last executing test programs: 44.788362627s ago: executing program 3 (id=40): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)="3002", 0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) fcntl$getflags(r0, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e00000000000000030000000700000003000000fdffffdf00000000000000002e"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x9}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000000180), 0x4) personality(0xfc6703a0ffffffff) 43.895506149s ago: executing program 3 (id=51): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r2 = socket$inet(0x2, 0x1, 0x0) (async) openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_config_ext={0x1, 0x8}, 0x10ecc9, 0x1224, 0x3, 0x5, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x38624b38}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {}, [], {}, [], {0x8}, {0x10}}, 0x24, 0x0) (async, rerun: 32) r3 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0xad05725454c62502, &(0x7f0000000240)={0x1, 0x3, 0x5b, 0xffff000000000000}) (rerun: 32) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) (async) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) (async) mq_timedreceive(r3, &(0x7f0000000880)=""/202, 0xca, 0x100000000000000, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[0x0]) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r6 = socket$inet6(0xa, 0x80002, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) 43.86250914s ago: executing program 3 (id=52): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000340)=0x32, 0x4) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8309}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac4200083f0afb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) fstat(r1, &(0x7f0000000440)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x8, 0x1}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x4c, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012000b00010067656e65766500000c00028005000c000100000008000a00", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r10, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r11, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x81, 0x2e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x20004040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) 43.45453279s ago: executing program 3 (id=57): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) fallocate(r0, 0x0, 0x1, 0x2000402) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="30000000030603000000000000000000010000030900020073797a31000000000500010007"], 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x4045870) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x72b7, 0x8}) lseek(r0, 0x3ff, 0x3) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0], 0xfe, 0x27f, &(0x7f00000005c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x24040, 0x10) r4 = memfd_create(&(0x7f0000000300)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r7 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xd, 0x6}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYBLOB="02d8f5a666eba673a97593362f66c68e2bbf8a5ddde0d79ae0df33d46e1c524e7b2c2058a396674294b146397dab0ef2210c2edc8ef6d3c6947741ef58d5b3a824fee1a8e990c43948a127342360a437ce8e05162b141380b64ce55ec2"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r10], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xb}, 0x80, 0x35, 0xfffffffa, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x7}, 0x8) socket(0x10, 0x3, 0x0) 43.06654175s ago: executing program 3 (id=60): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmmsg(r2, &(0x7f0000001300)=[{{&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x7640, @local}}, 0x80, &(0x7f0000001240)=[{&(0x7f00000004c0)="de2e14805aba678e7d87fbfaa3478c63bc47fa00a6bd8409d3d854f756efb4c668613bf90a6f23b95b0fd9adcc83f5b650eb93e4aeab83c4bb614301f65dd1a33d40dc4db3e02d0214dea45c1bc03802bfdbeb7edf81690e7cc190a16f7bae9f24e0d75acd7ea265f2f75ac3e9b754e6d7b8218756d87a94be644d40ade0e02073652871d758ddb249dabbb6b40bd42a70824287183002f895d65b043babf2c4f4300ad3e2e02677141821a41b5f13f89b252192e89b35275dd0572e4f1099", 0xbf}, {&(0x7f0000000640)="eea7d2987eb216c23ac9ecc585ace566e24c732401708fa72199fa51fa91980f73878112576bc4eb4c32ecbf187af0f1bd3c6db64ce91051c80d418cc6723bb49daed102d085522a8a45b084f449ef64b227488309eee257", 0x58}, {&(0x7f00000006c0)="cb04e577e11dbac0fddab467a4623e7e5a7396e5ebf7bde2af621fa327bf", 0x1e}, {&(0x7f0000001100)="ce54a363840580d6b39c985829b38601e75648d546862c36a11cbb4a14b411a376538a7c160b472c17cd04cd641e50e5dc3af7c0fb61b08114516c4bd690135d03fbce623a80592bee561e91a38cd75f2599211a14c7e43f146151ac8d393703f59f83fb7e82e726ea6f3f84cbfc00c489449cd87c674854cd1e1e83ecb557a3266c7d78fe5633853b6db19fedc29f574179bd2b53cf829de06e682c3b7cb59f703048d890a6147b87fc50c424c5e9e465b27b4aeab1b93f29ae77aa6ba17e140c74e5323f920f4a8d5fdd4f21999a64f811d48f", 0xd4}, {&(0x7f0000001200)="c5db4c69d0", 0x5}], 0x5, &(0x7f00000012c0)=[{0x10, 0xa, 0x7fffffff}], 0x10}}], 0x1, 0x10) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r8, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000580)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000380)=r10) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r11, 0xffffffffffffffff, 0x0) mkdirat$cgroup(r6, &(0x7f0000000080)='syz0\x00', 0x1ff) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x3, 0x10, 0x5, 0x1, 0x7, 0x6}, [@TCA_NETEM_CORR={0x10, 0x1, {0x4, 0x0, 0x7}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x2000067, 0x8001}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) socket$nl_route(0x10, 0x3, 0x0) 42.512738744s ago: executing program 3 (id=70): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x100000001}, 0x0, 0x0, 0x0, 0x5, 0x0, 0xae}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x9, @dev={0xfe, 0x80, '\x00', 0x20}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x3a63, &(0x7f00000006c0)={0x0, 0x108274, 0x4000, 0x3, 0x846}) syz_usb_disconnect(0xffffffffffffffff) r1 = socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000008, 0x900000830d}, 0x10000, 0x2, 0xfffffffe, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x101, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x3}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x0, 0x1, 0x0, 0x0, 0x0, @broadcast}, 0x10) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00c563000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076e57468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005140000001100010000000000000000000000000a"], 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 42.447853466s ago: executing program 32 (id=70): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x100000001}, 0x0, 0x0, 0x0, 0x5, 0x0, 0xae}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x9, @dev={0xfe, 0x80, '\x00', 0x20}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x3a63, &(0x7f00000006c0)={0x0, 0x108274, 0x4000, 0x3, 0x846}) syz_usb_disconnect(0xffffffffffffffff) r1 = socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000008, 0x900000830d}, 0x10000, 0x2, 0xfffffffe, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x101, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x3}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x0, 0x1, 0x0, 0x0, 0x0, @broadcast}, 0x10) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00c563000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076e57468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005140000001100010000000000000000000000000a"], 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 38.912549284s ago: executing program 5 (id=71): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e5b, 0x7ffffffe, @dev={0xfe, 0x80, '\x00', 0x13}, 0x5}, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x54a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20) creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x140) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x1, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, r7, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd91}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x70}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44011}, 0x0) pwritev(r4, &(0x7f0000000240), 0x0, 0x0, 0x3) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 38.746957418s ago: executing program 5 (id=114): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x4, @perf_config_ext, 0x1000a1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='!\x00') setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket(0x10, 0x803, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) 23.689640786s ago: executing program 33 (id=114): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x4, @perf_config_ext, 0x1000a1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='!\x00') setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket(0x10, 0x803, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) 19.495640751s ago: executing program 6 (id=242): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") open(&(0x7f0000000140)='./file1\x00', 0x0, 0x21) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) setresuid(0x0, 0xee00, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030003000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfafb70ee09c", 0x14}], 0x2}, 0x4000000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x4cf, &(0x7f0000000500)="$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") statx(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2000, 0x2dd8806920477201, 0x0) r2 = getpid() r3 = socket(0x11, 0xa, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r4 = syz_pidfd_open(r2, 0x0) process_mrelease(r4, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0x5, 0x1}, {0x4d, 0x2}, @cond=[{0x9, 0x528c, 0xc, 0x800, 0xf535, 0xf4a}, {0x4000, 0x805, 0x1, 0x7, 0x0, 0xffff}]}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r5, 0x80404518, &(0x7f0000001300)=""/115) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r6 = open(&(0x7f0000000200)='./file1\x00', 0xc07d, 0x11c) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f00000000c0)={0x0, 0x5, 0x2, 0x4de}) 19.069074052s ago: executing program 6 (id=299): syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0xa001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000000)=0x5, 0x9, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) readv(r0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/118, 0x76}], 0x1) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r2 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0x2000e7b6, 0x13500}, &(0x7f0000000280), &(0x7f0000001880), &(0x7f0000000000)) poll(&(0x7f0000000a80)=[{r2, 0x1000}], 0x1, 0x6) read(r1, &(0x7f0000000040)=""/83, 0x53) openat$vcs(0xffffffffffffff9c, 0xfffffffffffffffe, 0x105000, 0x0) 17.58395327s ago: executing program 6 (id=328): pipe(&(0x7f00000000c0)) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 17.57479847s ago: executing program 34 (id=328): pipe(&(0x7f00000000c0)) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.215324565s ago: executing program 4 (id=508): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/252, 0xfc}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 4.173522286s ago: executing program 4 (id=510): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x8d0a, 0x0, 0x3, 0x8, 0x8001, 0x7fff, 0x0, 0xfffffffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) flistxattr(r0, &(0x7f0000000080)=""/176, 0xb0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000001c0)=0x7ff00000) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000140)=0x80000000) 4.163176826s ago: executing program 4 (id=512): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={r3, r4, 0x26, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0x30) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x11, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x93}, [@map_fd={0x18, 0xa, 0x1, 0x0, r0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @exit, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x2, 0x0, 0x54bd91a13049d934, 0x20, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0xffffff85, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000, r2}, 0x18) 4.140447297s ago: executing program 4 (id=514): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4, 0x0, 0xf00}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.964299581s ago: executing program 4 (id=516): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='\\x01000000 2000000000 0 0 0 krb5 \\x0', 0x24) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102524, 0x0, 0x8, 0x8, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r1 = inotify_init() syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5a, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e9, 0x7ff, 0x4, 0x7, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20, @local}, {0x2, 0x200, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401}) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="0d04"], 0x14}, 0x1, 0x0, 0x0, 0x20804}, 0x44800) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002, 0xffff, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) sendmmsg$inet(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x4040000) close_range(r1, 0xffffffffffffffff, 0x0) 3.669970438s ago: executing program 4 (id=521): r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r0, 0x1) flock(r0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r3, 0x7, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r4, r2, 0x4, r2}, 0xa) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000180)={[{@abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noinit_itable}, {@errors_remount}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x6, 0x60d, &(0x7f0000000340)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40086602, &(0x7f0000000000)) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000300)=ANY=[@ANYBLOB="7d53000014"]) 2.304460133s ago: executing program 1 (id=539): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) (fail_nth: 2) writev(r0, &(0x7f0000010b40)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2.207188735s ago: executing program 0 (id=543): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x530, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x101, 0x4}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0) (fail_nth: 2) 1.667481509s ago: executing program 1 (id=545): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x1e, 0x21, 0x70bd27, 0x0, {0x17}}, 0x14}, 0x1, 0x0, 0x0, 0x20040044}, 0x44810) (fail_nth: 3) 1.438222534s ago: executing program 1 (id=547): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x7fffffff}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x7000, 0x3, &(0x7f0000007000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x600, 0x2) 1.376244276s ago: executing program 2 (id=548): r0 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/snmp\x00') pread64(r0, &(0x7f0000019400)=""/102344, 0x18fc8, 0x10000000000005) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x2bb0, 0x4) 1.376041446s ago: executing program 0 (id=549): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8", 0x4d}, {0x0}, {0x0}], 0x3}}], 0x1, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91", 0x4a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099d2ac19ac81be56580fbf8a31fc043df05d4f9a1ca963f95a0dad514caf83c851eec544ac66993e0aa8aac7013f19af", 0x6e}], 0x1}}], 0x2, 0x4000900) (fail_nth: 2) 1.290744418s ago: executing program 1 (id=550): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080c0) r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000280)={0x73, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e22, 0x3, 'wlc\x00', 0x4, 0x6, 0x1f}, 0x2c) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x40) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x150, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x1, 'pptp\x00'}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x1, 0x7}, {0x0, 0x0, 0xa}, {0x3, 0x4, 0x4}, 0x4, 0x7}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x7b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x358) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0x10ceab, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfffd, 0x0, 0x0, 0x0, 0x2}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x3, 0x5002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c"], 0x0, 0x34}, 0x28) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x8016, &(0x7f0000000140), 0xfc, 0x515, &(0x7f0000000c40)="$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") r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, &(0x7f0000000400)=""/98, &(0x7f0000000480)=0x62) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200"/257], 0x110) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c0000002800010029bd7000ffdbdf2503"], 0x1c}}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) getrandom(&(0x7f0000000040)=""/43, 0x2b, 0x1) socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x26, 0x80005, 0x6f}, 0x2c) 1.290222798s ago: executing program 0 (id=551): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) iopl(0x3) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xf61cb000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x2, 0x101, 0x40, @mcast2, @empty, 0x7, 0x10, 0xc7, 0xfffffffa}}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@delchain={0x34, 0x65, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xb, 0x5}, {0x1, 0xc}, {0x6, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x5, 0x10}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r4], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4014) 1.222966089s ago: executing program 2 (id=552): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000500), &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.093066303s ago: executing program 2 (id=553): set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) setsockopt$inet6_group_source_req(r0, 0x29, 0x28, &(0x7f0000000080)={0x5b, {{0xa, 0x4e23, 0x1, @empty, 0x5}}, {{0xa, 0x4e24, 0x81, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x4}}}, 0x108) 669.813443ms ago: executing program 7 (id=555): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='-:myevent ./file0:', 0x12) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f00000000c0)=ANY=[@ANYBLOB='tra', @ANYRESHEX=r2]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x1a, "02afb9880b01f37345f3e5fa31def116a7ea810c38f00e25dcca"}, &(0x7f0000000200)=0x22) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000280)={r4, 0x8, 0x10, 0x7fffffffffffffff, 0x101}, &(0x7f00000002c0)=0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r11, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x10000001, 0xb, 0x3}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) r12 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) 635.539825ms ago: executing program 2 (id=556): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000940)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000280)="0f", 0x1}, {&(0x7f0000000340)="ad", 0x1}, {&(0x7f00000003c0)="d0", 0x1}], 0x4, 0x6) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000200)={0x400000, 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0xa001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) shmctl$IPC_RMID(r4, 0x0) sendmsg$kcm(r3, &(0x7f00000004c0)={&(0x7f0000000800)=@llc={0x1a, 0x8, 0x4, 0x8, 0xa, 0xd, @random="88770c7d3eb3"}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x15}, {0x15, 0x0, 0x0, 0x3}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f0000000780)) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={0x0, 0xffffffffffffff6f, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) r6 = accept4$tipc(r5, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x80000) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000180)={0x0, @llc={0x1a, 0x322, 0xda, 0x3, 0x1, 0x6}, @isdn={0x22, 0xd, 0x20, 0x7, 0x7}, @llc={0x1a, 0x4, 0x7, 0xfc, 0xfd, 0x2}, 0x2, 0x0, 0x0, 0x0, 0xf8b4, &(0x7f0000000140)='veth0_macvtap\x00', 0x9, 0xf, 0x7}) 452.445529ms ago: executing program 1 (id=557): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x12, 0xffffffffffffffff, 0x81793000) 378.942841ms ago: executing program 2 (id=558): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in=@local, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, r1, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d4, 0x32}, @in6=@private2, {0x5, 0x0, 0x100000000000000, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x1, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}, @offload={0xc, 0x1c, {r1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 361.826481ms ago: executing program 7 (id=559): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) (rerun: 32) getpid() setns(0xffffffffffffffff, 0x24020000) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async, rerun: 32) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x70bd2b, 0x25dfdbff, {@in=@loopback, 0x4d5, 0xa, 0x33}, [@mark={0xc, 0x15, {0x35075d, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000040000000f"], 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_open_dev$usbfs(0x0, 0x1ff, 0x2) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 312.308492ms ago: executing program 1 (id=560): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000004c0), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x80000034) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x40000029) fcntl$notify(r2, 0x402, 0x8000001c) socket$kcm(0x2, 0xa, 0x2) r4 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000740)={&(0x7f0000000100)=@nfc={0x2d, 0x0, 0x1, 0x1}, 0x80, 0x0}, 0x20008095) r5 = socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYBLOB, @ANYRES16=r5], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=""/171, 0x33, 0xab, 0x0, 0x4}, 0x28) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0x800, 0xfffffff2, 0x89b, 0xa, "0d418107009188b791e15b1b6f6ff88c6b00", 0x200009, 0x401}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000002440)=0xd) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f0008fc403bb14281bbfb9b8213bd628433cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39e7bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d1f3479ca661d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c5fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x27d, &(0x7f0000000000)="$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") socket$inet6_sctp(0xa, 0x5, 0x84) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 292.571313ms ago: executing program 7 (id=561): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) r2 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x4008240b, &(0x7f00000013c0)) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) (async) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x2, 0x3, 0x2, 0xd, 0x0, 0x2, 0x48140, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x6, @perf_bp={&(0x7f0000000100), 0x2}, 0x20, 0x2, 0x5, 0x0, 0xfffffffffffffffe, 0x58d, 0x2, 0x0, 0x2, 0x0, 0x6}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000a3a87d", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c0130801400046703000000000000665354bd217b6b9037200001800c00050004000702000702000800010003000000050002000300000005000200"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x40044000) 287.478203ms ago: executing program 0 (id=562): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6}}}, @TCA_RATE={0x6, 0x5, {0xe, 0x7}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x81, 0x7, 0x46f, 0x2, 0x6, 0x7}}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}, @TCA_INGRESS_BLOCK={0x8}]}, 0x80}}, 0x24040084) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7910109800f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x1b8, 0x1b8, 0x1b8, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'bond0\x00', {}, {}, 0x11, 0x2, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xa}}, @common=@unspec=@connmark={{0x30}, {0x1, 0x2, 0xfe}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0x0, 0x0, 'dvmrp0\x00', 'dvmrp1\x00', {0xb25f05e6834eb86f}, {0xff}, 0x1d, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xb0}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x60b, 0xe03, 0x1, 0x20000000}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) listns(&(0x7f0000000080)={0x20, 0x0, 0xa, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0xf4240, 0x0) 204.364175ms ago: executing program 2 (id=563): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xc) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000000c0)={0x1d, r3}, 0x8) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x3}, {0x3, 0x0, 0x1, 0x1}}, {{0x2, 0x1}, {0x1, 0x1, 0x1}}], 0x10) close(r2) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x1020000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) lseek(r4, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x10ecc8, 0x1224, 0x99c5, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x1000080000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) write(r0, &(0x7f0000000340)="6b979404980668f1c49686a5afe608da1f8ba0a98e841ab9bed5d0a49dbe2803c13fb5d3030dc95414add8beb9ced2050ab456c2486b3574c9877a2bcdc6ceb51340439c208d63a928037e9ff08090bc41c536db502e3b24b19d6db640656d65beba8966f53083d316e6f07e0f54f3d4b1bb", 0x72) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240c8044, &(0x7f0000000080)={0xa, 0xe20, 0x0, @empty}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(r5, 0xffffffffffffffff, 0x0) 203.993006ms ago: executing program 7 (id=564): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x530, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x101, 0x4}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x5088, 0x1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xc, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0) 135.032477ms ago: executing program 0 (id=565): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x844) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x7ff, 0x0, 0x0, 0x9}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560f, 0x0) r2 = io_uring_setup(0xd83, &(0x7f0000000000)={0x0, 0x8f8e, 0x80, 0x0, 0x21b}) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f00000000c0)={0x0, 0x1, 0x0, &(0x7f0000002780), &(0x7f0000002800)=[0x0, 0x2000004, 0x41fe, 0x100000001, 0x7, 0x9, 0x4]}, 0x20) ioctl$PIO_UNIMAP(r0, 0x80085610, &(0x7f0000000740)={0x0, 0x0}) 109.561557ms ago: executing program 7 (id=566): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) 30.686869ms ago: executing program 0 (id=567): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000001, 0x2, @perf_config_ext={0xa, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r0, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0xfc}}]}, 0x30}}, 0x20000000) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x6, 0x1000}, 0x10) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @hyper}, 0x10) 0s ago: executing program 7 (id=568): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000037000701feffffffffffffff017c"], 0x20}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0xc000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x103140, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x103140, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) fallocate(r1, 0x10, 0x800, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mkdir(0x0, 0x190) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r3 = socket(0x10, 0x5, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x18}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa85c7b0d7fb6fee2, @perf_bp={&(0x7f00000001c0), 0xe}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6(0xa, 0x802, 0x0) (async) socket$inet6(0xa, 0x802, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)) (async) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=0x0) r5 = syz_open_procfs(r4, &(0x7f00000003c0)='net/netstat\x00') pread64(r5, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0xffffdfffffffffff, 0x800, 0x9, 0x1}, 0x20) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x85, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x10000005}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x85, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x10000005}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) (async) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) futimesat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)={{0x77359400}, {0x77359400}}) kernel console output (not intermixed with test programs): ice batadv0 [ 32.430131][ T3293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.447504][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.514073][ T3302] veth0_vlan: entered promiscuous mode [ 32.537106][ T3302] veth1_vlan: entered promiscuous mode [ 32.578639][ T3302] veth0_macvtap: entered promiscuous mode [ 32.604146][ T3301] veth0_vlan: entered promiscuous mode [ 32.614901][ T3302] veth1_macvtap: entered promiscuous mode [ 32.631252][ T3300] veth0_vlan: entered promiscuous mode [ 32.640309][ T3301] veth1_vlan: entered promiscuous mode [ 32.653005][ T3293] veth0_vlan: entered promiscuous mode [ 32.663419][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.671054][ T3300] veth1_vlan: entered promiscuous mode [ 32.679663][ T3293] veth1_vlan: entered promiscuous mode [ 32.696471][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.710370][ T3294] veth0_vlan: entered promiscuous mode [ 32.719059][ T3294] veth1_vlan: entered promiscuous mode [ 32.735530][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 32.735544][ T28] audit: type=1400 