last executing test programs: 4.678800013s ago: executing program 0 (id=305): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0xdd5}, 0x0, 0x7, 0x10000, 0xd, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.637899924s ago: executing program 2 (id=307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x910}, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.554211567s ago: executing program 4 (id=309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x68, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x48, 0x3, "fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc497834540766"}]}], {0x14}}, 0x90}}, 0x0) 4.515608028s ago: executing program 4 (id=310): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$igmp6(0xa, 0x3, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x4130, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfff4}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020752600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f50b000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.480598168s ago: executing program 3 (id=312): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x88a8, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x2000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214e, 0xc000, 0x0, 0xc6}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a88000000060a01040000001eed8786000a0004050900010073797a31000000005c000480580001800a000100696e6e657200000048000280080004408000001708000340000000020800024000000084080001400000000024000580090001006d6574610000000014000280080001400000000808000240000000010900020073797a3200000000140000001100010000000000000000000100000a"], 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) pread64(r6, &(0x7f0000002c00)=""/4082, 0xff2, 0x7) mount_setattr(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xb100, &(0x7f00000002c0)={0x41, 0x100005, 0x20000, {r6}}, 0x20) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)}, 0x0) sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x100000) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r8, 0x4) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00&\x00'], 0xfe33) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01002000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 4.049894159s ago: executing program 2 (id=313): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x11}]}, 0x108) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000008d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x20040084) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x1, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x80de, 0x8000000000000001}, 0x10ecc8, 0x2, 0x0, 0x5, 0xd, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = semget(0x0, 0x1, 0x8) semctl$IPC_RMID(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x19) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000001c0)=0x7f) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000002060103000000000000000003de0000050001000600400005000400000000000900020073797a3100000000050005000200003a69702c706f72742c69700000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:07.0/driver/unbind\x00', 0x1, 0x0) write(r7, &(0x7f0000000180)='0000:00:07.0', 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x8f, 0x8}]}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/138, 0x8a}], 0x1, 0x1a, 0xfffffffb) 4.046353139s ago: executing program 4 (id=314): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x5, 0x9b, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000002c0), &(0x7f0000000300)=0x4) listen(r1, 0xa) socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0x7, 0xfb, 0xe39, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x8, 0x40, 0x0, 0xa1a8}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0xdc, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xbd}, @MPTCP_PM_ATTR_ADDR={0xfffffffffffffe56, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x0, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2e5}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) socket$kcm(0x29, 0x7, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r4) r5 = syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, r5, 0x10, 0x703d2c, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8800) r6 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000000)) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r7, &(0x7f0000000380)='file0', 0x5) 3.789974866s ago: executing program 3 (id=316): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x10, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0xa0db564c96732aa7, 0x1f, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8079}, 0x94) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000080), &(0x7f00000004c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRES64], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x7}, 0x10410, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs$namespace(0x0, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, 0x7, 0x6, 0x801, 0x0, 0xffffff7f, {0x5, 0x0, 0xec0}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000000906010200000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007000000ce26ae50cdd1aeeb467ca518aa6ef5d6839933f9c3be4a5c6a4573d0e5db3bc255536bef5a"], 0x4c}}, 0x4000080) 3.779437515s ago: executing program 4 (id=317): socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x9a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @remote, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x4000001) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa2}, 0x94) recvmsg$kcm(r0, &(0x7f0000001940)={0x0, 0xd335cd74c920a61d, &(0x7f0000000900)=[{&(0x7f0000000800)=""/197}], 0x1b}, 