last executing test programs: 1m1.843220867s ago: executing program 4 (id=385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e1401"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000080)={0x0, 0x7, 0x4}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) setpgid(0x0, 0x0) 1m1.676186131s ago: executing program 4 (id=387): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @ni={0x94578a1f8aecba02, 0x0, 0x0, 0xffff, 0x1, 0x596}}}}}}, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x129c40) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 1m1.317708051s ago: executing program 4 (id=398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "f9"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, 0x0, 0x4000080) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018, 0xffffffffffffffff}, './file0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8}, 0x10f8eb, 0x1224, 0x2, 0x5, 0xc, 0x5, 0x8, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}}, 0x880) r7 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100)=0x0, &(0x7f00000000c0), &(0x7f0000000000)) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x7, 0xa16ae, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xd}, 0x8000, 0xa2, 0xfffffffb, 0x7, 0x7f, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x22, &(0x7f0000000200)={&(0x7f0000001000)={[{0x0, 0x0, 0x1, 0xa00}]}, 0x1}, 0x1) write(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x8, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000006c0)=ANY=[@ANYRES32=r8, @ANYBLOB="b2a9cb4fb1474e460e4a4880bfc9b73ec55f1adfbc56af2f3e27b62565267ae63085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x400}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) sendmsg$TIPC_NL_NET_SET(r10, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x4e21, 0x10000, @loopback, 0x3}, 0x1c) sendmsg$TIPC_NL_BEARER_ENABLE(r10, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, r11, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000017000000400006803c00040067636d28616573290000000000000000000000000000000000000000000001000b0000000102030405060708090a0b0c0d0e0f1011121314"], 0x54}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x5, 0x5, 0x5, 0x8420, r2, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x8, @value=r2}, 0x50) 1m0.733776215s ago: executing program 4 (id=403): r0 = socket(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000003e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[{0x10, 0x84, 0x1}], 0x10}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x8, &(0x7f0000000800)={[{@resgid}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x6}}, {@auto_da_alloc}, {@nombcache}]}, 0xff, 0x4f8, &(0x7f0000001040)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000017c0)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}}, 0x24}}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000440), 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x12) ptrace(0x4208, r2) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000002d40)=[{0x0}, {0x0}, {&(0x7f0000001c00)=""/144, 0x90}, {0x0}], 0x4, 0x0) tkill(r2, 0x12) fallocate(r1, 0x0, 0x0, 0x8ffff) 1m0.665170056s ago: executing program 4 (id=407): socket$nl_xfrm(0x10, 0x3, 0x6) write(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000530b000000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$clear(0x7, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x11, 0xe, 0x0, &(0x7f0000000700)="0300000000000a00a139d475c695", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2}, 0x50) 59.954144134s ago: executing program 4 (id=420): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0xc82, &(0x7f0000000180)={[{@data_journal}, {@orlov}]}, 0x1, 0x52e, &(0x7f0000000f00)="$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") 59.872905436s ago: executing program 32 (id=420): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0xc82, &(0x7f0000000180)={[{@data_journal}, {@orlov}]}, 0x1, 0x52e, &(0x7f0000000f00)="$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") 41.404633114s ago: executing program 5 (id=734): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0xa, 0x5, 0x0) r4 = dup(r3) sendmsg$inet_sctp(r4, &(0x7f0000000040)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x6, @private2, 0xc8}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000005c0)='I1g!q', 0x5}], 0x1, &(0x7f0000000280)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x48d5}, 0x8050) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @local}}}, 0x84) (async) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)=""/230, 0xe6}, {&(0x7f0000000640)=""/231, 0xe7}], 0x2) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r6}) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r6) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) futimesat(r1, &(0x7f0000000440)='./file0\x00', &(0x7f00000007c0)={{0x0, 0xea60}, {r9, r10/1000+10000}}) (async) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="04002abd7000fbdbdf250d0000001c12eb0d122c407c356d9ec18b88d1000280080008000300000005000d000000000008000300030000000800"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r11, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r11], 0x38}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000100039040000000000000000000003e4", @ANYRES32=r11, @ANYBLOB="0000000000000200ffffffffffffffff0e00df15ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', r11, 0x0, 0x9, 0xff, 0x6, 0x14, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x80, 0x5, 0x958}}) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x8030942b, &(0x7f0000000800)={0x3, {0xa, 0x8, 0x5, 0xff, 0x10001}}) 41.16497635s ago: executing program 5 (id=736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000100001fcffffff00000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 41.075556092s ago: executing program 5 (id=738): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42}, 0x28) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0xfaff}) 40.193386504s ago: executing program 5 (id=749): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x1, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000002c0), 0x3}, 0x0, 0x10100, 0x9e4, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@discard}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x567, &(0x7f0000001300)="$eJzs3d9rW1UcAPDvTdP91nUwBopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0XUaTjrUO3B7ciy8yBBEH4h/gu4/Df8C/YqCDIaPogy+Vm96s3Zr0R5o1mfl84Gbn3Huyc78595ydm3NHAhhYo9lLIeKViPg2iTi67lgx8oOjq+WWH9+cyrYkVlY++yuJJN/XLJ/kfx5uZooRv30dcbrwVJUj2UttcWm2XKmk8/nOsfrctbHa4tKZK3PlmXQmvToxOXnuncmJ9997t2uxvnnxnx8+vf/RuW9OLn//y8Njd5M4H0fyY+vj2IVb6zOjMZp/JsNx/pmC412orJ8kvT4BOjKU9/PhyMaAozGU93rg/++riFgBBlSi/8OAas4Dmvf2XboPfmE8+nD1Bmhj/MXV70biQOPe6NBy8tSdUdL8ImOXsjp+/fPe3WyL7n0PAbClW7cj4myxuHH8S/Lxr3Nnt1Hm2TqMf7B37mfzn7dazX8KT+Y/0WL+c7hF3+3E1v2/8LAL1bSVzf8+aDn/zRetRmJkKM+91MgOJ5evVNJsbHs5Ik7F8P4sv9l6zrnlByvtjq2f/2VbVn9zLpifx8Pi/qffM12ul3cX9ZpHtyNebTn/TZ60f9Ki/bPP4+I26ziR3nu93bGt43++Vn6OeKNl+6+taCWbr0+ONa6HseZVsdHfd0783q7+Xseftf+hzeMfSdav19Z2XsdPB/5N2x3r9Prfl3zeSO/L990o1+vz4xH7kk827p9Ye28z3yyfxX/q5ObjX6vr/2BEfLHN+O8cv9O26K7avwuLrln80ztq/50nHnz85Y+dx5+1/9uN1Kl8z3bGv+2e4G4+OwAAAAAAAOg3hYg4Ekmh9CRdKJRKq893HI9DhUq1Vj99eahR9sjq8w+F5kr30XXPQ4znz8M28xPP5Ccj4lhEfDd0sJEvTVUr070OHgAAAAAAAAAAAAAAAAAAAPrE4Tb//z/zx1Cvzw547vzkNwyuLft/N37pCehL/v2HwaX/w+DS/2Fw6f8wuPR/GFz6Pwwu/R8Gl/4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAXXXxwoVsW1l+fHMqy09fX1yYrV4/M53WZktzC1Olqer8tdJMtTpTSUtT1bmt/r5KtXptfCIWbozV01p9rLa4dGmuunC1funKXHkmvZQO70lUAAAAAAAAAAAAAAAAAAAA8GKpLS7NliuVdH5nidc6epfEJokDnbZFjxPFPagriX6IdNuJiLjVB6exu0SvRyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWPNfAAAA///mLTPX") openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) socket(0x40000000015, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xfd, 0x7ffc0001}]}) syz_emit_ethernet(0x3a, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbfbbbbbbbbaaaaaaaaaaaa88a8180081000000080045000024fffd000000119078ac1e0001e0000002000017c10010907801020000d482449a"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./tracing/events/enable\x00', 0x19) write(r0, &(0x7f0000000140)='1', 0x1) setns(0xc9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a2c000000060a0b0400000000000000000200000018000480140001800a0001006d6174636800000004000280140000001100200000000000000000000a00000a"], 0x54}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=r2], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r1, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000108001b00000000001c001a8018000280140001800800140001"], 0x44}}, 0x0) 37.010691513s ago: executing program 5 (id=767): socket(0x21, 0x80805, 0x82000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}}, 0x4084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2446, 0x4404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x123c2, 0x0, 0x7fffffff, 0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x24, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, 0x0) setns(0xc9, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000060801"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x104, 0x1224, 0x0, 0x8, 0x8, 0x20020005, 0x0, 0x0, 0x0, 0x0, 0x8000080000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40048880}, 0x4000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20048841}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x80) 36.594501263s ago: executing program 5 (id=776): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 36.34418689s ago: executing program 33 (id=776): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 26.503207694s ago: executing program 6 (id=777): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0xfd, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0x13}, 0xc108, 0x1, 0xc, 0x6, 0x7, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000)=0x39, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, 0x0, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000002c0)) add_key$user(&(0x7f0000000000), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000580)="1443", 0x2, 0xffffffffffffffff) 26.183269441s ago: executing program 6 (id=865): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x58f, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) (fail_nth: 2) 11.146636654s ago: executing program 34 (id=865): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x58f, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) (fail_nth: 2) 3.315976198s ago: executing program 0 (id=1074): socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8882, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20022, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) close(0x3) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000040)=[{r3, 0x1}], 0x1, 0x101) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x17, &(0x7f0000000080)=0x8000601, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0xee00, 0xffffffffffffffff}}, './file1/../file0\x00'}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10c0040, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffa}}, {@stripe={'stripe', 0x3d, 0x1089dcc7}}, {@sysvgroups}, {@dax_inode}], [{@uid_eq={'uid', 0x3d, r5}}]}, 0x11, 0x4fa, &(0x7f0000000a00)="$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") open(&(0x7f0000000180)='./file1\x00', 0x40, 0x20) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_cred(r6, 0x1, 0x1c, 0x0, &(0x7f0000cab000)) 2.82081455s ago: executing program 3 (id=1080): syz_open_dev$loop(&(0x7f0000000000), 0x81, 0x14b280) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1c080, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x8, 0xfffffffe, 0x3, 0x2f, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0x4d008f46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x9, 0x6}, 0x8000, 0x0, 0x800000, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) unshare(0x20000400) syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, 0x0, 0x80fe) socket$kcm(0x21, 0x2, 0xa) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) syz_emit_ethernet(0x2bb, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x168) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x22000, 0xc6b5897ef189faf9) vmsplice(r4, &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x810000, &(0x7f0000000400)=ANY=[@ANYBLOB="478c61a6df25e9bcb805ad770e9a337c32d86f1c87fe69f37b4d7024aaedc9c1452c06ffc0e53ef47674c77200d200347fc5432822c4b4d922789a20f82a086af80a46e634e9422fe47bdf3619be1597e63209a6fb7a589a935b7eee5a377828e83b4a12e3f058d0bc17f9f337f9b3085e531438ebe210b5321a866f4a44abe192fe2654be2cb92490f48e19d02d2dfc9e66fb8819"], 0x3, 0x53f, &(0x7f0000001240)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) 2.82039457s ago: executing program 1 (id=1081): syz_emit_ethernet(0x34, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x40, 0x84, 0x0, @remote, @remote}, "0000270f00000000000000000b000004"}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="850000006c0000007600000000000000270201000000b6dd9500000000000000990415e9fdddf411b40e47fe918fb8a776e6697c77f9c32feeb75916fc7f88ebc92863f7341e8323af3bccd0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x14, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) pwrite64(r0, &(0x7f0000000300)='2', 0x1, 0x8080c60) fallocate(r0, 0x3, 0x3f, 0x8000c62) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x9, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@none, 0x4}) 2.323129983s ago: executing program 1 (id=1087): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000040)=0xffffffffffffffb1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="f0000000100005000000000000000000fe8000000000000000000000000000aa7f0000010000000000000000000000001f90ffff1f90ffff0200802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000001234320000007f000001000000000000000000000000000000000000000000000000000000de345d194cc6f5f220f4fb30438ac8f3000000000000000000000000000000000000004000000000000000000000000000000000000000000000ab00000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb7f7a944f8f500bd67d19e79e"], 0xf0}}, 0x0) 2.187753626s ago: executing program 1 (id=1089): setns(0xc9, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 2.186914106s ago: executing program 2 (id=1090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = dup(r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='/dev/net/tun\x00', &(0x7f0000000040)='-^^&\x00', 0x0) r2 = dup(r0) openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000300)={'xfrm0\x00'}) 2.086758118s ago: executing program 2 (id=1092): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4, @perf_config_ext={0x62, 0x7fff}, 0x1000, 0x6, 0xffffff7e, 0x9, 0x3, 0x3, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20000400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r1 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xe83e, 0xc000, 0x2000008, 0x4c1}) pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0x0, 0x8040000000006, 0x4, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x8000021000000021, 0x0, 0x0, 0x3, 0x0, 0x401, 0x0, 0x3}, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000080)) 2.050868449s ago: executing program 0 (id=1093): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4c101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000040000000400000012"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x56501, 0x20) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000056, &(0x7f00000000c0)={[{@nouid32}, {@auto_da_alloc}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@inlinecrypt}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) close(0x3) write$ppp(r3, &(0x7f00000001c0)="ab29", 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05000100000000000000300100000c000180080002006c6f0000080005"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000001780)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001740)={&(0x7f0000000c80)=ANY=[@ANYBLOB="b80a0000", @ANYRES16=r5, @ANYBLOB="00bb34e43189022abd7000fcdbdf25890000", @ANYRES32=r7, @ANYBLOB="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"], 0xab8}, 0x1, 0x0, 0x0, 0x8004}, 0x480c0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, 0x0, &(0x7f0000000040)={0x9, 0x9, 0x1, 0x1}) r8 = getpid() syz_pidfd_open(r8, 0x0) 1.995913071s ago: executing program 3 (id=1094): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, @perf_config_ext={0x9, 0x30}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) syz_emit_ethernet(0x50, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x1a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{}]}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@canfd={0xd, {{0x0, 0x0, 0x0, 0x1}, 0x3e, 0x2, 0x0, 0x0, "c03be93bb48ab35a1752b36a56f17ed28f52ba8607cd67cf8507f57c9da7719aa08fa3271bc70970d973b28488c9832e788adc8427d3eb8299dcc296f4206a83"}}}}, &(0x7f0000000240)={0x0, 0x4, [0xb6b, 0x5d4, 0x86c, 0x230]}) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}, {@access_client}, {@cache_none}]}}) 1.839603005s ago: executing program 7 (id=1095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a704845730c84d74dee859800000000000a0000020900020073797a310000000008000a40fffffffc0900010073797a310000000008000540000000242c00128014000180090001006c61d11ed7ceeb52652499cddb05f16973740000000004000280280001800c000100636f756e746572000400028008000340000001301400000011000105d6000000000000000100000a3effa5adf9b7e95fac35bf05b750af7e459fda8773f488a50100aab960b30e7ffef02b0c506b9665ce056cae25ca723a401fe0d72a52dbe42772c40aa47f4a6f8a66ee5833e8b1e3b595997e7178a865cdd7fbb7d1b00454c82bfb6949f259089107ba67510f298e22ab4230ca61eb39292e20b0bc49ed9508ba6c3cbcac357ce5085e34d1ec3099e4ed42d5e9cf9ad7877f2de433ba03ec6c28f7bea37da2"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) 1.798413586s ago: executing program 7 (id=1096): syz_emit_ethernet(0x34, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x40, 0x84, 