audit(1785538294.543:146): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.eqNoiA/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.747883][ T3293] veth0_macvtap: entered promiscuous mode [ 32.768380][ T28] audit: type=1400 audit(1785538294.543:147): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.795688][ T76] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.796893][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.809412][ T3294] veth0_macvtap: entered promiscuous mode [ 32.824989][ T28] audit: type=1400 audit(1785538294.543:148): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.eqNoiA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.850654][ T3301] veth0_macvtap: entered promiscuous mode [ 32.850929][ T28] audit: type=1400 audit(1785538294.543:149): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.861703][ T3301] veth1_macvtap: entered promiscuous mode [ 32.880859][ T28] audit: type=1400 audit(1785538294.543:150): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.eqNoiA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.886681][ T3300] veth0_macvtap: entered promiscuous mode [ 32.912444][ T28] audit: type=1400 audit(1785538294.543:151): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.eqNoiA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.923936][ T3294] veth1_macvtap: entered promiscuous mode [ 32.944468][ T28] audit: type=1400 audit(1785538294.553:152): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.952921][ T3293] veth1_macvtap: entered promiscuous mode [ 32.969322][ T28] audit: type=1400 audit(1785538294.583:153): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.980214][ T3293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.000709][ T28] audit: type=1400 audit(1785538294.583:154): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="gadgetfs" ino=4722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.032507][ T28] audit: type=1400 audit(1785538294.843:155): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.036110][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.067401][ T3300] veth1_macvtap: entered promiscuous mode [ 33.079750][ T3293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.090998][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.102196][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.110243][ T3500] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45329 sclass=netlink_xfrm_socket pid=3500 comm=syz.3.4 [ 33.114990][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.133068][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.152892][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.164662][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.176665][ T3507] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7'. [ 33.221673][ T76] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.232430][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.332070][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.348515][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.371296][ T3514] syz.2.3 (3514) used obsolete PPPIOCDETACH ioctl [ 33.377888][ T3423] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.392075][ T3423] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.403821][ T3528] loop3: detected capacity change from 0 to 512 [ 33.422608][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.440104][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.452748][ T3528] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.9: ea_inode with extended attributes [ 33.463857][ T3525] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 33.475110][ T3528] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 33.476132][ T3528] EXT4-fs (loop3): Remounting filesystem read-only [ 33.485322][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 33.485340][ C1] EXT4-fs (loop3): initial error at time 1785538295: ext4_xattr_inode_iget:441: inode 11 [ 33.485388][ C1] EXT4-fs (loop3): last error at time 1785538295: ext4_xattr_inode_iget:441: inode 11 [ 33.519910][ T3528] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -30) [ 33.528965][ T3528] EXT4-fs (loop3): 1 orphan inode deleted [ 33.535404][ T3528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.578036][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.622377][ T3525] team0 (unregistering): Port device team_slave_0 removed [ 33.634293][ T3543] program syz.2.12 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.651675][ T3543] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 33.659280][ T3525] team0 (unregistering): Port device team_slave_1 removed [ 33.674109][ T3542] loop4: detected capacity change from 0 to 2048 [ 33.714380][ T3542] loop4: p1 p3 p4 [ 33.732624][ T3542] loop4: p4 size 589824 extends beyond EOD, truncated [ 33.762407][ T76] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.771765][ T2979] loop4: p1 p3 p4 [ 33.781937][ T2979] loop4: p4 size 589824 extends beyond EOD, truncated [ 33.785490][ T76] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.818925][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 33.831701][ T76] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.833975][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 33.845627][ T76] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.860926][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 33.895019][ T3542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15'. [ 33.907725][ T76] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.910136][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 33.917661][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 33.927663][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 33.954148][ T3549] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15'. [ 33.972340][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.994209][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.031854][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.041055][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.065244][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.095228][ T3551] veth1_to_bond: entered promiscuous mode [ 34.113042][ T3551] veth1_to_bond: entered allmulticast mode [ 34.123811][ T3551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 34.135067][ T3540] loop3: detected capacity change from 0 to 164 [ 34.154112][ T3551] veth1_to_bond (unregistering): left promiscuous mode [ 34.161169][ T3551] veth1_to_bond (unregistering): left allmulticast mode [ 34.202744][ T3551] bond0: (slave bond_slave_1): Releasing backup interface [ 34.250979][ T3525] syz.0.1 (3525) used greatest stack depth: 10240 bytes left [ 34.833671][ T3564] loop0: detected capacity change from 0 to 1024 [ 34.850364][ T3560] syz.4.21 (3560) used greatest stack depth: 10176 bytes left [ 34.885996][ T3564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.960292][ T3571] capability: warning: `syz.4.25' uses deprecated v2 capabilities in a way that may be insecure [ 35.071197][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.119425][ T3583] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 35.184522][ T3586] netlink: 'syz.4.31': attribute type 10 has an invalid length. [ 35.195363][ T3585] veth0: entered promiscuous mode [ 35.288936][ T3591] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 35.300792][ T3591] Cannot find add_set index 0 as target [ 35.437228][ T3586] team0 (unregistering): Port device team_slave_0 removed [ 35.530024][ T3586] team0 (unregistering): Port device team_slave_1 removed [ 35.558373][ T3588] loop2: detected capacity change from 0 to 8192 [ 35.575618][ T3588] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 35.583828][ T3588] FAT-fs (loop2): Filesystem has been set read-only [ 36.031629][ T3621] loop2: detected capacity change from 0 to 512 [ 36.056020][ T3621] ======================================================= [ 36.056020][ T3621] WARNING: The mand mount option has been deprecated and [ 36.056020][ T3621] and is ignored by this kernel. Remove the mand [ 36.056020][ T3621] option from the mount to silence this warning. [ 36.056020][ T3621] ======================================================= [ 36.142222][ T3578] veth0: left promiscuous mode [ 36.321767][ T3635] loop0: detected capacity change from 0 to 512 [ 36.454582][ T3635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.542031][ T3635] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.774137][ T3646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 36.808127][ T3650] loop4: detected capacity change from 0 to 128 [ 36.819107][ T3635] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.856779][ T3654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.43'. [ 36.896667][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.072727][ T3670] Unsupported ieee802154 address type: 0 [ 37.102665][ T3670] syz.1.48 uses obsolete (PF_INET,SOCK_PACKET) [ 37.114749][ T3681] Zero length message leads to an empty skb [ 37.149512][ T3670] loop1: detected capacity change from 0 to 512 [ 37.182347][ T3670] EXT4-fs: Mount option(s) incompatible with ext2 [ 37.203213][ T3690] netlink: 'syz.3.52': attribute type 1 has an invalid length. [ 37.488557][ T3725] 9p: Bad value for 'rfdno' [ 37.506082][ T3715] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.513454][ T3715] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.608244][ T3738] loop3: detected capacity change from 0 to 4096 [ 37.651878][ T3738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.709502][ T3738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 37.746072][ T28] kauditd_printk_skb: 130 callbacks suppressed [ 37.746085][ T28] audit: type=1400 audit(1785538299.553:286): avc: denied { ioctl } for pid=3737 comm="syz.3.57" path="/10/file0/bus" dev="loop3" ino=18 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.782759][ T28] audit: type=1400 audit(1785538299.593:287): avc: denied { read } for pid=3737 comm="syz.3.57" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.824356][ T28] audit: type=1400 audit(1785538299.633:288): avc: denied { write } for pid=3742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.864382][ T28] audit: type=1400 audit(1785538299.663:289): avc: denied { write } for pid=3759 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.901311][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.909006][ T28] audit: type=1400 audit(1785538299.703:290): avc: denied { write } for pid=3302 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.934051][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.973111][ T28] audit: type=1400 audit(1785538299.703:291): avc: denied { remove_name } for pid=3302 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.019119][ T28] audit: type=1400 audit(1785538299.703:292): avc: denied { rmdir } for pid=3302 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.041988][ T3788] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 38.056685][ T3788] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 38.065614][ T3788] EXT4-fs (loop2): orphan cleanup on readonly fs [ 38.084358][ T3788] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.61: bad orphan inode 3 [ 38.101775][ T28] audit: type=1400 audit(1785538299.703:293): avc: denied { write } for pid=3302 comm="syz-executor" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.136572][ T3788] loop2: lost filesystem error report for type 5 error -117 [ 38.137586][ T3788] EXT4-fs (loop2): Remounting filesystem read-only [ 38.144995][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 38.145016][ C1] EXT4-fs (loop2): initial error at time 1785538299: ext4_orphan_get:1425 [ 38.145037][ C1] EXT4-fs (loop2): last error at time 1785538299: ext4_orphan_get:1425 [ 38.178425][ T28] audit: type=1400 audit(1785538299.703:294): avc: denied { unlink } for pid=3302 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.182868][ T3788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 38.209807][ T28] audit: type=1400 audit(1785538299.703:295): avc: denied { write } for pid=3302 comm="syz-executor" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.281201][ T3777] syzkaller0: entered promiscuous mode [ 38.290334][ T3777] syzkaller0: entered allmulticast mode [ 38.297342][ T3788] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.61: dx entry: limit 0 != root limit 125 [ 38.309864][ T3788] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.61: Corrupt directory, running e2fsck is recommended [ 38.341595][ T30] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.350616][ T30] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.359952][ T30] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.369410][ T30] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.420425][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 38.463532][ T3757] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.523199][ T76] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.610348][ T76] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.676193][ T76] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.702842][ T3825] set_capacity_and_notify: 1 callbacks suppressed [ 38.702858][ T3825] loop4: detected capacity change from 0 to 8192 [ 38.779845][ T76] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.951133][ T76] bridge_slave_1: left allmulticast mode [ 38.957101][ T76] bridge_slave_1: left promiscuous mode [ 38.963284][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.971244][ T76] bridge_slave_0: left allmulticast mode [ 38.977943][ T76] bridge_slave_0: left promiscuous mode [ 38.984098][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.068916][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.080257][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.094631][ T76] bond0 (unregistering): Released all slaves [ 39.135129][ T3810] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 39.144515][ T3810] bridge1: entered promiscuous mode [ 39.173469][ T76] hsr_slave_0: left promiscuous mode [ 39.191604][ T76] hsr_slave_1: left promiscuous mode [ 39.210857][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.240956][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.257314][ T3869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.87'. [ 39.268593][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.280535][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.292748][ T76] veth1_macvtap: left promiscuous mode [ 39.301640][ T76] veth0_macvtap: left promiscuous mode [ 39.309299][ T76] veth1_vlan: left promiscuous mode [ 39.327680][ T3870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.87'. [ 39.529855][ T76] team0 (unregistering): Port device team_slave_1 removed [ 39.545600][ T76] team0 (unregistering): Port device team_slave_0 removed [ 39.631233][ T3018] 8021q: adding VLAN 0 to HW filter on device eth1 [ 39.767318][ T3894] loop2: detected