last executing test programs: 17m28.463474001s ago: executing program 1 (id=145): r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f0000000040)=0x1e) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) socket$kcm(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x33, 0x39, 0x62, 0x64, 0x39, 0x64, 0x33, 0x32, 0x35, 0x64, 0x63, 0x33, 0x61, 0x39, 0x34, 0x30]}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r2, 0xa018) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x2b, 0x80801, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, 0x0, 0x20000000) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8c, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x78, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @opaque="dff98c8d"}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="0100", 0x2}], 0x1}, 0x240448c1) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/9, 0x9}], 0x1}, 0x40000040) r7 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000007b8000"/28], 0x50) 17m27.179261249s ago: executing program 1 (id=152): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00') preadv(r7, &(0x7f0000000100)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, 0x200000, 0x0) sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f"}, 0xd) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x10000010000000, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 17m26.195165539s ago: executing program 1 (id=155): r0 = semget(0x2, 0x1, 0x22a) semop(r0, &(0x7f0000000000)=[{0x3, 0xf}, {0x4, 0xe0, 0x800}, {0x1, 0x8}, {0x4, 0xa, 0x800}, {0x0, 0x400, 0x1000}, {0x4, 0x2, 0x400}, {0x4, 0x9, 0x1800}, {0x3, 0x6, 0x1800}, {0x4, 0x7fff, 0x800}], 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b9000000010001000900000009"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000006ff"], 0x14}, 0x1, 0x0, 0x0, 0x4040880}, 0x840) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x9, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000005000400000000000900020073797a30000000001400090008000600000000000807d144d6b9df87a05c3af668b400134000000fff05000500060000000d000300686173683a6d616300"/105], 0x5c}, 0x1, 0x0, 0x0, 0x48004}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xbf8a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0x4, 0x0, &(0x7f0000000040)="110d516f", 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) timer_create(0x2, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r4, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0xd33, 0x2) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000200)={0x2, 0x0, 0x98, &(0x7f0000000140)={0x3, 0x45b, 0x11}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r6, r6, 0x2f, 0x0, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r7, 0x0, 0x0}, 0x10) timer_delete(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$netlink(0x10, 0x3, 0x0) r8 = memfd_secret(0x0) inotify_add_watch(r8, &(0x7f00000000c0)='./file0\x00', 0x20000503) 17m24.963794577s ago: executing program 1 (id=158): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x6f) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000240)={0x6, 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x3110d1, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x80101c, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6f5}, 0x0, 0x7, 0x0, 0x0, 0x13ffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='(pu&00\t||') 17m24.619053998s ago: executing program 1 (id=162): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socketpair(0x21, 0x6, 0x800, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000002dc0)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x1, 0x4, 0x0, {0xa, 0x4e24, 0x7f, @mcast2}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="1f856f4a9e8e53f2b0e8cef173aef7ef2e6fd85aea91215375162d918bd1210d1d3adc0eee4fb5a6e39e0e5aaff5f4287fc082cc2f55251b5b672cf09168523b5b53c6e8a0dfa5ff20839394ada23676e8421365fe8ff61dc4f9becf998ecb7bb37bc1d956c15c0fa71382602861a40f5ffd8c6ff747f2193742c1974621a680d7c839ec8f03fbc0edee050ba95113", 0x8f}, {&(0x7f0000000880)="9bf8a62aef510a20f18a666321698be4f92426765ed446315de9d12f47e40a38b190df23dde5996b232d893e9e63b79d902476af2a60b6afafadcc36edd304c3476654c255e3150d80eb39ee60a77d407c8313db782a80190da6e691f10a0d5a1d02d131756e096774f535b34df9676cb3d769b5edc8fe8403cf70cfa8718a547484bc6ecee321bc34e0f6ff34969295eb149bcd590a0e95f647ea8598e8b64e4db1de3311f023882b96cd97cb3fb5b3a0303b4cdad5c9da433cb8f4bd536ab43e9dfcacc15e3951863b1daaef9735076f1858cc526120265805f95fe8e585096ffbf139be3545b675cba91bfb709a34de54f7d7b45c2d1b06ab", 0xfa}, {&(0x7f0000000980)="b1715384780f0e3f05c83b95912ae075bba1b05bc568ca951ff383043f3a2fa7cf9cc94a6bfa1f92b4eaf74ad45cb4224a3f95cf51f142d04ce3237829184e8d92ad659d6765b95703d58acef9cb25aa99da88e662bf559ed6f700a7c0ca2e4a348d205081d602610dc30f9c1087c6edcd25f5be8a0ce40bd977afbb47f4d5340d7b67b43a6fa5aff11ae87d6eb54fa67aaa53ca801be6ce0843d7208144980a161ad6423ab97aff9a136ddcd9879f278861a43d16dd0eebfba1828232f564a8de0424073b22f0a52af49b381f498c84ddd8d9ffdd2b509e72470743f9e914991d070e625aa9791fc8774eb8", 0xec}, {&(0x7f0000002e00)="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", 0xbf0}, {&(0x7f0000003e40)="98e71e5cfb19953195c691dc5d8cde839c2509192c2226b3681f39d1d60df9f4174fc25f90f1ed8c5e1d57d5ab13d2b3730cccc4f4d6e2c5b9da76f62ab6f89cfeaeafa864b7b0179db12e356107b0ff764c05b47351cccba7cf73998d183ef127f2b3e6a6da2c8fc976b94b51768c30a0fdc4b233302a6230ffc63d2957f3c6bf0f9392e3ffe0ae2226b50f69645243d256ee22d7cb6f2e3bf73d959043a839d43275fa60c4e9d278219f7f0a84f245acf126f4c150f59d8b5031db85e5", 0xbe}, {0x0}, {&(0x7f0000003f40)="d45cedc2f82293f896246f79dd16b70029ad7185a37ee73ae714e844d46828239bda74a8cb", 0x25}, {&(0x7f0000000a80)="bbca00c033ff098553b00d92a7c466d1d42424a1b6dde684818cc89419592ff1741bb7c34570909675c108e335a8b9b90f452c1aaba9c81e181e3de7887444e473f10efbecd9e86f8e24f3972cf4ab39a791442a25f10195c90d04ba5219e9abff8e19c60640a3101b819249e9479043786d393f160342bcebbf4fd2e5725d3e84148e4f4cd4b378d326dce164e2c8836fc315691dfaa52cf10ed5d248a7bb1de41edb9ef1763da7116c47e2bf187b78603e9c", 0xb3}], 0x8}, 0x41) r4 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r5 = dup(r4) r6 = memfd_create(&(0x7f0000002600)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00x\xdd\x02', 0x0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) copy_file_range(r6, 0x0, r5, 0x0, 0x7, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x4f8, 0xffffffff, 0xffffffff, 0x4f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0xff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x4, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x400, 0x0, 'queue1\x00'}) write$sndseq(r9, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 17m24.287634017s ago: executing program 1 (id=164): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000020000100000000000000000001"], 0x34}}, 0x0) 17m24.179390911s ago: executing program 32 (id=164): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000020000100000000000000000001"], 0x34}}, 0x0) 9m46.62286211s ago: executing program 2 (id=2537): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6, 0x3, 0x0, 0x7fff0026}]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xe190816}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r2, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @private0}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_NET_NS_FD={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x10008001) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x300, 0x70bd26, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) syz_usbip_server_init(0x1) 9m46.007244929s ago: executing program 2 (id=2540): socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000000, 0x2, 0xff, 0xa, 0x8, 0xd}, 0x20) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x100) ioctl$BLKCRYPTOGENERATEKEY(r2, 0xc030128a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r4 = io_uring_setup(0x4af1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_io_uring_setup(0x466e, &(0x7f0000000500)={0x0, 0xd830, 0x8000, 0x2, 0x289, 0x0, r4}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) r7 = socket$netlink(0x10, 0x3, 0x14) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000700), 0x1, 0x579, &(0x7f00000007c0)="$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") sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000d80)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a320000000008004100736977001400330073797a6b616c6c657230000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x99, &(0x7f0000001440)={@link_local, @local, @void, {@llc_tr={0x11, {@snap={0x1fe, 0x1, "3412", "9d9ce0", 0x886c, "eae7ee4e7be9800805765df28534b5504fc65eca2d16fcc44ef70a2cacbd56fcb702b283e9162a2f0bef6045710bb7168cfb66ae7e1b73ce098bf0238ceed21c686b21104865504cd72402de8359744042583b90453682bc146cfb81b4422d5d57e08543145a54597ec6b914969e4e7badc3531a404443e3c24f4e9cb8b020529e7e"}}}}}, 0x0) 9m45.232529483s ago: executing program 2 (id=2553): socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000000, 0x2, 0xff, 0xa, 0x8, 0xd}, 0x20) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x9, 0x100) ioctl$BLKCRYPTOGENERATEKEY(r2, 0xc030128a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r4 = io_uring_setup(0x4af1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_io_uring_setup(0x466e, &(0x7f0000000500)={0x0, 0xd830, 0x8000, 0x2, 0x289, 0x0, r4}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) r7 = socket$netlink(0x10, 0x3, 0x14) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000700), 0x1, 0x579, &(0x7f00000007c0)="$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") sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000d80)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a320000000008004100736977001400330073797a6b616c6c657230000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x99, &(0x7f0000001440)={@link_local, @local, @void, {@llc_tr={0x11, {@snap={0x1fe, 0x1, "3412", "9d9ce0", 0x886c, "eae7ee4e7be9800805765df28534b5504fc65eca2d16fcc44ef70a2cacbd56fcb702b283e9162a2f0bef6045710bb7168cfb66ae7e1b73ce098bf0238ceed21c686b21104865504cd72402de8359744042583b90453682bc146cfb81b4422d5d57e08543145a54597ec6b914969e4e7badc3531a404443e3c24f4e9cb8b020529e7e"}}}}}, 0x0) 9m44.065020258s ago: executing program 2 (id=2556): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0x3) fstat(r0, &(0x7f00000002c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x22020600) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000040)={r2, 0x9, 0x2}, &(0x7f0000000080)=0x8) prctl$PR_SVE_SET_VL(0x32, 0x22f92) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000180)={r7, @in6={{0xa, 0x4e22, 0x1000002, @empty, 0x19}}, 0x7, 0x8000}, 0x90) 9m43.134069986s ago: executing program 2 (id=2559): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000076000d0b0000000000000000030000000000000008000500", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, 0x0, 0x0) listen(r1, 0xfffff252) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'bridge0\x00', {0x2, 0x4e21, @multicast1}}) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[], 0x1ac}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) 9m42.806611396s ago: executing program 2 (id=2563): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) unshare(0x6020400) acct(&(0x7f0000000040)='./file0\x00') unshare(0x26020480) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x52cc) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="94010000100001002dbd700000000000ff020000000000000000000000000001ac141411000000000000000000000000fffeecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x44050) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) pwrite64(r3, &(0x7f0000005c80)="a9", 0x1, 0xc00000) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 9m42.806178756s ago: executing program 33 (id=2563): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) unshare(0x6020400) acct(&(0x7f0000000040)='./file0\x00') unshare(0x26020480) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x52cc) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="94010000100001002dbd700000000000ff020000000000000000000000000001ac141411000000000000000000000000fffeecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x44050) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) pwrite64(r3, &(0x7f0000005c80)="a9", 0x1, 0xc00000) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) 58.286905644s ago: executing program 6 (id=5528): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, r0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000007f180100002200000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000bf03000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getgroups(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) sendmsg$netlink(r1, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000001f40)=ANY=[], 0x218}], 0x1, 0x0, 0x0, 0x4000804}, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x7, 0x7, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000040)={0x80, 0x6, 0x300, 0xfbfe, 0x0, 0x4, 0x0}) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r5, 0xc040583f, &(0x7f0000000300)={{@_ha_fsid={[0x5, 0x4]}, {0x7, 0x5, 0x9, 0x1}}, {{[0x65d0, 0x1, 0x1, 0x9]}, 0x0, 0x0, 0x81, 0x0, &(0x7f00000001c0)=[{{@_ha_fsid={[0x5, 0x5]}, {0x4, 0xffff, 0xf, 0x2}}, 0x4, 0x0, ']\x00'}, {{@_ha_fsid={[0x3, 0x5]}, {0x1, 0x7ff, 0xffff, 0x1}}, 0x7, 0x0, '/dev/sg#\x00'}, {{@align=0x401, {0x2, 0x0, 0x1, 0x9}}, 0x4, 0x0, '/dev/bus/usb/00#/00#\x00'}, {{@_ha_fsid={[0x5, 0x8]}, {0x2, 0x663, 0x7, 0x2f38}}, 0x2, 0x0, '/dev/bus/usb/00#/00#\x00'}, {{@align=0x5, {0x7, 0x6, 0x8, 0xffffffffffffffff}}, 0x80, 0x0, '\x00'}]}}) 58.026782291s ago: executing program 6 (id=5532): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x7fff, 0x1, 0x0, 'queue1\x00', 0xe}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x145080, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r2, &(0x7f00000001c0)="91fa82e7c827d5d1c122fb042654837252a1a84d2ec0f9761cafe7bb6e0fc3771f88bb670da8e6e91259ff7a830c4b2f50ec8494f69ec05bfca0c015e875998b96bce8519c769829534332ef8fb70e2fa6d0446be27a3a52267b1b83648a", &(0x7f0000000440)=""/151}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000006c0001"], 0x34}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) sendmsg$nl_generic(r6, 0x0, 0x24000005) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r8, 0x4734}}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0xff, 0x4b4, &(0x7f0000000c80)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x7}, 0x112000, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0xf2, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001240)=[{&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f0000001140)=""/216, 0xd8}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) 57.301878533s ago: executing program 6 (id=5546): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000006c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x2, 0x3a, '\\x\x06\x00\x00\xe2\x03\x82c\xc0I\x8cf\xaa\v`?7JM\x9f\xfdv\xd4!M \xcfp\xfa0\x9e\x0e\xbev\b\x12\x00\x00\x00\x00\x00\x00\x00\x00\xf4\x02\xb0\xa4\x8fiNe\x0fZ\xc3\x9d\x1b\x83u\x82o\xeb%\xaf\x94\x8e\x8ez\x85\xd5\xfb\xf5\xecl\xcb\x94\x98T~\x0e\x9c\xb6\"\xc3\xd6\x9d\x17$\x1b&\xea', 0x3a, '2\x94\x8cero=|\x8b8\x00[\xfa!\xac2\xae\x0fi\xbaT`\xfa\xd3W\xe7\xdc/\x85\xa6a\xec<\xf1\xfd\xb1\xa7\xc3\xd8\xef}\f\xfc\xc9\xda|9\xc3\xb3\xb9LS\xca\xe2&\x83;\x19\xda\xb97\x8e\xeb@\xfa\xc7\xc9\xf6\xb2\xfbQ2\xee\xba]\xfc\xd7\x17-/\x94\xc5\x94\xa7\x04V\x9d\xec\x10\x16\xdfz\xde\xcc\x8b-&\xb0\x14J\xd3\xa9\x95\x83A~\xfd\x10\xa8\x88#\x18\'Qg\xb9\x9b\xfc,\xb2\a\xf1eO\r$\xe2l!rNW\xd3\xf7t:\xda\x8cpYx\x1dB*\xb4e\x85\x1ez\xb4', 0x3a, '.'