0x0, @remote, @remote}, "0000270f00000000000000000b000004"}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000002d030100000000009500ffb1000000006926000000000000bf67000000000000150002000fff5d004507000007fffe00d606feff0ee60000bf1600000000000040700000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c043a7bc4b29d2dc480dd7a0d981422b32d93bad720100010000000000b39d0af449deaa27ea949e8f9000d885dfea27834aa7eb8d33ac04060630e78a30fc835e29eb532ba8546fc020c196738b5f32b09f95f5d5b196b9ffc02f952ac53e817671d1000000008ba8583aa4c77097f1c75df9bdd8288fd2f8743924cd6dd4ed457183edc74ca79c79a3da0cea39dbacd0e4b608cece26817f0f53dde0d43388e8f92d0bfdd4b427ee5b708aa2685c735f840e055a163e38a276b7fd16492587edaec8bc43f312c7ddfa59a53c9e772832f527c0ae9afcf582413f6f8c442ce39039a64965facb4340f2249cc60a8dec5b8a9ac6d60e36f57dbe1664decf85b7cae19a1d0d7bce02902284aa9041366eed09c3baafb2a4c14a373f8ffdfe107d401b7b93866f8aadff4df0f226f411d43d579541275f0bacd2dc24faf2d4d992d9f8031a422f2a30cf35e9d00644acc1ff674781281c6b93447312cc93c738b6a83a2e83225af295e0776d033557913ac9096ee1e119a06a38fcd918a18f4c01f60692a1684c55086bec71e819f8b345a5f80d3e5bc7e6854e2ea7a035b975b96e9459382fafc5f6fd106fbbd3b014b5a546f523afd9c9bed9212d7bb745123259e8f46b413e633db1668ad038725e3e01bd6707aee08b267dcd54b961c4d56b608d903ae06cc23eb1d79b3384512f2c424739aba4297063005376b6b900f3416835151fb61f08dfb4ad3732fc0f5a05339608b003a80cce6b032f13b5f2890ec29130022ff6fa874ce885e91c8e4df772286210e5aca1a64dfb12f0a2c1e992aae6afb3514afd648230650e532e8ec540a25b65657a7259922602ffdd3375a4b0f864db09907c7b8e97abb824c1f3167cff71e96682f37f37b156833d729d7369af37345fb97f3ac3e9c01328a3d7f36ae6d48c94bcf630fe6e94c5a080fe3ccde9ff72f98bd0454203a5cbe34ab7df76e54ec26942835ca6b9e0db2b24d19de496bf22d5cac91b6deb25b5622ddd7bddad97d4850735df6fff37098b06d660e5d73efdce87be427bc79e67ad31d7768d65f811ed84f29db15b8456dc951dcb8be1da330fd0c1371dbbfcedaff57e29b95b4277b46aa41eab05a756d8556d4c14b570770bc0a3c9cdd688e3e583ee2284fc32c6eed47d70c6c22c8226ae8d4144fac10d2ca22673cbe55ee11b68bf18f4811cf943b9a7f30f07be34ae41ae192b1222ccc12000966d63ee0f75e73c0ae0cd660cc27583f3a7c81f652948c92569f0ca58d4c42e91000000000000000000000000d8e5c9a920c1418f62bf914bcac98ad06c42b86346d4cc4658abfdf3475a579337d1cf5529a14b64f14c478c0e390628c4702c3daf07d681e412c91484a6bc790ecdb597a461d9ac4d69a005f3fdf015d622c027c0e0181631a9f6d56361187e2076a14caf88c82a37248ff7b26d20a1ff7c1f1a31fe22ed64360c29124bf041f978042f5a23624447ee4d1612268c80e5c3b88a2a22264ad8012750997733121fcbaa2a094ef8ab27579d4daa10d9b42b9f75ef42df0c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="850000006c0000007600000000000000270201000000b6dd9500000000000000990415e9fdddf411b40e47fe918fb8a776e6697c77f9c32feeb75916fc7f88ebc92863f7341e8323af3bccd0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x14, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) pwrite64(r0, &(0x7f0000000300)='2', 0x1, 0x8080c60) fallocate(r0, 0x3, 0x3f, 0x8000c62) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x9, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@none, 0x4}) 1.742701607s ago: executing program 0 (id=1097): r0 = socket(0x2, 0x80805, 0x0) listen(r0, 0x2000) sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB="180000000000000784"], 0xa0, 0x44}], 0x1, 0x0) 1.64334072s ago: executing program 0 (id=1098): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000015c0)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYBLOB="00012abd7000fbdbdf250a0000000c009900000000000f00000011000700d9ccd4e0c18243909a8896e4c9000000540050800800030005ac0f00080007000100000004000500090001003d4de572b90000000800030034da10f30500090000000000080007000200000008000700010000000c0004009c1237406802e2dc0400060020006e800400010004000200040002000400020004000200040001000400010004002800080037000200000011000700e70abfcb11ffe60b7d77490601000000"], 0xc8}, 0x1, 0x0, 0x0, 0x24040041}, 0x51) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104000002000f00000000000000", @ANYRES32=0x0, @ANYBLOB="000004007573443b240012800b000100697036677265000014000280080004006d000000060011004e240000"], 0x44}}, 0x40880) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000001540)={0x0, 0x0, 0x7}, 0xc) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, 0x0) r6 = socket(0x1, 0x5, 0x0) close(r6) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000500)={0x6000000c}) r8 = creat(&(0x7f0000000100)='./bus\x00', 0x1b) io_setup(0x251, &(0x7f0000000080)=0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r10, 0x5603, &(0x7f0000000180)={0x494, 0x1, 0x2}) io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f0000001580)={0x25, 0x0, 0x41, 0x1, 0x0, r3, 0x0, 0x0, 0xce}]) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYRES32=r8], 0x0) syz_read_part_table(0x5ef, &(0x7f00000002c0)="$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") r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001e00010026bd7000fedbdf2507"], 0x34}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000040)={0xc000001d}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) setgroups(0x1, &(0x7f0000000200)=[0x0]) sendmsg(r1, &(0x7f0000002540)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, 0xffffffff}, 0x80, &(0x7f0000001340), 0x0, &(0x7f0000003800)=ANY=[@ANYBLOB="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"], 0x11b8}, 0x8000) 1.518315333s ago: executing program 7 (id=1099): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2, 0x7f}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0xfc680, 0x42) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x10) writev(r2, &(0x7f0000000040), 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21001e, &(0x7f00000000c0)={[{@grpquota}, {@nogrpid}, {@noblock_validity}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000280)={{0x7}, 'port1\x00', 0x44, 0x100000, 0x5, 0x1, 0x6f54, 0x2, 0xe4, 0x0, 0x2, 0x7}) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34010000170001000000000000000000640101020000000000000000000000000000000097581e58e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa0000004000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000a010100000000000000000000000000000000000201000302000020000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000b10f00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000004000000b86b"], 0x134}}, 0x4000) 1.304985058s ago: executing program 1 (id=1100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracing/dynamic_events\x00', &(0x7f0000000080)='tracefs\x00', 0x12020, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x9, 0x5, 0x3, 0x4, 0x0, 0xc, 0x12d0, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x1, @perf_bp={0x0, 0x6}, 0x1402, 0x10000, 0x1, 0x1, 0x7fffffffffffffff, 0x7, 0x1d31, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x5, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x7}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x50b, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x10) openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000711021000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) wait4(r3, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, r3, 0x0, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000400000004000000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='\t', 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) 1.187117521s ago: executing program 7 (id=1101): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x4110, 0x20000000, 0x0, 0x5, 0xffffffffffffff01, 0x8, 0x399}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x4) (async) lseek(r0, 0x80000000002efb, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="070000000400000000070000000746002c"], 0x50) 1.113687263s ago: executing program 3 (id=1102): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @remote, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x9a, 0xfbffffff}, 0x3400c8d4) 1.036640004s ago: executing program 3 (id=1103): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x11, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg$sock(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) (async, rerun: 32) r1 = socket(0x10, 0x80002, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xff00, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff00000568000800a8792d7200", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) dup(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000001280)=[{{&(0x7f0000000100)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000001c0)="014aac3d8d95020ae5f4263a0dbde3fc7574a36734958763137fe618243c5e630f91b79c3ce7d48a26a6d36632d069b1d4a23c44e08dd1a3202cad2aeae8eac32bb07e6cde18c9eb9cae90670bc68378ca4bd75d8fb5b595b5536aefb4f05f51bb6b7c0cafcdff1225f3a04b33e4be5e3bfff573e0a3de5ac15bd90a8a204138845c14adc7eb3e89f2ad8d0a84cdd402c178e7ab29c81a9cc16a772c55ec4fbf3b19fb00321e8c718c4d4ee7", 0xac}, {&(0x7f0000000280)="816a5f1f5aa18231d4efa24a1ec23788276165a1a97bb19061f932971e4bf4b6876e87774013e8d6c31d3f0c27358224ba39c594f17862be0d4f80604c565081e75e40d74681450b46f82c20a34f20597026346899eabb2bd16ae85f23d8208c41a087f03e51ae931e1199a6d8554a528519ea328f0fdf0b3c08631a751aa15ba7687006d52626f7ca0cb42eed246305db324ffd1dfdab851dd342134a3d92a83644df7cffccc71399dda65c9cda8ef2e3261e45a9", 0xb5}, {&(0x7f0000000340)="fc8f559899ca5341db27ffaef7da3b8e661e84893f11e34bd62468c437974a910111107ee9fe6efdf706e3b59211b62ffc42d8ccb1f86e7fb4f4a1e9e3cccaeb0d0a6234319a97e9b0e850c58dd2b9027c68b8acece49724ea2aa0c4ddb1e893c18ca656cc265e88b46397fdb6075c67b3575226e4effd73a22ff8f3eee7dcc06485b4fa991944fdf972a8db0ec151981146ad06f0cdc689772c8f16bdab2dcc0b1b9e0ef09c4efa7180d3c627829a762d81359c57f4cece7061a68ec6ba28d8bf8f0094c61e3a543c953717ac831e605e4d8072ad365b5c0245ddb163b17b1b1c6b096b4038241c93bdf293d69075", 0xef}, {&(0x7f0000000440)="f03d0b956a3eaa80f01c0994cfd2f88e03e06a5abd8a6858c9867a3eba38037b766dbcd528b6506cdf9bebdeafc5b40df2eabb0f7a94207960ada4c569eeb22ebe3b68d2e93128a8854f94aadaa1ccaad240d7777be74affcbfe7899815fa0607452e921fae8a41b655d755bd2cb276f0804e0d0a3f55fe91f14a5818f42551d66b0e0ec67960c107844c5a246e65961e45caab2c4ff351b17a31db6027882cffde04f86680339136ea90d2d4ec2255f949410938247f4d74be9b740dc02bbae", 0xc0}, {&(0x7f0000000500)="2724765cd6227d41d813fb70601853e74cab563df8d8e6a2ae91ecf6fe9c28c94942f48e0229288f0e422bafdeadcdc8fdb843bb431d2332a9bdc214498badbb60929542c7268b7d91bb471bee2014152c22acdf32712e6db828ede39235dc35b4ac43a3528b5896594af6406796eb885d31d01fc173b5c211d67ad2693bdf0f1f1555c76f767dab504a86c1f4410878fa7b20750824851c5bbe747e73076f1a656a5f0d684574314c897eeff6f80e1c3c63d50fa3c95c38b0e939e9abf94815c31c791ac8ae57acf0139154669b50af4e", 0xd1}, {&(0x7f0000000600)="efc60b567bd14228322d9555193178f4d705fb70e7a10f82e4032e7be66f18ec89d8fb7cc62fca2bde0b8179a7b76d72959b299ba0d49e8f610432e32fb0d9daf3d4d9849e40c652c287fd43e5bf4d8535ebc6ce7e6ef572aaf836420d473c6736de38e9e1a753725ce59e9a8f87306f4a59dace5f75c8deb3577c4a0a5b0316168e4d0e1808e9c8508b7709e4fb920d85c137e99690e77de426fbfa70", 0x9d}, {&(0x7f00000006c0)="db6a37dcb4b9a843c1d94322e3ba3315fc72d7663d2cf3e6dcd47b17333ba813ba024c0d21015047b2324d9ee33926a166242d19eb2db702825471c9d7f0d2b7d7efbfb3eb858cfa6664b5e445f3b342ef3eb43be8769d46db96b55890583cf27a76521d15dec5c012a1042399801306223f5bb6311c9eedfb73050dd0007b78bfd67d94f2474270f737ec4f75cf133351e64e564f92573934e2ec511c9d175792a941aa2be32abbf512e41f4ac5bdea5238997bca849a28371f32af08e5f5699cd9087cd0f7f1c46f8b48bcaa11804fd5e0ec6537a4cdb2", 0xd8}, {&(0x7f00000007c0)="311dd67b07bb34101bab623177447029a46f80b7da3893cf262113784ae0a472c3b43a388ae56c63e57a8286e5190def443d6497eb0203f9461ee06887f18ea240da267676321fa5802300413d728a90dca9c97e70394580dec9681c3e67c64879c08f1858129492e642d81149385e8a26761a942442308519fde1c5f49051ec1316151375b6a501c61262480782bba6d46de620ac68f821a2689c9fb9011b1aff9ebaf61b2ba75bb775a59b12f56b8e6b772f0ee4be3407ca1d71363969065329b24bdfb6fdae1fff3f887b03337cf8af6d96b7df05ea5531bdbc37905745c2330aa962adb15e8e154d0dadcd55cd744ce180d9cc", 0xf5}, {&(0x7f00000008c0)="ef1ee079d6c89e062f2bc3fd0928d05db39402cfacbe886a9de98b4910a3e4cfb1f049f1937b77535854495babae11186d66e8663ad1dee7588302c06e76ab3be2546ff431de504ffd8b", 0x4a}, {&(0x7f0000000940)="ca3aeddbee7253c56d8f2931c70a96c1d00ded04f5ecdef495eed49a38addf95fe865498e6b3306cc9dfd02c74529c9e1a4a7e29772955f6703359fa305ff36f8e7a0d3ad2a62587cdd474d0cd492b0fe78d0c3ef3054925dbfed2da1015f9daaeb50643a3b8e352eb4eb9fd38c55b5c4058c147e42ca81d666634665b49e7e6d37ee7f34faa6b9c9e1eeb981d668ecef5b2ea0775ddcf5799e8d58908aa88325558076b0f827c4a315b685cb41db085ec0c14bf31ecfaa9405ada444c5cf998a2ec2c3c366150700db4ee7cfe3f", 0xce}], 0xa, &(0x7f0000000b40)=[{0x50, 0x113, 0x3, "00e2dbbae48efa941a05e6a660969d1e1133aee3488de3f201109e59038def3d786c5d487e280bd9463364bc260cf90f0bc8a1afb69f257fbc255a"}], 0x50}}, {{&(0x7f0000000bc0)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c40)="64be93441bf0871729cdac76ac5ffd11103ca28567addd820b7e30f8abfd0f6f035f", 0x22}, {&(0x7f0000000c80)="c84bf57288c02b1b3b2e16166f154ef744c05e2f8c0d2f3f3443bcaf6cda7ca38e8632202f93d0abc0f74b1933c87a8d511e6ef1d33f0320f676e07cf08dab81ef6e2a165997e5d5159efcee8a3101ae30db4473f678fc6abee4511240bd", 0x5e}, {&(0x7f0000000d00)="56f12b77fb7007af3b7e654b5a0716aa39db2d48c38964cdfeef14cec652745b40b8cda9b64aae6d9b", 0x29}, {&(0x7f0000000d40)="dea1c8ddf5f4fd10756735c0ef6f81885b481cf2e0e7c510154bb7ccaa5c2c6894a14680bfe50c715ddaf09fce666bce4f6f701644daf5926e47ec531cfb03c35638bd0c15f0710c6934274f68e4e32000abd25154b536c59219e258badf99b717", 0x61}, {&(0x7f0000000dc0)="9b3529413b135f139aceeff8952688271b532d46608568a02feebf525d030f2a9615306063ae9e6e009ba640a1dc598d05916b1d91031c1d28d8ab84061329822384b975c87a83dc2dc12ae9603ccd2af038b86ffcb62c76ece714d5eabd0a745efda423936a8cfa9c6cd1625bff4ad940c3d17f356c", 0x76}], 0x5, &(0x7f0000000f80)=[{0xd0, 0x6, 0x10, "9f28eb0127cd1f4993cd72067a34ee90a8b60deb64564934219c5b411436b59d06f5190a39d861fafc0856aceba6e717eb4504188958561163f2a5253540cd7b25ce3416dbb795c548bff706abf221318fc6eb490ec146129ccb6aafe6c622cfa5a83cc42ab0f23f5477b45b066799b9ae206453f88fbda73babb52c0e99c4bf2633e83f603f305535f9c1247f7eb7252d1470b1f4d27de8d29ef48564d256523acb9c05ec15cc4c6c0fd8cb46cbd085e36bc4c8b6fe6787a920"}, {0xb0, 0x4, 0xbf, "4d5265eb74d980ed3dfecd6ec7eaaaacfbb6e868a8b43ce5f0468c6b4985556ad185644faea5ba11b3dce6b152430b386f50dfaf74a04570932d2a62bd5bde9b24353a01655f20361b5b9699d7e4ebe0f74d73f2b09f2dee6754e4f4b5110a85586dce9a721c9416f8c40962a82ce49a20e21fe482a929562ac91598808c499750ac3b3d83d409b37c27129ddbf2f8d233f4b6aa965cc5db5ddd"}, {0x28, 0x112, 0x40, "43f73a8b8f9407316da85916dd00ee6f0fd4d5"}, {0xc0, 0x115, 0x5, "1077f2dd446bc9d4d19cb6b8a631f1dc9115cde2d61cc222ec59e9e3ce7bf7419d3e8ee89808af6b040a7924c83d523505ad32d4a9abd7ff125afa742015bf04ae9851e55fd945ad2555989fe6c38f8d784b88744fdd3693f3f6ef05feda41176dd048e32aa543a48f7b741c6a9b32e913ee1ca556b7f37dc20bdf489ca38de1e2cc92c91d1b17333d8c3f7f635499fdb584428ce16005bbd36601d42398674a2a1f268c14023d3fa1fe2a70082a"}, {0x98, 0x110, 0x736, "6da76ca0188be6368deaa510e3e2f1e9904f3e8167da666ed631819b71a56a4ef9730622845e61a3482932a612a934e33a2059312e8361971d7dcf9c858b9c5ede584f412ec945f388982c2b924ef86954c1ddbe9ad4deab09b9fc018e1c9093bc649852226b580116f19763d5bfb8c398ca949dc7e7457b521249fbefbf7cbed52a"}], 0x300}}], 0x2, 0x0) (async) r2 = dup(0xffffffffffffffff) r3 = dup(r2) (async) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$kcm(0x2d, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000ec0)=@sha1={0x1, "e28090459f0a9ae21f16bd1f647ab4ba8cbb3968"}, 0x15, 0x1) ioctl$TCXONC(r4, 0x540a, 0x2) write$binfmt_elf64(r3, 0x0, 0x178) 872.270209ms ago: executing program 7 (id=1104): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = dup(0xffffffffffffffff) write$binfmt_elf64(r0, &(0x7f0000001340)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x7f, 0xa3, 0x4023e, 0x2, 0x3e, 0x3, 0x3c2, 0x40, 0x2ea, 0x3, 0x5, 0x38, 0x0, 0x6, 0x4eaf, 0x400}}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, 0x0, 0x8080) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') set_mempolicy(0x4, 0x0, 0x5) pread64(r1, 0x0, 0x0, 0x8000000002) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000006000000080004000000000008000500000000002200070073797374656d5f753a6f626a6563745f723a756e6c6162656c65645f74000000"], 0x48}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0100"/14], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90324fc60040002000a740100ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 871.950109ms ago: executing program 2 (id=1105): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e1a, 0x7, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x201, 0xfffffffffffffffe}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0xeb36, 0x5}) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a30000000030a0fdb00000000000000000a0020050900030073000200000000000000010073797a310000000004000c00140000001100010000000000000000000100000a"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) syz_emit_ethernet(0x86, &(0x7f0000000300)={@random="5bb65d3f2511", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x78, 0x65, 0x0, 0x3, 0x11, 0x0, @empty, @multicast1}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "f66abb6f369aaa15d309a5209a57d6b633de150bf5c0f9eed577c9053e33e8a6", "ad01c9ea336a20bee7eb5eca2632253a", {"d69e4998ec79f91be2f5fdbe24252c46", "94f2cbbb76aeff3f3f60692fd9841b58"}}}}}}}, 0x0) 826.03458ms ago: executing program 2 (id=1106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8400, 0x0) socket$unix(0x1, 0x2, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0x0, 0x0, 0x0) 802.278511ms ago: executing program 7 (id=1107): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xff, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x5000, 0xfffffffffffffffd, 0x0, 0x5, 0x5, 0x100000a, 0x0, 0x0, 0xfffffffa, 0x0, 0xd}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd70e8d7dbdf25390000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x810) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @mcast1}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xe3, 0x0, 0x200000]}}, 0x5c) r5 = fsmount(r1, 0x0, 0x0) fchdir(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r7, 0x0) setreuid(r7, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) inotify_init() syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000380)={[{@nodiscard}], [{@fowner_gt={'fowner>', r7}}]}, 0x7, 0x504, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) chdir(&(0x7f0000000080)='./file0\x00') syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x100000000000, 0x1}, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x1) 715.315103ms ago: executing program 0 (id=1108): syz_emit_ethernet(0x34, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x40, 0x84, 0x0, @remote, @remote}, "0000270f00000000000000000b000004"}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x2df, 0x0, 0x0, 0x2, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="850000006c0000007600000000000000270201000000b6dd9500000000000000990415e9fdddf411b40e47fe918fb8a776e6697c77f9c32feeb75916fc7f88ebc92863f7341e8323af3bccd0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x14, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) pwrite64(r0, &(0x7f0000000300)='2', 0x1, 0x8080c60) fallocate(r0, 0x3, 0x3f, 0x8000c62) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x9, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@none, 0x4}) 683.557094ms ago: executing program 2 (id=1109): fallocate(0xffffffffffffffff, 0x2, 0x0, 0x5) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffbfd, 0x614c00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'dummy0\x00', 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) socket$pppl2tp(0x18, 0x1, 0x1) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x6e, 0xc894cd9721f220a5) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000200)=@ethtool_modinfo={0x42, 0xfbff, 0x5}}) 599.506156ms ago: executing program 2 (id=1110): setns(0xc9, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 465.215279ms ago: executing program 1 (id=1111): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x48000) 424.08899ms ago: executing program 0 (id=1112): unshare(0x24020400) syz_usb_connect$uac3(0x6, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x86a, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x8, 0x80, 0x3, {0x8, 0xb, 0x1, 0x2, 0x1, 0x25, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xe, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x4, 0x1, {0xa, 0x25, 0x25, 0x6, 0x97, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3f, 0x8, 0xb3, {0xa, 0x25, 0x25, 0x80000000, 0x4, 0x40}}}}}}}}]}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={'\x00', 0x3, 0x92, 0x2, 0x9e5, 