786069][ T3580] dump_stack_lvl+0x95/0xd0 [ 35.786090][ T3580] dump_stack+0x15/0x1b [ 35.786110][ T3580] should_fail_ex+0x262/0x280 [ 35.786159][ T3580] ? bpf_test_init+0x86/0x130 [ 35.786186][ T3580] should_failslab+0x8c/0xb0 [ 35.786232][ T3580] __kmalloc_noprof+0xd0/0x4d0 [ 35.786267][ T3580] ? bpf_test_init+0x86/0x130 [ 35.786301][ T3580] bpf_test_init+0x86/0x130 [ 35.786370][ T3580] bpf_prog_test_run_xdp+0x303/0x9e0 [ 35.786408][ T3580] ? __rcu_read_unlock+0x4e/0x70 [ 35.786518][ T3580] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 35.786571][ T3580] bpf_prog_test_run+0x208/0x340 [ 35.786602][ T3580] __sys_bpf+0x8da/0xc30 [ 35.786628][ T3580] ? vfs_write+0x830/0x9a0 [ 35.786715][ T3580] __x64_sys_bpf+0x69/0x80 [ 35.786741][ T3580] x64_sys_call+0xf26/0x2550 [ 35.786766][ T3580] do_syscall_64+0x112/0x360 [ 35.786804][ T3580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.786866][ T3580] RIP: 0033:0x7efc0e64e159 [ 35.786884][ T3580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.786960][ T3580] RSP: 002b:00007efc0d0a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 35.786987][ T3580] RAX: ffffffffffffffda RBX: 00007efc0e8d5fa0 RCX: 00007efc0e64e159 [ 35.787051][ T3580] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 35.787069][ T3580] RBP: 00007efc0d0a7090 R08: 0000000000000000 R09: 0000000000000000 [ 35.787082][ T3580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.787095][ T3580] R13: 00007efc0e8d6038 R14: 00007efc0e8d5fa0 R15: 00007ffeb1c12e88 [ 35.787117][ T3580] [ 35.787306][ T3582] loop0: detected capacity change from 0 to 512 [ 35.787969][ T3582] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.888980][ T31] Bluetooth: hci1: Frame reassembly failed (-84) [ 35.892599][ T3582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 36.162003][ T3602] team0: Device wg0 is of different type [ 36.178113][ T3602] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 36.211779][ T3605] FAULT_INJECTION: forcing a failure. [ 36.211779][ T3605] name failslab, interval 1, probability 0, space 0, times 0 [ 36.211813][ T3605] CPU: 1 UID: 0 PID: 3605 Comm: syz.4.29 Not tainted syzkaller #0 PREEMPT(lazy) [ 36.211903][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.211922][ T3605] Call Trace: [ 36.211930][ T3605] [ 36.211977][ T3605] __dump_stack+0x1d/0x30 [ 36.212006][ T3605] dump_stack_lvl+0x95/0xd0 [ 36.212109][ T3605] dump_stack+0x15/0x1b [ 36.212168][ T3605] should_fail_ex+0x262/0x280 [ 36.212205][ T3605] ? alloc_vmap_area+0x1b6/0xe40 [ 36.212238][ T3605] should_failslab+0x8c/0xb0 [ 36.212271][ T3605] kmem_cache_alloc_node_noprof+0x82/0x400 [ 36.212350][ T3605] ? nf_ct_tmpl_alloc+0x6b/0x140 [ 36.212377][ T3605] ? alloc_vmap_area+0x1b6/0xe40 [ 36.212418][ T3605] ? __kmalloc_cache_noprof+0x19b/0x400 [ 36.212449][ T3605] alloc_vmap_area+0x1b6/0xe40 [ 36.212606][ T3605] ? should_fail_ex+0xdb/0x280 [ 36.212713][ T3605] ? __get_vm_area_node+0x125/0x1f0 [ 36.212739][ T3605] ? should_failslab+0x8c/0xb0 [ 36.212770][ T3605] ? __get_vm_area_node+0x125/0x1f0 [ 36.212845][ T3605] __get_vm_area_node+0x199/0x1f0 [ 36.212882][ T3605] __vmalloc_node_range_noprof+0x262/0x1000 [ 36.212993][ T3605] ? xt_counters_alloc+0x40/0x50 [ 36.213033][ T3605] ? mutex_unlock+0x4e/0x90 [ 36.213094][ T3605] ? xt_find_target+0x204/0x240 [ 36.213125][ T3605] ? xt_counters_alloc+0x40/0x50 [ 36.213201][ T3605] vzalloc_noprof+0x82/0xb0 [ 36.213313][ T3605] ? xt_counters_alloc+0x40/0x50 [ 36.213386][ T3605] xt_counters_alloc+0x40/0x50 [ 36.213507][ T3605] __do_replace+0x4d/0x580 [ 36.213553][ T3605] do_ipt_set_ctl+0x7d4/0x970 [ 36.213581][ T3605] nf_setsockopt+0x199/0x1b0 [ 36.213644][ T3605] ip_setsockopt+0x102/0x110 [ 36.213727][ T3605] udp_setsockopt+0x89/0xa0 [ 36.213765][ T3605] sock_common_setsockopt+0x69/0x80 [ 36.213796][ T3605] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 36.213877][ T3605] __sys_setsockopt+0x184/0x200 [ 36.213953][ T3605] __x64_sys_setsockopt+0x64/0x80 [ 36.214063][ T3605] x64_sys_call+0x248f/0x2550 [ 36.214090][ T3605] do_syscall_64+0x112/0x360 [ 36.214191][ T3605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.214218][ T3605] RIP: 0033:0x7fadeedfe159 [ 36.214236][ T3605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.214282][ T3605] RSP: 002b:00007faded857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 36.214309][ T3605] RAX: ffffffffffffffda RBX: 00007fadef085fa0 RCX: 00007fadeedfe159 [ 36.214327][ T3605] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 36.214341][ T3605] RBP: 00007fadeee9506b R08: 00000000000003d0 R09: 0000000000000000 [ 36.214355][ T3605] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 36.214367][ T3605] R13: 00007fadef086038 R14: 00007fadef085fa0 R15: 00007ffc3216c5e8 [ 36.214453][ T3605] [ 36.216845][ T3602] syz.1.28 (3602) used greatest stack depth: 10056 bytes left [ 36.216885][ T3605] syz.4.29: vmalloc error: size 48, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 36.216956][ T3605] CPU: 0 UID: 0 PID: 3605 Comm: syz.4.29 Not tainted syzkaller #0 PREEMPT(lazy) [ 36.216986][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.217000][ T3605] Call Trace: [ 36.217057][ T3605] [ 36.217066][ T3605] __dump_stack+0x1d/0x30 [ 36.217097][ T3605] dump_stack_lvl+0x95/0xd0 [ 36.217121][ T3605] dump_stack+0x15/0x1b [ 36.217141][ T3605] warn_alloc+0x146/0x1c0 [ 36.217256][ T3605] __vmalloc_node_range_noprof+0x28a/0x1000 [ 36.217365][ T3605] ? mutex_unlock+0x4e/0x90 [ 36.217389][ T3605] ? xt_find_target+0x204/0x240 [ 36.217499][ T3605] ? xt_counters_alloc+0x40/0x50 [ 36.217539][ T3605] vzalloc_noprof+0x82/0xb0 [ 36.217572][ T3605] ? xt_counters_alloc+0x40/0x50 [ 36.217642][ T3605] xt_counters_alloc+0x40/0x50 [ 36.217703][ T3605] __do_replace+0x4d/0x580 [ 36.217731][ T3605] do_ipt_set_ctl+0x7d4/0x970 [ 36.217760][ T3605] nf_setsockopt+0x199/0x1b0 [ 36.217856][ T3605] ip_setsockopt+0x102/0x110 [ 36.217879][ T3605] udp_setsockopt+0x89/0xa0 [ 36.217941][ T3605] sock_common_setsockopt+0x69/0x80 [ 36.217973][ T3605] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 36.218113][ T3605] __sys_setsockopt+0x184/0x200 [ 36.218151][ T3605] __x64_sys_setsockopt+0x64/0x80 [ 36.218185][ T3605] x64_sys_call+0x248f/0x2550 [ 36.218210][ T3605] do_syscall_64+0x112/0x360 [ 36.218323][ T3605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.218345][ T3605] RIP: 0033:0x7fadeedfe159 [ 36.218425][ T3605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.218444][ T3605] RSP: 002b:00007faded857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 36.218467][ T3605] RAX: ffffffffffffffda RBX: 00007fadef085fa0 RCX: 00007fadeedfe159 [ 36.218484][ T3605] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 36.218556][ T3605] RBP: 00007fadeee9506b R08: 00000000000003d0 R09: 0000000000000000 [ 36.218592][ T3605] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 36.218605][ T3605] R13: 00007fadef086038 R14: 00007fadef085fa0 R15: 00007ffc3216c5e8 [ 36.218627][ T3605] [ 36.218713][ T3605] Mem-Info: [ 36.218774][ T3605] active_anon:6225 inactive_anon:0 isolated_anon:0 [ 36.218774][ T3605] active_file:0 inactive_file:10961 isolated_file:0 [ 36.218774][ T3605] unevictable:0 dirty:1597 writeback:0 [ 36.218774][ T3605] slab_reclaimable:3026 slab_unreclaimable:14789 [ 36.218774][ T3605] mapped:29210 shmem:371 pagetables:1069 [ 36.218774][ T3605] sec_pagetables:0 bounce:0 [ 36.218774][ T3605] kernel_misc_reclaimable:0 [ 36.218774][ T3605] free:1901304 free_pcp:7336 free_cma:0 [ 36.218837][ T3605] Node 0 active_anon:24900kB inactive_anon:0kB active_file:0kB inactive_file:43844kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116840kB dirty:6388kB writeback:0kB shmem:1484kB kernel_stack:3488kB pagetables:4276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 36.218973][ T3605] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 36.219091][ T3605] lowmem_reserve[]: 0 2878 7856 7856 [ 36.219121][ T3605] Node 0 DMA32 free:2943708kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947232kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 36.219218][ T3605] lowmem_reserve[]: 0 0 4978 4978 [ 36.219297][ T3605] Node 0 Normal free:4646148kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24900kB inactive_anon:0kB active_file:0kB inactive_file:43844kB unevictable:0kB writepending:6388kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:25820kB local_pcp:8240kB free_cma:0kB [ 36.219365][ T3605] lowmem_reserve[]: 0 0 0 0 [ 36.219467][ T3605] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 36.219693][ T3605] Node 0 DMA32: 1*4kB (M) 1*8kB (M) 1*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (M) 1*256kB (M) 2*512kB (M) 3*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943708kB [ 36.219930][ T3605] Node 0 Normal: 379*4kB (M) 305*8kB (UM) 121*16kB (UME) 37*32kB (UM) 3*64kB (ME) 1*128kB (M) 2*256kB [ 36.232169][ T3607] loop1: detected capacity change from 0 to 128 [ 36.234145][ T3607] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 36.234339][ T3607] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.299510][ T3611] netlink: 44 bytes leftover after parsing attributes in process `syz.1.30'. [ 36.303498][ T3610] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 36.303569][ T3610] EXT4-fs (loop4): mount failed [ 36.334402][ T3605] (M) 5*512kB (UME) 3*1024kB (ME) 4*2048kB (UME) 1129*4096kB (M) = 4646116kB [ 36.334510][ T3605] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 36.334528][ T3605] 11965 total pagecache pages [ 36.334536][ T3605] 0 pages in swap cache [ 36.334543][ T3605] Free swap = 124996kB [ 36.334551][ T3605] Total swap = 124996kB [ 36.334559][ T3605] 2097051 pages RAM [ 36.334566][ T3605] 0 pages HighMem/MovableOnly [ 36.334573][ T3605] 81846 pages reserved [ 36.831756][ T3607] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.097898][ T3623] lo speed is unknown, defaulting to 1000 [ 37.098592][ T3623] lo speed is unknown, defaulting to 1000 [ 37.098871][ T3623] lo speed is unknown, defaulting to 1000 [ 37.152036][ T3623] infiniband syz0: set active [ 37.152050][ T3623] infiniband syz0: added lo [ 37.152304][ T1511] lo speed is unknown, defaulting to 1000 [ 37.157176][ T3623] RDS/IB: syz0: added [ 37.157196][ T3623] smc: adding ib device syz0 with port count 1 [ 37.157211][ T3623] smc: ib device syz0 port 1 has no pnetid [ 37.157394][ T3623] lo speed is unknown, defaulting to 1000 [ 37.158328][ T1511] lo speed is unknown, defaulting to 1000 [ 37.194256][ T3623] lo speed is unknown, defaulting to 1000 [ 37.229649][ T3623] lo speed is unknown, defaulting to 1000 [ 37.277589][ T3623] lo speed is unknown, defaulting to 1000 [ 37.315312][ T3623] lo speed is unknown, defaulting to 1000 [ 37.343944][ T3642] bond1: invalid ARP target 0.0.0.0 specified for addition [ 37.343974][ T3642] bond1: option arp_ip_target: invalid value (0) [ 37.345044][ T3642] bond1 (unregistering): Released all slaves [ 37.388482][ T3647] sctp: [Deprecated]: syz.3.41 (pid 3647) Use of int in max_burst socket option. [ 37.388482][ T3647] Use struct sctp_assoc_value instead [ 37.416592][ T3647] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 37.416755][ T3647] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.649547][ T3655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 37.722244][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.802597][ T3647] netlink: 48 bytes leftover after parsing attributes in process `syz.3.41'. [ 37.817237][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.901592][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.931812][ T3576] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 37.949578][ T3666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.49'. [ 37.974636][ T3667] key id 00000004 not found [ 38.294313][ T3680] EXT4-fs: test_dummy_encryption option not supported [ 38.297711][ T3683] process 'syz.4.52' launched '/dev/fd/4' with NULL argv: empty string added [ 38.396834][ T3689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3689 comm=syz.0.53 [ 39.094755][ T3700] set_capacity_and_notify: 4 callbacks suppressed [ 39.094776][ T3700] loop0: detected capacity change from 0 to 512 [ 39.100565][ T3700] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a866c028, mo2=0002] [ 39.100668][ T3700] System zones: 1-12 [ 39.101214][ T3700] EXT4-fs (loop0): 1 orphan inode deleted [ 39.135331][ T3700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.221619][ T3710] rdma_rxe: rxe_newlink: failed to add bond0 [ 39.295602][ T3700] xt_cluster: you have exceeded the maximum number of cluster nodes (65420 > 32) [ 39.426726][ T3667] loop2: detected capacity change from 0 to 1024 [ 39.587524][ T3667] EXT4-fs: Ignoring removed orlov option [ 39.728013][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.886238][ T3667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.915515][ T3724] loop4: detected capacity change from 0 to 256 [ 39.928192][ T3724] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.931570][ T3724] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.994330][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 39.994351][ T29] audit: type=1400 audit(1789638631.409:303): avc: denied { write } for pid=3659 comm="syz.2.46" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.250765][ T3721] loop0: detected capacity change from 0 to 164 [ 40.479787][ T29] audit: type=1400 audit(1789638631.909:304): avc: denied { mount } for pid=3720 comm="syz.0.59" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 40.526439][ T3721] Unsupported NM flag settings (240) [ 40.533923][ T3721] Unsupported NM flag settings (240) [ 40.755374][ T29] audit: type=1400 audit(1789638632.209:305): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 40.785781][ T3727] syz.0.60 uses obsolete (PF_INET,SOCK_PACKET) [ 40.789681][ T29] audit: type=1400 audit(1789638632.239:306): avc: denied { create } for pid=3726 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 41.119733][ T3672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 41.188836][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.233274][ T3740] __nla_validate_parse: 1 callbacks suppressed [ 41.233291][ T3740] netlink: 48 bytes leftover after parsing attributes in process `syz.1.66'. [ 41.250107][ T3740] loop1: detected capacity change from 0 to 1024 [ 41.256173][ T3740] ext2: Unknown parameter 'dont_hash' [ 41.289511][ T29] audit: type=1400 audit(1789638632.739:307): avc: denied { write } for pid=3741 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.297724][ T29] audit: type=1400 audit(1789638632.749:308): avc: denied { setopt } for pid=3741 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.299721][ T3742] netlink: 'syz.2.65': attribute type 1 has an invalid length. [ 41.306372][ T29] audit: type=1400 audit(1789638632.749:309): avc: denied { create } for pid=3739 comm="syz.1.66" name=800B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.310919][ T29] audit: type=1400 audit(1789638632.749:310): avc: denied { mounton } for pid=3741 comm="syz.2.65" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 41.316602][ T29] audit: type=1400 audit(1789638632.749:311): avc: denied { append } for pid=3739 comm="syz.1.66" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.318886][ T29] audit: type=1400 audit(1789638632.779:312): avc: denied { map } for pid=3739 comm="syz.1.66" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.356130][ T3742] bridge1: entered promiscuous mode [ 41.585600][ T3756] loop1: detected capacity change from 0 to 256 [ 41.590650][ T3756] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.592797][ T3756] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.999884][ T3764] tipc: Started in network mode [ 41.999902][ T3764] tipc: Node identity 1000001, cluster identity 4369 [ 41.999915][ T3764] tipc: Node number set to 16777217 [ 42.000893][ T3764] tipc: New replicast peer: 127.0.0.1 [ 42.001046][ T3764] tipc: Enabled bearer , priority 10 [ 42.183296][ T3775] loop3: detected capacity change from 0 to 8192 [ 42.184936][ T3772] FAULT_INJECTION: forcing a failure. [ 42.184936][ T3772] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.184965][ T3772] CPU: 0 UID: 0 PID: 3772 Comm: syz.1.75 Not tainted syzkaller #0 PREEMPT(lazy) [ 42.184993][ T3772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.185006][ T3772] Call Trace: [ 42.185016][ T3772] [ 42.185026][ T3772] __dump_stack+0x1d/0x30 [ 42.185083][ T3772] dump_stack_lvl+0x95/0xd0 [ 42.185111][ T3772] dump_stack+0x15/0x1b [ 42.185136][ T3772] should_fail_ex+0x262/0x280 [ 42.185164][ T3772] should_fail+0xb/0x20 [ 42.185188][ T3772] should_fail_usercopy+0x1a/0x20 [ 42.185255][ T3772] fpu__restore_sig+0x12a/0xad0 [ 42.185285][ T3772] ? x86_task_fpu+0x36/0x60 [ 42.185313][ T3772] __ia32_sys_rt_sigreturn+0x29b/0x350 [ 42.185387][ T3772] x64_sys_call+0x1532/0x2550 [ 42.185414][ T3772] do_syscall_64+0x112/0x360 [ 42.185516][ T3772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.185538][ T3772] RIP: 0033:0x7efc0e64e157 [ 42.185558][ T3772] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 42.185580][ T3772] RSP: 002b:00007efc0d0a7028 EFLAGS: 00000246 [ 42.185668][ T3772] RAX: 000000000000003d RBX: 00007efc0e8d5fa0 RCX: 00007efc0e64e159 [ 42.185685][ T3772] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000038 [ 42.185701][ T3772] RBP: 00007efc0e6e506b R08: 0000000000000000 R09: 0000000000000000 [ 42.185717][ T3772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.185732][ T3772] R13: 00007efc0e8d6038 R14: 00007efc0e8d5fa0 R15: 00007ffeb1c12e88 [ 42.185752][ T3772] [ 42.199644][ T3779] loop4: detected capacity change from 0 to 256 [ 42.200110][ T3779] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.208465][ T3779] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.370716][ T3780] ip_tables: iptables: counters copy to user failed while replacing table [ 42.463209][ T3775] loop3: p2 p3 p4 [ 42.463424][ T3775] loop3: p2 size 134217728 extends beyond EOD, truncated [ 42.464310][ T3775] loop3: p3 size 11927552 extends beyond EOD, truncated [ 42.535913][ T3786] loop3: detected capacity change from 0 to 512 [ 42.544614][ T3786] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.81: inode has both inline data and extents flags [ 42.544642][ T3786] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.544762][ T3786] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.81: couldn't read orphan inode 15 (err -117) [ 42.544788][ T3786] loop3: lost filesystem error report for type 5 error -117 [ 42.545302][ T3786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.642548][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 42.646759][ T3593] udevd[3593]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 42.647651][ T3594] udevd[3594]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 42.741835][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.761752][ T3798] netlink: 'syz.2.84': attribute type 30 has an invalid length. [ 42.809862][ T3805] loop3: detected capacity change from 0 to 736 [ 42.821001][ T3802] netlink: 52 bytes leftover after parsing attributes in process `syz.0.85'. [ 43.346269][ T3818] FAULT_INJECTION: forcing a failure. [ 43.346269][ T3818] name failslab, interval 1, probability 0, space 0, times 0 [ 43.346305][ T3818] CPU: 1 UID: 0 PID: 3818 Comm: syz.4.90 Not tainted syzkaller #0 PREEMPT(lazy) [ 43.346334][ T3818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.346415][ T3818] Call Trace: [ 43.346423][ T3818] [ 43.346432][ T3818] __dump_stack+0x1d/0x30 [ 43.346465][ T3818] dump_stack_lvl+0x95/0xd0 [ 43.346487][ T3818] dump_stack+0x15/0x1b [ 43.346564][ T3818] should_fail_ex+0x262/0x280 [ 43.346587][ T3818] ? udp_init_sock+0xfa/0x1f0 [ 43.346624][ T3818] should_failslab+0x8c/0xb0 [ 43.346701][ T3818] __kmalloc_noprof+0xd0/0x4d0 [ 43.346731][ T3818] ? udp_init_sock+0xfa/0x1f0 [ 43.346823][ T3818] udp_init_sock+0xfa/0x1f0 [ 43.346858][ T3818] inet_create+0x720/0x790 [ 43.346883][ T3818] __sock_create+0x2e5/0x580 [ 43.346998][ T3818] __sys_socket+0xaf/0x180 [ 43.347031][ T3818] __x64_sys_socket+0x3f/0x50 [ 43.347058][ T3818] x64_sys_call+0x246e/0x2550 [ 43.347151][ T3818] do_syscall_64+0x112/0x360 [ 43.347203][ T3818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.347225][ T3818] RIP: 0033:0x7fadeedfe159 [ 43.347243][ T3818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.347265][ T3818] RSP: 002b:00007faded857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 43.347304][ T3818] RAX: ffffffffffffffda RBX: 00007fadef085fa0 RCX: 00007fadeedfe159 [ 43.347322][ T3818] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 43.347338][ T3818] RBP: 00007fadeee9506b R08: 0000000000000000 R09: 0000000000000000 [ 43.347354][ T3818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.347370][ T3818] R13: 00007fadef086038 R14: 00007fadef085fa0 R15: 00007ffc3216c5e8 [ 43.347393][ T3818] [ 43.551654][ T3830] netlink: 'syz.4.95': attribute type 21 has an invalid length. [ 43.551677][ T3830] IPv6: NLM_F_CREATE should be specified when creating new route [ 43.769703][ T3839] FAULT_INJECTION: forcing a failure. [ 43.769703][ T3839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.769734][ T3839] CPU: 0 UID: 0 PID: 3839 Comm: syz.0.99 Not tainted syzkaller #0 PREEMPT(lazy) [ 43.769758][ T3839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.769798][ T3839] Call Trace: [ 43.769806][ T3839] [ 43.769815][ T3839] __dump_stack+0x1d/0x30 [ 43.769845][ T3839] dump_stack_lvl+0x95/0xd0 [ 43.769914][ T3839] dump_stack+0x15/0x1b [ 43.769938][ T3839] should_fail_ex+0x262/0x280 [ 43.769973][ T3839] should_fail+0xb/0x20 [ 43.769993][ T3839] should_fail_usercopy+0x1a/0x20 [ 43.770123][ T3839] _copy_to_user+0x20/0xa0 [ 43.770152][ T3839] simple_read_from_buffer+0xb5/0x130 [ 43.770194][ T3839] proc_fail_nth_read+0x10e/0x150 [ 43.770227][ T3839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 43.770247][ T3839] vfs_read+0x18e/0x7c0 [ 43.770274][ T3839] ? __rcu_read_unlock+0x4e/0x70 [ 43.770383][ T3839] ? __fget_files+0x184/0x1c0 [ 43.770406][ T3839] ? mutex_lock+0x57/0x90 [ 43.770430][ T3839] ksys_read+0xdc/0x1a0 [ 43.770484][ T3839] __x64_sys_read+0x40/0x50 [ 43.770516][ T3839] x64_sys_call+0x2135/0x2550 [ 43.770589][ T3839] do_syscall_64+0x112/0x360 [ 43.770692][ T3839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.770714][ T3839] RIP: 0033:0x7f915419e98e [ 43.770730][ T3839] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 43.770747][ T3839] RSP: 002b:00007f9152c36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.770812][ T3839] RAX: ffffffffffffffda RBX: 00007f9152c376c0 RCX: 00007f915419e98e [ 43.770829][ T3839] RDX: 000000000000000f RSI: 00007f9152c370a0 RDI: 0000000000000004 [ 43.770845][ T3839] RBP: 00007f9152c37090 R08: 0000000000000000 R09: 0000000000000000 [ 43.770921][ T3839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.770939][ T3839] R13: 00007f9154466038 R14: 00007f9154465fa0 R15: 00007fffc1095278 [ 43.770970][ T3839] [ 43.791092][ T3835] capability: warning: `syz.4.98' uses deprecated v2 capabilities in a way that may be insecure [ 43.816901][ T3840] program syz.2.100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.859564][ T3835] smpboot: CPU 1 is now offline [ 44.015445][ T3840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.100'. [ 44.034584][ T3840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=3840 comm=syz.2.100 [ 44.034604][ T3840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=3840 comm=syz.2.100 [ 44.034619][ T3840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=3840 comm=syz.2.100 [ 44.038274][ T3840] pimreg: entered allmulticast mode [ 44.040786][ T3836] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 44.166530][ T3847] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 44.167293][ T3848] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.102'. [ 44.226968][ T3851] set_capacity_and_notify: 1 callbacks suppressed [ 44.226986][ T3851] loop0: detected capacity change from 0 to 256 [ 44.227517][ T3851] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.229152][ T3851] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 44.913194][ T3871] netlink: 'syz.0.111': attribute type 1 has an invalid length. [ 44.913228][ T3871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 45.276255][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 45.276274][ T29] audit: type=1400 audit(1789638636.729:338): avc: denied { read write } for pid=3873 comm="syz.2.112" name="rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 45.276304][ T29] audit: type=1400 audit(1789638636.729:339): avc: denied { open } for pid=3873 comm="syz.2.112" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 45.399936][ T29] audit: type=1400 audit(1789638636.839:340): avc: denied { map } for pid=3878 comm="syz.3.114" path="/16/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 45.674869][ T29] audit: type=1400 audit(1789638637.119:341): avc: denied { create } for pid=3880 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.705923][ T3883] loop4: detected capacity change from 0 to 1024 [ 45.741290][ T29] audit: type=1400 audit(1789638637.189:342): avc: denied { read } for pid=3880 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.741854][ T3883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.741931][ T3883] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.781779][ T3883] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.116: bg 0: block 112: padding at end of block bitmap is not set [ 45.784437][ T29] audit: type=1400 audit(1789638637.229:343): avc: denied { write } for pid=3881 comm="syz.4.116" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.787795][ T3883] EXT4-fs (loop4): Remounting filesystem read-only [ 45.835537][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.974219][ T3890] loop4: detected capacity change from 0 to 164 [ 45.978417][ T3890] iso9660: Unknown parameter 'iocset' [ 46.240164][ T29] audit: type=1400 audit(1789638637.689:344): avc: denied { bind } for pid=3895 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.240734][ T29] audit: type=1400 audit(1789638637.689:345): avc: denied { listen } for pid=3895 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.242768][ T29] audit: type=1400 audit(1789638637.699:346): avc: denied { accept } for pid=3895 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.242996][ T29] audit: type=1400 audit(1789638637.699:347): avc: denied { write } for pid=3895 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.427713][ T3898] FAULT_INJECTION: forcing a failure. [ 46.427713][ T3898] name failslab, interval 1, probability 0, space 0, times 0 [ 46.427750][ T3898] CPU: 0 UID: 0 PID: 3898 Comm: syz.2.119 Not tainted syzkaller #0 PREEMPT(lazy) [ 46.427781][ T3898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.427793][ T3898] Call Trace: [ 46.427799][ T3898] [ 46.427807][ T3898] __dump_stack+0x1d/0x30 [ 46.427870][ T3898] dump_stack_lvl+0x95/0xd0 [ 46.427898][ T3898] dump_stack+0x15/0x1b [ 46.427923][ T3898] should_fail_ex+0x262/0x280 [ 46.427953][ T3898] should_failslab+0x8c/0xb0 [ 46.428007][ T3898] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 46.428059][ T3898] ? sidtab_sid2str_get+0xa0/0x130 [ 46.428085][ T3898] ? sidtab_sid2str_get+0xa0/0x130 [ 46.428164][ T3898] kmemdup_noprof+0x2b/0x70 [ 46.428192][ T3898] sidtab_sid2str_get+0xa0/0x130 [ 46.428215][ T3898] security_sid_to_context_core+0x179/0x2d0 [ 46.428278][ T3898] security_sid_to_context_force+0x2a/0x40 [ 46.428319][ T3898] selinux_inode_init_security+0x3d5/0x580 [ 46.428411][ T3898] security_inode_init_security+0x13a/0x320 [ 46.428449][ T3898] ? __pfx_shmem_initxattrs+0x10/0x10 [ 46.428473][ T3898] shmem_mknod+0xaa/0x170 [ 46.428562][ T3898] shmem_create+0x34/0x50 [ 46.428587][ T3898] lookup_open+0xc88/0x10d0 [ 46.428631][ T3898] path_openat+0x415/0x10d0 [ 46.428748][ T3898] do_file_open+0x16c/0x290 [ 46.428781][ T3898] do_sys_openat2+0xa0/0x130 [ 46.428806][ T3898] __x64_sys_openat+0xf2/0x120 [ 46.428849][ T3898] x64_sys_call+0x1f72/0x2550 [ 46.428880][ T3898] do_syscall_64+0x112/0x360 [ 46.428943][ T3898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.428993][ T3898] RIP: 0033:0x7f3c1b32e159 [ 46.429013][ T3898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.429105][ T3898] RSP: 002b:00007f3c19d87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 46.429130][ T3898] RAX: ffffffffffffffda RBX: 00007f3c1b5b5fa0 RCX: 00007f3c1b32e159 [ 46.429146][ T3898] RDX: 00000000000026e1 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 46.429163][ T3898] RBP: 00007f3c1b3c506b R08: 0000000000000000 R09: 0000000000000000 [ 46.429181][ T3898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.429221][ T3898] R13: 00007f3c1b5b6038 R14: 00007f3c1b5b5fa0 R15: 00007ffe5b589f28 [ 46.429243][ T3898] [ 46.448977][ T3900] loop4: detected capacity change from 0 to 164 [ 46.452381][ T3900] iso9660: Unknown parameter 'nocompressµ½heck' [ 46.898091][ T3918] random: crng reseeded on system resumption [ 47.047354][ T3923] netlink: 36 bytes leftover after parsing attributes in process `syz.2.127'. [ 49.371895][ T3960] loop0: detected capacity change from 0 to 128 [ 49.404010][ T3960] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.404165][ T3960] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.421784][ T3926] loop3: detected capacity change from 0 to 512 [ 49.495859][ T3303] EXT4-fs error (device loop0): ext4_readdir:226: inode #11: comm syz-executor: path /36/file0/lost+found: directory fails checksum at offset 6144 [ 49.497230][ T3303] EXT4-fs error (device loop0): ext4_empty_dir:3116: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 49.497538][ T3303] EXT4-fs error (device loop0): ext4_readdir:226: inode #11: comm syz-executor: path /36/file0/lost+found: directory fails checksum at offset 6144 [ 49.497917][ T3303] EXT4-fs error (device loop0): ext4_empty_dir:3116: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 49.498321][ T3303] EXT4-fs error (device loop0): ext4_readdir:226: inode #11: comm syz-executor: path /36/file0/lost+found: directory fails checksum at offset 6144 [ 49.498637][ T3303] EXT4-fs error (device loop0): ext4_empty_dir:3116: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 49.498882][ T3303] EXT4-fs error (device loop0): ext4_readdir:226: inode #11: comm syz-executor: path /36/file0/lost+found: directory fails checksum at offset 6144 [ 49.499298][ T3303] EXT4-fs error (device loop0): ext4_empty_dir:3116: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 49.499623][ T3303] EXT4-fs error (device loop0): ext4_readdir:226: inode #11: comm syz-executor: path /36/file0/lost+found: directory fails checksum at offset 6144 [ 49.499983][ T3303] EXT4-fs error (device loop0): ext4_empty_dir:3116: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 49.610699][ T3926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.614158][ T3926] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.782305][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.869676][ T3967] loop4: detected capacity change from 0 to 2048 [ 50.042098][ T3967] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 50.042195][ T3967] FAT-fs (loop4): Filesystem has been set read-only [ 50.116346][ T3967] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 50.116945][ T3967] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0000 l0 [ 50.236005][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.254329][ T391] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.359194][ T391] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.375376][ T3981] netlink: 165 bytes leftover after parsing attributes in process `syz.3.144'. [ 50.434275][ T391] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.508686][ T391] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.525410][ T3988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.150'. [ 50.580809][ T3990] loop3: detected capacity change from 0 to 512 [ 50.592256][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 50.592273][ T29] audit: type=1400 audit(1789638642.049:483): avc: denied { ioctl } for pid=3987 comm="syz.4.150" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5677 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.697956][ T391] bridge_slave_1: left allmulticast mode [ 50.698032][ T391] bridge_slave_1: left promiscuous mode [ 50.698135][ T391] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.713805][ T391] bridge_slave_0: left allmulticast mode [ 50.713826][ T391] bridge_slave_0: left promiscuous mode [ 50.713947][ T391] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.801447][ T29] audit: type=1400 audit(1789638642.249:484): avc: denied { create } for pid=3978 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.914340][ T29] audit: type=1400 audit(1789638642.349:485): avc: denied { write } for pid=4001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.915805][ T29] audit: type=1400 audit(1789638642.369:486): avc: denied { read } for pid=3978 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 51.009055][ T3992] loop3: detected capacity change from 0 to 512 [ 51.021409][ T29] audit: type=1400 audit(1789638642.449:487): avc: denied { bind } for pid=3978 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.051977][ T29] audit: type=1400 audit(1789638642.509:488): avc: denied { map } for pid=3978 comm="syz.2.146" path="socket:[5825]" dev="sockfs" ino=5825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.052086][ T29] audit: type=1400 audit(1789638642.509:489): avc: denied { read write } for pid=3978 comm="syz.2.146" path="socket:[5825]" dev="sockfs" ino=5825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.105518][ T391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.151659][ T391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.162902][ T391] bond0 (unregistering): Released all slaves [ 51.166029][ T29] audit: type=1400 audit(1789638642.619:490): avc: denied { write } for pid=4024 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.204173][ T3024] 8021q: adding VLAN 0 to HW filter on device eth1 [ 51.323546][ T4028] FAULT_INJECTION: forcing a failure. [ 51.323546][ T4028] name failslab, interval 1, probability 0, space 0, times 0 [ 51.323577][ T4028] CPU: 1 UID: 0 PID: 4028 Comm: syz.3.153 Not tainted syzkaller #0 PREEMPT(lazy) [ 51.323606][ T4028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.323696][ T4028] Call Trace: [ 51.323714][ T4028] [ 51.323724][ T4028] __dump_stack+0x1d/0x30 [ 51.323757][ T4028] dump_stack_lvl+0x95/0xd0 [ 51.323781][ T4028] dump_stack+0x15/0x1b [ 51.323804][ T4028] should_fail_ex+0x262/0x280 [ 51.323904][ T4028] ? tracepoint_add_func+0x201/0x770 [ 51.323929][ T4028] should_failslab+0x8c/0xb0 [ 51.323956][ T4028] __kmalloc_noprof+0xd0/0x4d0 [ 51.323987][ T4028] ? tracepoint_add_func+0x201/0x770 [ 51.324104][ T4028] ? __pfx_perf_trace_sys_enter+0x10/0x10 [ 51.324128][ T4028] tracepoint_add_func+0x201/0x770 [ 51.324153][ T4028] ? pcpu_memcg_post_alloc_hook+0x5e/0x190 [ 51.324286][ T4028] ? __pfx_perf_trace_sys_enter+0x10/0x10 [ 51.324310][ T4028] tracepoint_probe_register+0x5b/0x90 [ 51.324337][ T4028] ? __pfx_perf_trace_sys_enter+0x10/0x10 [ 51.324437][ T4028] ? __pfx_perf_trace_sys_enter+0x10/0x10 [ 51.324458][ T4028] trace_event_reg+0x15c/0x190 [ 51.324490][ T4028] perf_trace_event_init+0x331/0x6d0 [ 51.324600][ T4028] perf_trace_init+0x15f/0x1d0 [ 51.324630][ T4028] perf_tp_event_init+0x68/0xc0 [ 51.324662][ T4028] perf_try_init_event+0x254/0x6e0 [ 51.324773][ T4028] perf_event_alloc+0xb13/0x19e0 [ 51.324811][ T4028] __se_sys_perf_event_open+0x674/0x1280 [ 51.324875][ T4028] ? do_futex+0x391/0x460 [ 51.324908][ T4028] __x64_sys_perf_event_open+0x67/0x80 [ 51.324982][ T4028] x64_sys_call+0x1f25/0x2550 [ 51.325010][ T4028] do_syscall_64+0x112/0x360 [ 51.325095][ T4028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.325122][ T4028] RIP: 0033:0x7fc20a79e159 [ 51.325143][ T4028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.325165][ T4028] RSP: 002b:00007fc2091f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 51.325255][ T4028] RAX: ffffffffffffffda RBX: 00007fc20aa25fa0 RCX: 00007fc20a79e159 [ 51.325335][ T4028] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000a40 [ 51.325378][ T4028] RBP: 00007fc20a83506b R08: 0000000000000009 R09: 0000000000000000 [ 51.325391][ T4028] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 51.325404][ T4028] R13: 00007fc20aa26038 R14: 00007fc20aa25fa0 R15: 00007ffde58631c8 [ 51.325427][ T4028] [ 51.553061][ T391] tipc: Disabling bearer [ 51.553083][ T391] tipc: Left network mode [ 51.652180][ T3989] lo speed is unknown, defaulting to 1000 [ 51.684333][ T391] hsr_slave_0: left promiscuous mode [ 51.684663][ T391] hsr_slave_1: left promiscuous mode [ 51.685089][ T391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.685105][ T391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.686708][ T391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.686723][ T391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.733755][ T391] veth1_macvtap: left promiscuous mode [ 51.733802][ T391] veth0_macvtap: left promiscuous mode [ 51.733854][ T391] veth1_vlan: left promiscuous mode [ 51.733891][ T391] veth0_vlan: left promiscuous mode [ 51.799108][ T29] audit: type=1400 audit(1789638643.249:491): avc: denied { write } for pid=4032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.824829][ T4051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.156'. [ 51.856112][ T29] audit: type=1400 audit(1789638643.309:492): avc: denied { write } for pid=4052 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.914025][ T391] team0 (unregistering): Port device team_slave_1 removed [ 51.928242][ T391] team0 (unregistering): Port device team_slave_0 removed [ 52.048806][ T4063] netlink: 44 bytes leftover after parsing attributes in process `syz.3.156'. [ 52.113697][ T4065] netlink: 44 bytes leftover after parsing attributes in process `syz.3.156'. [ 52.471970][ T3024] 8021q: adding VLAN 0 to HW filter on device eth2 [ 52.478027][ T4063] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.478276][ T4063] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.755941][ T3989] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.755978][ T3989] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.756036][ T3989] bridge_slave_0: entered allmulticast mode [ 52.762500][ T3989] bridge_slave_0: entered promiscuous mode [ 52.793850][ T3989] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.793883][ T3989] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.793961][ T3989] bridge_slave_1: entered allmulticast mode [ 52.794569][ T3989] bridge_slave_1: entered promiscuous mode [ 52.844033][ T3989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.845290][ T3989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.898011][ T3989] team0: Port device team_slave_0 added [ 52.906129][ T3989] team0: Port device team_slave_1 added [ 