capacity change from 0 to 1024 [ 39.805840][ T3894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.999146][ T3828] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.030796][ T3828] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.061800][ T3828] bridge_slave_0: entered allmulticast mode [ 40.088506][ T3828] bridge_slave_0: entered promiscuous mode [ 40.150880][ T3018] 8021q: adding VLAN 0 to HW filter on device eth2 [ 40.158600][ T3828] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.177494][ T3828] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.197491][ T3828] bridge_slave_1: entered allmulticast mode [ 40.211712][ T3828] bridge_slave_1: entered promiscuous mode [ 40.263548][ T3828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.286900][ T3828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.329012][ T3828] team0: Port device team_slave_0 added [ 40.344969][ T3828] team0: Port device team_slave_1 added [ 40.382942][ T3828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.394970][ T3828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.433547][ T3828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.445133][ T3828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.467414][ T3828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.506267][ T3828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.552007][ T3828] hsr_slave_0: entered promiscuous mode [ 40.561740][ T3828] hsr_slave_1: entered promiscuous mode [ 40.575835][ T3828] debugfs: 'hsr0' already exists in 'hsr' [ 40.593000][ T3828] Cannot create hsr debugfs directory [ 40.602442][ T3018] 8021q: adding VLAN 0 to HW filter on device eth3 [ 40.768741][ T3828] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.788715][ T3828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.832128][ T3828] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.855277][ T3828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.879928][ T3828] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.894718][ T3828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.907681][ T3018] 8021q: adding VLAN 0 to HW filter on device eth4 [ 40.919368][ T3828] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.954500][ T3828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.036596][ T3828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.069841][ T3828] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.080027][ T3999] program syz.2.101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.097977][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.105085][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.120042][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.127148][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.136823][ T3999] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 41.333941][ T3828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.458964][ T3984] loop0: detected capacity change from 0 to 8192 [ 41.502268][ T3984] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 41.510937][ T3984] FAT-fs (loop0): Filesystem has been set read-only [ 41.645942][ T3828] veth0_vlan: entered promiscuous mode [ 41.670715][ T3828] veth1_vlan: entered promiscuous mode [ 41.713086][ T3828] veth0_macvtap: entered promiscuous mode [ 41.739723][ T3828] veth1_macvtap: entered promiscuous mode [ 41.775484][ T4060] loop0: detected capacity change from 0 to 512 [ 41.781557][ T3828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.808548][ T4060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.809354][ T3828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.842210][ T4060] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.895690][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.923743][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.952075][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.971830][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.978048][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.146989][ T4089] tipc: Started in network mode [ 42.153321][ T4089] tipc: Node identity ac14140f, cluster identity 4711 [ 42.160488][ T4089] tipc: New replicast peer: 172.30.0.6 [ 42.171749][ T4089] tipc: Enabled bearer , priority 10 [ 42.206365][ T4096] program syz.0.105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.245667][ T4096] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 42.253828][ T4107] loop4: detected capacity change from 0 to 512 [ 42.262167][ T4107] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.294680][ T4107] lo speed is unknown, defaulting to 1000 [ 42.302495][ T4107] lo speed is unknown, defaulting to 1000 [ 42.309013][ T4107] lo speed is unknown, defaulting to 1000 [ 42.327260][ T361] Bluetooth: hci0: Frame reassembly failed (-84) [ 42.397320][ T4107] infiniband sz1: set active [ 42.402345][ T4107] infiniband sz1: added lo [ 42.419121][ T4107] RDS/IB: sz1: added [ 42.423326][ T4107] smc: adding ib device sz1 with port count 1 [ 42.429543][ T4107] smc: ib device sz1 port 1 has no pnetid [ 42.439992][ T4115] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 42.448417][ T4107] lo speed is unknown, defaulting to 1000 [ 42.459858][ T35] lo speed is unknown, defaulting to 1000 [ 42.460096][ T4115] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 42.474667][ T4115] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 42.483188][ T4115] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 42.491886][ T4115] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 42.501289][ T4115] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 42.506410][ T3375] lo speed is unknown, defaulting to 1000 [ 42.533974][ T4115] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 42.543163][ T4115] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 42.602379][ T4115] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 42.620092][ T4107] lo speed is unknown, defaulting to 1000 [ 42.664048][ T4115] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 42.701817][ T4115] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 42.709142][ T4107] lo speed is unknown, defaulting to 1000 [ 42.715948][ T4115] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 42.739930][ T4115] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 42.767049][ T4115] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 42.787379][ T4107] lo speed is unknown, defaulting to 1000 [ 42.865662][ T4107] lo speed is unknown, defaulting to 1000 [ 42.928272][ T4132] loop0: detected capacity change from 0 to 512 [ 42.948123][ T4132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.971062][ T4132] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.081517][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.114112][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 43.114125][ T28] audit: type=1400 audit(1785538304.923:357): avc: denied { write } for pid=4130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.182290][ T28] audit: type=1400 audit(1785538304.993:358): avc: denied { write } for pid=4148 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.291533][ T11] tipc: Node number set to 2886997007 [ 43.311769][ T28] audit: type=1400 audit(1785538305.113:359): avc: denied { mount } for pid=4154 comm="syz.1.118" name="/" dev="autofs" ino=5781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 43.366334][ T28] audit: type=1400 audit(1785538305.123:360): avc: denied { write } for pid=4152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.403263][ T28] audit: type=1400 audit(1785538305.153:361): avc: denied { write } for pid=4170 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.504573][ T4107] syz.4.112 (4107) used greatest stack depth: 10112 bytes left [ 43.570460][ T28] audit: type=1400 audit(1785538305.373:362): avc: denied { setcurrent } for pid=4182 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.570722][ T4184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.122'. [ 43.613253][ T28] audit: type=1400 audit(1785538305.413:363): avc: denied { name_bind } for pid=4179 comm="syz.1.121" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 43.686434][ T4184] loop4: detected capacity change from 0 to 4096 [ 43.707259][ T4184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.797661][ T28] audit: type=1400 audit(1785538305.603:364): avc: denied { write } for pid=4182 comm="syz.4.122" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.845038][ T4192] netlink: 68 bytes leftover after parsing attributes in process `syz.1.124'. [ 43.885028][ T28] audit: type=1400 audit(1785538305.603:365): avc: denied { add_name } for pid=4182 comm="syz.4.122" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.950859][ T28] audit: type=1400 audit(1785538305.653:366): avc: denied { nlmsg_write } for pid=4191 comm="syz.1.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.036954][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.057589][ T4199] loop1: detected capacity change from 0 to 512 [ 44.095167][ T4199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.110082][ T4201] syzkaller0: entered promiscuous mode [ 44.122089][ T4201] syzkaller0: entered allmulticast mode [ 44.133398][ T4199] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.150805][ T4201] tipc: Started in network mode [ 44.160044][ T4201] tipc: Node identity 76fa651d2569, cluster identity 4711 [ 44.180332][ T4201] tipc: Enabled bearer , priority 0 [ 44.199107][ T4200] tipc: Resetting bearer [ 44.214991][ T4200] tipc: Disabling bearer [ 44.248443][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.373123][ T3599] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.400432][ T4217] netlink: 'syz.4.133': attribute type 10 has an invalid length. [ 44.678523][ T4222] netlink: 332 bytes leftover after parsing attributes in process `syz.2.134'. [ 44.796857][ T4238] lo speed is unknown, defaulting to 1000 [ 44.990116][ T4242] loop0: detected capacity change from 0 to 512 [ 45.063412][ T4238] SELinux: Context system_u:object_r:udev_helper_exec_t:s0 is not valid (left unmapped). [ 45.816620][ T4266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 45.857128][ T4268] loop0: detected capacity change from 0 to 512 [ 45.882141][ T4268] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.901964][ T4268] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.921633][ T4268] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.947696][ T4268] EXT4-fs (loop0): 1 truncate cleaned up [ 45.957653][ T4268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.046219][ T4268] tipc: Cannot configure node identity twice [ 46.070396][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.155464][ T4277] netlink: 'syz.2.154': attribute type 10 has an invalid length. [ 46.186259][ T4279] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 46.245934][ T4277] team0 (unregistering): Port device team_slave_0 removed [ 46.310856][ T4277] team0 (unregistering): Port device team_slave_1 removed [ 46.482398][ T4287] xt_hashlimit: size too large, truncated to 1048576 [ 46.502706][ T4289] loop4: detected capacity change from 0 to 512 [ 46.526000][ T4289] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 46.540563][ T4291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'. [ 46.560655][ T4289] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 46.589974][ T4289] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.604330][ T4289] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #13: comm syz.4.158: iget: bad i_size value: 12154761577498 [ 46.644534][ T4289] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 46.644777][ T4289] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.158: couldn't read orphan inode 13 (err -117) [ 46.654009][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 46.654024][ C1] EXT4-fs (loop4): initial error at time 1785538308: ext4_orphan_get:1399: inode 13 [ 46.654068][ C1] EXT4-fs (loop4): last error at time 1785538308: ext4_orphan_get:1399: inode 13 [ 46.691732][ T4289] loop4: lost filesystem error report for type 5 error -117 [ 46.692345][ T4289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 46.718810][ T4289] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.158: dx entry: limit 65535 != root limit 120 [ 46.741113][ T4289] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.158: Corrupt directory, running e2fsck is recommended [ 46.798562][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.806172][ T4295] syzkaller1: entered promiscuous mode [ 46.813643][ T4295] syzkaller1: entered allmulticast mode [ 46.841356][ T4297] SELinux: Context ›Y7»ôj [ 46.841356][ T4297] u/$2SŮź»2'´k€s2- vj×džĂ ű#ž»ś,ŮN< [ 46.841356][ T4297] ť:ćşE]Yů´\?ÍĽ•=ęŻŮ‹1ŰKI‹Ŕ­ßÇäî‚kÎé°{kL^‰—ů0¦óýŇë}ĺ4nšrş }–˘ĎpÄŻÚĄ›ŮN»wź‚Ţyxiu?+ëţŃý˝ÜH~›ö»F¦–ý1ůW¤ąť÷jm &8›UŰ‚VŠß‹śNĂ’ś2ů)GxĆVÔ%‘5śőxeRM4r4cĄî˙JŤsĎHU&ź“ä§'p…Ś2EMMŕk&‰Îc«bUÎČ,ä,ĎÖÝÁâÂfÓ@Őď8żĹřśÎś¶bÁD™¨%$¬śÓfÚ=˝šľ÷8®@짏k¤I|íţ€w íOçŁx&KCH;ÁÝx-ťÍKł˛oĺ4i!˙˙Oiť%Ú‚2 úë´F"2‹E,P] čôkÇ? is not valid (left unmapped). [ 46.886925][ T4297] SELinux: Context *mţkXŹI·Ć$h·x4Ű«˝K•M¤ is not valid (left unmapped). [ 46.897278][ T4297] SELinux: Context ¬ő–KM*ş,hĂc¶ĽI¨ÇľĘĂ»·ßĚ‹yÖÔő+á.