0x3062) socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8000000000000001, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x3, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d2ff078a0300000000000020060000f5", "1d1cbe23", "000000000200"}, 0x28) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 3.495865613s ago: executing program 3 (id=318): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') readv(r4, &(0x7f0000001700), 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0x190, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3274e082555f6722282f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5000000000800", 0x1, 0x1, {0xfffffffffffffffe}}}, @common=@inet=@ecn={{0x28}, {0x1, 0x11, 0x8, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x121f, &(0x7f0000001840)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210810, 0x0, 0x60, 0x0, &(0x7f0000000100)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r6 = syz_open_pts(r5, 0x141601) fcntl$setstatus(r6, 0x4, 0x102800) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xe) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0), 0x1, 0x603, &(0x7f0000000700)="$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") chdir(&(0x7f0000000240)='./file0\x00') mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r8, &(0x7f0000000380)='file0', 0x5) 3.432836154s ago: executing program 0 (id=319): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x19, 0x70bd2c, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x79269}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e1c}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) prctl$PR_GET_THP_DISABLE(0x2a) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8012, 0x4, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="6400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="23800200000000340012800b0001006970766c616e0000240002800600020056efe105000000060001000200000006c8740001000000f2ff0100200000000800", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/filesystems\x00', 0x800, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="2d72646d61202d637075002d6e65015f7072696f20"], 0x15) read(r5, &(0x7f0000001140)=""/4096, 0x1000) r6 = socket$inet6(0xa, 0x2, 0x0) close(r6) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000100)=0x2000004) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x8001) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x400, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000280)={0x6, @multicast2, 0x4e22, 0x4, 'lblc\x00', 0x23, 0x4, 0x2b}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@size={'size', 0x3d, [0x37, 0x70]}}]}) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000080)={[{@usrjquota}, {@errors_remount}]}, 0xfd, 0x4a4, &(0x7f0000001300)="$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") r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x2041, 0x0) fstat(r7, &(0x7f0000000380)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280803f, &(0x7f00000006c0), 0x1, 0x517, &(0x7f0000000700)="$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") sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x44000) 2.826179519s ago: executing program 3 (id=320): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000003c0), &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a2, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@nombcache}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000002480)=0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000"], 0x48) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x26, 0x0, @void}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r5, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="180000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001240)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010101, @in6=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x10, 0x5c, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffc, 0xa9, 0x3, 0x0, 0xfffffffffffff310, 0xffffffffffffffff, 0x0, 0x1da774c7}, {0x7ff, 0x9ff, 0x2000006, 0x800000004000000}, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x200400c5}, 0x4000800) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getpolicy={0x50, 0x15, 0xa35e0d24b534d643, 0x70bd29, 0x25dfdbfd, {{@in=@private=0xa010101, @in=@rand_addr=0x64010100, 0x4e21, 0x0, 0x4e21, 0x8, 0x2, 0xa0, 0x80, 0x2c}, 0x6e6bba, 0x1}}, 0x50}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f00000024c0)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) r8 = io_uring_setup(0x26bb, &(0x7f00000004c0)={0x0, 0xc071, 0x40000, 0x1, 0x299, 0x0, r5}) r9 = syz_io_uring_setup(0x256e, &(0x7f0000000140)={0x0, 0xe1c6, 0x400, 0x3, 0x0, 0x0, r8}, &(0x7f0000000240), &(0x7f0000000480), 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r9, 0x21, &(0x7f0000000440), 0x1) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 2.79069544s ago: executing program 2 (id=321): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x0, 0x3, 0x81, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0x4d008f46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x2e4ca021, @loopback, 0x1}}, 0x0, 0x0, 0x31, 0x0, "10baa70a93289349d889de25b87376f6622d337642b89005000000000000001b7ef6619dd6b2ca4edb6f7debd38b6d889a8c986b33e249c3157f1f370dfd6700"}, 0xd8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, 0x0, 0x800) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x12, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008eb9, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) io_uring_enter(r5, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) syz_io_uring_complete(r6, r7) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) 2.646748924s ago: executing program 1 (id=322): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0xc0000, 0x0, 