0xeb, r2}) syz_open_procfs(r3, &(0x7f0000000300)='net/rt_cache\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000100070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08000340000000080800074000000031"], 0x128}}, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r5 = syz_open_procfs(r2, &(0x7f0000000040)='comm\x00') write$binfmt_format(r5, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x614, 0x30, 0x1, 0x0, 0x0, {}, [{0x600, 0x1, [@m_csum={0x1a4, 0xe, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x8, 0x7, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x8, 0x1ff, 0xffff}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0xfffeffff, 0x7, 0x8, 0x1a1}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xffffffff, 0x4, 0x3, 0x7}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0x10001, 0x3, 0xea, 0x745b}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x7, 0x8}, 0x43}}]}, {0xcf, 0x6, "57cc4ffaa807ba4f22b02e9ba8dbef6ffbadbb2a4115a04fb3da03dae45f5b84437d6c40d8c1e27832b4d018ac28a5fd84ab6b0aff7c12fe9f388a3e28f8b3303b96833d4e3a871c2ae7d5f0754f2ff816d89b478b46e0a3738891a771f2c2f2f0fe8b5be948a67f8164f73e7a46e784266d3a29ee08a4add68e3fb8ff4208519144c976a35dd6dd37c42dee43fd612fd26836c122d45ea673c3820bc5239ae12619fb3f9eb938a62f45d37b5a66b1ada0e903d6b35793dc66871a52eb9d89b5535bb963a3ca1b616aa509"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x158, 0x19, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1000, 0x7, 0x6, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x8001, 0x20000000, 0x6, 0x61ad}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3, 0x4, 0x2, 0x5}}, @TCA_DEF_DATA={0x8, 0x3, '(\xa4\x7f\x00'}]}, {0xd4, 0x6, "2b190657494a0b9142353e9b4d63fcb3fb14e8b25b03cff53bd845cab5265b9f8386eb191fc7523a3d9ca3f49b33b0c56c02abd5f969d6ee9cf93c54094213e17fe2c0f10a9fb0b6574ec9e3fae68c54b284fa288876b450354a0bbf505766fdd4f9828afadfa593dead9371b7bfa29269c3da4040891c651d9837791b996618b504e19bbaddc2ab7f02d0fff74a39aea5dc94719e1ba84169edffac23db6dab843f3ef8627e8a3c1929102ca3b2db33b46b015771ca4acd16889ba4e6adcdf910df9e99fb41db4d88c86276c1898b60"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0xac, 0x1f, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x67, 0x6, "7f2bf08a0c7f29d7fbdd0f16392e3940735908b9bba108117b4fb3edd9cd4c913bcaba2a53e9385a5e23012d7f3c5bc4a1db05806293b7698961edff5d792851d53526a18b1a18f16eda1b91bf336db7da4f5998d70159a40e0ec54e8d18ad01502179"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_csum={0x170, 0xf, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xffff, 0x2, 0x1, 0x3}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x81, 0x6, 0xfffffffc, 0x7}, 0x62}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffffb, 0x8, 0x80, 0x5}, 0x6c}}]}, {0xee, 0x6, "168873dbd23843cf10077151cb0b39c0e5ef81c79336efc840e910ae1116b2cbdbbde1896383910d73ce8e174f281d2719fbcf8f2746887633f4b32e817d170cd79754075be8d31b4f7be0af2d14cf2414a5ccc502bf8e263776f882c54457df8b7c548cfb63e2fa712b747515ceb1307d12d5dd52951087e303de794df09f484fabc6ea3fd6fa540d0cfb6c0d94a90ba6a1721d815c2acf78a8dde43949bd71612729a0585335e84961f9d825596bb986a44d6aff4290f7ebf811865695db4b4da950b5201f7b8c0e49bed8aaa89a3a2197292c99cf24e4503a93ca307556d16ec3cdd9d8d201af99b0"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0xe4, 0x16, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="c12b11b46773"}]}, {0x9e, 0x6, "86152d184c9706c5191f2f0584605c4e117e79669551db1120bbb1b19c6c9328e085b53113b2bbba7388d36db1663fba17c28377ac9d3f35eea1b682c63cd63c022ae6167d264900e46beca229e4d0db420d57c8b2a84fc34a7c2a03460478d65a8d6f8f24771e0af8a6ffec46d2325ff61a33f8fd2ab7978df3e65c0e102e8441e239fb31ca68797ed43265180192b171bbfd1a200707bb37ea"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x614}}, 0x1) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f00000002c0)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000080)={0x0, 0xfffb, 0x9, [0x0, 0x2, 0xc0, 0xbd, 0x4, 0x1, 0x9, 0x2, 0x800]}, 0x1a) sendmmsg$inet6(r7, &(0x7f0000003f00)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x8, @remote, 0x1}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000001380)="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", 0x5ad}], 0x1}}], 0x2, 0xc040) socket$nl_xfrm(0x10, 0x3, 0x6) 303.443253ms ago: executing program 1 (id=1113): r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000005000000040000000200000000000000", @ANYRES32, @ANYBLOB="4005000000000000000062e819fb0d33cfdaf1eebd5ce0cde2866c6733f1d525e0668db633d5b9f2834b6f5012948a6771d717d25cbcd05677d3a861e5ba3e82d3e7760a308b4e3116b4d5a6e6c4fcf23158f3c5237d501b9daf0bcd87793f2441a79f06555a543b07c0d9b6086bc3ee1196ac3e367a60f4cffab190b9bced3777c1dc7554c41ff4600766698560004d721340c572a2e70b32ad2f86280af143aca1225219ce2bd475f503928b33c282032f191da7b7fbdd9795fc3391ef6b00242fc2b2e0f44720505f5b9ba3ea199cfeae078dc8723b2d3075be25a3e8d17fdfb0b0660731a48d3cc31903146cbd1de4cc7cfbc90180c8df", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000000)=0x3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$inet_sctp(0x2, 0x5, 0x84) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0xffffffffffffeffd, 0x102, 0xf, 0x5, 0x1, 0x10f5}, 0x0, &(0x7f0000000400)={0x28, 0xffffffffffffffff, 0x5b, 0x8000000000000081, 0x1, 0x4, 0x100000001, 0xffffffffffffffff}, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x94000, 0x0) ioctl$PPPIOCGIDLE32(r3, 0x8008743f, &(0x7f0000000240)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5b8, 0x1, @perf_bp={0x0, 0x1}, 0x10c4e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x58be, 0x2, 0x2, 0xfb}) io_uring_enter(r4, 0x100000, 0x2, 0xf, 0x0, 0x0) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c, 0x80000) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x4000}], 0x400000000000172, 0x4000000) 123.525957ms ago: executing program 3 (id=1114): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x4) pselect6(0x40, &(0x7f0000000100)={0x2, 0xfffffffffffffffe, 0x9, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x6}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 0s ago: executing program 3 (id=1115): fallocate(0xffffffffffffffff, 0x2, 0x0, 0x5) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'dummy0\x00', 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) (fail_nth: 2) kernel console output (not intermixed with test programs): v: batadv0: Removing interface: batadv_slave_0 [ 60.607084][ T362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.615785][ T362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.624401][ T4930] loop3: detected capacity change from 0 to 4096 [ 60.636379][ T362] veth1_macvtap: left promiscuous mode [ 60.638338][ T4930] EXT4-fs: quotafile must be on filesystem root [ 60.642566][ T362] veth0_macvtap: left promiscuous mode [ 60.657436][ T362] veth1_vlan: left promiscuous mode [ 60.663350][ T362] veth0_vlan: left promiscuous mode [ 60.674905][ T4935] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 60.685420][ T4935] iwpm_mapping_info_cb: Unable to parse nlmsg [ 60.737495][ T362] team0 (unregistering): Port device team_slave_1 removed [ 60.747388][ T362] team0 (unregistering): Port device team_slave_0 removed [ 60.766459][ T4937] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 60.779939][ T4937] iwpm_mapping_info_cb: Unable to parse nlmsg [ 60.804499][ T4902] hsr_slave_1 (unregistering): left promiscuous mode [ 60.907588][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.952329][ T4830] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.973532][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.989901][ T4830] bridge_slave_0: entered allmulticast mode [ 60.996971][ T4830] bridge_slave_0: entered promiscuous mode [ 60.997057][ T4941] loop3: detected capacity change from 0 to 256 [ 61.005359][ T4830] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.018776][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.026084][ T4830] bridge_slave_1: entered allmulticast mode [ 61.032971][ T4830] bridge_slave_1: entered promiscuous mode [ 61.105621][ T4954] loop1: detected capacity change from 0 to 1024 [ 61.114796][ T4830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.125700][ T4954] EXT4-fs: Ignoring removed bh option [ 61.162632][ T4954] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 61.194986][ T4830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.216714][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 61.225783][ T4954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.253943][ T4830] team0: Port device team_slave_0 added [ 61.262502][ T4830] team0: Port device team_slave_1 added [ 61.281804][ T4830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.312086][ T4830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.341379][ T4830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.352986][ T4830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.360377][ T4830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.389501][ T4830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.469815][ T4830] hsr_slave_0: entered promiscuous mode [ 61.470864][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.485923][ T4830] hsr_slave_1: entered promiscuous mode [ 61.605557][ T5005] 9pnet_fd: Insufficient options for proto=fd [ 61.657221][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 61.675575][ T5008] EXT4-fs: inline encryption not supported [ 61.691451][ T5003] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 61.709198][ T5008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 61.726023][ T5008] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.741168][ T5003] iwpm_mapping_info_cb: Unable to parse nlmsg [ 61.816701][ T4981] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.458: bg 0: block 112: padding at end of block bitmap is not set [ 61.834054][ T4830] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.846361][ T4830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.855757][ T4830] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.868867][ T4830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.883379][ T4830] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.893751][ T4830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.902443][ T4830] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.923202][ T4830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.029642][ T4981] syz.2.458 (4981) used greatest stack depth: 9536 bytes left [ 62.050347][ T4830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.073295][ T5024] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 62.073331][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 62.088727][ T4830] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.101452][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 62.105153][ T5024] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.116789][ T5024] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.467: bad orphan inode 15 [ 62.132226][ T5024] loop3: lost filesystem error report for type 5 error -117 [ 62.132666][ T5024] ext4_test_bit(bit=14, block=5) = 0 [ 62.137327][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.140688][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 62.145929][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.167397][ C0] EXT4-fs (loop3): initial error at time 1786140405: ext4_orphan_get:1425 [ 62.176768][ C0] EXT4-fs (loop3): last error at time 1786140405: ext4_orphan_get:1425 [ 62.188501][ T28] kauditd_printk_skb: 129 callbacks suppressed [ 62.188516][ T28] audit: type=1326 audit(1786140405.405:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5044 comm="syz.0.469" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8f1c67e0d9 code=0x7ffc0000 [ 62.196972][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.229357][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.256856][ T5024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 62.259987][ T5055] vlan2: entered promiscuous mode [ 62.275884][ T5055] gretap0: entered promiscuous mode [ 62.295482][ T5058] netlink: 'syz.2.470': attribute type 21 has an invalid length. [ 62.371979][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.428417][ T5075] netlink: 'syz.0.477': attribute type 15 has an invalid length. [ 62.455878][ T4830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.509065][ T5071] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 62.523596][ T5071] iwpm_mapping_info_cb: Unable to parse nlmsg [ 62.565726][ T5093] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 62.586899][ T28] audit: type=1400 audit(1786140405.795:820): avc: denied { read } for pid=5099 comm="syz.3.482" dev="sockfs" ino=10968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 62.648700][ T28] audit: type=1400 audit(1786140405.855:821): avc: denied { open } for pid=5108 comm="syz.1.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 62.674597][ T28] audit: type=1400 audit(1786140405.855:822): avc: denied { kernel } for pid=5108 comm="syz.1.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 62.682593][ T4830] veth0_vlan: entered promiscuous mode [ 62.706302][ T4830] veth1_vlan: entered promiscuous mode [ 62.720678][ T4830] veth0_macvtap: entered promiscuous mode [ 62.731653][ T4830] veth1_macvtap: entered promiscuous mode [ 62.743681][ T4830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.748472][ T5110] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 62.753303][ T4830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.787809][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.789553][ T28] audit: type=1400 audit(1786140405.995:823): avc: denied { tracepoint } for pid=5117 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 62.798277][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.824758][ T28] audit: type=1400 audit(1786140406.005:824): avc: denied { mounton } for pid=4830 comm="syz-executor" path="/root/syzkaller.Svb7s4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=10213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 62.858342][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.899028][ T28] audit: type=1400 audit(1786140406.085:825): avc: denied { mounton } for pid=4830 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 62.929654][ T28] audit: type=1400 audit(1786140406.085:826): avc: denied { mount } for pid=4830 comm="syz-executor" name="/" dev="gadgetfs" ino=4851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 63.010508][ T5130] set_capacity_and_notify: 2 callbacks suppressed [ 63.010523][ T5130] loop5: detected capacity change from 0 to 256 [ 63.048159][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.085164][ T5130] Mass Storage Function, version: 2009/09/11 [ 63.089350][ T28] audit: type=1400 audit(1786140406.295:827): avc: denied { write } for pid=5129 comm="syz.5.423" name="functions" dev="configfs" ino=6443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.106482][ T5130] LUN: removable file: (no medium) [ 63.130648][ T5136] UDC core: g1: couldn't find an available UDC or it's busy [ 63.143454][ T28] audit: type=1400 audit(1786140406.345:828): avc: denied { write } for pid=5129 comm="syz.5.423" name="c.1" dev="configfs" ino=5528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 63.291948][ T5147] __nla_validate_parse: 34 callbacks suppressed [ 63.291965][ T5147] netlink: 810 bytes leftover after parsing attributes in process `syz.2.494'. [ 63.427506][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.493'. [ 63.454139][ T5152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.496'. [ 63.455214][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.493'. [ 63.481684][ T5152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.496'. [ 63.486717][ T5145] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 63.513937][ T5145] iwpm_mapping_info_cb: Unable to parse nlmsg [ 63.621152][ T5152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.496'. [ 63.631283][ T5158] No source specified [ 63.841856][ T5171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.870757][ T5171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.052859][ T5173] loop1: detected capacity change from 0 to 2048 [ 64.054891][ T5171] loop2: detected capacity change from 0 to 164 [ 64.105359][ T5171] iso9660: Unknown parameter 'GŒa¦ß%鼸­wš3|2Øo‡þió{Mp$ªíÉÁE' [ 64.115890][ T5173] loop1: p1 p3 < > p4 < p5 > [ 64.128096][ T5173] loop1: partition table partially beyond EOD, truncated [ 64.166151][ T5173] loop1: p1 start 8454147 is beyond EOD, truncated [ 64.195559][ T5173] loop1: p3 start 4284289 is beyond EOD, truncated [ 64.220084][ T5173] loop1: p5 start 8454147 is beyond EOD, truncated [ 64.351798][ T5185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 64.421534][ T5184] loop3: detected capacity change from 0 to 4096 [ 64.447996][ T5187] netlink: 48 bytes leftover after parsing attributes in process `syz.0.508'. [ 64.465473][ T5187] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 64.472015][ T5187] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 64.478249][ T5184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.495243][ T5187] vhci_hcd vhci_hcd.0: Device attached [ 64.504704][ T5188] vhci_hcd: connection closed [ 64.504974][ T69] vhci_hcd vhci_hcd.0: stop threads [ 64.515872][ T69] vhci_hcd vhci_hcd.0: release socket [ 64.531516][ T69] vhci_hcd vhci_hcd.0: disconnect device [ 64.688435][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.807165][ T5198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.510'. [ 64.830401][ T5198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.510'. [ 64.918408][ T5203] netlink: 'syz.2.512': attribute type 1 has an invalid length. [ 64.992403][ T5215] loop3: detected capacity change from 0 to 512 [ 65.006176][ T5215] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 65.019685][ T5215] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.515: invalid indirect mapped block 2683928664 (level 1) [ 65.036297][ T5219] loop2: detected capacity change from 0 to 128 [ 65.043692][ T5215] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 65.043900][ T5215] EXT4-fs (loop3): Remounting filesystem read-only [ 65.053647][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 65.053685][ C1] EXT4-fs (loop3): initial error at time 1786140408: ext4_free_branches:1023: inode 13 [ 65.053713][ C1] EXT4-fs (loop3): last error at time 1786140408: ext4_free_branches:1023: inode 13 [ 65.091331][ T5206] loop5: detected capacity change from 0 to 1024 [ 65.112678][ T5206] EXT4-fs: inline encryption not supported [ 65.125653][ T5219] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.142829][ T5219] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.153866][ T5215] EXT4-fs (loop3): 1 truncate cleaned up [ 65.168933][ T5215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.225940][ T5206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 65.250047][ T5206] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.253685][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.283683][ T5206] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.513: bg 0: block 112: padding at end of block bitmap is not set [ 65.446534][ T4830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 65.472642][ T5247] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 65.472642][ T5247] program syz.5.524 not setting count and/or reply_len properly [ 65.520825][ T5253] syzkaller0: entered promiscuous mode [ 65.528124][ T5253] syzkaller0: entered allmulticast mode [ 65.601832][ T5260] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 65.612278][ T5260] iwpm_mapping_info_cb: Unable to parse nlmsg [ 65.659678][ T5265] tunl0: Caught tx_queue_len zero misconfig [ 65.716096][ T5273] loop1: detected capacity change from 0 to 512 [ 65.805090][ T5276] loop1: detected capacity change from 0 to 512 [ 65.811978][ T5276] EXT4-fs: Ignoring removed nobh option [ 65.832545][ T5276] EXT4-fs: Ignoring removed oldalloc option [ 65.851119][ T3294] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.851690][ T5276] EXT4-fs: old and new quota format mixing [ 66.059063][ T5291] 9p: Bad value for 'rfdno' [ 66.066345][ T5291] loop2: detected capacity change from 0 to 164 [ 66.079038][ T5291] IPVS: set_ctl: invalid protocol: 59 172.20.20.29:20002 [ 66.133462][ T5294] netlink: 'syz.0.544': attribute type 1 has an invalid length. [ 66.259926][ T5309] EXT4-fs error (device loop3): ext4_init_orphan_info:583: comm syz.3.551: inode #0: comm syz.3.551: iget: illegal inode # [ 66.284287][ T5309] loop3: lost filesystem error report for type 5 error -117 [ 66.284447][ T5309] EXT4-fs (loop3): Remounting filesystem read-only [ 66.292687][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 66.292722][ C0] EXT4-fs (loop3): initial error at time 1786140409: ext4_init_orphan_info:583 [ 66.292749][ C0] EXT4-fs (loop3): last error at time 1786140409: ext4_init_orphan_info:583 [ 66.325587][ T5309] EXT4-fs (loop3): get orphan inode failed [ 66.335340][ T5309] EXT4-fs (loop3): mount failed [ 66.409361][ T3388] logitech-hidpp-device 0005:046D:B012.0002: item fetching failed at offset 22/23 [ 66.432340][ T3388] logitech-hidpp-device 0005:046D:B012.0002: hidpp_probe:parse failed [ 66.441554][ T3388] logitech-hidpp-device 0005:046D:B012.0002: probe with driver logitech-hidpp-device failed with error -22 [ 66.678136][ T5329] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 66.985835][ T5319] EXT4-fs: inline encryption not supported [ 67.030383][ T5319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 67.056853][ T5319] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.096573][ T5319] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.554: bg 0: block 112: padding at end of block bitmap is not set [ 67.195492][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 67.222636][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 67.222660][ T28] audit: type=1400 audit(1786140410.435:921): avc: denied { create } for pid=5366 comm="syz.3.