last executing test programs: 2.868883882s ago: executing program 2 (id=397): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(0x0, 0x2) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x42, 0xe, 0x1, 0x5, 0xc}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x3, @private=0xa010101}]}, &(0x7f0000000240)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)="0000000000000002", 0x8) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = io_uring_setup(0x3a64, &(0x7f0000000580)={0x0, 0x108270, 0x800, 0x3, 0x846}) sendto$inet6(r3, &(0x7f0000000600)="15880a0c6f25735734902f5cdea589d6e1af1244e73434056077b9c545d97bcf57981003e23e9c2c9645df2904f0830613d3faf6652520fb8e9240de568011154e6724cb34ab7d663caec023da04d23b4863ecda5720df201a1a7b0d2b25812430622116ac18aca16a66a7228b45671b68ebd17438674f4cf1c8449e09b7e80be1c83c7559f95efe3ad315ed8f215fa3ee", 0x91, 0x4008040, &(0x7f00000006c0)={0xa, 0x4e23, 0x5572, @private1}, 0x1c) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}], 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r5], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x2, 0x0, 0x4) listns(&(0x7f0000000b80)={0x20, 0x0, 0x100000000, 0x8000000}, &(0x7f0000000bc0)=[0x0], 0x1, 0x0) migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x1) 2.760956654s ago: executing program 2 (id=398): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad03010000000000bf000000000000006916a00000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x33) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000300)=0x3, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6, 0x400}, 0x3c06, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x3c, 0x3ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2a1, 0x0, 0x10000]}}) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @empty, 0x4}, 0x1c) ioctl$VT_RELDISP(r0, 0x5605) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x4}, &(0x7f00000000c0)=0x28) semtimedop(0x0, &(0x7f00000001c0)=[{0x3, 0x4, 0x1000}], 0x1, &(0x7f0000000240)) 2.655625497s ago: executing program 4 (id=400): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000000000f130000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x22004043}, 0x880) 2.622640727s ago: executing program 4 (id=403): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_open_procfs(r1, &(0x7f00000001c0)='net/unix\x00') sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000041401000000000002000000080001000000000008000300"], 0x20}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x200) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1a120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r5, 0x0) close(r5) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2.436337752s ago: executing program 2 (id=406): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x94, 0x32, 0x0, 0x0) 2.333423554s ago: executing program 3 (id=407): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x9}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x7, 0xffffffffffffffff, 0x8) unshare(0x28000600) socket$inet6_udp(0xa, 0x2, 0x0) listen(0xffffffffffffffff, 0x2000002b) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xc000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) io_uring_setup(0x2a62, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80018, 0xc0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket(0x2c, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0xfff, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)="6797f04cdb6f2c8ff1c922acb0da67dc73c026576fddc232ca696ae6c56d0800e17949d4adaf547b3caf", 0x2a}], 0x1}, 0x3000cb08) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x4, 0x8, 0x200, 0x0, 0x7}) 2.219049767s ago: executing program 3 (id=409): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @remote}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a40)={r1, @in6={{0xa, 0x4e20, 0x1, @empty, 0x6}}, 0x3, 0x3, 0x7fff, 0x81, 0x0, 0x85e, 0xf}, &(0x7f0000000b00)=0x9c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="bdaa000000000000711010000000000095", @ANYRES32=0x0, @ANYRESDEC=r0], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) close(0x3) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) semop(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r6, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r7, r8}}}], 0x20, 0x8801}}], 0x1, 0x4060001) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f00000006c0)={[{@grpquota}], [{@appraise}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@obj_role={'obj_role', 0x3d, '!-+(+'}}, {@dont_measure}, {@hash}, {@fowner_eq={'fowner', 0x3d, r8}}, {@smackfsdef={'smackfsdef', 0x3d, 'defcontext'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@measure}]}, 0x9, 0xbbc, &(0x7f00000017c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb) statx(r9, &(0x7f0000000280)='./file0\x00', 0x800, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80), &(0x7f0000001000)={0x0}) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000500, r10, 0x0) (async) close(r3) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x200, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {}, {}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r11, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="947e0000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf25020000000500050004000000080003000300000008000200ffff000008000300a9000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000017}, 0x20000811) 2.10783383s ago: executing program 3 (id=410): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x6d2, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) msync(&(0x7f000035e000/0x1000)=nil, 0x1000, 0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd23, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3dd88, 0x17200}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x48}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4c044) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(', @ANYBLOB="01"], 0x28}}, 0x0) 1.941392894s ago: executing program 3 (id=412): r0 = socket$unix(0x1, 0x1, 0x0) listen(r0, 0x5) socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xa57d, 0x800, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x80, 0x0, 0x3ff, 0x6}, &(0x7f0000000580)=0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0d00000019000000040004000100000000f60041eb3b32b37049563ac8ddd100ffff", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r4, r3}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) close(r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file1\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000640)='./file1\x00', 0x3100014, &(0x7f0000000300), 0x3e, 0x526, &(0x7f0000000900)="$eJzs3d9rLFcdAPDvTLK5ufembqoitWAttpJb9G6SxrZBROuLPhXU+n6NySaE7GZDdlObUGyK/4EICj75JIjgHyDIffAPkELBvogPoqKI3uqDoHZkZmdputlNojc3m5v9fOBkz5lf33Nm2bMzsyczAYytJyPixYiYiIhnIqJaTk/LFIfdlC/3zr3XVvOURJa9/NckknJab1t5eTIibparTUfE174c8c3keNz2/sHWSqNR3y3L853mznx7/+D2ZnNlo75R315aWnx++YXl55YXstJ9tXO2l/nxlz7/i09/63d3/nzr23m1PveRqERfO85Tt+mVYl/05Pto90EEG4GJsj2VUVcEAIAzyY/xPxgRnyiO/6sxURzN9ZkYRc0AAACA85J9YSb+nURkAAAAwJWVRsRMJGmtHAswE2k6VV4b+HDcSButdudT66297bV8XsRsVNL1zUZ9oRwrPBuVJC8vlmNse+Vn+8pLEfFoRHyver0o11ZbjbURX/sAAACAcXGz7/z/H9W0yJ9uwP8JAAAAAJfX7NACAAAAcFU45QcAAICrr//83/3+AQAA4Er5yksv5SnrPf967ZX9va3WK7fX6u2tWnNvtbba2t2pbbRaG8U9+5qnba/Rau18Jrb3JiKi3Zlv7x/cabb2tjt3Nt/3CGwAAADgAj368btvJ3GtLF0v/qYjrRFwKf1h1BUAzpOhfjC+3MUbxldl1BUARi45Zb7BOwAA8PCb++jdt/Nj/8PPXi9Srvf8f9cG4Goz1gcAxo/f/2F8VYwAhLE1WV4D+EC3eG3YckN////VWSNlWcSb1aNTXF8EAICLNVOkJK2V5wEzkaa1WsQjEelsVJL1zUZ9oTw/+HW1ci0vLxZrJqeOGQYAAAAAAAAAAAAAAAAAAAAAAAAAurIsiQwAAAC40iLSPyXF3fwj5qpPz/RfH5hK/lmNP5aFH778/VdXOp3dxXz634pneU1FROcH5fRnhz4+DAAAADhvyeHQWd3z9PJ18UJrBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAYeOfea6u9dJFx//LFiJgdFH8ypovX6ahExI2/JzF5ZL0kIibOIf7hGxHx2KD4SbybZa9HWYtB8a8/4Pizxa4ZHD+NiJvnEB/G2d28/3lx0OcvjSeL18Gfv8ky3a/h/V9aRn6s6OcG9T+PHNtac2CMx9/62Xw3Vzke/42IxycH9z+9/jcZEv+pY1v7V5Zlx+N/4+sHB8Pan/0oYm7g90/yvljznebOfHv/4PZmc2WjvlHfXlpafH75heXnlhfm1zcb9fLvwBjf/djP3x0WP2//jQHxf/ubbv97UvufHrbRPv9569V7H+pmj70BefxbTw38/p2OIfHT8rvvk2U+nz/Xyx9280c98dM3nzip/WtD9v9p7/+tM7b/ma9+5/dnXBQAuADt/YOtlUajvntCZvoMyzyMmV9O/89rTUXEiCufvd595y7HPvz/M/nR6ntTeq26BBU7ksnOsvBP7jfWteJ4/qxrTV1Q20faLQEAAA/Aewf9o64JAAAAAAAAAAAAAAAAAAAAjK+LuJVaf8zD0TQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBE/w0AAP//2HnYLw==") socket$kcm(0x29, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 1.941203274s ago: executing program 0 (id=413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000ffdbdf250400000005000a000100000008000100", @ANYBLOB='Zi'], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="9594aa1bd424a88d14e1d310d5e1ee1e45739d54fc857ef3bc5eb1d9dcd365666b31bbd6b8e8a56659a5cb06701c6d0a6e4d336cee6f768e0f8072bbaf435408392d6c4d02216f7c33eb85d06ce1413ba2b5bc"], 0x7c}, 0x1, 0x0, 0x0, 0x4100}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0xa, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x35}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) 1.940215474s ago: executing program 0 (id=414): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000edff00000005000000180001801400020073797a5f74756e0000000000000000000c00038004000380040001"], 0x38}}, 0x0) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x3728e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x8, 0x0, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r2, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 1.814876297s ago: executing program 1 (id=416): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x9}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='target PCI:0:0'], 0x13) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x4000, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0xfffb, 0x2, 0x2, 0x0, r3}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000007200e50100000000fdffffff07"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg(r5, &(0x7f00000032c0), 0x0, 0x40, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8001) r6 = getpgid(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x0, r6}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000814000001"], 0x50) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000540)={0x2, 0x8, 0x1, 0x0, 0x3, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000000"], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) sendto$inet(r0, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 1.505355644s ago: executing program 4 (id=417): r0 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x2, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18110000", @ANYRESHEX=r0, @ANYRESOCT=0x0], &(0x7f0000000380)='syzkaller\x00', 0x237, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) dup(r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) mkdir(&(0x7f0000000400)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='myproc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='myproc/modules\x00', 0x0, 0x0) read(r3, &(0x7f0000000540)=""/1000, 0x3e8) 937.548168ms ago: executing program 2 (id=418): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x100000001}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x80800) sendto(r3, &(0x7f0000000000), 