last executing test programs: 5.460264248s ago: executing program 3 (id=145): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x6}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x1ff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20004055) creat(0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x1, 0x2}, {0xe, 0x10}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x24004004) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180), 0x0, 0x1, 0x1}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) 4.521602225s ago: executing program 3 (id=153): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) process_madvise(r2, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000180)="648b12ec460a0bec389075f737a7fa05a7efa7e4fd856cb4f90eec", 0x1b}, {&(0x7f00000001c0)="6c7f0876b70aa5624233279c8894124ea332c8ae5f76142db9ce21a66d497a77e2529b8241ee7feb40db437bbd8d31777877ea2d5863cfa40deb0dcc08a2d3cdfd01b1e986ebf01ebc51453567ab6943ff71b74d4b4fed29c32a212045ebd35f53fa0e89446b812cab1a74823b9929b135bc28cfd172677fd8755755831d1d6e14f901799fce45b08040cc7d559a61252928267dd5d501699901c65517e9a84fa25821953f01fcf5094160b582591c5aec6ad56af077b9b8adc04cd37c6183f33b3d5b1fdd3c5be384", 0xc9}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="eb556f0b7de121e3130340ecfd21d36d2c289155ccc98f7d65b6494c81b361bf519f78cba62f5e2f192822f5629b79499d16b9d67f9f30eb585d7e55cd5e15fab30b58a73a8eecdee25b25b5bdb55b391ec0e201ebd36beef2c8a46d70d2891a27f2f42f157b6c001f5a72d82019e5003a80f43bd161069072cc1d23757bf4486f48b1f445b73af558dc5b5d3a9de094acb0c48828d81696697a2cd192ded056c45d9f6fa833e07f0817dc303eca1fa99b195ded8dbbf2617bea68bca661abc1b982bd877cffd3a44bcf6d6b85d20854514f6f55ee8571661aafda03bf275a2c", 0xe0}, {&(0x7f00000013c0)="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", 0xfa}, {&(0x7f00000014c0)="b752dbeb08c1a2eb956b0a58077a864d312fbaa16d5c42976a56156808744369e1baa1f7a9416da0001eeb3a999896f804d9bea052d3fc16061f86d900ec0550e2b5bd13e425b6b0907009a3243e06a970f7d58f52dda4eb8ff2d5c2cc6fa2651e8f1830", 0x64}], 0x7, 0xc, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0005000000000000007ef8bc0a0004000000004004000400"], 0x1c}}, 0x0) 4.449733246s ago: executing program 3 (id=155): r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000140)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x22c6c3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030306ae2591030303030303030372c666f776e65723c", @ANYRESDEC=r1, @ANYBLOB=',audit,\x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x400}}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000140)=""/130, 0x82, 0x2) pread64(r4, &(0x7f0000002100)=""/171, 0xab, 0x9a) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d302c696f636861727365743d63703836302c696f636861727365743d6d616363726f617469616e2c756e695f786c6174653d312c747a3d5554432c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c6e6f636173652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c736d61636b66736465663d757466383d302c64697273796e632c736d61636b66736861743d262c657569643e807d6dc634ae06b292a3825c7626caa45b7a39a81660437a556646a082c54e8cf9c81260f6a760b9f06d5738818ee5a4503b0364b0f4c56abfe2", @ANYRES32=0x0, @ANYRESOCT], 0x25, 0x359, &(0x7f0000000bc0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x161) write$P9_RLERRORu(r6, 0x0, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)) 2.879666799s ago: executing program 1 (id=161): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x14, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x7, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) 2.722626335s ago: executing program 3 (id=163): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r1, &(0x7f0000007440), 0x0, 0x2, 0x0) process_mrelease(0xffffffffffffffff, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x41) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x12, 0x80805, 0xffffffdc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x660940, 0x0) ioctl$RTC_AIE_OFF(r6, 0x7002) ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f00000001c0)='./file0/file0/../file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000180)={r7, 0x3e, "8d06dab756efceaa229f54e0b84cab7a9e511a6dec9001572ac86667940eeb2305f6437c7bfa61dbaa8bcefe8e92de536a5dbe00"/62}, &(0x7f00000000c0)=0x46) 2.57369321s ago: executing program 1 (id=165): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x6}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x1ff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20004055) creat(0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x1, 0x2}, {0xe, 0x10}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x24004004) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180), 0x0, 0x1, 0x1}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) 2.422834515s ago: executing program 4 (id=167): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 2.375715973s ago: executing program 2 (id=168): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, 0x50) 2.305861385s ago: executing program 2 (id=169): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$unix(0x1, 0x2, 0x0) unshare(0x24020400) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x42102) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 2.295502907s ago: executing program 4 (id=170): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x4044081}, 0x44004854) 2.252334334s ago: executing program 2 (id=171): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x6}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x1ff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20004055) creat(0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) 2.243062216s ago: executing program 1 (id=172): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYRES8=r4, @ANYRES16=r2, @ANYRES64=0x0, @ANYRES32=r3], 0x1c}}, 0xc5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f", 0x2}], 0x1}, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) write(r5, &(0x7f0000000000)="64ecf9eaf0405f0ea33689d9ebcb3c37b3394ad3ef1c5f128defdcb64ace5679d1e107009b7d9c0a79ef6d23301d5bd01a4b0d4b2211b677673002d7eecb7eaef33ac229112b26628293def882f18505f4826109e7a5bf17aba0447c20ebd364df71cca3eb38e9c4c21fcf48e96ae303cd25903fbee26e91da980300000000fd0000621d1ca210868e707e55ef051803e4b177e7e603db9e120a81f977c7998de0acc3d6f862016d4588fa2acf56f7b87c42192942c59ec09820c69d4a933a06bb5d669b336700", 0xc7) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 2.189624954s ago: executing program 1 (id=173): setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x6, 0x4) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty}, 0x1c, &(0x7f0000002700)=[{&(0x7f0000001680)='\t', 0x1}, {&(0x7f0000000080)="d5dff87ce3d2ff202a56dfe28cb3d79bafed97f205e0fbbc506890a82a02c2499c455bbe6b69311039fe4e0961ee6ccd85f9d4cc26ae5ea5f9df8d1e64c6f91ff1760f6e12e5fc830106a5ab7aa34f91b39c59d073421fc26a90bd6f994fb56c76b8a69ff49b483d358bd36a77f51f4bb32fe4", 0x73}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000026c0)="9780a505", 0x4}], 0x4}}], 0x1, 0x8020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004) socket$inet_sctp(0x2, 0x5, 0x84) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x410283) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000700)=0xe) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r4, &(0x7f0000000fc0)=""/224, 0xe0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r5, &(0x7f0000000240)=[{&(0x7f0000000140)=""/218, 0xda}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) sendfile(r1, r2, 0x0, 0x10ffff) sendmmsg$inet6(r0, 0x0, 0x0, 0x800) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000100)={r8, 0x4}, 0x8) 2.136341783s ago: executing program 4 (id=174): r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000140)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x22c6c3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030306ae2591030303030303030372c666f776e65723c", @ANYRESDEC=r1, @ANYBLOB=',audit,\x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x400}}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000140)=""/130, 0x82, 0x2) pread64(r4, &(0x7f0000002100)=""/171, 0xab, 0x9a) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT], 0x25, 0x359, &(0x7f0000000bc0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x161) write$P9_RLERRORu(r6, 0x0, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)) 2.061673556s ago: executing program 2 (id=176): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msync(&(0x7f00001fa000/0x4000)=nil, 0x4000, 0x4) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) getdents64(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x340, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x3000000, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002cc0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_TBF={0x13, 0x1, {0xe, 0x1, 0x4, 0x80000004, 0x4, {0x5, 0x0, 0x8, 0x1, 0x7, 0x1f7}, {0x8, 0x0, 0x6, 0x800, 0x1ff}, 0x3, 0x82e, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000001000000000000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000f2ffffff8400000083000000bf0900000000000055090100000000009500080000000000bf910000000000007b020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x4d}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0xa, 0x2, 0x1003c}}) mq_getsetattr(r5, 0x0, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040)) 1.961770612s ago: executing program 3 (id=177): r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000140)='./file0\x00') mount$tmpfs(0x0, 0x0, 0x0, 0x22c6c3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030306ae2591030303030303030372c666f77", @ANYRESDEC]) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000140)=""/130, 0x82, 0x2) pread64(r3, &(0x7f0000002100)=""/171, 0xab, 0x9a) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT], 0x25, 0x359, &(0x7f0000000bc0)="$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") r5 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x161) write$P9_RLERRORu(r5, 0x0, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)) 1.643280766s ago: executing program 3 (id=179): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, 0x50) 1.635401297s ago: executing program 32 (id=179): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, 0x50) 1.493363661s ago: executing program 0 (id=182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r1, 0xd7b825ccd16be7b5, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800) 1.472559484s ago: executing program 2 (id=183): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x6}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x1ff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20004055) creat(0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x1, 0x2}, {0xe, 0x10}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x24004004) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180), 0x0, 0x1, 0x1}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) 1.453097088s ago: executing program 0 (id=184): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x4044081}, 0x44004854) 1.393367317s ago: executing program 0 (id=185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r1, 0xd7b825ccd16be7b5, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800) (fail_nth: 2) 1.361793883s ago: executing program 4 (id=186): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x6}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x1ff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20004055) creat(0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) 1.289745335s ago: executing program 1 (id=187): syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x2000, 0x88be, 0xc, 0x0, @opaque="6b8b8368"}}}}}, 0x0) (async) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") (async) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 1.116890533s ago: executing program 0 (id=188): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b0000001801000020786c250000000000ff20207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x6d}]}, 0x0}, 0x94) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80000) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000180)={0x78, "ba7173230e19431de0959b9b734add20ff181d8fa270f480273ede80c76c721ba2a5020cf9d64095bb0d45367c7f53cc33f3f8f99874afe7b5a795f516d136a66a254ed775081d05e4a2bebdefba1edd1b5f04544f2daaf5bdce71a533c58b373c8e72acf479c3b12231d111974174310641739194bd56981d5680e806a1cb62"}) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.065391162s ago: executing program 0 (id=189): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1f, 0x87010, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x4, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff, 0x0, 0xfffffffe, 0x0, 0x200000000}, 0x0, 0xff67bfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a402b, &(0x7f00000000c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32]}}, {@size={'size', 0x3d, [0x33]}}]}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000008c00000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) (fail_nth: 5) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x4, 0x100, 0x6, 0x1bfe, 0xb, 