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 67.254039][ T28] audit: type=1400 audit(1786140410.465:922): avc: denied { write } for pid=5366 comm="syz.3.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 67.277729][ T28] audit: type=1400 audit(1786140410.475:923): avc: denied { setopt } for pid=5366 comm="syz.3.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.369611][ T28] audit: type=1400 audit(1786140410.585:924): avc: denied { listen } for pid=5366 comm="syz.3.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.714947][ T5376] FAULT_INJECTION: forcing a failure. [ 67.714947][ T5376] name failslab, interval 1, probability 0, space 0, times 0 [ 67.728260][ T5376] CPU: 1 UID: 0 PID: 5376 Comm: syz.2.574 Not tainted syzkaller #0 PREEMPT(lazy) [ 67.728314][ T5376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.728325][ T5376] Call Trace: [ 67.728332][ T5376] [ 67.728340][ T5376] __dump_stack+0x1d/0x30 [ 67.728365][ T5376] dump_stack_lvl+0x95/0xd0 [ 67.728385][ T5376] dump_stack+0x15/0x1b [ 67.728472][ T5376] should_fail_ex+0x25e/0x270 [ 67.728509][ T5376] should_failslab+0x8c/0xb0 [ 67.728527][ T5376] __kmalloc_node_track_caller_noprof+0xd5/0x4c0 [ 67.728572][ T5376] ? security_netlbl_sid_to_secattr+0xbc/0x150 [ 67.728599][ T5376] ? security_netlbl_sid_to_secattr+0xbc/0x150 [ 67.728623][ T5376] kstrdup+0x3e/0xd0 [ 67.728690][ T5376] security_netlbl_sid_to_secattr+0xbc/0x150 [ 67.728750][ T5376] selinux_netlbl_sock_genattr+0xa8/0x260 [ 67.728779][ T5376] selinux_netlbl_socket_post_create+0x66/0x100 [ 67.728805][ T5376] selinux_mptcp_add_subflow+0xbd/0xd0 [ 67.728977][ T5376] security_mptcp_add_subflow+0x3c/0x70 [ 67.729006][ T5376] mptcp_subflow_create_socket+0xe3/0x500 [ 67.729166][ T5376] __mptcp_nmpc_sk+0xb5/0x3d0 [ 67.729285][ T5376] mptcp_sendmsg_fastopen+0x88/0x320 [ 67.729307][ T5376] mptcp_sendmsg+0xec3/0x1130 [ 67.729327][ T5376] ? avc_has_perm+0x101/0x190 [ 67.729376][ T5376] ? selinux_socket_sendmsg+0x2e2/0x410 [ 67.729404][ T5376] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 67.729422][ T5376] inet_sendmsg+0xc5/0xd0 [ 67.729443][ T5376] ? __pfx_inet_sendmsg+0x10/0x10 [ 67.729523][ T5376] ____sys_sendmsg+0x4e8/0x580 [ 67.729612][ T5376] ___sys_sendmsg+0x195/0x1e0 [ 67.729689][ T5376] ? terminate_walk+0x1d5/0x200 [ 67.729811][ T5376] __sys_sendmmsg+0x185/0x320 [ 67.729837][ T5376] __x64_sys_sendmmsg+0x57/0x70 [ 67.729858][ T5376] x64_sys_call+0x27aa/0x3020 [ 67.729880][ T5376] do_syscall_64+0x136/0x3c0 [ 67.729986][ T5376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.730007][ T5376] RIP: 0033:0x7fc6be28e0d9 [ 67.730028][ T5376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.730055][ T5376] RSP: 002b:00007fc6bcce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 67.730077][ T5376] RAX: ffffffffffffffda RBX: 00007fc6be515fa0 RCX: 00007fc6be28e0d9 [ 67.730092][ T5376] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000004 [ 67.730106][ T5376] RBP: 00007fc6bcce7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.730121][ T5376] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 67.730133][ T5376] R13: 00007fc6be516038 R14: 00007fc6be515fa0 R15: 00007fff79d91718 [ 67.730207][ T5376] [ 68.037611][ T28] audit: type=1400 audit(1786140411.245:925): avc: denied { write } for pid=5377 comm="syz.5.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.098597][ T28] audit: type=1400 audit(1786140411.245:926): avc: denied { connect } for pid=5377 comm="syz.5.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 68.120503][ T28] audit: type=1400 audit(1786140411.245:927): avc: denied { write } for pid=5377 comm="syz.5.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 68.145830][ T5389] netlink: 'syz.2.577': attribute type 1 has an invalid length. [ 68.154843][ T5388] netlink: 'syz.2.577': attribute type 1 has an invalid length. [ 68.174225][ T5386] bond3: (slave geneve2): making interface the new active one [ 68.182752][ T5386] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 68.195459][ T5388] 8021q: adding VLAN 0 to HW filter on device bond3 [ 68.206226][ T28] audit: type=1400 audit(1786140411.415:928): avc: denied { create } for pid=5385 comm="syz.2.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 68.207843][ T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.237732][ T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.246837][ T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.269229][ T12] netdevsim netdevsim10 eth4: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.279719][ T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 68.394834][ T5396] set_capacity_and_notify: 2 callbacks suppressed [ 68.394850][ T5396] loop2: detected capacity change from 0 to 256 [ 70.269345][ T28] audit: type=1400 audit(1786140413.475:929): avc: denied { cpu } for pid=5383 comm="syz.5.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 70.321543][ T28] audit: type=1326 audit(1786140413.505:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5400 comm="syz.0.581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1c67e0d9 code=0x7ffc0000 [ 70.536016][ T5423] __nla_validate_parse: 14 callbacks suppressed [ 70.536192][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'. [ 70.566900][ T5425] netlink: 48 bytes leftover after parsing attributes in process `syz.5.590'. [ 70.607809][ T5427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.591'. [ 70.619988][ T5428] loop3: detected capacity change from 0 to 1024 [ 70.644858][ T5428] EXT4-fs: inline encryption not supported [ 70.672883][ T5428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 70.688946][ T5428] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.722910][ T5403] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.582: bg 0: block 112: padding at end of block bitmap is not set [ 70.790620][ T5447] loop1: detected capacity change from 0 to 512 [ 70.800412][ T5447] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.810350][ T5447] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 70.820847][ T5447] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 70.831706][ T5447] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 70.840937][ T5447] System zones: 0-2, 18-18, 34-35 [ 70.841236][ T5438] usb usb8: usbfs: process 5438 (syz.0.593) did not claim interface 0 before use [ 70.847412][ T5447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.864371][ T5450] macsec1: entered promiscuous mode [ 70.875353][ T5450] dummy0: entered promiscuous mode [ 70.882657][ T5450] macsec1: entered allmulticast mode [ 70.891462][ T5450] dummy0: entered allmulticast mode [ 70.900047][ T5450] dummy0: left allmulticast mode [ 70.907585][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.924781][ T23] dummy0: left promiscuous mode [ 70.955107][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 71.190447][ T5462] loop3: detected capacity change from 0 to 512 [ 71.206827][ T5462] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.217267][ T5462] EXT4-fs: inline encryption not supported [ 71.228903][ T5462] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 71.229516][ T5472] hub 8-0:1.0: USB hub found [ 71.276679][ T5472] hub 8-0:1.0: 8 ports detected [ 71.474303][ T5487] netlink: 'syz.2.607': attribute type 1 has an invalid length. [ 71.486181][ T5491] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 71.493828][ T5491] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 71.514090][ T5487] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.607'. [ 71.562014][ T5491] vhci_hcd vhci_hcd.0: Device attached [ 71.606796][ T5498] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 71.621903][ T5492] vhci_hcd: connection closed [ 71.622414][ T49] vhci_hcd vhci_hcd.3: stop threads [ 71.662018][ T49] vhci_hcd vhci_hcd.3: release socket [ 71.677198][ T49] vhci_hcd vhci_hcd.3: disconnect device [ 71.937953][ T5513] loop2: detected capacity change from 0 to 256 [ 72.020397][ T5517] loop2: detected capacity change from 0 to 512 [ 72.041172][ T5517] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.093724][ T5517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.123815][ T5517] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.177188][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.248881][ T5524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'. [ 72.288258][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 72.288274][ T28] audit: type=1326 audit(1786140415.505:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.5.619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c2fee0d9 code=0x7ffc0000 [ 72.338205][ T28] audit: type=1326 audit(1786140415.505:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.5.619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c2fee0d9 code=0x7ffc0000 [ 72.402009][ T28] audit: type=1326 audit(1786140415.505:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.5.619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c2fee0d9 code=0x7ffc0000 [ 72.454533][ T28] audit: type=1326 audit(1786140415.505:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.5.619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c2fee0d9 code=0x7ffc0000 [ 72.481327][ T28] audit: type=1326 audit(1786140415.535:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.5.619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f69c2fee0d9 code=0x7ffc0000 [ 72.509134][ T28] audit: type=1326 audit(1786140415.535:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.5.619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c2fee0d9 code=0x7ffc0000 [ 72.567739][ T28] audit: type=1326 audit(1786140415.535:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.5.619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c2fee0d9 code=0x7ffc0000 [ 72.614981][ T5539] loop2: detected capacity change from 0 to 128 [ 72.633259][ T5539] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.664454][ T28] audit: type=1326 audit(1786140415.545:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.5.619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f69c2fee0d9 code=0x7ffc0000 [ 72.702200][ T5539] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.753829][ T5543] netlink: 48 bytes leftover after parsing attributes in process `syz.5.626'. [ 72.826218][ T28] audit: type=1326 audit(1786140415.645:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5525 comm="syz.5.619" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f69c2fee0d9 code=0x7ffc0000 [ 72.853437][ T28] audit: type=1400 audit(1786140415.765:977): avc: denied { read } for pid=5536 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 72.908187][ T5553] FAULT_INJECTION: forcing a failure. [ 72.908187][ T5553] name failslab, interval 1, probability 0, space 0, times 0 [ 72.933040][ T5553] CPU: 0 UID: 0 PID: 5553 Comm: syz.3.628 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.933068][ T5553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.933080][ T5553] Call Trace: [ 72.933087][ T5553] [ 72.933096][ T5553] __dump_stack+0x1d/0x30 [ 72.933120][ T5553] dump_stack_lvl+0x95/0xd0 [ 72.933139][ T5553] dump_stack+0x15/0x1b [ 72.933155][ T5553] should_fail_ex+0x25e/0x270 [ 72.933179][ T5553] should_failslab+0x8c/0xb0 [ 72.933199][ T5553] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 72.933217][ T5553] ? mas_alloc_nodes+0x1a2/0x210 [ 72.933238][ T5553] ? mas_alloc_nodes+0x1a2/0x210 [ 72.933259][ T5553] mas_alloc_nodes+0x1a2/0x210 [ 72.933282][ T5553] mas_preallocate+0x2ca/0x500 [ 72.933307][ T5553] __split_vma+0x240/0x640 [ 72.933325][ T5553] vms_gather_munmap_vmas+0x176/0x7f0 [ 72.933350][ T5553] do_vmi_align_munmap+0x1e1/0x400 [ 72.933380][ T5553] do_vmi_munmap+0x1da/0x220 [ 72.933403][ T5553] mremap_to+0x12d/0x450 [ 72.933424][ T5553] __se_sys_mremap+0x70f/0xc40 [ 72.933448][ T5553] ? mutex_lock+0x57/0x90 [ 72.933468][ T5553] ? mutex_unlock+0x4e/0x90 [ 72.933486][ T5553] ? fput+0x8f/0xc0 [ 72.933506][ T5553] ? ksys_write+0x194/0x1a0 [ 72.933522][ T5553] __x64_sys_mremap+0x67/0x80 [ 72.933542][ T5553] x64_sys_call+0x29db/0x3020 [ 72.933567][ T5553] do_syscall_64+0x136/0x3c0 [ 72.933594][ T5553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.933615][ T5553] RIP: 0033:0x7f531569e0d9 [ 72.933628][ T5553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.933643][ T5553] RSP: 002b:00007f53140f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 72.933659][ T5553] RAX: ffffffffffffffda RBX: 00007f5315925fa0 RCX: 00007f531569e0d9 [ 72.933671][ T5553] RDX: 0000000000200000 RSI: 0000000000600600 RDI: 0000200000000000 [ 72.933683][ T5553] RBP: 00007f53140f7090 R08: 0000200000a00000 R09: 0000000000000000 [ 72.933696][ T5553] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 72.933708][ T5553] R13: 00007f5315926038 R14: 00007f5315925fa0 R15: 00007ffc831a6b78 [ 72.933724][ T5553] [ 73.538409][ T5569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.631'. [ 74.193233][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.452403][ T5591] loop3: detected capacity change from 0 to 256 [ 75.135563][ T5655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 75.236585][ T5676] xfrm0: Caught tx_queue_len zero misconfig [ 75.351962][ T5686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.658'. [ 75.391304][ T5686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.658'. [ 75.441647][ T5696] loop2: detected capacity change from 0 to 256 [ 75.448295][ T5697] loop5: detected capacity change from 0 to 512 [ 75.477556][ T5697] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 75.489008][ T5699] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 75.495866][ T5699] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 75.511738][ T5697] EXT4-fs (loop5): 1 truncate cleaned up [ 75.519234][ T5697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.536288][ T5699] vhci_hcd vhci_hcd.0: Device attached [ 75.585153][ T5702] vhci_hcd: connection closed [ 75.599783][ T12] vhci_hcd vhci_hcd.3: stop threads [ 75.644353][ T12] vhci_hcd vhci_hcd.3: release socket [ 75.672691][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 75.717823][ T3412] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 75.828597][ T5721] loop2: detected capacity change from 0 to 256 [ 76.016483][ T5735] __nla_validate_parse: 1 callbacks suppressed [ 76.016494][ T5735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.673'. [ 76.033646][ T5735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.673'. [ 76.058116][ T5735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.673'. [ 76.173250][ T5744] loop3: detected capacity change from 0 to 512 [ 76.182007][ T5744] EXT4-fs: Ignoring removed nobh option [ 76.188214][ T5744] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 76.201808][ T5744] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 76.216366][ T5744] EXT4-fs (loop3): 1 truncate cleaned up [ 76.222638][ T5744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.256413][ T4830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.275742][ T5744] ext4: Unknown parameter '€' [ 76.324158][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.387448][ T5763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.686'. [ 76.404460][ T5758] netlink: 'syz.0.684': attribute type 1 has an invalid length. [ 76.414174][ T5758] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.684'. [ 76.434051][ T5763] loop3: detected capacity change from 0 to 1024 [ 76.442480][ T5763] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.455027][ T5763] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0103] [ 76.464276][ T5763] System zones: 0-1, 3-36 [ 76.469956][ T5763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.514895][ T5771] netlink: 72 bytes leftover after parsing attributes in process `syz.0.689'. [ 76.538355][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.638770][ T5787] FAULT_INJECTION: forcing a failure. [ 76.638770][ T5787] name failslab, interval 1, probability 0, space 0, times 0 [ 76.655492][ T5787] CPU: 1 UID: 0 PID: 5787 Comm: syz.1.696 Not tainted syzkaller #0 PREEMPT(lazy) [ 76.655602][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 76.655616][ T5787] Call Trace: [ 76.655622][ T5787] [ 76.655631][ T5787] __dump_stack+0x1d/0x30 [ 76.655671][ T5787] dump_stack_lvl+0x95/0xd0 [ 76.655693][ T5787] dump_stack+0x15/0x1b [ 76.655713][ T5787] should_fail_ex+0x25e/0x270 [ 76.655742][ T5787] should_failslab+0x8c/0xb0 [ 76.655770][ T5787] __kmalloc_noprof+0xd4/0x4a0 [ 76.655791][ T5787] ? ethnl_default_doit+0xbb/0xb60 [ 76.655819][ T5787] ? ethnl_default_doit+0xbb/0xb60 [ 76.655877][ T5787] ethnl_default_doit+0xbb/0xb60 [ 76.655905][ T5787] ? genl_family_rcv_msg_attrs_parse+0x154/0x1b0 [ 76.655927][ T5787] ? genl_family_rcv_msg_attrs_parse+0x1ad/0x1b0 [ 76.655948][ T5787] genl_family_rcv_msg_doit+0x187/0x1f0 [ 76.656039][ T5787] genl_rcv_msg+0x42f/0x470 [ 76.656146][ T5787] ? __pfx_ethnl_default_doit+0x10/0x10 [ 76.656180][ T5787] netlink_rcv_skb+0x11e/0x220 [ 76.656276][ T5787] ? __pfx_genl_rcv_msg+0x10/0x10 [ 76.656310][ T5787] genl_rcv+0x28/0x40 [ 76.656338][ T5787] netlink_unicast+0x5a7/0x680 [ 76.656363][ T5787] netlink_sendmsg+0x5be/0x6f0 [ 76.656408][ T5787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.656435][ T5787] ____sys_sendmsg+0x532/0x580 [ 76.656495][ T5787] ___sys_sendmsg+0x195/0x1e0 [ 76.656531][ T5787] __x64_sys_sendmsg+0xd4/0x160 [ 76.656553][ T5787] x64_sys_call+0x194c/0x3020 [ 76.656652][ T5787] do_syscall_64+0x136/0x3c0 [ 76.656680][ T5787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.656734][ T5787] RIP: 0033:0x7fc719bbe0d9 [ 76.656770][ T5787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.656786][ T5787] RSP: 002b:00007fc718617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.656817][ T5787] RAX: ffffffffffffffda RBX: 00007fc719e45fa0 RCX: 00007fc719bbe0d9 [ 76.656832][ T5787] RDX: 0000000000000880 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 76.656846][ T5787] RBP: 00007fc718617090 R08: 0000000000000000 R09: 0000000000000000 [ 76.656860][ T5787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.656872][ T5787] R13: 00007fc719e46038 R14: 00007fc719e45fa0 R15: 00007ffcb6849ce8 [ 76.656925][ T5787] [ 76.991469][ T5790] netlink: 'syz.3.697': attribute type 4 has an invalid length. [ 77.021999][ T5796] netlink: 'syz.0.695': attribute type 11 has an invalid length. [ 77.037653][ T5786] netlink: 436 bytes leftover after parsing attributes in process `syz.0.695'. [ 77.048803][ T5786] netlink: 32 bytes leftover after parsing attributes in process `syz.0.695'. [ 77.074936][ T5800] MTRR 1 not used [ 77.088157][ T5800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.702'. [ 77.101970][ T5802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 77.189473][ T5815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.344176][ T28] kauditd_printk_skb: 188 callbacks suppressed [ 77.344192][ T28] audit: type=1400 audit(1786140420.555:1166): avc: denied { setopt } for pid=5831 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.376140][ T28] audit: type=1400 audit(1786140420.565:1167): avc: denied { ioctl } for pid=5825 comm="syz.1.712" path="socket:[13461]" dev="sockfs" ino=13461 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.402934][ T28] audit: type=1400 audit(1786140420.565:1168): avc: denied { read write } for pid=5825 comm="syz.1.712" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.428606][ T5838] loop3: detected capacity change from 0 to 1024 [ 77.435623][ T5838] EXT4-fs: inline encryption not supported [ 77.447399][ T28] audit: type=1400 audit(1786140420.565:1169): avc: denied { open } for pid=5825 comm="syz.1.712" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.471701][ T28] audit: type=1400 audit(1786140420.615:1170): avc: denied { ioctl } for pid=5825 comm="syz.1.712" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.501610][ T28] audit: type=1400 audit(1786140420.645:1171): avc: denied { read } for pid=5831 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.535897][ T5843] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 77.544373][ T5838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 77.559200][ T5838] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.580259][ T28] audit: type=1400 audit(1786140420.795:1172): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 77.608404][ T5830] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.713: bg 0: block 112: padding at end of block bitmap is not set [ 77.625174][ T28] audit: type=1400 audit(1786140420.815:1173): avc: denied { setattr } for pid=5829 comm="syz.3.713" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.648922][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.661502][ T5849] netlink: 'syz.2.718': attribute type 16 has an invalid length. [ 77.662320][ T28] audit: type=1400 audit(1786140420.875:1174): avc: denied { map } for pid=5848 comm="syz.2.718" path="socket:[13483]" dev="sockfs" ino=13483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.695696][ T28] audit: type=1400 audit(1786140420.875:1175): avc: denied { read } for pid=5848 comm="syz.2.718" path="socket:[13483]" dev="sockfs" ino=13483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.825710][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 78.147737][ T5887] veth1_to_bond: entered allmulticast mode [ 78.154218][ T5887] veth1_to_bond: entered promiscuous mode [ 78.167515][ T5887] veth1_to_bond (unregistering): left allmulticast mode [ 78.175289][ T5887] veth1_to_bond (unregistering): left promiscuous mode [ 78.184866][ T5887] bond0: (slave bond_slave_1): Releasing backup interface [ 78.573617][ T5905] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 78.618572][ T5905] iwpm_mapping_info_cb: Unable to parse nlmsg [ 78.701983][ T5915] hub 8-0:1.0: USB hub found [ 78.707909][ T5915] hub 8-0:1.0: 8 ports detected [ 79.186561][ T5936] FAULT_INJECTION: forcing a failure. [ 79.186561][ T5936] name failslab, interval 1, probability 0, space 0, times 0 [ 79.203357][ T5936] CPU: 0 UID: 0 PID: 5936 Comm: syz.3.747 Not tainted syzkaller #0 PREEMPT(lazy) [ 79.203382][ T5936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 79.203393][ T5936] Call Trace: [ 79.203400][ T5936] [ 79.203409][ T5936] __dump_stack+0x1d/0x30 [ 79.203472][ T5936] dump_stack_lvl+0x95/0xd0 [ 79.203528][ T5936] dump_stack+0x15/0x1b [ 79.203597][ T5936] should_fail_ex+0x25e/0x270 [ 79.203621][ T5936] should_failslab+0x8c/0xb0 [ 79.203643][ T5936] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 79.203665][ T5936] ? do_getname+0x2e/0x1c0 [ 79.203733][ T5936] ? do_getname+0x2e/0x1c0 [ 79.203759][ T5936] do_getname+0x2e/0x1c0 [ 79.203783][ T5936] __se_sys_unlinkat+0x4c/0x140 [ 79.203804][ T5936] __x64_sys_unlinkat+0x43/0x50 [ 79.203871][ T5936] x64_sys_call+0x1120/0x3020 [ 79.203896][ T5936] do_syscall_64+0x136/0x3c0 [ 79.203925][ T5936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.204007][ T5936] RIP: 0033:0x7f531569e0d9 [ 79.204022][ T5936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.204037][ T5936] RSP: 002b:00007f53140f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 79.204056][ T5936] RAX: ffffffffffffffda RBX: 00007f5315925fa0 RCX: 00007f531569e0d9 [ 79.204079][ T5936] RDX: 0000000000000200 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 79.204094][ T5936] RBP: 00007f53140f7090 R08: 0000000000000000 R09: 0000000000000000 [ 79.204108][ T5936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.204122][ T5936] R13: 00007f5315926038 R14: 00007f5315925fa0 R15: 00007ffc831a6b78 [ 79.204142][ T5936] [ 79.442317][ T5940] loop5: detected capacity change from 0 to 1024 [ 79.455927][ T5940] EXT4-fs: Ignoring removed bh option [ 79.505259][ T5940] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 80.161970][ T5950] netlink: 'syz.2.753': attribute type 1 has an invalid length. [ 80.355303][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 80.382855][ T5961] FAULT_INJECTION: forcing a failure. [ 80.382855][ T5961] name failslab, interval 1, probability 0, space 0, times 0 [ 80.410437][ T5961] CPU: 0 UID: 0 PID: 5961 Comm: syz.1.756 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.410463][ T5961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.410474][ T5961] Call Trace: [ 80.410481][ T5961] [ 80.410489][ T5961] __dump_stack+0x1d/0x30 [ 80.410510][ T5961] dump_stack_lvl+0x95/0xd0 [ 80.410569][ T5961] dump_stack+0x15/0x1b [ 80.410589][ T5961] should_fail_ex+0x25e/0x270 [ 80.410671][ T5961] should_failslab+0x8c/0xb0 [ 80.410692][ T5961] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 80.410720][ T5961] ? skb_clone+0x151/0x1f0 [ 80.410737][ T5961] ? skb_clone+0x151/0x1f0 [ 80.410753][ T5961] skb_clone+0x151/0x1f0 [ 80.410838][ T5961] __netlink_deliver_tap+0x2be/0x510 [ 80.410901][ T5961] netlink_unicast+0x654/0x680 [ 80.410922][ T5961] netlink_sendmsg+0x5be/0x6f0 [ 80.410948][ T5961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.410989][ T5961] ____sys_sendmsg+0x532/0x580 [ 80.411007][ T5961] ___sys_sendmsg+0x195/0x1e0 [ 80.411032][ T5961] __x64_sys_sendmsg+0xd4/0x160 [ 80.411051][ T5961] x64_sys_call+0x194c/0x3020 [ 80.411119][ T5961] do_syscall_64+0x136/0x3c0 [ 80.411149][ T5961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.411183][ T5961] RIP: 0033:0x7fc719bbe0d9 [ 80.411200][ T5961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.411217][ T5961] RSP: 002b:00007fc718617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.411239][ T5961] RAX: ffffffffffffffda RBX: 00007fc719e45fa0 RCX: 00007fc719bbe0d9 [ 80.411253][ T5961] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 80.411342][ T5961] RBP: 00007fc718617090 R08: 0000000000000000 R09: 0000000000000000 [ 80.411356][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.411369][ T5961] R13: 00007fc719e46038 R14: 00007fc719e45fa0 R15: 00007ffcb6849ce8 [ 80.411388][ T5961] [ 80.617150][ T5961] tipc: Enabled bearer , priority 10 [ 81.089089][ T5980] loop2: detected capacity change from 0 to 256 [ 81.120331][ T5980] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.603589][ T5992] tmpfs: Bad value for 'mpol' [ 81.743331][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.751350][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.763182][ T5995] bridge0: entered allmulticast mode [ 81.787954][ T5995] bridge_slave_1: left allmulticast mode [ 81.795859][ T5995] bridge_slave_1: left promiscuous mode [ 81.802874][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.816367][ T5995] bridge_slave_0: left allmulticast mode [ 81.825448][ T5995] bridge_slave_0: left promiscuous mode [ 81.834127][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.636228][ T5997] FAULT_INJECTION: forcing a failure. [ 82.636228][ T5997] name failslab, interval 1, probability 0, space 0, times 0 [ 82.650868][ T5997] CPU: 1 UID: 0 PID: 5997 Comm: syz.0.768 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.650949][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.650964][ T5997] Call Trace: [ 82.651020][ T5997] [ 82.651039][ T5997] __dump_stack+0x1d/0x30 [ 82.651063][ T5997] dump_stack_lvl+0x95/0xd0 [ 82.651083][ T5997] dump_stack+0x15/0x1b [ 82.651103][ T5997] should_fail_ex+0x25e/0x270 [ 82.651195][ T5997] ? __se_sys_mount+0xef/0x2e0 [ 82.651222][ T5997] should_failslab+0x8c/0xb0 [ 82.651247][ T5997] __kmalloc_cache_noprof+0x7b/0x3d0 [ 82.651273][ T5997] ? __se_sys_mount+0xef/0x2e0 [ 82.651322][ T5997] ? memdup_user+0x99/0xd0 [ 82.651355][ T5997] __se_sys_mount+0xef/0x2e0 [ 82.651382][ T5997] __x64_sys_mount+0x67/0x80 [ 82.651408][ T5997] x64_sys_call+0x2d61/0x3020 [ 82.651473][ T5997] do_syscall_64+0x136/0x3c0 [ 82.651506][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.651538][ T5997] RIP: 0033:0x7f8f1c67e0d9 [ 82.651556][ T5997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.651576][ T5997] RSP: 002b:00007f8f1b0d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 82.651602][ T5997] RAX: ffffffffffffffda RBX: 00007f8f1c905fa0 RCX: 00007f8f1c67e0d9 [ 82.651619][ T5997] RDX: 0000200000000280 RSI: 00002000000000c0 RDI: 0000000000000000 [ 82.651636][ T5997] RBP: 00007f8f1b0d7090 R08: 0000200000000140 R09: 0000000000000000 [ 82.651727][ T5997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.651741][ T5997] R13: 00007f8f1c906038 R14: 00007f8f1c905fa0 R15: 00007ffc016c0c48 [ 82.651779][ T5997] [ 82.882915][ T6002] __nla_validate_parse: 12 callbacks suppressed [ 82.882935][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 82.920007][ T4830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 82.941904][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 82.941942][ T28] audit: type=1400 audit(1786140426.155:1231): avc: denied { write } for pid=6008 comm="syz.0.770" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.975446][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.029995][ T28] audit: type=1400 audit(1786140426.235:1232): avc: denied { sqpoll } for pid=6013 comm="syz.0.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 83.101103][ T6015] loop2: detected capacity change from 0 to 1024 [ 83.129792][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.148928][ T6015] EXT4-fs (loop2): unsupported inode size: 4096 [ 83.181668][ T6015] EXT4-fs (loop2): blocksize: 1024 [ 83.199723][ T6016] syzkaller0: entered promiscuous mode [ 83.219271][ T6016] syzkaller0: entered allmulticast mode [ 83.261224][ T28] audit: type=1400 audit(1786140426.475:1233): avc: denied { ioctl } for pid=6012 comm="syz.3.774" path="socket:[13743]" dev="sockfs" ino=13743 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.301356][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.343100][ T28] audit: type=1400 audit(1786140426.555:1234): avc: denied { execmem } for pid=6023 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 83.371068][ T6025] netlink: 'syz.1.778': attribute type 1 has an invalid length. [ 83.389200][ T6025] netlink: 101600 bytes leftover after parsing attributes in process `syz.1.778'. [ 83.422197][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.450780][ T28] audit: type=1400 audit(1786140426.665:1235): avc: denied { mounton } for pid=6031 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 83.477246][ T6030] loop2: detected capacity change from 0 to 512 [ 83.549821][ T6030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 83.563094][ T6030] ext4 filesystem being mounted at /202/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.617158][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.782'. [ 83.656968][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.782'. [ 83.661592][ T6030] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1577 sclass=netlink_xfrm_socket pid=6030 comm=syz.2.780 [ 83.668214][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.782'. [ 83.692732][ T28] audit: type=1400 audit(1786140426.905:1236): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 83.733858][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 83.779653][ T36] bridge_slave_1: left allmulticast mode [ 83.791037][ T36] bridge_slave_1: left promiscuous mode [ 83.791348][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.782'. [ 83.797268][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.824083][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.782'. [ 83.842376][ T36] bridge_slave_0: left allmulticast mode [ 83.844627][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.782'. [ 83.849216][ T36] bridge_slave_0: left promiscuous mode [ 83.878173][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.961011][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.782'. [ 84.036107][ T28] audit: type=1400 audit(1786140427.245:1237): avc: denied { getopt } for pid=6057 comm="syz.3.786" lport=34233 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 84.120892][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.157567][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.184758][ T36] bond0 (unregistering): Released all slaves [ 84.283640][ T36] hsr_slave_0: left promiscuous mode [ 84.340442][ T36] hsr_slave_1: left promiscuous mode [ 84.348688][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.359917][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.389178][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.404031][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.414365][ T6080] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 84.564621][ T28] audit: type=1401 audit(1786140427.755:1238): op=setxattr invalid_context=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 [ 84.598865][ T28] audit: type=1400 audit(1786140427.815:1239): avc: denied { write } for pid=6077 comm="syz.1.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 84.748136][ T36] veth1_macvtap: left promiscuous mode [ 84.754682][ T36] veth0_macvtap: left promiscuous mode [ 84.761000][ T36] veth1_vlan: left promiscuous mode [ 84.767980][ T36] veth0_vlan: left promiscuous mode [ 84.774280][ T28] audit: type=1400 audit(1786140427.955:1240): avc: denied { write } for pid=6077 comm="syz.1.790" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 85.925173][ T36] team0 (unregistering): Port device team_slave_1 removed [ 86.435820][ T36] team0 (unregistering): Port device team_slave_0 removed [ 86.540321][ T6106] netlink: 'syz.3.795': attribute type 18 has an invalid length. [ 86.797181][ T6114] loop3: detected capacity change from 0 to 1024 [ 86.827278][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 87.247017][ T6146] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 87.271693][ T6146] iwpm_mapping_info_cb: Unable to parse nlmsg [ 87.338077][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.345391][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.353409][ T6031] bridge_slave_0: entered allmulticast mode [ 87.369052][ T6031] bridge_slave_0: entered promiscuous mode [ 87.378268][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.385897][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.393867][ T6031] bridge_slave_1: entered allmulticast mode [ 87.401400][ T6031] bridge_slave_1: entered promiscuous mode [ 87.441630][ T6031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.457604][ T6031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.491764][ T6031] team0: Port device team_slave_0 added [ 87.503138][ T6031] team0: Port device team_slave_1 added [ 87.530848][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.538451][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.547243][ T6154] loop2: detected capacity change from 0 to 1024 [ 87.602491][ T6031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.611628][ T6154] EXT4-fs: inline encryption not supported [ 87.665763][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 87.696388][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.708362][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.771697][ T6154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 87.798057][ T6031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.816055][ T6154] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.896427][ T6154] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.805: bg 0: block 112: padding at end of block bitmap is not set [ 88.024365][ T6031] hsr_slave_0: entered promiscuous mode [ 88.052536][ T6031] hsr_slave_1: entered promiscuous mode [ 88.092901][ T6181] __nla_validate_parse: 6 callbacks suppressed [ 88.092917][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 88.194438][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.232932][ T6176] netlink: 'syz.1.810': attribute type 1 has an invalid length. [ 88.401163][ T6172] infiniband syz0: set active [ 88.443613][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 88.443630][ T28] audit: type=1400 audit(1786140431.655:1252): avc: denied { write } for pid=6178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.445703][ T6172] infiniband syz0: added team0 [ 88.466214][ T6206] loop3: detected capacity change from 0 to 512 [ 88.495179][ T6208] Invalid ELF header magic: != ELF [ 88.496589][ T28] audit: type=1400 audit(1786140431.705:1253): avc: denied { module_load } for pid=6175 comm="syz.1.810" path="/140/bus" dev="tmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 88.610264][ T6172] RDS/IB: syz0: added [ 88.653150][ T6031] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 88.658200][ T6172] smc: adding ib device syz0 with port count 1 [ 88.679971][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.691102][ T6206] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.702770][ T6031] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 88.707195][ T28] audit: type=1400 audit(1786140431.905:1254): avc: denied { write } for pid=6214 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.718047][ T6172] smc: ib device syz0 port 1 has no pnetid [ 88.751903][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.775814][ T6031] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 88.776295][ T6206] EXT4-fs (loop3): 1 truncate cleaned up [ 88.800915][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.812684][ T6206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.825939][ T6031] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 88.846657][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.852682][ T28] audit: type=1400 audit(1786140432.055:1255): avc: denied { write } for pid=6205 comm="syz.3.816" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.859151][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 88.956526][ T28] audit: type=1400 audit(1786140432.105:1256): avc: denied { setopt } for pid=6205 comm="syz.3.