0xfffffffffffffdf3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000180), 0x55}, 0x5d1}], 0x1, 0x4002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x4c, 0x19, 0x901, 0xfffffffe, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xfff}}, @RTA_GATEWAY={0x8, 0x5, @private=0xa0100ff}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_FLOW={0x8, 0xb, 0x1000c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 813.684621ms ago: executing program 4 (id=419): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x9}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x7, 0xffffffffffffffff, 0x8) unshare(0x28000600) socket$inet6_udp(0xa, 0x2, 0x0) listen(0xffffffffffffffff, 0x2000002b) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0xc000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) io_uring_setup(0x2a62, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80018, 0xc0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket(0x2c, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0xfff, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)="6797f04cdb6f2c8ff1c922acb0da67dc73c026576fddc232ca696ae6c56d0800e17949d4adaf547b3caf", 0x2a}], 0x1}, 0x3000cb08) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x8000}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x4, 0x8, 0x200, 0x0, 0x7}) 709.303533ms ago: executing program 4 (id=420): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x3efd7ab4c41335d9, @perf_config_ext={0x100000000, 0xfffffffffffffa99}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0xc15, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r0 = socket$kcm(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x10a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r2, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x0, @desc2}}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x4f, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x2663}, 0x8840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000440)=0xc) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) lsetxattr$security_capability(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)=@v1={0x1000000, [{0x400, 0x10000}]}, 0xc, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000140)=""/246, 0xf6) 452.91859ms ago: executing program 1 (id=421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003940)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b70400000000040085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 428.07252ms ago: executing program 2 (id=422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x34, r1, 0x1, 0x4070bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x4800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x80c002, &(0x7f00000009c0)={[{@errors_remount}, {@grpquota}]}, 0x2, 0x517, &(0x7f0000000140)="$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") r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r2, 0x0, 0x25, 0x4, @val=@uprobe_multi={&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=[0x5], &(0x7f00000007c0), 0xd, 0x1, 0x1}}, 0x40) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = dup3(r4, r3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) getsockopt$inet_buf(r5, 0x0, 0x2a, &(0x7f0000000500)=""/133, &(0x7f00000005c0)=0x85) sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000810}, 0x2c004000) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x81}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={@map=r5, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value=r5}, 0x20) 409.120621ms ago: executing program 0 (id=423): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x5c4, &(0x7f0000000c40)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd00000007ffffff00060000000000000000001f00"], 0x0) 313.452713ms ago: executing program 1 (id=424): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(0x0, 0x2) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x42, 0xe, 0x1, 0x5, 0xc}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x3, @private=0xa010101}]}, &(0x7f0000000240)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)="0000000000000002", 0x8) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = io_uring_setup(0x3a64, &(0x7f0000000580)={0x0, 0x108270, 0x800, 0x3, 0x846}) sendto$inet6(r3, &(0x7f0000000600)="15880a0c6f25735734902f5cdea589d6e1af1244e73434056077b9c545d97bcf57981003e23e9c2c9645df2904f0830613d3faf6652520fb8e9240de568011154e6724cb34ab7d663caec023da04d23b4863ecda5720df201a1a7b0d2b25812430622116ac18aca16a66a7228b45671b68ebd17438674f4cf1c8449e09b7e80be1c83c7559f95efe3ad315ed8f215fa3ee", 0x91, 0x4008040, &(0x7f00000006c0)={0xa, 0x4e23, 0x5572, @private1}, 0x1c) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}], 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r5], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x2, 0x0, 0x4) listns(&(0x7f0000000b80)={0x20, 0x0, 0x100000000, 0x8000000}, &(0x7f0000000bc0)=[0x0], 0x1, 0x0) migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x1) 309.127203ms ago: executing program 0 (id=425): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0xf3ff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0xd}, 0x94) 232.474445ms ago: executing program 0 (id=426): r0 = syz_io_uring_complete(0x0, 0x0) ioctl$int_in(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) getpid() r1 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000006e0000850000007500000095"], 0x0, 0x100007}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x8400, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x46400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x22, 0x0, 0x0, 0x80000000}, {0x20}, {0x3, 0xfd, 0x0, 0xfffffffe}, {0x20, 0x0, 0x0, 0x10000000}, {}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$key(r3, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x10}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) capget(&(0x7f00000003c0)={0x20080522}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000500)={'vlan0\x00', @random="013701352ebf"}) 106.492288ms ago: executing program 3 (id=427): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = dup(r0) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000040)={{r1}, 0x4, &(0x7f0000000000)=[0x5, 0x4, 0x1, 0x2], 0x8000000000000000, 0x8, 0x1}) ioctl$PTP_EXTTS_REQUEST2(r2, 0x43403d0e, &(0x7f00000002c0)={0x5, 0x9}) 61.561469ms ago: executing program 3 (id=428): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x94, 0x32, 0x0, 0x0) 61.300019ms ago: executing program 1 (id=429): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18110000", @ANYRESHEX, @ANYRESOCT=0x0], &(0x7f0000000380)='syzkaller\x00', 0x237, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) mkdir(&(0x7f0000000400)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='myproc\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='myproc/modules\x00', 0x0, 0x0) read(r2, &(0x7f0000000540)=""/1000, 0x3e8) 52.420539ms ago: executing program 2 (id=430): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x42, 0xe, 0x1, 0x5, 0xc}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}, {0x0}], 0x3) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x2, 0x0, 0x4) migrate_pages(0x0, 0x9, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x1) 40.871829ms ago: executing program 1 (id=431): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000000000f130000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x22004043}, 0x880) 1.0611ms ago: executing program 4 (id=432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x9, 0x7f, 0x9, 0x3, 0x7, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff09, 0x4, 0x3, 0x8, 0x0, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x8, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x7, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x4, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x8, 0x3, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0x7, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x65b38436, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0xa, 0x1000, 0x1, 0x58ba, 0x5, 0x42bc, 0x5, 0x120, 0x2, 0x5, 0x3, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x63e, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c, 0x8000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x6, 0x859, 0x80aedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0xfa6}, {0x8, 0x0, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0xfffffffe, 0x10, 0x8, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0x8, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x43, 0x1, 0x7, 0xffffff00, 0x6, 0x333f, 0x7, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x7, 0x8, 0x100, 0x8001, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x4, 0x1ff, 0xc0000000, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x8001, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x82b36, 0x4, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x6, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x0, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x3, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdff, 0x30d, 0x1003, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r9) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3c, 0xf000000}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 240.74µs ago: executing program 0 (id=433): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000edff00000005000000180001801400020073797a5f74756e0000000000000000000c00038004000380040001"], 0x38}}, 0x0) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x3728e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x8, 0x0, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bind$inet6(r2, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 0s ago: executing program 1 (id=434): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setns(0xc9, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000000)=0xffffff16, 0x4) recvmmsg(r2, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b39ff, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000880)={0x14, r1, 0x4f79951a91b7df8f, 0x70bd2c, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/243, 0xf3}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/4088, 0xff8}, {&(0x7f0000000000)=""/137, 0x89}], 0x5}, 0x60}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2000, 0x0) kernel console output (not intermixed with test programs): ][ T28] audit: type=1400 audit(1785363739.391:116): avc: denied { siginh } for pid=3271 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 30.934149][ T28] audit: type=1400 audit(1785363746.951:117): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.957272][ T28] audit: type=1400 audit(1785363746.971:118): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.958110][ T3285] cgroup: Unknown subsys name 'net' [ 30.985200][ T28] audit: type=1400 audit(1785363747.001:119): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.101280][ T3285] cgroup: Unknown subsys name 'cpuset' [ 31.107330][ T3285] cgroup: Unknown subsys name 'rlimit' [ 31.225529][ T28] audit: type=1400 audit(1785363747.241:120): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.255356][ T28] audit: type=1400 