last executing test programs: 8.074070792s ago: executing program 3 (id=226): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000020601010000000000000020070000000c000780080012400000ffff05000100060000000500050002000000050004000000000009000200730fe6310000000011000300686173683a6e65742c6e6574"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) 7.033226763s ago: executing program 3 (id=230): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) semop(0x0, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semtimedop(0x0, &(0x7f0000000080)=[{0x3, 0x8, 0x2c00}, {0x3, 0x1, 0x1800}], 0x2, 0x0) 6.863447338s ago: executing program 3 (id=234): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r0], 0x18}}], 0x1, 0xf00) r2 = socket(0x10, 0x2, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x48810) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000041) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x2, 0x14}, 0x10c0e8, 0x0, 0x0, 0x3, 0x7, 0x10008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1000414, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRES32=0x0], 0x6, 0x807, &(0x7f0000000280)="$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") ioprio_set$uid(0x3, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r5, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x20008000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000bc0)={'gretap0\x00', 0x0, 0x40, 0x8, 0xfffff000, 0x3, {{0x12, 0x4, 0x2, 0xd, 0x48, 0x67, 0x0, 0x4, 0x29, 0x0, @remote, @empty, {[@rr={0x7, 0x1f, 0x5, [@multicast2, @empty, @empty, @multicast2, @loopback, @multicast2, @multicast2]}, @end, @noop, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0xe, [@multicast2, @empty, @loopback]}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000d40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r5, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x14) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000380)={0x8, 0x4, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x402c5342, &(0x7f00000000c0)={0x0, 0x7, 0x60, {0x1}, 0xfffffffe, 0x100000}) r9 = socket$kcm(0x1e, 0x4, 0x0) close(r9) socket$inet(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, 0x0) write(r2, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 6.546029068s ago: executing program 1 (id=235): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0xa6, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e0001c104000000000000000c002000010000000000008004000180"], 0x20}], 0x1}, 0x8000) 6.545602008s ago: executing program 1 (id=236): r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x1c8, 0xd0, 0x1c8, 0x390, 0x0, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00', {}, {}, 0x4}, 0x11e, 0xa8, 0xd0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@loopback, @dev, [], [], 'gre0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"e131"}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@remote}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) sendfile(0xffffffffffffffff, r0, &(0x7f0000000100)=0x7, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xd, 0x43}]}, 0x10) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20040014, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x5c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r5 = fcntl$dupfd(r2, 0x0, r1) writev(r2, &(0x7f0000000580)=[{&(0x7f0000001240)="4fb6b3c65f18ee12bc9643b50723670ed775fd626fd07522a419a1bf640fbb4b", 0x20}, {&(0x7f0000000680)="64e4159d", 0x4}], 0x2) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000540)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x81) close_range(r1, 0xffffffffffffffff, 0x0) 6.491505099s ago: executing program 1 (id=237): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x18000000}, 0x48) 6.488410219s ago: executing program 3 (id=238): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3df, &(0x7f0000000e00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) (async) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="82e6eb2bc0708f9db13cf562f7b6cea2004c9918fac8e7d7856d8489fcb0ac1cd3f5397769feaeceac849143d0383f07c8d5fd91359c6b42a3e15a40f73e867a5ec314c088d3182cd757e0846b8032462a605ec3a62a0892129badc6ef292ba374d04c9b65579c1ccfb7350b6bdb28d2266bc7d96b82d468b713a89447bd7fc08ab4913847d6591f1b083c4265604c51b662343026f23e22f461585de020e018893c043b76b42f00cf470fa66773ca3746d61bf401a31ad39b9919d61b035d541d639970e2f38e35f1f263529437f7889cde4043238dec69753370e8e20603de3deff89afc019781118b7c425474cbbd87fd9b205264e6de44ef43782f9bd551") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) rt_sigqueueinfo(r1, 0x3d, &(0x7f0000000ac0)={0x0, 0xc4, 0xff7ffffe}) (async) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0xf4, 0x0, 0x4, 0x0, 0x1fffc000000000, 0x4, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x6, @perf_config_ext={0x7fffffff, 0x1}, 0x400, 0x5, 0x2, 0x8, 0x6, 0x8, 0x100, 0x0, 0x5, 0x0, 0x1800000000}, r1, 0x6, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400000, 0x0, 0x2, 0x0) 6.361936873s ago: executing program 1 (id=239): socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x1013c1) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @loopback}, {0x0, @random="1a1f42b34011"}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="180000001800599c6d0e0000ded650492d"], 0xfe33) perf_event_open(0x0, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f0000000f40)={[{@commit={'commit', 0x3d, 0x4}}, {@nobarrier}, {@barrier}, {@quota}, {@grpid}, {@journal_dev={'journal_dev', 0x3d, 0x9b9}}, {@data_writeback}, {@jqfmt_vfsv1}]}, 0x0, 0x47a, &(0x7f0000001000)="$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") r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x9, 0x8001, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x20, 0x9, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x23}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048895}, 0x8041) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x6390, &(0x7f0000000000)={0x0, 0x621d, 0x842, 0x3, 0x39c}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) 6.192315538s ago: executing program 3 (id=240): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000020601010000000000000020070000000c000780080012400000ffff05000100060000000500050002000000050004000000000009000200730fe6310000000011000300686173683a6e65742c6e6574"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) 5.884357487s ago: executing program 3 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) semop(0x0, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semtimedop(0x0, &(0x7f0000000080)=[{0x3, 0x8, 0x2c00}, {0x3, 0x1, 0x1800}], 0x2, 0x0) 5.860340448s ago: executing program 32 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) semop(0x0, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semtimedop(0x0, &(0x7f0000000080)=[{0x3, 0x8, 0x2c00}, {0x3, 0x1, 0x1800}], 0x2, 0x0) 5.381737152s ago: executing program 0 (id=250): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@cgroup, 0xffffffffffffffff, 0x2e, 0x2}, 0x20) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) (async) r6 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x4, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_CQ_RING(r6, 0x9) (async) gettid() (async) r7 = socket$inet6(0xa, 0x2, 0x0) close(r7) (async) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r8, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e23, 0x180000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000bc0)=[@hopopts={{0x18, 0x29, 0x32, {0x32}}}], 0x18}, 0x34004894) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000740)={{[0xfe90, 0x3, 0x6, 0x1ff]}, 0x0, 0x2, 0x9, 0x0, &(0x7f0000000680)=[{{@_ha_fsid={[0xbbed, 0xff]}, {0x0, 0x7, 0x493, 0x6}}, 0x7f, 0x0, '\x00'}, {{@align, {0xc, 0x3, 0x9, 0x101}}, 0x5, 0x0, 'veth0_to_team\x00'}, {{@_ha_fsid={[0x6, 0x6]}, {0x5, 0x1, 0x3, 0x5}}, 0x3, 0x0, '\x00'}, {{@_ha_fsid={[0x8a3, 0x9]}, {0x1, 0x70, 0x82f, 0x5}}, 0x86a, 0x0, '/\'.+\x00'}]}) (async) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000100)={'veth0_to_team\x00', {0x2, 0x0, @dev}}) (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000140)={[{@nogrpid}, {@nomblk_io_submit}, {@nouid32}]}, 0xfe, 0x244, &(0x7f0000000840)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") 5.214570367s ago: executing program 0 (id=251): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount$bpf(0x0, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x82000, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000180)={r5}, &(0x7f00000000c0)=0x8) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113d00000000008510000002000000b70a0000000000009500c2000000000095"], 0x0, 0x6, 0x0, 0x0, 0x41100}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2800b08875000013000100000000000000000000000f000000000008001c00c900"/43], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r9, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x73a, 0x1) sendmsg$sock(r7, &(0x7f00000002c0)={&(0x7f0000000040)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)="87cf20ee15", 0x5}], 0x1, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0xd8}, 0x20008040) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, 0x0) 4.269378374s ago: executing program 4 (id=256): r0 = socket$inet6(0xa, 0x2, 0x11) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000300)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c) ppoll(&(0x7f0000000140)=[{r0, 0x6009}], 0x1, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)={0x8, 0xb7, 0x2, 0x0, 0x0, [{{r1}, 0x9}, {{}, 0x3ff}]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @mcast2, 0x3}, r3, 0x7}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4000000000003, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000003c0)=0x8, r5, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x3a, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) r7 = memfd_create(0x0, 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x0) r8 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010) getsockopt(r8, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74) r9 = syz_io_uring_setup(0x6c01, &(0x7f0000000080)={0x0, 0xe971, 0x20000, 0x3, 0x384}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_SQES(0x0, 0x2, 0xe, 0x100010, r9, 0x10000000) 4.191200637s ago: executing program 0 (id=257): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21081e, &(0x7f0000000340)={[{@commit}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000081b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_ext={0x1c, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000c70000000000000000000000185200000e000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0001000000000000b702217a691c456cff2b0ed2d211547d004116660058200dc9d3725a5000001f63f7", @ANYRES32, @ANYBLOB="000000000700000018270000", @ANYRES32, @ANYBLOB="00000000020000000f4450000400000018180000", @ANYRES32, @ANYBLOB="000000000000000018250000", @ANYRES32, @ANYBLOB="000000000500000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000c80)='GPL\x00', 0xff, 0x3b, &(0x7f0000000cc0)=""/59, 0x20780, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000d40)={0x0, 0x5, 0x9, 0x2}, 0x10, 0x1a8bd, 0xffffffffffffffff, 0x9, &(0x7f0000000d80)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, r1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x3, 0x3, 0x1, 0x6}, {0x0, 0x4, 0x0, 0x4}, {0x4, 0x100, 0x3, 0x7}, {0x2, 0x5, 0x0, 0xa}, {0x7, 0x5, 0x0, 0x1}, {0x4, 0x1, 0xe, 0x6}, {0x5, 0x3, 0xc, 0x48e21ccbbf81d280}, {0x3, 0x2, 0xd, 0xb}, {0x5, 0x1, 0x9, 0xa}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) unshare(0x2a020480) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_config_ext={0x395}, 0x204, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 4.10103192s ago: executing program 4 (id=258): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0xffa6, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000005e0001c104000000000000000c002000010000000000008004000180"], 0x20}], 0x1}, 0x8000) 4.09086752s ago: executing program 4 (id=259): syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xb}, 0x10c0e8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000280)={'security\x00', 0x6, "a3f88b58d83c"}, &(0x7f0000000080)=0x2e) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000680)={@empty, @broadcast, @void, {@ipv6={0x86dd, @generic={0xe, 