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.005179][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.037631][ T28] audit: type=1400 audit(1786140432.135:1257): avc: denied { ioctl } for pid=6205 comm="syz.3.816" path="/168/file1/cgroup.controllers" dev="loop3" ino=18 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 89.272835][ T6031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.298721][ T28] audit: type=1400 audit(1786140432.505:1258): avc: denied { nlmsg_read } for pid=6239 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.387693][ T28] audit: type=1400 audit(1786140432.595:1259): avc: denied { write } for pid=6230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.389503][ T6031] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.501920][ T28] audit: type=1400 audit(1786140432.715:1260): avc: denied { write } for pid=6247 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.570814][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.578529][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.593188][ T6250] loop2: detected capacity change from 0 to 512 [ 89.630234][ T28] audit: type=1400 audit(1786140432.765:1261): avc: denied { ioctl } for pid=6248 comm="syz.2.822" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15072 ioctlcmd=0x9370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 89.667324][ T6250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.696556][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.703988][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.743106][ T6250] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.783103][ T6258] syzkaller0: entered promiscuous mode [ 89.794413][ T6258] syzkaller0: entered allmulticast mode [ 89.809988][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.818531][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 90.012620][ T6261] loop2: detected capacity change from 0 to 1024 [ 90.021960][ T6264] SELinux: policydb version 0 does not match my version range 15-35 [ 90.044167][ T6261] EXT4-fs: inline encryption not supported [ 90.054542][ T6264] SELinux: failed to load policy [ 90.105781][ T6261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 90.129864][ T6261] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.229876][ T6261] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.823: bg 0: block 112: padding at end of block bitmap is not set [ 90.425057][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 90.646795][ T6275] loop3: detected capacity change from 0 to 8192 [ 90.844106][ T6031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.875427][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'. [ 90.912613][ T6310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.832'. [ 90.948184][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'. [ 91.000781][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 91.032328][ T6308] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 91.132735][ T6308] iwpm_mapping_info_cb: Unable to parse nlmsg [ 91.312993][ T6330] syzkaller0: entered promiscuous mode [ 91.340886][ T6330] syzkaller0: entered allmulticast mode [ 91.565827][ T6342] netlink: 'syz.3.836': attribute type 1 has an invalid length. [ 91.591719][ T6342] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.836'. [ 91.692552][ T6352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6352 comm=syz.0.835 [ 91.864244][ T6358] Cannot find add_set index 768 as target [ 92.173376][ T6369] ip_tables: iptables: counters copy to user failed while replacing table [ 92.207644][ T6031] veth0_vlan: entered promiscuous mode [ 92.262723][ T6031] veth1_vlan: entered promiscuous mode [ 92.342940][ T6031] veth0_macvtap: entered promiscuous mode [ 92.352989][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'. [ 92.384681][ T6031] veth1_macvtap: entered promiscuous mode [ 92.391654][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'. [ 92.428245][ T6372] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 92.447579][ T6378] vlan2: entered promiscuous mode [ 92.448271][ T6372] iwpm_mapping_info_cb: Unable to parse nlmsg [ 92.471499][ T6378] bond0: entered promiscuous mode [ 92.483209][ T6378] bond_slave_0: entered promiscuous mode [ 92.509197][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.574655][ T6376] syzkaller0: entered promiscuous mode [ 92.591192][ T6376] syzkaller0: entered allmulticast mode [ 92.645631][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.646467][ T6388] netlink: 'syz.2.848': attribute type 1 has an invalid length. [ 92.684804][ T6388] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.848'. [ 92.758953][ T135] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.773169][ T135] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.843922][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.851'. [ 92.854017][ T6399] loop3: detected capacity change from 0 to 512 [ 92.862966][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.851'. [ 92.906377][ T3434] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.984791][ T3434] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.118555][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 93.153240][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'. [ 93.191729][ T6412] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 93.271977][ T6412] iwpm_mapping_info_cb: Unable to parse nlmsg [ 93.463612][ T6435] syzkaller0: entered promiscuous mode [ 93.479401][ T6435] syzkaller0: entered allmulticast mode [ 93.632350][ T6441] loop3: detected capacity change from 0 to 128 [ 93.646968][ T6442] loop2: detected capacity change from 0 to 512 [ 93.676486][ T6442] EXT4-fs (loop2): 1 truncate cleaned up [ 93.699144][ T6442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.760974][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 93.760991][ T28] audit: type=1400 audit(1786140436.975:1287): avc: denied { write } for pid=6440 comm="syz.2.868" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.827635][ T28] audit: type=1400 audit(1786140436.975:1288): avc: denied { write } for pid=6440 comm="syz.2.868" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.829433][ T6447] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.868: bg 0: block 465: padding at end of block bitmap is not set [ 93.875459][ T28] audit: type=1400 audit(1786140436.975:1289): avc: denied { open } for pid=6440 comm="syz.2.868" path="/221/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.912082][ T6447] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 93.943566][ T28] audit: type=1400 audit(1786140437.035:1290): avc: denied { ioctl } for pid=6440 comm="syz.2.868" path="/221/file1/file1" dev="loop2" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.947521][ T6447] EXT4-fs (loop2): This should not happen!! Data will be lost [ 93.947521][ T6447] [ 94.012642][ T6447] EXT4-fs (loop2): Total free blocks count 0 [ 94.037235][ T6447] EXT4-fs (loop2): Free/Dirty block details [ 94.052563][ T6447] EXT4-fs (loop2): free_blocks=0 [ 94.076967][ T6447] EXT4-fs (loop2): dirty_blocks=66 [ 94.105147][ T6447] EXT4-fs (loop2): Block reservation details [ 94.113860][ T6447] EXT4-fs (loop2): i_reserved_data_blocks=66 [ 94.129508][ T6442] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 94.230282][ T3294] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 94.373279][ T6452] loop3: detected capacity change from 0 to 2048 [ 94.398786][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 94.405300][ T6457] netlink: 'syz.2.872': attribute type 1 has an invalid length. [ 94.428623][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 94.432219][ T6457] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.872'. [ 94.448108][ T6458] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 94.495111][ T6458] iwpm_mapping_info_cb: Unable to parse nlmsg [ 94.589663][ T6463] netlink: 'syz.0.875': attribute type 1 has an invalid length. [ 94.633343][ T6463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.645199][ T6461] syzkaller0: entered promiscuous mode [ 94.653113][ T6461] syzkaller0: entered allmulticast mode [ 94.659608][ T28] audit: type=1400 audit(1786140437.865:1291): avc: denied { create } for pid=6462 comm="syz.0.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 94.688535][ T6469] bond1: entered allmulticast mode [ 94.749346][ T6463] bond1: (slave ip6gretap1): making interface the new active one [ 94.757611][ T6463] ip6gretap1: entered allmulticast mode [ 94.772457][ T6463] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 94.832550][ T6472] syzkaller0: entered promiscuous mode [ 94.848861][ T6472] syzkaller0: entered allmulticast mode [ 95.108316][ T28] audit: type=1400 audit(1786140438.315:1292): avc: denied { mount } for pid=6485 comm="syz.3.883" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 95.196827][ T28] audit: type=1400 audit(1786140438.405:1293): avc: denied { read } for pid=6492 comm="syz.1.886" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.214351][ T6491] netlink: 104 bytes leftover after parsing attributes in process `syz.0.881'. [ 95.250923][ T6493] netlink: 'syz.1.886': attribute type 6 has an invalid length. [ 95.280965][ T28] audit: type=1400 audit(1786140438.405:1294): avc: denied { open } for pid=6492 comm="syz.1.886" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 95.312565][ T6493] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.886'. [ 95.420063][ T28] audit: type=1400 audit(1786140438.625:1295): avc: denied { bind } for pid=6495 comm="syz.1.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.456886][ T28] audit: type=1400 audit(1786140438.665:1296): avc: denied { write } for pid=6495 comm="syz.1.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.587374][ T6496] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 95.588217][ T3412] IPVS: starting estimator thread 0... [ 95.662328][ T6505] loop2: detected capacity change from 0 to 512 [ 95.698907][ T6504] IPVS: using max 2256 ests per chain, 112800 per kthread [ 95.724830][ T6505] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 65535 [ 95.782400][ T6507] syzkaller0: entered promiscuous mode [ 95.799794][ T6507] syzkaller0: entered allmulticast mode [ 96.408035][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 96.667106][ T6538] syzkaller0: entered promiscuous mode [ 96.697281][ T6538] syzkaller0: entered allmulticast mode [ 96.779553][ T6544] loop2: detected capacity change from 0 to 256 [ 97.019271][ T6546] syzkaller0: entered promiscuous mode [ 97.026236][ T6546] syzkaller0: entered allmulticast mode [ 97.126146][ T6551] loop3: detected capacity change from 0 to 512 [ 97.192571][ T6551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.238098][ T6551] ext4 filesystem being mounted at /193/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 97.348599][ T6551] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.908: Failed to acquire dquot type 1 [ 97.404282][ T6561] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.908: Failed to acquire dquot type 1 [ 97.458044][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 97.478848][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.701622][ T6569] netlink: 'syz.3.911': attribute type 1 has an invalid length. [ 97.720575][ T6569] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.911'. [ 97.846243][ T6571] smpboot: CPU 1 is now offline [ 97.901264][ T6576] FAULT_INJECTION: forcing a failure. [ 97.901264][ T6576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.972137][ T6576] CPU: 0 UID: 0 PID: 6576 Comm: syz.3.914 Not tainted syzkaller #0 PREEMPT(lazy) [ 97.972157][ T6576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.972165][ T6576] Call Trace: [ 97.972171][ T6576] [ 97.972239][ T6576] __dump_stack+0x1d/0x30 [ 97.972255][ T6576] dump_stack_lvl+0x95/0xd0 [ 97.972268][ T6576] dump_stack+0x15/0x1b [ 97.972280][ T6576] should_fail_ex+0x25e/0x270 [ 97.972381][ T6576] should_fail+0xb/0x20 [ 97.972434][ T6576] should_fail_usercopy+0x1a/0x20 [ 97.972472][ T6576] _copy_from_user+0x1c/0xb0 [ 97.972485][ T6576] __sys_connect+0xd0/0x2a0 [ 97.972556][ T6576] __x64_sys_connect+0x3f/0x50 [ 97.972606][ T6576] x64_sys_call+0x2df0/0x3020 [ 97.972620][ T6576] do_syscall_64+0x136/0x3c0 [ 97.972713][ T6576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.972727][ T6576] RIP: 0033:0x7f531569e0d9 [ 97.972738][ T6576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.972776][ T6576] RSP: 002b:00007f53140f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 97.972791][ T6576] RAX: ffffffffffffffda RBX: 00007f5315925fa0 RCX: 00007f531569e0d9 [ 97.972801][ T6576] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000003 [ 97.972868][ T6576] RBP: 00007f53140f7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.972877][ T6576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.972891][ T6576] R13: 00007f5315926038 R14: 00007f5315925fa0 R15: 00007ffc831a6b78 [ 97.972904][ T6576] [ 98.259341][ T6574] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 98.409986][ T6582] syzkaller0: entered promiscuous mode [ 98.446224][ T6582] syzkaller0: entered allmulticast mode [ 98.467989][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 98.609362][ T6589] syzkaller0: entered promiscuous mode [ 98.630108][ T6589] syzkaller0: entered allmulticast mode [ 98.769984][ T28] kauditd_printk_skb: 128 callbacks suppressed [ 98.770000][ T28] audit: type=1326 audit(1786140441.985:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.2.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6be28e0d9 code=0x7ffc0000 [ 98.815424][ T6596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.829279][ T6596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.838696][ T28] audit: type=1326 audit(1786140441.985:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.2.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6be28e0d9 code=0x7ffc0000 [ 98.881338][ T6596] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 98.888213][ T6596] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.898435][ T28] audit: type=1326 audit(1786140442.025:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.2.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6be24e90e code=0x7ffc0000 [ 98.935649][ T6596] vhci_hcd vhci_hcd.0: Device attached [ 98.943763][ T28] audit: type=1326 audit(1786140442.025:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.2.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6be24e90e code=0x7ffc0000 [ 98.974570][ T6600] loop3: detected capacity change from 0 to 764 [ 98.974609][ T28] audit: type=1400 audit(1786140442.025:1425): avc: denied { read write } for pid=6595 comm="syz.1.922" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.012576][ T28] audit: type=1400 audit(1786140442.025:1426): avc: denied { open } for pid=6595 comm="syz.1.922" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.013074][ T6597] vhci_hcd: connection closed [ 99.045099][ T28] audit: type=1400 audit(1786140442.025:1427): avc: denied { ioctl } for pid=6595 comm="syz.1.922" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.080379][ T28] audit: type=1326 audit(1786140442.025:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.2.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6be24e90e code=0x7ffc0000 [ 99.107506][ T135] vhci_hcd vhci_hcd.1: stop threads [ 99.120001][ T135] vhci_hcd vhci_hcd.1: release socket [ 99.135482][ T135] vhci_hcd vhci_hcd.1: disconnect device [ 99.143231][ T6600] rock: directory entry would overflow storage [ 99.148868][ T3412] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 99.157990][ T6600] rock: sig=0x4654, size=5, remaining=4 [ 99.171237][ T28] audit: type=1326 audit(1786140442.025:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.2.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6be24e90e code=0x7ffc0000 [ 99.244699][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.923'. [ 99.267964][ T28] audit: type=1326 audit(1786140442.045:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6586 comm="syz.2.918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc6be24e90e code=0x7ffc0000 [ 99.439178][ T6604] netlink: 'syz.2.924': attribute type 1 has an invalid length. [ 99.476734][ T6607] 9p: Bad value for 'rfdno' [ 99.527976][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 99.587219][ T6604] 8021q: adding VLAN 0 to HW filter on device bond4 [ 99.769708][ T6604] bond4: (slave geneve3): making interface the new active one [ 99.801265][ T6604] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 99.883888][ T6617] team0 (unregistering): Port device team_slave_0 removed [ 99.924084][ T6617] team0 (unregistering): Port device team_slave_1 removed [ 99.966424][ T6619] xt_ecn: cannot match TCP bits for non-tcp packets [ 100.568142][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 101.608020][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 102.000069][ T6638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.934'. [ 102.071803][ T6638] netlink: 48 bytes leftover after parsing attributes in process `syz.1.934'. [ 102.205157][ T6638] vlan2: entered promiscuous mode [ 102.233525][ T6638] bridge0: entered promiscuous mode [ 102.532924][ T6654] netlink: 'syz.2.937': attribute type 1 has an invalid length. [ 102.572809][ T6654] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.937'. [ 102.647980][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 102.952758][ T6666] loop2: detected capacity change from 0 to 1024 [ 102.987923][ T6666] EXT4-fs: inline encryption not supported [ 103.116687][ T6666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 103.171354][ T6666] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.225087][ T6666] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.941: bg 0: block 112: padding at end of block bitmap is not set [ 103.688580][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 103.715071][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 103.726878][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.772718][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.831482][ T28] kauditd_printk_skb: 111 callbacks suppressed [ 103.831497][ T28] audit: type=1400 audit(1786140447.045:1542): avc: denied { name_bind } for pid=6696 comm="syz.1.945" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 103.898757][ T28] audit: type=1400 audit(1786140447.085:1543): avc: denied { create } for pid=6696 comm="syz.1.