}, 0x113) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$inet6(0xa, 0x802, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r9}, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000300)) sendmmsg$inet6(r7, &(0x7f0000001840), 0x3b, 0xc00) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x578, &(0x7f0000000940)="$eJzs3V1rFNcbAPBnNonGl//fCCJtKSXgRS3WjUn6YqGgvSytVGjv7ZKMQbJxJbsRkwrqRb3pTZFCKRVKP0Dveyn9Av0UQitIkdBe9CZlNrO6Jtm8rBt3dX8/GD1nZjbPnJ05Z56Z2WUD6Fuj2T+FiFcj4tsk4lDTssHIF46urrf86PpUNiWxsvL5X0kk+bzG+kn+/4G88kpE/PZ1xInC+rjVxaXZUrmczuf1sdrclbHq4tLJS3OlmXQmvTwxOXn63cmJD95/r2Ntfev8Pz98du/j098cW/7+lweH7yRxNg7my5rb8QxuNldGYzR/T4bi7JoVxzsQrJck3d4A2jKQ9/OhyMaAQzGQ93rg5XcjIlaAPpXo/9CnGnlA49q+Q9fBL4yHH61eAK1v/+DqvZEYrl8b7V9Onroyyq53RzoQP4vx659372RTbHEf4kYH4gE03LwVEacGB9ePf0k+/rXvVP3m8ebWxui38w90070s/3l7o/yn8Dj/iQ3ynwMb9N12bN3/Cw86EKalLP/7cMP89/HQNTKQ1/5Xz/mGkouXyumpiPh/RByPob1ZfbPnOaeX76+0Wtac/2VTFr+RC+bb8WBw79OvmS7VSs/S5mYPb0W89iT/TWLd+D9cz3XX7v/s/Ti/zRhH07tvtFq2dfubdT4DXvk54s0N9/+TJ1rJ5s8nx+rHw1jjqFjv79tHf28Vf2ft77xs/+/fvP0jSfPz2urOY/w0/G/aalm7x/+e5It6eU8+71qpVpsfj9iTfLp+/sST1zbqjfWz9h8/tvn4t9Hxvy8ivtxm+28fud1y1V7Y/9M72v87L9z/5KsfW8Xf3v5/p146ns/Zzvi33Q18lvcOAAAAAAAAek0hIg5GUig+LhcKxeLq5zuOxP5CuVKtnbhYWbg8HfXvyo7EUKHxpPtQ0+chxvPPwzbqE2vqkxFxOCK+G9hXrxenKuXpbjceAAAAAAAAAAAAAAAAAAAAesSBFt//z/wx0O2tA3adn/yG/rVl/+/ELz0BPcn5H/rXTvr/624KwEvF+R/6l/4P/Uv/h/61k/4/vIvbATx/zv/Qv/R/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6Kjz585l08ryo+tTWX366uLCbOXqyem0OlucW5gqTlXmrxRnKpWZclqcqsxt9ffKlcqV8YlYuDZWS6u1seri0oW5ysLl2oVLc6WZ9EI69FxaBQAAAAAAAAAAAAAAAAAAAC+W6uLSbKlcTucVWhbORE9sRtuFZKu9fCY/GNoKMdj9BirsQqHLAxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPkvAAD//3itM+4=") socket$nl_route(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000040), 0x208e24b) 53.673259521s ago: executing program 6 (id=5556): syz_io_uring_setup(0x111, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_complete(0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'hsr0\x00', 0x1000}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES16], 0x21, 0x28f, &(0x7f0000000600)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101940, 0x100) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) 53.38205672s ago: executing program 6 (id=5560): r0 = fsopen(&(0x7f0000000200)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080010000400000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r1}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r1}, 0x38) (async) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x1, 0x1) (async, rerun: 32) getdents64(r3, 0x0, 0x22) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x20) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x1, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r6 = semget$private(0x0, 0x6, 0x0) (rerun: 64) semtimedop(r6, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) (async) semop(r6, &(0x7f00000000c0)=[{0x3, 0x0, 0x800}, {0x2}], 0x2) (async, rerun: 32) semop(r6, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2) (async, rerun: 32) semtimedop(r6, &(0x7f0000000000)=[{0x3, 0x0, 0x800}, {0x4, 0x5}], 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040854}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000f80)=@generic={0x0, r7}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) (async) fchown(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) 53.196845306s ago: executing program 6 (id=5562): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) (async) read$msr(r2, &(0x7f0000000d40)=""/43, 0x2b) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) pwrite64(r3, &(0x7f0000005c80)="a9", 0x1, 0xc00000) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000140)={{0x71, 0xbb}, {0x3}, 0x4, 0x0, 0x4}) (async) openat(r3, &(0x7f0000000000)='./file0\x00', 0x30000, 0xc0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) 53.176188306s ago: executing program 34 (id=5562): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) (async) read$msr(r2, &(0x7f0000000d40)=""/43, 0x2b) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) pwrite64(r3, &(0x7f0000005c80)="a9", 0x1, 0xc00000) (async) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000140)={{0x71, 0xbb}, {0x3}, 0x4, 0x0, 0x4}) (async) openat(r3, &(0x7f0000000000)='./file0\x00', 0x30000, 0xc0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) 6.589771954s ago: executing program 4 (id=5802): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, 0x0, &(0x7f0000000280)) io_uring_setup(0x2624, &(0x7f0000000800)={0x0, 0xfffffffc}) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888847", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.585967224s ago: executing program 0 (id=5804): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000200000000020000200000000900000000060015000a0000000c00168008000100bc"], 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (fail_nth: 1) 6.335362542s ago: executing program 0 (id=5806): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x1, 0x4fb, &(0x7f0000000540)="$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") r0 = creat(&(0x7f0000000e40)='./bus\x00', 0x19) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) fallocate(r0, 0x0, 0xbf5, 0x2000402) r2 = getpid() sched_setaffinity(r2, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x4, 0x6, 0xfffffffffe000001}) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100000005, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x410d, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xb) r4 = getpid() setpgid(0x0, 0x0) tkill(0x0, 0x7) wait4(0x0, 0x0, 0x0, 0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32=r6], 0x50) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff) fchdir(0xffffffffffffffff) 5.764071008s ago: executing program 4 (id=5809): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)=0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) (async) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffff, 0xff}, 0x106200, 0x10004, 0x20db, 0x9, 0xa, 0x20005, 0x2676, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$rds(0xffffffffffffffff, 0x0, 0x815) (async) sendmsg$rds(0xffffffffffffffff, 0x0, 0x815) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) setregid(0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000000640)="c0dd72d603d5afd09b324fe9e5eb5c35d53fffbf133bdf3b4e71ee2a3d2d2845544ee11c66ed9f08353a91caef94de0bca52fd81388f65588d0171278672d7bb29d985fbd9339cc96eefae3cbaa3b2027b8a3f08d08e436815f2f3ae880192c59328644fd799cd2b28219da2cea9d6ec0bc5a8b1b7a51ea1a909a9ebe221f8970fed4bf90a0edce5254fc07489be1bc04a8a102b8a1dc7ae3a454980f9a83cffacd433350466dcde3953551a97608d14fbaa68c11de8247be6f9784b755ba7b5bcaaacda97ac51a43f0e5b6ee2ea0f04800599312eefa9a90c6f5f6d1e4ac90b3ccc990a669fd6c2b0f45fa7c38f3337ae8edae63fdb164c7b7c3a3f", 0xfc}, {&(0x7f0000000740)="8c10dd5145c1d51ab3e6f140d6ff66d09d5ab63d278d96fbe435fc9e320258b0ac329279f9ba0d8fee43ff2b075c2bd91682f019ef31355b840fe257562fe1dd6fa404c0a706b2c276f8210d2f2df84a3c8b810a8f99c52a503ae14f21022dc7a2d74d8d89d4ecaf8814554ee366141434be33ecc5473d0b9716b31bee786a481cffd29a4c0a9f160fe3f0979524ecb0f0e0151a3811df", 0x97}], 0x3, &(0x7f0000000d00), 0x0, 0xd1}, 0x84) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000000640)="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", 0xfc}, {&(0x7f0000000740)="8c10dd5145c1d51ab3e6f140d6ff66d09d5ab63d278d96fbe435fc9e320258b0ac329279f9ba0d8fee43ff2b075c2bd91682f019ef31355b840fe257562fe1dd6fa404c0a706b2c276f8210d2f2df84a3c8b810a8f99c52a503ae14f21022dc7a2d74d8d89d4ecaf8814554ee366141434be33ecc5473d0b9716b31bee786a481cffd29a4c0a9f160fe3f0979524ecb0f0e0151a3811df", 0x97}], 0x3, &(0x7f0000000d00), 0x0, 0xd1}, 0x84) write$binfmt_format(r7, &(0x7f00000003c0)='1\x00', 0x2) (async) write$binfmt_format(r7, &(0x7f00000003c0)='1\x00', 0x2) 5.507132646s ago: executing program 4 (id=5813): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000100), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000090000000060a01040000000000c8b8000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000c080003400000003b08000440000000220500020007000000300001800c00010062697477697365002000028008000340000000040800014000000014080002400000001204000780090001"], 0x104}}, 0x2000810) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x32}}, {0x12, 0x1, 0x0, @broadcast}}}}}, 0x0) syz_emit_ethernet(0x122, &(0x7f0000000b40)=ANY=[@ANYBLOB="ffffffffffff42e17dbe6edb8100000086dd6000000000e83c0020010000000000000000000000000000ff0200000000000000000000000000018404000000000000c910fe"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a020000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000804}, 0x28000) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xda23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0) 4.459713717s ago: executing program 4 (id=5820): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r0, 0x400, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x7c}}, 0x400d0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000010101020000000000050800084000000401"], 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x1022e0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000180)={0x7}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000500)={&(0x7f00000001c0), &(0x7f0000000440)=""/136, 0x88}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x5, 0x4}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffd, 0x2}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000040000500000a5c000000090a010400000000200000000a0000040900010073797a310000000008000540000000020900020073797a310000000008010a40fffffffc200011801e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014a08b"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f8}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xfff3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b01"], 0x28}, 0x4004004) 3.114388127s ago: executing program 4 (id=5822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000100)={0x5, 0x5, 0xfffffffffffffffd, 0x0, 0x800, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x1000000000000000, 0x3}, 0x0, 0x0) shutdown(r1, 0x1) tgkill(r0, r0, 0x33) ptrace(0x10, r0) sched_setscheduler(r0, 0x6, &(0x7f0000000080)=0x100) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x2, 0x0, 0x5, 0xa7, 0xff, 0x0, 0x7, 0xbe, 0xa, 0x4, 0x8, 0x0, 0xf, 0x1}, 0xe) syz_open_dev$sg(0x0, 0x0, 0x9840) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) creat(&(0x7f0000000080)='./bus\x00', 0x154) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 3.114000357s ago: executing program 5 (id=5823): capset(&(0x7f0000019340)={0x20071026}, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x80, 0xffffffff, 0xe}) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002fff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e54f8f", 0x48}], 0x1}, 0x4000300) 3.03100065s ago: executing program 5 (id=5825): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000d80), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000064"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x8, 0x401, 0x0, @local, @remote, 0xffc7, 0x8000, 0x7fff, 0x5}}) r6 = fsmount(0xffffffffffffffff, 0x1, 0x100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES8=r2, @ANYRESDEC=r0, @ANYRES32=r6, @ANYBLOB="03000000000000000400"/28], 0x50) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r5) socket$inet(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r8}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r11 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803f5, 0x1, 0x800}) 2.998565001s ago: executing program 0 (id=5826): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 2.572568394s ago: executing program 0 (id=5827): syz_open_dev$evdev(0x0, 0x2, 0x482002) socket$key(0xf, 0x3, 0x2) socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='(pu&0&\t)|') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x181080) close(0x3) 1.34904982s ago: executing program 7 (id=5829): r0 = socket(0x10, 0x2, 0x0) write(r0, 0x0, 0x0) 1.334645131s ago: executing program 7 (id=5830): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1.267501713s ago: executing program 7 (id=5831): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280)) io_uring_setup(0x2624, &(0x7f0000000800)={0x0, 0xfffffffc}) socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888847", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.231374133s ago: executing program 5 (id=5832): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000eaf6ffff000000000a00000091118ed30500000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, @void, @value=0x89}, 0x94) 1.213650784s ago: executing program 5 (id=5833): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x16002, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x6}, {0xfff1, 0xffff}, {0xd, 0x3f}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) (async) syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x16002, 0x0) (async) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x6}, {0xfff1, 0xffff}, {0xd, 0x3f}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 535.343504ms ago: executing program 4 (id=5835): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_clone(0x80080000, 0x0, 0x1f, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000240)='fdinfo/3\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x8c187a909c1168b3, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004000) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r3, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r6, 0x2, {0x2, 0xff, 0x3}, 0xfe}, 0x18) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f00000007c0)={0x14, &(0x7f00000006c0)={0x20, 0x21, 0x2, {0x2, 0xc}}, 0x0}, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) getsockopt$bt_hci(r7, 0x0, 0x1, 0x0, &(0x7f0000001200)) r8 = socket$kcm(0x11, 0x3, 0x0) syz_emit_ethernet(0x1ce, &(0x7f0000000d00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021001983a00fc000000000000000000000000000000ff0200000000000000000000000000010401907800000000608bb91d00001100fe8000000000000000000000000000aafe8800000000000000000000000000010000100000000000002b0000000000000502ffff0103000000009da17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3"], 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r9, 0x5408, &(0x7f0000000040)={0x2, 0x1e00, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000240)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)}, 0x802) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x0, 0x268, 0xa, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}}}, @inet=@rpfilter={{0x20}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x1d}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) 489.606805ms ago: executing program 0 (id=5836): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1300000011143dcf0000000000000000080001000000000008004b0028"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) 466.799517ms ago: executing program 7 (id=5837): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/201, 0xc9}], 0x1, 0x9, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) (async) syz_clone(0xb21c0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r4, &(0x7f0000001040)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f36006e090890e0878f0e1ac6e7f89b334d959b4a9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07630936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000400000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617679314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec230911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918c91243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac5a4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4b333bd5bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3be3b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ce0700c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d486046b2c0e2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29c60acebdbe8ddbd75c2f998d8a57f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95ff80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513007000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d946a2daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810300000000000000a12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf000000800000000007b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0e797e8bd1f4108b7807fb36207685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ad50dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b9048017848416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1db44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de9c0587c2cb5fe36d7d3e5db21b013b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cf4b23329072e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06810002000000000000957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f3e90d5943dbc10360a1a49700d1dfbf66d69f6fbafe1e83cdde8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000100", 0x35e}}, 0x1006) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x80000}) (async) r5 = socket$kcm(0x10, 0x400000002, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f00000000c0)=0x14) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='fd', 0x0, r7) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1c, 0x9, 0xc83, 0x7, 0x10218, r0, 0x3b9, '\x00', r6, r0, 0x2, 0x5, 0x3, 0x0, @void, @value, @value=r7}, 0x50) (async) write$cgroup_subtree(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091ef"], 0xfe33) (async) mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0xd7, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x200200000000004, 0x9}) (async) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r9, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x100, @multicast2}, 0x10, 0x0}}], 0x1, 0x8014) (async) getsockname$llc(r9, 0x0, &(0x7f0000000240)) (async) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) 399.358999ms ago: executing program 3 (id=5838): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') dup(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 399.162079ms ago: executing program 5 (id=5839): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x5, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0xbc, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x4c, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0x0, 0x1, 0x7, {0x19, 0x2, 0x8000, 0x3, 0x7}, {0x5, 0x1, 0xedf3, 0xfffa, 0xa9, 0xffffff00}, 0x91, 0x10001, 0x2}}]}, @TCA_FW_INDEV={0x0, 0x3, 'wg1\x00'}]}}, @filter_kind_options=@f_fw={{0x7}, {0x3c}}]}, 0xbc}, 0x1, 0xf2ff000000000000, 0x0, 0x24041091}, 0x0) 384.057568ms ago: executing program 0 (id=5840): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2550, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffff7f, 0x6}, 0x8100, 0x10004, 0x30da, 0x1, 0xa, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000100), 0x0, 0x20040040) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x37) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x12a080, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r9 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000640)={0x1}) connect$unix(r6, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @remote}, 0x80, r5}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8936, &(0x7f0000000000)) 334.81823ms ago: executing program 3 (id=5841): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000800), 0x0) 314.336181ms ago: executing program 5 (id=5842): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000d80), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000064"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x8, 0x401, 0x0, @local, @remote, 0xffc7, 0x8000, 0x7fff, 0x5}}) r6 = fsmount(0xffffffffffffffff, 0x1, 0x100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES8=r2, @ANYRESDEC=r0, @ANYRES32=r6, @ANYBLOB="03000000000000000400"/28], 0x50) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r5) socket$inet(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r8}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r11 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803f5, 0x1, 0x800}) 243.517333ms ago: executing program 3 (id=5843): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 200.282645ms ago: executing program 3 (id=5844): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xa, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000ff0300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0xfffffffffffffffb, 0xfffffffffffffffd, 0xfffffffffffffffd}) writev(r1, 0x0, 0x0) 160.237955ms ago: executing program 7 (id=5845): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x10060) 79.418168ms ago: executing program 3 (id=5846): syz_emit_ethernet(0x9f7, &(0x7f0000000900)={@remote, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x9c1, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0xf, 