52.960126][ T3024] 8021q: adding VLAN 0 to HW filter on device eth3 [ 52.966407][ T3989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.966422][ T3989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.966488][ T3989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.968769][ T3989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.968782][ T3989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.968864][ T3989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.007651][ T4105] loop4: detected capacity change from 0 to 512 [ 53.062372][ T4105] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.162: Unrecognised inode hash code 255 [ 53.062401][ T4105] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.162: Corrupt directory, running e2fsck is recommended [ 53.099213][ T4112] loop3: detected capacity change from 0 to 512 [ 53.104201][ T3989] hsr_slave_0: entered promiscuous mode [ 53.113129][ T3989] hsr_slave_1: entered promiscuous mode [ 53.113517][ T3989] debugfs: 'hsr0' already exists in 'hsr' [ 53.113531][ T3989] Cannot create hsr debugfs directory [ 53.140338][ T4112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.140396][ T4112] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.220547][ T4105] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 53.220604][ T4105] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.162: corrupted in-inode xattr: invalid ea_ino [ 53.220681][ T4105] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.221378][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 53.221418][ C0] EXT4-fs (loop4): initial error at time 1789638644: ext4_iget_extra_inode:5210: inode 15 [ 53.221448][ C0] EXT4-fs (loop4): last error at time 1789638644: ext4_iget_extra_inode:5210: inode 15 [ 53.222057][ T4105] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.162: couldn't read orphan inode 15 (err -117) [ 53.222087][ T4105] loop4: lost filesystem error report for type 5 error -117 [ 53.224242][ T4105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.251055][ T4105] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.162: Unrecognised inode hash code 255 [ 53.251085][ T4105] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.162: Corrupt directory, running e2fsck is recommended [ 53.373569][ T4131] netlink: 'syz.4.162': attribute type 3 has an invalid length. [ 53.373590][ T4131] netlink: 132 bytes leftover after parsing attributes in process `syz.4.162'. [ 53.434496][ T4131] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 53.434763][ T4131] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.162: bg 0: block 255: padding at end of block bitmap is not set [ 53.434925][ T3024] 8021q: adding VLAN 0 to HW filter on device eth4 [ 53.527237][ T3989] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 53.577607][ T4105] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.162: Unrecognised inode hash code 255 [ 53.577637][ T4105] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.162: Corrupt directory, running e2fsck is recommended [ 53.667230][ T4105] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.162: Unrecognised inode hash code 255 [ 53.667319][ T4105] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.162: Corrupt directory, running e2fsck is recommended [ 53.667355][ T4105] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 4: comm syz.4.162: bad entry in directory: inode out of bounds - offset=0, inode=655359, rec_len=1024, size=1024 fake=0 [ 53.725720][ T4126] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 4: comm syz.4.162: bad entry in directory: inode out of bounds - offset=0, inode=655359, rec_len=1024, size=1024 fake=0 [ 53.895342][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.896631][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.913508][ T3989] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 53.938476][ T3989] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 53.947322][ T3989] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.949584][ T3989] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 53.966717][ T3989] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.969118][ T3989] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 53.978879][ T3989] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.144475][ T4157] loop3: detected capacity change from 0 to 512 [ 54.173320][ T3989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.194931][ T3989] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.199297][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.199332][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.206304][ T391] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.206339][ T391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.213600][ T4160] sock: sock_timestamping_bind_phc: sock not bind to device [ 54.289805][ T4167] bridge1: entered promiscuous mode [ 54.289827][ T4167] bridge1: entered allmulticast mode [ 54.530006][ T3989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.769436][ T3989] veth0_vlan: entered promiscuous mode [ 54.781285][ T3989] veth1_vlan: entered promiscuous mode [ 54.809409][ T3989] veth0_macvtap: entered promiscuous mode [ 54.819183][ T3989] veth1_macvtap: entered promiscuous mode [ 54.839950][ T3989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.854977][ T3989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.867763][ T4153] loop4: detected capacity change from 0 to 512 [ 54.936445][ T391] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.939535][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.939576][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.939610][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.940164][ T4153] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.941124][ T4153] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.018869][ T4153] EXT4-fs (loop4): 1 truncate cleaned up [ 55.020580][ T4153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.138730][ T4196] netlink: 96 bytes leftover after parsing attributes in process `syz.3.171'. [ 55.213722][ T4153] random: crng reseeded on system resumption [ 55.551806][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.620442][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 55.620463][ T29] audit: type=1400 audit(1789638647.069:736): avc: denied { ioctl } for pid=4202 comm="syz.3.172" path="socket:[8207]" dev="sockfs" ino=8207 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.620848][ T29] audit: type=1326 audit(1789638647.069:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4202 comm="syz.3.172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20a79e159 code=0x7ffc0000 [ 55.620947][ T29] audit: type=1326 audit(1789638647.069:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4202 comm="syz.3.172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20a79e159 code=0x7ffc0000 [ 55.621074][ T29] audit: type=1326 audit(1789638647.069:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4202 comm="syz.3.172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20a79e159 code=0x7ffc0000 [ 55.622153][ T4207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.174'. [ 55.622178][ T4207] netlink: 'syz.5.174': attribute type 19 has an invalid length. [ 55.622191][ T4207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.174'. [ 55.652568][ T29] audit: type=1326 audit(1789638647.079:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4202 comm="syz.3.172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fc20a79e159 code=0x7ffc0000 [ 55.652686][ T29] audit: type=1326 audit(1789638647.079:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4202 comm="syz.3.172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20a79e159 code=0x7ffc0000 [ 55.652761][ T29] audit: type=1326 audit(1789638647.079:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4202 comm="syz.3.172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20a79e159 code=0x7ffc0000 [ 55.652861][ T29] audit: type=1326 audit(1789638647.079:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4202 comm="syz.3.172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20a79e159 code=0x7ffc0000 [ 55.652889][ T29] audit: type=1326 audit(1789638647.079:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4202 comm="syz.3.172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20a79e159 code=0x7ffc0000 [ 55.652916][ T29] audit: type=1326 audit(1789638647.079:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4202 comm="syz.3.172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fc20a79e159 code=0x7ffc0000 [ 55.814053][ T313] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.814780][ T313] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.815118][ T313] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.842909][ T391] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.911080][ T4225] loop2: detected capacity change from 0 to 512 [ 55.957569][ T4225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.957694][ T4225] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.997666][ T4234] netlink: 36 bytes leftover after parsing attributes in process `syz.3.179'. [ 56.048468][ T4237] netlink: 40 bytes leftover after parsing attributes in process `syz.5.180'. [ 56.157243][ T4242] loop4: detected capacity change from 0 to 764 [ 56.223029][ T4248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.183'. [ 56.223053][ T4248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.183'. [ 56.223069][ T4248] netlink: 'syz.3.183': attribute type 4 has an invalid length. [ 56.247173][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.324873][ T4252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.186'. [ 56.351657][ T4248] lo speed is unknown, defaulting to 1000 [ 56.823105][ T4272] netlink: 'syz.3.191': attribute type 11 has an invalid length. [ 56.909666][ T4282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4282 comm=syz.4.193 [ 56.913348][ T4291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4291 comm=syz.3.194 [ 58.394037][ T4301] lo speed is unknown, defaulting to 1000 [ 58.525082][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.525115][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.525172][ T4301] bridge_slave_0: entered allmulticast mode [ 58.525704][ T4301] bridge_slave_0: entered promiscuous mode [ 58.553177][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.553208][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.553275][ T4301] bridge_slave_1: entered allmulticast mode [ 58.553755][ T4301] bridge_slave_1: entered promiscuous mode [ 58.591460][ T4301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.592526][ T4301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.623040][ T4301] team0: Port device team_slave_0 added [ 58.624161][ T4301] team0: Port device team_slave_1 added [ 58.644749][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.644765][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.644798][ T4301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.645372][ T4301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.645386][ T4301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.645417][ T4301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.717325][ T4301] hsr_slave_0: entered promiscuous mode [ 58.717748][ T4301] hsr_slave_1: entered promiscuous mode [ 58.721009][ T4301] debugfs: 'hsr0' already exists in 'hsr' [ 58.721023][ T4301] Cannot create hsr debugfs directory [ 58.823669][ T4301] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 59.843755][ T4301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.881101][ T4301] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 59.892868][ T4301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.893517][ T4301] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 59.897549][ T4301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.908878][ T4301] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 59.917545][ T4301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.972659][ T4301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.978957][ T4332] loop5: detected capacity change from 0 to 512 [ 59.994668][ T4332] EXT4-fs warning (device loop5): read_mmp_block:110: Error -74 while reading MMP block 17 [ 59.996074][ T4301] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.023254][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.023289][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.031979][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.032015][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.105733][ T4342] __nla_validate_parse: 1 callbacks suppressed [ 60.105754][ T4342] netlink: 24 bytes leftover after parsing attributes in process `syz.5.204'. [ 60.105837][ T4342] netlink: 24 bytes leftover after parsing attributes in process `syz.5.204'. [ 60.143277][ T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.214843][ T4350] syz.5.206 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 