0x6, "8a3b2c", 0x0, 0x29, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.773063519s ago: executing program 2 (id=260): r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccdb, 0xc000, 0x0, 0x20002fb}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x7) r3 = getuid() r4 = getuid() setresuid(r4, r4, 0x0) setreuid(r4, r3) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000140)=@req3={0x9, 0x629, 0xfffeffff, 0x5, 0x2, 0x7, 0x40}, 0x1c) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) fchown(r0, r4, r6) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e80)=ANY=[@ANYBLOB="7c0000000008010100000000000000000000000a06000240000300000500030084000000040004800900010073797a310000000006000240884c00002c00048008000140ffffffff080603400000042408000840000000000800074000000004080008400000000a140004800800024000000007080001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000408}, 0x40000) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') preadv(r8, &(0x7f0000000100)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 2.813264067s ago: executing program 4 (id=261): r0 = getpgid(0x0) kcmp(r0, r0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008"], 0x6f4}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r2 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, 0x0) mq_timedreceive(r2, 0x0, 0x0, 0x200000200009, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x20, 0x64, 0xfffff03c}, {0x6, 0x1, 0x5, 0xffffffff}]}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005cc0)={r3, 0x5, 0x2f, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.762070159s ago: executing program 2 (id=262): r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001c1040000000000030000000100090000000000008004000180904f28c0b8fd2220bb731876cb6cce905a6a396fed59fa924c05e1193b668e67bb585c6fe6d899cf4e620567a0440885e0736efa3c0bea28a3fb6336fa8ded38adb5d9d4646c43af605719ae55b1bdf73276572a5c23938368ebf9b5e42db10154adf97c4ee7cb91c0f14c85c0add4c68e40b2fa33f5643f89903be7e9877beff23506061eb0ffd464cdf126293eb84eeb47e15994357d59aaac88b2b4e526a25e07c6e6cfa91ae5667ad7d5cb2b"], 0x20}, {&(0x7f0000000000)={0x10, 0x32, 0x300, 0x70bd26, 0x25dfdbfd}, 0x10}], 0x2, 0x0, 0x0, 0x26040084}, 0x8000) 2.654228322s ago: executing program 4 (id=263): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008000, &(0x7f0000000240)={[{@debug}, {@orlov}, {@nomblk_io_submit}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@init_itable_val}, {@usrquota}, {@usrquota}]}, 0x1, 0x5ba, &(0x7f0000001bc0)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000780)=""/225, 0xe1}], 0x1000000000000028, 0x3, 0x7) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00'}) socket$nl_route(0x10, 0x3, 0x0) close(0x3) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000500)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r4 = socket(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, 0x0) setregid(0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="02000500", @ANYRES32, @ANYBLOB="040005000000000008000500", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000200", @ANYRES32=0xee00, @ANYBLOB="10000400000000002000020000000000"], 0x4c, 0x6) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12011, r5, 0xffffe000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x52e, &(0x7f0000000f00)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) futex_waitv(&(0x7f0000001b00)=[{0x94a, 0x0, 0x8a}], 0x1, 0x0, 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r4, 0x0, r3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0x0, 0x1}, {0xffe0, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003}, @empty, @private=0xa010105, 0xff000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r8], 0x20) 2.233862484s ago: executing program 0 (id=264): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d706f6c3d696e7461726c656176653a4e00517c6c39a682add9775ce329f2e3ab03d161aa6d5921ae95b0dc02bd3130ebc880ef6a9ac74b8936edee5e88c7f4f3231abf000000005a11d3b65ae98ca92918bd93627fe2b1d24d2192a82abda928689c256c20bb8109c4311e1bb34da11e881bc15ffabe6fe551800c746206885048577c3b144d67662492ce53eaf4d91d5b9c59243e"]) r4 = perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x65, 0x0, 0x0, 0x1, 0x0, 0x9, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x9, 0x1}, 0x0, 0x4, 0x800000, 0x0, 0x2, 0x4002, 0x9, 0x0, 0x0, 0x0, 0xbc}, r1, 0x3, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffff, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) (async, rerun: 64) r6 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x4, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x5, @perf_config_ext={0x3, 0x2}, 0x1008c2, 0x7ff, 0x3, 0x3, 0xb, 0x2, 0x7fff, 0x0, 0x0, 0x0, 0x4}, r1, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000002100)={{r4}, 0x0, 0x4, @unused=[0x6, 0x4, 0xff], @name="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"}) (async, rerun: 64) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r6, 0x0) (rerun: 64) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x1) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000000)=0x2, 0x4) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 64) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x181080) (async, rerun: 32) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4f818a20, 0x5, &(0x7f0000006680)) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r8, 0x3, r0, 0x400, 0x80000}) 2.101396858s ago: executing program 2 (id=265): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000020601010000000000000020070000000c000780080012400000ffff05000100060000000500050002000000050004000000000009000200730fe6310000000011000300686173683a6e65742c6e6574"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) 2.100138068s ago: executing program 1 (id=266): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x5e4d, &(0x7f0000000080)={0x0, 0xdfe6, 0x20, 0x3, 0x3e, 0x0, r0}, &(0x7f0000000300), &(0x7f0000000140), &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000001c0)=[@ioring_restriction_sqe_flags_required={0x3, 0x8}, @ioring_restriction_sqe_op={0x1, 0xd}, @ioring_restriction_sqe_flags_required={0x3, 0x2}], 0x3) sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x14, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f00000000c0)={0xf642, 0x20, 0x6, 0x9dfe, 0x11}) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000200)=0x17) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0x9) r9 = socket$packet(0x11, 0x2, 0x300) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6e5f8c85}, {}, {}, [@call={0x85, 0x0, 0x0, 0x9b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x4, 0x0, 0x0, 0x4}]}, 0x10) r11 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x142000, 0x112, 0xb}, 0x18) readlinkat(r11, 0x0, &(0x7f00000002c0)=""/33, 0x21) eventfd2(0x4, 0x801) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0xd, 0x68b0}}, './file0\x00'}) close(r12) ioctl$XFS_IOC_COMMIT_RANGE(r10, 0x40585883, &(0x7f0000000480)={r4, 0x0, 0x1e, 0x0, 0xfffffffffffffffb, 0x4, [0x1, 0x1, 0x6, 0x9, 0x7, 0x7]}) 2.04971276s ago: executing program 0 (id=267): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB], 0x270}, 0x1, 0x0, 0x0, 0x44890}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80004800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x14, 0x0, 0xff, 0x3, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100039042abd7000000000008b7f7cea39796593d012fd0e7d349d4c00000000", @ANYRES32=0x0, @ANYBLOB="011802003537a940380012800b00010065727370616e0000280002800400120008000500090000000500170001000000060011004e200000080015003aca0a00"], 0x58}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) socket$nl_route(0x10, 0x3, 0x0) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) (async) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB], 0x270}, 0x1, 0x0, 0x0, 0x44890}, 0x0) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80004800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x14, 0x0, 0xff, 0x3, 0xff, 0x6}}, 0x1c}}, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100039042abd7000000000008b7f7cea39796593d012fd0e7d349d4c00000000", @ANYRES32=0x0, @ANYBLOB="011802003537a940380012800b00010065727370616e0000280002800400120008000500090000000500170001000000060011004e200000080015003aca0a00"], 0x58}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) (async) 1.969954952s ago: executing program 2 (id=268): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e0001c104000000000000000c002000010000000000008004000180"], 0x20}], 0x1}, 0x8000) 1.956268402s ago: executing program 1 (id=269): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, &(0x7f0000000780)) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x20}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x3, [@enum64={0xb, 0x8, 0x0, 0x13, 0x0, 0xf, [{0x2, 0x81, 0x9}, {0x8, 0x4, 0x4}, {0xa}, {0x9, 0x710, 0x1}, {0x8, 0x8, 0x5}, {0x6, 0xc7b, 0x9c}, {0x9, 0x9, 0x7}, {0x9, 0x8, 0x1}]}, @enum={0x7, 0xa, 0x0, 0x6, 0x4, [{0xb, 0x9}, {0x8, 0x9}, {0x9, 0x101}, {0x8, 0x1}, {0x9, 0x3}, {0xb, 0x5}, {0xa, 0x1}, {0xe, 0x5}, {0xa}, {0xd, 0xae}]}]}, {0x0, [0x0]}}, &(0x7f0000000b80)=""/4096, 0xe3, 0x1000, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a40)="1b0000001a000dc4cd36f7b2847a4f7f029e741683c28f7b331c00", 0x1b}], 0x1}, 0x4000000) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x189100) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0x12, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000080)={0x2, 0x0, 0x98, &(0x7f00000004c0)={0x0, 0x100000100000000, 0x11}}) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0xb510c0, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000240)="$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") r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'xfrm0\x00', 0x0}) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000740)=r10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) 1.905919064s ago: executing program 0 (id=270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff}, 0x40, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) (async) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10000, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0c0}, 0x44840) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 1.905670444s ago: executing program 2 (id=271): syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = getpgrp(0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x5, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, r2, 0xffffffffffffffff, r1, 0xb) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @random="7792d99bba25", @dev={0xac, 0x14, 0x14, 0x11}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100, 0x0, 0x0, 0x2, 0x5d7, 0x4}, 0x933bed6f19735007) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x4, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8040, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) 1.898982264s ago: executing program 4 (id=272): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf670000ffffffb0350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f00000001c0)=0x3, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_vs\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000011}) preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000100)=""/201, 0xc9}], 0x1, 0x9, 0x8) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x8000000000000001}, {0x4, 0x7fffffffffffffff, 0x0, 0x7}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@mcast2}}, @algo_aead={0x5e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x90, 0x60, "210466d38547aa140db9a200000000c538c7"}}]}, 0x16c}}, 0x48080) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000200)={&(0x7f0000000180)=[{0x14, 0x2, 0x0, {0xb295, 0x7, 0x1}}, {0x0, 0x2, 0x0, {0x1, 0xfffffffa}}], 0x2, 0x20, 0x6, 0x5}) 0s ago: executing program 2 (id=273): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21081e, &(0x7f0000000340)={[{@commit}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000081b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_ext={0x1c, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000c70000000000000000000000185200000e000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0001000000000000b702217a691c456cff2b0ed2d211547d004116660058200dc9d3725a5000001f63f7", @ANYRES32, @ANYBLOB="000000000700000018270000", @ANYRES32, @ANYBLOB="00000000020000000f4450000400000018180000", @ANYRES32, @ANYBLOB="000000000000000018250000", @ANYRES32, @ANYBLOB="000000000500000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000c80)='GPL\x00', 