0xd, "f53222cc3490379e69a90c48390eb36f80a05e6e5a36bc92fdbca7557c9df38d3e8fdf3ba93c5d8d1589696f7a050003c54e44c864c179a7ededfeeecda1370cc99b74fe885aab74bc5ae1ed428c19a3e10d78dc228da2178fbb8d2741feb8c793ad0ecb231b59a065"}, {0x19, 0x127, "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"}]}}}}}}, 0x0) syz_emit_ethernet(0x9f7, &(0x7f0000000900)={@remote, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x9c1, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0xf, 0xd, "f53222cc3490379e69a90c48390eb36f80a05e6e5a36bc92fdbca7557c9df38d3e8fdf3ba93c5d8d1589696f7a050003c54e44c864c179a7ededfeeecda1370cc99b74fe885aab74bc5ae1ed428c19a3e10d78dc228da2178fbb8d2741feb8c793ad0ecb231b59a065"}, {0x19, 0x127, "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"}]}}}}}}, 0x0) (async) 21.638959ms ago: executing program 7 (id=5847): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x8, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x4000010, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048091}, 0x4000000) ioctl$SIOCSIFHWADDR(r0, 0x8910, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000080) sendto$inet6(r1, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f00030089", 0x1f, 0x880, 0x0, 0x0) r4 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0d26) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x100) 0s ago: executing program 3 (id=5848): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280)) io_uring_setup(0x2624, &(0x7f0000000800)={0x0, 0xfffffffc}) socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888847", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): acity change from 0 to 512 [ 1010.999620][ T30] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1011.010749][ T30] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1011.021262][T24572] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1011.038935][T24572] EXT4-fs (loop6): group descriptors corrupted! [ 1011.125054][T24576] SELinux: policydb version 64 does not match my version range 15-35 [ 1011.163260][T24576] SELinux: failed to load policy [ 1011.227294][T24564] loop4: detected capacity change from 0 to 8192 [ 1011.309527][T24580] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 1011.309625][T24580] SELinux: failed to load policy [ 1011.493686][T24587] gre0 speed is unknown, defaulting to 1000 [ 1011.863467][T24603] loop5: detected capacity change from 0 to 512 [ 1011.887246][T24603] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1011.959194][T24603] EXT4-fs (loop5): 1 truncate cleaned up [ 1011.985559][T24603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1012.036178][T24604] loop6: detected capacity change from 0 to 4096 [ 1012.048162][ T28] audit: type=1400 audit(1781318124.584:10542): avc: denied { write } for pid=24591 comm="syz.5.5194" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1012.082554][T24604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1012.140219][ T28] audit: type=1400 audit(1781318124.584:10543): avc: denied { write } for pid=24591 comm="syz.5.5194" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1012.289359][T24609] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5197'. [ 1012.439369][T15167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.725629][T24340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.103375][T24620] syzkaller1: entered promiscuous mode [ 1013.141655][T24620] syzkaller1: entered allmulticast mode [ 1013.148440][T24624] loop6: detected capacity change from 0 to 256 [ 1013.182697][T24624] ieee802154 phy0 wpan0: encryption failed: -22 [ 1013.191753][T24618] loop5: detected capacity change from 0 to 8192 [ 1013.232514][T24620] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 1013.232514][T24620] [ 1013.342115][T24630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1013.350318][T24630] batadv_slave_0: entered promiscuous mode [ 1013.398485][T24630] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5204'. [ 1013.456226][T24620] FAULT_INJECTION: forcing a failure. [ 1013.456226][T24620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1013.474507][T24632] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5205'. [ 1013.486549][T24620] CPU: 1 UID: 0 PID: 24620 Comm: syz.4.5203 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1013.486598][T24620] Tainted: [W]=WARN [ 1013.486610][T24620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1013.486623][T24620] Call Trace: [ 1013.486631][T24620] [ 1013.486642][T24620] __dump_stack+0x1d/0x30 [ 1013.486671][T24620] dump_stack_lvl+0x95/0xd0 [ 1013.486776][T24620] dump_stack+0x15/0x1b [ 1013.486802][T24620] should_fail_ex+0x25e/0x270 [ 1013.486913][T24620] should_fail+0xb/0x20 [ 1013.486931][T24620] should_fail_usercopy+0x1a/0x20 [ 1013.487027][T24620] _copy_from_user+0x1c/0xb0 [ 1013.487105][T24620] ___sys_sendmsg+0xc1/0x1e0 [ 1013.487153][T24620] __x64_sys_sendmsg+0xd4/0x160 [ 1013.487189][T24620] x64_sys_call+0x194c/0x3020 [ 1013.487267][T24620] do_syscall_64+0x136/0x3c0 [ 1013.487307][T24620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.487330][T24620] RIP: 0033:0x7fa55d4ace59 [ 1013.487355][T24620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1013.487435][T24620] RSP: 002b:00007fa55bf07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1013.487455][T24620] RAX: ffffffffffffffda RBX: 00007fa55d725fa0 RCX: 00007fa55d4ace59 [ 1013.487469][T24620] RDX: 0000000000000100 RSI: 00002000000002c0 RDI: 000000000000000a [ 1013.487531][T24620] RBP: 00007fa55bf07090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.487545][T24620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.487626][T24620] R13: 00007fa55d726038 R14: 00007fa55d725fa0 R15: 00007fff68e695b8 [ 1013.487649][T24620] [ 1013.878081][T24648] veth1_to_bond: entered allmulticast mode [ 1014.104232][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1014.104250][ T28] audit: type=1326 audit(1781318126.644:10546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24653 comm="syz.3.5211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1014.142347][T24654] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5211'. [ 1014.151977][T24654] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5211'. [ 1014.157696][T24650] veth1_to_bond: left allmulticast mode [ 1014.166748][ T28] audit: type=1326 audit(1781318126.644:10547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24653 comm="syz.3.5211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1014.174891][T24643] netlink: 'syz.6.5208': attribute type 1 has an invalid length. [ 1014.195578][ T28] audit: type=1326 audit(1781318126.684:10548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24653 comm="syz.3.5211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1014.232919][ T28] audit: type=1326 audit(1781318126.684:10549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24653 comm="syz.3.5211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1014.269408][ T28] audit: type=1326 audit(1781318126.684:10550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24653 comm="syz.3.5211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1014.320074][ T28] audit: type=1326 audit(1781318126.684:10552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24653 comm="syz.3.5211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1014.346756][ T28] audit: type=1326 audit(1781318126.684:10553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24653 comm="syz.3.5211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1014.374104][ T28] audit: type=1326 audit(1781318126.684:10554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24653 comm="syz.3.5211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1014.447977][T24652] batadv_slave_0: left promiscuous mode [ 1014.453772][ T28] audit: type=1326 audit(1781318126.684:10551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24653 comm="syz.3.5211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1014.482860][T24652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1014.494615][ T28] audit: type=1326 audit(1781318126.684:10555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24653 comm="syz.3.5211" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1014.654251][T24666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5214'. [ 1015.176811][T24643] gre0 speed is unknown, defaulting to 1000 [ 1015.406476][T24678] syzkaller1: entered promiscuous mode [ 1015.424762][T24678] syzkaller1: entered allmulticast mode [ 1015.709212][T24678] set_capacity_and_notify: 1 callbacks suppressed [ 1015.709266][T24678] loop5: detected capacity change from 0 to 1024 [ 1015.793714][T24678] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 1015.793714][T24678] [ 1016.059460][T24681] macsec0: entered promiscuous mode [ 1016.070027][T24681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5218'. [ 1016.084864][T24681] macsec0 (unregistering): left promiscuous mode [ 1016.246071][T24684] sch_fq: defrate 2 ignored. [ 1016.252296][T24678] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1016.503479][T24691] sctp: [Deprecated]: syz.0.5220 (pid 24691) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1016.503479][T24691] Use struct sctp_sack_info instead [ 1016.649394][T24676] loop4: detected capacity change from 0 to 8192 [ 1017.706636][T24719] netem: change failed [ 1017.722065][T24721] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5230'. [ 1017.733269][T24721] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5230'. [ 1017.778757][T24721] siw: device registration error -23 [ 1017.806539][T24730] syzkaller1: entered promiscuous mode [ 1017.817185][T24730] syzkaller1: entered allmulticast mode [ 1017.896237][T24730] loop6: detected capacity change from 0 to 1024 [ 1017.955482][T24730] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 1017.955482][T24730] [ 1017.998078][T24697] loop3: detected capacity change from 0 to 8192 [ 1018.104108][T24730] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1018.432688][T24750] netlink: 'syz.6.5238': attribute type 1 has an invalid length. [ 1018.471781][T24750] 8021q: VLANs not supported on ipvlan0 [ 1018.676020][T24764] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5244'. [ 1018.686590][T24753] loop3: detected capacity change from 0 to 8192 [ 1018.764783][T24768] loop3: detected capacity change from 0 to 512 [ 1018.873441][T24770] syzkaller1: entered promiscuous mode [ 1018.893288][T24770] syzkaller1: entered allmulticast mode [ 1018.919366][T24764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.961781][T24764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.016478][T24770] loop3: detected capacity change from 0 to 1024 [ 1019.048577][T24770] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 1019.048577][T24770] [ 1019.144358][T24770] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1019.327098][T24776] gre0 speed is unknown, defaulting to 1000 [ 1019.627608][T24787] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5251'. [ 1019.655502][T24789] syz.5.5252 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1019.748945][T24793] tmpfs: Unknown parameter 'mpĦ-Íi‘Èl~’eol' [ 1019.850957][T24797] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5256'. [ 1021.300414][T24832] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5267'. [ 1021.303650][T24822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5265'. [ 1021.402698][T24836] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5268'. [ 1021.474865][T24828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5266'. [ 1021.500194][T24838] program syz.4.5270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1021.524162][T24841] --map-set only usable from mangle table [ 1021.989917][T24803] loop3: detected capacity change from 0 to 8192 [ 1022.054126][T24855] loop6: detected capacity change from 0 to 1024 [ 1022.191830][T24857] loop3: detected capacity change from 0 to 128 [ 1022.429803][T24867] netlink: 'syz.3.5277': attribute type 1 has an invalid length. [ 1022.487537][T24867] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.5277'. [ 1022.537275][ T28] kauditd_printk_skb: 280 callbacks suppressed [ 1022.537290][ T28] audit: type=1400 audit(1781318135.074:10836): avc: denied { getopt } for pid=24860 comm="syz.3.5277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1023.230669][ T28] audit: type=1326 audit(1781318135.774:10837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24871 comm="syz.0.5281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1e1321d68e code=0x7ffc0000 [ 1023.316254][T24887] loop5: detected capacity change from 0 to 8192 [ 1023.324197][ T28] audit: type=1326 audit(1781318135.774:10838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24871 comm="syz.0.5281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1325ce59 code=0x7ffc0000 [ 1023.382860][T24878] loop3: detected capacity change from 0 to 8192 [ 1023.399163][ T28] audit: type=1326 audit(1781318135.774:10839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24871 comm="syz.0.5281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1325ce59 code=0x7ffc0000 [ 1023.495108][ T28] audit: type=1326 audit(1781318135.804:10840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24871 comm="syz.0.5281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1e1325ce59 code=0x7ffc0000 [ 1023.531855][ T28] audit: type=1326 audit(1781318135.804:10841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24871 comm="syz.0.5281" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1e1325ce59 code=0x7ffc0000 [ 1023.920634][T24907] loop3: detected capacity change from 0 to 256 [ 1023.940607][T24907] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1023.979713][T24907] FAULT_INJECTION: forcing a failure. [ 1023.979713][T24907] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.992940][T24907] CPU: 0 UID: 0 PID: 24907 Comm: syz.3.5293 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1023.992981][T24907] Tainted: [W]=WARN [ 1023.993041][T24907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1023.993130][T24907] Call Trace: [ 1023.993140][T24907] [ 1023.993150][T24907] __dump_stack+0x1d/0x30 [ 1023.993174][T24907] dump_stack_lvl+0x95/0xd0 [ 1023.993245][T24907] dump_stack+0x15/0x1b [ 1023.993271][T24907] should_fail_ex+0x25e/0x270 [ 1023.993307][T24907] should_failslab+0x8c/0xb0 [ 1023.993439][T24907] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1023.993488][T24907] ? __kernfs_new_node+0x6d/0x3f0 [ 1023.993524][T24907] __kernfs_new_node+0x6d/0x3f0 [ 1023.993560][T24907] ? security_kernfs_init_security+0x23/0x70 [ 1023.993583][T24907] ? rb_insert_color+0x6e/0x2a0 [ 1023.993610][T24907] kernfs_new_node+0xd0/0x140 [ 1023.993654][T24907] __kernfs_create_file+0x4b/0x180 [ 1023.993697][T24907] ? __pfx_dev_attr_show+0x10/0x10 [ 1023.993785][T24907] ? __pfx_dev_attr_store+0x10/0x10 [ 1023.993930][T24907] sysfs_add_file_mode_ns+0x132/0x1b0 [ 1023.993960][T24907] internal_create_group+0x43e/0x9e0 [ 1023.993995][T24907] ? fat_file_fsync+0xf8/0x110 [ 1023.994028][T24907] sysfs_create_group+0x1f/0x30 [ 1023.994124][T24907] loop_configure+0x7ec/0x9c0 [ 1023.994162][T24907] lo_ioctl+0x5a6/0x1390 [ 1023.994222][T24907] ? blkdev_common_ioctl+0xbf8/0x2060 [ 1023.994334][T24907] ? do_vfs_ioctl+0x848/0xe50 [ 1023.994374][T24907] ? selinux_file_ioctl+0x33c/0x3c0 [ 1023.994407][T24907] ? __pfx_lo_ioctl+0x10/0x10 [ 1023.994471][T24907] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1023.994580][T24907] blkdev_ioctl+0x387/0x460 [ 1023.994619][T24907] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1023.994658][T24907] __se_sys_ioctl+0xce/0x140 [ 1023.994717][T24907] __x64_sys_ioctl+0x43/0x50 [ 1023.994749][T24907] x64_sys_call+0x1563/0x3020 [ 1023.994780][T24907] do_syscall_64+0x136/0x3c0 [ 1023.994892][T24907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.994983][T24907] RIP: 0033:0x7f74a19bce59 [ 1023.995039][T24907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1023.995069][T24907] RSP: 002b:00007f74a040f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1023.995158][T24907] RAX: ffffffffffffffda RBX: 00007f74a1c35fa0 RCX: 00007f74a19bce59 [ 1023.995178][T24907] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 1023.995201][T24907] RBP: 00007f74a040f090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.995215][T24907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.995227][T24907] R13: 00007f74a1c36038 R14: 00007f74a1c35fa0 R15: 00007ffcd61c36a8 [ 1023.995249][T24907] [ 1024.386166][T24918] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1024.534273][ T28] audit: type=1400 audit(1781318137.074:10842): avc: denied { getopt } for pid=24919 comm="syz.3.5298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1024.538131][T24920] syzkaller0: entered promiscuous mode [ 1024.571524][T24916] loop6: detected capacity change from 0 to 512 [ 1024.599289][T24920] syzkaller0: entered allmulticast mode [ 1024.614660][T24916] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5296: bg 0: block 248: padding at end of block bitmap is not set [ 1024.675585][T24916] loop6: lost filesystem error report for type 5 error -117 [ 1024.678234][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1024.693006][ C1] EXT4-fs (loop6): last error at time 1781318137: ext4_validate_block_bitmap:441 [ 1024.710406][T24916] Quota error (device loop6): write_blk: dquota write failed [ 1024.733159][T24916] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1024.756719][T24916] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.5296: Failed to acquire dquot type 1 [ 1024.769348][T24916] loop6: lost filesystem error report for type 5 error -117 [ 1024.779908][T24916] EXT4-fs (loop6): 1 truncate cleaned up [ 1024.794782][T24916] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.808020][T24923] loop5: detected capacity change from 0 to 512 [ 1024.824016][T24923] ext4: Unknown parameter 'hash' [ 1024.834566][T24916] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1024.944485][T24916] Quota error (device loop6): write_blk: dquota write failed [ 1024.951920][T24916] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.5296: Failed to acquire dquot type 1 [ 1025.003486][T24916] syz.6.5296 (24916) used greatest stack depth: 8064 bytes left [ 1025.017003][T24340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.074631][T24935] loop6: detected capacity change from 0 to 512 [ 1025.133960][T24933] loop3: detected capacity change from 0 to 8192 [ 1025.180663][T24935] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1025.300551][T24935] EXT4-fs (loop6): 1 truncate cleaned up [ 1025.338225][T24935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1026.025450][T24962] EXT4-fs: Ignoring removed orlov option [ 1026.055645][T24340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.067664][T24962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1026.080524][T24962] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1026.102194][T24967] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.5314: lblock 3 mapped to illegal pblock 3 (length 3) [ 1026.117471][T24967] EXT4-fs (loop4): Remounting filesystem read-only [ 1026.142740][T23537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1026.726155][T24978] FAULT_INJECTION: forcing a failure. [ 1026.726155][T24978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1026.747109][T24978] CPU: 1 UID: 0 PID: 24978 Comm: syz.3.5317 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1026.747201][T24978] Tainted: [W]=WARN [ 1026.747211][T24978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1026.747236][T24978] Call Trace: [ 1026.747246][T24978] [ 1026.747332][T24978] __dump_stack+0x1d/0x30 [ 1026.747360][T24978] dump_stack_lvl+0x95/0xd0 [ 1026.747382][T24978] dump_stack+0x15/0x1b [ 1026.747473][T24978] should_fail_ex+0x25e/0x270 [ 1026.747514][T24978] should_fail+0xb/0x20 [ 1026.747570][T24978] should_fail_usercopy+0x1a/0x20 [ 1026.747611][T24978] _copy_from_user+0x1c/0xb0 [ 1026.747642][T24978] ___sys_sendmsg+0xc1/0x1e0 [ 1026.747692][T24978] __x64_sys_sendmsg+0xd4/0x160 [ 1026.747794][T24978] x64_sys_call+0x194c/0x3020 [ 1026.747915][T24978] do_syscall_64+0x136/0x3c0 [ 1026.747959][T24978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.747995][T24978] RIP: 0033:0x7f74a19bce59 [ 1026.748018][T24978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.748042][T24978] RSP: 002b:00007f74a040f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1026.748078][T24978] RAX: ffffffffffffffda RBX: 00007f74a1c35fa0 RCX: 00007f74a19bce59 [ 1026.748098][T24978] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 000000000000000b [ 1026.748116][T24978] RBP: 00007f74a040f090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.748133][T24978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.748168][T24978] R13: 00007f74a1c36038 R14: 00007f74a1c35fa0 R15: 00007ffcd61c36a8 [ 1026.748196][T24978] [ 1027.244204][T24986] set_capacity_and_notify: 3 callbacks suppressed [ 1027.244240][T24986] loop3: detected capacity change from 0 to 512 [ 1027.278224][T24986] ext4: Unknown parameter 'hash' [ 1027.300171][T24995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.328118][T24995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.542593][T24980] loop5: detected capacity change from 0 to 8192 [ 1027.578601][T24986] loop3: detected capacity change from 0 to 2368 [ 1027.785889][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 1027.785904][ T28] audit: type=1326 audit(1781318140.324:10865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24985 comm="syz.3.5321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1027.857784][ T28] audit: type=1326 audit(1781318140.324:10866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24985 comm="syz.3.5321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1027.936047][ T28] audit: type=1326 audit(1781318140.324:10867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24985 comm="syz.3.5321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1028.008732][ T28] audit: type=1326 audit(1781318140.384:10868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24985 comm="syz.3.5321" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1028.158107][T22057] Process accounting resumed [ 1028.182452][T25015] loop6: detected capacity change from 0 to 512 [ 1028.201246][T25015] EXT4-fs: Ignoring removed i_version option [ 1028.254282][T25015] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1028.297046][T25015] EXT4-fs (loop6): 1 truncate cleaned up [ 1028.316367][T25015] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1028.351066][ T28] audit: type=1400 audit(1781318140.894:10869): avc: denied { write } for pid=25013 comm="syz.6.5330" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1028.430793][T25015] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.476212][T25023] netlink: 'syz.6.5332': attribute type 1 has an invalid length. [ 1028.505452][T25023] loop6: detected capacity change from 0 to 1024 [ 1028.520898][T25023] EXT4-fs: Ignoring removed bh option [ 1028.610452][T25023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1028.625765][ T28] audit: type=1400 audit(1781318141.164:10870): avc: denied { write } for pid=25022 comm="syz.6.5332" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1028.684042][T24340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.696350][ T28] audit: type=1400 audit(1781318141.204:10871): avc: denied { write } for pid=25022 comm="syz.6.5332" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1028.904498][T25042] IPVS: Unknown mcast interface: vcan0 [ 1028.949716][T25044] loop4: detected capacity change from 0 to 512 [ 1028.982910][T25039] loop6: detected capacity change from 0 to 512 [ 1029.000907][T25039] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1029.040415][T25039] EXT4-fs (loop6): 1 truncate cleaned up [ 1029.046619][T25039] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1029.076763][T25044] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1029.077182][T25044] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1029.223502][T25044] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1029.236426][T25044] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 1029.246167][T25044] System zones: 0-2, 18-18, 34-35 [ 1029.256036][T25044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1029.274334][T25041] loop3: detected capacity change from 0 to 8192 [ 1029.279796][ T28] audit: type=1400 audit(1781318141.814:10872): avc: denied { write } for pid=25038 comm="syz.6.5336" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1029.299516][T25044] xt_TCPMSS: Only works on TCP SYN packets [ 1029.324223][ T28] audit: type=1400 audit(1781318141.814:10873): avc: denied { write } for pid=25038 comm="syz.6.5336" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1029.348174][T23537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.688247][ T28] audit: type=1400 audit(1781318142.224:10874): avc: denied { getopt } for pid=25059 comm="syz.5.5343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1030.120582][T25066] loop4: detected capacity change from 0 to 512 [ 1030.147532][T25066] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5341'. [ 1030.193368][T25069] loop3: detected capacity change from 0 to 512 [ 1030.206291][T24340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.243517][T25069] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1030.337505][T25069] EXT4-fs: Ignoring removed bh option [ 1030.346220][T25069] EXT4-fs (loop3): stripe (13) is not aligned with cluster size (16), stripe is disabled [ 1030.379913][T25069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1030.396614][T25069] EXT4-fs error (device loop3): ext4_empty_dir:3101: inode #12: block 80: comm syz.3.5345: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1030.427100][T25069] EXT4-fs (loop3): Remounting filesystem read-only [ 1030.453465][T25069] EXT4-fs warning (device loop3): ext4_empty_dir:3104: inode #12: comm syz.3.5345: directory missing '..' [ 1030.527403][T25080] netlink: 'syz.4.5348': attribute type 13 has an invalid length. [ 1030.536875][T16814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.582980][T25080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.590357][T25080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.639317][T25080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.650708][T25080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1030.808901][T25088] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5349'. [ 1030.997607][ T6783] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.010799][ T6783] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.061103][ T6783] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.117852][ T6783] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.261623][T25092] syz.6.5346: attempt to access beyond end of device [ 1031.261623][T25092] loop6: rw=2049, sector=257, nr_sectors = 784 limit=128 [ 1031.457465][T25117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5359'. [ 1031.536935][T25120] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5360'. [ 1031.570426][T25120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5360'. [ 1031.855608][T25131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5362'. [ 1031.927538][T25112] FAT-fs (loop6): Directory bread(block 64) failed [ 1031.948013][T25112] FAT-fs (loop6): Directory bread(block 65) failed [ 1031.959022][T25112] FAT-fs (loop6): Directory bread(block 66) failed [ 1031.967370][T25112] FAT-fs (loop6): Directory bread(block 67) failed [ 1031.987027][T25112] FAT-fs (loop6): Directory bread(block 68) failed [ 1032.001168][T25112] FAT-fs (loop6): Directory bread(block 69) failed [ 1032.020902][T25112] FAT-fs (loop6): Directory bread(block 70) failed [ 1032.032340][T25112] FAT-fs (loop6): Directory bread(block 71) failed [ 1032.043888][T25112] FAT-fs (loop6): Directory bread(block 72) failed [ 1032.056658][T25112] FAT-fs (loop6): Directory bread(block 73) failed [ 1032.063499][ T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 1032.116515][T25144] EXT4-fs: quotafile must be on filesystem root [ 1032.123308][T25112] syz.6.5358: attempt to access beyond end of device [ 1032.123308][T25112] loop6: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 1032.149179][T25112] syz.6.5358: attempt to access beyond end of device [ 1032.149179][T25112] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 1032.166826][T25112] syz.6.5358: attempt to access beyond end of device [ 1032.166826][T25112] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 1032.183563][T25112] syz.6.5358: attempt to access beyond end of device [ 1032.183563][T25112] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 1032.197181][T25112] syz.6.5358: attempt to access beyond end of device [ 1032.197181][T25112] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 1032.211897][T25112] syz.6.5358: attempt to access beyond end of device [ 1032.211897][T25112] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 1032.226426][T25112] syz.6.5358: attempt to access beyond end of device [ 1032.226426][T25112] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 1032.240929][T25112] syz.6.5358: attempt to access beyond end of device [ 1032.240929][T25112] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 1032.254882][T25111] syz.6.5358: attempt to access beyond end of device [ 1032.254882][T25111] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 1032.495729][T25154] set_capacity_and_notify: 5 callbacks suppressed [ 1032.495884][T25154] loop6: detected capacity change from 0 to 512 [ 1032.524772][T25155] netlink: 'syz.5.5369': attribute type 1 has an invalid length. [ 1032.552708][T25154] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1032.555825][T25155] bond7: entered promiscuous mode [ 1032.567239][T25155] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1032.578519][T25154] EXT4-fs (loop6): 1 truncate cleaned up [ 1032.585045][T25155] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1032.586921][T25154] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1032.593271][T25155] bond7: (slave gre1): The slave device specified does not support setting the MAC address [ 1032.593297][T25155] bond7: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1032.606047][T25155] bond7: (slave gre1): making interface the new active one [ 1032.606073][T25155] gre1: entered promiscuous mode [ 1032.618207][T25155] bond7: (slave gre1): Enslaving as an active interface with an up link [ 1032.838937][T24340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.862017][T25172] Cannot find del_set index 0 as target [ 1032.888851][T25174] 9p: Bad value for 'rfdno' [ 1032.928677][T25174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.935967][T25174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.995500][T25174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1033.007067][T25174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1033.051196][ T4115] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1033.062194][ T4115] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.081718][ T4115] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1033.091501][ T4115] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.103029][ T4115] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1033.112307][ T4115] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.121700][ T4115] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1033.131635][ T4115] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.079788][T25188] Process accounting resumed [ 1034.086796][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 1034.086820][ T28] audit: type=1400 audit(1781318146.624:10884): avc: denied { lock } for pid=25198 comm="syz.6.5377" path="socket:[69930]" dev="sockfs" ino=69930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1034.117434][T25199] loop6: detected capacity change from 0 to 512 [ 1034.922592][T25138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1034.969269][ T28] audit: type=1400 audit(1781318147.514:10885): avc: denied { nlmsg_write } for pid=25210 comm="syz.5.5381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1035.440003][T25229] loop4: detected capacity change from 0 to 764 [ 1035.498130][T25229] gre0 speed is unknown, defaulting to 1000 [ 1035.850869][T25230] loop5: detected capacity change from 0 to 1024 [ 1035.862248][T25230] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1036.044130][T25231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5383'. [ 1036.208185][T25231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5383'. [ 1037.385407][T25230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1037.421321][T25230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5387'. [ 1037.451130][ T28] audit: type=1400 audit(1781318149.984:10886): avc: denied { write } for pid=25224 comm="syz.5.5387" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1038.663855][ T28] audit: type=1400 audit(1781318151.204:10887): avc: denied { read } for pid=25240 comm="syz.0.5390" lport=34755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1039.442397][T15167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.607081][T25255] loop4: detected capacity change from 0 to 512 [ 1039.713304][T25255] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1039.759755][T25255] EXT4-fs (loop4): couldn't read superblock of external journal [ 1039.968108][T25246] loop6: detected capacity change from 0 to 4096 [ 1040.075372][T25246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.158135][T25267] loop4: detected capacity change from 0 to 1024 [ 1040.790078][T25276] loop3: detected capacity change from 0 to 512 [ 1040.796800][T25276] ext4: Unknown parameter '"' [ 1040.801473][T24340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.402156][T25282] blktrace: Concurrent blktraces are not allowed on loop5 [ 1042.060792][ T28] audit: type=1326 audit(1781318154.604:10888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.4.5405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55d4ace59 code=0x7ffc0000 [ 1042.086573][ T28] audit: type=1326 audit(1781318154.604:10889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.4.5405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55d4ace59 code=0x7ffc0000 [ 1042.127819][T25305] netlink: 'syz.5.5408': attribute type 3 has an invalid length. [ 1042.142962][T25305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5408'. [ 1042.229688][ T28] audit: type=1326 audit(1781318154.604:10890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.4.5405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55d4ace59 code=0x7ffc0000 [ 1042.368070][ T28] audit: type=1326 audit(1781318154.604:10891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.4.5405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fa55d4ace59 code=0x7ffc0000 [ 1042.441589][T25320] gre0 speed is unknown, defaulting to 1000 [ 1042.460150][ T28] audit: type=1326 audit(1781318154.604:10892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.4.5405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55d4ace59 code=0x7ffc0000 [ 1042.579082][ T28] audit: type=1326 audit(1781318154.604:10893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.4.5405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa55d46d68e code=0x7ffc0000 [ 1042.660050][ T28] audit: type=1326 audit(1781318154.604:10894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.4.5405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55d4ace59 code=0x7ffc0000 [ 1042.741648][ T28] audit: type=1326 audit(1781318154.604:10895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.4.5405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55d4ace59 code=0x7ffc0000 [ 1042.822495][ T28] audit: type=1326 audit(1781318154.604:10896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.4.5405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55d4ace59 code=0x7ffc0000 [ 1042.891699][ T28] audit: type=1326 audit(1781318154.604:10897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25297 comm="syz.4.5405" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa55d4ace59 code=0x7ffc0000 [ 1043.209652][T25351] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5423'. [ 1043.225106][T25352] batadv1: entered promiscuous mode [ 1043.230665][T25352] batadv1: entered allmulticast mode [ 1043.237397][T25352] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1043.461232][T25320] loop5: detected capacity change from 0 to 512 [ 1043.690721][T25320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1043.816076][T25320] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1044.031233][T15167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.659577][T25376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5429'. [ 1047.208884][T25380] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=60928 sclass=netlink_tcpdiag_socket pid=25380 comm=syz.4.5431 [ 1047.225936][T25383] FAULT_INJECTION: forcing a failure. [ 1047.225936][T25383] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.264889][T25383] CPU: 1 UID: 0 PID: 25383 Comm: syz.5.5432 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1047.264928][T25383] Tainted: [W]=WARN [ 1047.264938][T25383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1047.264955][T25383] Call Trace: [ 1047.264964][T25383] [ 1047.264974][T25383] __dump_stack+0x1d/0x30 [ 1047.265005][T25383] dump_stack_lvl+0x95/0xd0 [ 1047.265032][T25383] dump_stack+0x15/0x1b [ 1047.265051][T25383] should_fail_ex+0x25e/0x270 [ 1047.265096][T25383] should_failslab+0x8c/0xb0 [ 1047.265143][T25383] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1047.265183][T25383] ? mas_alloc_nodes+0x1a2/0x210 [ 1047.265213][T25383] mas_alloc_nodes+0x1a2/0x210 [ 1047.265249][T25383] mas_preallocate+0x2ca/0x500 [ 1047.265286][T25383] commit_merge+0x39d/0x720 [ 1047.265315][T25383] vma_expand+0x2ce/0x430 [ 1047.265348][T25383] vma_merge_new_range+0x295/0x310 [ 1047.265375][T25383] copy_vma+0x379/0x650 [ 1047.265411][T25383] move_vma+0x489/0xcf0 [ 1047.265448][T25383] ? arch_get_unmapped_area_topdown+0x152/0x530 [ 1047.265494][T25383] ? cap_mmap_addr+0xb1/0x250 [ 1047.265526][T25383] ? __get_unmapped_area+0x2c8/0x2f0 [ 1047.265550][T25383] mremap_to+0x3ef/0x450 [ 1047.265582][T25383] ? check_prep_vma+0x463/0x630 [ 1047.265628][T25383] __se_sys_mremap+0x89e/0xc40 [ 1047.265682][T25383] __x64_sys_mremap+0x67/0x80 [ 1047.265722][T25383] x64_sys_call+0x29db/0x3020 [ 1047.265749][T25383] do_syscall_64+0x136/0x3c0 [ 1047.265780][T25383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.265801][T25383] RIP: 0033:0x7f148e10ce59 [ 1047.265822][T25383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.265846][T25383] RSP: 002b:00007f148cb5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1047.265873][T25383] RAX: ffffffffffffffda RBX: 00007f148e385fa0 RCX: 00007f148e10ce59 [ 1047.265889][T25383] RDX: 0000000000600002 RSI: 0000000000600002 RDI: 0000200000000000 [ 1047.265902][T25383] RBP: 00007f148cb5f090 R08: 0000200000a00000 R09: 0000000000000000 [ 1047.265915][T25383] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 1047.265927][T25383] R13: 00007f148e386038 R14: 00007f148e385fa0 R15: 00007ffcf85f5f88 [ 1047.265948][T25383] [ 1047.584277][T25388] loop5: detected capacity change from 0 to 512 [ 1047.592409][T25388] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1047.601934][T25392] loop3: detected capacity change from 0 to 512 [ 1047.602220][T25392] EXT4-fs: Ignoring removed nobh option [ 1047.602323][T25392] EXT4-fs: Ignoring removed orlov option [ 1047.636558][T25392] EXT4-fs error (device loop3): __ext4_iget:5481: inode #11: block 1: comm syz.3.5436: invalid block [ 1047.675174][T25392] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1047.675430][T25392] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.5436: couldn't read orphan inode 11 (err -117) [ 1047.684704][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1047.684732][ C0] EXT4-fs (loop3): initial error at time 1781318160: __ext4_iget:5481: inode 11: block 1 [ 1047.684788][ C0] EXT4-fs (loop3): last error at time 1781318160: __ext4_iget:5481: inode 11: block 1 [ 1047.699134][T25388] EXT4-fs (loop5): 1 truncate cleaned up [ 1047.703962][T25392] loop3: lost filesystem error report for type 5 error -117 [ 1047.731558][T25392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1047.734345][T25388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1047.851597][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 1047.851618][ T28] audit: type=1400 audit(1781318160.364:10913): avc: denied { write } for pid=25386 comm="syz.5.5433" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1047.925670][ T28] audit: type=1400 audit(1781318160.364:10914): avc: denied { write } for pid=25386 comm="syz.5.5433" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1047.962696][T16814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.402900][T25417] --map-set only usable from mangle table [ 1048.421213][T15167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.752397][T25435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5447'. [ 1051.208817][T25446] netlink: 165 bytes leftover after parsing attributes in process `syz.5.5451'. [ 1051.458469][T25454] loop5: detected capacity change from 0 to 512 [ 1051.466030][T25454] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1051.771296][T25454] EXT4-fs (loop5): 1 truncate cleaned up [ 1051.910239][T25454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1052.897901][T25471] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5459'. [ 1053.039228][ T28] audit: type=1400 audit(1781318164.664:10915): avc: denied { write } for pid=25451 comm="syz.5.5454" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1053.061767][ T28] audit: type=1400 audit(1781318164.664:10916): avc: denied { write } for pid=25451 comm="syz.5.5454" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1054.423591][T25478] ªªªªªª: renamed from vlan0 [ 1055.175620][T15167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.646850][T25494] loop5: detected capacity change from 0 to 1024 [ 1055.716701][T25507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5471'. [ 1055.743977][T25494] EXT4-fs: Ignoring removed bh option [ 1055.789348][ T28] audit: type=1400 audit(1781318168.334:10917): avc: denied { ioctl } for pid=25509 comm="syz.3.5472" path="socket:[70965]" dev="sockfs" ino=70965 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1055.794028][T25494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1055.898291][T15167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.959642][T25526] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5475'. [ 1055.990299][T25526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5475'. [ 1056.004671][T25526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=25526 comm=syz.5.5475 [ 1056.042065][T25531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5477'. [ 1056.186003][T25542] loop5: detected capacity change from 0 to 512 [ 1056.202525][T25542] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.5478: inode has both inline data and extents flags [ 1056.229137][T25542] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1056.237879][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1056.240876][T25542] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.5478: couldn't read orphan inode 15 (err -117) [ 1056.247071][ C1] EXT4-fs (loop5): initial error at time 1781318168: ext4_orphan_get:1397 [ 1056.264072][T25542] loop5: lost filesystem error report for type 5 error -117 [ 1056.265376][ C1] : inode 15 [ 1056.284615][ C1] EXT4-fs (loop5): last error at time 1781318168: ext4_orphan_get:1397: inode 15 [ 1056.297058][T25542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.390851][T15167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.415856][T25566] loop6: detected capacity change from 0 to 512 [ 1056.451343][T25566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1056.456779][ T28] audit: type=1400 audit(1781318168.994:10918): avc: denied { getopt } for pid=25574 comm="syz.5.5481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1056.484718][T25566] ext4 filesystem being mounted at /62/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.555793][ T28] audit: type=1400 audit(1781318169.094:10919): avc: denied { write } for pid=25565 comm="syz.6.5479" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1056.559779][T25566] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 114 vs 96 free clusters [ 1056.605916][T25583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5482'. [ 1056.824320][T24340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1056.844673][T25595] loop3: detected capacity change from 0 to 1024 [ 1056.853400][T25627] macvlan2: entered allmulticast mode [ 1056.866596][T25595] EXT4-fs: Ignoring removed bh option [ 1056.871949][T25629] netlink: 6672 bytes leftover after parsing attributes in process `syz.4.5488'. [ 1056.872793][T25627] batadv0: entered allmulticast mode [ 1056.896534][T25595] EXT4-fs: Ignoring removed oldalloc option [ 1056.901678][T25627] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1056.911267][T25629] netlink: 6672 bytes leftover after parsing attributes in process `syz.4.5488'. [ 1056.950034][T25595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1056.974212][T25627] batadv0: left allmulticast mode [ 1056.981766][ T28] audit: type=1400 audit(1781318169.524:10920): avc: denied { write } for pid=25594 comm="syz.3.5485" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1057.014555][T25629] loop4: detected capacity change from 0 to 128 [ 1057.050166][T16814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.097584][T25640] loop6: detected capacity change from 0 to 512 [ 1057.150106][ T28] audit: type=1326 audit(1781318169.674:10921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25642 comm="syz.3.5490" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1057.168664][T25592] loop5: detected capacity change from 0 to 8192 [ 1057.196940][ T28] audit: type=1326 audit(1781318169.674:10922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25642 comm="syz.3.5490" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1057.237869][T25640] EXT4-fs error (device loop6): ext4_free_inode:354: comm syz.6.5491: bit already cleared for inode 11 [ 1057.260081][ T28] audit: type=1326 audit(1781318169.674:10923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25642 comm="syz.3.5490" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1057.286978][T25640] loop6: lost filesystem error report for type 5 error -117 [ 1057.286966][ T28] audit: type=1326 audit(1781318169.674:10924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25642 comm="syz.3.5490" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1057.287938][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1057.296240][ T28] audit: type=1326 audit(1781318169.674:10925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25642 comm="syz.3.5490" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1057.319830][ C1] EXT4-fs (loop6): initial error at time 1781318169: ext4_free_inode:354 [ 1057.319857][ C1] EXT4-fs (loop6): last error at time 1781318169: ext4_free_inode:354 [ 1057.320303][T25640] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 1057.320328][T25640] loop6: lost filesystem error report for type 5 error -117 [ 1057.321558][T25640] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 1057.394107][T25640] loop6: lost filesystem error report for type 5 error -117 [ 1057.394347][T25640] EXT4-fs (loop6): 1 orphan inode deleted [ 1057.410316][T25640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1057.447358][T25653] loop3: detected capacity change from 0 to 256 [ 1057.578146][T25640] netdevsim netdevsim6: Direct firmware load for ./file1 failed with error -2 [ 1057.597065][T25640] EXT4-fs error (device loop6): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.6.5491: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 1057.673185][T25665] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5496'. [ 1057.697271][T24340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.068375][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1058.068439][ T28] audit: type=1326 audit(1781318170.594:10930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25679 comm="syz.3.5503" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1058.126613][ T28] audit: type=1326 audit(1781318170.594:10931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25679 comm="syz.3.5503" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1058.173079][T25684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5501'. [ 1058.197729][T25677] loop6: detected capacity change from 0 to 4096 [ 1058.203769][ T28] audit: type=1326 audit(1781318170.594:10932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25679 comm="syz.3.5503" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1058.230578][T25684] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5501'. [ 1058.238650][T25677] EXT4-fs: Ignoring removed bh option [ 1058.240065][ T28] audit: type=1326 audit(1781318170.594:10933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25679 comm="syz.3.5503" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1058.488192][T25687] loop5: detected capacity change from 0 to 1024 [ 1058.508940][T25687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1058.546475][ T28] audit: type=1326 audit(1781318170.594:10934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25679 comm="syz.3.5503" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1058.717245][ T28] audit: type=1326 audit(1781318170.594:10935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25679 comm="syz.3.5503" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1059.739951][T25677] EXT4-fs (loop6): stripe (13) is not aligned with cluster size (16), stripe is disabled [ 1060.817781][T25677] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1061.113525][T24340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.513154][T25687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1061.597934][T15167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.620635][T25707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5509'. [ 1062.076283][T25722] loop5: detected capacity change from 0 to 164 [ 1062.086694][T25722] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1062.095690][T25722] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1062.097158][T25718] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5514'. [ 1062.119868][ T28] audit: type=1326 audit(1781318174.664:10936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25723 comm="syz.6.5515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e324ce59 code=0x7ffc0000 [ 1062.130081][T25718] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5514'. [ 1062.149125][ T28] audit: type=1326 audit(1781318174.694:10937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25723 comm="syz.6.5515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f98e324ce59 code=0x7ffc0000 [ 1062.182651][ T28] audit: type=1326 audit(1781318174.694:10938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25723 comm="syz.6.5515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98e324ce59 code=0x7ffc0000 [ 1062.209772][ T28] audit: type=1326 audit(1781318174.694:10939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25723 comm="syz.6.5515" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f98e324ce59 code=0x7ffc0000 [ 1062.265402][T25722] loop5: detected capacity change from 0 to 4096 [ 1062.311121][T25722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1062.324413][T25722] EXT4-fs (loop5): shut down requested (2) [ 1062.431731][T15167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.465311][T25728] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5516'. [ 1063.678466][T25746] syzkaller1: entered allmulticast mode [ 1063.784952][T25750] gre0 speed is unknown, defaulting to 1000 [ 1064.754734][T25708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1065.791577][T25742] loop5: detected capacity change from 0 to 1024 [ 1065.808629][T25742] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1066.008678][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 1066.008693][ T28] audit: type=1400 audit(1781318178.554:10972): avc: denied { unmount } for pid=25749 comm="syz.0.5523" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1066.183873][T25742] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1066.209333][T25740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5520'. [ 1066.229805][ T28] audit: type=1400 audit(1781318178.764:10973): avc: denied { write } for pid=25734 comm="syz.5.5520" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1066.396949][T15167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.471281][T25767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25767 comm=syz.4.5527 [ 1066.511282][T25767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5527'. [ 1066.558476][T25767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5527'. [ 1066.572751][ T6784] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.593172][ T6784] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.618130][T25767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25767 comm=syz.4.5527 [ 1066.644590][ T6784] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.663038][ T28] audit: type=1400 audit(1781318179.184:10974): avc: denied { map } for pid=25770 comm="syz.6.5528" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1066.709008][ T6784] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1066.797353][T25773] blktrace: Concurrent blktraces are not allowed on loop5 [ 1066.809693][ T28] audit: type=1400 audit(1781318179.184:10975): avc: denied { execute } for pid=25770 comm="syz.6.5528" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1066.844115][ T28] audit: type=1326 audit(1781318179.334:10976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25776 comm="syz.3.5529" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1066.869796][T25779] loop4: detected capacity change from 0 to 136 [ 1066.916947][ T28] audit: type=1326 audit(1781318179.334:10977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25776 comm="syz.3.5529" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1066.944692][ T28] audit: type=1326 audit(1781318179.354:10978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25776 comm="syz.3.5529" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1066.974628][ T28] audit: type=1326 