audit(1785363747.241:121): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.276023][ T28] audit: type=1400 audit(1785363747.241:122): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.296758][ T28] audit: type=1400 audit(1785363747.241:123): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.303986][ T3287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 31.317347][ T28] audit: type=1400 audit(1785363747.251:124): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.350685][ T28] audit: type=1400 audit(1785363747.251:125): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.374240][ T28] audit: type=1400 audit(1785363747.261:126): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.396117][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.961588][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.968695][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.976058][ T3296] bridge_slave_0: entered allmulticast mode [ 32.982570][ T3296] bridge_slave_0: entered promiscuous mode [ 32.989369][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.996463][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.003595][ T3296] bridge_slave_1: entered allmulticast mode [ 33.010022][ T3296] bridge_slave_1: entered promiscuous mode [ 33.053005][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.064122][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.123002][ T3296] team0: Port device team_slave_0 added [ 33.128731][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.135888][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.143015][ T3297] bridge_slave_0: entered allmulticast mode [ 33.149441][ T3297] bridge_slave_0: entered promiscuous mode [ 33.166608][ T3296] team0: Port device team_slave_1 added [ 33.172323][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.179377][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.186528][ T3297] bridge_slave_1: entered allmulticast mode [ 33.193059][ T3297] bridge_slave_1: entered promiscuous mode [ 33.235577][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.242551][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.268530][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.287020][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.294168][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.301401][ T3310] bridge_slave_0: entered allmulticast mode [ 33.307607][ T3310] bridge_slave_0: entered promiscuous mode [ 33.314287][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.321254][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.347164][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.359169][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.375914][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.383039][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.390170][ T3310] bridge_slave_1: entered allmulticast mode [ 33.396586][ T3310] bridge_slave_1: entered promiscuous mode [ 33.407328][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.434690][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.441792][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.448861][ T3305] bridge_slave_0: entered allmulticast mode [ 33.455336][ T3305] bridge_slave_0: entered promiscuous mode [ 33.469935][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.483532][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.490672][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.497791][ T3305] bridge_slave_1: entered allmulticast mode [ 33.504221][ T3305] bridge_slave_1: entered promiscuous mode [ 33.520134][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.534351][ T3297] team0: Port device team_slave_0 added [ 33.550664][ T3296] hsr_slave_0: entered promiscuous mode [ 33.556545][ T3296] hsr_slave_1: entered promiscuous mode [ 33.567946][ T3297] team0: Port device team_slave_1 added [ 33.585472][ T3310] team0: Port device team_slave_0 added [ 33.596362][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.618997][ T3310] team0: Port device team_slave_1 added [ 33.629869][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.657115][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.664095][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.690002][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.706158][ T3305] team0: Port device team_slave_0 added [ 33.711937][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.719068][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.726427][ T3306] bridge_slave_0: entered allmulticast mode [ 33.733017][ T3306] bridge_slave_0: entered promiscuous mode [ 33.744153][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.751228][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.777146][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.791022][ T3305] team0: Port device team_slave_1 added [ 33.796743][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.803846][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.811009][ T3306] bridge_slave_1: entered allmulticast mode [ 33.817439][ T3306] bridge_slave_1: entered promiscuous mode [ 33.824162][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.831121][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.857073][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.870889][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.877862][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.903745][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.948203][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.958990][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.975807][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.982809][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.008839][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.036536][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.043586][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.069551][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.086976][ T3297] hsr_slave_0: entered promiscuous mode [ 34.092986][ T3297] hsr_slave_1: entered promiscuous mode [ 34.098852][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 34.104598][ T3297] Cannot create hsr debugfs directory [ 34.111073][ T3306] team0: Port device team_slave_0 added [ 34.129303][ T3310] hsr_slave_0: entered promiscuous mode [ 34.135297][ T3310] hsr_slave_1: entered promiscuous mode [ 34.141283][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 34.147012][ T3310] Cannot create hsr debugfs directory [ 34.153459][ T3306] team0: Port device team_slave_1 added [ 34.202776][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.209773][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.235724][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.262932][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.269944][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.296133][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.316839][ T3305] hsr_slave_0: entered promiscuous mode [ 34.322717][ T3305] hsr_slave_1: entered promiscuous mode [ 34.328580][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 34.334322][ T3305] Cannot create hsr debugfs directory [ 34.389889][ T3306] hsr_slave_0: entered promiscuous mode [ 34.395892][ T3306] hsr_slave_1: entered promiscuous mode [ 34.401789][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 34.407516][ T3306] Cannot create hsr debugfs directory [ 34.457396][ T3296] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.466297][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.487737][ T3296] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.496293][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.511599][ T3296] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.520157][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.537846][ T3296] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.546447][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.599367][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.607984][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.618308][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.626875][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.634529][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.643253][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.650894][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.659515][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.693684][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.702846][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.710596][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.719222][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.727249][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.736476][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.744635][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.753857][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.785791][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.794844][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.802714][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.811341][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.819121][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.827586][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.844507][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.852628][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.869512][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.878169][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.885913][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.894438][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.902084][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.910700][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.918235][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.927339][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.974441][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.001590][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.023942][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.031044][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.046280][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.053378][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.065828][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.094237][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.105791][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.120495][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.129893][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.137054][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.148114][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.162972][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.172767][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.184473][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.191589][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.202291][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.209816][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.218604][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.227912][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.235006][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.250134][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.257227][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.273804][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.280906][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.311767][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.333017][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.340083][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.364273][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.371432][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.466123][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.586286][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.635047][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.655160][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.668415][ T3296] veth0_vlan: entered promiscuous mode [ 35.682390][ T3296] veth1_vlan: entered promiscuous mode [ 35.725041][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.741424][ T3296] veth0_macvtap: entered promiscuous mode [ 35.759401][ T3296] veth1_macvtap: entered promiscuous mode [ 35.786221][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.811730][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.824008][ T3305] veth0_vlan: entered promiscuous mode [ 35.847488][ T3305] veth1_vlan: entered promiscuous mode [ 35.855479][ T311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.864489][ T311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.873870][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.889320][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.910700][ T3297] veth0_vlan: entered promiscuous mode [ 35.923349][ T3297] veth1_vlan: entered promiscuous mode [ 35.942030][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 35.942043][ T28] audit: type=1400 audit(1785363751.961:144): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.Q2H3ue/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 35.951959][ T3306] veth0_vlan: entered promiscuous mode [ 35.975804][ T28] audit: type=1400 audit(1785363751.961:145): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/root/syzkaller.Q2H3ue/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 35.986094][ T3305] veth0_macvtap: entered promiscuous mode [ 36.015313][ T3310] veth0_vlan: entered promiscuous mode [ 36.016631][ T28] audit: type=1400 audit(1785363751.961:146): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.028953][ T3297] veth0_macvtap: entered promiscuous mode [ 36.043655][ T28] audit: type=1400 audit(1785363751.991:147): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.069444][ T28] audit: type=1400 audit(1785363751.991:148): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="gadgetfs" ino=3901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 36.093433][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.101330][ T3306] veth1_vlan: entered promiscuous mode [ 36.117667][ T3297] veth1_macvtap: entered promiscuous mode [ 36.125752][ T3310] veth1_vlan: entered promiscuous mode [ 36.134863][ T3305] veth1_macvtap: entered promiscuous mode [ 36.140760][ T28] audit: type=1400 audit(1785363752.151:149): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.172253][ T28] audit: type=1400 audit(1785363752.151:150): avc: denied { open } for pid=3296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.187382][ T3306] veth0_macvtap: entered promiscuous mode [ 36.198183][ T28] audit: type=1400 audit(1785363752.151:151): avc: denied { ioctl } for pid=3296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.230593][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.240095][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.252127][ T28] audit: type=1400 audit(1785363752.161:152): avc: denied { name_bind } for pid=3500 comm="syz.3.4" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 36.260044][ T3310] veth0_macvtap: entered promiscuous mode [ 36.274417][ T28] audit: type=1400 audit(1785363752.161:153): avc: denied { node_bind } for pid=3500 comm="syz.3.4" saddr=fe80::bb src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 36.280774][ T3306] veth1_macvtap: entered promiscuous mode [ 36.324449][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.334736][ T3310] veth1_macvtap: entered promiscuous mode [ 36.349029][ T311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.359272][ T311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.373946][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.388774][ T311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.398750][ T311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.406715][ T3501] loop3: detected capacity change from 0 to 512 [ 36.419800][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.428663][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.443820][ T3501] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 36.454040][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.463243][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.467041][ T3501] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.4: bad orphan inode 15 [ 36.483015][ T3501] loop3: lost filesystem error report for type 5 error -117 [ 36.483675][ T3501] ext4_test_bit(bit=14, block=18) = 1 [ 36.491226][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 36.491252][ C1] EXT4-fs (loop3): initial error at time 1785363752: ext4_orphan_get:1425 [ 36.491306][ C1] EXT4-fs (loop3): last error at time 1785363752: ext4_orphan_get:1425 [ 36.528981][ T3501] is_bad_inode(inode)=0 [ 36.534663][ T311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.535157][ T3501] NEXT_ORPHAN(inode)=1023 [ 36.543782][ T311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.548727][ T3501] max_ino=32 [ 36.571033][ T3501] i_nlink=0 [ 36.582757][ T311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.591876][ T311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.593253][ T3501] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4: bg 0: block 161: padding at end of block bitmap is not set [ 36.616355][ T3501] loop3: lost filesystem error report for type 5 error -117 [ 36.622097][ T3501] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 36.642100][ T311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.642445][ T3501] loop3: lost filesystem error report for type 5 error -117 [ 36.660712][ T311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.668111][ T3501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.691628][ T3501] ext2 filesystem being mounted at /0/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 36.714046][ T311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.730663][ T311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.769558][ T311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.797259][ T311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.832432][ T311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.850242][ T311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.895354][ T3511] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5'. [ 36.951545][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.069509][ T3511] syz.4.5 (3511) used greatest stack depth: 10432 bytes left [ 37.390494][ T3539] loop4: detected capacity change from 0 to 512 [ 37.420905][ T3539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.440789][ T3537] IPv6: NLM_F_CREATE should be specified when creating new route [ 37.450398][ T3539] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.467025][ T3545] loop0: detected capacity change from 0 to 256 [ 37.496142][ T3545] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.816208][ T3544] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 37.829253][ T3541] loop2: detected capacity change from 0 to 512 [ 37.837711][ T3544] FAT-fs (loop0): Filesystem has been set read-only [ 37.845564][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.847547][ T3544] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 37.877450][ T3544] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 37.925786][ T3544] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 37.940506][ T3541] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.13: corrupted in-inode xattr: overlapping e_value [ 37.999952][ T3541] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.000646][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 38.018448][ C1] EXT4-fs (loop2): initial error at time 1785363754: ext4_iget_extra_inode:5180: inode 15 [ 38.029056][ C1] EXT4-fs (loop2): last error at time 1785363754: ext4_iget_extra_inode:5180: inode 15 [ 38.057606][ T3541] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.13: couldn't read orphan inode 15 (err -117) [ 38.078984][ T3541] loop2: lost filesystem error report for type 5 error -117 [ 38.110684][ T3541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.158343][ T3541] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.187183][ T3553] netlink: 112 bytes leftover after parsing attributes in process `syz.4.16'. [ 38.376293][ T3565] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 38.458882][ T3567] netlink: 'syz.0.21': attribute type 1 has an invalid length. [ 38.473443][ T3571] loop3: detected capacity change from 0 to 512 [ 38.480161][ T3571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.488753][ T3567] netlink: 224 bytes leftover after parsing attributes in process `syz.0.21'. [ 38.510563][ T3572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21'. [ 38.510691][ T3571] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 38.609016][ T3574] netlink: 128 bytes leftover after parsing attributes in process `syz.2.23'. [ 38.637206][ T3577] random: crng reseeded on system resumption [ 38.796759][ T3584] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 38.952977][ T3597] loop2: detected capacity change from 0 to 512 [ 39.028282][ T3602] x_tables: unsorted underflow at hook 3 [ 39.031175][ T3597] mmap: syz.2.32 (3597) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.237311][ T3412] IPVS: starting estimator thread 0... [ 39.247165][ T3597] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 39.341193][ T3611] IPVS: using max 1920 ests per chain, 96000 per kthread [ 39.379167][ T3620] 9p: Bad value for 'rfdno' [ 39.474235][ T3624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.40'. [ 39.530240][ T3624] syzkaller0: entered promiscuous mode [ 39.540763][ T3624] syzkaller0: entered allmulticast mode [ 39.947757][ T3635] hub 8-0:1.0: USB hub found [ 40.031501][ T3635] hub 8-0:1.0: 8 ports detected [ 40.562170][ T3646] netlink: 36 bytes leftover after parsing attributes in process `syz.1.42'. [ 41.124514][ T28] kauditd_printk_skb: 269 callbacks suppressed [ 41.124528][ T28] audit: type=1400 audit(1785363757.141:423): avc: denied { setopt } for pid=3643 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.250035][ T28] audit: type=1400 audit(1785363757.261:424): avc: denied { bind } for pid=3655 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.516892][ T28] audit: type=1400 audit(1785363757.281:425): avc: denied { write } for pid=3655 