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 104.024840][ T28] audit: type=1400 audit(1786140447.235:1544): avc: denied { write } for pid=6694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.073290][ T6717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.950'. [ 104.093922][ T28] audit: type=1400 audit(1786140447.295:1545): avc: denied { write } for pid=6721 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.146776][ T28] audit: type=1400 audit(1786140447.335:1546): avc: denied { create } for pid=6716 comm="syz.0.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.149341][ T6717] erspan1: entered allmulticast mode [ 104.195637][ T28] audit: type=1400 audit(1786140447.345:1547): avc: denied { listen } for pid=6716 comm="syz.0.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.222091][ T28] audit: type=1400 audit(1786140447.345:1548): avc: denied { connect } for pid=6716 comm="syz.0.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 104.355863][ T6733] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 104.374441][ T6733] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.951'. [ 104.421237][ T28] audit: type=1400 audit(1786140447.635:1549): avc: denied { write } for pid=6737 comm="syz.0.952" path="socket:[16999]" dev="sockfs" ino=16999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 104.481833][ T28] audit: type=1400 audit(1786140447.695:1550): avc: denied { write } for pid=6726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.521168][ T6738] veth0_to_bond: Caught tx_queue_len zero misconfig [ 104.634772][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.954'. [ 104.648822][ T28] audit: type=1400 audit(1786140447.845:1551): avc: denied { write } for pid=6743 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.691182][ T6744] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.953'. [ 104.728620][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 104.947104][ T6758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.958'. [ 105.161676][ T6769] syzkaller0: entered promiscuous mode [ 105.172158][ T6769] syzkaller0: entered allmulticast mode [ 105.227485][ T6770] syzkaller0: entered promiscuous mode [ 105.244535][ T6770] syzkaller0: entered allmulticast mode [ 105.279146][ T6772] syzkaller0: entered promiscuous mode [ 105.286795][ T6772] syzkaller0: entered allmulticast mode [ 105.361059][ T6776] netlink: 16 bytes leftover after parsing attributes in process `syz.0.965'. [ 105.379250][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 105.496658][ T6784] FAULT_INJECTION: forcing a failure. [ 105.496658][ T6784] name failslab, interval 1, probability 0, space 0, times 0 [ 105.541367][ T6784] CPU: 0 UID: 0 PID: 6784 Comm: syz.0.967 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.541457][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.541470][ T6784] Call Trace: [ 105.541488][ T6784] [ 105.541500][ T6784] __dump_stack+0x1d/0x30 [ 105.541528][ T6784] dump_stack_lvl+0x95/0xd0 [ 105.541552][ T6784] dump_stack+0x15/0x1b [ 105.541580][ T6784] should_fail_ex+0x25e/0x270 [ 105.541636][ T6784] should_failslab+0x8c/0xb0 [ 105.541662][ T6784] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 105.541689][ T6784] ? __alloc_skb+0x2db/0x6f0 [ 105.541792][ T6784] ? __alloc_skb+0x2db/0x6f0 [ 105.541905][ T6784] __alloc_skb+0x2db/0x6f0 [ 105.541934][ T6784] ? __alloc_skb+0x205/0x6f0 [ 105.541964][ T6784] netlink_alloc_large_skb+0xbf/0xf0 [ 105.542008][ T6784] netlink_sendmsg+0x40c/0x6f0 [ 105.542051][ T6784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.542107][ T6784] ____sys_sendmsg+0x532/0x580 [ 105.542143][ T6784] ___sys_sendmsg+0x195/0x1e0 [ 105.542176][ T6784] __x64_sys_sendmsg+0xd4/0x160 [ 105.542201][ T6784] x64_sys_call+0x194c/0x3020 [ 105.542283][ T6784] do_syscall_64+0x136/0x3c0 [ 105.542366][ T6784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.542392][ T6784] RIP: 0033:0x7f8f1c67e0d9 [ 105.542413][ T6784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.542504][ T6784] RSP: 002b:00007f8f1b0d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.542564][ T6784] RAX: ffffffffffffffda RBX: 00007f8f1c905fa0 RCX: 00007f8f1c67e0d9 [ 105.542581][ T6784] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000003 [ 105.542595][ T6784] RBP: 00007f8f1b0d7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.542609][ T6784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.542622][ T6784] R13: 00007f8f1c906038 R14: 00007f8f1c905fa0 R15: 00007ffc016c0c48 [ 105.542643][ T6784] [ 105.767935][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 105.901187][ T6792] netlink: 'syz.3.970': attribute type 1 has an invalid length. [ 105.916686][ T6792] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.970'. [ 105.976374][ T6795] loop2: detected capacity change from 0 to 1024 [ 105.986070][ T6795] EXT4-fs: inline encryption not supported [ 106.058801][ T6795] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 106.092820][ T6795] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.120590][ T6795] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.972: bg 0: block 112: padding at end of block bitmap is not set [ 106.273301][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 106.300452][ T6813] syzkaller0: entered promiscuous mode [ 106.321620][ T6813] syzkaller0: entered allmulticast mode [ 106.343457][ T6813] tipc: Started in network mode [ 106.352253][ T6813] tipc: Node identity 9aeec41cc558, cluster identity 4711 [ 106.362386][ T6813] tipc: Enabled bearer , priority 0 [ 106.379691][ T6820] tmpfs: Unknown parameter 'mpÛ—¶³sî_‘leave' [ 106.392800][ T6812] tipc: Resetting bearer [ 106.410549][ T6820] netlink: 'syz.0.974': attribute type 21 has an invalid length. [ 106.422551][ T6820] IPv6: NLM_F_CREATE should be specified when creating new route [ 106.435311][ T6812] tipc: Disabling bearer [ 106.579849][ T3375] kernel write not supported for file /577/attr/exec (pid: 3375 comm: kworker/1:3) [ 106.687634][ T6830] syzkaller0: entered promiscuous mode [ 106.701432][ T6830] syzkaller0: entered allmulticast mode [ 106.807974][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 106.945425][ T6838] syzkaller0: entered promiscuous mode [ 106.956061][ T6838] syzkaller0: entered allmulticast mode [ 107.269565][ T6848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.295991][ T6848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.429634][ T6848] loop3: detected capacity change from 0 to 164 [ 107.438606][ T6848] iso9660: Unknown parameter 'GŒa¦ß%鼸­wš3|2Øo‡þió{Mp$ªíÉÁE' [ 107.601147][ T6853] syz.1.989 (6853) used greatest stack depth: 9264 bytes left [ 107.747637][ T6855] syzkaller0: entered promiscuous mode [ 107.756384][ T6855] syzkaller0: entered allmulticast mode [ 107.848007][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 107.993451][ T6861] netlink: 'syz.2.993': attribute type 1 has an invalid length. [ 108.005116][ T6861] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.993'. [ 108.106685][ T6863] netlink: 'syz.1.994': attribute type 1 has an invalid length. [ 108.138212][ T6863] netlink: 101600 bytes leftover after parsing attributes in process `syz.1.994'. [ 108.222440][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.240150][ T6871] sd 0:0:1:0: PR command failed: 1026 [ 108.245742][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.263919][ T6871] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 108.264859][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.284364][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.298858][ T6874] ip6t_srh: unknown srh invflags 4000 [ 108.299955][ T6871] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 108.308641][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.325719][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.345809][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.365504][ T6871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1007'. [ 108.365538][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.399624][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.440343][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.465030][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.483969][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.493754][ T6882] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8215 sclass=netlink_xfrm_socket pid=6882 comm=syz.1.1000 [ 108.504970][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.525362][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.546034][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.566349][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.577334][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.596092][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.607695][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.623575][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.636850][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.655128][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.674259][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.681814][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.688804][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.695669][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.703340][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.710432][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.720446][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.735764][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.742971][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.750745][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.762097][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.769371][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.775945][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.782769][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.789393][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.796068][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.803149][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.810384][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.817116][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.824894][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.831721][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.839042][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.846398][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.853781][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.860862][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.868897][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.875895][ T6865] ieee802154 phy1 wpan1: encryption failed: -22 [ 108.887964][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 109.145601][ T6904] loop3: detected capacity change from 0 to 512 [ 109.155283][ T6906] netlink: 'syz.0.1008': attribute type 1 has an invalid length. [ 109.195996][ T6904] EXT4-fs (loop3): 1 orphan inode deleted [ 109.212709][ T6904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.228327][ T36] __quota_error: 20 callbacks suppressed [ 109.228344][ T36] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 109.228491][ T6904] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.257665][ T36] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 109.312080][ T6904] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 109.379238][ T6904] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 109.394444][ T6915] __nla_validate_parse: 2 callbacks suppressed [ 109.394463][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1010'. [ 109.414030][ T6915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.424413][ T6915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.435408][ T6904] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 109.449164][ T6915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.459870][ T6915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.468493][ T28] audit: type=1400 audit(1786140452.675:1572): avc: denied { write } for pid=6903 comm="syz.3.1006" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.514807][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.530271][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.613188][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.765505][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.848499][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.911932][ T6938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.928962][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 109.950606][ T6941] netlink: 'syz.3.1018': attribute type 1 has an invalid length. [ 109.960792][ T6938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.983555][ T6941] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.1018'. [ 110.089600][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1021'. [ 110.115015][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1021'. [ 110.117998][ T6943] syzkaller0: entered promiscuous mode [ 110.124855][ T6953] netlink: 'syz.3.1021': attribute type 15 has an invalid length. [ 110.140536][ T6943] syzkaller0: entered allmulticast mode [ 110.182364][ T6885] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.191170][ T6885] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.202226][ T6885] bridge_slave_0: entered allmulticast mode [ 110.212784][ T6885] bridge_slave_0: entered promiscuous mode [ 110.223042][ T6957] netlink: 'syz.2.1023': attribute type 4 has an invalid length. [ 110.226346][ T6885] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.243826][ T6885] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.253911][ T6885] bridge_slave_1: entered allmulticast mode [ 110.263628][ T6885] bridge_slave_1: entered promiscuous mode [ 110.344109][ T6964] sd 0:0:1:0: PR command failed: 1026 [ 110.351101][ T6964] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 110.367177][ T49] bridge_slave_1: left allmulticast mode [ 110.373606][ T6964] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 110.385228][ T49] bridge_slave_1: left promiscuous mode [ 110.398603][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.424724][ T49] bridge_slave_0: left allmulticast mode [ 110.425793][ T6964] ip6t_srh: unknown srh invflags 4000 [ 110.432229][ T49] bridge_slave_0: left promiscuous mode [ 110.451562][ T6967] loop2: detected capacity change from 0 to 512 [ 110.460562][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.479663][ T6964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1025'. [ 110.496756][ T6967] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 110.511192][ T6967] EXT4-fs (loop2): orphan cleanup on readonly fs [ 110.534778][ T6967] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1026: bad orphan inode 15 [ 110.550339][ T6967] loop2: lost filesystem error report for type 5 error -117 [ 110.550700][ T6967] ext4_test_bit(bit=14, block=5) = 0 [ 110.558873][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 110.558914][ C0] EXT4-fs (loop2): initial error at time 1786140453: ext4_orphan_get:1425 [ 110.558937][ C0] EXT4-fs (loop2): last error at time 1786140453: ext4_orphan_get:1425 [ 110.594562][ T6967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 110.631696][ T28] audit: type=1400 audit(1786140453.845:1573): avc: denied { bind } for pid=6966 comm="syz.2.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.744029][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.747357][ T28] audit: type=1400 audit(1786140453.845:1574): avc: denied { setopt } for pid=6966 comm="syz.2.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.797236][ T28] audit: type=1400 audit(1786140453.875:1575): avc: denied { setopt } for pid=6976 comm="syz.1.