ë+yŇ˙0Ş[prź;J©A9ĹőŤŤIqŇ j¦ÇĽ=7)oM{ěší–nFÓŮ=«ľř‰Xmnxşśr¶Dß㑉ťłĺžłç4ĚÚTW˛ü}»tŠóôňň%Č–Y…É^sělF¬€¤§B53˛‰hÖmě‰âÝ5ţ}ßă;JŤ™¬ěÁXom%~"áż~9mMľ–~alĘşLŕI8­„iŰţ [ 58.978741][ T49] tipc: Left network mode [ 59.019348][ T49] hsr_slave_0: left promiscuous mode [ 59.026371][ T49] hsr_slave_1: left promiscuous mode [ 59.032537][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.040122][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.048199][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.055693][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.062847][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 59.062867][ T28] audit: type=1400 audit(1785538320.873:457): avc: denied { write } for pid=4704 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.100561][ T49] veth1_macvtap: left promiscuous mode [ 59.107615][ T28] audit: type=1400 audit(1785538320.913:458): avc: denied { write } for pid=4716 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.129433][ T49] veth0_macvtap: left promiscuous mode [ 59.135157][ T49] veth1_vlan: left promiscuous mode [ 59.149908][ T49] veth0_vlan: left promiscuous mode [ 59.167743][ T4721] loop0: detected capacity change from 0 to 512 [ 59.193492][ T4721] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.202956][ T4721] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 59.213678][ T4721] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 59.223064][ T4721] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 59.231879][ T4721] System zones: 0-2, 18-18, 34-35 [ 59.238002][ T4721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.250490][ T49] team0 (unregistering): Port device team_slave_1 removed [ 59.259702][ T28] audit: type=1326 audit(1785538321.063:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6700e019 code=0x7ffc0000 [ 59.285139][ T28] audit: type=1326 audit(1785538321.063:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6700e019 code=0x7ffc0000 [ 59.286012][ T49] team0 (unregistering): Port device team_slave_0 removed [ 59.311366][ T28] audit: type=1326 audit(1785538321.073:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6700e019 code=0x7ffc0000 [ 59.343551][ T28] audit: type=1326 audit(1785538321.073:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6700e019 code=0x7ffc0000 [ 59.345505][ T4725] EXT4-fs warning (device loop0): ext4_lookup:1797: Inconsistent encryption contexts: 12/14 [ 59.393070][ T4725] EXT4-fs warning (device loop0): ext4_lookup:1797: Inconsistent encryption contexts: 12/14 [ 59.393692][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6 [ 59.405378][ T28] audit: type=1326 audit(1785538321.073:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1d6700e019 code=0x7ffc0000 [ 59.440197][ T4722] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 59.443757][ T28] audit: type=1326 audit(1785538321.073:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6700e019 code=0x7ffc0000 [ 59.451019][ T4730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.264'. [ 59.474656][ T28] audit: type=1326 audit(1785538321.073:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6700e019 code=0x7ffc0000 [ 59.523347][ T28] audit: type=1326 audit(1785538321.073:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.0.263" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6700e019 code=0x7ffc0000 [ 59.548836][ T4730] hsr_slave_1 (unregistering): left promiscuous mode [ 59.638699][ T4623] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.650943][ T4730] loop2: detected capacity change from 0 to 256 [ 59.669819][ T4623] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.685776][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.701280][ T4623] bridge_slave_0: entered allmulticast mode [ 59.708382][ T4623] bridge_slave_0: entered promiscuous mode [ 59.719817][ T4623] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.727335][ T4623] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.735002][ T4623] bridge_slave_1: entered allmulticast mode [ 59.742423][ T4623] bridge_slave_1: entered promiscuous mode [ 59.765774][ T4759] loop4: detected capacity change from 0 to 512 [ 59.787689][ T4623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.809686][ T4623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.839300][ T3018] 8021q: adding VLAN 0 to HW filter on device eth8 [ 59.841102][ T4764] netlink: 'syz.2.272': attribute type 10 has an invalid length. [ 59.866081][ T4759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.874732][ T4623] team0: Port device team_slave_0 added [ 59.885081][ T4759] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.888310][ T4623] team0: Port device team_slave_1 added [ 59.910862][ T4623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.918242][ T4623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.946658][ T4623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.957840][ T4623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.966666][ T4623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.002545][ T4623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.051293][ T4623] hsr_slave_0: entered promiscuous mode [ 60.060426][ T4623] hsr_slave_1: entered promiscuous mode [ 60.074983][ T4623] debugfs: 'hsr0' already exists in 'hsr' [ 60.086849][ T4623] Cannot create hsr debugfs directory [ 60.094553][ T4759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 60.172731][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.202554][ T3018] 8021q: adding VLAN 0 to HW filter on device eth7 [ 60.251189][ T4800] netlink: 28 bytes leftover after parsing attributes in process `syz.4.279'. [ 60.255323][ T4623] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 60.261260][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.279'. [ 60.281838][ T4623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.300083][ T4623] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 60.318000][ T4623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.339877][ T4623] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 60.349958][ T4623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.350566][ T4623] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 60.354422][ T4623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.456892][ T4623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.498771][ T4623] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.517516][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.524632][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.542041][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.549134][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.615593][ T4821] loop4: detected capacity change from 0 to 512 [ 60.635882][ T4821] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 60.708860][ T4821] netlink: 'syz.4.283': attribute type 21 has an invalid length. [ 60.738158][ T4623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.814283][ T4842] FAULT_INJECTION: forcing a failure. [ 60.814283][ T4842] name failslab, interval 1, probability 0, space 0, times 1 [ 60.820995][ T4839] netlink: 'syz.4.285': attribute type 10 has an invalid length. [ 60.831851][ T4842] CPU: 0 UID: 0 PID: 4842 Comm: syz.0.287 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.831878][ T4842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.831892][ T4842] Call Trace: [ 60.831898][ T4842] [ 60.831925][ T4842] __dump_stack+0x1d/0x30 [ 60.831947][ T4842] dump_stack_lvl+0x95/0xd0 [ 60.831966][ T4842] dump_stack+0x15/0x1b [ 60.831992][ T4842] should_fail_ex+0x25e/0x270 [ 60.832095][ T4842] should_failslab+0x8c/0xb0 [ 60.832184][ T4842] __kmalloc_noprof+0xd4/0x4a0 [ 60.832204][ T4842] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 60.832232][ T4842] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 60.832355][ T4842] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 60.832385][ T4842] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 60.832411][ T4842] ? selinux_capable+0x31/0x40 [ 60.832457][ T4842] ? security_capable+0x7b/0x90 [ 60.832489][ T4842] ? ns_capable+0x80/0xb0 [ 60.832515][ T4842] genl_rcv_msg+0x42f/0x470 [ 60.832540][ T4842] ? __pfx_ip_vs_genl_set_cmd+0x10/0x10 [ 60.832584][ T4842] netlink_rcv_skb+0x11e/0x220 [ 60.832603][ T4842] ? __pfx_genl_rcv_msg+0x10/0x10 [ 60.832711][ T4842] genl_rcv+0x28/0x40 [ 60.832734][ T4842] netlink_unicast+0x5a7/0x680 [ 60.832785][ T4842] netlink_sendmsg+0x5be/0x6f0 [ 60.832809][ T4842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.832831][ T4842] ____sys_sendmsg+0x532/0x580 [ 60.832898][ T4842] ___sys_sendmsg+0x195/0x1e0 [ 60.832933][ T4842] __x64_sys_sendmsg+0xd4/0x160 [ 60.832977][ T4842] x64_sys_call+0x194c/0x3020 [ 60.833008][ T4842] do_syscall_64+0x136/0x3c0 [ 60.833032][ T4842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.833052][ T4842] RIP: 0033:0x7f1d6700e019 [ 60.833067][ T4842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.833083][ T4842] RSP: 002b:00007f1d65a67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.833141][ T4842] RAX: ffffffffffffffda RBX: 00007f1d67295fa0 RCX: 00007f1d6700e019 [ 60.833154][ T4842] RDX: 0000000000000000 RSI: 0000200000001500 RDI: 0000000000000003 [ 60.833166][ T4842] RBP: 00007f1d65a67090 R08: 0000000000000000 R09: 0000000000000000 [ 60.833178][ T4842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.833203][ T4842] R13: 00007f1d67296038 R14: 00007f1d67295fa0 R15: 00007ffe2bedc368 [ 60.833220][ T4842] [ 60.862076][ T3389] playstation 0003:054C:05C4.0001: hidraw0: USB HID v0.01 Device [†yz1] on syz1 [ 60.973048][ T4845] loop1: detected capacity change from 0 to 512 [ 61.024703][ T4623] veth0_vlan: entered promiscuous mode [ 61.109122][ T4859] netlink: 56537 bytes leftover after parsing attributes in process `syz.0.289'. [ 61.120760][ T4845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.123585][ T4623] veth1_vlan: entered promiscuous mode [ 61.134872][ T4845] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.150181][ T4623] veth0_macvtap: entered promiscuous mode [ 61.157892][ T4623] veth1_macvtap: entered promiscuous mode [ 61.176269][ T4861] netlink: 168 bytes leftover after parsing attributes in process `syz.0.289'. [ 61.236718][ T4623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.261089][ T4866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 61.270410][ T4623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.301896][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.310878][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.328765][ T4868] loop2: detected capacity change from 0 to 512 [ 61.350865][ T4868] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.292: iget: bad extended attribute block 1 [ 61.351888][ T4864] loop4: detected capacity change from 0 to 512 [ 61.387869][ T4868] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.388094][ T4868] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.292: couldn't read orphan inode 15 (err -117) [ 61.397339][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 61.397359][ C0] EXT4-fs (loop2): initial error at time 1785538323: ext4_orphan_get:1399: inode 15 [ 61.397382][ C0] EXT4-fs (loop2): last error at time 1785538323: ext4_orphan_get:1399: inode 15 [ 61.436696][ T361] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.446961][ T4868] loop2: lost filesystem error report for type 5 error -117 [ 61.447589][ T4868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.455025][ T361] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.482310][ T4868] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #2: block 13: comm syz.2.292: lblock 0 mapped to illegal pblock 13 (length 1) [ 61.487840][ T4864] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 61.515899][ T4864] EXT4-fs (loop4): orphan cleanup on readonly fs [ 61.524797][ T4864] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 61.541372][ T4864] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 61.550491][ T3389] playstation 0003:054C:05C4.0001: Failed to retrieve feature with reportID 18: -5 [ 61.554656][ T4864] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #16: comm syz.4.291: inode has both inline data and extents flags [ 61.560280][ T4874] loop6: detected capacity change from 0 to 2048 [ 61.573088][ T4864] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 61.581418][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 61.594263][ T3389] playstation 0003:054C:05C4.0001: Failed to retrieve DualShock4 pairing info: -5 [ 61.596960][ C1] EXT4-fs (loop4): initial error at time 1785538323: ext4_orphan_get:1399: inode 16 [ 61.606533][ T3389] playstation 0003:054C:05C4.0001: Failed to get MAC address from DualShock4 [ 61.615552][ C1] EXT4-fs (loop4): last error at time 1785538323: ext4_orphan_get:1399: inode 16 [ 61.616720][ T4864] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.291: couldn't read orphan inode 16 (err -117) [ 61.624964][ T3389] playstation 0003:054C:05C4.0001: Failed to create dualshock4. [ 61.634992][ T4864] loop4: lost filesystem error report for type 5 error -117 [ 61.654115][ T3389] playstation 0003:054C:05C4.0001: probe with driver playstation failed with error -5 [ 61.685734][ T4874] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.685751][ T4864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.699189][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.771195][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.796060][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.822613][ T4882] loop1: detected capacity change from 0 to 512 [ 61.839110][ T4882] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.294: iget: bad i_size value: 38620345925642 [ 61.864760][ T4882] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.866357][ T4882] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.294: couldn't read orphan inode 15 (err -117) [ 61.881488][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 61.894008][ C1] EXT4-fs (loop1): initial error at time 1785538323: ext4_orphan_get:1399: inode 15 [ 61.903777][ C1] EXT4-fs (loop1): last error at time 1785538323: ext4_orphan_get:1399: inode 15 [ 61.914272][ T4889] loop2: detected capacity change from 0 to 512 [ 61.945162][ T4889] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 62.011571][ T4882] loop1: lost filesystem error report for type 5 error -117 [ 62.012197][ T4882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.076237][ T4889] netlink: 'syz.2.295': attribute type 21 has an invalid length. [ 62.138483][ T4899] 9p: Bad value for 'rfdno' [ 62.149508][ T4882] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.294: bg 0: block 5: invalid block bitmap [ 62.154029][ T3389] playstation 0003:054C:05C4.0002: hidraw0: USB HID v0.01 Device [†yz1] on syz1 [ 62.193678][ T4882] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1052 with error 28 [ 62.208234][ T4882] EXT4-fs (loop1): This should not happen!! Data will be lost [ 62.208234][ T4882] [ 62.219379][ T4882] EXT4-fs (loop1): Total free blocks count 0 [ 62.225892][ T4882] EXT4-fs (loop1): Free/Dirty block details [ 62.232082][ T4882] EXT4-fs (loop1): free_blocks=0 [ 62.241039][ T4908] lo speed is unknown, defaulting to 1000 [ 62.241248][ T4882] EXT4-fs (loop1): dirty_blocks=1052 [ 62.254433][ T4909] __nla_validate_parse: 1 callbacks suppressed [ 62.254447][ T4909] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.304'. [ 62.263478][ T4882] EXT4-fs (loop1): Block reservation details [ 62.287453][ T4882] EXT4-fs (loop1): i_reserved_data_blocks=1052 [ 62.348834][ T4904] netlink: 168 bytes leftover after parsing attributes in process `syz.2.304'. [ 62.370458][ T4882] syz.1.294 (4882) used greatest stack depth: 9568 bytes left [ 62.382627][ T3293] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 62.397444][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.438865][ T3389] playstation 0003:054C:05C4.0002: Failed to retrieve feature with reportID 18: -5 [ 62.455044][ T3389] playstation 0003:054C:05C4.0002: Failed to retrieve DualShock4 pairing info: -5 [ 62.476408][ T3389] playstation 0003:054C:05C4.0002: Failed to get MAC address from DualShock4 [ 62.493119][ T4915] loop1: detected capacity change from 0 to 512 [ 62.494577][ T3389] playstation 0003:054C:05C4.0002: Failed to create dualshock4. [ 62.516023][ T4915] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 62.520890][ T3389] playstation 0003:054C:05C4.0002: probe with driver playstation failed with error -5 [ 62.542591][ T4915] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 