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.577356][ T28] audit: type=1326 audit(1785363757.491:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.3.46" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb424e7df99 code=0x7ffc0000 [ 41.655550][ T28] audit: type=1326 audit(1785363757.491:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.3.46" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb424e7df99 code=0x7ffc0000 [ 41.742122][ T28] audit: type=1326 audit(1785363757.491:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.3.46" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb424e7df99 code=0x7ffc0000 [ 41.817710][ T28] audit: type=1326 audit(1785363757.491:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.3.46" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb424e7df99 code=0x7ffc0000 [ 41.904220][ T28] audit: type=1326 audit(1785363757.491:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.3.46" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fb424e7df99 code=0x7ffc0000 [ 41.979021][ T3667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3667 comm=syz.3.47 [ 42.015405][ T28] audit: type=1326 audit(1785363757.501:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.3.46" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb424e7df99 code=0x7ffc0000 [ 42.071122][ T28] audit: type=1326 audit(1785363757.501:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3658 comm="syz.3.46" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb424e7df99 code=0x7ffc0000 [ 42.482311][ T3680] loop1: detected capacity change from 0 to 512 [ 42.530856][ T3680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.545358][ T3680] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.581890][ T3680] capability: warning: `syz.1.48' uses deprecated v2 capabilities in a way that may be insecure [ 42.814436][ T3684] netlink: 64 bytes leftover after parsing attributes in process `syz.3.49'. [ 43.050284][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.091732][ T3696] loop4: detected capacity change from 0 to 489 [ 43.118992][ T3700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.59'. [ 43.296905][ T3715] capability: warning: `syz.1.64' uses 32-bit capabilities (legacy support in use) [ 43.616768][ T3733] loop1: detected capacity change from 0 to 512 [ 43.624577][ T3733] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.040083][ T3738] process 'syz.3.70' launched './file0' with NULL argv: empty string added [ 44.470205][ T3743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.72'. [ 44.833362][ T3758] netlink: 'syz.0.78': attribute type 15 has an invalid length. [ 45.024898][ T3769] xt_socket: unknown flags 0x48 [ 45.203667][ T3773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.83'. [ 45.253893][ T3774] loop0: detected capacity change from 0 to 512 [ 45.298408][ T3774] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.82: bg 0: block 5: invalid block bitmap [ 45.304411][ T3768] loop5: detected capacity change from 0 to 7 [ 45.328366][ T3774] loop0: lost filesystem error report for type 5 error -117 [ 45.329676][ T3774] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 45.337024][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 45.337045][ C1] EXT4-fs (loop0): initial error at time 1785363761: ext4_validate_block_bitmap:432 [ 45.337090][ C1] EXT4-fs (loop0): last error at time 1785363761: ext4_validate_block_bitmap:432 [ 45.371113][ T3774] loop0: lost filesystem error report for type 5 error -117 [ 45.373428][ T3774] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.82: invalid indirect mapped block 3 (level 2) [ 45.373463][ T3774] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.374630][ T3774] EXT4-fs (loop0): 1 orphan inode deleted [ 45.374647][ T3774] EXT4-fs (loop0): 1 truncate cleaned up [ 45.375161][ T3774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.804644][ T3793] xfrm1: entered allmulticast mode [ 45.958197][ T3806] Zero length message leads to an empty skb [ 45.992111][ T3806] loop4: detected capacity change from 0 to 512 [ 46.020483][ T3806] ext4: Bad value for 'data_err' [ 46.121811][ T3815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.95'. [ 46.135371][ T3815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.95'. [ 46.150487][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 46.150500][ T28] audit: type=1400 audit(1785363762.161:478): avc: denied { write } for pid=3818 comm="syz.1.97" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 46.167556][ T3815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.95'. [ 46.218093][ T3815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.95'. [ 46.219101][ T28] audit: type=1400 audit(1785363762.231:479): avc: denied { read } for pid=3814 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 46.306901][ T3820] loop4: detected capacity change from 0 to 256 [ 46.813844][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.863131][ T3840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=3840 comm=syz.3.103 [ 47.047594][ T3851] loop1: detected capacity change from 0 to 512 [ 47.054736][ T3851] ext4: Bad value for 'data_err' [ 47.130255][ T3853] loop0: detected capacity change from 0 to 8192 [ 47.142554][ T3853] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.191160][ T3853] netlink: 'syz.0.107': attribute type 10 has an invalid length. [ 47.204850][ T3853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.107'. [ 47.216105][ T3853] dummy0: entered promiscuous mode [ 47.348246][ T28] audit: type=1400 audit(1785363763.361:480): avc: denied { getopt } for pid=3858 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.414399][ T3861] bridge_slave_0: left allmulticast mode [ 47.420282][ T3861] bridge_slave_0: left promiscuous mode [ 47.427114][ T3861] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.453373][ T3861] bridge_slave_1: left allmulticast mode [ 47.459373][ T3861] bridge_slave_1: left promiscuous mode [ 47.465404][ T3861] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.475836][ T3861] bond0: (slave bond_slave_0): Releasing backup interface [ 47.493198][ T3861] bond0: (slave bond_slave_1): Releasing backup interface [ 47.518583][ T3861] team0: Port device team_slave_0 removed [ 47.541565][ T3861] team0: Port device team_slave_1 removed [ 47.554656][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.562430][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.571869][ T3861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.579341][ T3861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.596024][ T3861] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 47.622547][ T3865] loop0: detected capacity change from 0 to 8192 [ 47.629922][ T3863] team0: Mode changed to "loadbalance" [ 47.681643][ T28] audit: type=1326 audit(1785363763.701:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.1.113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4a46df99 code=0x7ffc0000 [ 47.709049][ T3865] loop0: p1 p2 p4[DM] [ 47.716133][ T28] audit: type=1326 audit(1785363763.701:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.1.113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4a46df99 code=0x7ffc0000 [ 47.716776][ T3865] loop0: p1 size 67898881 extends beyond EOD, [ 47.742425][ T28] audit: type=1326 audit(1785363763.701:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.1.113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4a46df99 code=0x7ffc0000 [ 47.766264][ T3865] truncated [ 47.805449][ T3865] loop0: p4 size 262144 extends beyond EOD, truncated [ 47.827224][ T28] audit: type=1326 audit(1785363763.701:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.1.113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fbc4a46df99 code=0x7ffc0000 [ 47.900882][ T3879] loop1: detected capacity change from 0 to 512 [ 47.909908][ T28] audit: type=1326 audit(1785363763.701:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.1.113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4a46df99 code=0x7ffc0000 [ 47.960477][ T3879] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.974814][ T28] audit: type=1326 audit(1785363763.701:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.1.113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4a46df99 code=0x7ffc0000 [ 48.028166][ T28] audit: type=1326 audit(1785363763.701:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3869 comm="syz.1.113" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4a46df99 code=0x7ffc0000 [ 48.069285][ T3879] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.117: Allocating blocks 41-42 which overlap fs metadata [ 48.085965][ T3879] loop1: lost filesystem error report for type 5 error -117 [ 48.089823][ T3879] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.117: Failed to acquire dquot type 1 [ 48.097173][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 48.097192][ C1] EXT4-fs (loop1): initial error at time 1785363764: ext4_mb_mark_diskspace_used:4222 [ 48.097231][ C1] EXT4-fs (loop1): last error at time 1785363764: ext4_mb_mark_diskspace_used:4222 [ 48.134558][ T3879] loop1: lost filesystem error report for type 5 error -117 [ 48.135208][ T3879] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 48.157118][ T3879] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #12: comm syz.1.117: corrupted inode contents [ 48.169392][ T3879] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 48.170258][ T3861] syz.0.111 (3861) used greatest stack depth: 9864 bytes left [ 48.187418][ T3879] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #12: comm syz.1.117: mark_inode_dirty error [ 48.203577][ T3879] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 48.206141][ T3879] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #12: comm syz.1.117: corrupted inode contents [ 48.235289][ T3879] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 48.235472][ T3879] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #12: comm syz.1.117: mark_inode_dirty error [ 48.263534][ T3879] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 48.263807][ T3879] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #12: comm syz.1.117: corrupted inode contents [ 48.290583][ T3879] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 48.336689][ T3895] FAULT_INJECTION: forcing a failure. [ 48.336689][ T3895] name failslab, interval 1, probability 0, space 0, times 1 [ 48.358705][ T3895] CPU: 1 UID: 0 PID: 3895 Comm: syz.3.121 Not tainted syzkaller #0 PREEMPT(lazy) [ 48.358798][ T3895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 48.358813][ T3895] Call Trace: [ 48.358821][ T3895] [ 48.358829][ T3895] __dump_stack+0x1d/0x30 [ 48.358851][ T3895] dump_stack_lvl+0x95/0xd0 [ 48.358868][ T3895] dump_stack+0x15/0x1b [ 48.358955][ T3895] should_fail_ex+0x25e/0x270 [ 48.358979][ T3895] ? sctp_association_new+0x6d/0x1160 [ 48.359004][ T3895] should_failslab+0x8c/0xb0 [ 48.359098][ T3895] __kmalloc_cache_noprof+0x7b/0x3d0 [ 48.359177][ T3895] ? sctp_association_new+0x6d/0x1160 [ 48.359199][ T3895] sctp_association_new+0x6d/0x1160 [ 48.359220][ T3895] ? sctp_v6_scope+0x70/0x80 [ 48.359236][ T3895] sctp_connect_new_asoc+0x1a8/0x3a0 [ 48.359287][ T3895] sctp_sendmsg+0x105f/0x1d00 [ 48.359348][ T3895] ? __pfx_sctp_sendmsg+0x10/0x10 [ 48.359387][ T3895] inet_sendmsg+0xc5/0xd0 [ 48.359477][ T3895] ? __pfx_inet_sendmsg+0x10/0x10 [ 48.359499][ T3895] ____sys_sendmsg+0x4e8/0x580 [ 48.359608][ T3895] ___sys_sendmsg+0x195/0x1e0 [ 48.359647][ T3895] ? terminate_walk+0x1d5/0x200 [ 48.359679][ T3895] __sys_sendmmsg+0x185/0x320 [ 48.359756][ T3895] __x64_sys_sendmmsg+0x57/0x70 [ 48.359783][ T3895] x64_sys_call+0x27aa/0x3020 [ 48.359813][ T3895] do_syscall_64+0x136/0x3c0 [ 48.359905][ T3895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.359923][ T3895] RIP: 0033:0x7fb424e7df99 [ 48.359937][ T3895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.360023][ T3895] RSP: 002b:00007fb423895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 48.360039][ T3895] RAX: ffffffffffffffda RBX: 00007fb425106180 RCX: 00007fb424e7df99 [ 48.360051][ T3895] RDX: 0000000000000002 RSI: 0000200000000a00 RDI: 0000000000000003 [ 48.360062][ T3895] RBP: 00007fb423895090 R08: 0000000000000000 R09: 0000000000000000 [ 48.360073][ T3895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.360083][ T3895] R13: 00007fb425106218 R14: 00007fb425106180 R15: 00007ffd2cc0d398 [ 48.360202][ T3895] [ 48.600964][ T3879] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 48.684488][ T3879] loop1: lost filesystem error report for type 5 error -117 [ 48.685092][ T3879] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #12: comm syz.1.117: corrupted inode contents [ 48.728739][ T3879] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 48.730347][ T3879] EXT4-fs error (device loop1): ext4_truncate:4691: inode #12: comm syz.1.117: mark_inode_dirty error [ 48.775058][ T3879] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 48.775270][ T3879] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 48.808767][ T3879] loop1: lost filesystem error report for type 5 error -117 [ 48.816683][ T3879] EXT4-fs (loop1): 1 truncate cleaned up [ 48.835153][ T3879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.864780][ T3897] vlan2: entered allmulticast mode [ 48.873851][ T3897] macsec0: entered allmulticast mode [ 48.881155][ T3897] veth1_macvtap: entered allmulticast mode [ 48.902085][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.058974][ T3912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.130'. [ 49.083230][ T3915] loop1: detected capacity change from 0 to 2048 [ 49.083845][ T3916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.131'. [ 49.148912][ T3915] loop1: p1 < > p4 < > [ 49.169699][ T3915] loop1: partition table partially beyond EOD, truncated [ 49.201941][ T3915] loop1: p4 start 42180 is beyond EOD, truncated [ 49.377122][ T3941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'. [ 49.398558][ T3936] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 49.405003][ T3936] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 49.727314][ T3947] xt_hashlimit: size too large, truncated to 1048576 [ 49.851117][ T3970] syzkaller0: entered promiscuous mode [ 49.858472][ T3970] syzkaller0: entered allmulticast mode [ 49.987778][ T3977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 50.353193][ T3974] loop1: detected capacity change from 0 to 1024 [ 50.353542][ T3993] netlink: 'syz.2.162': attribute type 16 has an invalid length. [ 50.353588][ T3993] netlink: 'syz.2.162': attribute type 17 has an invalid length. [ 50.388078][ T3974] EXT4-fs: Ignoring removed oldalloc option [ 50.412426][ T3974] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 50.428651][ T3974] JBD2: no valid journal superblock found [ 50.429792][ T3995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.163'. [ 50.441123][ T3974] EXT4-fs (loop1): Could not load journal inode [ 50.580715][ T4001] netlink: 56 bytes leftover after parsing attributes in process `syz.1.164'. [ 50.676576][ T4004] loop1: detected capacity change from 0 to 2048 [ 50.743750][ T4004] Alternate GPT is invalid, using primary GPT. [ 50.750178][ T4004] loop1: p2 p3 p7 [ 50.783602][ T4003] xt_hashlimit: size too large, truncated to 1048576 [ 50.821201][ T4007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 50.963823][ T4015] program syz.3.171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.106244][ T4027] loop3: detected capacity change from 0 to 512 [ 51.123919][ T4027] sctp: [Deprecated]: syz.3.176 (pid 4027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 51.123919][ T4027] Use struct sctp_sack_info instead [ 51.204432][ T4030] program syz.3.176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.292358][ T4034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'. [ 51.454962][ T4022] xt_hashlimit: size too large, truncated to 1048576 [ 51.562176][ T4047] loop1: detected capacity change from 0 to 512 [ 51.615815][ T4047] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.183: casefold flag without casefold feature [ 51.628974][ T4047] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.630657][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 51.631734][ T4047] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.183: couldn't read orphan inode 15 (err -117) [ 51.639799][ C0] EXT4-fs (loop1): initial error at time 1785364023: ext4_orphan_get:1399: inode 15 [ 51.639853][ C0] EXT4-fs (loop1): last error at time 1785364023: ext4_orphan_get:1399: inode 15 [ 51.689389][ T4047] loop1: lost filesystem error report for type 5 error -117 [ 51.689975][ T4047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.848509][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.894898][ T4058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 51.907225][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 51.907240][ T28] audit: type=1400 audit(1785364023.924:619): avc: denied { bind } for pid=4059 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.982598][ T28] audit: type=1400 audit(1785364023.964:620): avc: denied { setopt } for pid=4059 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.015760][ T28] audit: type=1400 audit(1785364023.974:621): avc: denied { listen } for pid=4059 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 52.036249][ T28] audit: type=1400 audit(1785364023.974:622): avc: denied { accept } for pid=4059 comm="syz.2.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 52.088570][ T4058] macvtap1: entered allmulticast mode [ 52.097725][ T4058] bridge0: entered allmulticast mode [ 52.104348][ T4058] bridge0: entered promiscuous mode [ 52.105742][ T4066] loop0: detected capacity change from 0 to 512 [ 52.118252][ T4066] ext4: Bad value for 'data_err' [ 52.128033][ T4058] bridge0: port 3(macvtap1) entered blocking state [ 52.130428][ T4053] xt_hashlimit: size too large, truncated to 1048576 [ 52.135743][ T4058] bridge0: port 3(macvtap1) entered disabled state [ 52.187896][ T4058] bridge0: left allmulticast mode [ 52.281525][ T11] bridge0: left promiscuous mode [ 52.451361][ T4093] syzkaller0: entered promiscuous mode [ 52.456923][ T4093] syzkaller0: entered allmulticast mode [ 52.489074][ T4096] loop4: detected capacity change from 0 to 1764 [ 52.495961][ T4096] iso9660: Unknown parameter 'overriderockpårm' [ 52.610831][ T4098] loop4: detected capacity change from 0 to 512 [ 52.634918][ T4098] ext4: Bad value for 'data_err' [ 52.685979][ T4104] loop0: detected capacity change from 0 to 4096 [ 52.706208][ T4104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.721709][ T28] audit: type=1400 audit(1785364024.734:623): avc: denied { write } for pid=4103 comm="syz.0.205" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.743503][ T28] audit: type=1400 audit(1785364024.734:624): avc: denied { create } for pid=4103 comm="syz.0.205" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.774102][ T28] audit: type=1400 audit(1785364024.734:625): avc: denied { read write } for pid=4103 comm="syz.0.205" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.796884][ T28] audit: type=1400 audit(1785364024.734:626): avc: denied { open } for pid=4103 comm="syz.0.205" path="/40/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.878182][ T4115] tun0: tun_chr_ioctl cmd 2147767511 [ 52.924776][ T28] audit: type=1400 audit(1785364024.934:627): avc: denied { recv } for pid=4117 comm="syz.3.210" saddr=10.128.0.163 src=30036 daddr=10.128.0.93 dest=42716 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 52.993076][ T28] audit: type=1326 audit(1785364024.984:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz.2.212" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef57ddf99 code=0x7ffc0000 [ 53.119816][ T4106] xt_hashlimit: size too large, truncated to 1048576 [ 53.145232][ T4129] loop4: detected capacity change from 0 to 1024 [ 53.174835][ T4129] EXT4-fs: Ignoring removed bh option [ 53.195942][ T4129] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.207964][ T4136] netlink: 136 bytes leftover after parsing attributes in process `syz.2.216'. [ 53.229004][ T4136] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 53.251620][ T4129] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 53.283599][ T4129] System zones: 0-1, 3-12 [ 53.297039][ T4129] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #3: block 1: comm syz.4.214: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.326211][ T4129] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 53.326335][ T4129] EXT4-fs (loop4): Remounting filesystem read-only [ 53.335439][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 53.335460][ C0] EXT4-fs (loop4): initial error at time 1785364025: ext4_map_blocks:833: inode 3: block 1 [ 53.335508][ C0] EXT4-fs (loop4): last error at time 1785364025: ext4_map_blocks:833: inode 3: block 1 [ 53.396028][ T4129] EXT4-fs (loop4): 1 orphan inode deleted [ 53.403901][ T4129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.452148][ T4144] loop2: detected capacity change from 0 to 512 [ 53.463362][ T4144] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.489826][ T4144] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.507193][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.513866][ T4103] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.532317][ T4144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.547027][ T4144] ext4 filesystem being mounted at /31/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.612509][ T4152] blktrace: Concurrent blktraces are not allowed on loop0 [ 53.631175][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.821904][ T4170] blktrace: Concurrent blktraces are not allowed on loop0 [ 53.923730][ T4177] loop2: detected capacity change from 0 to 512 [ 53.945010][ T4177] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.231: casefold flag without casefold feature [ 53.966443][ T4177] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.966695][ T4177] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.231: couldn't read orphan inode 15 (err -117) [ 53.975882][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 53.975908][ C0] EXT4-fs (loop2): initial error at time 1785364025: ext4_orphan_get:1399: inode 15 [ 53.975970][ C0] EXT4-fs (loop2): last error at time 1785364025: ext4_orphan_get:1399: inode 