0xff, 0x3b, &(0x7f0000000cc0)=""/59, 0x20780, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000d40)={0x0, 0x5, 0x9, 0x2}, 0x10, 0x1a8bd, 0xffffffffffffffff, 0x9, &(0x7f0000000d80)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, r1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x3, 0x3, 0x1, 0x6}, {0x0, 0x4, 0x0, 0x4}, {0x4, 0x100, 0x3, 0x7}, {0x2, 0x5, 0x0, 0xa}, {0x7, 0x5, 0x0, 0x1}, {0x4, 0x1, 0xe, 0x6}, {0x5, 0x3, 0xc, 0x48e21ccbbf81d280}, {0x3, 0x2, 0xd, 0xb}, {0x5, 0x1, 0x9, 0xa}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) unshare(0x2a020480) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_config_ext={0x395}, 0x204, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) kernel console output (not intermixed with test programs): [ 24.900831][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 24.900849][ T28] audit: type=1400 audit(1785593975.805:122): avc: denied { write } for pid=3248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.934859][ T28] audit: type=1400 audit(1785593975.845:123): avc: denied { write } for pid=3259 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.717800][ T28] audit: type=1400 audit(1785593976.625:124): avc: denied { write } for pid=3264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.747508][ T28] audit: type=1400 audit(1785593976.655:125): avc: denied { write } for pid=3275 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. [ 32.520687][ T28] audit: type=1400 audit(1785593983.425:126): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.543766][ T28] audit: type=1400 audit(1785593983.455:127): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.545900][ T3285] cgroup: Unknown subsys name 'net' [ 32.571556][ T28] audit: type=1400 audit(1785593983.475:128): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.712274][ T3285] cgroup: Unknown subsys name 'cpuset' [ 32.718570][ T3285] cgroup: Unknown subsys name 'rlimit' [ 32.829521][ T28] audit: type=1400 audit(1785593983.735:129): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.864280][ T28] audit: type=1400 audit(1785593983.735:130): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.885006][ T28] audit: type=1400 audit(1785593983.735:131): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.905490][ T28] audit: type=1400 audit(1785593983.735:132): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.924874][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.925969][ T28] audit: type=1400 audit(1785593983.735:133): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.959459][ T28] audit: type=1400 audit(1785593983.735:134): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.982882][ T28] audit: type=1400 audit(1785593983.775:135): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.010840][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.950128][ T3310] modprobe (3310) used greatest stack depth: 11256 bytes left [ 34.312043][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.319200][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.326449][ T3297] bridge_slave_0: entered allmulticast mode [ 34.333035][ T3297] bridge_slave_0: entered promiscuous mode [ 34.355389][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.362495][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.369714][ T3297] bridge_slave_1: entered allmulticast mode [ 34.376157][ T3297] bridge_slave_1: entered promiscuous mode [ 34.384586][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.391790][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.398919][ T3302] bridge_slave_0: entered allmulticast mode [ 34.405506][ T3302] bridge_slave_0: entered promiscuous mode [ 34.428524][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.435644][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.442801][ T3302] bridge_slave_1: entered allmulticast mode [ 34.449274][ T3302] bridge_slave_1: entered promiscuous mode [ 34.466859][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.490454][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.506902][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.529591][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.552521][ T3297] team0: Port device team_slave_0 added [ 34.573534][ T3297] team0: Port device team_slave_1 added [ 34.612574][ T3302] team0: Port device team_slave_0 added [ 34.618923][ T3302] team0: Port device team_slave_1 added [ 34.630040][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.637211][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.644423][ T3304] bridge_slave_0: entered allmulticast mode [ 34.650927][ T3304] bridge_slave_0: entered promiscuous mode [ 34.657731][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.664732][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.690736][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.713849][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.721036][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.728223][ T3304] bridge_slave_1: entered allmulticast mode [ 34.734694][ T3304] bridge_slave_1: entered promiscuous mode [ 34.741453][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.748543][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.774554][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.810616][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.817669][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.843600][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.858492][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.865633][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.872732][ T3298] bridge_slave_0: entered allmulticast mode [ 34.879014][ T3298] bridge_slave_0: entered promiscuous mode [ 34.886332][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.893479][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.900604][ T3298] bridge_slave_1: entered allmulticast mode [ 34.907117][ T3298] bridge_slave_1: entered promiscuous mode [ 34.914843][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.924285][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.931324][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.957333][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.977081][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.010243][ T3304] team0: Port device team_slave_0 added [ 35.024769][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.035431][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.045390][ T3304] team0: Port device team_slave_1 added [ 35.057678][ T3297] hsr_slave_0: entered promiscuous mode [ 35.063618][ T3297] hsr_slave_1: entered promiscuous mode [ 35.088460][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.095615][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.102761][ T3301] bridge_slave_0: entered allmulticast mode [ 35.109249][ T3301] bridge_slave_0: entered promiscuous mode [ 35.129475][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.136461][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.162490][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.173319][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.180411][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.187646][ T3301] bridge_slave_1: entered allmulticast mode [ 35.194068][ T3301] bridge_slave_1: entered promiscuous mode [ 35.202827][ T3302] hsr_slave_0: entered promiscuous mode [ 35.209040][ T3302] hsr_slave_1: entered promiscuous mode [ 35.214891][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 35.220644][ T3302] Cannot create hsr debugfs directory [ 35.226937][ T3298] team0: Port device team_slave_0 added [ 35.237065][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.244080][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.270103][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.294523][ T3298] team0: Port device team_slave_1 added [ 35.329723][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.336733][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.363348][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.375140][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.382585][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.408503][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.423223][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.446835][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.480671][ T3304] hsr_slave_0: entered promiscuous mode [ 35.486679][ T3304] hsr_slave_1: entered promiscuous mode [ 35.492598][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 35.498402][ T3304] Cannot create hsr debugfs directory [ 35.528167][ T3301] team0: Port device team_slave_0 added [ 35.540885][ T3298] hsr_slave_0: entered promiscuous mode [ 35.547245][ T3298] hsr_slave_1: entered promiscuous mode [ 35.553563][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 35.559308][ T3298] Cannot create hsr debugfs directory [ 35.572540][ T3301] team0: Port device team_slave_1 added [ 35.623887][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.630913][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.656916][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.675495][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.682591][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.708615][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.778622][ T3301] hsr_slave_0: entered promiscuous mode [ 35.784997][ T3301] hsr_slave_1: entered promiscuous mode [ 35.790793][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 35.796653][ T3301] Cannot create hsr debugfs directory [ 35.823478][ T3297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.832544][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.840278][ T3297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.849194][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.866728][ T3297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.875577][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.891037][ T3297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.899908][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.944110][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.952712][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.974237][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.983274][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.991038][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.999891][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.007556][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.016158][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.035488][ T3298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.044002][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.052735][ T3298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.061455][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.070402][ T3298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.079395][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.087087][ T3298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.096175][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.129844][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.138986][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.146916][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.155718][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.164668][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.173610][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.181157][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.189820][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.241851][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.262258][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.270786][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.278555][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.287520][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.295827][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.304223][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.321235][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.330432][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.340723][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.353248][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.374070][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.381184][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.392694][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.399768][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.413075][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.422704][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.433588][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.440665][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.453228][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.460460][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.474333][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.491060][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.515262][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.522360][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.541365][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.554012][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.561117][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.570393][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.577474][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.586333][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.593524][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.661406][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.695025][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.715715][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.723003][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.746394][ T2462] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.753818][ T2462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.945473][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.963098][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.972070][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.984516][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.029669][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.154043][ T3304] veth0_vlan: entered promiscuous mode [ 37.176861][ T3304] veth1_vlan: entered promiscuous mode [ 37.190002][ T3297] veth0_vlan: entered promiscuous mode [ 37.204860][ T3302] veth0_vlan: entered promiscuous mode [ 37.220935][ T3297] veth1_vlan: entered promiscuous mode [ 37.229773][ T3304] veth0_macvtap: entered promiscuous mode [ 37.243753][ T3301] veth0_vlan: entered promiscuous mode [ 37.252175][ T3304] veth1_macvtap: entered promiscuous mode [ 37.259760][ T3302] veth1_vlan: entered promiscuous mode [ 37.274996][ T3297] veth0_macvtap: entered promiscuous mode [ 37.284408][ T3301] veth1_vlan: entered promiscuous mode [ 37.293757][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.301565][ T3297] veth1_macvtap: entered promiscuous mode [ 37.319710][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.328616][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.338625][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.363301][ T3298] veth0_vlan: entered promiscuous mode [ 37.377409][ T3302] veth0_macvtap: entered promiscuous mode [ 37.392653][ T3301] veth0_macvtap: entered promiscuous mode [ 37.401333][ T3298] veth1_vlan: entered promiscuous mode [ 37.410763][ T3302] veth1_macvtap: entered promiscuous mode [ 37.422430][ T111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.433078][ T3301] veth1_macvtap: entered promiscuous mode [ 37.440949][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.459435][ T3298] veth0_macvtap: entered promiscuous mode [ 37.480008][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.490753][ T3298] veth1_macvtap: entered promiscuous mode [ 37.503441][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.504998][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.514550][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.545150][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 37.545219][ T28] audit: type=1400 audit(1785593988.455:155): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.584938][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.593139][ T28] audit: type=1400 audit(1785593988.455:156): avc: denied { open } for pid=3304 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.607155][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.626175][ T28] audit: type=1400 audit(1785593988.455:157): avc: denied { ioctl } for pid=3304 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.653298][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.660813][ T28] audit: type=1400 audit(1785593988.555:158): avc: denied { prog_load } for pid=3503 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.680345][ T28] audit: type=1400 audit(1785593988.555:159): avc: denied { bpf } for pid=3503 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.701147][ T28] audit: type=1400 audit(1785593988.555:160): avc: denied { perfmon } for pid=3503 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.724446][ T28] audit: type=1400 audit(1785593988.555:161): avc: denied { prog_run } for pid=3503 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.743609][ T28] audit: type=1400 audit(1785593988.555:162): avc: denied { create } for pid=3503 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.783655][ T3505] loop1: detected capacity change from 0 to 4096 [ 37.790201][ T28] audit: type=1400 audit(1785593988.585:163): avc: denied { write } for pid=3503 comm="syz.1.2" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 37.850948][ T3505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.873482][ T28] audit: type=1400 audit(1785593988.775:164): avc: denied { mount } for pid=3503 comm="syz.1.2" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.924583][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.943173][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.136961][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.194521][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.292507][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.372787][ T3475] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.401159][ T3522] FAULT_INJECTION: forcing a failure. [ 38.401159][ T3522] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.454849][ T3475] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.659258][ T3522] CPU: 0 UID: 0 PID: 3522 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(lazy) [ 38.659362][ T3522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.659379][ T3522] Call Trace: [ 38.659385][ T3522] [ 38.659393][ T3522] __dump_stack+0x1d/0x30 [ 38.659485][ T3522] dump_stack_lvl+0x95/0xd0 [ 38.659550][ T3522] dump_stack+0x15/0x1b [ 38.659572][ T3522] should_fail_ex+0x25e/0x270 [ 38.659601][ T3522] should_fail+0xb/0x20 [ 38.659687][ T3522] should_fail_usercopy+0x1a/0x20 [ 38.659721][ T3522] _copy_from_user+0x1c/0xb0 [ 38.659796][ T3522] ___sys_sendmsg+0xc1/0x1e0 [ 38.659832][ T3522] __x64_sys_sendmsg+0xd4/0x160 [ 38.659856][ T3522] x64_sys_call+0x194c/0x3020 [ 38.659925][ T3522] do_syscall_64+0x136/0x3c0 [ 38.659950][ T3522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.659970][ T3522] RIP: 0033:0x7f28ec6be019 [ 38.659989][ T3522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.660010][ T3522] RSP: 002b:00007f28eb117028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.660050][ T3522] RAX: ffffffffffffffda RBX: 00007f28ec945fa0 RCX: 00007f28ec6be019 [ 38.660067][ T3522] RDX: 0000000000008080 RSI: 0000200000000000 RDI: 0000000000000003 [ 38.660083][ T3522] RBP: 00007f28eb117090 R08: 0000000000000000 R09: 0000000000000000 [ 38.660097][ T3522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.660109][ T3522] R13: 00007f28ec946038 R14: 00007f28ec945fa0 R15: 00007ffcfce92028 [ 38.660137][ T3522] [ 38.871910][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.911710][ T111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.922708][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.942080][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.980099][ T111] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.999197][ T111] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.009214][ T3529] Zero length message leads to an empty skb [ 39.025432][ T111] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.041805][ T54] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.072863][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.094306][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.161819][ T3475] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.214895][ T3475] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.240980][ T3546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 39.307960][ T3542] hsr0 speed is unknown, defaulting to 1000 [ 39.315159][ T3546] loop3: detected capacity change from 0 to 1024 [ 39.326018][ T3542] hsr0 speed is unknown, defaulting to 1000 [ 39.355937][ T3546] ======================================================= [ 39.355937][ T3546] WARNING: The mand mount option has been deprecated and [ 39.355937][ T3546] and is ignored by this kernel. Remove the mand [ 39.355937][ T3546] option from the mount to silence this warning. [ 39.355937][ T3546] ======================================================= [ 39.404119][ T3542] hsr0 speed is unknown, defaulting to 1000 [ 39.448257][ T3542] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.496170][ T3542] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 39.525562][ T3546] EXT4-fs: Ignoring removed bh option [ 39.552097][ T3546] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 39.584540][ T3542] hsr0 speed is unknown, defaulting to 1000 [ 39.604774][ T3542] hsr0 speed is unknown, defaulting to 1000 [ 39.625038][ T3542] hsr0 speed is unknown, defaulting to 1000 [ 39.634442][ T3542] hsr0 speed is unknown, defaulting to 1000 [ 39.652200][ T3542] hsr0 speed is unknown, defaulting to 1000 [ 39.712485][ T3542] syz.2.10 (3542) used greatest stack depth: 9848 bytes left [ 39.880636][ T3557] loop2: detected capacity change from 0 to 512 [ 39.990459][ T3566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.222955][ T3546] netlink: 'syz.3.11': attribute type 2 has an invalid length. [ 40.293172][ T3557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.307685][ T3566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.371505][ T3557] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.414935][ T3576] FAULT_INJECTION: forcing a failure. [ 40.414935][ T3576] name failslab, interval 1, probability 0, space 0, times 1 [ 40.447920][ T3576] CPU: 0 UID: 0 PID: 3576 Comm: syz.1.17 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.448010][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.448022][ T3576] Call Trace: [ 40.448028][ T3576] [ 40.448035][ T3576] __dump_stack+0x1d/0x30 [ 40.448059][ T3576] dump_stack_lvl+0x95/0xd0 [ 40.448083][ T3576] dump_stack+0x15/0x1b [ 40.448117][ T3576] should_fail_ex+0x25e/0x270 [ 40.448202][ T3576] should_failslab+0x8c/0xb0 [ 40.448226][ T3576] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 40.448252][ T3576] ? __alloc_skb+0x2db/0x6f0 [ 40.448321][ T3576] ? __alloc_skb+0x2db/0x6f0 [ 40.448366][ T3576] __alloc_skb+0x2db/0x6f0 [ 40.448399][ T3576] ? __alloc_skb+0x205/0x6f0 [ 40.448498][ T3576] netlink_alloc_large_skb+0xbf/0xf0 [ 40.448604][ T3576] netlink_sendmsg+0x40c/0x6f0 [ 40.448678][ T3576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.448712][ T3576] ____sys_sendmsg+0x532/0x580 [ 40.448732][ T3576] ___sys_sendmsg+0x195/0x1e0 [ 40.448762][ T3576] __x64_sys_sendmsg+0xd4/0x160 [ 40.448789][ T3576] x64_sys_call+0x194c/0x3020 [ 40.448862][ T3576] do_syscall_64+0x136/0x3c0 [ 40.448893][ T3576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.448919][ T3576] RIP: 0033:0x7f275e52e019 [ 40.448983][ T3576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.449006][ T3576] RSP: 002b:00007f275cf87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.449032][ T3576] RAX: ffffffffffffffda RBX: 00007f275e7b5fa0 RCX: 00007f275e52e019 [ 40.449118][ T3576] RDX: 0000000000008080 RSI: 0000200000000000 RDI: 0000000000000003 [ 40.449130][ T3576] RBP: 00007f275cf87090 R08: 0000000000000000 R09: 0000000000000000 [ 40.449143][ T3576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.449154][ T3576] R13: 00007f275e7b6038 R14: 00007f275e7b5fa0 R15: 00007fff57e56cd8 [ 40.449177][ T3576] [ 41.693064][ T3583] loop3: detected capacity change from 0 to 256 [ 42.560189][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 42.560265][ T28] audit: type=1326 audit(1785593992.995:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3556 comm="syz.2.14" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f341ac1e019 code=0x7ffc0000 [ 42.690823][ T3593] loop3: detected capacity change from 0 to 128 [ 42.706336][ T3591] hsr0 speed is unknown, defaulting to 1000 [ 42.721939][ T28] audit: type=1326 audit(1785593992.995:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3556 comm="syz.2.14" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341ac1e019 code=0x7ffc0000 [ 42.793333][ T28] audit: type=1326 audit(1785593992.995:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3556 comm="syz.2.14" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341ac1e019 code=0x7ffc0000 [ 42.830058][ T28] audit: type=1326 audit(1785593993.095:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3556 comm="syz.2.14" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f341ac1e019 code=0x7ffc0000 [ 42.959221][ T28] audit: type=1326 audit(1785593993.095:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3556 comm="syz.2.14" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341ac1e019 code=0x7ffc0000 [ 42.997843][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.031079][ T3599] loop0: detected capacity change from 0 to 8192 [ 43.038459][ T3599] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.050082][ T28] audit: type=1326 audit(1785593993.095:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3556 comm="syz.2.14" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341ac1e019 code=0x7ffc0000 [ 43.088103][ T3599] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 43.096296][ T3599] FAT-fs (loop0): Filesystem has been set read-only [ 43.119932][ T28] audit: type=1326 audit(1785593993.195:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3556 comm="syz.2.14" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f341ac1e019 code=0x7ffc0000 [ 43.156014][ T3599] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 43.171415][ T3599] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 43.180386][ T3599] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 43.188467][ T28] audit: type=1326 audit(1785593993.195:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3556 comm="syz.2.14" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341ac1e019 code=0x7ffc0000 [ 43.226750][ T3599] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 43.243088][ T3599] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 43.258643][ T3599] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 43.266722][ T28] audit: type=1326 audit(1785593993.195:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3556 comm="syz.2.14" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341ac1e019 code=0x7ffc0000 [ 43.294361][ T3599] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 43.302835][ T3599] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 43.315712][ T3599] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 43.335432][ T28] audit: type=1326 audit(1785593993.295:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3588 comm="syz.2.14" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f341abde84e code=0x7ffc0000 [ 43.364732][ T3618] loop1: detected capacity change from 0 to 8192 [ 43.388988][ T3618] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 43.419911][ T3614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 43.421199][ T3618] FAT-fs (loop1): Filesystem has been set read-only [ 43.437994][ T3614] hsr_slave_0: left promiscuous mode [ 43.458032][ T3618] syz.1.29 uses obsolete (PF_INET,SOCK_PACKET) [ 43.466193][ T3614] hsr_slave_1: left promiscuous mode [ 43.857457][ T3632] loop1: detected capacity change from 0 to 512 [ 43.873283][ T3632] EXT4-fs (loop1): blocks per group (8192) and clusters per group (11) inconsistent [ 44.028253][ T3640] loop3: detected capacity change from 0 to 8192 [ 44.137680][ T3646] loop1: detected capacity change from 0 to 8192 [ 46.074229][ T3660] netlink: 34 bytes leftover after parsing attributes in process `syz.1.43'. [ 46.357132][ T3660] netlink: 48 bytes leftover after parsing attributes in process `syz.1.43'. [ 47.108359][ T3660] loop1: detected capacity change from 0 to 128 [ 47.115428][ T3660] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.288778][ T3666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3666 comm=syz.3.44 [ 47.472869][ T3678] loop0: detected capacity change from 0 to 512 [ 47.557556][ T3678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.574739][ T3678] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.667951][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 47.668049][ T28] audit: type=1400 audit(1785593998.575:305): avc: denied { watch } for pid=3697 comm="syz.2.55" path="/proc/27" dev="proc" ino=4857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 47.676235][ T3698] netlink: 'syz.2.55': attribute type 13 has an invalid length. [ 47.696572][ T28] audit: type=1400 audit(1785593998.575:306): avc: denied { connect } for pid=3697 comm="syz.2.55" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.740597][ T28] audit: type=1400 audit(1785593998.645:307): avc: denied { bind } for pid=3700 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.786177][ T28] audit: type=1400 audit(1785593998.675:308): avc: denied { setopt } for pid=3700 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.908739][ T23] hsr0 speed is unknown, defaulting to 1000 [ 48.041992][ T28] audit: type=1326 audit(1785593998.895:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.0.48" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de960e019 code=0x7ffc0000 [ 48.228846][ T28] audit: type=1326 audit(1785593998.895:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.0.48" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de960e019 code=0x7ffc0000 [ 49.210322][ T28] audit: type=1326 audit(1785593998.905:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.0.48" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4de960e019 code=0x7ffc0000 [ 49.235843][ T28] audit: type=1326 audit(1785593998.905:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.0.48" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de960e019 code=0x7ffc0000 [ 49.634062][ T28] audit: type=1326 audit(1785593998.905:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.0.48" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de960e019 code=0x7ffc0000 [ 49.745091][ T28] audit: type=1326 audit(1785593998.905:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.0.48" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4de960e019 code=0x7ffc0000 [ 49.808072][ T3719] veth1_to_bond: Caught tx_queue_len zero misconfig [ 50.069413][ T3727] Config c/1 of g_uac2 needs at least one function. [ 50.103844][ T3727] udc usbip-vudc.0: failed to start g_uac2: -22 [ 50.134843][ T3727] configfs-gadget.g_uac2 gadget.0: probe with driver configfs-gadget.g_uac2 failed with error -22 [ 50.186836][ T3727] UDC core: g_uac2: couldn't find an available UDC or it's busy [ 50.217076][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.368424][ T3737] loop0: detected capacity change from 0 to 512 [ 50.396442][ T3737] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.489852][ T3737] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 50.536024][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.551676][ T3690] loop3: detected capacity change from 0 to 4096 [ 50.592834][ T3740] loop1: detected capacity change from 0 to 4096 [ 50.664641][ T3740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.734419][ T3746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 50.761834][ T3746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.69'. [ 50.805994][ T3746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 50.834621][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.850928][ T3746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.69'. [ 50.870821][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.901640][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.917304][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.017483][ T3750] loop3: detected capacity change from 0 to 8192 [ 51.106416][ T3754] loop4: detected capacity change from 0 to 1764 [ 51.114093][ T3750] loop3: p1 < > p3 < p5 > p4 [ 51.151873][ T3750] loop3: p4 size 33557760 extends beyond EOD, truncated [ 51.159681][ T3750] loop3: p5 size 33557760 extends beyond EOD, truncated [ 51.474399][ T3760] loop4: detected capacity change from 0 to 764 [ 51.482186][ T3760] iso9660: Bad value for 'gid' [ 51.487004][ T3760] iso9660: Bad value for 'gid' [ 51.515978][ T3760] hsr0 speed is unknown, defaulting to 1000 [ 51.585388][ T3760] netlink: 20 bytes leftover after parsing attributes in process `syz.4.73'. [ 51.594586][ T3760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.73'. [ 51.690421][ T3761] loop4: detected capacity change from 0 to 512 [ 51.702167][ T3761] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 51.718273][ T3761] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 51.726386][ T3761] System zones: 1-12 [ 51.731710][ T3761] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.740079][ T3761] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.73: invalid indirect mapped block 12 (level 1) [ 51.753257][ T3761] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.753896][ T3761] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.73: invalid indirect mapped block 2 (level 2) [ 51.763234][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 51.763255][ C0] EXT4-fs (loop4): initial error at time 1785594002: ext4_free_branches:1023: inode 11 [ 51.763310][ C0] EXT4-fs (loop4): last error at time 1785594002: ext4_free_branches:1023: inode 11 [ 51.804150][ T3761] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.805878][ T3761] EXT4-fs (loop4): 1 truncate cleaned up [ 51.825750][ T3761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 51.975957][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.054446][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 52.097433][ T3778] FAULT_INJECTION: forcing a failure. [ 52.097433][ T3778] name failslab, interval 1, probability 0, space 0, times 0 [ 52.116687][ T3779] loop0: detected capacity change from 0 to 512 [ 52.124626][ T3778] CPU: 0 UID: 0 PID: 3778 Comm: syz.1.77 Not tainted syzkaller #0 PREEMPT(lazy) [ 52.124700][ T3778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.124789][ T3778] Call Trace: [ 52.124798][ T3778] [ 52.124808][ T3778] __dump_stack+0x1d/0x30 [ 52.124837][ T3778] dump_stack_lvl+0x95/0xd0 [ 52.124857][ T3778] dump_stack+0x15/0x1b [ 52.124880][ T3778] should_fail_ex+0x25e/0x270 [ 52.124973][ T3778] should_failslab+0x8c/0xb0 [ 52.125052][ T3778] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 52.125087][ T3778] ? __alloc_skb+0x2db/0x6f0 [ 52.125119][ T3778] ? __alloc_skb+0x2db/0x6f0 [ 52.125149][ T3778] ? avc_has_perm+0x101/0x190 [ 52.125303][ T3778] __alloc_skb+0x2db/0x6f0 [ 52.125331][ T3778] ? __alloc_skb+0x205/0x6f0 [ 52.125419][ T3778] netlink_alloc_large_skb+0xbf/0xf0 [ 52.125443][ T3778] netlink_sendmsg+0x40c/0x6f0 [ 52.125471][ T3778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.125504][ T3778] ____sys_sendmsg+0x532/0x580 [ 52.125552][ T3778] ___sys_sendmsg+0x195/0x1e0 [ 52.125614][ T3778] __x64_sys_sendmsg+0xd4/0x160 [ 52.125643][ T3778] x64_sys_call+0x194c/0x3020 [ 52.125667][ T3778] do_syscall_64+0x136/0x3c0 [ 52.125758][ T3778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.125786][ T3778] RIP: 0033:0x7f275e52e019 [ 52.125806][ T3778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.125880][ T3778] RSP: 002b:00007f275cf87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.125905][ T3778] RAX: ffffffffffffffda RBX: 00007f275e7b5fa0 RCX: 00007f275e52e019 [ 52.125924][ T3778] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000004 [ 52.125976][ T3778] RBP: 00007f275cf87090 R08: 0000000000000000 R09: 0000000000000000 [ 52.126054][ T3778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.126069][ T3778] R13: 00007f275e7b6038 R14: 00007f275e7b5fa0 R15: 00007fff57e56cd8 [ 52.126090][ T3778] [ 52.330332][ T3779] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 52.342096][ T3779] EXT4-fs (loop0): group descriptors corrupted! [ 52.495870][ T3795] loop1: detected capacity change from 0 to 512 [ 52.512120][ T3795] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.531683][ T3795] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.545305][ T3795] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 52.591690][ T3795] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 52.718264][ T3795] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 52.728752][ T3795] System zones: 0-2, 18-18, 34-35 [ 52.742168][ T3795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.830357][ T3735] loop2: detected capacity change from 0 to 512 [ 52.839923][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 52.839949][ T28] audit: type=1400 audit(1785594003.755:365): avc: denied { bind } for pid=3793 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.867244][ T3806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.82'. [ 52.895322][ T3735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.973466][ T28] audit: type=1400 audit(1785594003.885:366): avc: denied { setattr } for pid=3793 comm="syz.1.82" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.008129][ T3795] EXT4-fs (loop1): shut down requested (2) [ 53.023971][ T3735] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.119549][ T3810] netlink: 60 bytes leftover after parsing attributes in process `syz.0.85'. [ 53.190173][ T3735] Quota error (device loop2): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 53.219872][ T28] audit: type=1400 audit(1785594003.945:367): avc: denied { read } for pid=2964 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 53.264454][ T3735] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 53.398006][ T3735] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.65: Failed to acquire dquot type 0 [ 53.468223][ T28] audit: type=1400 audit(1785594003.945:368): avc: denied { search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.585906][ T28] audit: type=1400 audit(1785594003.945:369): avc: denied { write search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.673602][ T3833] FAULT_INJECTION: forcing a failure. [ 53.673602][ T3833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.690369][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.720433][ T28] audit: type=1400 audit(1785594003.945:370): avc: denied { add_name } for pid=2964 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.757972][ T3833] CPU: 0 UID: 0 PID: 3833 Comm: syz.0.91 Not tainted syzkaller #0 PREEMPT(lazy) [ 53.758005][ T3833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.758021][ T3833] Call Trace: [ 53.758029][ T3833] [ 53.758039][ T3833] __dump_stack+0x1d/0x30 [ 53.758140][ T3833] dump_stack_lvl+0x95/0xd0 [ 53.758163][ T3833] dump_stack+0x15/0x1b [ 53.758224][ T3833] should_fail_ex+0x25e/0x270 [ 53.758260][ T3833] should_fail+0xb/0x20 [ 53.758303][ T3833] should_fail_usercopy+0x1a/0x20 [ 53.758331][ T3833] _copy_from_iter+0xcc/0xe70 [ 53.758384][ T3833] ? __alloc_skb+0x511/0x6f0 [ 53.758415][ T3833] ? __alloc_skb+0x205/0x6f0 [ 53.758443][ T3833] netlink_sendmsg+0x4a4/0x6f0 [ 53.758533][ T3833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.758639][ T3833] ____sys_sendmsg+0x532/0x580 [ 53.758740][ T3833] ___sys_sendmsg+0x195/0x1e0 [ 53.758770][ T3833] __x64_sys_sendmsg+0xd4/0x160 [ 53.758821][ T3833] x64_sys_call+0x194c/0x3020 [ 53.758908][ T3833] do_syscall_64+0x136/0x3c0 [ 53.758986][ T3833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.759070][ T3833] RIP: 0033:0x7f4de960e019 [ 53.759090][ T3833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.759119][ T3833] RSP: 002b:00007f4de8067028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.759142][ T3833] RAX: ffffffffffffffda RBX: 00007f4de9895fa0 RCX: 00007f4de960e019 [ 53.759155][ T3833] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000004 [ 53.759233][ T3833] RBP: 00007f4de8067090 R08: 0000000000000000 R09: 0000000000000000 [ 53.759249][ T3833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.759314][ T3833] R13: 00007f4de9896038 R14: 00007f4de9895fa0 R15: 00007fff14e91c58 [ 53.759334][ T3833] [ 53.972402][ T28] audit: type=1400 audit(1785594003.945:371): avc: denied { create } for pid=2964 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.031447][ T28] audit: type=1400 audit(1785594003.945:372): avc: denied { append open } for pid=2964 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.232209][ T3847] netlink: 60 bytes leftover after parsing attributes in process `syz.4.97'. [ 54.268292][ T3847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.97'. [ 54.382961][ T3735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.527562][ T3864] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.616115][ T3864] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 54.643515][ T3864] FAT-fs (loop0): Filesystem has been set read-only [ 54.814602][ T3881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.856806][ T3881] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.906579][ T3886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 54.960603][ T3886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.106'. [ 54.973613][ T3886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 54.982642][ T3886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.106'. [ 55.011018][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.029430][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.064141][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.068080][ T3875] syz.3.102: attempt to access beyond end of device [ 55.068080][ T3875] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 55.092576][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.109540][ T3875] syz.3.102: attempt to access beyond end of device [ 55.109540][ T3875] loop3: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 55.174936][ T3875] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 55.263736][ T3896] process 'syz.2.108' launched './file0' with NULL argv: empty string added [ 55.282294][ T3896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.290203][ T3896] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.299003][ T3896] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.320124][ T3875] syz.3.102: attempt to access beyond end of device [ 55.320124][ T3875] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 55.422873][ T3896] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.108: Allocating blocks 41-42 which overlap fs metadata [ 55.529822][ T3896] loop2: lost filesystem error report for type 5 error -117 [ 55.530395][ T3896] EXT4-fs (loop2): Remounting filesystem read-only [ 55.537788][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 55.537809][ C0] EXT4-fs (loop2): initial error at time 1785594006: ext4_mb_mark_diskspace_used:4222 [ 55.537827][ C0] EXT4-fs (loop2): last error at time 1785594006: ext4_mb_mark_diskspace_used:4222 [ 55.580383][ T3875] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 55.606673][ T3900] netlink: 'syz.4.109': attribute type 2 has an invalid length. [ 55.682717][ T3875] syz.3.102: attempt to access beyond end of device [ 55.682717][ T3875] loop3: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 55.733610][ T3896] EXT4-fs (loop2): 1 truncate cleaned up [ 55.742780][ T3896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.849490][ T3896] syzkaller0: entered allmulticast mode [ 56.316902][ T3913] set_capacity_and_notify: 4 callbacks suppressed [ 56.316923][ T3913] loop4: detected capacity change from 0 to 8192 [ 57.282484][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.297472][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.319806][ T3913] loop4: p1 < > p3 < p5 > p4 [ 57.407902][ T3919] loop3: detected capacity change from 0 to 1764 [ 57.483106][ T3925] __nla_validate_parse: 2 callbacks suppressed [ 57.483144][ T3925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 57.503360][ T3926] netlink: 68 bytes leftover after parsing attributes in process `syz.2.116'. [ 57.603758][ T3913] loop4: p4 size 33557760 extends beyond EOD, truncated [ 57.616452][ T3925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.118'. [ 57.695801][ T3913] loop4: p5 size 33557760 extends beyond EOD, truncated [ 57.918489][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 57.929812][ T3569] udevd[3569]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 57.940978][ T3768] udevd[3768]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 57.959776][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 58.337039][ T3941] loop2: detected capacity change from 0 to 128 [ 58.355640][ T3941] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.369692][ T3941] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.457745][ T12] tipc: Subscription rejected, illegal request [ 58.465378][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 58.465391][ T28] audit: type=1400 audit(1785594009.365:438): avc: denied { connect } for pid=3940 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.495117][ T28] audit: type=1400 audit(1785594009.395:439): avc: denied { read } for pid=3940 comm="syz.2.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.521161][ T3925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 58.552121][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.566572][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.600455][ T3925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.118'. [ 58.611841][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.624284][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.679286][ T28] audit: type=1400 audit(1785594009.585:440): avc: denied { module_request } for pid=3948 comm="syz.2.123" kmod="rtnl-link-bridge_slave" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 58.713924][ T3949] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.850395][ T3961] loop1: detected capacity change from 0 to 512 [ 58.851541][ T28] audit: type=1400 audit(1785594009.755:441): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 58.908805][ T3961] EXT4-fs (loop1): blocks per group (11) and clusters per group (8192) inconsistent [ 58.959884][ T3969] loop2: detected capacity change from 0 to 8192 [ 59.028521][ T3966] loop4: detected capacity change from 0 to 4096 [ 59.042105][ T28] audit: type=1400 audit(1785594009.945:442): avc: denied { setattr } for pid=3972 comm="syz.1.135" name="netstat" dev="proc" ino=4026532757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 59.047525][ T3973] vlan2: entered promiscuous mode [ 59.084274][ T3973] batadv0: entered promiscuous mode [ 59.084824][ T3966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.105152][ T3969] loop2: p1 < > p3 < p5 > p4 [ 59.124642][ T3969] loop2: p4 size 33557760 extends beyond EOD, truncated [ 59.141523][ T3969] loop2: p5 size 33557760 extends beyond EOD, truncated [ 59.180688][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.240547][ T3991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 59.250438][ T3991] netlink: 'syz.4.136': attribute type 7 has an invalid length. [ 59.298638][ T3991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'. [ 59.331142][ T3997] loop0: detected capacity change from 0 to 512 [ 59.336949][ T3991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 59.346388][ T30] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.355559][ T3991] netlink: 'syz.4.136': attribute type 7 has an invalid length. [ 59.364119][ T3991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'. [ 59.380814][ T3997] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 59.392693][ T54] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.401848][ T54] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.421308][ T54] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.456990][ T3999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'. [ 59.520385][ T28] audit: type=1400 audit(1785594010.425:443): avc: denied { create } for pid=3998 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 59.529662][ T4002] loop4: detected capacity change from 0 to 512 [ 59.554806][ T4002] EXT4-fs (loop4): bad geometry: first data block is 0 with a 1k block and cluster size [ 59.668697][ T4007] loop0: detected capacity change from 0 to 4096 [ 59.701010][ T4007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.765582][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.838488][ T28] audit: type=1400 audit(1785594010.745:444): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 59.907828][ T28] audit: type=1400 audit(1785594010.805:445): avc: denied { bind } for pid=4024 comm="syz.2.