62.551290][ T4915] System zones: 0-1, 15-15, 18-18, 34-34 [ 62.557625][ T4915] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.565762][ T4915] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 62.580730][ T4915] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 62.593542][ T4915] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.306: bg 0: block 40: padding at end of block bitmap is not set [ 62.601218][ T4922] netlink: 'syz.2.310': attribute type 10 has an invalid length. [ 62.621998][ T4915] loop1: lost filesystem error report for type 5 error -117 [ 62.622248][ T4915] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 62.638369][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 62.638383][ C0] EXT4-fs (loop1): initial error at time 1785538324: ext4_validate_block_bitmap:441 [ 62.638401][ C0] EXT4-fs (loop1): last error at time 1785538324: ext4_validate_block_bitmap:441 [ 62.663668][ T4915] loop1: lost filesystem error report for type 5 error -117 [ 62.663916][ T4915] EXT4-fs (loop1): 1 truncate cleaned up [ 62.677312][ T4915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.714856][ T4927] netlink: 40 bytes leftover after parsing attributes in process `syz.2.312'. [ 62.791330][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.826332][ T4931] 9p: Bad value for 'rfdno' [ 62.855267][ T4936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.885279][ T4936] IPv6: NLM_F_CREATE should be specified when creating new route [ 62.937107][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.005240][ T4943] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.023393][ T4943] vhci_hcd vhci_hcd.0: invalid port number 255 [ 63.096390][ T4956] /dev/loop2: Can't open blockdev [ 63.113893][ T4937] loop0: p1 p3 < > [ 63.127395][ T4943] EXT4-fs: old and new quota format mixing [ 63.148939][ T4956] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.166653][ T2979] loop0: p1 p3 < > [ 63.176762][ T4956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 63.358729][ T4623] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.369177][ T361] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.570618][ T4978] tipc: Started in network mode [ 63.576423][ T4978] tipc: Node identity 92523d12905a, cluster identity 4711 [ 63.597648][ T4978] tipc: Enabled bearer , priority 10 [ 63.624904][ T4976] tipc: Resetting bearer [ 63.659203][ T4976] tipc: Disabling bearer [ 63.743540][ T4977] lo speed is unknown, defaulting to 1000 [ 63.834131][ T4995] veth1_to_bridge: entered promiscuous mode [ 63.948790][ T5010] veth1_to_bond: entered allmulticast mode [ 63.967718][ T5010] veth1_to_bond: left allmulticast mode [ 64.015069][ T5022] tmpfs: Bad value for 'mpol' [ 64.065517][ T5029] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.096754][ T28] kauditd_printk_skb: 185 callbacks suppressed [ 64.096769][ T28] audit: type=1400 audit(1785538325.903:650): avc: denied { write } for pid=5008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.151477][ T28] audit: type=1400 audit(1785538325.953:651): avc: denied { write } for pid=5039 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.180695][ T5029] EXT4-fs (loop2): mounted filesystem 007f0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.200469][ T4977] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.203857][ T5029] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.218334][ T4977] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.225728][ T4977] bridge_slave_0: entered allmulticast mode [ 64.236585][ T4977] bridge_slave_0: entered promiscuous mode [ 64.245646][ T5029] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.338: invalid fast symlink length 10 [ 64.245687][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 64.257231][ T28] audit: type=1400 audit(1785538326.053:652): avc: denied { write } for pid=5028 comm="syz.2.338" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.288218][ T4977] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.295768][ T5029] EXT4-fs (loop2): Remounting filesystem read-only [ 64.298630][ T4977] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.309667][ T4977] bridge_slave_1: entered allmulticast mode [ 64.315767][ T28] audit: type=1400 audit(1785538326.113:653): avc: denied { write } for pid=5048 comm="syz.1.343" name="rt_cache" dev="proc" ino=4026532448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 64.339209][ T4977] bridge_slave_1: entered promiscuous mode [ 64.352212][ T28] audit: type=1400 audit(1785538326.163:654): avc: denied { create } for pid=5028 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 64.390060][ T28] audit: type=1400 audit(1785538326.183:655): avc: denied { shutdown } for pid=5048 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.404079][ T4977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.419348][ T3300] EXT4-fs (loop2): unmounting filesystem 007f0000-0000-0000-0000-000000000000. [ 64.420515][ T4977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.462842][ T4977] team0: Port device team_slave_0 added [ 64.476468][ T361] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.489258][ T4977] team0: Port device team_slave_1 added [ 64.506458][ T4977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.513514][ T4977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.539706][ T4977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.551570][ T4977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.558592][ T4977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.585144][ T4977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.598076][ T28] audit: type=1400 audit(1785538326.403:656): avc: denied { read write } for pid=5055 comm="syz.2.345" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 64.622480][ T28] audit: type=1400 audit(1785538326.403:657): avc: denied { open } for pid=5055 comm="syz.2.345" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 64.650766][ T361] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.716424][ T361] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.763070][ T4977] hsr_slave_0: entered promiscuous mode [ 64.776323][ T4977] hsr_slave_1: entered promiscuous mode [ 64.788709][ T4977] debugfs: 'hsr0' already exists in 'hsr' [ 64.801497][ T4977] Cannot create hsr debugfs directory [ 64.877227][ T361] bridge_slave_1: left allmulticast mode [ 64.883004][ T361] bridge_slave_1: left promiscuous mode [ 64.890236][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.907207][ T361] bridge_slave_0: left allmulticast mode [ 64.913187][ T361] bridge_slave_0: left promiscuous mode [ 64.920917][ T28] audit: type=1326 audit(1785538326.723:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5030 comm="syz.0.339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6700e019 code=0x7fc00000 [ 64.950950][ T5064] set_capacity_and_notify: 5 callbacks suppressed [ 64.950992][ T5064] loop2: detected capacity change from 0 to 8192 [ 64.965110][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.007896][ T28] audit: type=1400 audit(1785538326.813:659): avc: denied { read } for pid=5067 comm="syz.0.348" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 65.054643][ T5064] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 65.068305][ T5064] FAT-fs (loop2): Filesystem has been set read-only [ 65.076818][ T361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.092623][ T5069] loop0: detected capacity change from 0 to 512 [ 65.107688][ T361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.117078][ T5069] vfat: Unknown parameter '"' [ 65.167223][ T361] bond0 (unregistering): Released all slaves [ 65.541440][ T361] hsr_slave_0: left promiscuous mode [ 65.550103][ T361] hsr_slave_1: left promiscuous mode [ 65.562874][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.586375][ T361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.608019][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.636496][ T361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.648282][ T361] veth1_macvtap: left promiscuous mode [ 65.653899][ T361] veth0_macvtap: left promiscuous mode [ 65.659507][ T361] veth1_vlan: left promiscuous mode [ 65.664929][ T361] veth0_vlan: left promiscuous mode [ 65.673270][ T5084] netlink: 36 bytes leftover after parsing attributes in process `syz.1.353'. [ 65.770806][ T361] team0 (unregistering): Port device team_slave_1 removed [ 65.785819][ T361] team0 (unregistering): Port device team_slave_0 removed [ 65.800966][ T5099] loop4: detected capacity change from 0 to 512 [ 65.820945][ T5099] EXT4-fs error (device loop4): ext4_read_inode_bitmap:141: comm syz.4.352: Invalid inode bitmap blk 4 in block_group 0 [ 65.829973][ T5104] loop0: detected capacity change from 0 to 512 [ 65.833797][ T5099] loop4: lost filesystem error report for type 5 error -117 [ 65.841836][ T5099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.876711][ T5099] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 65.912061][ T5104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.914541][ T5099] EXT4-fs error (device loop4): ext4_read_inode_bitmap:141: comm syz.4.352: Invalid inode bitmap blk 4 in block_group 0 [ 65.943808][ T5099] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 65.956836][ T5104] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.047206][ T4977] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 66.066443][ T4977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.074075][ T4977] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 66.085925][ T4977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.094123][ T4977] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 66.118786][ T4977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.129420][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.134185][ T4977] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 66.155801][ T5104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 66.156649][ T4977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.242865][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.259173][ T3018] 8021q: adding VLAN 0 to HW filter on device eth9 [ 66.290341][ T4977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.308413][ T5143] loop1: detected capacity change from 0 to 512 [ 66.316636][ T5143] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.351583][ T5143] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 66.353119][ T4977] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.360058][ T5143] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 66.374991][ T5143] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 66.383505][ T5143] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 66.392210][ T5143] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 66.400684][ T5143] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 66.409482][ T5143] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 66.418015][ T5143] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 66.426548][ T5143] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 66.435073][ T5143] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 66.443858][ T5143] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 66.452258][ T5143] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 66.460777][ T5143] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 66.469169][ T5143] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 66.477637][ T5143] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 66.486645][ T5143] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 66.541714][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.548797][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.560386][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.567523][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.736362][ T5130] loop2: detected capacity change from 0 to 8192 [ 66.778793][ T5130] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 66.787078][ T5130] FAT-fs (loop2): Filesystem has been set read-only [ 66.790075][ T4977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.828417][ T3018] 8021q: adding VLAN 0 to HW filter on device eth10 [ 67.040323][ T5201] loop2: detected capacity change from 0 to 512 [ 67.068090][ T4977] veth0_vlan: entered promiscuous mode [ 67.094295][ T4977] veth1_vlan: entered promiscuous mode [ 67.116924][ T5209] loop1: detected capacity change from 0 to 512 [ 67.123631][ T3018] 8021q: adding VLAN 0 to HW filter on device eth11 [ 67.137732][ T5201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.151239][ T4977] veth0_macvtap: entered promiscuous mode [ 67.165817][ T4977] veth1_macvtap: entered promiscuous mode [ 67.175051][ T5201] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.184205][ T4977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.204535][ T4977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.208615][ T5209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.228964][ T5209] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.251555][ T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.264374][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.317087][ T5201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 67.381857][ T30] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.405991][ T5232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.368'. [ 67.419942][ T30] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.434430][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.464375][ T3018] 8021q: adding VLAN 0 to HW filter on device eth12 [ 67.519371][ T5242] netlink: 'syz.2.370': attribute type 10 has an invalid length. [ 67.531174][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.636016][ T5258] usb usb7: check_ctrlrecip: process 5258 (syz.1.374) requesting ep 01 but needs 81 [ 67.643492][ T5257] loop4: detected capacity change from 0 to 512 [ 67.660933][ T5258] usb usb7: usbfs: process 5258 (syz.1.374) did not claim interface 0 before use [ 67.682075][ T5257] EXT4-fs: Ignoring removed nobh option [ 67.703393][ T5257] ext4: Unknown parameter 'fowner' [ 67.976345][ T5276] lo speed is unknown, defaulting to 1000 [ 68.062063][ T5282] loop4: detected capacity change from 0 to 256 [ 68.189615][ T5280] lo speed is unknown, defaulting to 1000 [ 68.219278][ T5278] EXT4-fs: Ignoring removed oldalloc option [ 68.267872][ T5278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.292390][ T5278] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.315653][ T5278] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.381: corrupted xattr block 32: invalid ea_ino [ 68.329611][ T5278] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 68.339908][ T5278] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.381: corrupted xattr block 32: invalid ea_ino [ 68.356341][ T5278] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 