audit(1781318179.354:10979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25776 comm="syz.3.5529" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1067.045969][ T28] audit: type=1326 audit(1781318179.354:10980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25776 comm="syz.3.5529" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1067.063776][T25781] loop6: detected capacity change from 0 to 512 [ 1067.084565][ T28] audit: type=1326 audit(1781318179.354:10981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25776 comm="syz.3.5529" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a19bce59 code=0x7ffc0000 [ 1067.153464][T25788] loop3: detected capacity change from 0 to 1024 [ 1067.168426][T25788] EXT4-fs: Ignoring removed bh option [ 1067.205649][T25788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1067.225762][T25781] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5532: bg 0: block 393: padding at end of block bitmap is not set [ 1067.261210][T25781] loop6: lost filesystem error report for type 5 error -117 [ 1067.263077][T25781] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1067.271687][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1067.271816][ C0] EXT4-fs (loop6): initial error at time 1781318179: ext4_validate_block_bitmap:441 [ 1067.271978][ C0] EXT4-fs (loop6): last error at time 1781318179: ext4_validate_block_bitmap:441 [ 1067.338693][T25781] loop6: lost filesystem error report for type 5 error -117 [ 1067.339134][T16814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.340123][T25781] EXT4-fs (loop6): 2 truncates cleaned up [ 1067.387654][T25781] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1067.448138][T25803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1067.455612][T25803] IPv6: NLM_F_CREATE should be set when creating new route [ 1067.470964][T25803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1067.477448][T25803] netlink: 85 bytes leftover after parsing attributes in process `syz.3.5537'. [ 1067.616232][T25817] netlink: 'syz.0.5544': attribute type 10 has an invalid length. [ 1067.625975][T25817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1067.636966][T25817] team0: Port device bond0 added [ 1067.668134][T24340] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.840651][T25851] loop4: detected capacity change from 0 to 512 [ 1069.849688][T25851] vfat: Unknown parameter '01777777777777777777777' [ 1069.980940][T25841] loop3: detected capacity change from 0 to 1024 [ 1070.024134][T25841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1070.158697][T25855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.167471][T25840] loop6: detected capacity change from 0 to 1024 [ 1070.182203][T25840] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1070.972466][T25855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.007933][T25790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1071.055223][T25841] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1071.055704][T25841] EXT4-fs: failed to create workqueue [ 1071.073717][T25841] EXT4-fs (loop3): mount failed [ 1071.173864][T25840] EXT4-fs warning (device loop6): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop6. [ 1071.219423][T25855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.267459][T25855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.277030][T25855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.321152][T25855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.341193][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 1071.341210][ T28] audit: type=1326 audit(1781318183.864:10997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25861 comm="syz.5.5555" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148e10ce59 code=0x7ffc0000 [ 1071.380338][T25864] loop6: detected capacity change from 0 to 128 [ 1071.459163][ T28] audit: type=1326 audit(1781318183.864:10998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25861 comm="syz.5.5555" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148e10ce59 code=0x7ffc0000 [ 1071.480586][T25869] tipc: Enabling of bearer rejected, failed to enable media [ 1071.486586][ T28] audit: type=1326 audit(1781318183.874:10999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25861 comm="syz.5.5555" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f148e10ce59 code=0x7ffc0000 [ 1071.519821][ T28] audit: type=1326 audit(1781318183.874:11000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25861 comm="syz.5.5555" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148e10ce59 code=0x7ffc0000 [ 1071.545889][ T28] audit: type=1326 audit(1781318183.874:11001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25861 comm="syz.5.5555" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f148e10ce59 code=0x7ffc0000 [ 1071.575370][T24340] VFS: Lookup of '. ' in vfat loop6 would have caused loop [ 1071.580008][T25872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5559'. [ 1071.588121][T24340] VFS: Lookup of '. ' in vfat loop6 would have caused loop [ 1071.594403][T25872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5559'. [ 1071.617414][ T28] audit: type=1326 audit(1781318183.874:11002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25861 comm="syz.5.5555" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148e10ce59 code=0x7ffc0000 [ 1071.639510][T25867] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5558'. [ 1071.651416][ T28] audit: type=1326 audit(1781318183.874:11003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25861 comm="syz.5.5555" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148e10ce59 code=0x7ffc0000 [ 1071.692480][ T28] audit: type=1400 audit(1781318184.114:11004): avc: denied { ioctl } for pid=25871 comm="syz.3.5559" path="socket:[72097]" dev="sockfs" ino=72097 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1071.730984][T25870] bridge_slave_1: left allmulticast mode [ 1071.736791][T25870] bridge_slave_1: left promiscuous mode [ 1071.744062][T25870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.752341][T25870] bridge_slave_0: left allmulticast mode [ 1071.758171][T25870] bridge_slave_0: left promiscuous mode [ 1071.763995][T25870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.822571][T25874] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.903773][T25874] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.935751][T25890] loop5: detected capacity change from 0 to 512 [ 1071.944772][T25890] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1071.974233][T25874] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.986582][T25890] EXT4-fs (loop5): 1 truncate cleaned up [ 1071.994753][T25890] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1072.018561][T25876] gre0 speed is unknown, defaulting to 1000 [ 1072.026676][T15167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.106975][ T28] audit: type=1326 audit(1781318184.644:11005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25900 comm="syz.5.5568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148e10ce59 code=0x7ffc0000 [ 1072.134245][ T28] audit: type=1326 audit(1781318184.674:11006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25900 comm="syz.5.5568" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f148e10ce59 code=0x7ffc0000 [ 1072.189637][ T4130] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.209649][ T6784] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.234929][ T6784] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.250759][ T4130] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.322155][ T6785] bridge_slave_1: left allmulticast mode [ 1072.328093][ T6785] bridge_slave_1: left promiscuous mode [ 1072.338463][ T6785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.357425][ T6785] bridge_slave_0: left allmulticast mode [ 1072.368518][ T6785] bridge_slave_0: left promiscuous mode [ 1072.375577][ T6785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.395786][T25911] loop3: detected capacity change from 0 to 1024 [ 1072.416775][T25911] EXT4-fs: test_dummy_encryption option not supported [ 1072.475869][ T6785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1072.498360][ T6785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1072.520841][ T6785] bond0 (unregistering): Released all slaves [ 1072.733739][T25876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.769408][T25876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.791813][T25876] bridge_slave_0: entered allmulticast mode [ 1072.813071][T25876] bridge_slave_0: entered promiscuous mode [ 1072.830628][ T6785] hsr_slave_0: left promiscuous mode [ 1072.838586][ T6785] hsr_slave_1: left promiscuous mode [ 1072.854507][ T6785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1072.875781][ T6785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1072.898488][T25925] loop3: detected capacity change from 0 to 2048 [ 1072.932239][T25925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1072.979773][ T6785] team0 (unregistering): Port device team_slave_1 removed [ 1072.992411][ T6785] team0 (unregistering): Port device team_slave_0 removed [ 1073.036721][T25876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.048907][T25876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.070975][T25876] bridge_slave_1: entered allmulticast mode [ 1073.090979][T25876] bridge_slave_1: entered promiscuous mode [ 1073.132727][T25876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.154564][T25935] ipip0: entered promiscuous mode [ 1073.164944][T25876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.199946][T25876] team0: Port device team_slave_0 added [ 1073.218165][T25876] team0: Port device team_slave_1 added [ 1073.249476][T25876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.269531][T25876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.318047][T25876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.343501][T25876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1073.357970][T25876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.388600][T25876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.442720][T25876] hsr_slave_0: entered promiscuous mode [ 1073.455589][T25876] hsr_slave_1: entered promiscuous mode [ 1073.467558][T25876] debugfs: 'hsr0' already exists in 'hsr' [ 1073.479442][T25876] Cannot create hsr debugfs directory [ 1074.675398][T16814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.889179][T25884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1074.945597][T25947] loop3: detected capacity change from 0 to 1024 [ 1074.955056][T25947] EXT4-fs: Ignoring removed i_version option [ 1074.978944][T25876] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1074.988825][T25947] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1075.016672][T25876] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1075.030306][T25876] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1075.060906][T25947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1075.115987][T25876] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1075.156876][T25876] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1075.207144][T25876] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1075.239265][T25876] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1075.263927][T25876] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1075.384578][T25985] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5587'. [ 1075.546583][T25876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.370484][T25990] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5587'. [ 1076.478164][ T28] kauditd_printk_skb: 239 callbacks suppressed [ 1076.478183][ T28] audit: type=1400 audit(1781318189.024:11246): avc: denied { write } for pid=25988 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1076.559157][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1076.941735][ T28] audit: type=1400 audit(1781318189.484:11247): avc: denied { write } for pid=25996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1077.020948][ T28] audit: type=1400 audit(1781318189.564:11248): avc: denied { write } for pid=26007 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1077.052123][T25876] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.073988][ T6785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.081248][ T6785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.176204][T25876] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1077.188267][T25876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1077.213282][T16814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.268500][T26014] netlink: 71 bytes leftover after parsing attributes in process `syz.4.5591'. [ 1077.302018][ T28] audit: type=1326 audit(1781318189.844:11249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26012 comm="syz.4.5591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55d4ace59 code=0x7ffc0000 [ 1077.341121][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1077.458522][ T28] audit: type=1326 audit(1781318189.874:11250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26012 comm="syz.4.5591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55d4ace59 code=0x7ffc0000 [ 1077.556617][T26020] loop3: detected capacity change from 0 to 8192 [ 1077.602850][T26020] SET target dimension over the limit! [ 1077.617497][ T28] audit: type=1326 audit(1781318189.874:11251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26012 comm="syz.4.5591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55d4ace59 code=0x7ffc0000 [ 1077.729095][T26020] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1077.775400][T26020] FAT-fs (loop3): Filesystem has been set read-only [ 1077.783869][ T28] audit: type=1326 audit(1781318189.874:11252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26012 comm="syz.4.5591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fa55d4ace59 code=0x7ffc0000 [ 1077.919084][ T28] audit: type=1326 audit(1781318189.874:11253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26012 comm="syz.4.5591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa55d4ace59 code=0x7ffc0000 [ 1078.015482][T26050] ieee802154 phy0 wpan0: encryption failed: -22 [ 1078.044963][ T4125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.052157][ T4125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.058063][ T28] audit: type=1326 audit(1781318189.874:11254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26012 comm="syz.4.5591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa55d4ace59 code=0x7ffc0000 [ 1078.086685][ T28] audit: type=1326 audit(1781318189.874:11255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26012 comm="syz.4.5591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa55d4ace59 code=0x7ffc0000 [ 1078.203626][T26064] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5603'. [ 1078.246606][T25876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1078.255738][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1078.314516][T26075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26075 comm=syz.4.5604 [ 1078.421026][T26075] loop4: detected capacity change from 0 to 8192 [ 1078.446264][T26075] vfat: Unknown parameter '­Jÿ f»]@EÉXU›}˘¦';Œe$ÙöyäûéHß´ÌJ8”i`‚AsYð?Ó’' [ 1078.467515][T25876] veth0_vlan: entered promiscuous mode [ 1078.489392][T25876] veth1_vlan: entered promiscuous mode [ 1078.518790][T25876] veth0_macvtap: entered promiscuous mode [ 1078.526080][T26099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5607'. [ 1078.540287][T25876] veth1_macvtap: entered promiscuous mode [ 1078.576690][T25876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1078.596649][T25876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.612068][ T6784] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.623105][ T6784] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.637784][ T6784] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.647092][ T6784] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.440306][T26218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5613'. [ 1079.686092][T26223] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5613'. [ 1079.993247][T26225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5614'. [ 1080.500633][T26237] ip6tnl2: entered allmulticast mode [ 1081.147143][T26056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1081.505927][T26270] loop4: detected capacity change from 0 to 1024 [ 1081.518919][T26270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1082.386747][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 1082.386764][ T28] audit: type=1400 audit(1781318194.924:11275): avc: denied { write } for pid=26269 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.386370][T26279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5626'. [ 1083.531345][T26272] loop3: detected capacity change from 0 to 1024 [ 1083.677187][T26272] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1084.418344][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1084.680433][T26270] EXT4-fs: error -4 creating inode table initialization thread [ 1084.691604][T26270] EXT4-fs (loop4): mount failed [ 1084.709251][T26272] EXT4-fs warning (device loop3): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop3. [ 1084.922429][T26332] xt_hashlimit: size too large, truncated to 1048576 [ 1085.033791][T26347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5633'. [ 1085.624890][T26401] loop3: detected capacity change from 0 to 1024 [ 1085.644587][T26401] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1085.732540][T26402] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5639'. [ 1085.763709][T26401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.899663][ T28] audit: type=1400 audit(1781318198.324:11276): avc: denied { write } for pid=26375 comm="syz.3.5638" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1087.239229][T26445] loop7: detected capacity change from 0 to 1024 [ 1087.262188][T26445] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1087.355463][T26445] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1087.376943][T16814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.755489][T26449] loop3: detected capacity change from 0 to 512 [ 