0x9, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xc, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) 1.030498428s ago: executing program 4 (id=190): bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x9) getpid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x7}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cp_\t>0&&\t') lstat(0x0, 0x0) 205.709336ms ago: executing program 0 (id=191): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000100), 0x2, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$l2tp(0x2, 0x2, 0x73) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmsg$inet6(r7, 0x0, 0x53) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r9, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FREEZING\x00', 0x9) 200.464227ms ago: executing program 1 (id=192): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x14, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x7, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) 200.173827ms ago: executing program 4 (id=193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x14, r1, 0x405, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 0s ago: executing program 2 (id=194): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x4044081}, 0x44004854) kernel console output (not intermixed with test programs): [ 18.861444][ T28] audit: type=1400 audit(1776089064.250:62): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.883494][ T28] audit: type=1400 audit(1776089064.250:63): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.906435][ T28] audit: type=1400 audit(1776089064.250:64): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.929578][ T28] audit: type=1400 audit(1776089064.250:65): avc: denied { search } for pid=3191 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.952893][ T28] audit: type=1400 audit(1776089064.250:66): avc: denied { read open } for pid=3192 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. [ 24.807037][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 24.807052][ T28] audit: type=1400 audit(1776089070.200:70): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.836240][ T28] audit: type=1400 audit(1776089070.220:71): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.837067][ T3295] cgroup: Unknown subsys name 'net' [ 24.864471][ T28] audit: type=1400 audit(1776089070.260:72): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.987192][ T3295] cgroup: Unknown subsys name 'cpuset' [ 24.993364][ T3295] cgroup: Unknown subsys name 'rlimit' [ 25.093164][ T28] audit: type=1400 audit(1776089070.480:73): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.116884][ T28] audit: type=1400 audit(1776089070.480:74): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.137680][ T28] audit: type=1400 audit(1776089070.480:75): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.158276][ T28] audit: type=1400 audit(1776089070.480:76): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.165058][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.178983][ T28] audit: type=1400 audit(1776089070.480:77): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.208889][ T28] audit: type=1400 audit(1776089070.480:78): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.234523][ T28] audit: type=1400 audit(1776089070.480:79): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.270054][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.457534][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 26.507319][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 26.538371][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 26.571903][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.579134][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.586334][ T3316] bridge_slave_0: entered allmulticast mode [ 26.592961][ T3316] bridge_slave_0: entered promiscuous mode [ 26.606873][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 26.621014][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.628205][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.635445][ T3316] bridge_slave_1: entered allmulticast mode [ 26.641907][ T3316] bridge_slave_1: entered promiscuous mode [ 26.663849][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 26.682448][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.697049][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.720465][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.727876][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.734980][ T3309] bridge_slave_0: entered allmulticast mode [ 26.741931][ T3309] bridge_slave_0: entered promiscuous mode [ 26.752664][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.759866][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.767150][ T3309] bridge_slave_1: entered allmulticast mode [ 26.773550][ T3309] bridge_slave_1: entered promiscuous mode [ 26.780248][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.787328][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.794746][ T3313] bridge_slave_0: entered allmulticast mode [ 26.801443][ T3313] bridge_slave_0: entered promiscuous mode [ 26.812214][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.819318][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.826564][ T3313] bridge_slave_1: entered allmulticast mode [ 26.833140][ T3313] bridge_slave_1: entered promiscuous mode [ 26.865695][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.875564][ T3316] team0: Port device team_slave_0 added [ 26.890155][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.899937][ T3316] team0: Port device team_slave_1 added [ 26.912955][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.937516][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.964788][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.972028][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.998256][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.009227][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.016729][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.023955][ T3308] bridge_slave_0: entered allmulticast mode [ 27.030624][ T3308] bridge_slave_0: entered promiscuous mode [ 27.041574][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.048703][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.055847][ T3308] bridge_slave_1: entered allmulticast mode [ 27.062315][ T3308] bridge_slave_1: entered promiscuous mode [ 27.069419][ T3309] team0: Port device team_slave_0 added [ 27.083507][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.090683][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.116946][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.128480][ T3313] team0: Port device team_slave_0 added [ 27.135051][ T3309] team0: Port device team_slave_1 added [ 27.148917][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.156162][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.163387][ T3315] bridge_slave_0: entered allmulticast mode [ 27.169983][ T3315] bridge_slave_0: entered promiscuous mode [ 27.178868][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.186004][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.193247][ T3315] bridge_slave_1: entered allmulticast mode [ 27.199764][ T3315] bridge_slave_1: entered promiscuous mode [ 27.206766][ T3313] team0: Port device team_slave_1 added [ 27.217432][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.227825][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.241931][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.248951][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.275739][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.287244][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.294256][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.320952][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.344318][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.355071][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.384679][ T3308] team0: Port device team_slave_0 added [ 27.399623][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.406667][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.433099][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.448321][ T3308] team0: Port device team_slave_1 added [ 27.456267][ T3316] hsr_slave_0: entered promiscuous mode [ 27.462405][ T3316] hsr_slave_1: entered promiscuous mode [ 27.474657][ T3309] hsr_slave_0: entered promiscuous mode [ 27.480837][ T3309] hsr_slave_1: entered promiscuous mode [ 27.486921][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 27.492645][ T3309] Cannot create hsr debugfs directory [ 27.499145][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.506100][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.532712][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.557046][ T3315] team0: Port device team_slave_0 added [ 27.580303][ T3315] team0: Port device team_slave_1 added [ 27.592186][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.599278][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.626348][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.646738][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.653698][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.680505][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.695716][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.702832][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.729263][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.749809][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.756890][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.783659][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.814610][ T3313] hsr_slave_0: entered promiscuous mode [ 27.820681][ T3313] hsr_slave_1: entered promiscuous mode [ 27.826835][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 27.832602][ T3313] Cannot create hsr debugfs directory [ 27.867115][ T3308] hsr_slave_0: entered promiscuous mode [ 27.873141][ T3308] hsr_slave_1: entered promiscuous mode [ 27.879132][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 27.884850][ T3308] Cannot create hsr debugfs directory [ 27.926999][ T3315] hsr_slave_0: entered promiscuous mode [ 27.933258][ T3315] hsr_slave_1: entered promiscuous mode [ 27.939207][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 27.945067][ T3315] Cannot create hsr debugfs directory [ 28.057172][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.070669][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.088154][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.096595][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.126766][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.137640][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.149106][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.161419][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.182063][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.194021][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.204779][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.213243][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.255424][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.264649][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.273609][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.282346][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.313673][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.346300][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.353949][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.367780][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.376477][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.386127][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.398727][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.415939][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.424598][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.431712][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.442748][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.449912][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.475092][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.490139][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.504561][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.520186][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.533076][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.542848][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.550232][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.561251][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.568330][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.581974][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.589496][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.601748][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.608854][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.626637][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.633812][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.643439][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.650545][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.692769][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.719775][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.751674][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.764160][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.772584][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.796264][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.827231][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.834472][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.844300][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.851632][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.889166][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.897826][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.949250][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.998661][ T3309] veth0_vlan: entered promiscuous mode [ 29.013915][ T3309] veth1_vlan: entered promiscuous mode [ 29.025988][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.064965][ T3309] veth0_macvtap: entered promiscuous mode [ 29.077919][ T3309] veth1_macvtap: entered promiscuous mode [ 29.094645][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.118162][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.128734][ T3316] veth0_vlan: entered promiscuous mode [ 29.144342][ T3316] veth1_vlan: entered promiscuous mode [ 29.150934][ T3464] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.159917][ T3464] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.174330][ T3313] veth0_vlan: entered promiscuous mode [ 29.184742][ T3464] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.194355][ T3464] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.214936][ T3313] veth1_vlan: entered promiscuous mode [ 29.229550][ T3308] veth0_vlan: entered promiscuous mode [ 29.240227][ T3315] veth0_vlan: entered promiscuous mode [ 29.250589][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.250877][ T3308] veth1_vlan: entered promiscuous mode [ 29.283208][ T3316] veth0_macvtap: entered promiscuous mode [ 29.290865][ T3316] veth1_macvtap: entered promiscuous mode [ 29.304674][ T3315] veth1_vlan: entered promiscuous mode [ 29.325151][ T3313] veth0_macvtap: entered promiscuous mode [ 29.349055][ T3313] veth1_macvtap: entered promiscuous mode [ 29.357735][ T3308] veth0_macvtap: entered promiscuous mode [ 29.365206][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.383468][ T3315] veth0_macvtap: entered promiscuous mode [ 29.391620][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.401196][ T3308] veth1_macvtap: entered promiscuous mode [ 29.409833][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.420607][ T3315] veth1_macvtap: entered promiscuous mode [ 29.431886][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.446417][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.455905][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.469567][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.478656][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.492158][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.501322][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.512926][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.520731][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.529540][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.541385][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.558443][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.567228][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.595429][ T55] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.604833][ T55] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.614082][ T55] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.624992][ T55] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.637858][ T55] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.667399][ T55] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.698058][ T55] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.711861][ T3490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 29.732596][ T55] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.828025][ T3504] syz_tun: entered promiscuous mode [ 29.833732][ T3504] macsec1: entered allmulticast mode [ 29.839447][ T3504] syz_tun: entered allmulticast mode [ 29.848489][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 29.848504][ T28] audit: type=1400 audit(1776089075.240:118): avc: denied { mount } for pid=3506 comm="syz.4.10" name="/" dev="ramfs" ino=4962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 29.861595][ T3507] loop4: detected capacity change from 0 to 2048 [ 29.877413][ T28] audit: type=1400 audit(1776089075.250:119): avc: denied { read write } for pid=3506 comm="syz.4.10" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.885730][ T3504] syz_tun: left allmulticast mode [ 29.907711][ T28] audit: type=1400 audit(1776089075.250:120): avc: denied { open } for pid=3506 comm="syz.4.10" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.936643][ T28] audit: type=1400 audit(1776089075.250:121): avc: denied { ioctl } for pid=3506 comm="syz.4.10" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.962821][ T28] audit: type=1400 audit(1776089075.310:122): avc: denied { mounton } for pid=3506 comm="syz.4.10" path="/file1" dev="ramfs" ino=4966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 29.975857][ T3507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.985262][ T3504] syz_tun: left promiscuous mode [ 30.008068][ T3507] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.017349][ T28] audit: type=1400 audit(1776089075.330:123): avc: denied { create } for pid=3492 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.020978][ T3511] loop3: detected capacity change from 0 to 512 [ 30.059067][ T28] audit: type=1400 audit(1776089075.330:124): avc: denied { write } for pid=3492 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.072141][ T3511] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.082436][ T28] audit: type=1400 audit(1776089075.330:125): avc: denied { create } for pid=3492 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.113142][ T28] audit: type=1400 audit(1776089075.330:126): avc: denied { ioctl } for pid=3492 comm="syz.0.1" path="socket:[4969]" dev="sockfs" ino=4969 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.137946][ T28] audit: type=1400 audit(1776089075.350:127): avc: denied { ioctl } for pid=3499 comm="syz.2.9" path="socket:[4964]" dev="sockfs" ino=4964 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.163837][ T3493] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.171180][ T3493] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.178680][ T3511] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.8: Failed to acquire dquot type 1 [ 30.194062][ T3511] loop3: lost filesystem error report for type 5 error -117 [ 30.196199][ T3511] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.8: Failed to acquire dquot type 1 [ 30.203573][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 30.203592][ C1] EXT4-fs (loop3): initial error at time 1776089075: ext4_acquire_dquot:7026 [ 30.203626][ C1] EXT4-fs (loop3): last error at time 1776089075: ext4_acquire_dquot:7026 [ 30.257451][ T3511] loop3: lost filesystem error report for type 5 error -117 [ 30.265673][ T3511] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.8: Failed to acquire dquot type 1 [ 30.284879][ T3511] loop3: lost filesystem error report for type 5 error -117 [ 30.285125][ T3511] EXT4-fs (loop3): 1 orphan inode deleted [ 30.300675][ T3511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.318367][ T3511] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.421442][ T3528] Zero length message leads to an empty skb [ 30.609934][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.808523][ T3500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 32.861381][ T3549] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 32.870707][ T3549] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 32.877122][ C1] hrtimer: interrupt took 76128 ns [ 32.905224][ T3548] netlink: 'syz.0.18': attribute type 1 has an invalid length. [ 33.073254][ T3562] loop4: detected capacity change from 0 to 256 [ 33.087136][ T3554] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22'. [ 33.196765][ T3562] FAT-fs (loop4): Directory bread(block 64) failed [ 33.203878][ T3562] FAT-fs (loop4): Directory bread(block 65) failed [ 33.211728][ T3562] FAT-fs (loop4): Directory bread(block 66) failed [ 33.219104][ T3562] FAT-fs (loop4): Directory bread(block 67) failed [ 33.226227][ T3562] FAT-fs (loop4): Directory bread(block 68) failed [ 33.237850][ T3562] FAT-fs (loop4): Directory bread(block 69) failed [ 33.245447][ T3562] FAT-fs (loop4): Directory bread(block 70) failed [ 33.252959][ T3562] FAT-fs (loop4): Directory bread(block 71) failed [ 33.261077][ T3562] FAT-fs (loop4): Directory bread(block 72) failed [ 33.269783][ T3562] FAT-fs (loop4): Directory bread(block 73) failed [ 33.315012][ T3548] syz.0.18 (3548) used greatest stack depth: 10232 bytes left [ 33.362485][ T3562] syz.4.24: attempt to access beyond end of device [ 33.362485][ T3562] loop4: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 33.376352][ T3566] gre0 speed is unknown, defaulting to 1000 [ 33.384168][ T3566] gre0 speed is unknown, defaulting to 1000 [ 33.404216][ T3566] gre0 speed is unknown, defaulting to 1000 [ 33.440289][ T3566] infiniband syz1: set active [ 33.445219][ T3404] gre0 speed is unknown, defaulting to 1000 [ 33.451669][ T3566] infiniband syz1: added gre0 [ 33.457008][ T3566] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 33.457178][ T3566] infiniband syz1: Couldn't open port 1 [ 33.486255][ T3566] RDS/IB: syz1: added [ 33.498709][ T3566] smc: adding ib device syz1 with port count 1 [ 33.516804][ T3566] smc: ib device syz1 port 1 has no pnetid [ 33.523059][ T3390] gre0 speed is unknown, defaulting to 1000 [ 33.536852][ T3566] gre0 speed is unknown, defaulting to 1000 [ 33.618782][ T3579] netlink: 'syz.4.28': attribute type 1 has an invalid length. [ 33.680604][ T3581] loop0: detected capacity change from 0 to 512 [ 33.752333][ T3581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.765360][ T3581] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.777679][ T3581] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.792889][ T3587] netlink: 'syz.2.29': attribute type 27 has an invalid length. [ 33.995926][ T3590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.30'. [ 34.084322][ T3590] netlink: 'syz.3.30': attribute type 1 has an invalid length. [ 34.202451][ T3587] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.209869][ T3587] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.352871][ T3579] syz.4.28 (3579) used greatest stack depth: 9912 bytes left [ 34.367938][ T3587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.392929][ T3587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.811053][ T3595] loop4: detected capacity change from 0 to 256 [ 34.872290][ T3566] gre0 speed is unknown, defaulting to 1000 [ 34.985248][ T3597] loop2: detected capacity change from 0 to 256 [ 35.037631][ T3595] FAT-fs (loop4): Directory bread(block 64) failed [ 35.045011][ T3595] FAT-fs (loop4): Directory bread(block 65) failed [ 35.110981][ T3595] FAT-fs (loop4): Directory bread(block 66) failed [ 35.136801][ T3595] FAT-fs (loop4): Directory bread(block 67) failed [ 35.165861][ T3595] FAT-fs (loop4): Directory bread(block 68) failed [ 35.191027][ T3595] FAT-fs (loop4): Directory bread(block 69) failed [ 35.205285][ T3595] FAT-fs (loop4): Directory bread(block 70) failed [ 35.224924][ T3595] FAT-fs (loop4): Directory bread(block 71) failed [ 35.242302][ T3597] FAT-fs (loop2): Directory bread(block 64) failed [ 35.258894][ T3595] FAT-fs (loop4): Directory bread(block 72) failed [ 35.266581][ T3597] FAT-fs (loop2): Directory bread(block 65) failed [ 35.274488][ T3597] FAT-fs (loop2): Directory bread(block 66) failed [ 35.280496][ T3595] FAT-fs (loop4): Directory bread(block 73) failed [ 35.283960][ T3597] FAT-fs (loop2): Directory bread(block 67) failed [ 35.299013][ T30] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.301536][ T3597] FAT-fs (loop2): Directory bread(block 68) failed [ 35.316684][ T3597] FAT-fs (loop2): Directory bread(block 69) failed [ 35.324754][ T3597] FAT-fs (loop2): Directory bread(block 70) failed [ 35.331880][ T30] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.332006][ T30] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.332042][ T30] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.363504][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 35.363519][ T28] audit: type=1400 audit(1776089080.750:159): avc: denied { bind } for pid=3603 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.366729][ T3566] gre0 speed is unknown, defaulting to 1000 [ 35.378173][ T28] audit: type=1400 audit(1776089080.760:160): avc: denied { setopt } for pid=3603 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.420758][ T3597] FAT-fs (loop2): Directory