68.376677][ T5278] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.381: corrupted xattr block 32: invalid ea_ino [ 68.399138][ T5278] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 68.443735][ T5287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.482401][ T5287] process 'syz.0.382' launched './file2' with NULL argv: empty string added [ 68.545177][ T5291] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 68.609825][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.726108][ T5304] netlink: 'syz.7.387': attribute type 8 has an invalid length. [ 68.728336][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.734707][ T5304] sch_fq: defrate 0 ignored. [ 68.869590][ T5314] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.898782][ T5321] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.958648][ T5321] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.393: Invalid block bitmap block 0 in block_group 0 [ 68.968833][ T5324] xt_hashlimit: size too large, truncated to 1048576 [ 68.980632][ T5321] loop0: lost filesystem error report for type 5 error -117 [ 68.981419][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 68.995175][ C0] EXT4-fs (loop0): initial error at time 1785538330: ext4_read_block_bitmap_nowait:483 [ 69.004852][ C0] EXT4-fs (loop0): last error at time 1785538330: ext4_read_block_bitmap_nowait:483 [ 69.016684][ T5321] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 69.026009][ T5321] loop0: lost filesystem error report for type 5 error -117 [ 69.034318][ T5321] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.393: attempt to clear invalid blocks 983261 len 1 [ 69.078939][ T5321] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 69.084697][ T5304] loop7: p1 p2 p3 p4[DM] [ 69.100126][ T5304] loop7: p1 size 835329 extends beyond EOD, truncated [ 69.108745][ T5304] loop7: p2 size 327680 extends beyond EOD, truncated [ 69.117351][ T3293] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 69.120358][ T5321] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.393: Invalid inode table block 0 in block_group 0 [ 69.127322][ T5304] loop7: p3 start 1052673 is beyond EOD, [ 69.139885][ T5321] loop0: lost filesystem error report for type 5 error -117 [ 69.146668][ T5321] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 69.150611][ T5304] truncated [ 69.170259][ T5321] loop0: lost filesystem error report for type 5 error -117 [ 69.170554][ T5321] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 69.181687][ T5304] loop7: p4 size 262144 extends beyond EOD, truncated [ 69.189703][ T5321] loop0: lost filesystem error report for type 5 error -117 [ 69.195810][ T5321] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.393: Invalid inode table block 0 in block_group 0 [ 69.216342][ T5321] loop0: lost filesystem error report for type 5 error -117 [ 69.216615][ T5321] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 69.233923][ T5321] loop0: lost filesystem error report for type 5 error -117 [ 69.234086][ T5321] EXT4-fs error (device loop0): ext4_truncate:4691: inode #11: comm syz.0.393: mark_inode_dirty error [ 69.253572][ T5321] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 69.253775][ T5321] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 69.272717][ T5321] loop0: lost filesystem error report for type 5 error -117 [ 69.272858][ T5321] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.393: Invalid inode table block 0 in block_group 0 [ 69.293767][ T5321] loop0: lost filesystem error report for type 5 error -117 [ 69.293953][ T5321] EXT4-fs (loop0): 1 truncate cleaned up [ 69.307463][ T5321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.329735][ T5321] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.393: Invalid inode table block 0 in block_group 0 [ 69.340681][ T3701] udevd[3701]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 69.344867][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 69.358749][ T3683] udevd[3683]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 69.379296][ T5321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.393'. [ 69.419003][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 69.419017][ T28] audit: type=1400 audit(1785538331.223:686): avc: denied { create } for pid=5320 comm="syz.0.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 69.503002][ T5321] xt_l2tp: invalid flags combination: 0 [ 69.504896][ T28] audit: type=1400 audit(1785538331.313:687): avc: denied { map } for pid=5341 comm="syz.4.398" path="socket:[12497]" dev="sockfs" ino=12497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 69.544058][ T28] audit: type=1400 audit(1785538331.353:688): avc: denied { name_connect } for pid=5331 comm="syz.7.396" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 69.579672][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.113063][ T28] audit: type=1400 audit(1785538331.923:689): avc: denied { unmount } for pid=4977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 70.238344][ T5378] xt_HMARK: proto mask must be zero with L3 mode [ 70.244337][ T5349] set_capacity_and_notify: 7 callbacks suppressed [ 70.244382][ T5349] loop0: detected capacity change from 0 to 4096 [ 70.326635][ T5349] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.354607][ T5384] netlink: 'syz.1.412': attribute type 21 has an invalid length. [ 70.432811][ T5388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.413'. [ 70.456782][ T28] audit: type=1400 audit(1785538332.263:690): avc: denied { accept } for pid=5348 comm="syz.0.399" lport=50072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.458478][ T5388] netlink: 32 bytes leftover after parsing attributes in process `syz.2.413'. [ 70.531573][ T5388] netlink: 28 bytes leftover after parsing attributes in process `syz.2.413'. [ 70.540469][ T28] audit: type=1400 audit(1785538332.343:691): avc: denied { write } for pid=5348 comm="syz.0.399" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.571636][ T5388] netlink: 32 bytes leftover after parsing attributes in process `syz.2.413'. [ 70.589886][ T28] audit: type=1400 audit(1785538332.343:692): avc: denied { read write } for pid=5348 comm="syz.0.399" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.657293][ T28] audit: type=1400 audit(1785538332.343:693): avc: denied { open } for pid=5348 comm="syz.0.399" path="/100/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.707856][ T5398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.415'. [ 70.733188][ T28] audit: type=1400 audit(1785538332.343:694): avc: denied { ioctl } for pid=5348 comm="syz.0.399" path="/100/file0/file1" dev="loop0" ino=15 ioctlcmd=0x6629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.772632][ T5395] loop2: detected capacity change from 0 to 512 [ 70.807656][ T28] audit: type=1400 audit(1785538332.513:695): avc: denied { create } for pid=5397 comm="syz.4.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 70.867031][ T5393] syzkaller0: entered promiscuous mode [ 70.870052][ T5403] loop7: detected capacity change from 0 to 2048 [ 70.872794][ T5393] syzkaller0: entered allmulticast mode [ 70.882710][ T5395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.925057][ T5403] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.937033][ T5395] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.967246][ T4977] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.004113][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.015266][ T5413] netlink: 200 bytes leftover after parsing attributes in process `syz.7.418'. [ 71.032947][ T5411] loop4: detected capacity change from 0 to 8192 [ 71.043760][ T5407] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 71.051986][ T5407] FAT-fs (loop4): Filesystem has been set read-only [ 71.185892][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.264978][ T5438] loop2: detected capacity change from 0 to 512 [ 71.292095][ T5425] loop1: detected capacity change from 0 to 512 [ 71.315144][ T5438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.348821][ T5425] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.422: inode has both inline data and extents flags [ 71.363923][ T5438] netlink: 'syz.2.426': attribute type 8 has an invalid length. [ 71.373394][ T5444] loop4: detected capacity change from 0 to 2048 [ 71.379920][ T5425] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.381921][ T5425] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.422: couldn't read orphan inode 15 (err -117) [ 71.391450][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 71.409520][ C1] EXT4-fs (loop1): initial error at time 1785538333: ext4_orphan_get:1399: inode 15 [ 71.418943][ C1] EXT4-fs (loop1): last error at time 1785538333: ext4_orphan_get:1399: inode 15 [ 71.446404][ T5444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.467428][ T5463] netlink: 64 bytes leftover after parsing attributes in process `syz.7.431'. [ 71.488877][ T5425] loop1: lost filesystem error report for type 5 error -117 [ 71.491303][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.516703][ T5444] IPv6: NLM_F_CREATE should be specified when creating new route [ 71.530324][ T5425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.545592][ T5473] loop7: detected capacity change from 0 to 512 [ 71.554454][ T5425] FAULT_INJECTION: forcing a failure. [ 71.554454][ T5425] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 71.568362][ T5425] CPU: 0 UID: 0 PID: 5425 Comm: syz.1.422 Not tainted syzkaller #0 PREEMPT(lazy) [ 71.568461][ T5425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.568471][ T5425] Call Trace: [ 71.568477][ T5425] [ 71.568483][ T5425] __dump_stack+0x1d/0x30 [ 71.568509][ T5425] dump_stack_lvl+0x95/0xd0 [ 71.568527][ T5425] dump_stack+0x15/0x1b [ 71.568599][ T5425] should_fail_ex+0x25e/0x270 [ 71.568622][ T5425] should_fail+0xb/0x20 [ 71.568643][ T5425] should_fail_usercopy+0x1a/0x20 [ 71.568670][ T5425] _copy_from_user+0x1c/0xb0 [ 71.568754][ T5425] ___sys_sendmsg+0xc1/0x1e0 [ 71.568796][ T5425] __x64_sys_sendmsg+0xd4/0x160 [ 71.568848][ T5425] x64_sys_call+0x194c/0x3020 [ 71.568976][ T5425] do_syscall_64+0x136/0x3c0 [ 71.568999][ T5425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.569018][ T5425] RIP: 0033:0x7f976e77e019 [ 71.569031][ T5425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.569123][ T5425] RSP: 002b:00007f976d1d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.569151][ T5425] RAX: ffffffffffffffda RBX: 00007f976ea05fa0 RCX: 00007f976e77e019 [ 71.569187][ T5425] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 000000000000000a [ 71.569199][ T5425] RBP: 00007f976d1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.569209][ T5425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.569220][ T5425] R13: 00007f976ea06038 R14: 00007f976ea05fa0 R15: 00007ffc40c0a1d8 [ 71.569241][ T5425] [ 71.776806][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.867114][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.916520][ T5497] geneve2: entered allmulticast mode [ 71.942845][ T5494] tmpfs: Bad value for 'mpol' [ 72.370722][ T5509] loop1: detected capacity change from 0 to 512 [ 72.377606][ T5509] EXT4-fs: Invalid want_extra_isize 3 [ 72.499600][ T5524] netlink: 'syz.7.445': attribute type 10 has an invalid length. [ 72.512809][ T5521] loop2: detected capacity change from 0 to 512 [ 72.546962][ T5524] team0 (unregistering): Port device team_slave_0 removed [ 72.575495][ T5524] team0 (unregistering): Port device team_slave_1 removed [ 72.643575][ T5533] vfat: Unknown parameter 'defc' [ 72.806015][ T5567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.453'. [ 72.837232][ T5566] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.907788][ T5566] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.954686][ T9] IPVS: starting estimator thread 0... [ 73.000036][ T4977] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.061109][ T5584] futex_wake_op: syz.7.455 tries to shift op by -1; fix this program [ 73.061595][ T5578] IPVS: using max 2304 ests per chain, 115200 per kthread [ 73.095112][ T5581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.121278][ T5581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.278589][ T5599] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.309437][ T5599] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.348080][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.407418][ T5599] netlink: 8 bytes leftover after parsing attributes in process `syz.7.460'. [ 73.489503][ T4977] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.581145][ T5624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8816 sclass=netlink_route_socket pid=5624 comm=syz.1.469 [ 73.600539][ T5617] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.682032][ T4977] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.777391][ T5649] lo speed is unknown, defaulting to 1000 [ 73.970620][ T5655] lo speed is unknown, defaulting to 1000 [ 74.015124][ T5659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.164297][ T5680] ext4: Unknown parameter 'pcr' [ 74.304236][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.622786][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 74.622815][ T28] audit: type=1400 audit(1785538336.433:729): avc: denied { write } for pid=5696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.808096][ T28] audit: type=1400 audit(1785538336.613:730): avc: denied { write } for pid=5719 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.266014][ T5701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.428487][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.618758][ T5728] netlink: 132 bytes leftover after parsing attributes in process `syz.7.495'. [ 75.681124][ T5730] set_capacity_and_notify: 10 callbacks suppressed [ 75.681138][ T5730] loop4: detected capacity change from 0 to 256 [ 75.863899][ T5730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.496'. [ 75.883786][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'. [ 76.374926][ T5749] loop7: detected capacity change from 0 to 512 [ 76.398654][ T5749] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.411268][ T5749] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.433880][ T28] audit: type=1400 audit(1785538338.233:731): avc: denied { write } for pid=5744 comm="syz.7.501" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.483413][ T5753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 76.546085][ T5756] loop1: detected capacity change from 0 to 512 [ 76.563068][ T5753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 76.642433][ T5756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.676327][ T28] audit: type=1400 audit(1785538338.233:732): avc: denied { write } for pid=5744 comm="syz.7.501" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.699324][ T5753] netlink: 'syz.0.505': attribute type 4 has an invalid length. [ 76.719014][ T5756] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.802099][ T5756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 76.863713][ T3293] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.901744][ T5785] syzkaller1: entered allmulticast mode [ 76.909891][ T28] audit: type=1400 audit(1785538338.713:733): avc: denied { bind } for pid=5784 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.929929][ T5774] loop2: detected capacity change from 0 to 8192 [ 76.937652][ T28] audit: type=1400 audit(1785538338.713:734): avc: denied { node_bind } for pid=5784 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 76.996307][ T5774] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 77.012159][ T4977] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.023051][ T28] audit: type=1400 audit(1785538338.823:735): avc: denied { create } for pid=5790 comm="syz.4.