0xbe, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0xae582, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000980)={0x6, &(0x7f00000008c0)=[{0x0, 0x6, &(0x7f0000000040)="67a518eb8ba6", 0x1, 0x1}, {0x0, 0x3f, &(0x7f0000000080)="77c0b7f226b9aba585d6e296a47818fc713f24a299172765df3844f76f3cf4d871eefebf531efba0a89eb5b94dc13eaec3b4092e6cc8349362aa790d0b6a05"}, {0x1e2, 0xbb, &(0x7f0000000180)="e91bee7c9003ca0b7ee7b8df702fe46dc9a19c53e6d8960baabe59faa8a1f11ce47355f7c4603e14732fec81db7cb564f84d5a9f981c940933475cc1a8306fe6ff0e4ae7b2b468b11f7d75c7f0f1f06ccdd8a9a5f88cdacc08c01b5f2ad0a68f485689960dc4a24fc337c2aca91998eacc7c89ebd86484eda607ee78d831a025e1a5e1d35a4560d970cf978aa9bcf4b450a2c16b83e52b15243907d14010caf47cce7a4e650bd005b9367481ddd4ff14914e2f153c2500b04e93af"}, {0x2, 0xc4, &(0x7f0000000580)="4e63319a3426373dd35d03504211901927e17fcf45f9978d5ae24c671fe122ecc9e681a7e773fdb7342ee647d78b1312121d63fe876c9353616cdd494fa53d227fde88d50a22f94b8e60e08b1d023b06407d09e2f8525407636b60581970ebca2148ac6aa6e0a5320328167de83c3248abdf123d5a39f4b254ee3d19fb0827444e55cd283687dbb1f2f1060e17f5291e67fcac0c5083a51d7feb701f4223d7db8d2208656fa3ea82c487e6e9f8e30114dd9c83c0cfd223d7a338ee3bbc31d00c6c014fd1", 0x1, 0x1}, {0xfffffff7, 0x0, 0x0, 0x1, 0x1}, {0x3, 0xf4, &(0x7f00000007c0)="785e6b052f51002fbe52b3c45f46cff9075543b8f9da35487721a2841c5e097a51d1617af49722b889e5f5bee08c0745c7f28169f8e9c92425da638069a92051e4d52a360a2c85bd3f50a1fc5e03d45ae2e55b23309be1f99a9e2f1bb03fece5d4f02506701df6fd417f58325777e566c8fd899a5fc9fe9d62787827c65306e4aff04b1ef399223c61918635e2151cfe0a0ca974e62a8ad68eaa97f1ee7d1b19845c20fe3ed574f5cee92ae81a20feed7e481e663dd7a0b5ca7d3a51c91734a7052bf98f9e71d2a08354df0befdc6b322a0e0e11d2549c1e6007bb24e3cf2089add1bedc7715b70379829f6ada28871a689006d0", 0x1}]}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x5, 0x1, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0xb) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) r4 = getpid() r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000500)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000240)=@req3={0x1, 0x800, 0x4, 0x20002, 0x4, 0x3, 0xc}, 0x3e) recvmmsg$unix(r6, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000000340)}}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x2, 0x400122a0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) sendmmsg(r6, &(0x7f00000030c0), 0x0, 0x9200000000000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_S2RAM(r2, 0x330b) sendmsg$nl_route(r1, 0x0, 0x20000004) rmdir(&(0x7f0000000080)='./bus\x00') 2.41657926s ago: executing program 0 (id=323): socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x2, 0x3, 0x87, 0x4, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0xffffffff8e339a50, 0x4}, 0x11018, 0xfffffffffffffffe, 0x6, 0x5, 0x0, 0x3, 0xc, 0x0, 0x80000000, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x20020080) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @empty, 0x1}, @nfc={0x27, 0x0, 0x0, 0x4}, @vsock={0x28, 0x0, 0x2711, @host}, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x9, 0x1}) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 1.800184405s ago: executing program 4 (id=324): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x100000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f00000003c0)={0x5, 0x2}) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='+', 0x1}, {0x0}], 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xffffdfff00000001}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="611534000000000061134c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000005574d074fa7e93447a88c0fbab48660aae7cdf367ef0e4538279b6113de5b94e1056f443305145c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x9, 0xfd, 0xff, 0x0, 0x85, 0x60200, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000080), 0xc}, 0x8000, 0x8000000000000001, 0x10001, 0x0, 0x400000000000, 0xff, 0x10, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0x0) 1.724404127s ago: executing program 2 (id=325): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400037e) close(0x3) 1.555440231s ago: executing program 0 (id=326): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000013c0)={@in6={{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffffe00}}, 0x0, 0x0, 0x47, 0x0, "772d0f529b03e70b8ae81eb1a9e8567b8e9dd018d36d790099bf30587276881952783d4059313a25b6cf0204b0859e65c13b361984b40c8fc55ec5d5849531afda5de50abf9fe1c4d0e83bab925afd24"}, 0xd8) syz_emit_ethernet(0x38, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x300, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0x10, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.466342873s ago: executing program 3 (id=327): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x5, 0x2c, 0x15, 0x1b, 0x8, 0x80000, 0x4, 0x144}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x5a, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600033a94a897b6eef120000008bd122a819485f553383746656b36f97f6da614612cd039d00000000000000000000bbfe800000000000", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB="90800ffa90780000050e0000000800000002000007ff0000"], 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0xfffffffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x3c}, 0xa, @in6=@remote, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x1001}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 954.245896ms ago: executing program 0 (id=328): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9f00000002000000000000000000000a00"/29], 0x0, 0x26}, 0x28) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 908.214758ms ago: executing program 2 (id=329): semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/141) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x2, 0x440000) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x7, 