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.928716][ T4030] loop3: detected capacity change from 0 to 512 [ 59.943377][ T4030] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 59.973066][ T4035] netlink: 'syz.4.153': attribute type 7 has an invalid length. [ 60.005006][ T4035] netlink: 'syz.4.153': attribute type 7 has an invalid length. [ 60.019425][ T4044] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.048572][ T4044] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 60.071588][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 60.078072][ C0] EXT4-fs (loop3): initial error at time 1785594010: ext4_mb_generate_buddy:1317 [ 60.087271][ C0] EXT4-fs (loop3): last error at time 1785594010: ext4_mb_generate_buddy:1317 [ 60.098158][ T4044] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 60.111415][ T4044] EXT4-fs (loop3): 1 truncate cleaned up [ 60.118158][ T4044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.132942][ T4030] Cannot find add_set index 0 as target [ 60.214374][ T4047] loop0: p1 < > p3 < p5 > p4 [ 60.234111][ T4047] loop0: p4 size 33557760 extends beyond EOD, truncated [ 60.255326][ T4047] loop0: p5 size 33557760 extends beyond EOD, truncated [ 60.266500][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.462045][ T4064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.546706][ T28] audit: type=1400 audit(1785594011.445:446): avc: denied { getopt } for pid=4065 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.613863][ T28] audit: type=1400 audit(1785594011.515:447): avc: denied { mount } for pid=4065 comm="syz.3.165" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 60.642247][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.753474][ T4092] netlink: 'syz.4.168': attribute type 7 has an invalid length. [ 60.762609][ T4066] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.769926][ T4066] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.845919][ T4099] 9p: Bad value for 'rfdno' [ 61.008350][ T4066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.020160][ T4066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.077268][ T4070] geneve2: entered promiscuous mode [ 61.091172][ T4092] netlink: 'syz.4.168': attribute type 7 has an invalid length. [ 61.103340][ T36] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.123713][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.137888][ T36] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 59907 - 0 [ 61.165202][ T36] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.187275][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.196684][ T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 59907 - 0 [ 61.206145][ T36] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.242892][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.253819][ T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 59907 - 0 [ 61.263780][ T36] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.273116][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.282647][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 59907 - 0 [ 61.292561][ T4134] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 61.322451][ T4129] set_capacity_and_notify: 3 callbacks suppressed [ 61.322470][ T4129] loop0: detected capacity change from 0 to 4096 [ 61.364670][ T4133] loop4: detected capacity change from 0 to 8192 [ 61.376244][ T4129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.422421][ T4133] loop4: p1 < > p3 < p5 > p4 [ 61.436043][ T4133] loop4: p4 size 33557760 extends beyond EOD, truncated [ 61.459105][ T4133] loop4: p5 size 33557760 extends beyond EOD, truncated [ 61.468256][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.830549][ T4167] loop1: detected capacity change from 0 to 1024 [ 61.838950][ T4167] EXT4-fs: Ignoring removed orlov option [ 61.892807][ T4167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.965228][ T4175] loop0: detected capacity change from 0 to 4096 [ 62.007299][ T4175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.075881][ T4176] hub 8-0:1.0: USB hub found [ 62.081285][ T4176] hub 8-0:1.0: 8 ports detected [ 62.083695][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.140414][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.258294][ T4204] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20004 [ 62.266321][ T4196] loop1: detected capacity change from 0 to 8192 [ 62.323508][ T4196] loop1: p1 < > p3 < p5 > p4 [ 62.329680][ T4196] loop1: p4 size 33557760 extends beyond EOD, truncated [ 62.350962][ T4196] loop1: p5 size 33557760 extends beyond EOD, truncated [ 62.425383][ T4213] loop0: detected capacity change from 0 to 512 [ 62.499208][ T4213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.593047][ T4213] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.521698][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 64.521764][ T28] audit: type=1326 audit(1785594014.845:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.0.206" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de960e019 code=0x7ffc0000 [ 64.761636][ T28] audit: type=1326 audit(1785594014.845:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.0.206" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de960e019 code=0x7ffc0000 [ 65.467656][ T28] audit: type=1326 audit(1785594014.985:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.0.206" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4de960e019 code=0x7ffc0000 [ 65.515610][ T28] audit: type=1326 audit(1785594014.985:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.0.206" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de960e019 code=0x7ffc0000 [ 65.625182][ T4227] tap0: tun_chr_ioctl cmd 3223385353 [ 65.633191][ T28] audit: type=1326 audit(1785594014.985:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.0.206" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de960e019 code=0x7ffc0000 [ 65.663761][ T28] audit: type=1326 audit(1785594015.085:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4212 comm="syz.0.206" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4de960e019 code=0x7ffc0000 [ 65.711849][ T4227] tap0: tun_chr_ioctl cmd 1074025678 [ 65.717421][ T4227] tap0: group set to 0 [ 65.811867][ T4233] loop1: detected capacity change from 0 to 512 [ 65.840869][ T4233] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.873284][ T4233] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 65.940987][ T4231] loop4: detected capacity change from 0 to 4096 [ 65.989664][ T4240] loop1: detected capacity change from 0 to 256 [ 66.050887][ T4231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.066763][ T28] audit: type=1400 audit(1785594016.975:477): avc: denied { name_bind } for pid=4241 comm="syz.3.216" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 66.301310][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.373275][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.435345][ T28] audit: type=1400 audit(1785594017.345:478): avc: denied { read } for pid=4256 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 66.525715][ T4258] loop1: detected capacity change from 0 to 4096 [ 66.662340][ T4258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.829592][ T4264] loop0: detected capacity change from 0 to 4096 [ 66.917840][ T4264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.979495][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.108839][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.277364][ T4269] IPVS: length: 89 != 24 [ 67.429487][ T28] audit: type=1400 audit(1785594018.335:479): avc: denied { create } for pid=4268 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.573974][ T28] audit: type=1400 audit(1785594018.485:480): avc: denied { create } for pid=4275 comm="syz.0.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.675047][ T4284] loop4: detected capacity change from 0 to 512 [ 67.704606][ T4284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.727662][ T4282] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:62023 [ 67.749908][ T4284] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.602989][ T4292] loop2: detected capacity change from 0 to 4096 [ 68.636305][ T4292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.708498][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.754307][ T4304] loop3: detected capacity change from 0 to 512 [ 68.802941][ T4304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 68.909857][ T4304] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.234: Unimplemented hash flags: 0x0001 [ 68.933172][ T4304] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.234: Corrupt directory, running e2fsck is recommended [ 69.026303][ T4317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=4317 comm=syz.3.234 [ 69.098616][ T4321] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 69.148917][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.204777][ T4326] loop3: detected capacity change from 0 to 512 [ 69.233946][ T4326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.323956][ T4326] mmap: syz.3.238 (4326) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 69.390144][ T4329] loop1: detected capacity change from 0 to 512 [ 69.423330][ T4329] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 69.498325][ T4262] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.509759][ T4329] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.520775][ T4329] block device autoloading is deprecated and will be removed. [ 69.532742][ T4329] EXT4-fs (loop1): couldn't read superblock of external journal [ 69.764712][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 59907 - 0 [ 69.872409][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.884700][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 69.884714][ T28] audit: type=1400 audit(1785594020.795:516): avc: denied { ioctl } for pid=4344 comm="syz.0.246" path="socket:[7898]" dev="sockfs" ino=7898 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 69.931973][ T28] audit: type=1400 audit(1785594020.835:517): avc: denied { create } for pid=4344 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 69.951823][ T28] audit: type=1400 audit(1785594020.835:518): avc: denied { ioctl } for pid=4344 comm="syz.0.246" path="socket:[7900]" dev="sockfs" ino=7900 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 69.981287][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 59907 - 0 [ 69.991808][ T28] audit: type=1400 audit(1785594020.835:519): avc: denied { ioctl } for pid=4344 comm="syz.0.246" path="socket:[7901]" dev="sockfs" ino=7901 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.049669][ T4350] loop4: detected capacity change from 0 to 512 [ 70.064140][ T4350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.110378][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 59907 - 0 [ 70.146473][ T4350] EXT4-fs (loop4): Online resizing not supported with sparse_super2 [ 70.169547][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 59907 - 0 [ 70.180195][ T28] audit: type=1400 audit(1785594021.085:520): avc: denied { write } for pid=4349 comm="syz.4.247" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.201959][ T28] audit: type=1400 audit(1785594021.085:521): avc: denied { create } for pid=4349 comm="syz.4.247" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 70.223729][ T28] audit: type=1400 audit(1785594021.085:522): avc: denied { write } for pid=4349 comm="syz.4.247" name=E91F7189591E9233614B dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 