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 77.044615][ T5774] FAT-fs (loop2): Filesystem has been set read-only [ 77.052056][ T28] audit: type=1400 audit(1785538338.823:736): avc: denied { write } for pid=5790 comm="syz.4.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 77.183290][ T5804] loop1: detected capacity change from 0 to 256 [ 77.326009][ T5804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'. [ 77.348159][ T5808] netlink: 72 bytes leftover after parsing attributes in process `syz.2.520'. [ 77.619600][ T5826] lo speed is unknown, defaulting to 1000 [ 77.676576][ T5830] netlink: 'syz.2.528': attribute type 10 has an invalid length. [ 77.701355][ T5833] loop1: detected capacity change from 0 to 256 [ 77.776492][ T5828] lo speed is unknown, defaulting to 1000 [ 77.906080][ T5831] lo speed is unknown, defaulting to 1000 [ 78.017087][ T5832] lo speed is unknown, defaulting to 1000 [ 78.317190][ T5854] loop1: detected capacity change from 0 to 512 [ 78.338690][ T5854] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 78.374719][ T5854] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 78.403422][ T5858] loop7: detected capacity change from 0 to 256 [ 78.411132][ T5854] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 78.424411][ T5858] __nla_validate_parse: 1 callbacks suppressed [ 78.424426][ T5858] netlink: 28 bytes leftover after parsing attributes in process `syz.7.537'. [ 78.481795][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.535'. [ 78.592377][ T5854] macvlan2: entered allmulticast mode [ 78.598378][ T5854] gretap0: entered allmulticast mode [ 78.739877][ T5871] FAULT_INJECTION: forcing a failure. [ 78.739877][ T5871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.777263][ T5867] FAULT_INJECTION: forcing a failure. [ 78.777263][ T5867] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 78.796515][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: syz.7.541 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.796540][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.796550][ T5871] Call Trace: [ 78.796556][ T5871] [ 78.796562][ T5871] __dump_stack+0x1d/0x30 [ 78.796584][ T5871] dump_stack_lvl+0x95/0xd0 [ 78.796648][ T5871] dump_stack+0x15/0x1b [ 78.796665][ T5871] should_fail_ex+0x25e/0x270 [ 78.796688][ T5871] should_fail+0xb/0x20 [ 78.796707][ T5871] should_fail_usercopy+0x1a/0x20 [ 78.796808][ T5871] _copy_from_iter+0xcc/0xe70 [ 78.796840][ T5871] ? __alloc_skb+0x511/0x6f0 [ 78.796926][ T5871] ? __alloc_skb+0x205/0x6f0 [ 78.796949][ T5871] netlink_sendmsg+0x4a4/0x6f0 [ 78.796975][ T5871] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.796998][ T5871] ____sys_sendmsg+0x532/0x580 [ 78.797081][ T5871] ___sys_sendmsg+0x195/0x1e0 [ 78.797184][ T5871] __x64_sys_sendmsg+0xd4/0x160 [ 78.797231][ T5871] x64_sys_call+0x194c/0x3020 [ 78.797252][ T5871] do_syscall_64+0x136/0x3c0 [ 78.797276][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.797313][ T5871] RIP: 0033:0x7f26466ae019 [ 78.797328][ T5871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.797344][ T5871] RSP: 002b:00007f2645107028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.797364][ T5871] RAX: ffffffffffffffda RBX: 00007f2646935fa0 RCX: 00007f26466ae019 [ 78.797378][ T5871] RDX: 0000000020040854 RSI: 0000200000000180 RDI: 0000000000000003 [ 78.797391][ T5871] RBP: 00007f2645107090 R08: 0000000000000000 R09: 0000000000000000 [ 78.797420][ T5871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.797430][ T5871] R13: 00007f2646936038 R14: 00007f2646935fa0 R15: 00007ffe4d4946a8 [ 78.797445][ T5871] [ 78.982600][ T5867] CPU: 0 UID: 0 PID: 5867 Comm: syz.1.539 Not tainted syzkaller #0 PREEMPT(lazy) [ 78.982677][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.982686][ T5867] Call Trace: [ 78.982692][ T5867] [ 78.982699][ T5867] __dump_stack+0x1d/0x30 [ 78.982723][ T5867] dump_stack_lvl+0x95/0xd0 [ 78.982743][ T5867] dump_stack+0x15/0x1b [ 78.982774][ T5867] should_fail_ex+0x25e/0x270 [ 78.982817][ T5867] should_fail_alloc_page+0xf2/0x100 [ 78.982897][ T5867] __alloc_frozen_pages_noprof+0x108/0x350 [ 78.982923][ T5867] alloc_pages_mpol+0xa9/0x1d0 [ 78.982994][ T5867] alloc_pages_noprof+0x8f/0x140 [ 78.983056][ T5867] alloc_skb_with_frags+0x1c9/0x3d0 [ 78.983126][ T5867] tls_decrypt_sg+0x233/0x1ad0 [ 78.983153][ T5867] ? skb_copy_bits+0x3d4/0x540 [ 78.983178][ T5867] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 78.983199][ T5867] ? hrtimer_start_range_ns+0x108/0x120 [ 78.983228][ T5867] ? __copy_skb_header+0x22f/0x2b0 [ 78.983289][ T5867] ? skb_copy_header+0x170/0x190 [ 78.983309][ T5867] ? tls_strp_load_anchor_with_queue+0x18e/0x1d0 [ 78.983333][ T5867] tls_decrypt_sw+0x4b/0x440 [ 78.983352][ T5867] tls_rx_one_record+0x112/0x7d0 [ 78.983398][ T5867] ? __pfx_woken_wake_function+0x10/0x10 [ 78.983420][ T5867] tls_sw_recvmsg+0x697/0xf90 [ 78.983450][ T5867] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 78.983491][ T5867] inet6_recvmsg+0xe1/0x210 [ 78.983510][ T5867] ? security_socket_recvmsg+0x2b/0x90 [ 78.983529][ T5867] ? __pfx_inet6_recvmsg+0x10/0x10 [ 78.983545][ T5867] sock_recvmsg+0x95/0x120 [ 78.983637][ T5867] __sys_recvfrom+0x122/0x200 [ 78.983663][ T5867] __x64_sys_recvfrom+0x76/0x90 [ 78.983783][ T5867] x64_sys_call+0x2c0c/0x3020 [ 78.983802][ T5867] do_syscall_64+0x136/0x3c0 [ 78.983825][ T5867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.983846][ T5867] RIP: 0033:0x7f976e77e019 [ 78.983883][ T5867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.983901][ T5867] RSP: 002b:00007f976d1d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 78.983918][ T5867] RAX: ffffffffffffffda RBX: 00007f976ea05fa0 RCX: 00007f976e77e019 [ 78.983929][ T5867] RDX: fffffffffffffdab RSI: 0000200000002800 RDI: 0000000000000004 [ 78.983950][ T5867] RBP: 00007f976d1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.983960][ T5867] R10: 0000000000000017 R11: 0000000000000246 R12: 0000000000000001 [ 78.983970][ T5867] R13: 00007f976ea06038 R14: 00007f976ea05fa0 R15: 00007ffc40c0a1d8 [ 78.983985][ T5867] [ 79.315214][ T5882] FAULT_INJECTION: forcing a failure. [ 79.315214][ T5882] name failslab, interval 1, probability 0, space 0, times 0 [ 79.334862][ T5884] capability: warning: `syz.7.544' uses 32-bit capabilities (legacy support in use) [ 79.354367][ T5882] CPU: 0 UID: 0 PID: 5882 Comm: syz.0.543 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.354462][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.354471][ T5882] Call Trace: [ 79.354477][ T5882] [ 79.354535][ T5882] __dump_stack+0x1d/0x30 [ 79.354559][ T5882] dump_stack_lvl+0x95/0xd0 [ 79.354578][ T5882] dump_stack+0x15/0x1b [ 79.354597][ T5882] should_fail_ex+0x25e/0x270 [ 79.354618][ T5882] should_failslab+0x8c/0xb0 [ 79.354718][ T5882] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 79.354800][ T5882] ? __alloc_skb+0x2db/0x6f0 [ 79.354820][ T5882] ? __alloc_skb+0x2db/0x6f0 [ 79.354918][ T5882] __alloc_skb+0x2db/0x6f0 [ 79.354948][ T5882] ? __alloc_skb+0x205/0x6f0 [ 79.354968][ T5882] netlink_alloc_large_skb+0xbf/0xf0 [ 79.355041][ T5882] netlink_sendmsg+0x40c/0x6f0 [ 79.355061][ T5882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.355100][ T5882] ____sys_sendmsg+0x532/0x580 [ 79.355132][ T5882] ___sys_sendmsg+0x195/0x1e0 [ 79.355170][ T5882] __x64_sys_sendmsg+0xd4/0x160 [ 79.355231][ T5882] x64_sys_call+0x194c/0x3020 [ 79.355250][ T5882] do_syscall_64+0x136/0x3c0 [ 79.355272][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.355340][ T5882] RIP: 0033:0x7f1d6700e019 [ 79.355354][ T5882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.355382][ T5882] RSP: 002b:00007f1d65a67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.355399][ T5882] RAX: ffffffffffffffda RBX: 00007f1d67295fa0 RCX: 00007f1d6700e019 [ 79.355419][ T5882] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 79.355461][ T5882] RBP: 00007f1d65a67090 R08: 0000000000000000 R09: 0000000000000000 [ 79.355474][ T5882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.355546][ T5882] R13: 00007f1d67296038 R14: 00007f1d67295fa0 R15: 00007ffe2bedc368 [ 79.355562][ T5882] [ 79.556084][ T28] audit: type=1400 audit(1785538341.163:737): avc: denied { write } for pid=5860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.628153][ T5897] FAULT_INJECTION: forcing a failure. [ 79.628153][ T5897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.669370][ T28] audit: type=1400 audit(1785538341.473:738): avc: denied { write } for pid=5899 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.675118][ T5897] CPU: 1 UID: 0 PID: 5897 Comm: syz.0.549 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.675144][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.675155][ T5897] Call Trace: [ 79.675162][ T5897] [ 79.675199][ T5897] __dump_stack+0x1d/0x30 [ 79.675221][ T5897] dump_stack_lvl+0x95/0xd0 [ 79.675259][ T5897] dump_stack+0x15/0x1b [ 79.675275][ T5897] should_fail_ex+0x25e/0x270 [ 79.675300][ T5897] should_fail+0xb/0x20 [ 79.675321][ T5897] should_fail_usercopy+0x1a/0x20 [ 79.675483][ T5897] _copy_to_user+0x20/0xa0 [ 79.675501][ T5897] simple_read_from_buffer+0xb5/0x130 [ 79.675523][ T5897] proc_fail_nth_read+0x10e/0x150 [ 79.675624][ T5897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.675643][ T5897] vfs_read+0x18e/0x7c0 [ 79.675725][ T5897] ? __rcu_read_unlock+0x4e/0x70 [ 79.675756][ T5897] ? __fget_files+0x184/0x1c0 [ 79.675780][ T5897] ? mutex_lock+0x57/0x90 [ 79.675868][ T5897] ksys_read+0xdc/0x1a0 [ 79.675885][ T5897] __x64_sys_read+0x40/0x50 [ 79.675902][ T5897] x64_sys_call+0x2886/0x3020 [ 79.675922][ T5897] do_syscall_64+0x136/0x3c0 [ 79.676057][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.676156][ T5897] RIP: 0033:0x7f1d66fce84e [ 79.676176][ T5897] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 79.676192][ T5897] RSP: 002b:00007f1d65a66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.676211][ T5897] RAX: ffffffffffffffda RBX: 00007f1d65a676c0 RCX: 00007f1d66fce84e [ 79.676225][ T5897] RDX: 000000000000000f RSI: 00007f1d65a670a0 RDI: 0000000000000004 [ 79.676236][ T5897] RBP: 00007f1d65a67090 R08: 0000000000000000 R09: 0000000000000000 [ 79.676276][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.676287][ T5897] R13: 00007f1d67296038 R14: 00007f1d67295fa0 R15: 00007ffe2bedc368 [ 79.676304][ T5897] [ 79.715062][ T5901] IPVS: set_ctl: invalid protocol: 115 172.20.20.13:20002 [ 79.841825][ T5907] --map-set only usable from mangle table [ 79.942032][ T5901] loop1: detected capacity change from 0 to 512 [ 79.960184][ T28] audit: type=1400 audit(1785538341.763:739): avc: denied { write } for pid=5905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.984972][ T5901] EXT4-fs (loop1): filesystem is read-only [ 80.039464][ T28] audit: type=1400 audit(1785538341.813:740): avc: denied { write } for pid=5923 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.107757][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 80.181050][ T28] audit: type=1400 audit(1785538341.983:741): avc: denied { write } for pid=5927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.267420][ T28] audit: type=1400 audit(1785538342.063:742): avc: denied { write } for pid=5942 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.346290][ T28] audit: type=1400 audit(1785538342.153:743): avc: denied { write } for pid=5948 comm="syz.7.555" name="uprobe_events" dev="tracefs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 80.401434][ T28] audit: type=1400 audit(1785538342.153:744): avc: denied { open } for pid=5948 comm="syz.7.555" path="/36/tracing/uprobe_events" dev="tracefs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 80.415139][ T5949] syzkaller0: entered promiscuous mode [ 80.444663][ T5949] syzkaller0: entered allmulticast mode [ 80.466185][ T28] audit: type=1400 audit(1785538342.153:745): avc: denied { open } for pid=5948 comm="syz.7.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.521299][ T28] audit: type=1400 audit(1785538342.153:746): avc: denied { kernel } for pid=5948 comm="syz.7.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 80.602403][ T28] audit: type=1400 audit(1785538342.403:747): avc: denied { write } for pid=5947 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.743384][ T5985] loop1: detected capacity change from 0 to 512 [ 81.027705][ T6006] ================================================================== [ 81.035820][ T6006] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 81.043568][ T6006] [ 81.045888][ T6006] write to 0xffff888101c11200 of 8 bytes by task 6005 on cpu 0: [ 81.053510][ T6006] mas_wr_store_entry+0x3b95/0x5a90 [ 81.058711][ T6006] mas_store_prealloc+0x421/0x670 [ 81.063730][ T6006] mmap_region+0x1c69/0x20c0 [ 81.068365][ T6006] do_mmap+0x970/0xbc0 [ 81.072444][ T6006] vm_mmap_pgoff+0x183/0x2d0 [ 81.077034][ T6006] ksys_mmap_pgoff+0xc1/0x310 [ 81.081717][ T6006] x64_sys_call+0x14df/0x3020 [ 81.086398][ T6006] do_syscall_64+0x136/0x3c0 [ 81.090996][ T6006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.096882][ T6006] [ 81.099200][ T6006] read to 0xffff888101c11200 of 8 bytes by task 6006 on cpu 1: [ 81.106731][ T6006] mtree_range_walk+0x35a/0x480 [ 81.111585][ T6006] mas_walk+0x1ac/0x340 [ 81.115739][ T6006] lock_vma_under_rcu+0xc9/0x210 [ 81.120680][ T6006] do_user_addr_fault+0x237/0x1060 [ 81.125796][ T6006] exc_page_fault+0x62/0xa0 [ 81.130300][ T6006] asm_exc_page_fault+0x26/0x30 [ 81.135156][ T6006] [ 81.137466][ T6006] value changed: 0xffff888101c1100e -> 0xffff888101c11200 [ 81.144564][ T6006] [ 81.146880][ T6006] Reported by Kernel Concurrency Sanitizer on: [ 81.153016][ T6006] CPU: 1 UID: 0 PID: 6006 Comm: syz.7.568 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.162209][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.172310][ T6006] ==================================================================