bread(block 71) failed [ 35.431279][ T3604] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.440102][ T3597] FAT-fs (loop2): Directory bread(block 72) failed [ 35.472708][ T3566] gre0 speed is unknown, defaulting to 1000 [ 35.476884][ T3597] FAT-fs (loop2): Directory bread(block 73) failed [ 35.511989][ T3595] syz.4.31: attempt to access beyond end of device [ 35.511989][ T3595] loop4: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 35.527907][ T3604] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.564627][ T3566] gre0 speed is unknown, defaulting to 1000 [ 35.614563][ T3604] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.633998][ T3597] syz.2.32: attempt to access beyond end of device [ 35.633998][ T3597] loop2: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 35.671813][ T3611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 35.727432][ T3615] netlink: 'syz.2.39': attribute type 1 has an invalid length. [ 35.739584][ T3613] loop1: detected capacity change from 0 to 256 [ 35.754284][ T3604] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.839857][ T3613] FAT-fs (loop1): Directory bread(block 64) failed [ 35.847891][ T3613] FAT-fs (loop1): Directory bread(block 65) failed [ 35.855126][ T3613] FAT-fs (loop1): Directory bread(block 66) failed [ 35.862517][ T3613] FAT-fs (loop1): Directory bread(block 67) failed [ 35.873830][ T3613] FAT-fs (loop1): Directory bread(block 68) failed [ 35.881917][ T3613] FAT-fs (loop1): Directory bread(block 69) failed [ 35.889581][ T3613] FAT-fs (loop1): Directory bread(block 70) failed [ 35.896449][ T3613] FAT-fs (loop1): Directory bread(block 71) failed [ 35.903610][ T3613] FAT-fs (loop1): Directory bread(block 72) failed [ 35.919085][ T3613] FAT-fs (loop1): Directory bread(block 73) failed [ 35.974370][ T3613] syz.1.38: attempt to access beyond end of device [ 35.974370][ T3613] loop1: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 36.041584][ T30] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.051097][ T3623] mmap: syz.2.42 (3623) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.072494][ T40] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.085746][ T28] audit: type=1400 audit(1776089081.470:161): avc: denied { read write } for pid=3622 comm="syz.2.42" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 36.110363][ T40] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.124502][ T40] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.133946][ T3626] 9p: Bad value for 'wfdno' [ 36.135521][ T28] audit: type=1400 audit(1776089081.470:162): avc: denied { open } for pid=3622 comm="syz.2.42" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 36.138787][ T3626] netlink: 'syz.2.42': attribute type 5 has an invalid length. [ 36.163452][ T28] audit: type=1400 audit(1776089081.470:163): avc: denied { append } for pid=3622 comm="syz.2.42" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 36.204959][ T3625] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 36.217475][ T3628] loop2: detected capacity change from 0 to 512 [ 36.241953][ T28] audit: type=1400 audit(1776089081.530:164): avc: denied { mounton } for pid=3622 comm="syz.2.42" path="/8/file0" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.271555][ T3631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.43'. [ 36.300371][ T3631] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 36.308631][ T28] audit: type=1400 audit(1776089081.530:165): avc: denied { ioctl } for pid=3624 comm="syz.1.41" path="socket:[5315]" dev="sockfs" ino=5315 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.314818][ T3628] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.391525][ T3628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.408580][ T3628] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.535053][ T3626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 36.550539][ T3629] loop3: detected capacity change from 0 to 512 [ 36.643729][ T3640] syzkaller0: entered promiscuous mode [ 36.649727][ T3640] syzkaller0: entered allmulticast mode [ 36.663178][ T28] audit: type=1400 audit(1776089082.050:166): avc: denied { setopt } for pid=3637 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.725267][ T3650] netlink: 68 bytes leftover after parsing attributes in process `syz.0.46'. [ 36.729585][ T28] audit: type=1400 audit(1776089082.110:167): avc: denied { write } for pid=3649 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.775356][ T3650] Illegal XDP return value 4294967262 on prog (id 21) dev N/A, expect packet loss! [ 36.804853][ T3629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.844382][ T3650] loop0: detected capacity change from 0 to 1024 [ 36.859595][ T3650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.895561][ T3658] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.922304][ T28] audit: type=1400 audit(1776089082.110:168): avc: denied { nlmsg_write } for pid=3649 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.943679][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.959120][ T3650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.46'. [ 36.970677][ T3629] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.990977][ T3658] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.063971][ T3629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.094897][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.127513][ T3658] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.168947][ T3666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 37.230301][ T3658] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.279026][ T3670] loop2: detected capacity change from 0 to 256 [ 37.325708][ T30] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.359309][ T30] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.399099][ T30] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.427009][ T3670] FAT-fs (loop2): Directory bread(block 64) failed [ 37.436580][ T30] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.455161][ T3670] FAT-fs (loop2): Directory bread(block 65) failed [ 37.474969][ T3670] FAT-fs (loop2): Directory bread(block 66) failed [ 37.491644][ T3673] loop1: detected capacity change from 0 to 256 [ 37.497351][ T3670] FAT-fs (loop2): Directory bread(block 67) failed [ 37.520311][ T3670] FAT-fs (loop2): Directory bread(block 68) failed [ 37.549962][ T3670] FAT-fs (loop2): Directory bread(block 69) failed [ 37.555504][ T3675] tmpfs: Bad value for 'mode' [ 37.568588][ T3670] FAT-fs (loop2): Directory bread(block 70) failed [ 37.576212][ T3670] FAT-fs (loop2): Directory bread(block 71) failed [ 37.594973][ T3670] FAT-fs (loop2): Directory bread(block 72) failed [ 37.615863][ T3670] FAT-fs (loop2): Directory bread(block 73) failed [ 37.625420][ T3675] loop4: detected capacity change from 0 to 256 [ 37.710065][ T3673] FAT-fs (loop1): Directory bread(block 64) failed [ 37.715988][ T3670] syz.2.51: attempt to access beyond end of device [ 37.715988][ T3670] loop2: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 37.734429][ T3675] FAT-fs (loop4): Directory bread(block 64) failed [ 37.742247][ T3673] FAT-fs (loop1): Directory bread(block 65) failed [ 37.750151][ T3675] FAT-fs (loop4): Directory bread(block 65) failed [ 37.758577][ T3673] FAT-fs (loop1): Directory bread(block 66) failed [ 37.766298][ T3675] FAT-fs (loop4): Directory bread(block 66) failed [ 37.774389][ T3673] FAT-fs (loop1): Directory bread(block 67) failed [ 37.792635][ T3677] loop2: detected capacity change from 0 to 1024 [ 37.793312][ T3675] FAT-fs (loop4): Directory bread(block 67) failed [ 37.807850][ T3673] FAT-fs (loop1): Directory bread(block 68) failed [ 37.812981][ T3677] EXT4-fs: Ignoring removed bh option [ 37.818808][ T3675] FAT-fs (loop4): Directory bread(block 68) failed [ 37.829305][ T3673] FAT-fs (loop1): Directory bread(block 69) failed [ 37.837458][ T3675] FAT-fs (loop4): Directory bread(block 69) failed [ 37.844712][ T3675] FAT-fs (loop4): Directory bread(block 70) failed [ 37.852574][ T3673] FAT-fs (loop1): Directory bread(block 70) failed [ 37.859905][ T3673] FAT-fs (loop1): Directory bread(block 71) failed [ 37.867675][ T3677] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.867695][ T3675] FAT-fs (loop4): Directory bread(block 71) failed [ 37.886035][ T3673] FAT-fs (loop1): Directory bread(block 72) failed [ 37.893921][ T3673] FAT-fs (loop1): Directory bread(block 73) failed [ 37.894205][ T3677] EXT4-fs (loop2): orphan cleanup on readonly fs [ 37.894222][ T3677] EXT4-fs error (device loop2): ext4_quota_enable:7213: comm syz.2.54: Bad quota inum: 4294934528, type: 0 [ 37.913047][ T3675] FAT-fs (loop4): Directory bread(block 72) failed [ 37.919551][ T3677] loop2: lost filesystem error report for type 5 error -117 [ 37.926370][ T3677] EXT4-fs (loop2): Remounting filesystem read-only [ 37.926539][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 37.936337][ T3677] EXT4-fs warning (device loop2): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 37.940697][ C1] EXT4-fs (loop2): initial error at time 1776089083: ext4_quota_enable:7213 [ 37.956828][ T3675] FAT-fs (loop4): Directory bread(block 73) failed [ 37.962711][ C1] [ 37.962719][ C1] EXT4-fs (loop2): last error at time 1776089083: ext4_quota_enable:7213 [ 37.992131][ T3677] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 38.028986][ T3677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.097042][ T3675] syz.4.53: attempt to access beyond end of device [ 38.097042][ T3675] loop4: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 38.123317][ T60] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.135781][ T60] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.145672][ T60] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.155333][ T60] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.165018][ T3673] syz.1.52: attempt to access beyond end of device [ 38.165018][ T3673] loop1: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 38.209484][ T3682] loop4: detected capacity change from 0 to 512 [ 38.234613][ T3684] netlink: 20 bytes leftover after parsing attributes in process `syz.1.56'. [ 38.266420][ T3684] netlink: 'syz.1.56': attribute type 1 has an invalid length. [ 38.277596][ T3682] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 38.284403][ T3682] EXT4-fs (loop4): mount failed [ 38.431445][ T1033] gre0 speed is unknown, defaulting to 1000 [ 38.759004][ T3695] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.789821][ T3695] EXT4-fs (loop1): orphan cleanup on readonly fs [ 38.801915][ T3695] EXT4-fs warning (device loop1): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.818172][ T3695] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 38.829817][ T3695] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 38.845739][ T3695] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #12: comm syz.1.57: corrupted inode contents [ 38.858113][ T3695] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 38.859953][ T3695] EXT4-fs error (device loop1): ext4_dirty_inode:6495: inode #12: comm syz.1.57: mark_inode_dirty error [ 38.869697][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 38.869764][ C1] EXT4-fs (loop1): initial error at time 1776089084: mb_free_blocks:2049: inode 12: block 14 [ 38.870137][ C1] EXT4-fs (loop1): last error at time 1776089084: ext4_do_update_inode:5602: inode 12 [ 38.910582][ T3695] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 38.915969][ T3695] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #12: comm syz.1.57: corrupted inode contents [ 38.938445][ T3695] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 38.939867][ T3695] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #12: comm syz.1.57: mark_inode_dirty error [ 38.961190][ T3695] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 38.963462][ T3695] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #12: comm syz.1.57: corrupted inode contents [ 38.985951][ T3695] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 38.987977][ T3695] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 39.007423][ T3695] loop1: lost filesystem error report for type 5 error -117 [ 39.009733][ T3695] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #12: comm syz.1.57: corrupted inode contents [ 39.030822][ T3695] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 39.093070][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.275817][ T3699] 9p: Bad value for 'wfdno' [ 39.288475][ T3699] netlink: 'syz.4.59': attribute type 5 has an invalid length. [ 39.563175][ T3695] EXT4-fs error (device loop1): ext4_truncate:4602: inode #12: comm syz.1.57: mark_inode_dirty error [ 39.574479][ T3695] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 39.578726][ T3699] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.606720][ T3695] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 39.616361][ T3695] loop1: lost filesystem error report for type 5 error -117 [ 39.618966][ T3695] EXT4-fs (loop1): 1 truncate cleaned up [ 39.637881][ T3695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.749974][ T3699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.788292][ T3695] syz.1.57 (3695) used greatest stack depth: 9480 bytes left [ 39.798173][ T3704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 39.826393][ T3704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 39.837850][ T3699] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.889835][ T3699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.59'. [ 40.051334][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.261161][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.357144][ T28] kauditd_printk_skb: 309 callbacks suppressed [ 40.357159][ T28] audit: type=1326 audit(1776089085.750:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaf31dd04e code=0x7ffc0000 [ 40.389399][ T28] audit: type=1326 audit(1776089085.790:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaf31dd04e code=0x7ffc0000 [ 40.623550][ T28] audit: type=1400 audit(1776089085.810:479): avc: denied { block_suspend } for pid=3711 comm="syz.3.61" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.687194][ T3723] set_capacity_and_notify: 2 callbacks suppressed [ 40.687260][ T3723] loop1: detected capacity change from 0 to 256 [ 40.732548][ T28] audit: type=1326 audit(1776089085.840:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaf31dd04e code=0x7ffc0000 [ 40.877329][ T3723] FAT-fs (loop1): Directory bread(block 64) failed [ 40.907580][ T3723] FAT-fs (loop1): Directory bread(block 65) failed [ 40.915287][ T3723] FAT-fs (loop1): Directory bread(block 66) failed [ 40.924599][ T28] audit: type=1326 audit(1776089085.850:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaf31dd04e code=0x7ffc0000 [ 40.954695][ T3723] FAT-fs (loop1): Directory bread(block 67) failed [ 40.964206][ T3723] FAT-fs (loop1): Directory bread(block 68) failed [ 40.971718][ T3723] FAT-fs (loop1): Directory bread(block 69) failed [ 40.979655][ T28] audit: type=1326 audit(1776089085.850:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaf31dd04e code=0x7ffc0000 [ 41.005744][ T3723] FAT-fs (loop1): Directory bread(block 70) failed [ 41.164646][ T3723] FAT-fs (loop1): Directory bread(block 71) failed [ 41.172897][ T3723] FAT-fs (loop1): Directory bread(block 72) failed [ 41.180392][ T28] audit: type=1326 audit(1776089085.850:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaf31dd04e code=0x7ffc0000 [ 41.205808][ T3723] FAT-fs (loop1): Directory bread(block 73) failed [ 41.248471][ T28] audit: type=1326 audit(1776089085.850:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaf31dd04e code=0x7ffc0000 [ 41.281285][ T3723] syz.1.64: attempt to access beyond end of device [ 41.281285][ T3723] loop1: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 41.307472][ T28] audit: type=1326 audit(1776089085.850:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaf31dd04e code=0x7ffc0000 [ 41.436344][ T28] audit: type=1326 audit(1776089085.850:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3700 comm="syz.2.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdaf31dd04e code=0x7ffc0000 [ 41.515126][ T3735] loop4: detected capacity change from 0 to 256 [ 41.523190][ T3731] gre0 speed is unknown, defaulting to 1000 [ 41.534769][ T3736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 41.542647][ T3733] loop2: detected capacity change from 0 to 256 [ 41.643599][ T3735] FAT-fs (loop4): Directory bread(block 64) failed [ 41.651073][ T3735] FAT-fs (loop4): Directory bread(block 65) failed [ 41.658331][ T3735] FAT-fs (loop4): Directory bread(block 66) failed [ 41.665514][ T3735] FAT-fs (loop4): Directory bread(block 67) failed [ 41.733224][ T3735] FAT-fs (loop4): Directory bread(block 68) failed [ 41.769606][ T3735] FAT-fs (loop4): Directory bread(block 69) failed [ 41.808659][ T3735] FAT-fs (loop4): Directory bread(block 70) failed [ 41.816030][ T3735] FAT-fs (loop4): Directory bread(block 71) failed [ 41.836488][ T3733] FAT-fs (loop2): Directory bread(block 64) failed [ 41.854180][ T3733] FAT-fs (loop2): Directory bread(block 65) failed [ 41.862627][ T3735] FAT-fs (loop4): Directory bread(block 72) failed [ 41.881947][ T3733] FAT-fs (loop2): Directory bread(block 66) failed [ 41.889624][ T3735] FAT-fs (loop4): Directory bread(block 73) failed [ 41.906792][ T3733] FAT-fs (loop2): Directory bread(block 67) failed [ 41.914553][ T3733] FAT-fs (loop2): Directory bread(block 68) failed [ 41.928280][ T3733] FAT-fs (loop2): Directory bread(block 69) failed [ 41.947635][ T3733] FAT-fs (loop2): Directory bread(block 70) failed [ 41.954890][ T3733] FAT-fs (loop2): Directory bread(block 71) failed [ 42.002310][ T3733] FAT-fs (loop2): Directory bread(block 72) failed [ 42.010351][ T3733] FAT-fs (loop2): Directory bread(block 73) failed [ 42.076487][ T3741] 9p: Bad value for 'wfdno' [ 42.083124][ T3741] netlink: 'syz.3.70': attribute type 5 has an invalid length. [ 42.099062][ T3733] syz.2.68: attempt to access beyond end of device [ 42.099062][ T3733] loop2: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 42.123378][ T3741] loop3: detected capacity change from 0 to 512 [ 42.131101][ T3735] syz.4.69: attempt to access beyond end of device [ 42.131101][ T3735] loop4: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 42.154100][ T3741] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.204926][ T3741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.225714][ T3741] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.259171][ T3741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 42.295512][ T3752] bond2: option miimon: invalid value (18446744073709551615) [ 42.303134][ T3752] bond2: option miimon: allowed values 0 - 2147483647 [ 42.329078][ T3752] bond2 (unregistering): Released all slaves [ 42.554137][ T3766] loop1: detected capacity change from 0 to 512 [ 42.584768][ T3766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.612774][ T3766] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.625785][ T3766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.862439][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.018101][ T3771] loop3: detected capacity change from 0 to 256 [ 43.084816][ T3771] FAT-fs (loop3): Directory bread(block 64) failed [ 43.100507][ T3771] FAT-fs (loop3): Directory bread(block 65) failed [ 43.115959][ T3771] FAT-fs (loop3): Directory bread(block 66) failed [ 43.165587][ T3771] FAT-fs (loop3): Directory bread(block 67) failed [ 43.181362][ T3771] FAT-fs (loop3): Directory bread(block 68) failed [ 43.196842][ T3771] FAT-fs (loop3): Directory bread(block 69) failed [ 43.214431][ T3771] FAT-fs (loop3): Directory bread(block 70) failed [ 43.228172][ T3771] FAT-fs (loop3): Directory bread(block 71) failed [ 43.242488][ T3771] FAT-fs (loop3): Directory bread(block 72) failed [ 43.256820][ T3771] FAT-fs (loop3): Directory bread(block 73) failed [ 43.347574][ T3771] syz.3.77: attempt to access beyond end of device [ 43.347574][ T3771] loop3: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 43.543953][ T3777] loop3: detected capacity change from 0 to 256 [ 43.631090][ T3777] FAT-fs (loop3): Directory bread(block 64) failed [ 43.638393][ T3777] FAT-fs (loop3): Directory bread(block 65) failed [ 43.646116][ T3785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 43.655721][ T3777] FAT-fs (loop3): Directory bread(block 66) failed [ 43.672281][ T3777] FAT-fs (loop3): Directory bread(block 67) failed [ 43.684769][ T3777] FAT-fs (loop3): Directory bread(block 68) failed [ 43.692501][ T3777] FAT-fs (loop3): Directory bread(block 69) failed [ 43.701479][ T3777] FAT-fs (loop3): Directory bread(block 70) failed [ 43.728881][ T3777] FAT-fs (loop3): Directory bread(block 71) failed [ 43.747220][ T3777] FAT-fs (loop3): Directory bread(block 72) failed [ 43.757124][ T3777] FAT-fs (loop3): Directory bread(block 73) failed [ 43.854617][ T3788] netlink: 52 bytes leftover after parsing attributes in process `syz.0.83'. [ 43.909761][ T3777] syz.3.80: attempt to access beyond end of device [ 43.909761][ T3777] loop3: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 44.214789][ T3806] loop1: detected capacity change from 0 to 256 [ 44.249688][ T3799] loop3: detected capacity change from 0 to 1024 [ 44.259577][ T3799] ======================================================= [ 44.259577][ T3799] WARNING: The mand mount option has been deprecated and [ 44.259577][ T3799] and is ignored by this kernel. Remove the mand [ 44.259577][ T3799] option from the mount to silence this warning. [ 44.259577][ T3799] ======================================================= [ 44.269368][ T3806] FAT-fs (loop1): Directory bread(block 64) failed [ 44.306660][ T3806] FAT-fs (loop1): Directory bread(block 65) failed [ 44.314351][ T3806] FAT-fs (loop1): Directory bread(block 66) failed [ 44.326371][ T3806] FAT-fs (loop1): Directory bread(block 67) failed [ 44.340035][ T3806] FAT-fs (loop1): Directory bread(block 68) failed [ 44.350957][ T3799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.364071][ T3799] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.385611][ T3806] FAT-fs (loop1): Directory bread(block 69) failed [ 44.394745][ T3799] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #15: comm syz.3.88: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.410059][ T3799] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 44.422889][ T3799] EXT4-fs (loop3): This should not happen!! Data will be lost [ 44.422889][ T3799] [ 44.424122][ T3806] FAT-fs (loop1): Directory bread(block 70) failed [ 44.442217][ T3806] FAT-fs (loop1): Directory bread(block 71) failed [ 44.452802][ T3806] FAT-fs (loop1): Directory bread(block 72) failed [ 44.460314][ T3806] FAT-fs (loop1): Directory bread(block 73) failed [ 44.470280][ T3811] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 44.500015][ T3806] syz.1.91: attempt to access beyond end of device [ 44.500015][ T3806] loop1: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 44.534775][ T3819] netlink: 76 bytes leftover after parsing attributes in process `syz.4.95'. [ 44.655866][ T3819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.95'. [ 44.723534][ T3833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.102'. [ 44.760009][ T3833] netlink: 'syz.0.102': attribute type 1 has an invalid length. [ 44.823079][ T3316] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 44.835082][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.372852][ T3851] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 45.474492][ T3853] gre0 speed is unknown, defaulting to 1000 [ 45.490173][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 45.490187][ T28] audit: type=1400 audit(1776089090.880:558): avc: denied { create } for pid=3856 comm="syz.4.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.543559][ T3855] loop1: detected capacity change from 0 to 256 [ 45.575822][ T3866] netlink: 'syz.4.111': attribute type 7 has an invalid length. [ 45.586684][ T3860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 45.710249][ T3855] FAT-fs (loop1): Directory bread(block 64) failed [ 45.718399][ T3877] loop2: detected capacity change from 0 to 128 [ 45.767588][ T3855] FAT-fs (loop1): Directory bread(block 65) failed [ 45.775160][ T3855] FAT-fs (loop1): Directory bread(block 66) failed [ 45.782183][ T28] audit: type=1400 audit(1776089091.160:559): avc: denied { wake_alarm } for pid=3873 comm="syz.4.114" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.782212][ T28] audit: type=1400 audit(1776089091.160:560): avc: denied { bpf } for pid=3873 comm="syz.4.114" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.782235][ T28] audit: type=1400 audit(1776089091.160:561): avc: denied { perfmon } for pid=3873 comm="syz.4.114" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.856389][ T3855] FAT-fs (loop1): Directory bread(block 67) failed [ 45.864290][ T3855] FAT-fs (loop1): Directory bread(block 68) failed [ 45.894232][ T3855] FAT-fs (loop1): Directory bread(block 69) failed [ 45.909384][ T3855] FAT-fs (loop1): Directory bread(block 70) failed [ 45.923231][ T3855] FAT-fs (loop1): Directory bread(block 71) failed [ 45.934835][ T3855] FAT-fs (loop1): Directory bread(block 72) failed [ 45.942570][ T3855] FAT-fs (loop1): Directory bread(block 73) failed [ 46.026386][ T3855] syz.1.108: attempt to access beyond end of device [ 46.026386][ T3855] loop1: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 46.104183][ T3884] syz.2.115: attempt to access beyond end of device [ 46.104183][ T3884] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 46.123274][ T3886] loop1: detected capacity change from 0 to 1024 [ 46.150512][ T3886] EXT4-fs: Ignoring removed bh option [ 46.169124][ T3886] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.187097][ T3877] syz.2.115: attempt to access beyond end of device [ 46.187097][ T3877] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 46.230474][ T3886] EXT4-fs (loop1): orphan cleanup on readonly fs [ 46.246591][ T3886] EXT4-fs error (device loop1): ext4_quota_enable:7213: comm syz.1.118: Bad quota inum: 4294934528, type: 0 [ 46.266094][ T3886] loop1: lost filesystem error