60.219927][ T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.271818][ T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.341502][ T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.447001][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.577730][ T41] bridge_slave_1: left allmulticast mode [ 60.577755][ T41] bridge_slave_1: left promiscuous mode [ 60.577920][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.578399][ T4374] loop3: detected capacity change from 0 to 128 [ 60.607237][ T4374] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.607573][ T4374] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.608077][ T41] bridge_slave_0: left allmulticast mode [ 60.608096][ T41] bridge_slave_0: left promiscuous mode [ 60.608338][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.632878][ T4374] netlink: 168 bytes leftover after parsing attributes in process `syz.3.211'. [ 60.952220][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.955223][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.956248][ T41] bond0 (unregistering): Released all slaves [ 60.973018][ T4374] C: renamed from veth1_to_team (while UP) [ 61.027528][ T4340] loop2: detected capacity change from 0 to 512 [ 61.030702][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.092249][ T41] hsr_slave_0: left promiscuous mode [ 61.092636][ T41] hsr_slave_1: left promiscuous mode [ 61.093053][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.093069][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.093347][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.093394][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.097938][ T41] veth0_macvtap: left promiscuous mode [ 61.097996][ T41] veth1_vlan: left promiscuous mode [ 61.098093][ T41] veth0_vlan: left promiscuous mode [ 61.229171][ T4393] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 61.229321][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 61.229338][ T29] audit: type=1400 audit(1789638652.679:769): avc: denied { write } for pid=4392 comm="syz.5.213" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 61.268786][ T41] team0 (unregistering): Port device team_slave_1 removed [ 61.280060][ T41] team0 (unregistering): Port device team_slave_0 removed [ 61.317864][ T29] audit: type=1400 audit(1789638652.769:770): avc: denied { write } for pid=4384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.363560][ T31] smc: removing ib device syz0 [ 61.373105][ T1511] infiniband syz0: ib_query_port failed (-19) [ 61.381723][ T29] audit: type=1400 audit(1789638652.829:771): avc: denied { write } for pid=4403 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.429696][ T4301] veth0_vlan: entered promiscuous mode [ 61.437680][ T4301] veth1_vlan: entered promiscuous mode [ 61.443746][ T4340] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.205: bg 0: block 5: invalid block bitmap [ 61.444057][ T4340] loop2: lost filesystem error report for type 5 error -117 [ 61.446324][ T4340] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 61.446356][ T4340] loop2: lost filesystem error report for type 5 error -117 [ 61.447958][ T4340] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.205: invalid indirect mapped block 3 (level 2) [ 61.448087][ T4340] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 61.455473][ T4340] EXT4-fs (loop2): 1 orphan inode deleted [ 61.455771][ T4340] EXT4-fs (loop2): 1 truncate cleaned up [ 61.477985][ T3024] 8021q: adding VLAN 0 to HW filter on device eth5 [ 61.494494][ T4301] veth0_macvtap: entered promiscuous mode [ 61.499290][ T4301] veth1_macvtap: entered promiscuous mode [ 61.517391][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.525319][ T4301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.572772][ T313] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.572888][ T313] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.572925][ T313] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.573015][ T313] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.591091][ T29] audit: type=1400 audit(1789638653.039:772): avc: denied { mounton } for pid=4301 comm="syz-executor" path="/root/syzkaller.Mffzjo/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 61.685954][ T29] audit: type=1400 audit(1789638653.139:773): avc: denied { create } for pid=4420 comm="syz.5.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 61.749914][ T29] audit: type=1400 audit(1789638653.199:774): avc: denied { write } for pid=4412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.763912][ T4422] loop5: detected capacity change from 0 to 4096 [ 61.795416][ T4422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.803688][ T29] audit: type=1400 audit(1789638653.259:775): avc: denied { write } for pid=4432 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.815051][ T29] audit: type=1400 audit(1789638653.269:776): avc: denied { relabelfrom } for pid=4428 comm="syz.6.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 61.815078][ T29] audit: type=1400 audit(1789638653.269:777): avc: denied { relabelto } for pid=4428 comm="syz.6.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 61.837421][ T4340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.904989][ T3989] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.963692][ T3024] 8021q: adding VLAN 0 to HW filter on device eth6 [ 61.985484][ T29] audit: type=1400 audit(1789638653.439:778): avc: denied { read write } for pid=4439 comm="syz.5.220" name="rdma_cm" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 62.119496][ T4454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.223'. [ 62.211686][ T3024] 8021q: adding VLAN 0 to HW filter on device eth7 [ 62.256280][ T4468] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 62.256303][ T4468] iwpm_mapping_info_cb: Unable to parse nlmsg [ 62.529934][ T3024] 8021q: adding VLAN 0 to HW filter on device eth8 [ 62.569818][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.646733][ T4502] loop5: detected capacity change from 0 to 512 [ 62.659851][ T4502] ext3: Invalid uid '0x00000000ffffffff' [ 62.707725][ T4503] loop5: detected capacity change from 0 to 512 [ 62.709540][ T4503] ext4: Unknown parameter 'uid<00000000000000000000' [ 63.233640][ T4529] netlink: 20 bytes leftover after parsing attributes in process `syz.6.238'. [ 63.573049][ T4537] mmap: syz.5.240 (4537) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.631519][ T4547] netlink: 24 bytes leftover after parsing attributes in process `syz.6.245'. [ 63.679278][ T4549] FAULT_INJECTION: forcing a failure. [ 63.679278][ T4549] name failslab, interval 1, probability 0, space 0, times 0 [ 63.679311][ T4549] CPU: 0 UID: 0 PID: 4549 Comm: syz.2.246 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.679403][ T4549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.679418][ T4549] Call Trace: [ 63.679427][ T4549] [ 63.679441][ T4549] __dump_stack+0x1d/0x30 [ 63.679515][ T4549] dump_stack_lvl+0x95/0xd0 [ 63.679540][ T4549] dump_stack+0x15/0x1b [ 63.679563][ T4549] should_fail_ex+0x262/0x280 [ 63.679591][ T4549] ? percpu_ref_init+0x9c/0x250 [ 63.679674][ T4549] should_failslab+0x8c/0xb0 [ 63.679708][ T4549] __kmalloc_cache_noprof+0x7a/0x400 [ 63.679742][ T4549] ? percpu_ref_init+0x33/0x250 [ 63.679765][ T4549] ? percpu_ref_init+0x9c/0x250 [ 63.679798][ T4549] ? __pfx_css_release+0x10/0x10 [ 63.679834][ T4549] percpu_ref_init+0x9c/0x250 [ 63.679865][ T4549] cgroup_mkdir+0x1b2/0xcb0 [ 63.679894][ T4549] ? __pfx_cgroup_mkdir+0x10/0x10 [ 63.679921][ T4549] kernfs_iop_mkdir+0x11e/0x1c0 [ 63.679948][ T4549] vfs_mkdir+0x291/0x3e0 [ 63.680001][ T4549] filename_mkdirat+0x138/0x300 [ 63.680040][ T4549] __se_sys_mkdirat+0x32/0xf0 [ 63.680074][ T4549] __x64_sys_mkdirat+0x43/0x50 [ 63.680108][ T4549] x64_sys_call+0x368/0x2550 [ 63.680201][ T4549] do_syscall_64+0x112/0x360 [ 63.680241][ T4549] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 63.680273][ T4549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.680330][ T4549] RIP: 0033:0x7f3c1b32e159 [ 63.680349][ T4549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.680370][ T4549] RSP: 002b:00007f3c19d87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 63.680396][ T4549] RAX: ffffffffffffffda RBX: 00007f3c1b5b5fa0 RCX: 00007f3c1b32e159 [ 63.680412][ T4549] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 63.680505][ T4549] RBP: 00007f3c1b3c506b R08: 0000000000000000 R09: 0000000000000000 [ 63.680521][ T4549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.680554][ T4549] R13: 00007f3c1b5b6038 R14: 00007f3c1b5b5fa0 R15: 00007ffe5b589f28 [ 63.680576][ T4549] [ 64.169097][ T4562] smc: net device lo applied user defined pnetid SYZ0 [ 64.414276][ T4592] FAULT_INJECTION: forcing a failure. [ 64.414276][ T4592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.414350][ T4592] CPU: 1 UID: 0 PID: 4592 Comm: syz.5.256 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.414380][ T4592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.414436][ T4592] Call Trace: [ 64.414445][ T4592] [ 64.414454][ T4592] __dump_stack+0x1d/0x30 [ 64.414523][ T4592] dump_stack_lvl+0x95/0xd0 [ 64.414548][ T4592] dump_stack+0x15/0x1b [ 64.414571][ T4592] should_fail_ex+0x262/0x280 [ 64.414598][ T4592] should_fail+0xb/0x20 [ 64.414625][ T4592] should_fail_usercopy+0x1a/0x20 [ 64.414691][ T4592] _copy_from_user+0x1c/0xb0 [ 64.414722][ T4592] __se_sys_io_uring_setup+0x11f/0x1e0 [ 64.414757][ T4592] __x64_sys_io_uring_setup+0x31/0x40 [ 64.414870][ T4592] x64_sys_call+0x1fbf/0x2550 [ 64.414894][ T4592] do_syscall_64+0x112/0x360 [ 64.414975][ T4592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.415001][ T4592] RIP: 0033:0x7f59c255e159 [ 64.415090][ T4592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.415108][ T4592] RSP: 002b:00007f59c0fb6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 64.415138][ T4592] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f59c255e159 [ 64.415153][ T4592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000010 [ 64.415168][ T4592] RBP: 00007f59c25f506b R08: 0000000000000000 R09: 0000000000000000 [ 64.415190][ T4592] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 64.415205][ T4592] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffea43af228 [ 64.415226][ T4592] [ 64.476120][ T4602] loop2: detected capacity change from 0 to 512 [ 64.479860][ T4602] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.258: invalid block [ 64.479892][ T4602] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 64.480067][ T4602] EXT4-fs error (device loop2) in ext4_process_orphan:346: IO failure [ 64.480115][ T4602] loop2: lost filesystem error report for type 5 error -5 [ 64.480339][ T4602] EXT4-fs (loop2): 2 truncates cleaned up [ 64.480750][ T4602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.596844][ T4608] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.258: bg 0: block 5: invalid block bitmap [ 64.612543][ T4608] syz.2.258 (4608) used greatest stack depth: 9160 bytes left [ 64.728975][ T4611] FAULT_INJECTION: forcing a failure. [ 64.728975][ T4611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.729007][ T4611] CPU: 1 UID: 0 PID: 4611 Comm: syz.6.260 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.729038][ T4611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.729052][ T4611] Call Trace: [ 64.729062][ T4611] [ 64.729105][ T4611] __dump_stack+0x1d/0x30 [ 64.729136][ T4611] dump_stack_lvl+0x95/0xd0 [ 64.729211][ T4611] dump_stack+0x15/0x1b [ 64.729232][ T4611] should_fail_ex+0x262/0x280 [ 64.729258][ T4611] should_fail+0xb/0x20 [ 64.729328][ T4611] should_fail_usercopy+0x1a/0x20 [ 64.729353][ T4611] _copy_from_user+0x1c/0xb0 [ 64.729386][ T4611] sk_getsockopt+0xcf/0x1a30 [ 64.729438][ T4611] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 64.729571][ T4611] ? should_fail_ex+0xdb/0x280 [ 64.729601][ T4611] do_sock_getsockopt+0x179/0x570 [ 64.729642][ T4611] ? vfs_write+0x850/0x9a0 [ 64.729696][ T4611] __x64_sys_getsockopt+0x11d/0x1a0 [ 64.729729][ T4611] x64_sys_call+0x1032/0x2550 [ 64.729792][ T4611] do_syscall_64+0x112/0x360 [ 64.729878][ T4611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.729899][ T4611] RIP: 0033:0x7f3dedf1e159 [ 64.729916][ T4611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.729935][ T4611] RSP: 002b:00007f3dec977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 64.730007][ T4611] RAX: ffffffffffffffda RBX: 00007f3dee1a5fa0 RCX: 00007f3dedf1e159 [ 64.730025][ T4611] RDX: 000000000000001c RSI: 0000000000000001 RDI: 0000000000000003 [ 64.730084][ T4611] RBP: 00007f3dec977090 R08: 0000200000000080 R09: 0000000000000000 [ 64.730097][ T4611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.730109][ T4611] R13: 00007f3dee1a6038 R14: 00007f3dee1a5fa0 R15: 00007ffdd17e5408 [ 64.730128][ T4611] [ 65.086292][ T4621] loop4: detected capacity change from 0 to 128 [ 65.094410][ T4617] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 65.108406][ T4618] loop6: detected capacity change from 0 to 4096 [ 65.163434][ T4622] loop5: detected capacity change from 0 to 512 [ 65.215679][ T4622] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.259: iget: bad i_size value: 38620345925642 [ 65.215722][ T4622] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.216596][ T4622] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.259: couldn't read orphan inode 15 (err -117) [ 65.216676][ T4622] loop5: lost filesystem error report for type 5 error -117 [ 65.218860][ T4618] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.219505][ T4622] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.509801][ T4301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.752629][ T4645] loop3: detected capacity change from 0 to 256 [ 65.779566][ T3989] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.833073][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.938040][ T4650] loop5: detected capacity change from 0 to 512 [ 65.949330][ T4650] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.267: Unrecognised inode hash code 255 [ 65.949377][ T4650] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.267: Corrupt directory, running e2fsck is recommended [ 66.021173][ T4650] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 66.021226][ T4650] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.267: corrupted in-inode xattr: invalid ea_ino [ 66.021328][ T4650] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.051370][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 66.051394][ C0] EXT4-fs (loop5): initial error at time 1789638657: ext4_iget_extra_inode:5210: inode 15 [ 66.051434][ C0] EXT4-fs (loop5): last error at time 1789638657: ext4_iget_extra_inode:5210: inode 15 [ 66.090565][ T4650] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.267: couldn't read orphan inode 15 (err -117) [ 66.090597][ T4650] loop5: lost filesystem error report for type 5 error -117 [ 66.091213][ T4650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.245361][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 66.245380][ T29] audit: type=1400 audit(1789638657.699:978): avc: denied { write } for pid=4671 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.396355][ T4682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.273'. [ 66.413967][ T3989] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.451478][ T29] audit: type=1400 audit(1789638657.899:979): avc: denied { connect } for pid=4680 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.512641][ T4687] pimreg: tun_chr_ioctl cmd 1074025681 [ 66.520370][ T29] audit: type=1400 audit(1789638657.969:980): avc: denied { mount } for pid=4688 comm="syz.6.275" name="/" dev="ramfs" ino=9019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 66.553735][ T4695] cgroup2: Unknown parameter 'defcontext÷ŸÕL' [ 66.612412][ T4692] netlink: 80 bytes leftover after parsing attributes in process `syz.4.273'. [ 66.642128][ T4682] netlink: 32 bytes leftover after parsing attributes in process `syz.4.273'. [ 66.676324][ T29] audit: type=1400 audit(1789638658.129:981): avc: denied { write } for pid=4676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.716448][ T29] audit: type=1400 audit(1789638658.169:982): avc: denied { create } for pid=4705 comm="syz.5.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 66.742437][ T29] audit: type=1400 audit(1789638658.199:983): avc: denied { sys_admin } for pid=4705 comm="syz.5.279" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 66.748813][ T29] audit: type=1400 audit(1789638658.199:984): avc: denied { write } for pid=4707 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.143519][ T4716] Illegal XDP return value 4291424256 on prog (id 42) dev N/A, expect packet loss! [ 67.631657][ T4721] netlink: 'syz.5.283': attribute type 1 has an invalid length. [ 67.631676][ T4721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.283'. [ 67.751418][ T4732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.284'. [ 67.751451][ T4732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.284'. [ 67.775656][ T4732] ip6gretap0: entered promiscuous mode [ 67.809805][ T4732] syz_tun: entered promiscuous mode [ 67.840975][ T4727] netlink: 'syz.3.285': attribute type 11 has an invalid length. [ 67.866822][ T4740] loop6: detected capacity change from 0 to 512 [ 67.872858][ T4740] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 67.892188][ T4740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 68.045987][ T29] audit: type=1400 audit(1789638659.499:985): avc: denied { append } for pid=4741 comm="syz.4.289" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 68.047974][ T4751] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 68.167771][ T29] audit: type=1326 audit(1789638659.619:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.6.294" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dedf1e159 code=0x7ffc0000 [ 68.167828][ T29] audit: type=1326 audit(1789638659.619:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.6.294" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dedf1e159 code=0x7ffc0000 [ 68.197500][ T4753] capability: warning: `syz.5.293' uses 32-bit capabilities (legacy support in use) [ 68.270985][ T4756] sch_fq: defrate 2 ignored. [ 68.508362][ T4765] Invalid argument reading file caps for ./file0 [ 68.629895][ T4770] netlink: 24 bytes leftover after parsing attributes in process `syz.6.297'. [ 68.722933][ T4777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.296'. [ 68.729752][ T4772] netlink: 'syz.2.298': attribute type 1 has an invalid length. [ 68.729808][ T4772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 68.823288][ T4751] loop4: detected capacity change from 0 to 1024 [ 68.861766][ T4751] EXT4-fs: Ignoring removed bh option [ 68.946146][ T4797] loop5: detected capacity change from 0 to 512 [ 68.946749][ T4797] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.964797][ T4797] EXT4-fs (loop5): orphan cleanup on readonly fs [ 68.964819][ T4797] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 68.965175][ T4797] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.300: invalid indirect mapped block 1819239214 (level 1) [ 68.965206][ T4797] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 68.965369][ T4797] EXT4-fs (loop5): Remounting filesystem read-only [ 68.965532][ T4797] EXT4-fs (loop5): 1 truncate cleaned up [ 68.966037][ T4797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.093520][ T4794] dummy0: entered allmulticast mode [ 69.112316][ T4797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.300'. [ 69.113107][ T4793] dummy0: left allmulticast mode [ 69.202279][ T3989] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.243225][ T4815] loop3: detected capacity change from 0 to 512 [ 69.251401][ T4815] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.278778][ T4815] EXT4-fs (loop3): 1 truncate cleaned up [ 69.279188][ T4815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.288925][ T4817] loop5: detected capacity change from 0 to 512 [ 69.325724][ T4817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.325789][ T4817] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.522726][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.565277][ T4832] loop6: p1 p2 < > p3 < p5 p6 > p4 [ 69.565291][ T4832] loop6: partition table partially beyond EOD, truncated [ 69.724661][ T4832] loop6: p2 start 4278190080 is beyond EOD, truncated [ 69.725724][ T4832] loop6: p4 size 8192 extends beyond EOD, truncated [ 69.755947][ T4832] loop6: p6 size 8192 extends beyond EOD, truncated [ 69.869785][ T2985] loop6: p1 p2 < > p3 < p5 p6 > p4 [ 69.869809][ T2985] loop6: partition table partially beyond EOD, truncated [ 69.893763][ T2985] loop6: p2 start 4278190080 is beyond EOD, truncated [ 69.910888][ T2985] loop6: p4 size 8192 extends beyond EOD, truncated [ 69.958280][ T2985] loop6: p6 size 8192 extends beyond EOD, truncated [ 70.263862][ T4751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.428833][ T4858] set_capacity_and_notify: 2 callbacks suppressed [ 70.428862][ T4858] loop3: detected capacity change from 0 to 512 [ 70.460088][ T4858] EXT4-fs: Ignoring removed nobh option [ 70.481985][ T3594] udevd[3594]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 70.483369][ T4630] udevd[4630]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 70.483920][ T3593] udevd[3593]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 70.502699][ T4859] device-mapper: ioctl: name not supplied when creating device [ 70.534195][ T4858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.534272][ T4858] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.538096][ T4858] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #2: comm syz.3.313: corrupted inode contents [ 70.581010][ T4858] EXT4-fs (loop3): Remounting filesystem read-only [ 70.665066][ T3299] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 70.665664][ T3299] EXT4-fs error (device loop4): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /69/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 70.669401][ T3299] EXT4-fs (loop4): Remounting filesystem read-only [ 70.753312][ T4832] ip_tables: iptables: counters copy to user failed while replacing table [ 70.877920][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.989242][ T4879] loop2: detected capacity change from 0 to 128 [ 71.040264][ T3989] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.073634][ T3305] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 71.073735][ T3305] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 71.097872][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.117989][ T3305] syz_tun (unregistering): left promiscuous mode [ 71.274173][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 71.274228][ T29] audit: type=1400 audit(1789638662.729:1228): avc: denied { read } for pid=4896 comm="syz.6.325" name="trace_pipe_raw" dev="tracefs" ino=358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 71.308849][ T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.328015][ T29] audit: type=1400 audit(1789638662.779:1229): avc: denied { write } for pid=4888 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 71.373225][ T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.426566][ T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.479753][ T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.569431][ T41] bridge_slave_1: left allmulticast mode [ 71.569452][ T41] bridge_slave_1: left promiscuous mode [ 71.569814][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.570582][ T41] bridge_slave_0: left allmulticast mode [ 71.570601][ T41] bridge_slave_0: left promiscuous mode [ 71.570843][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.579708][ T41] pimreg: left allmulticast mode [ 71.582827][ T29] audit: type=1400 audit(1789638662.959:1230): avc: denied { tracepoint } for pid=4896 comm="syz.6.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 71.638170][ T41] ip6gretap0 (unregistering): left promiscuous mode [ 71.715215][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.720547][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.729960][ T29] audit: type=1400 audit(1789638663.179:1231): avc: denied { read } for pid=4911 comm="syz.3.