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.821355][ T28] audit: type=1400 audit(1786140453.875:1576): avc: denied { ioctl } for pid=6966 comm="syz.2.1026" path="socket:[18635]" dev="sockfs" ino=18635 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.925765][ T28] audit: type=1400 audit(1786140453.885:1577): avc: denied { ioctl } for pid=6976 comm="syz.1.1027" path="socket:[17580]" dev="sockfs" ino=17580 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 110.968037][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 110.982238][ T28] audit: type=1400 audit(1786140454.115:1578): avc: denied { write } for pid=6968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.025735][ T28] audit: type=1400 audit(1786140454.235:1579): avc: denied { write } for pid=6996 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.067103][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.089493][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.104703][ T49] bond0 (unregistering): Released all slaves [ 111.119601][ T6885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.172787][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 111.202663][ T6885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.211152][ T7003] loop2: detected capacity change from 0 to 1024 [ 111.228322][ T7003] EXT4-fs: inline encryption not supported [ 111.308180][ T7003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 111.320732][ T7003] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.339261][ T7008] loop3: detected capacity change from 0 to 512 [ 111.362125][ T7003] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1030: bg 0: block 112: padding at end of block bitmap is not set [ 111.421364][ T6885] team0: Port device team_slave_0 added [ 111.460445][ T7008] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -ENXIO [ 111.471843][ T49] hsr_slave_0: left promiscuous mode [ 111.482435][ T49] hsr_slave_1: left promiscuous mode [ 111.496760][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.510988][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.520981][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.538174][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.598658][ T49] veth1_macvtap: left promiscuous mode [ 111.604702][ T49] veth0_macvtap: left promiscuous mode [ 111.614423][ T49] veth1_vlan: left promiscuous mode [ 111.621154][ T49] veth0_vlan: left promiscuous mode [ 111.818861][ T49] team0 (unregistering): Port device team_slave_1 removed [ 111.858473][ T49] team0 (unregistering): Port device team_slave_0 removed [ 111.989048][ T6885] team0: Port device team_slave_1 added [ 112.008034][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 112.016309][ T7026] syzkaller0: entered promiscuous mode [ 112.025232][ T7026] syzkaller0: entered allmulticast mode [ 112.084622][ T6885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.102568][ T6885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.157743][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 112.201177][ T6885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.248725][ T6885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.277644][ T6885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.379560][ T6885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.389082][ T7045] loop2: detected capacity change from 0 to 1024 [ 112.427928][ T7045] EXT4-fs: inline encryption not supported [ 112.482758][ T7046] loop3: detected capacity change from 0 to 256 [ 112.520463][ T7045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 112.525580][ T6885] hsr_slave_0: entered promiscuous mode [ 112.549817][ T6885] hsr_slave_1: entered promiscuous mode [ 112.589875][ T7045] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.619527][ T28] audit: type=1400 audit(1786140455.835:1580): avc: denied { write } for pid=7039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.648415][ T7045] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1036: bg 0: block 112: padding at end of block bitmap is not set [ 112.831415][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 112.849311][ T3294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 113.047938][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 113.120435][ T6885] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 113.159755][ T6885] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.182122][ T6885] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 113.220133][ T6885] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.244056][ T6885] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 113.274953][ T6885] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.312618][ T6885] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 113.342885][ T6885] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 113.434141][ T7091] syzkaller0: entered promiscuous mode [ 113.457650][ T7091] syzkaller0: entered allmulticast mode [ 113.481959][ T7103] loop3: detected capacity change from 0 to 1024 [ 113.509127][ T7103] EXT4-fs: Ignoring removed bh option [ 113.580426][ T7103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 113.617145][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 113.742031][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 113.763231][ T6885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.871575][ T6885] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.920734][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.929290][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.934117][ T7121] loop3: detected capacity change from 0 to 128 [ 113.977165][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.985596][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.003818][ T7119] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.015026][ T7119] bridge0: entered allmulticast mode [ 114.041143][ T7127] bridge_slave_1: left allmulticast mode [ 114.047379][ T7127] bridge_slave_1: left promiscuous mode [ 114.055094][ T7127] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.085009][ T7127] bridge_slave_0: left allmulticast mode [ 114.093686][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 114.130165][ T7127] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.257179][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 114.257198][ T28] audit: type=1400 audit(1786140457.465:1589): avc: denied { write } for pid=7132 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.287300][ T6885] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.329650][ T7131] loop3: detected capacity change from 0 to 1024 [ 114.345437][ T6885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.387691][ T7131] EXT4-fs: inline encryption not supported [ 114.398629][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 114.455372][ T7131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 114.480048][ T7131] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.505819][ T7131] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1051: bg 0: block 112: padding at end of block bitmap is not set [ 114.524887][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.661810][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 114.752670][ T7155] netlink: 'syz.1.1056': attribute type 1 has an invalid length. [ 114.790690][ T7155] netlink: 101600 bytes leftover after parsing attributes in process `syz.1.1056'. [ 114.805529][ T7158] netlink: 'syz.3.1057': attribute type 1 has an invalid length. [ 114.824622][ T7158] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.1057'. [ 114.893735][ T7162] syzkaller0: entered promiscuous mode [ 114.911296][ T7162] syzkaller0: entered allmulticast mode [ 114.969594][ T6885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.026672][ T7172] FAULT_INJECTION: forcing a failure. [ 115.026672][ T7172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.054590][ T7172] CPU: 1 UID: 0 PID: 7172 Comm: syz.1.1060 Not tainted syzkaller #0 PREEMPT(lazy) [ 115.054689][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.054705][ T7172] Call Trace: [ 115.054773][ T7172] [ 115.054864][ T7172] __dump_stack+0x1d/0x30 [ 115.054896][ T7172] dump_stack_lvl+0x95/0xd0 [ 115.054939][ T7172] dump_stack+0x15/0x1b [ 115.054959][ T7172] should_fail_ex+0x25e/0x270 [ 115.054990][ T7172] should_fail+0xb/0x20 [ 115.055017][ T7172] should_fail_usercopy+0x1a/0x20 [ 115.055077][ T7172] _copy_from_user+0x1c/0xb0 [ 115.055098][ T7172] do_ipt_set_ctl+0x42a/0x970 [ 115.055130][ T7172] nf_setsockopt+0x199/0x1b0 [ 115.055216][ T7172] ip_setsockopt+0x102/0x110 [ 115.055248][ T7172] udp_setsockopt+0x89/0xa0 [ 115.055363][ T7172] sock_common_setsockopt+0x69/0x80 [ 115.055390][ T7172] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 115.055417][ T7172] __sys_setsockopt+0x184/0x200 [ 115.055525][ T7172] __x64_sys_setsockopt+0x64/0x80 [ 115.055555][ T7172] x64_sys_call+0x2327/0x3020 [ 115.055580][ T7172] do_syscall_64+0x136/0x3c0 [ 115.055679][ T7172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.055706][ T7172] RIP: 0033:0x7fc719bbe0d9 [ 115.055726][ T7172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.055787][ T7172] RSP: 002b:00007fc718617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 115.055809][ T7172] RAX: ffffffffffffffda RBX: 00007fc719e45fa0 RCX: 00007fc719bbe0d9 [ 115.055827][ T7172] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 115.055907][ T7172] RBP: 00007fc718617090 R08: 00000000000002c0 R09: 0000000000000000 [ 115.055923][ T7172] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 115.055961][ T7172] R13: 00007fc719e46038 R14: 00007fc719e45fa0 R15: 00007ffcb6849ce8 [ 115.055980][ T7172] [ 115.128042][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 115.198801][ T7181] netlink: 'syz.1.1062': attribute type 1 has an invalid length. [ 115.396353][ T7181] netlink: 101600 bytes leftover after parsing attributes in process `syz.1.1062'. [ 115.479610][ T7192] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.487524][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.514965][ T7192] bridge0: entered allmulticast mode [ 115.587561][ T7192] bridge_slave_1: left allmulticast mode [ 115.597764][ T7200] netlink: 'syz.2.1067': attribute type 1 has an invalid length. [ 115.606071][ T7192] bridge_slave_1: left promiscuous mode [ 115.606330][ T7192] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.624304][ T7200] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.1067'. [ 115.637351][ T7192] bridge_slave_0: left allmulticast mode [ 115.645603][ T7192] bridge_slave_0: left promiscuous mode [ 115.653389][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.732224][ T6885] veth0_vlan: entered promiscuous mode [ 115.746312][ T6885] veth1_vlan: entered promiscuous mode [ 115.797539][ T6885] veth0_macvtap: entered promiscuous mode [ 115.810955][ T6885] veth1_macvtap: entered promiscuous mode [ 115.839368][ T6885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.872994][ T6885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.928799][ T362] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.943933][ T362] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.989070][ T362] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.008287][ T362] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.050859][ T7208] syzkaller0: entered promiscuous mode [ 116.066452][ T7208] syzkaller0: entered allmulticast mode [ 116.167916][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 116.304989][ T28] audit: type=1400 audit(1786140459.515:1590): avc: denied { lock } for pid=7219 comm="syz.7.1073" path="socket:[17969]" dev="sockfs" ino=17969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 116.310453][ T7218] xt_nat: multiple ranges no longer supported [ 116.336326][ T7220] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1073'. [ 116.353993][ T3375] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 116.366930][ T28] audit: type=1400 audit(1786140459.565:1591): avc: denied { read write } for pid=7221 comm="syz.0.1074" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 116.405230][ T3375] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.413807][ T28] audit: type=1400 audit(1786140459.565:1592): avc: denied { open } for pid=7221 comm="syz.0.1074" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 116.500685][ T28] audit: type=1400 audit(1786140459.575:1593): avc: denied { read } for pid=7219 comm="syz.7.1073" path="socket:[17970]" dev="sockfs" ino=17970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.629306][ T7226] loop7: detected capacity change from 0 to 1024 [ 116.640685][ T7226] EXT4-fs: inline encryption not supported [ 116.676855][ T7226] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 116.695983][ T7226] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.726864][ T7226] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1075: bg 0: block 112: padding at end of block bitmap is not set [ 116.852720][ T7241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.875496][ T7241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.876780][ T6885] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 116.984363][ T7241] loop3: detected capacity change from 0 to 164 [ 117.018974][ T7241] iso9660: Unknown parameter 'GŒa¦ß%鼸­wš3|2Øo‡þió{Mp$ªíÉÁE' [ 117.144886][ T7245] syzkaller0: entered promiscuous mode [ 117.153070][ T7245] syzkaller0: entered allmulticast mode [ 117.207926][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 117.288958][ T7260] loop7: detected capacity change from 0 to 164 [ 117.512515][ T7271] loop7: detected capacity change from 0 to 128 [ 117.543982][ T7271] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 117.576214][ T7271] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.647956][ T28] audit: type=1400 audit(1786140460.855:1594): avc: denied { write } for pid=7270 comm="syz.7.1091" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.733349][ T6885] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.880085][ T7289] syzkaller0: entered promiscuous mode [ 117.888137][ T7289] syzkaller0: entered allmulticast mode [ 118.121806][ T7296] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.1099'. [ 118.137042][ T7296] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.1099'. [ 118.162428][ T7296] loop7: detected capacity change from 0 to 512 [ 118.212276][ T7296] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.233688][ T7296] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.248659][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 118.267123][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1099'. [ 118.382945][ T6885] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.649622][ T28] audit: type=1400 audit(1786140461.855:1595): avc: denied { create } for pid=7308 comm="syz.3.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 118.727430][ T7315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1105'. [ 118.742858][ T7313] netlink: 'syz.7.1104': attribute type 1 has an invalid length. [ 118.752681][ T7313] netlink: 101600 bytes leftover after parsing attributes in process `syz.7.1104'. [ 118.965018][ T7323] syzkaller0: entered promiscuous mode [ 118.980397][ T7323] syzkaller0: entered allmulticast mode [ 119.033822][ T7321] loop7: detected capacity change from 0 to 512 [ 119.072808][ T7321] ext4: Unknown parameter 'fowner>00000000000000000255' [ 119.074129][ T28] audit: type=1400 audit(1786140462.285:1596): avc: denied { mounton } for pid=7320 comm="syz.7.1107" path="/file1" dev="ramfs" ino=18136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 119.167366][ T7335] loop7: detected capacity change from 0 to 1024 [ 119.176448][ T7335] EXT4-fs: Ignoring removed orlov option [ 119.212865][ T7335] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.233916][ T7335] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.264635][ T28] audit: type=1400 audit(1786140462.475:1597): avc: denied { mounton } for pid=7338 comm="syz.0.1112" path="/proc/592/task" dev="proc" ino=19466 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 119.287865][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 119.347436][ T28] audit: type=1400 audit(1786140462.555:1598): avc: denied { ioctl } for pid=7338 comm="syz.0.1112" path="socket:[18158]" dev="sockfs" ino=18158 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.559831][ T49] ================================================================== [ 119.568715][ T49] BUG: KCSAN: data-race in ring_buffer_unlock_commit / ring_buffer_unlock_commit [ 119.579001][ T49] [ 119.581332][ T49] write to 0xffff888100074cb4 of 1 bytes by task 7348 on cpu 1: [ 119.589876][ T49] ring_buffer_unlock_commit+0x6a/0x440 [ 119.596177][ T49] trace_buffer_unlock_commit_regs+0x43/0x310 [ 119.603132][ T49] trace_event_buffer_commit+0x149/0x590 [ 119.609659][ T49] trace_event_raw_event_hrtimer_setup+0xc9/0x170 [ 119.616803][ T49] hrtimer_setup_sleeper_on_stack+0xd1/0xf0 [ 119.622814][ T49] schedule_hrtimeout_range_clock+0x71/0x1a0 [ 119.628946][ T49] schedule_hrtimeout_range+0x28/0x40 [ 119.634614][ T49] do_select+0xed3/0xfa0 [ 119.639399][ T49] core_sys_select+0x453/0x730 [ 119.644542][ T49] __se_sys_pselect6+0x23f/0x2a0 [ 119.649691][ T49] __x64_sys_pselect6+0x78/0x90 [ 119.654947][ T49] x64_sys_call+0x8d5/0x3020 [ 119.659814][ T49] do_syscall_64+0x136/0x3c0 [ 119.664413][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.670383][ T49] [ 119.672712][ T49] read to 0xffff888100074cb4 of 1 bytes by task 49 on cpu 0: [ 119.680784][ T49] ring_buffer_unlock_commit+0x54/0x440 [ 119.687508][ T49] trace_buffer_unlock_commit_regs+0x43/0x310 [ 119.693780][ T49] trace_event_buffer_commit+0x149/0x590 [ 119.701451][ T49] trace_event_raw_event_consume_skb+0xb9/0x160 [ 119.708120][ T49] consume_skb+0x10a/0x130 [ 119.712560][ T49] nsim_dev_trap_report_work+0x529/0x630 [ 119.718263][ T49] process_scheduled_works+0x4d4/0x9a0 [ 119.724285][ T49] worker_thread+0x569/0x750 [ 119.728887][ T49] kthread+0x221/0x270 [ 119.733130][ T49] ret_from_fork+0x146/0x330 [ 119.737812][ T49] ret_from_fork_asm+0x1a/0x30 [ 119.742591][ T49] [ 119.744976][ T49] value changed: 0x01 -> 0x00 [ 119.749919][ T49] [ 119.752290][ T49] Reported by Kernel Concurrency Sanitizer on: [ 119.758451][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(lazy) [ 119.767902][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.778250][ T49] Workqueue: events_unbound nsim_dev_trap_report_work [ 119.785419][ T49] ================================================================== [ 119.834104][ T7350] FAULT_INJECTION: forcing a failure. [ 119.834104][ T7350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.853213][ T7350] CPU: 1 UID: 0 PID: 7350 Comm: syz.3.1115 Not tainted syzkaller #0 PREEMPT(lazy) [ 119.853232][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.853240][ T7350] Call Trace: [ 119.853246][ T7350] [ 119.853253][ T7350] __dump_stack+0x1d/0x30 [ 119.853348][ T7350] dump_stack_lvl+0x95/0xd0 [ 119.853361][ T7350] dump_stack+0x15/0x1b [ 119.853373][ T7350] should_fail_ex+0x25e/0x270 [ 119.853420][ T7350] should_fail+0xb/0x20 [ 119.853493][ T7350] should_fail_usercopy+0x1a/0x20 [ 119.853511][ T7350] strncpy_from_user+0x27/0x250 [ 119.853526][ T7350] do_getname+0x59/0x1c0 [ 119.853543][ T7350] __se_sys_mkdirat+0x21/0xf0 [ 119.853567][ T7350] __x64_sys_mkdirat+0x43/0x50 [ 119.853580][ T7350] x64_sys_call+0x2c4e/0x3020 [ 119.853633][ T7350] do_syscall_64+0x136/0x3c0 [ 119.853651][ T7350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.853665][ T7350] RIP: 0033:0x7f531569e0d9 [ 119.853748][ T7350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.853860][ T7350] RSP: 002b:00007f53140f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 119.853875][ T7350] RAX: ffffffffffffffda RBX: 00007f5315925fa0 RCX: 00007f531569e0d9 [ 119.853885][ T7350] RDX: 00000000000001ff RSI: 0000200000000240 RDI: ffffffffffffff9c [ 119.853895][ T7350] RBP: 00007f53140f7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.853916][ T7350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.853925][ T7350] R13: 00007f5315926038 R14: 00007f5315925fa0 R15: 00007ffc831a6b78 [ 119.854036][ T7350] [ 120.328140][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 121.367933][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 122.407925][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 123.447944][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 124.488012][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 125.387396][ T28] audit: type=1400 audit(1786140468.595:1599): avc: denied { write } for pid=7355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.427704][ T28] audit: type=1400 audit(1786140468.635:1600): avc: denied { write } for pid=7366 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.527946][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 126.050133][ T28] audit: type=1400 audit(1786140469.265:1601): avc: denied { write } for pid=7369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.091038][ T28] audit: type=1400 audit(1786140469.305:1602): avc: denied { write } for pid=7380 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.439881][ T28] audit: type=1400 audit(1786140469.655:1603): avc: denied { write } for pid=7383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.494025][ T28] audit: type=1400 audit(1786140469.705:1604): avc: denied { write } for pid=7394 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.567994][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 126.843054][ T28] audit: type=1400 audit(1786140470.055:1605): avc: denied { write } for pid=7397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.889836][ T28] audit: type=1400 audit(1786140470.105:1606): avc: denied { write } for pid=7408 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.607918][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 128.648748][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available