15 [ 54.022182][ T4177] loop2: lost filesystem error report for type 5 error -117 [ 54.022885][ T4177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.061104][ T4172] xt_hashlimit: size too large, truncated to 1048576 [ 54.109170][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.288444][ T4203] __nla_validate_parse: 1 callbacks suppressed [ 54.288529][ T4203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 54.297244][ T4204] blktrace: Concurrent blktraces are not allowed on loop0 [ 54.388560][ T4203] macvtap1: entered allmulticast mode [ 54.394990][ T4203] bridge0: entered allmulticast mode [ 54.401100][ T4203] bridge0: entered promiscuous mode [ 54.419898][ T4203] bridge0: port 3(macvtap1) entered blocking state [ 54.428649][ T4203] bridge0: port 3(macvtap1) entered disabled state [ 54.448636][ T4203] bridge0: left allmulticast mode [ 54.510789][ T11] bridge0: left promiscuous mode [ 55.194931][ T4240] blktrace: Concurrent blktraces are not allowed on loop6 [ 55.208440][ T4243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.254'. [ 55.268362][ T4245] netlink: 104 bytes leftover after parsing attributes in process `syz.2.255'. [ 55.427959][ T4251] loop1: detected capacity change from 0 to 1024 [ 55.453036][ T4251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.466473][ T4251] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.496639][ T49] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 55.517447][ T49] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 55.543160][ T49] EXT4-fs (loop1): This should not happen!! Data will be lost [ 55.543160][ T49] [ 55.553954][ T3297] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 55.565741][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 55.729824][ T4280] loop1: detected capacity change from 0 to 512 [ 55.736618][ T4280] ======================================================= [ 55.736618][ T4280] WARNING: The mand mount option has been deprecated and [ 55.736618][ T4280] and is ignored by this kernel. Remove the mand [ 55.736618][ T4280] option from the mount to silence this warning. [ 55.736618][ T4280] ======================================================= [ 55.772362][ T4280] EXT4-fs: Ignoring removed orlov option [ 55.780896][ T4280] EXT4-fs error (device loop1): ext4_get_journal_inode:5900: comm syz.1.268: inode #1191182336: comm syz.1.268: iget: illegal inode # [ 55.795023][ T4280] loop1: lost filesystem error report for type 5 error -117 [ 55.795228][ T4280] EXT4-fs (loop1): no journal found [ 55.802537][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 55.802557][ C1] EXT4-fs (loop1): initial error at time 1785364027: ext4_get_journal_inode:5900 [ 55.802590][ C1] EXT4-fs (loop1): last error at time 1785364027: ext4_get_journal_inode:5900 [ 55.832768][ T4280] EXT4-fs (loop1): can't get journal size [ 55.838892][ T4280] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 55.848822][ T4280] EXT4-fs (loop1): failed to initialize system zone (-22) [ 55.856182][ T4280] EXT4-fs (loop1): mount failed [ 56.063430][ T4298] loop4: detected capacity change from 0 to 4096 [ 56.089945][ T4298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.509422][ T4310] loop2: detected capacity change from 0 to 7 [ 56.533292][ T4310] loop2: [ 56.575298][ T4310] loop3: detected capacity change from 0 to 512 [ 56.637621][ T4310] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.682583][ T4302] loop1: detected capacity change from 0 to 1024 [ 56.692775][ T4310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.692912][ T4310] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.726126][ T4302] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.741018][ T2980] loop2: [ 56.770189][ T4302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.787345][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.790829][ T4302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.892329][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.939660][ T28] kauditd_printk_skb: 234 callbacks suppressed [ 56.939674][ T28] audit: type=1400 audit(1785364028.944:860): avc: denied { bind } for pid=4321 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.985578][ T28] audit: type=1400 audit(1785364028.944:861): avc: denied { setopt } for pid=4318 comm="syz.3.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.173852][ T4330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.281'. [ 57.193283][ T4327] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.381231][ T4339] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.441629][ T4339] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.519512][ T28] audit: type=1400 audit(1785364029.524:862): avc: denied { write } for pid=4338 comm="syz.4.285" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.718026][ T28] audit: type=1400 audit(1785364029.524:863): avc: denied { write } for pid=4338 comm="syz.4.285" path="/54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.783819][ T28] audit: type=1326 audit(1785364029.574:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4348 comm="syz.2.288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef57ddf99 code=0x7ffc0000 [ 57.783830][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.285'. [ 57.783848][ T4358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.285'. [ 57.809053][ T28] audit: type=1326 audit(1785364029.574:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4348 comm="syz.2.288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef57ddf99 code=0x7ffc0000 [ 57.809091][ T28] audit: type=1326 audit(1785364029.574:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4348 comm="syz.2.288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef57ddf99 code=0x7ffc0000 [ 57.809147][ T28] audit: type=1326 audit(1785364029.574:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4348 comm="syz.2.288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef57ddf99 code=0x7ffc0000 [ 57.939878][ T28] audit: type=1326 audit(1785364029.574:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4348 comm="syz.2.288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f1ef57ddf99 code=0x7ffc0000 [ 57.974580][ T28] audit: type=1326 audit(1785364029.574:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4348 comm="syz.2.288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef57ddf99 code=0x7ffc0000 [ 58.001618][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.021380][ T4367] netlink: 72 bytes leftover after parsing attributes in process `syz.3.293'. [ 58.049376][ T4371] set_capacity_and_notify: 2 callbacks suppressed [ 58.049389][ T4371] loop4: detected capacity change from 0 to 512 [ 58.075960][ T4371] ext4: Bad value for 'data_err' [ 58.655548][ T4380] loop3: detected capacity change from 0 to 1024 [ 58.667430][ T4380] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.710033][ T4380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.726389][ T4380] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.875718][ T4398] syzkaller0: entered promiscuous mode [ 58.881322][ T4398] syzkaller0: entered allmulticast mode [ 58.978858][ T4389] dvmrp8: entered allmulticast mode [ 59.150088][ T4422] loop2: detected capacity change from 0 to 512 [ 59.166449][ T4427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.310'. [ 59.174096][ T4424] blktrace: Concurrent blktraces are not allowed on loop2 [ 59.176184][ T4427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.310'. [ 59.185116][ T4422] ext4: Bad value for 'data_err' [ 59.219857][ T4427] loop3: detected capacity change from 0 to 512 [ 59.250302][ T4427] EXT4-fs: Ignoring removed orlov option [ 59.353239][ T4427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.477271][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.505951][ T4445] netlink: 'syz.2.317': attribute type 9 has an invalid length. [ 59.554609][ T4451] blktrace: Concurrent blktraces are not allowed on loop0 [ 59.665946][ T4462] program syz.4.323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.689775][ T4438] xt_hashlimit: size too large, truncated to 1048576 [ 59.703845][ T4464] loop3: detected capacity change from 0 to 512 [ 59.723196][ T4464] ext4: Bad value for 'data_err' [ 59.995810][ T4474] syzkaller0: entered promiscuous mode [ 60.012834][ T4474] syzkaller0: entered allmulticast mode [ 60.050049][ T4488] blktrace: Concurrent blktraces are not allowed on loop6 [ 60.169609][ T4497] loop3: detected capacity change from 0 to 256 [ 60.289943][ T4505] loop2: detected capacity change from 0 to 512 [ 60.335605][ T4505] ext4: Bad value for 'data_err' [ 60.350756][ T4511] loop1: detected capacity change from 0 to 512 [ 60.453746][ T4511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.341'. [ 60.509108][ T4518] loop3: detected capacity change from 0 to 1024 [ 60.549756][ T4518] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.560559][ T4518] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (4096), stripe is disabled [ 60.582158][ T4518] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 60.596378][ T4518] EXT4-fs (loop3): orphan cleanup on readonly fs [ 60.610728][ T4518] EXT4-fs error (device loop3): __ext4_get_inode_loc:4886: comm syz.3.343: Invalid inode table block 0 in block_group 0 [ 60.623759][ T4518] loop3: lost filesystem error report for type 5 error -117 [ 60.627292][ T4518] EXT4-fs (loop3): Remounting filesystem read-only [ 60.634732][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 60.634755][ C1] EXT4-fs (loop3): initial error at time 1785364032: __ext4_get_inode_loc:4886 [ 60.634781][ C1] EXT4-fs (loop3): last error at time 1785364032: __ext4_get_inode_loc:4886 [ 60.669219][ T4518] EXT4-fs (loop3): 1 truncate cleaned up [ 60.677985][ T4518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.727101][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.736327][ T4533] loop2: detected capacity change from 0 to 8192 [ 60.783924][ T4537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=4537 comm=syz.3.350 [ 60.799634][ T4539] syzkaller0: entered promiscuous mode [ 60.805306][ T4539] syzkaller0: entered allmulticast mode [ 60.811714][ T4533] loop2: p2 p4 [ 60.822513][ T4533] loop2: p2 start 269365764 is beyond EOD, truncated [ 60.836834][ T4533] loop2: p4 size 262144 extends beyond EOD, truncated [ 60.899841][ T4543] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 60.917505][ T4543] netlink: 'syz.3.353': attribute type 1 has an invalid length. [ 60.939074][ T4543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.967327][ T4545] ext4: Bad value for 'data_err' [ 61.017241][ T4547] bond1: (slave gretap1): making interface the new active one [ 61.054504][ T4547] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 61.164685][ T4547] syz.3.353 (4547) used greatest stack depth: 9640 bytes left [ 61.383692][ T4563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 61.480277][ T4563] bridge_slave_0: default FDB implementation only supports local addresses [ 61.752505][ T4572] 9pnet: p9_errstr2errno: server reported unknown error [ 61.806765][ T4576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'. [ 61.827907][ T4582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.366'. [ 61.839645][ T4576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 61.852542][ T4582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.366'. [ 61.886227][ T49] failed while handling packet from 1:60042 [ 61.928982][ T4592] netlink: 'syz.4.370': attribute type 10 has an invalid length. [ 61.972618][ T4592] team0: Device wg2 is of different type [ 61.976995][ T4594] netlink: 'syz.2.372': attribute type 21 has an invalid length. [ 61.988614][ T4594] netlink: 128 bytes leftover after parsing attributes in process `syz.2.372'. [ 62.011758][ T4594] netlink: 43 bytes leftover after parsing attributes in process `syz.2.372'. [ 62.029427][ T4598] FAULT_INJECTION: forcing a failure. [ 62.029427][ T4598] name failslab, interval 1, probability 0, space 0, times 0 [ 62.047742][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 62.047822][ T28] audit: type=1400 audit(1785364034.054:911): avc: denied { mount } for pid=4599 comm="syz.4.374" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 62.063489][ T4598] CPU: 1 UID: 0 PID: 4598 Comm: syz.1.373 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.063514][ T4598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 62.063527][ T4598] Call Trace: [ 62.063535][ T4598] [ 62.063543][ T4598] __dump_stack+0x1d/0x30 [ 62.063603][ T4598] dump_stack_lvl+0x95/0xd0 [ 62.063624][ T4598] dump_stack+0x15/0x1b [ 62.063685][ T4598] should_fail_ex+0x25e/0x270 [ 62.063718][ T4598] ? find_get_pmu_context+0x5a/0x430 [ 62.063794][ T4598] should_failslab+0x8c/0xb0 [ 62.063821][ T4598] __kmalloc_cache_noprof+0x7b/0x3d0 [ 62.063867][ T4598] ? find_get_pmu_context+0x5a/0x430 [ 62.063905][ T4598] find_get_pmu_context+0x5a/0x430 [ 62.063992][ T4598] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 62.064020][ T4598] ? find_get_context+0x46c/0x4f0 [ 62.064049][ T4598] __se_sys_perf_event_open+0x9b2/0x1250 [ 62.064157][ T4598] __x64_sys_perf_event_open+0x67/0x80 [ 62.064187][ T4598] x64_sys_call+0x2789/0x3020 [ 62.064288][ T4598] do_syscall_64+0x136/0x3c0 [ 62.064311][ T4598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.064384][ T4598] RIP: 0033:0x7fbc4a46df99 [ 62.064401][ T4598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.064419][ T4598] RSP: 002b:00007fbc48ec7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 62.064441][ T4598] RAX: ffffffffffffffda RBX: 00007fbc4a6f5fa0 RCX: 00007fbc4a46df99 [ 62.064455][ T4598] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000100 [ 62.064478][ T4598] RBP: 00007fbc48ec7090 R08: 0000000000000001 R09: 0000000000000000 [ 62.064491][ T4598] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 62.064502][ T4598] R13: 00007fbc4a6f6038 R14: 00007fbc4a6f5fa0 R15: 00007ffec84cbad8 [ 62.064551][ T4598] [ 62.280113][ T28] audit: type=1400 audit(1785364034.114:912): avc: denied { ioctl } for pid=4603 comm="syz.2.375" path="socket:[7900]" dev="sockfs" ino=7900 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.308912][ T28] audit: type=1400 audit(1785364034.234:913): avc: denied { ioctl } for pid=4605 comm="syz.3.376" path="socket:[7910]" dev="sockfs" ino=7910 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.430556][ T4627] ext4: Bad value for 'data_err' [ 62.506828][ T4621] EXT4-fs: Ignoring removed bh option [ 62.517428][ T4629] ext4: Bad value for 'data_err' [ 62.527337][ T4621] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.564353][ T4621] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 62.582908][ T4621] System zones: 0-1, 3-12 [ 62.602011][ T4621] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 1: comm syz.3.381: lblock 1 mapped to illegal pblock 1 (length 1) [ 62.639260][ T28] audit: type=1400 audit(1785364034.644:914): avc: denied { mount } for pid=4623 comm="syz.0.382" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 62.691230][ T4621] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 62.700639][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 62.716147][ C0] EXT4-fs (loop3): initial error at time 1785364034: ext4_map_blocks:833: inode 3: block 1 [ 62.726164][ C0] EXT4-fs (loop3): last error at time 1785364034: ext4_map_blocks:833: inode 3: block 1 [ 62.738223][ T4621] EXT4-fs (loop3): Remounting filesystem read-only [ 62.761597][ T28] audit: type=1400 audit(1785364034.704:915): avc: denied { map } for pid=4635 comm="syz.4.387" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 62.773226][ T4621] Quota error (device loop3): write_blk: dquota write failed [ 62.825063][ T4621] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 62.827281][ T28] audit: type=1400 audit(1785364034.764:917): avc: denied { map } for pid=4623 comm="syz.0.382" path="socket:[8967]" dev="sockfs" ino=8967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.849279][ T4621] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 62.903209][ T28] audit: type=1400 audit(1785364034.764:918): avc: denied { read accept } for pid=4623 comm="syz.0.382" path="socket:[8967]" dev="sockfs" ino=8967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.957926][ T4621] EXT4-fs (loop3): 1 orphan inode deleted [ 62.967958][ T4621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.991040][ T4638] loop4: p1 < > p3 < > [ 63.011870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 63.168943][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.460484][ T4661] set_capacity_and_notify: 5 callbacks suppressed [ 63.460498][ T4661] loop3: detected capacity change from 0 to 512 [ 63.482747][ T4661] ext4: Bad value for 'data_err' [ 63.667221][ T4668] hub 5-0:1.0: USB hub found [ 63.691074][ T4668] hub 5-0:1.0: 8 ports detected [ 64.292615][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 64.658139][ T4711] loop3: detected capacity change from 0 to 512 [ 65.018097][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.026605][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.275765][ T4711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.288573][ T4711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.394921][ T362] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.442862][ T362] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.488546][ T362] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.536595][ T362] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.581437][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 65.604392][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 65.623062][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 65.641510][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 65.664866][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 65.683192][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 65.701815][ T4725] loop4: detected capacity change from 0 to 512 [ 65.711396][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 65.744138][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 65.767494][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 65.788895][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 65.799277][ T4725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.824609][ T4725] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.876634][ T4725] EXT4-fs error (device loop4): ext4_nfs_get_inode:1578: inode #11: comm syz.4.420: iget: checksum invalid [ 65.928831][ T4732] loop2: detected capacity change from 0 to 512 [ 65.944441][ T4735] EXT4-fs warning (device loop4): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 65.971995][ T4732] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.019918][ T4725] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.420: corrupted xattr block 33: invalid checksum [ 66.041024][ T4732] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 66.072285][ T4732] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.422: inode #15: comm syz.2.422: iget: illegal inode # [ 66.089781][ T4725] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 66.121336][ T4735] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.420: corrupted xattr block 33: invalid checksum [ 66.136230][ T4732] loop2: lost filesystem error report for type 5 error -117 [ 66.136430][ T4732] EXT4-fs (loop2): Remounting filesystem read-only [ 66.143777][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 66.143797][ C0] EXT4-fs (loop2): initial error at time 1785364038: ext4_orphan_get:1399 [ 66.143816][ C0] EXT4-fs (loop2): last error at time 1785364038: ext4_orphan_get:1399 [ 66.182031][ T4732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.202483][ T4735] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 66.219623][ T4735] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.420: corrupted xattr block 33: invalid checksum [ 66.225073][ T4744] .¿: renamed from vlan0 (while UP) [ 66.269416][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.294295][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.330298][ T3310] ================================================================== [ 66.338417][ T3310] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 66.346147][ T3310] [ 66.348476][ T3310] write to 0xffff888237c26528 of 1 bytes by task 4759 on cpu 0: [ 66.356108][ T3310] folios_put_refs+0x2b4/0x300 [ 66.360882][ T3310] folio_batch_move_lru+0x367/0x3a0 [ 66.366090][ T3310] folio_add_lru+0x149/0x250 [ 66.370684][ T3310] shmem_get_folio_gfp+0x7cc/0xd90 [ 66.375803][ T3310] shmem_fault+0xf6/0x250 [ 66.380143][ T3310] handle_mm_fault+0x167a/0x2da0 [ 66.385095][ T3310] __get_user_pages+0x129c/0x1f10 [ 66.390159][ T3310] __mm_populate+0x242/0x390 [ 66.394768][ T3310] vm_mmap_pgoff+0x23b/0x2d0 [ 66.399356][ T3310] ksys_mmap_pgoff+0xc1/0x310 [ 66.404031][ T3310] x64_sys_call+0x14df/0x3020 [ 66.408707][ T3310] do_syscall_64+0x136/0x3c0 [ 66.413284][ T3310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.419171][ T3310] [ 66.421486][ T3310] read to 0xffff888237c26528 of 1 bytes by task 3310 on cpu 1: [ 66.429012][ T3310] __lru_add_drain_all+0x17e/0x450 [ 66.434113][ T3310] lru_add_drain_all+0x10/0x20 [ 66.438866][ T3310] invalidate_bdev+0x47/0x70 [ 66.443456][ T3310] ext4_put_super+0x614/0x7c0 [ 66.448134][ T3310] generic_shutdown_super+0xee/0x220 [ 66.453422][ T3310] kill_block_super+0x2a/0x70 [ 66.458181][ T3310] ext4_kill_sb+0x42/0x80 [ 66.462573][ T3310] deactivate_locked_super+0x75/0x1c0 [ 66.467960][ T3310] deactivate_super+0x97/0xa0 [ 66.472637][ T3310] cleanup_mnt+0x2c3/0x340 [ 66.477050][ T3310] __cleanup_mnt+0x19/0x20 [ 66.481460][ T3310] task_work_run+0x130/0x1a0 [ 66.486051][ T3310] exit_to_user_mode_loop+0x1e4/0x8c0 [ 66.491504][ T3310] do_syscall_64+0x23c/0x3c0 [ 66.496091][ T3310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.502171][ T3310] [ 66.504484][ T3310] value changed: 0x1f -> 0x01 [ 66.509149][ T3310] [ 66.511468][ T3310] Reported by Kernel Concurrency Sanitizer on: [ 66.517605][ T3310] CPU: 1 UID: 0 PID: 3310 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 66.527080][ T3310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 66.537213][ T3310] ================================================================== [ 66.566682][ T4765] syzkaller0: entered promiscuous mode [ 66.572569][ T4765] syzkaller0: entered allmulticast mode