report for type 5 error -117 [ 46.266215][ T3886] EXT4-fs (loop1): Remounting filesystem read-only [ 46.273592][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 46.273612][ C0] EXT4-fs (loop1): initial error at time 1776089091: ext4_quota_enable:7213 [ 46.273631][ C0] EXT4-fs (loop1): last error at time 1776089091: ext4_quota_enable:7213 [ 46.305298][ T3886] EXT4-fs warning (device loop1): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 46.320839][ T3886] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 46.328195][ T3886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.403146][ T3886] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.410519][ T3886] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.418535][ T28] audit: type=1400 audit(1776089091.800:562): avc: denied { setopt } for pid=3894 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 46.464360][ T28] audit: type=1400 audit(1776089091.850:563): avc: denied { bind } for pid=3899 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 46.498138][ T28] audit: type=1400 audit(1776089091.850:564): avc: denied { bind } for pid=3899 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.529652][ T3906] FAULT_INJECTION: forcing a failure. [ 46.529652][ T3906] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.556744][ T3906] CPU: 1 UID: 0 PID: 3906 Comm: syz.0.123 Not tainted syzkaller #0 PREEMPT(full) [ 46.556775][ T3906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 46.556793][ T3906] Call Trace: [ 46.556799][ T3906] [ 46.556807][ T3906] __dump_stack+0x1d/0x30 [ 46.556839][ T3906] dump_stack_lvl+0x95/0xd0 [ 46.556914][ T3906] dump_stack+0x15/0x1b [ 46.556980][ T3906] should_fail_ex+0x263/0x280 [ 46.557008][ T3906] should_fail+0xb/0x20 [ 46.557099][ T3906] should_fail_usercopy+0x1a/0x20 [ 46.557130][ T3906] _copy_from_iter+0xcf/0xea0 [ 46.557161][ T3906] ? __alloc_skb+0x4f6/0x690 [ 46.557246][ T3906] ? __alloc_skb+0x200/0x690 [ 46.557276][ T3906] netlink_sendmsg+0x4ae/0x6f0 [ 46.557301][ T3906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.557324][ T3906] ____sys_sendmsg+0x563/0x5b0 [ 46.557361][ T3906] ___sys_sendmsg+0x195/0x1e0 [ 46.557426][ T3906] __x64_sys_sendmsg+0xd4/0x160 [ 46.557452][ T3906] x64_sys_call+0x194c/0x3020 [ 46.557520][ T3906] do_syscall_64+0x12c/0x370 [ 46.557551][ T3906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.557575][ T3906] RIP: 0033:0x7fbfcc2ec819 [ 46.557658][ T3906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.557676][ T3906] RSP: 002b:00007fbfcad3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.557698][ T3906] RAX: ffffffffffffffda RBX: 00007fbfcc565fa0 RCX: 00007fbfcc2ec819 [ 46.557714][ T3906] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 46.557797][ T3906] RBP: 00007fbfcad3f090 R08: 0000000000000000 R09: 0000000000000000 [ 46.557811][ T3906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.557825][ T3906] R13: 00007fbfcc566038 R14: 00007fbfcc565fa0 R15: 00007ffd6292c078 [ 46.557855][ T3906] [ 46.770959][ T3909] netlink: 'syz.3.124': attribute type 1 has an invalid length. [ 46.790478][ T3886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.801443][ T3886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.868979][ T3366] gre0 speed is unknown, defaulting to 1000 [ 46.896872][ T3366] syz1: Port: 1 Link DOWN [ 46.966259][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.980058][ T3464] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.989254][ T3464] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.012598][ T3464] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.022076][ T3464] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.031534][ T3366] gre0 speed is unknown, defaulting to 1000 [ 47.038037][ T3464] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.056484][ T3464] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.123102][ T3929] loop4: detected capacity change from 0 to 512 [ 47.124192][ T3464] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.139162][ T3464] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.159638][ T3926] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 47.168522][ T3924] gre0 speed is unknown, defaulting to 1000 [ 47.195714][ T3927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.127'. [ 47.248251][ T3936] vlan2: entered allmulticast mode [ 47.253438][ T3936] bond0: entered allmulticast mode [ 47.259036][ T3936] bond_slave_0: entered allmulticast mode [ 47.264790][ T3936] bond_slave_1: entered allmulticast mode [ 47.297473][ T3936] netlink: 14 bytes leftover after parsing attributes in process `syz.3.129'. [ 47.321510][ T28] audit: type=1400 audit(1776089092.670:565): avc: denied { bind } for pid=3933 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.350092][ T3931] syz.3.129 uses obsolete (PF_INET,SOCK_PACKET) [ 47.366890][ T28] audit: type=1400 audit(1776089092.670:566): avc: denied { setopt } for pid=3933 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.418313][ T3929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.437424][ T28] audit: type=1400 audit(1776089092.670:567): avc: denied { listen } for pid=3933 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.457819][ T3929] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.468818][ T3929] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.600794][ T3936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.613199][ T3936] bond_slave_0: left allmulticast mode [ 47.620783][ T3936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.630326][ T3936] bond_slave_1: left allmulticast mode [ 47.643850][ T3936] bond0 (unregistering): Released all slaves [ 47.812294][ T3946] netlink: 76 bytes leftover after parsing attributes in process `syz.3.132'. [ 47.842639][ T3946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.132'. [ 47.932856][ T3951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 47.933168][ T3952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 48.166361][ T3959] netlink: 76 bytes leftover after parsing attributes in process `syz.1.136'. [ 48.207919][ T3961] loop2: detected capacity change from 0 to 1024 [ 48.214994][ T3961] EXT4-fs: Ignoring removed bh option [ 48.235851][ T3962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.136'. [ 48.271143][ T3961] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.385915][ T3961] EXT4-fs (loop2): orphan cleanup on readonly fs [ 48.426391][ T3961] EXT4-fs error (device loop2): ext4_quota_enable:7213: comm syz.2.137: Bad quota inum: 4294934528, type: 0 [ 48.520266][ T3961] loop2: lost filesystem error report for type 5 error -117 [ 48.520539][ T3961] EXT4-fs (loop2): Remounting filesystem read-only [ 48.527906][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 48.527928][ C0] EXT4-fs (loop2): initial error at time 1776089093: ext4_quota_enable:7213 [ 48.527965][ C0] EXT4-fs (loop2): last error at time 1776089093: ext4_quota_enable:7213 [ 48.749892][ T3961] EXT4-fs warning (device loop2): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 49.031366][ T3961] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 49.060653][ T3961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.089696][ T3971] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2 [ 49.123038][ T40] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.162674][ T40] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.201162][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.218874][ T40] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.252784][ T40] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 49.300330][ T3976] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 49.368679][ T3979] tmpfs: Bad value for 'mode' [ 49.448758][ T3979] loop3: detected capacity change from 0 to 256 [ 49.621723][ T3979] FAT-fs (loop3): Directory bread(block 64) failed [ 49.647438][ T3979] FAT-fs (loop3): Directory bread(block 65) failed [ 49.671306][ T3979] FAT-fs (loop3): Directory bread(block 66) failed [ 49.693424][ T3979] FAT-fs (loop3): Directory bread(block 67) failed [ 49.723378][ T3979] FAT-fs (loop3): Directory bread(block 68) failed [ 49.786921][ T3979] FAT-fs (loop3): Directory bread(block 69) failed [ 49.805274][ T3979] FAT-fs (loop3): Directory bread(block 70) failed [ 49.809600][ T3982] netlink: 'syz.0.143': attribute type 1 has an invalid length. [ 49.820480][ T3979] FAT-fs (loop3): Directory bread(block 71) failed [ 49.820801][ T3979] FAT-fs (loop3): Directory bread(block 72) failed [ 49.820967][ T3979] FAT-fs (loop3): Directory bread(block 73) failed [ 49.933463][ T3979] syz.3.142: attempt to access beyond end of device [ 49.933463][ T3979] loop3: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 50.174443][ T3991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'. [ 50.499322][ T3990] gre0 speed is unknown, defaulting to 1000 [ 50.570850][ T4004] netlink: 76 bytes leftover after parsing attributes in process `syz.0.149'. [ 50.715174][ T4009] loop1: detected capacity change from 0 to 1024 [ 50.724688][ T4009] EXT4-fs: Ignoring removed bh option [ 50.735536][ T4009] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.747128][ T4009] EXT4-fs (loop1): orphan cleanup on readonly fs [ 50.753615][ T4009] EXT4-fs error (device loop1): ext4_quota_enable:7213: comm syz.1.151: Bad quota inum: 4294934528, type: 0 [ 50.765908][ T4009] loop1: lost filesystem error report for type 5 error -117 [ 50.766015][ T4009] EXT4-fs (loop1): Remounting filesystem read-only [ 50.773680][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 50.773701][ C0] EXT4-fs (loop1): initial error at time 1776089096: ext4_quota_enable:7213 [ 50.773724][ C0] EXT4-fs (loop1): last error at time 1776089096: ext4_quota_enable:7213 [ 50.804627][ T4009] EXT4-fs warning (device loop1): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 50.820940][ T4009] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 50.828689][ T4009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.918731][ T50] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.929062][ T50] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.939399][ T50] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.977112][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.987416][ T50] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.004270][ T4019] tmpfs: Bad value for 'mode' [ 51.060936][ T4019] loop3: detected capacity change from 0 to 256 [ 51.108769][ T4024] tmpfs: Bad value for 'mode' [ 51.123784][ T4021] gre0 speed is unknown, defaulting to 1000 [ 51.214416][ T4019] FAT-fs (loop3): Directory bread(block 64) failed [ 51.222443][ T4019] FAT-fs (loop3): Directory bread(block 65) failed [ 51.224886][ T4024] loop0: detected capacity change from 0 to 256 [ 51.231434][ T4019] FAT-fs (loop3): Directory bread(block 66) failed [ 51.264718][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 51.264733][ T28] audit: type=1400 audit(1776089096.650:575): avc: denied { unlink } for pid=3313 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 51.357822][ T4026] gre0 speed is unknown, defaulting to 1000 [ 51.374503][ T4024] FAT-fs (loop0): Directory bread(block 64) failed [ 51.402159][ T4019] FAT-fs (loop3): Directory bread(block 67) failed [ 51.446979][ T4024] FAT-fs (loop0): Directory bread(block 65) failed [ 51.459412][ T4019] FAT-fs (loop3): Directory bread(block 68) failed [ 51.467376][ T4024] FAT-fs (loop0): Directory bread(block 66) failed [ 51.477181][ T4019] FAT-fs (loop3): Directory bread(block 69) failed [ 51.479151][ T4024] FAT-fs (loop0): Directory bread(block 67) failed [ 51.486090][ T4019] FAT-fs (loop3): Directory bread(block 70) failed [ 51.596917][ T4035] loop4: detected capacity change from 0 to 512 [ 51.671712][ T4035] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.688163][ T4019] FAT-fs (loop3): Directory bread(block 71) failed [ 51.720449][ T4035] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.730343][ T4035] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 51.743749][ T4035] EXT4-fs warning (device loop4): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 51.759259][ T4035] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 51.770005][ T4035] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 51.785656][ T4035] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #12: comm syz.4.158: corrupted inode contents [ 51.802801][ T4035] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 51.808677][ T4035] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #12: comm syz.4.158: mark_inode_dirty error [ 51.818378][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 51.818518][ C0] EXT4-fs (loop4): initial error at time 1776089097: mb_free_blocks:2049: inode 12: block 14 [ 51.818781][ C0] EXT4-fs (loop4): last error at time 1776089097: ext4_do_update_inode:5602: inode 12 [ 51.859077][ T4035] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 51.861986][ T4035] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #12: comm syz.4.158: corrupted inode contents [ 51.884064][ T4035] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 51.887643][ T4035] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.158: mark_inode_dirty error [ 51.908907][ T4035] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 51.911248][ T4035] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #12: comm syz.4.158: corrupted inode contents [ 51.933541][ T4035] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 51.935300][ T4035] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 51.954252][ T4035] loop4: lost filesystem error report for type 5 error -117 [ 51.956798][ T4035] EXT4-fs error (device loop4): ext4_do_update_inode:5602: inode #12: comm syz.4.158: corrupted inode contents [ 51.976790][ T4035] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 51.978309][ T4035] EXT4-fs error (device loop4): ext4_truncate:4602: inode #12: comm syz.4.158: mark_inode_dirty error [ 51.999153][ T4035] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 52.000343][ T4035] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 52.019690][ T4035] loop4: lost filesystem error report for type 5 error -117 [ 52.022426][ T4035] EXT4-fs (loop4): 1 truncate cleaned up [ 52.042524][ T4035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.123248][ T4019] FAT-fs (loop3): Directory bread(block 72) failed [ 52.175543][ T4024] FAT-fs (loop0): Directory bread(block 68) failed [ 52.357444][ T4019] FAT-fs (loop3): Directory bread(block 73) failed [ 52.375096][ T4024] FAT-fs (loop0): Directory bread(block 69) failed [ 52.408902][ T4024] FAT-fs (loop0): Directory bread(block 70) failed [ 52.457643][ T4024] FAT-fs (loop0): Directory bread(block 71) failed [ 52.465384][ T4041] capability: warning: `syz.2.160' uses 32-bit capabilities (legacy support in use) [ 52.486253][ T4024] FAT-fs (loop0): Directory bread(block 72) failed [ 52.516748][ T4041] process 'syz.2.160' launched './file0' with NULL argv: empty string added [ 52.525807][ T4024] FAT-fs (loop0): Directory bread(block 73) failed [ 52.533214][ T28] audit: type=1400 audit(1776089097.910:576): avc: denied { execute } for pid=4040 comm="syz.2.160" name="file0" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.623982][ T4019] syz.3.155: attempt to access beyond end of device [ 52.623982][ T4019] loop3: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 52.636641][ T28] audit: type=1400 audit(1776089097.990:577): avc: denied { execute_no_trans } for pid=4040 comm="syz.2.160" path="/33/file0" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.678362][ T4047] __nla_validate_parse: 3 callbacks suppressed [ 52.678381][ T4047] netlink: 76 bytes leftover after parsing attributes in process `syz.2.162'. [ 52.729334][ T4050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.162'. [ 52.743712][ T4019] syz.3.155 (4019) used greatest stack depth: 9400 bytes left [ 52.767099][ T4024] syz.0.156: attempt to access beyond end of device [ 52.767099][ T4024] loop0: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 52.921379][ T4056] loop0: detected capacity change from 0 to 1024 [ 52.951534][ T4056] EXT4-fs: Ignoring removed bh option [ 52.976416][ T4054] gre0 speed is unknown, defaulting to 1000 [ 52.993512][ T4056] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.022103][ T4061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 53.032009][ T4056] EXT4-fs (loop0): orphan cleanup on readonly fs [ 53.041223][ T4056] EXT4-fs error (device loop0): ext4_quota_enable:7213: comm syz.0.164: Bad quota inum: 4294934528, type: 0 [ 53.054614][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.076774][ T4056] loop0: lost filesystem error report for type 5 error -117 [ 53.076965][ T4056] EXT4-fs (loop0): Remounting filesystem read-only [ 53.091422][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 53.091440][ C1] EXT4-fs (loop0): initial error at time 1776089098: ext4_quota_enable:7213 [ 53.091468][ C1] EXT4-fs (loop0): last error at time 1776089098: ext4_quota_enable:7213 [ 53.142331][ T4056] EXT4-fs warning (device loop0): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 53.159743][ T4056] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 53.189539][ T4056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.298720][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.309417][ T4056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.339979][ T30] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.351491][ T4089] tmpfs: Bad value for 'mode' [ 53.359511][ T30] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.379221][ T30] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.388644][ T30] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.398022][ T30] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.406344][ T30] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.421548][ T4089] loop4: detected capacity change from 0 to 256 [ 53.429844][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.445283][ T30] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.462527][ T30] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.502080][ T4099] loop0: detected capacity change from 0 to 512 [ 53.569191][ T4099] EXT4-fs: Ignoring removed nobh option [ 53.575165][ T4099] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.596368][ T4099] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 53.609991][ T4099] EXT4-fs (loop0): 1 truncate cleaned up [ 53.616433][ T4099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.629592][ T28] audit: type=1400 audit(1776089099.030:578): avc: denied { read append open } for pid=4093 comm="syz.0.175" path="/32/file2/blkio.bfq.avg_queue_size" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.633801][ T4092] netlink: 'syz.2.176': attribute type 8 has an invalid length. [ 53.663374][ T28] audit: type=1326 audit(1776089099.030:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.2.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf321c819 code=0x7ffc0000 [ 53.684195][ T4089] FAT-fs (loop4): Directory bread(block 64) failed [ 53.687904][ T28] audit: type=1326 audit(1776089099.030:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.2.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf321c819 code=0x7ffc0000 [ 53.687934][ T28] audit: type=1326 audit(1776089099.030:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.2.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf321c819 code=0x7ffc0000 [ 53.687960][ T28] audit: type=1326 audit(1776089099.030:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.2.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdaf321c819 code=0x7ffc0000 [ 53.697665][ T4089] FAT-fs (loop4): Directory bread(block 65) failed [ 53.720565][ T28] audit: type=1326 audit(1776089099.030:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.2.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf321c819 code=0x7ffc0000 [ 53.781486][ T4089] FAT-fs (loop4): Directory bread(block 66) failed [ 53.807341][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.809987][ T4089] FAT-fs (loop4): Directory bread(block 67) failed [ 53.825349][ T4089] FAT-fs (loop4): Directory bread(block 68) failed [ 53.854085][ T4106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 53.876381][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.887390][ T4089] FAT-fs (loop4): Directory bread(block 69) failed [ 53.895562][ T4089] FAT-fs (loop4): Directory bread(block 70) failed [ 53.903950][ T4089] FAT-fs (loop4): Directory bread(block 71) failed [ 53.911636][ T4089] FAT-fs (loop4): Directory bread(block 72) failed [ 53.924998][ T4089] FAT-fs (loop4): Directory bread(block 73) failed [ 53.938195][ T4112] netlink: 'syz.0.181': attribute type 1 has an invalid length. [ 53.945990][ T4112] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.181'. [ 53.962987][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.049690][ T4117] gre0 speed is unknown, defaulting to 1000 [ 54.054241][ T4089] syz.4.174: attempt to access beyond end of device [ 54.054241][ T4089] loop4: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 54.085060][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.097496][ T4124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 54.124486][ T4126] FAULT_INJECTION: forcing a failure. [ 54.124486][ T4126] name failslab, interval 1, probability 0, space 0, times 1 [ 54.145165][ T4126] CPU: 1 UID: 0 PID: 4126 Comm: syz.0.185 Not tainted syzkaller #0 PREEMPT(full) [ 54.145238][ T4126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 54.145249][ T4126] Call Trace: [ 54.145255][ T4126] [ 54.145262][ T4126] __dump_stack+0x1d/0x30 [ 54.145290][ T4126] dump_stack_lvl+0x95/0xd0 [ 54.145316][ T4126] dump_stack+0x15/0x1b [ 54.145399][ T4126] should_fail_ex+0x263/0x280 [ 54.145538][ T4126] should_failslab+0x8c/0xb0 [ 54.145561][ T4126] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 54.145656][ T4126] ? __alloc_skb+0x2d6/0x690 [ 54.145708][ T4126] __alloc_skb+0x2d6/0x690 [ 54.145734][ T4126] ? __alloc_skb+0x200/0x690 [ 54.145812][ T4126] netlink_alloc_large_skb+0xbf/0xf0 [ 54.145843][ T4126] netlink_sendmsg+0x40c/0x6f0 [ 54.145900][ T4126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.145922][ T4126] ____sys_sendmsg+0x563/0x5b0 [ 54.145946][ T4126] ___sys_sendmsg+0x195/0x1e0 [ 54.145972][ T4126] __x64_sys_sendmsg+0xd4/0x160 [ 54.146100][ T4126] x64_sys_call+0x194c/0x3020 [ 54.146129][ T4126] do_syscall_64+0x12c/0x370 [ 54.146235][ T4126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.146257][ T4126] RIP: 0033:0x7fbfcc2ec819 [ 54.146271][ T4126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.146287][ T4126] RSP: 002b:00007fbfcad3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.146349][ T4126] RAX: ffffffffffffffda RBX: 00007fbfcc565fa0 RCX: 00007fbfcc2ec819 [ 54.146365][ T4126] RDX: 000000002000c800 RSI: 00002000000002c0 RDI: 0000000000000003 [ 54.146379][ T4126] RBP: 00007fbfcad3f090 R08: 0000000000000000 R09: 0000000000000000 [ 54.146392][ T4126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.146428][ T4126] R13: 00007fbfcc566038 R14: 00007fbfcc565fa0 R15: 00007ffd6292c078 [ 54.146447][ T4126] [ 54.415513][ T4135] loop1: detected capacity change from 0 to 512 [ 54.431843][ T4135] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #11: block 1: comm syz.1.187: lblock 2 mapped to illegal pblock 1 (length 1) [ 54.446879][ T4135] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.447195][ T4135] ------------[ cut here ]------------ [ 54.449165][ T4107] gre0 speed is unknown, defaulting to 1000 [ 54.456329][ T4135] EA inode 11 i_nlink=2 [ 54.456353][ T4135] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.1.187/4135 [ 54.461822][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 54.461837][ C1] EXT4-fs (loop1): initial error at time 1776089099: ext4_map_blocks:786: inode 11: block 1 [ 54.461874][ C1] EXT4-fs (loop1): last error at time 1776089099: ext4_map_blocks:786: inode 11: block 1 [ 54.509952][ T4135] Modules linked in: [ 54.513855][ T4135] CPU: 1 UID: 0 PID: 4135 Comm: syz.1.187 Not tainted syzkaller #0 PREEMPT(full) [ 54.523284][ T4135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 54.533639][ T4135] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 54.540361][ T4135] Code: 84 2f 99 ff 4c 8d 2d 1d a1 5d 05 49 8d 7e 40 e8 f4 c8 b5 ff 49 8b 6e 40 4c 89 e7 e8 28 c4 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 2f 03 de 03 66 66 66 66 66 66 2e [ 54.560283][ T4135] RSP: 0018:ffffc90000f33778 EFLAGS: 00010246 [ 54.567197][ T4135] RAX: ffff888104b4cdc8 RBX: ffff88811bcd4ec8 RCX: ffffffff81c02c68 [ 54.575451][ T4135] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dcd70 [ 54.583849][ T4135] RBP: 000000000000000b R08: 000188811bcd4e7b R09: 0000000000000000 [ 54.592335][ T4135] R10: ffffc90000f336a8 R11: 0001c90000f336a8 R12: ffff88811bcd4e78 [ 54.600334][ T4135] R13: ffffffff871dcd70 R14: ffff88811bcd4e30 R15: 0000000000000001 [ 54.608922][ T4135] FS: 00007f821610e6c0(0000) GS:ffff8882ae9d7000(0000) knlGS:0000000000000000 [ 54.618063][ T4135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.624834][ T4135] CR2: 00007f0652ec5abc CR3: 000000011c722000 CR4: 00000000003506f0 [ 54.632930][ T4135] Call Trace: [ 54.636626][ T4135] [ 54.639604][ T4135] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 54.645673][ T4135] ? errseq_check+0x2c/0x50 [ 54.650499][ T4135] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 54.656223][ T4135] ? ext4_truncate+0x92b/0xb00 [ 54.661053][ T4135] ext4_evict_inode+0xac1/0xe40 [ 54.666016][ T4135] ? __pfx_ext4_evict_inode+0x10/0x10 [ 54.671561][ T4135] evict+0x2af/0x510 [ 54.675601][ T4135] ? __dquot_initialize+0x146/0x7c0 [ 54.681215][ T4135] iput+0x41a/0x580 [ 54.685203][ T4135] ext4_process_orphan+0x1a9/0x1c0 [ 54.690429][ T4135] ext4_orphan_cleanup+0x6a8/0xa00 [ 54.695838][ T4135] ext4_fill_super+0x3414/0x37c0 [ 54.700995][ T4135] ? set_blocksize+0x14c/0x270 [ 54.705773][ T4135] ? setup_bdev_super+0x30e/0x370 [ 54.710840][ T4135] ? __pfx_ext4_fill_super+0x10/0x10 [ 54.716420][ T4135] get_tree_bdev_flags+0x291/0x300 [ 54.722009][ T4135] ? __pfx_ext4_fill_super+0x10/0x10 [ 54.727369][ T4135] get_tree_bdev+0x1f/0x30 [ 54.731789][ T4135] ext4_get_tree+0x1c/0x30 [ 54.736346][ T4135] vfs_get_tree+0x57/0x1d0 [ 54.740998][ T4135] do_new_mount+0x288/0x8d0 [ 54.745586][ T4135] path_mount+0x4d0/0xbc0 [ 54.750263][ T4135] __se_sys_mount+0x28c/0x2e0 [ 54.755006][ T4135] __x64_sys_mount+0x67/0x80 [ 54.759796][ T4135] x64_sys_call+0x2d61/0x3020 [ 54.764681][ T4135] do_syscall_64+0x12c/0x370 [ 54.769640][ T4135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.775636][ T4135] RIP: 0033:0x7f82176dda8a [ 54.780120][ T4135] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.800511][ T4135] RSP: 002b:00007f821610de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.809151][ T4135] RAX: ffffffffffffffda RBX: 00007f821610dee0 RCX: 00007f82176dda8a [ 54.817298][ T4135] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f821610dea0 [ 54.825534][ T4135] RBP: 00002000000009c0 R08: 00007f821610dee0 R09: 0000000000800718 [ 54.833590][ T4135] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 54.841753][ T4135] R13: 00007f821610dea0 R14: 000000000000048d R15: 0000200000000200 [ 54.849888][ T4135] [ 54.852900][ T4135] ---[ end trace 0000000000000000 ]--- [ 54.861750][ T4148] FAULT_INJECTION: forcing a failure. [ 54.861750][ T4148] name failslab, interval 1, probability 0, space 0, times 0 [ 54.874662][ T4148] CPU: 1 UID: 0 PID: 4148 Comm: syz.0.189 Tainted: G W syzkaller #0 PREEMPT(full) [ 54.874692][ T4148] Tainted: [W]=WARN [ 54.874699][ T4148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 54.874711][ T4148] Call Trace: [ 54.874719][ T4148] [ 54.874728][ T4148] __dump_stack+0x1d/0x30 [ 54.874757][ T4148] dump_stack_lvl+0x95/0xd0 [ 54.874860][ T4148] dump_stack+0x15/0x1b [ 54.874882][ T4148] should_fail_ex+0x263/0x280 [ 54.874908][ T4148] should_failslab+0x8c/0xb0 [ 54.874931][ T4148] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 54.875010][ T4148] ? __alloc_skb+0x2d6/0x690 [ 54.875036][ T4148] __alloc_skb+0x2d6/0x690 [ 54.875060][ T4148] ? __alloc_skb+0x200/0x690 [ 54.875147][ T4148] xfrm_send_policy_notify+0x197/0x1060 [ 54.875238][ T4148] ? xfrm_policy_insert+0x676/0x790 [ 54.875261][ T4148] ? __local_bh_enable_ip+0x5f/0x80 [ 54.875323][ T4148] ? _raw_spin_unlock_bh+0x18/0x20 [ 54.875349][ T4148] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 54.875371][ T4148] km_policy_notify+0x62/0xb0 [ 54.875427][ T4148] xfrm_add_policy+0x317/0x470 [ 54.875451][ T4148] xfrm_user_rcv_msg+0x576/0x670 [ 54.875479][ T4148] ? __perf_event_task_sched_out+0x192/0x710 [ 54.875502][ T4148] ? xas_load+0x413/0x430 [ 54.875522][ T4148] ? xas_load+0x413/0x430 [ 54.875541][ T4148] ? css_rstat_updated+0xbb/0x280 [ 54.875568][ T4148] netlink_rcv_skb+0x123/0x220 [ 54.875658][ T4148] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 54.875684][ T4148] xfrm_netlink_rcv+0x48/0x60 [ 54.875765][ T4148] netlink_unicast+0x5c0/0x690 [ 54.875793][ T4148] netlink_sendmsg+0x5c8/0x6f0 [ 54.875812][ T4148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.875830][ T4148] ____sys_sendmsg+0x563/0x5b0 [ 54.875896][ T4148] ___sys_sendmsg+0x195/0x1e0 [ 54.875921][ T4148] __x64_sys_sendmsg+0xd4/0x160 [ 54.875941][ T4148] x64_sys_call+0x194c/0x3020 [ 54.875964][ T4148] do_syscall_64+0x12c/0x370 [ 54.876009][ T4148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.876029][ T4148] RIP: 0033:0x7fbfcc2ec819 [ 54.876043][ T4148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.876058][ T4148] RSP: 002b:00007fbfcad1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.876119][ T4148] RAX: ffffffffffffffda RBX: 00007fbfcc566090 RCX: 00007fbfcc2ec819 [ 54.876131][ T4148] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000a [ 54.876143][ T4148] RBP: 00007fbfcad1e090 R08: 0000000000000000 R09: 0000000000000000 [ 54.876155][ T4148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.876166][ T4148] R13: 00007fbfcc566128 R14: 00007fbfcc566090 R15: 00007ffd6292c078 [ 54.876182][ T4148] [ 55.173753][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.176073][ T4135] EXT4-fs (loop1): 1 orphan inode deleted [ 55.198631][ T4135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.338973][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.353445][ T60] bridge_slave_1: left allmulticast mode [ 55.359276][ T60] bridge_slave_1: left promiscuous mode [ 55.365006][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.446037][ T60] bridge_slave_0: left allmulticast mode [ 55.477439][ T3295] ================================================================== [ 55.485635][ T3295] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb [ 55.493956][ T3295] [ 55.496261][ T3295] write to 0xffff888102202188 of 2 bytes by interrupt on cpu 0: [ 55.503872][ T3295] virtqueue_disable_cb+0x75/0x2c0 [ 55.508987][ T3295] skb_xmit_done+0x67/0x1a0 [ 55.513507][ T3295] vring_interrupt+0x2d7/0x310 [ 55.518259][ T3295] __handle_irq_event_percpu+0x9c/0x4d0 [ 55.523890][ T3295] handle_irq_event+0x64/0xf0 [ 55.528557][ T3295] handle_edge_irq+0x154/0x470 [ 55.533323][ T3295] __common_interrupt+0x60/0xb0 [ 55.538360][ T3295] common_interrupt+0x7e/0x90 [ 55.543089][ T3295] asm_common_interrupt+0x26/0x40 [ 55.548227][ T3295] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 55.554238][ T3295] __unix_dgram_recvmsg+0x3a7/0x870 [ 55.559486][ T3295] unix_dgram_recvmsg+0x81/0x90 [ 55.564330][ T3295] sock_recvmsg_nosec+0xc2/0xf0 [ 55.569286][ T3295] ____sys_recvmsg+0x26f/0x280 [ 55.574034][ T3295] ___sys_recvmsg+0x11f/0x3b0 [ 55.578698][ T3295] do_recvmmsg+0x1ef/0x560 [ 55.583277][ T3295] __x64_sys_recvmmsg+0xe5/0x170 [ 55.588546][ T3295] x64_sys_call+0x80f/0x3020 [ 55.593211][ T3295] do_syscall_64+0x12c/0x370 [ 55.597883][ T3295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.603795][ T3295] [ 55.606128][ T3295] read to 0xffff888102202188 of 2 bytes by task 3295 on cpu 1: [ 55.613746][ T3295] virtqueue_disable_cb+0x4c/0x2c0 [ 55.619080][ T3295] start_xmit+0x107/0x1ab0 [ 55.623584][ T3295] dev_hard_start_xmit+0x136/0x3f0 [ 55.628822][ T3295] sch_direct_xmit+0x192/0x550 [ 55.633674][ T3295] __dev_queue_xmit+0xca9/0x1f20 [ 55.638700][ T3295] ip_finish_output2+0x705/0x8c0 [ 55.643890][ T3295] ip_finish_output+0x112/0x290 [ 55.648738][ T3295] ip_output+0xbd/0x1c0 [ 55.653065][ T3295] __ip_queue_xmit+0xb68/0xba0 [ 55.657843][ T3295] ip_queue_xmit+0x39/0x50 [ 55.662341][ T3295] __tcp_transmit_skb+0x1af2/0x1f10 [ 55.667618][ T3295] tcp_write_xmit+0x1597/0x3640 [ 55.672576][ T3295] __tcp_push_pending_frames+0x6d/0x1b0 [ 55.678105][ T3295] tcp_push+0x311/0x330 [ 55.682261][ T3295] tcp_sendmsg_locked+0x25c5/0x2de0 [ 55.687447][ T3295] tcp_sendmsg+0x2f/0x50 [ 55.691688][ T3295] inet_sendmsg+0x76/0xd0 [ 55.696095][ T3295] sock_write_iter+0x2c7/0x320 [ 55.700929][ T3295] vfs_write+0x5a6/0x9f0 [ 55.705326][ T3295] ksys_write+0xdc/0x1a0 [ 55.709821][ T3295] __x64_sys_write+0x40/0x50 [ 55.714407][ T3295] x64_sys_call+0x27e1/0x3020 [ 55.719154][ T3295] do_syscall_64+0x12c/0x370 [ 55.723827][ T3295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.730044][ T3295] [ 55.732355][ T3295] value changed: 0x0000 -> 0x0001 [ 55.737359][ T3295] [ 55.739669][ T3295] Reported by Kernel Concurrency Sanitizer on: [ 55.745980][ T3295] CPU: 1 UID: 0 PID: 3295 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 55.757100][ T3295] Tainted: [W]=WARN [ 55.761077][ T3295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 55.771138][ T3295] ================================================================== [ 55.850414][ T60] bridge_slave_0: left promiscuous mode [ 55.856416][ T60] bridge0: port 1(bridge_slave_0) entered disabled state SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 55.980466][ T60] bond1 (unregistering): Released all slaves [ 56.212457][ T4107] chnl_net:caif_netlink_parms(): no params data found [ 56.264607][ T60] hsr_slave_0: left promiscuous mode [ 56.270795][ T60] hsr_slave_1: left promiscuous mode [ 56.276834][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.284323][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.291813][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.299943][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.309966][ T60] veth1_vlan: left promiscuous mode [ 56.315313][ T60] veth0_vlan: left promiscuous mode [ 56.367740][ T60] team0 (unregistering): Port device team_slave_1 removed [ 56.376976][ T60] team0 (unregistering): Port device team_slave_0 removed [ 56.709969][ T60] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.767632][ T60] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.807783][ T60] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.877734][ T60] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.964652][ T60] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.018104][ T60] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.077953][ T60] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.128215][ T60] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.607301][ T60] bridge_slave_1: left allmulticast mode [ 57.613062][ T60] bridge_slave_1: left promiscuous mode [ 57.618803][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.626349][ T60] bridge_slave_0: left allmulticast mode [ 57.632472][ T60] bridge_slave_0: left promiscuous mode [ 57.638479][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.647243][ T60] bridge_slave_1: left allmulticast mode [ 57.652899][ T60] bridge_slave_1: left promiscuous mode [ 57.658750][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.667150][ T60] bridge_slave_0: left allmulticast mode [ 57.672885][ T60] bridge_slave_0: left promiscuous mode [ 57.678834][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.687477][ T60] bridge_slave_1: left allmulticast mode [ 57.693117][ T60] bridge_slave_1: left promiscuous mode [ 57.698810][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.706882][ T60] bridge_slave_0: left allmulticast mode [ 57.712786][ T60] bridge_slave_0: left promiscuous mode [ 57.718884][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.727064][ T60] bridge_slave_1: left allmulticast mode [ 57.732992][ T60] bridge_slave_1: left promiscuous mode [ 57.739420][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.747205][ T60] bridge_slave_0: left allmulticast mode [ 57.753022][ T60] bridge_slave_0: left promiscuous mode [ 57.758820][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.810394][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.820035][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.829048][ T60] bond0 (unregistering): Released all slaves [ 57.888186][ T60] bond0 (unregistering): Released all slaves [ 57.929309][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.939656][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.949274][ T60] bond0 (unregistering): Released all slaves [ 57.957202][ T60] bond1 (unregistering): Released all slaves [ 57.971978][ T50] smc: removing ib device syz1 [ 57.999923][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.009718][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.019527][ T60] bond0 (unregistering): Released all slaves [ 58.095004][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.104233][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.113612][ T60] bond0 (unregistering): Released all slaves [ 58.120691][ T60] bond1 (unregistering): Released all slaves [ 58.161152][ T60] hsr_slave_0: left promiscuous mode [ 58.166967][ T60] hsr_slave_1: left promiscuous mode [ 58.173011][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.180829][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.191304][ T60] hsr_slave_0: left promiscuous mode [ 58.197554][ T60] hsr_slave_1: left promiscuous mode [ 58.203876][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.211817][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.220155][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.227814][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.236735][ T60] hsr_slave_0: left promiscuous mode [ 58.242511][ T60] hsr_slave_1: left promiscuous mode [ 58.248240][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.255814][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.264734][ T60] hsr_slave_0: left promiscuous mode [ 58.272470][ T60] hsr_slave_1: left promiscuous mode [ 58.278452][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.286058][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.296134][ T60] veth1_macvtap: left promiscuous mode [ 58.301726][ T60] veth0_macvtap: left promiscuous mode [ 58.307459][ T60] veth1_vlan: left promiscuous mode [ 58.313007][ T60] veth0_vlan: left promiscuous mode [ 58.361921][ T60] team0 (unregistering): Port device team_slave_1 removed [ 58.371615][ T60] team0 (unregistering): Port device team_slave_0 removed [ 58.427293][ T60] team0 (unregistering): Port device team_slave_1 removed [ 58.436432][ T60] team0 (unregistering): Port device team_slave_0 removed [ 58.482465][ T60] team0 (unregistering): Port device team_slave_1 removed [ 58.492290][ T60] team0 (unregistering): Port device team_slave_0 removed [ 58.534686][ T60] team0 (unregistering): Port device team_slave_1 removed [ 58.544071][ T60] team0 (unregistering): Port device team_slave_0 removed