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.732109][ T41] bond0 (unregistering): Released all slaves [ 71.733612][ T41] bond1 (unregistering): Released all slaves [ 71.770337][ T4921] syzkaller0: entered promiscuous mode [ 71.770358][ T4921] syzkaller0: entered allmulticast mode [ 71.809423][ T41] hsr_slave_0: left promiscuous mode [ 71.809791][ T41] hsr_slave_1: left promiscuous mode [ 71.810203][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.810228][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.810584][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.810596][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.824059][ T41] veth1_vlan: left promiscuous mode [ 71.824175][ T41] veth0_vlan: left promiscuous mode [ 71.918525][ T4931] loop6: detected capacity change from 0 to 512 [ 71.984306][ T29] audit: type=1400 audit(1789638663.439:1232): avc: denied { write } for pid=4924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.038759][ T29] audit: type=1400 audit(1789638663.489:1233): avc: denied { write } for pid=4939 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.051955][ T4941] FAULT_INJECTION: forcing a failure. [ 72.051955][ T4941] name failslab, interval 1, probability 0, space 0, times 0 [ 72.051986][ T4941] CPU: 1 UID: 0 PID: 4941 Comm: syz.5.332 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.052053][ T4941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.052065][ T4941] Call Trace: [ 72.052072][ T4941] [ 72.052080][ T4941] __dump_stack+0x1d/0x30 [ 72.052161][ T4941] dump_stack_lvl+0x95/0xd0 [ 72.052185][ T4941] dump_stack+0x15/0x1b [ 72.052293][ T4941] should_fail_ex+0x262/0x280 [ 72.052318][ T4941] ? sock_kmalloc+0x85/0xc0 [ 72.052340][ T4941] should_failslab+0x8c/0xb0 [ 72.052451][ T4941] __kmalloc_noprof+0xd0/0x4d0 [ 72.052480][ T4941] ? sock_kmalloc+0x85/0xc0 [ 72.052581][ T4941] sock_kmalloc+0x85/0xc0 [ 72.052602][ T4941] ____sys_sendmsg+0xf0/0x580 [ 72.052626][ T4941] ___sys_sendmsg+0x195/0x1e0 [ 72.052658][ T4941] __x64_sys_sendmsg+0xd4/0x160 [ 72.052743][ T4941] x64_sys_call+0x22ab/0x2550 [ 72.052778][ T4941] do_syscall_64+0x112/0x360 [ 72.052886][ T4941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.052909][ T4941] RIP: 0033:0x7f59c255e159 [ 72.052927][ T4941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.052946][ T4941] RSP: 002b:00007f59c0fb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.053042][ T4941] RAX: ffffffffffffffda RBX: 00007f59c27e5fa0 RCX: 00007f59c255e159 [ 72.053058][ T4941] RDX: 0000000020000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 72.053072][ T4941] RBP: 00007f59c0fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 72.053124][ T4941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.053138][ T4941] R13: 00007f59c27e6038 R14: 00007f59c27e5fa0 R15: 00007ffea43af228 [ 72.053158][ T4941] [ 72.140776][ T41] team0 (unregistering): Port device team_slave_1 removed [ 72.149471][ T41] team0 (unregistering): Port device team_slave_0 removed [ 72.292853][ T3024] 8021q: adding VLAN 0 to HW filter on device eth9 [ 72.340302][ T29] audit: type=1400 audit(1789638663.789:1234): avc: denied { getopt } for pid=4942 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.473369][ T29] audit: type=1400 audit(1789638663.929:1235): avc: denied { write } for pid=4959 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.544547][ T29] audit: type=1400 audit(1789638663.999:1236): avc: denied { write } for pid=4980 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.597743][ T3024] 8021q: adding VLAN 0 to HW filter on device eth10 [ 72.634352][ T4985] loop6: detected capacity change from 0 to 512 [ 72.689371][ T4985] EXT4-fs (loop6): invalid journal inode [ 72.689406][ T4985] EXT4-fs (loop6): can't get journal size [ 72.710802][ T4987] loop5: detected capacity change from 0 to 256 [ 72.712149][ T4985] EXT4-fs (loop6): 1 truncate cleaned up [ 72.712671][ T4985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.738837][ T4987] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.739249][ T4987] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.766597][ T29] audit: type=1400 audit(1789638664.229:1237): avc: denied { write } for pid=4973 comm="syz.6.340" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.794303][ T4975] __nla_validate_parse: 2 callbacks suppressed [ 72.794449][ T4975] netlink: 108 bytes leftover after parsing attributes in process `syz.6.340'. [ 72.970758][ T4995] x_tables: duplicate underflow at hook 1 [ 73.001019][ T4906] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.001058][ T4906] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.001125][ T4906] bridge_slave_0: entered allmulticast mode [ 73.001851][ T4906] bridge_slave_0: entered promiscuous mode [ 73.002849][ T4906] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.002879][ T4906] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.002998][ T4906] bridge_slave_1: entered allmulticast mode [ 73.003441][ T4906] bridge_slave_1: entered promiscuous mode [ 73.015168][ T4906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.016219][ T4906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.026557][ T4906] team0: Port device team_slave_0 added [ 73.027531][ T4906] team0: Port device team_slave_1 added [ 73.037652][ T4906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.037667][ T4906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.037699][ T4906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.038272][ T4906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.038290][ T4906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.038402][ T4906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.054773][ T4906] hsr_slave_0: entered promiscuous mode [ 73.055220][ T4906] hsr_slave_1: entered promiscuous mode [ 73.357483][ T4906] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 73.368294][ T4906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.369337][ T4906] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 73.379749][ T4906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.383609][ T4906] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 73.390647][ T4906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.392720][ T4906] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 73.400078][ T4906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.419917][ T3024] 8021q: adding VLAN 0 to HW filter on device eth11 [ 73.578735][ T4906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.603581][ T4906] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.623712][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.623748][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.630660][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.630694][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.928030][ T3024] 8021q: adding VLAN 0 to HW filter on device eth12 [ 73.970993][ T4906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.311142][ T4906] veth0_vlan: entered promiscuous mode [ 74.330359][ T4906] veth1_vlan: entered promiscuous mode [ 74.343531][ T5093] loop5: detected capacity change from 0 to 256 [ 74.365057][ T5093] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.367917][ T5093] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.406245][ T4906] veth0_macvtap: entered promiscuous mode [ 74.417826][ T4906] veth1_macvtap: entered promiscuous mode [ 74.445796][ T4906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.454386][ T4906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.465736][ T391] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.465861][ T391] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.465964][ T391] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.465997][ T391] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.625722][ T5094] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.737378][ T5094] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.833565][ T5108] netlink: 4 bytes leftover after parsing attributes in process `syz.7.327'. [ 74.847120][ T5094] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.932999][ T5094] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.061575][ T418] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.071208][ T418] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.071529][ T418] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.091127][ T313] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.490491][ T4301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.559654][ T5152] netlink: 156 bytes leftover after parsing attributes in process `syz.6.365'. [ 75.655380][ T5154] netlink: 20 bytes leftover after parsing attributes in process `syz.6.366'. [ 75.658154][ T5156] netlink: 24 bytes leftover after parsing attributes in process `syz.5.367'. [ 75.660075][ T5154] FAULT_INJECTION: forcing a failure. [ 75.660075][ T5154] name failslab, interval 1, probability 0, space 0, times 0 [ 75.660125][ T5154] CPU: 1 UID: 0 PID: 5154 Comm: syz.6.366 Not tainted syzkaller #0 PREEMPT(lazy) [ 75.660155][ T5154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.660171][ T5154] Call Trace: [ 75.660211][ T5154] [ 75.660221][ T5154] __dump_stack+0x1d/0x30 [ 75.660256][ T5154] dump_stack_lvl+0x95/0xd0 [ 75.660294][ T5154] dump_stack+0x15/0x1b [ 75.660313][ T5154] should_fail_ex+0x262/0x280 [ 75.660340][ T5154] should_failslab+0x8c/0xb0 [ 75.660453][ T5154] __kvmalloc_node_noprof+0x168/0x5c0 [ 75.660500][ T5154] ? do_replace_table+0x168/0x3d0 [ 75.660520][ T5154] ? do_replace_table+0x168/0x3d0 [ 75.660574][ T5154] do_replace_table+0x168/0x3d0 [ 75.660594][ T5154] xt_register_table+0x1b9/0x530 [ 75.660614][ T5154] ipt_register_table+0xd9/0x180 [ 75.660640][ T5154] iptable_nat_table_init+0x42/0x2b0 [ 75.660686][ T5154] xt_find_table_lock+0x1a5/0x2c0 [ 75.660716][ T5154] xt_request_find_table_lock+0x24/0xa0 [ 75.660782][ T5154] do_ipt_get_ctl+0x5ff/0xcb0 [ 75.660807][ T5154] ? _raw_spin_lock_bh+0x57/0xb0 [ 75.660834][ T5154] ? _raw_spin_unlock_bh+0x17/0x20 [ 75.660859][ T5154] ? release_sock+0x10c/0x180 [ 75.660906][ T5154] ? sockopt_release_sock+0x41/0x50 [ 75.660938][ T5154] ? do_ip_getsockopt+0xbdd/0x10b0 [ 75.660964][ T5154] ? __rcu_read_unlock+0x4e/0x70 [ 75.661005][ T5154] nf_getsockopt+0x190/0x1b0 [ 75.661110][ T5154] ip_getsockopt+0x137/0x180 [ 75.661132][ T5154] sctp_getsockopt+0xb1/0xaa0 [ 75.661230][ T5154] sock_common_getsockopt+0x60/0x70 [ 75.661262][ T5154] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 75.661295][ T5154] do_sock_getsockopt+0x2f5/0x570 [ 75.661346][ T5154] __x64_sys_getsockopt+0x11d/0x1a0 [ 75.661373][ T5154] x64_sys_call+0x1032/0x2550 [ 75.661401][ T5154] do_syscall_64+0x112/0x360 [ 75.661431][ T5154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.661516][ T5154] RIP: 0033:0x7f3dedf1e159 [ 75.661536][ T5154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.661558][ T5154] RSP: 002b:00007f3dec977028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 75.661618][ T5154] RAX: ffffffffffffffda RBX: 00007f3dee1a5fa0 RCX: 00007f3dedf1e159 [ 75.661635][ T5154] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 75.661650][ T5154] RBP: 00007f3dedfb506b R08: 00002000000000c0 R09: 0000000000000000 [ 75.661701][ T5154] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 75.661717][ T5154] R13: 00007f3dee1a6038 R14: 00007f3dee1a5fa0 R15: 00007ffdd17e5408 [ 75.661748][ T5154] [ 76.032505][ T5173] FAULT_INJECTION: forcing a failure. [ 76.032505][ T5173] name failslab, interval 1, probability 0, space 0, times 0 [ 76.032610][ T5173] CPU: 0 UID: 0 PID: 5173 Comm: syz.5.370 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.032646][ T5173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.032661][ T5173] Call Trace: [ 76.032668][ T5173] [ 76.032677][ T5173] __dump_stack+0x1d/0x30 [ 76.032784][ T5173] dump_stack_lvl+0x95/0xd0 [ 76.032807][ T5173] dump_stack+0x15/0x1b [ 76.032839][ T5173] should_fail_ex+0x262/0x280 [ 76.032941][ T5173] ? skb_clone+0x151/0x1f0 [ 76.032965][ T5173] should_failslab+0x8c/0xb0 [ 76.033038][ T5173] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 76.033066][ T5173] ? skb_clone+0x151/0x1f0 [ 76.033091][ T5173] skb_clone+0x151/0x1f0 [ 76.033114][ T5173] nfnetlink_rcv+0x310/0x1740 [ 76.033150][ T5173] ? skb_release_data+0x5d5/0x600 [ 76.033189][ T5173] ? __kfree_skb+0x109/0x150 [ 76.033244][ T5173] ? nlmon_xmit+0x4f/0x60 [ 76.033336][ T5173] ? consume_skb+0x4b/0x130 [ 76.033453][ T5173] ? nlmon_xmit+0x4f/0x60 [ 76.033481][ T5173] ? dev_hard_start_xmit+0x34e/0x380 [ 76.033550][ T5173] ? __dev_queue_xmit+0x1361/0x1e90 [ 76.033571][ T5173] ? __dev_queue_xmit+0x151/0x1e90 [ 76.033674][ T5173] ? ref_tracker_free+0x380/0x3f0 [ 76.033697][ T5173] ? skb_clone+0x151/0x1f0 [ 76.033722][ T5173] netlink_unicast+0x5a9/0x680 [ 76.033752][ T5173] netlink_sendmsg+0x5be/0x6f0 [ 76.033837][ T5173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.033875][ T5173] ____sys_sendmsg+0x532/0x580 [ 76.033972][ T5173] ___sys_sendmsg+0x195/0x1e0 [ 76.034009][ T5173] __x64_sys_sendmsg+0xd4/0x160 [ 76.034036][ T5173] x64_sys_call+0x22ab/0x2550 [ 76.034067][ T5173] do_syscall_64+0x112/0x360 [ 76.034120][ T5173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.034141][ T5173] RIP: 0033:0x7f59c255e159 [ 76.034158][ T5173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.034180][ T5173] RSP: 002b:00007f59c0fb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.034204][ T5173] RAX: ffffffffffffffda RBX: 00007f59c27e5fa0 RCX: 00007f59c255e159 [ 76.034221][ T5173] RDX: 0000000020040040 RSI: 0000200000000500 RDI: 0000000000000003 [ 76.034238][ T5173] RBP: 00007f59c0fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.034303][ T5173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.034318][ T5173] R13: 00007f59c27e6038 R14: 00007f59c27e5fa0 R15: 00007ffea43af228 [ 76.034340][ T5173] [ 76.038775][ T5162] netlink: 68 bytes leftover after parsing attributes in process `syz.6.368'. [ 76.039072][ T5162] xt_hashlimit: size too large, truncated to 1048576 [ 76.317012][ T5193] FAULT_INJECTION: forcing a failure. [ 76.317012][ T5193] name failslab, interval 1, probability 0, space 0, times 0 [ 76.317078][ T5193] CPU: 1 UID: 0 PID: 5193 Comm: syz.3.377 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.317160][ T5193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.317250][ T5193] Call Trace: [ 76.317259][ T5193] [ 76.317268][ T5193] __dump_stack+0x1d/0x30 [ 76.317315][ T5193] dump_stack_lvl+0x95/0xd0 [ 76.317348][ T5193] dump_stack+0x15/0x1b [ 76.317450][ T5193] should_fail_ex+0x262/0x280 [ 76.317476][ T5193] should_failslab+0x8c/0xb0 [ 76.317507][ T5193] __kvmalloc_node_noprof+0x168/0x5c0 [ 