70.253231][ T4366] veth0: entered promiscuous mode [ 70.327834][ T4346] hsr0 speed is unknown, defaulting to 1000 [ 70.434964][ T28] audit: type=1400 audit(1785594021.345:523): avc: denied { read write } for pid=4374 comm="syz.0.251" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 70.472896][ T28] audit: type=1400 audit(1785594021.345:524): avc: denied { open } for pid=4374 comm="syz.0.251" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 70.513733][ T36] bridge_slave_1: left allmulticast mode [ 70.519480][ T36] bridge_slave_1: left promiscuous mode [ 70.531517][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.540691][ T28] audit: type=1400 audit(1785594021.455:525): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 70.576405][ T36] bridge_slave_0: left allmulticast mode [ 70.582325][ T36] bridge_slave_0: left promiscuous mode [ 70.591075][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.652668][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.670306][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.686361][ T36] bond0 (unregistering): Released all slaves [ 70.749192][ T36] hsr_slave_0: left promiscuous mode [ 70.755029][ T36] hsr_slave_1: left promiscuous mode [ 70.763440][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.779652][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.824544][ T36] team0 (unregistering): Port device team_slave_1 removed [ 70.842286][ T36] team0 (unregistering): Port device team_slave_0 removed [ 70.865493][ T4399] loop2: detected capacity change from 0 to 8192 [ 70.893313][ T4399] loop2: p1[EZD] p3 p4 [ 70.902622][ T4399] loop2: p3 start 150994944 is beyond EOD, truncated [ 70.914599][ T4399] loop2: p4 size 50331648 extends beyond EOD, truncated [ 70.959114][ T4395] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.026973][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.037471][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.091392][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 71.104855][ T4349] veth0: left promiscuous mode [ 71.110108][ T4082] hsr0 speed is unknown, defaulting to 1000 [ 71.122412][ T4082] syz2: Port: 1 Link DOWN [ 71.127400][ T3475] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.150041][ T3475] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.160329][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.221741][ T3475] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.232853][ T3475] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.261260][ T3475] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.271119][ T3475] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.280581][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.287752][ T4346] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.294999][ T4346] bridge_slave_0: entered allmulticast mode [ 71.301666][ T4346] bridge_slave_0: entered promiscuous mode [ 71.311203][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.318410][ T4346] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.326534][ T4346] bridge_slave_1: entered allmulticast mode [ 71.337911][ T4346] bridge_slave_1: entered promiscuous mode [ 71.353820][ T4408] cgroup: Unknown subsys name 'pcr' [ 71.367523][ T4346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.397962][ T4346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.417548][ T4408] netlink: 'syz.2.255': attribute type 14 has an invalid length. [ 71.454112][ T4420] loop0: detected capacity change from 0 to 512 [ 71.456772][ T4408] __nla_validate_parse: 13 callbacks suppressed [ 71.456812][ T4408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'. [ 71.468016][ T4346] team0: Port device team_slave_0 added [ 71.503277][ T30] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.525498][ T30] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.553863][ T4420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.579731][ T4346] team0: Port device team_slave_1 added [ 71.580845][ T4420] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.601410][ T4426] loop2: detected capacity change from 0 to 8192 [ 71.631629][ T4346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.638745][ T4346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.664819][ T4346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.676243][ T4346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.696340][ T4346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.747509][ T4346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.753265][ T4426] loop2: p1 p2 p4 < > [ 71.775491][ T4426] loop2: partition table partially beyond EOD, truncated [ 71.783306][ T4426] loop2: p1 start 100663296 is beyond EOD, truncated [ 71.788524][ T4408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.790073][ T4426] loop2: p2 size 590592 extends beyond EOD, truncated [ 71.792811][ T4426] loop2: p4 start 117440516 is beyond EOD, truncated [ 71.987469][ T3993] udevd[3993]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 72.877476][ T4346] hsr_slave_0: entered promiscuous mode [ 72.889494][ T4346] hsr_slave_1: entered promiscuous mode [ 72.905296][ T4346] debugfs: 'hsr0' already exists in 'hsr' [ 72.917285][ T4346] Cannot create hsr debugfs directory [ 73.010132][ T4449] loop4: detected capacity change from 0 to 1024 [ 73.023158][ T4449] EXT4-fs: Ignoring removed orlov option [ 73.056403][ T4449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.071887][ T4449] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 73.087503][ T4449] System zones: 0-1, 3-36 [ 73.099408][ T4449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.113412][ T4346] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.125885][ T4346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.135343][ T4346] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 73.145284][ T4346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.153301][ T4346] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 73.162314][ T4346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.170052][ T4346] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 73.178991][ T4346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.205241][ T4452] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.263: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 73.276425][ T4346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.300980][ T4346] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.401390][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 73.408813][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.428045][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.435200][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.445438][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.452551][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.561209][ T4481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 73.568542][ T4481] IPv6: NLM_F_CREATE should be set when creating new route [ 73.575789][ T4481] IPv6: NLM_F_CREATE should be set when creating new route [ 73.583049][ T4481] IPv6: NLM_F_CREATE should be set when creating new route [ 73.595819][ T4481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 73.605613][ T4481] netlink: 56 bytes leftover after parsing attributes in process `syz.0.267'. [ 73.670392][ T4346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.742300][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.831995][ T4516] loop1: detected capacity change from 0 to 512 [ 73.909971][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 73.992584][ T4346] veth0_vlan: entered promiscuous mode [ 74.002506][ T4346] veth1_vlan: entered promiscuous mode [ 74.019803][ T4346] veth0_macvtap: entered promiscuous mode [ 74.031085][ T4346] veth1_macvtap: entered promiscuous mode [ 74.045686][ T4346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.057680][ T4346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.636212][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 75.654844][ T4549] loop2: detected capacity change from 0 to 512 [ 75.682258][ T4082] ================================================================== [ 75.690383][ T4082] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 75.697424][ T4082] [ 75.699750][ T4082] read-write to 0xffff888237c2a8e4 of 4 bytes by task 4111 on cpu 0: [ 75.707829][ T4082] wq_worker_running+0x9b/0x120 [ 75.712696][ T4082] schedule_timeout+0xca/0x180 [ 75.717467][ T4082] msleep+0x4f/0x90 [ 75.721289][ T4082] nsim_fib_event+0x4996/0x4dc0 [ 75.726147][ T4082] nsim_fib_event_work+0x133/0x200 [ 75.731277][ T4082] process_scheduled_works+0x4d4/0x9a0 [ 75.736744][ T4082] worker_thread+0x569/0x750 [ 75.741347][ T4082] kthread+0x221/0x270 [ 75.745418][ T4082] ret_from_fork+0x146/0x330 [ 75.750024][ T4082] ret_from_fork_asm+0x1a/0x30 [ 75.754792][ T4082] [ 75.757114][ T4082] read to 0xffff888237c2a8e4 of 4 bytes by task 4082 on cpu 1: [ 75.764661][ T4082] kick_pool+0x49/0x2d0 [ 75.768828][ T4082] __queue_work+0x8e9/0xb90 [ 75.773339][ T4082] queue_work_on+0xa9/0x140 [ 75.777858][ T4082] process_srcu+0xa39/0xd90 [ 75.782379][ T4082] process_scheduled_works+0x4d4/0x9a0 [ 75.787940][ T4082] worker_thread+0x569/0x750 [ 75.792551][ T4082] kthread+0x221/0x270 [ 75.796629][ T4082] ret_from_fork+0x146/0x330 [ 75.801230][ T4082] ret_from_fork_asm+0x1a/0x30 [ 75.806014][ T4082] [ 75.808338][ T4082] value changed: 0x00000000 -> 0x00000001 [ 75.814105][ T4082] [ 75.816434][ T4082] Reported by Kernel Concurrency Sanitizer on: [ 75.822584][ T4082] CPU: 1 UID: 0 PID: 4082 Comm: kworker/1:13 Not tainted syzkaller #0 PREEMPT(lazy) [ 75.832056][ T4082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.842119][ T4082] Workqueue: rcu_gp process_srcu [ 75.847079][ T4082] ================================================================== [ 75.862580][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.889457][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 75.889473][ T28] audit: type=1400 audit(1785594026.795:570): avc: denied { mounton } for pid=4346 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.892458][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.922661][ T4549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.940552][ T4549] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.962026][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.986368][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.234025][ T28] audit: type=1326 audit(1785594027.105:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.2.273" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341ac1e019 code=0x7ffc0000 [ 76.262805][ T28] audit: type=1326 audit(1785594027.105:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.2.273" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341ac1e019 code=0x7ffc0000 [ 76.288753][ T28] audit: type=1326 audit(1785594027.105:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.2.273" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f341ac1e019 code=0x7ffc0000 [ 76.314445][ T28] audit: type=1326 audit(1785594027.105:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.2.273" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341ac1e019 code=0x7ffc0000 [ 76.340362][ T28] audit: type=1326 audit(1785594027.105:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.2.273" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341ac1e019 code=0x7ffc0000 [ 76.368279][ T28] audit: type=1326 audit(1785594027.105:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.2.273" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f341ac1e019 code=0x7ffc0000 [ 76.411591][ T28] audit: type=1326 audit(1785594027.115:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.2.273" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341ac1e019 code=0x7ffc0000 [ 76.437322][ T28] audit: type=1326 audit(1785594027.115:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.2.273" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341ac1e019 code=0x7ffc0000 [ 76.475147][ T28] audit: type=1326 audit(1785594027.115:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4548 comm="syz.2.273" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f341ac1e019 code=0x7ffc0000 [ 77.576036][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.