1087.817049][T26449] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1087.935000][T26449] loop3: detected capacity change from 0 to 4096 [ 1087.974475][T26449] EXT4-fs: Ignoring removed bh option [ 1087.987675][T26339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1087.995549][T26449] EXT4-fs (loop3): stripe (13) is not aligned with cluster size (16), stripe is disabled [ 1088.146150][T26449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.229365][ T28] audit: type=1400 audit(1781318200.744:11277): avc: denied { write } for pid=26448 comm="syz.3.5644" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1089.059877][T25876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.133031][T26461] loop4: detected capacity change from 0 to 2048 [ 1089.293425][ T28] audit: type=1400 audit(1781318201.824:11278): avc: denied { write } for pid=26448 comm="syz.3.5644" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1089.379084][T26461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1089.392597][T26461] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1089.444874][T26459] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5647: bg 0: block 345: padding at end of block bitmap is not set [ 1089.461085][ T28] audit: type=1400 audit(1781318201.984:11280): avc: denied { write } for pid=26454 comm="syz.4.5647" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1089.461181][ T28] audit: type=1400 audit(1781318201.984:11281): avc: denied { create } for pid=26454 comm="syz.4.5647" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1089.462487][ T28] audit: type=1400 audit(1781318201.854:11279): avc: denied { write } for pid=26448 comm="syz.3.5644" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1089.512579][T26449] EXT4-fs error (device loop3): ext4_empty_dir:3101: inode #12: block 80: comm syz.3.5644: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1089.599193][T26459] EXT4-fs (loop4): Remounting filesystem read-only [ 1089.660980][T26449] EXT4-fs (loop3): Remounting filesystem read-only [ 1089.670572][T26449] EXT4-fs warning (device loop3): ext4_empty_dir:3104: inode #12: comm syz.3.5644: directory missing '..' [ 1089.732971][T16814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.799319][T23537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.931481][T26477] netlink: 'syz.3.5651': attribute type 3 has an invalid length. [ 1089.949426][T26477] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5651'. [ 1090.448430][T26499] loop7: detected capacity change from 0 to 512 [ 1090.483241][T26499] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.5655: corrupted inode contents [ 1090.495407][T26499] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1090.495612][T26499] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #16: comm syz.7.5655: mark_inode_dirty error [ 1090.504797][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1090.504823][ C0] EXT4-fs (loop7): initial error at time 1781318203: ext4_do_update_inode:5690: inode 16 [ 1090.504862][ C0] EXT4-fs (loop7): last error at time 1781318203: ext4_do_update_inode:5690: inode 16 [ 1090.544038][T26499] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1090.545689][T26499] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.5655: corrupted inode contents [ 1090.584240][T26499] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1090.671165][T26499] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.5655: mark_inode_dirty error [ 1090.694263][T26499] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1090.694529][T26499] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.5655: corrupted inode contents [ 1090.716183][T26499] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1090.716365][T26499] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 1090.734687][T26499] loop7: lost filesystem error report for type 5 error -117 [ 1090.734932][T26499] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #16: comm syz.7.5655: corrupted inode contents [ 1090.755888][T26499] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1090.756231][T26499] EXT4-fs error (device loop7): ext4_truncate:4690: inode #16: comm syz.7.5655: mark_inode_dirty error [ 1090.786470][T26499] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1090.786717][T26499] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 1090.808401][T26499] loop7: lost filesystem error report for type 5 error -117 [ 1090.808835][T26499] EXT4-fs (loop7): 1 truncate cleaned up [ 1090.823675][T26499] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1090.945473][T26499] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1091.133590][T26319] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1091.147495][T26319] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 1091.261949][T26516] blktrace: Concurrent blktraces are not allowed on loop5 [ 1091.701945][ T28] audit: type=1326 audit(1781318204.144:11282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26531 comm="syz.0.5666" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f1e13256bd7 code=0x0 [ 1091.992343][T26546] loop5: detected capacity change from 0 to 1024 [ 1092.015013][T26546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1092.153965][T26546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1092.676156][ T28] audit: type=1400 audit(1781318204.724:11283): avc: denied { write } for pid=26541 comm="syz.5.5669" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1093.561480][T15167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.052425][T25876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.115377][T26580] siw: device registration error -23 [ 1094.250614][T26586] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5683'. [ 1094.384251][T26587] loop5: detected capacity change from 0 to 1024 [ 1094.402032][T26587] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1094.483746][T26587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1094.506838][T26587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5680'. [ 1094.570540][T26537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1095.182486][T26597] loop7: detected capacity change from 0 to 512 [ 1095.288649][T26597] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1095.397818][T26597] EXT4-fs (loop7): 1 truncate cleaned up [ 1095.486476][T26597] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1095.558139][T26597] FAULT_INJECTION: forcing a failure. [ 1095.558139][T26597] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.612859][T26597] CPU: 1 UID: 0 PID: 26597 Comm: syz.7.5687 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1095.612906][T26597] Tainted: [W]=WARN [ 1095.612913][T26597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1095.612926][T26597] Call Trace: [ 1095.612933][T26597] [ 1095.612940][T26597] __dump_stack+0x1d/0x30 [ 1095.612968][T26597] dump_stack_lvl+0x95/0xd0 [ 1095.612996][T26597] dump_stack+0x15/0x1b [ 1095.613090][T26597] should_fail_ex+0x25e/0x270 [ 1095.613135][T26597] should_failslab+0x8c/0xb0 [ 1095.613247][T26597] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1095.613278][T26597] ? do_getname+0x2e/0x1c0 [ 1095.613298][T26597] do_getname+0x2e/0x1c0 [ 1095.613322][T26597] __se_sys_renameat2+0x29/0x1c0 [ 1095.613408][T26597] __x64_sys_renameat2+0x67/0x80 [ 1095.613509][T26597] x64_sys_call+0x2a12/0x3020 [ 1095.613533][T26597] do_syscall_64+0x136/0x3c0 [ 1095.613573][T26597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.613595][T26597] RIP: 0033:0x7f2c6b65ce59 [ 1095.613655][T26597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.613674][T26597] RSP: 002b:00007f2c6a0af028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1095.613694][T26597] RAX: ffffffffffffffda RBX: 00007f2c6b8d5fa0 RCX: 00007f2c6b65ce59 [ 1095.613722][T26597] RDX: ffffffffffffff9c RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1095.613741][T26597] RBP: 00007f2c6a0af090 R08: 0000000000000002 R09: 0000000000000000 [ 1095.613758][T26597] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1095.613841][T26597] R13: 00007f2c6b8d6038 R14: 00007f2c6b8d5fa0 R15: 00007ffc24a2fba8 [ 1095.613864][T26597] [ 1095.840689][T26612] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5687'. [ 1096.185610][ T28] audit: type=1400 audit(1781318208.724:11284): avc: denied { write } for pid=26613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1096.276184][ T28] audit: type=1400 audit(1781318208.814:11285): avc: denied { write } for pid=26624 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1096.318333][T15167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.339100][T26628] netlink: 'syz.0.5692': attribute type 2 has an invalid length. [ 1096.359790][T26628] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5692'. [ 1096.434476][T25876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.497195][ T28] audit: type=1400 audit(1781318209.034:11286): avc: denied { ioctl } for pid=26641 comm="syz.7.5694" path="socket:[74284]" dev="sockfs" ino=74284 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1096.843366][ T28] audit: type=1400 audit(1781318209.384:11287): avc: denied { write } for pid=26631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1096.917295][T26658] loop7: detected capacity change from 0 to 256 [ 1096.954886][T26658] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1097.192275][ T28] audit: type=1400 audit(1781318209.724:11288): avc: denied { write } for pid=26666 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1097.604747][T26678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5701'. [ 1097.713397][ T28] audit: type=1400 audit(1781318210.254:11289): avc: denied { write } for pid=26672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1097.813019][ T28] audit: type=1400 audit(1781318210.314:11290): avc: denied { write } for pid=26691 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1098.622010][ T28] audit: type=1400 audit(1781318211.154:11291): avc: denied { write } for pid=26696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1098.687645][T26721] loop7: detected capacity change from 0 to 512 [ 1098.709591][ T28] audit: type=1400 audit(1781318211.257:11292): avc: denied { write } for pid=26717 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1098.757425][T26721] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 1098.768290][T26721] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.5710: corrupted in-inode xattr: e_value size too large [ 1098.782852][T26721] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1098.784829][T26721] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.5710: couldn't read orphan inode 15 (err -117) [ 1098.794122][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1098.794155][ C0] EXT4-fs (loop7): initial error at time 1781318211: ext4_iget_extra_inode:5128: inode 15 [ 1098.794206][ C0] EXT4-fs (loop7): last error at time 1781318211: ext4_iget_extra_inode:5128: inode 15 [ 1098.833999][T26721] loop7: lost filesystem error report for type 5 error -117 [ 1098.835762][T26721] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1098.888875][T26716] loop5: detected capacity change from 0 to 512 [ 1098.916921][T26716] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1098.947145][T26734] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5712'. [ 1098.950086][T26711] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1098.980574][T25876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1099.343278][T26745] loop3: detected capacity change from 0 to 512 [ 1099.372236][T26745] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1099.392575][T26745] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1099.405355][T26745] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1099.417439][T26745] EXT4-fs (loop3): 1 truncate cleaned up [ 1099.423778][T26745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1099.770914][T26738] loop7: detected capacity change from 0 to 8192 [ 1099.944667][T26756] gre0 speed is unknown, defaulting to 1000 [ 1100.481684][T16814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.584902][T26319] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.606539][T26778] loop2: detected capacity change from 0 to 7 [ 1100.752191][T26756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.759453][T26756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.766755][T26756] bridge_slave_0: entered allmulticast mode [ 1100.773870][T26756] bridge_slave_0: entered promiscuous mode [ 1100.784863][T26756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.792296][T26756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.799762][T26756] bridge_slave_1: entered allmulticast mode [ 1100.806381][T26756] bridge_slave_1: entered promiscuous mode [ 1100.827063][T26756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.838027][T26756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.859554][T26756] team0: Port device team_slave_0 added [ 1100.866279][T26756] team0: Port device team_slave_1 added [ 1100.905988][T26756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.913156][T26756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.079532][T26794] loop4: detected capacity change from 0 to 1024 [ 1101.090053][T26794] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1101.890518][T26756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.040153][T26319] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.896049][T26756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.903245][T26756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.930642][T26756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1103.674454][T26796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5730'. [ 1104.184063][T26794] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1104.184643][T26794] EXT4-fs: failed to create workqueue [ 1104.201578][T26794] EXT4-fs (loop4): mount failed [ 1104.770362][T26319] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.807813][T26756] hsr_slave_0: entered promiscuous mode [ 1104.833345][T26756] hsr_slave_1: entered promiscuous mode [ 1104.853449][T26756] debugfs: 'hsr0' already exists in 'hsr' [ 1104.965172][T26756] Cannot create hsr debugfs directory [ 1105.418238][ T28] audit: type=1400 audit(1781318217.967:11293): avc: denied { read } for pid=26807 comm="syz.4.5734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1105.621639][ T28] audit: type=1400 audit(1781318218.167:11294): avc: denied { create } for pid=26819 comm="syz.5.5736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1105.673313][T26319] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.781445][ T28] audit: type=1400 audit(1781318218.327:11295): avc: denied { write } for pid=26819 comm="syz.5.5736" path="socket:[74815]" dev="sockfs" ino=74815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1105.810885][T26826] loop3: detected capacity change from 0 to 256 [ 1105.821673][T26826] vfat: Bad value for 'shortname' [ 1105.907268][T26832] loop3: detected capacity change from 0 to 128 [ 1105.918252][ T28] audit: type=1400 audit(1781318218.457:11296): avc: denied { connect } for pid=26830 comm="syz.7.5741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1105.953071][T26832] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1105.977915][T26832] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.016429][ T28] audit: type=1400 audit(1781318218.557:11297): avc: denied { write } for pid=26829 comm="syz.3.5740" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1106.045684][T26832] EXT4-fs warning (device loop3): verify_group_input:156: Last group not full [ 1106.054858][T26831] loop7: detected capacity change from 0 to 4096 [ 1106.063792][ T28] audit: type=1400 audit(1781318218.557:11298): avc: denied { write } for pid=26829 comm="syz.3.5740" path="/534/file1/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1106.088836][ T28] audit: type=1400 audit(1781318218.587:11299): avc: denied { ioctl } for pid=26829 comm="syz.3.5740" path="/534/file1/file1" dev="loop3" ino=12 ioctlcmd=0x560a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1106.144962][T16814] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1106.158344][T26831] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1106.179100][ T28] audit: type=1400 audit(1781318218.727:11300): avc: denied { setopt } for pid=26830 comm="syz.7.5741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1106.203262][T26319] team0: Port device bond0 removed [ 1106.209482][T26319] bond0 (unregistering): Released all slaves [ 1106.217623][T26319] bond1 (unregistering): Released all slaves [ 1106.227471][T26319] bond2 (unregistering): Released all slaves [ 1106.237240][T26319] bond3 (unregistering): Released all slaves [ 1106.246571][T26319] bond4 (unregistering): Released all slaves [ 1106.256643][T26319] bond5 (unregistering): Released all slaves [ 1106.310074][T26319] tipc: Left network mode [ 1106.447788][T26849] loop4: detected capacity change from 0 to 1024 [ 1106.467979][T26849] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1106.596586][T26849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1106.614048][T26849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5743'. [ 1106.723926][ T28] audit: type=1400 audit(1781318219.177:11301): avc: denied { write } for pid=26837 comm="syz.4.5743" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1106.874426][T25876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.027934][T26319] hsr_slave_0: left promiscuous mode [ 1107.060809][ T28] audit: type=1400 audit(1781318219.607:11302): avc: denied { write } for pid=26845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1108.045184][T26319] hsr_slave_1: left promiscuous mode [ 1108.106759][T23537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.207450][T26319] team0 (unregistering): Port device vlan0 removed [ 1108.302216][T26319] team0 (unregistering): Port device dummy0 removed [ 1108.311422][T26873] loop5: detected capacity change from 0 to 4096 [ 1108.337124][T26873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1108.355039][T26877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5750'. [ 1108.394859][T15167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.477716][T26877] ip6erspan1: entered allmulticast mode [ 1108.537078][T26756] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1108.644289][T26756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1108.674025][T26891] loop7: detected capacity change from 0 to 512 [ 1108.696756][T26756] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1108.724092][T26891] ext4: Unknown parameter '"' [ 1108.872055][T26756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1108.941913][T26756] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1109.033707][T26756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1109.115466][T26756] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1109.239822][T26756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1109.429958][T26918] pim6reg: entered allmulticast mode [ 1109.449044][T26905] pim6reg: left allmulticast mode [ 1110.555589][T26924] loop5: detected capacity change from 0 to 128 [ 1110.642161][T26926] loop7: detected capacity change from 0 to 512 [ 1110.667032][T26926] journal_path: Lookup failure for './file3' [ 1110.674005][T26926] EXT4-fs: error: could not find journal device path [ 1111.578062][T26930] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=26930 comm=syz.4.5761 [ 1111.601175][T26756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.642405][T26932] bond4: option arp_validate: invalid value (18446744073709551615) [ 1111.655052][T26932] bond4 (unregistering): Released all slaves [ 1111.657182][T26938] loop5: detected capacity change from 0 to 512 [ 1111.678989][T26756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.686363][T26938] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1111.697851][T26319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.704988][T26319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.715046][T26938] EXT4-fs: Ignoring removed nobh option [ 1111.723325][T26319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.730448][T26319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.761489][T26756] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1111.772025][T26756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1111.819685][T26938] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.5765: corrupted in-inode xattr: invalid ea_ino [ 1111.833147][T26938] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1111.837855][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1111.853672][ C1] EXT4-fs (loop5): initial error at time 1781318224: ext4_iget_extra_inode:5128: inode 15 [ 1111.863660][ C1] EXT4-fs (loop5): last error at time 1781318224: ext4_iget_extra_inode:5128: inode 15 [ 1111.898852][T26938] EXT4-fs (loop5): Remounting filesystem read-only [ 1111.912039][T26938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1111.968222][T15167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1112.018207][T26959] netlink: 'syz.7.5766': attribute type 21 has an invalid length. [ 1112.028493][T26959] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5766'. [ 1112.659338][T26756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.965314][T26756] veth0_vlan: entered promiscuous mode [ 1113.931060][T26756] veth1_vlan: entered promiscuous mode [ 1113.946557][T26756] veth0_macvtap: entered promiscuous mode [ 1113.957545][T26756] veth1_macvtap: entered promiscuous mode [ 1114.380190][T26756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.389791][T26756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.573400][T26996] netlink: 'syz.7.5774': attribute type 58 has an invalid length. [ 1114.601871][T26996] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5774'. [ 1114.648853][T26999] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5776'. [ 1114.659081][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1114.659099][ T28] audit: type=1400 audit(1781318227.207:11316): avc: denied { setopt } for pid=27001 comm="syz.3.5777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1114.753603][T27005] netlink: 'syz.3.5777': attribute type 15 has an invalid length. [ 1114.925970][ T4117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.952585][ T4117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.003276][ T4117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.021766][ T4117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.054307][T27002] gre0 speed is unknown, defaulting to 1000 [ 1115.263178][T27017] loop7: detected capacity change from 0 to 1024 [ 1115.286180][T27017] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1115.311926][T27017] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1115.363225][T27017] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1115.376644][T27023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5787'. [ 1115.381016][T27017] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce198, mo2=0000] [ 1115.409470][T27017] System zones: 0-1, 3-12 [ 1115.422717][T27023] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5787'. [ 1115.432084][T27017] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1115.449389][T27017] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.5784: Freeing blocks not in datazone - block = 0, count = 4096 [ 1115.497650][T27017] loop7: lost filesystem error report for type 5 error -117 [ 1115.497931][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1115.511777][ C1] EXT4-fs (loop7): initial error at time 1781318228: ext4_free_blocks:6718 [ 1115.520423][ C1] EXT4-fs (loop7): last error at time 1781318228: ext4_free_blocks:6718 [ 1115.576112][T27017] EXT4-fs (loop7): 1 orphan inode deleted [ 1115.595508][T27017] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1115.649500][T27033] FAULT_INJECTION: forcing a failure. [ 1115.649500][T27033] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.663554][T27017] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #2: block 16: comm syz.7.5784: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 1115.698223][T27033] CPU: 0 UID: 0 PID: 27033 Comm: syz.5.5791 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1115.698280][T27033] Tainted: [W]=WARN [ 1115.698287][T27033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1115.698305][T27033] Call Trace: [ 1115.698324][T27033] [ 1115.698335][T27033] __dump_stack+0x1d/0x30 [ 1115.698368][T27033] dump_stack_lvl+0x95/0xd0 [ 1115.698395][T27033] dump_stack+0x15/0x1b [ 1115.698483][T27033] should_fail_ex+0x25e/0x270 [ 1115.698519][T27033] should_failslab+0x8c/0xb0 [ 1115.698581][T27033] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 1115.698697][T27033] ? __alloc_skb+0x2d6/0x690 [ 1115.698718][T27033] __alloc_skb+0x2d6/0x690 [ 1115.698737][T27033] ? __alloc_skb+0x200/0x690 [ 1115.698757][T27033] netlink_ack+0xfd/0x530 [ 1115.698793][T27033] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 1115.698870][T27033] netlink_rcv_skb+0x18d/0x220 [ 1115.698999][T27033] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1115.699046][T27033] rtnetlink_rcv+0x1c/0x30 [ 1115.699165][T27033] netlink_unicast+0x5a7/0x680 [ 1115.699193][T27033] netlink_sendmsg+0x5be/0x6f0 [ 1115.699233][T27033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1115.699290][T27033] ____sys_sendmsg+0x532/0x580 [ 1115.699326][T27033] ___sys_sendmsg+0x195/0x1e0 [ 1115.699375][T27033] __x64_sys_sendmsg+0xd4/0x160 [ 1115.699413][T27033] x64_sys_call+0x194c/0x3020 [ 1115.699458][T27033] do_syscall_64+0x136/0x3c0 [ 1115.699568][T27033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.699596][T27033] RIP: 0033:0x7f148e10ce59 [ 1115.699616][T27033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1115.699639][T27033] RSP: 002b:00007f148cb5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1115.699662][T27033] RAX: ffffffffffffffda RBX: 00007f148e385fa0 RCX: 00007f148e10ce59 [ 1115.699680][T27033] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 1115.699738][T27033] RBP: 00007f148cb5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.699755][T27033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1115.699852][T27033] R13: 00007f148e386038 R14: 00007f148e385fa0 R15: 00007ffcf85f5f88 [ 1115.699881][T27033] [ 1116.161428][T25876] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.694027][T27049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5795'. [ 1117.215782][T27051] gre0 speed is unknown, defaulting to 1000 [ 1117.431247][ T28] audit: type=1400 audit(1781318229.897:11317): avc: denied { mount } for pid=27054 comm="syz.5.5797" name="/" dev="rpc_pipefs" ino=75138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1117.691406][T27059] loop5: detected capacity change from 0 to 2048 [ 1117.752831][T27059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1117.775759][T27059] ext4 filesystem being mounted at /565/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1117.819725][ T28] audit: type=1400 audit(1781318230.252:11318): avc: denied { write } for pid=27057 comm="syz.5.5798" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1117.889766][T15167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.127262][T27064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5800'. [ 1118.138240][T27064] netlink: 'syz.3.5800': attribute type 2 has an invalid length. [ 1118.294514][T27066] loop5: detected capacity change from 0 to 1024 [ 1118.294916][ T28] audit: type=1326 audit(1781318230.692:11319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27067 comm="syz.0.5801" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a2606ce59 code=0x0 [ 1118.330464][T27066] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1118.362248][T27066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1118.383807][T27076] FAULT_INJECTION: forcing a failure. [ 1118.383807][T27076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1118.397730][T27076] CPU: 0 UID: 0 PID: 27076 Comm: syz.0.5804 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1118.397810][T27076] Tainted: [W]=WARN [ 1118.397855][T27076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1118.397923][T27076] Call Trace: [ 1118.397933][T27076] [ 1118.397944][T27076] __dump_stack+0x1d/0x30 [ 1118.397976][T27076] dump_stack_lvl+0x95/0xd0 [ 1118.398005][T27076] dump_stack+0x15/0x1b [ 1118.398108][T27076] should_fail_ex+0x25e/0x270 [ 1118.398212][T27076] should_fail+0xb/0x20 [ 1118.398230][T27076] should_fail_usercopy+0x1a/0x20 [ 1118.398281][T27076] _copy_from_user+0x1c/0xb0 [ 1118.398315][T27076] ___sys_sendmsg+0xc1/0x1e0 [ 1118.398369][T27076] __x64_sys_sendmsg+0xd4/0x160 [ 1118.398400][T27076] x64_sys_call+0x194c/0x3020 [ 1118.398456][T27076] do_syscall_64+0x136/0x3c0 [ 1118.398500][T27076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.398539][T27076] RIP: 0033:0x7f8a2606ce59 [ 1118.398561][T27076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1118.398586][T27076] RSP: 002b:00007f8a24ac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1118.398677][T27076] RAX: ffffffffffffffda RBX: 00007f8a262e5fa0 RCX: 00007f8a2606ce59 [ 1118.398697][T27076] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1118.398714][T27076] RBP: 00007f8a24ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 1118.398766][T27076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1118.398783][T27076] R13: 00007f8a262e6038 R14: 00007f8a262e5fa0 R15: 00007ffc24f36388 [ 1118.398805][T27076] [ 1118.854731][T15167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.883763][T27087] loop5: detected capacity change from 0 to 512 [ 1118.898876][T27087] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.5805: corrupted in-inode xattr: invalid ea_ino [ 1118.941827][T27087] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1118.941997][T27087] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.5805: couldn't read orphan inode 15 (err -117) [ 1118.951256][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1118.951277][ C0] EXT4-fs (loop5): initial error at time 1781318231: ext4_iget_extra_inode:5128: inode 15 [ 1118.951304][ C0] EXT4-fs (loop5): last error at time 1781318231: ext4_iget_extra_inode:5128: inode 15 [ 1119.024921][T27087] loop5: lost filesystem error report for type 5 error -117 [ 1119.025473][T27087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1119.064411][ T28] audit: type=1400 audit(1781318231.412:11320): avc: denied { write } for pid=27086 comm="syz.5.5805" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1119.140556][ T28] audit: type=1400 audit(1781318231.496:11321): avc: denied { write } for pid=27086 comm="syz.5.5805" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1119.203157][ T28] audit: type=1400 audit(1781318231.552:11322): avc: denied { map } for pid=27086 comm="syz.5.5805" path="/567/file0/memory.events.local" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1119.251582][T27098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27098 comm=syz.4.5809 [ 1119.300153][T27102] loop7: detected capacity change from 0 to 2048 [ 1119.401508][T15167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.421103][T27102] Alternate GPT is invalid, using primary GPT. [ 1119.436192][T27102] loop7: p1 p2 p3 [ 1119.445141][T27102] loop7: partition table partially beyond EOD, truncated [ 1119.501783][T27109] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5813'. [ 1119.518351][T27102] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5811'. [ 1120.053285][T27120] loop3: detected capacity change from 0 to 128 [ 1120.170606][T27120] bio_check_eod: 3248 callbacks suppressed [ 1120.170629][T27120] syz.3.5815: attempt to access beyond end of device [ 1120.170629][T27120] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1120.211552][T27120] syz.3.5815: attempt to access beyond end of device [ 1120.211552][T27120] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1120.237785][T27120] syz.3.5815: attempt to access beyond end of device [ 1120.237785][T27120] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1120.282777][T27120] syz.3.5815: attempt to access beyond end of device [ 1120.282777][T27120] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1120.331606][T27120] syz.3.5815: attempt to access beyond end of device [ 1120.331606][T27120] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1120.362740][T27120] syz.3.5815: attempt to access beyond end of device [ 1120.362740][T27120] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1120.401222][T27120] syz.3.5815: attempt to access beyond end of device [ 1120.401222][T27120] loop3: rw=2049, sector=249, nr_sectors = 16 limit=128 [ 1120.430994][T27120] syz.3.5815: attempt to access beyond end of device [ 1120.430994][T27120] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 1120.461101][T27120] syz.3.5815: attempt to access beyond end of device [ 1120.461101][T27120] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 1120.506581][T27120] syz.3.5815: attempt to access beyond end of device [ 1120.506581][T27120] loop3: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 1120.523266][T27137] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5820'. [ 1123.763050][T27175] loop5: detected capacity change from 0 to 2048 [ 1124.408562][T27175] loop5: p2 p3 < > p4 < p5 > [ 1124.420954][T27175] loop5: partition table partially beyond EOD, truncated [ 1124.451987][T27175] loop5: p3 start 4284289 is beyond EOD, truncated [ 1124.502060][T27185] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5836'. [ 1124.581788][T27192] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5839'. [ 1124.606586][T27192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5839'. [ 1124.741195][T27196] syzkaller0: entered promiscuous mode [ 1124.773470][T27196] syzkaller0: entered allmulticast mode [ 1125.071760][T27212] ================================================================== [ 1125.079922][T27212] BUG: KCSAN: data-race in ktime_get / timekeeping_update_from_shadow [ 1125.088220][T27212] [ 1125.090566][T27212] write to 0xffffffff89395488 of 304 bytes by interrupt on cpu 1: [ 1125.098412][T27212] timekeeping_update_from_shadow+0x40d/0x440 [ 1125.104623][T27212] __timekeeping_advance+0xa68/0xc10 [ 1125.109965][T27212] update_wall_time+0x21/0x50 [ 1125.114724][T27212] tick_do_update_jiffies64+0x169/0x1c0 [ 1125.120306][T27212] tick_nohz_handler+0x88/0x3d0 [ 1125.125195][T27212] __hrtimer_run_queues+0x1f8/0x510 [ 1125.130434][T27212] hrtimer_interrupt+0x257/0x810 [ 1125.135409][T27212] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 1125.141343][T27212] sysvec_apic_timer_interrupt+0x6f/0x80 [ 1125.147019][T27212] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1125.153056][T27212] unix_dgram_recvmsg+0x7e/0x90 [ 1125.157953][T27212] sock_recvmsg_nosec+0xc2/0xf0 [ 1125.162844][T27212] ____sys_recvmsg+0x26f/0x280 [ 1125.167732][T27212] ___sys_recvmsg+0x11f/0x3a0 [ 1125.172542][T27212] do_recvmmsg+0x1e5/0x560 [ 1125.177173][T27212] __x64_sys_recvmmsg+0xe5/0x170 [ 1125.182146][T27212] x64_sys_call+0x80f/0x3020 [ 1125.186767][T27212] do_syscall_64+0x136/0x3c0 [ 1125.191397][T27212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.197343][T27212] [ 1125.199687][T27212] read to 0xffffffff89395498 of 8 bytes by task 27212 on cpu 0: [ 1125.207343][T27212] ktime_get+0xcf/0x240 [ 1125.211549][T27212] bpf_test_timer_continue+0x155/0x350 [ 1125.217374][T27212] bpf_prog_test_run_flow_dissector+0x27a/0x360 [ 1125.223666][T27212] bpf_prog_test_run+0x208/0x340 [ 1125.228647][T27212] __sys_bpf+0x52e/0x7e0 [ 1125.232914][T27212] __x64_sys_bpf+0x41/0x50 [ 1125.237368][T27212] x64_sys_call+0x10cb/0x3020 [ 1125.242083][T27212] do_syscall_64+0x136/0x3c0 [ 1125.246715][T27212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.252638][T27212] [ 1125.254973][T27212] value changed: 0x000002434bdf8b48 -> 0x000002434d2f3cb5 [ 1125.262097][T27212] [ 1125.264440][T27212] Reported by Kernel Concurrency Sanitizer on: [ 1125.270807][T27212] CPU: 0 UID: 0 PID: 27212 Comm: syz.5.5842 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1125.281781][T27212] Tainted: [W]=WARN [ 1125.285598][T27212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1125.295719][T27212] ================================================================== [ 1125.858674][ T28] audit: type=1400 audit(1781318237.773:11323): avc: denied { unmount } for pid=23537 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1