76.317593][ T5193] ? io_alloc_cache_init+0x36/0xb0 [ 76.317642][ T5193] ? io_alloc_cache_init+0x36/0xb0 [ 76.317668][ T5193] io_alloc_cache_init+0x36/0xb0 [ 76.317720][ T5193] io_ring_ctx_alloc+0x2c4/0x650 [ 76.317755][ T5193] io_uring_create+0x4d/0x4f0 [ 76.317788][ T5193] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 76.317824][ T5193] __x64_sys_io_uring_setup+0x31/0x40 [ 76.317874][ T5193] x64_sys_call+0x1fbf/0x2550 [ 76.317901][ T5193] do_syscall_64+0x112/0x360 [ 76.317971][ T5193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.317995][ T5193] RIP: 0033:0x7fc20a79e159 [ 76.318013][ T5193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.318031][ T5193] RSP: 002b:00007fc2091f6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 76.318054][ T5193] RAX: ffffffffffffffda RBX: 0000200000001280 RCX: 00007fc20a79e159 [ 76.318079][ T5193] RDX: 0000000000000000 RSI: 0000200000001280 RDI: 0000000000000110 [ 76.318093][ T5193] RBP: 00007fc20a83506b R08: 0000000000000000 R09: 0000000000000000 [ 76.318107][ T5193] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 76.318121][ T5193] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffde58631c8 [ 76.318140][ T5193] [ 76.364200][ T29] kauditd_printk_skb: 16425 callbacks suppressed [ 76.364290][ T29] audit: type=1400 audit(1789638667.819:17663): avc: denied { write } for pid=5163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.379399][ T29] audit: type=1400 audit(1789638667.839:17664): avc: denied { connect } for pid=5189 comm="syz.4.376" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.415402][ T5192] netlink: 'syz.4.376': attribute type 6 has an invalid length. [ 76.415421][ T5192] netlink: 140 bytes leftover after parsing attributes in process `syz.4.376'. [ 76.464980][ T29] audit: type=1400 audit(1789638667.919:17665): avc: denied { write } for pid=5202 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.510107][ T5205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.380'. [ 76.515234][ T29] audit: type=1400 audit(1789638667.969:17666): avc: denied { create } for pid=5200 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_rdma_socket permissive=1 [ 76.553264][ T5213] netlink: 24 bytes leftover after parsing attributes in process `syz.7.382'. [ 76.569027][ T5215] loop5: detected capacity change from 0 to 512 [ 76.748694][ T29] audit: type=1400 audit(1789638668.199:17667): avc: denied { remount } for pid=5221 comm="syz.7.383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.751837][ T5233] netlink: 'syz.7.383': attribute type 20 has an invalid length. [ 76.751855][ T5233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.383'. [ 76.759267][ T391] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.759340][ T391] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.759379][ T391] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.759458][ T391] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.760613][ T5233] netlink: 'syz.7.383': attribute type 20 has an invalid length. [ 76.930937][ T5236] ALSA: seq fatal error: cannot create timer (-19) [ 76.998425][ T5252] loop7: detected capacity change from 0 to 512 [ 77.001923][ T5252] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.391: iget: bad i_size value: 38620345925642 [ 77.001955][ T5252] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.002120][ T5252] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.391: couldn't read orphan inode 15 (err -117) [ 77.002147][ T5252] loop7: lost filesystem error report for type 5 error -117 [ 77.002674][ T5252] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.016016][ T29] audit: type=1400 audit(1789638668.459:17668): avc: denied { write } for pid=5248 comm="syz.7.391" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.016962][ T29] audit: type=1400 audit(1789638668.459:17669): avc: denied { write } for pid=5248 comm="syz.7.391" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.313251][ T29] audit: type=1400 audit(1789638668.769:17670): avc: denied { write } for pid=5255 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.354103][ T29] audit: type=1400 audit(1789638668.809:17671): avc: denied { write } for pid=5266 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.480279][ T5270] loop4: detected capacity change from 0 to 1024 [ 77.495409][ T5270] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 77.495588][ T5270] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 77.499104][ T5270] JBD2: no valid journal superblock found [ 77.499263][ T5270] EXT4-fs (loop4): Could not load journal inode [ 77.891281][ T29] audit: type=1326 audit(1789638669.339:17672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.4.403" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadeedfe159 code=0x7ffc0000 [ 77.946490][ T4906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.948854][ T5297] loop4: detected capacity change from 0 to 512 [ 77.965450][ T5297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.965611][ T5297] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.269526][ T5314] program syz.5.406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.306270][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.336339][ T5314] loop5: detected capacity change from 0 to 164 [ 78.366347][ T5319] __nla_validate_parse: 2 callbacks suppressed [ 78.366363][ T5319] netlink: 80 bytes leftover after parsing attributes in process `syz.3.408'. [ 78.386248][ T5314] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 78.600335][ T12] IPVS: starting estimator thread 0... [ 78.616205][ T5347] tipc: Enabling of bearer rejected, failed to enable media [ 78.682069][ T5346] IPVS: using max 2256 ests per chain, 112800 per kthread [ 78.779089][ T5359] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 78.808656][ T5354] bridge0: entered promiscuous mode [ 78.808681][ T5354] bridge0: entered allmulticast mode [ 78.940652][ T5364] netlink: 14 bytes leftover after parsing attributes in process `syz.4.424'. [ 79.025003][ T5377] netlink: 'syz.4.424': attribute type 4 has an invalid length. [ 79.025189][ T5377] netlink: 'syz.4.424': attribute type 1 has an invalid length. [ 79.026868][ T5377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.048210][ T5378] loop3: detected capacity change from 0 to 1024 [ 79.052555][ T5378] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.053235][ T5378] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.054665][ T5378] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #11: comm syz.3.430: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 79.054708][ T5378] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 79.054918][ T5378] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.430: couldn't read orphan inode 11 (err -117) [ 79.054945][ T5378] loop3: lost filesystem error report for type 5 error -117 [ 79.055523][ T5378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.068442][ T5378] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm syz.3.430: Invalid block bitmap block 0 in block_group 0 [ 79.069016][ T5378] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.430: Failed to acquire dquot type 0 [ 79.133823][ T5381] netlink: 132 bytes leftover after parsing attributes in process `syz.7.429'. [ 79.159012][ T5382] syzkaller0: entered promiscuous mode [ 79.159034][ T5382] syzkaller0: entered allmulticast mode [ 79.827618][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.827925][ T3307] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 8589934593 in block_group 0 [ 79.828023][ T3307] loop3: lost filesystem error report for type 5 error -117 [ 79.871726][ T5390] loop7: detected capacity change from 0 to 512 [ 79.885248][ T5390] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.885308][ T5390] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.082382][ T5386] futex_wake_op: syz.3.432 tries to shift op by -1; fix this program [ 80.082458][ T5386] futex_wake_op: syz.3.432 tries to shift op by -1; fix this program [ 80.136492][ T5403] loop6: detected capacity change from 0 to 512 [ 80.136905][ T5403] EXT4-fs: Ignoring removed i_version option [ 80.137400][ T5403] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.138108][ T5403] EXT4-fs (loop6): orphan cleanup on readonly fs [ 80.138639][ T5403] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 80.138737][ T5403] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.438: Failed to acquire dquot type 1 [ 80.138762][ T5403] loop6: lost filesystem error report for type 5 error -28 [ 80.139246][ T5403] EXT4-fs (loop6): 1 truncate cleaned up [ 80.151351][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 80.151375][ C1] EXT4-fs (loop6): initial error at time 1789638671: ext4_mb_generate_buddy:1317 [ 80.151403][ C1] EXT4-fs (loop6): last error at time 1789638671: ext4_acquire_dquot:7069 [ 80.165611][ T5403] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.178171][ T5403] netlink: 44 bytes leftover after parsing attributes in process `syz.6.438'. [ 80.218935][ T5413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.438'. [ 80.271576][ T391] ================================================================== [ 80.271611][ T391] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 80.271646][ T391] [ 80.271653][ T391] write to 0xffff88813217f15b of 97 bytes by task 5390 on cpu 0: [ 80.271672][ T391] copy_folio_from_iter_atomic+0x728/0x10a0 [ 80.271750][ T391] generic_perform_write+0x2c4/0x490 [ 80.271775][ T391] ext4_buffered_write_iter+0x2e3/0x480 [ 80.271804][ T391] ext4_file_write_iter+0x36e/0x1020 [ 80.271830][ T391] iter_file_splice_write+0x6a0/0xa60 [ 80.271852][ T391] direct_splice_actor+0x158/0x280 [ 80.271873][ T391] splice_direct_to_actor+0x2f9/0x680 [ 80.271891][ T391] do_splice_direct+0x119/0x1a0 [ 80.271907][ T391] do_sendfile+0x37d/0x640 [ 80.271925][ T391] __x64_sys_sendfile64+0x105/0x150 [ 80.271961][ T391] x64_sys_call+0x1015/0x2550 [ 80.271987][ T391] do_syscall_64+0x112/0x360 [ 80.272019][ T391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.272043][ T391] [ 80.272049][ T391] read to 0xffff88813217f000 of 2048 bytes by task 391 on cpu 1: [ 80.272069][ T391] copy_folio_from_iter_atomic+0x728/0x10a0 [ 80.272093][ T391] generic_perform_write+0x2c4/0x490 [ 80.272116][ T391] shmem_file_write_iter+0xc5/0xf0 [ 80.272134][ T391] lo_rw_aio+0x6ab/0x760 [ 80.272151][ T391] loop_process_work+0x569/0xad0 [ 80.272172][ T391] loop_workfn+0x31/0x40 [ 80.272190][ T391] process_scheduled_works+0x56a/0xa50 [ 80.272221][ T391] worker_thread+0x569/0x750 [ 80.272254][ T391] kthread+0x223/0x270 [ 80.272276][ T391] ret_from_fork+0x146/0x330 [ 80.272307][ T391] ret_from_fork_asm+0x1a/0x30 [ 80.272335][ T391] [ 80.272340][ T391] Reported by Kernel Concurrency Sanitizer on: [ 80.272353][ T391] CPU: 1 UID: 0 PID: 391 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.272381][ T391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.272395][ T391] Workqueue: loop7 loop_workfn [ 80.272417][ T391] ================================================================== [ 80.376279][ T4301] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.520527][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.442'. [ 80.757999][ T4906] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.786316][ T5420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.806596][ T5422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.807259][ T5422] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 80.808636][ T5422] bond1: (slave gre1): Error -95 calling set_mac_address [ 80.816371][ T5423] macvlan2: entered promiscuous mode [ 80.816391][ T5423] macvlan2: entered allmulticast mode [ 80.816536][ T5423] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 84.970618][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 84.970644][ T29] audit: type=1400 audit(1789638676.419:17774): avc: denied { write } for pid=5425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.007788][ T29] audit: type=1400 audit(1789638676.459:17775): avc: denied { write } for pid=5436 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.965200][ T29] audit: type=1400 audit(1789638677.419:17776): avc: denied { write } for pid=5439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.003258][ T29] audit: type=1400 audit(1789638677.459:17777): avc: denied { write } for pid=5450 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.117215][ T29] audit: type=1400 audit(1789638677.569:17778): avc: denied { write } for pid=5453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.153173][ T29] audit: type=1400 audit(1789638677.609:17779): avc: denied { write } for pid=5464 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.240286][ T29] audit: type=1400 audit(1789638677.689:17780): avc: denied { write } for pid=5467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.272443][ T29] audit: type=1400 audit(1789638677.729:17781): avc: denied { write } for pid=5478 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1