0x7, 0x26, 0x5, 0x9d4f, 0x40]}, &(0x7f0000000240)=0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0x2}, {0xffff, 0xffff}, {0xb, 0xd}}, [@qdisc_kind_options=@q_multiq={{}, {0x0, 0x2, {0x3, 0x1}}}]}, 0x40}}, 0x810) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x83, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003020000ff2505a1a4400001020301090271000201ab40210904000001020d000005240600010524009c000d240f01d50000000800ff000e06244a0d00001524120700a317a88b045e4f01a607c0ffcb7ea0749ce1392a0905810300040906a90904010000020d0000090401010a020d00000905820210000407070905030208"], 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) 882.693108ms ago: executing program 1 (id=330): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x100000001, 0x81}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x2000, 0x0) fcntl$notify(r0, 0x402, 0x74b36ae850024e60) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x4, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, 0x0}, 0x1a8) getdents64(r1, 0xffffffffffffffff, 0x43) r3 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 773.168941ms ago: executing program 4 (id=331): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xc7ca, 0x40, 0x0, 0x1c1}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000440), 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x7ffffffe) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) epoll_create1(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='disable=00000 size=0x100000 type=write-comb', 0x2b) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$eJzs3MtvG8UfAPDvbpr219cvoZRHH0CgICIeSZMW6IELCKRekJDgUI4hTavStEFNkGgV0RShckT9C4AjEn8BJ7gg4ATiCneEVKFcCBzQorV3U+PYwU7sOsWfj7TxzO6sd77eHXt2xk4AfWsk/5NE7ImInyJiKCIG6guMVB9Wlhen/1henE4iy177Lcl3i9+XF6fLoknxuLvIjKYR6QdJHGpw3PnLV85Pzc7OXCry4wsX3h6fv3zl6XMXps7OnJ25OHnixPFjE889O/lMR+Lcm9f14Htzhw+cfOPGK9Onbrz57ed5ffcU22vjqBre9DFHYmT1Nan32KaffWvZW5NOtvWwIrQlb+v56RqstP+hGIhbJ28oXn6/p5UDuirLsmzHmrWrPYClDPgPS6LXNQB6o/ygz+9/y+U2dj967uYL1RugPO6VYqlu2RZpUWaw7v62k0Yi4tTSnx/nSzQchwAA6Kwv8/7PU436f2ncW1Pu/8Xc0HBE3BUR+yLi7ojYHxH3RFTK3hcR97d5/JG6/Nr+zw87NxRYi/L+3/PF3NY/+39l7y+GB4rc3kr8g8mZc7MzR4vXZDQGd+T5iXWO8dVLP37UbFtt/y9fVgZjuuwLFvX4dVvdAN3pqYWpzcRc6+a1yhjg1bXxJ6szAUlEHIiIgxt4/vx6OffEZ4ebbV8T//JiXfzr6MA8U/ZpxOPV878UdfGXkvXnJ8f/F7MzR8fLq2Kt776//mqz428q/g7Iz/+uhtf/avzDSe187Xz7x7j+84dN72n+Pf7G1//25PVKenux7t2phYVLExHbk6W16ydv7Vvmy/J5/KNHGrf/fRF/fVLsdygi8ov4gYh4MCIeKur+cEQ8EhFH1on/mxcffWvj8XdXHv/pts5/+4mB819/0ez4rZ3/45XUaLGmlfe/Viu4mdcOAAAA7hRp5TvwSTq2mk7TsbHqd/j3x650dm5+4ckzc+9cPF39rvxwDKblSNdQzXjoRDHWV+Yn6/LHKuPGWZZlOyv5sem52W7NqQOt2d2k/ed+Geh17YCua2serdkv2oA7kt9rQv/S/qF/af/Qv7R/6F+N2v/ViJV1d7rWteoAt5HPf+hf2j/0L+0f+pf2D31pM7/rXy+x72Rrhct/QNilatwBiYGtUY22E5FuiWpsLJFujWpUEzsiotXCV29bS+nxGxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECH/B0AAP//tNHo8Q==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000540)={@id={0x2, 0x0, @c}}) removexattr(&(0x7f0000000800)='./file0\x00', &(0x7f0000000880)=@known='system.posix_acl_access\x00') socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @private2, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 586.728895ms ago: executing program 1 (id=332): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x40086610, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xc, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 417.676899ms ago: executing program 1 (id=333): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x80000002, 0xfffffffe, 0x7}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x800}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x4008050) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r2}, 0x4) close(0x3) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 303.013612ms ago: executing program 1 (id=334): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0) mremap(&(0x7f0000a26000/0x5000)=nil, 0x5000, 0x1000, 0x3, &(0x7f0000067000/0x1000)=nil) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) r1 = socket$kcm(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r1, 0x0, 0x60) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffdfffffffffffc, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fcntl$lock(0xffffffffffffffff, 0x410, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x1) 76.688028ms ago: executing program 2 (id=335): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000380)=r6) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 29.975959ms ago: executing program 1 (id=336): writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280), 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x8, 0x4) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xd) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002340)={0x30, r6, 0x1, 0xd3, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x40) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, r9, 0x1, 0x70bd2a, 0x25dfdbfb, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x4004000}, 0x80) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f0000000080)=0x4) ioctl$SIOCSIFHWADDR(r7, 0xc0189436, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_coalesce={0xf, 0x401, 0x6, 0xffffff00, 0x8, 0x7, 0x8, 0x6, 0xa8, 0x7, 0x1, 0x1, 0x1, 0xff0, 0x1, 0xb432, 0x8, 0x3, 0x0, 0x80, 0x1, 0x200, 0x7}}) readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/222, 0xde) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 23.648149ms ago: executing program 3 (id=337): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) pwrite64(r1, &(0x7f0000000140)='27', 0x2, 0xc00) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000001c0)=""/49) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) io_uring_setup(0x6406, &(0x7f0000000240)={0x0, 0xc39f, 0x1000, 0x0, 0x347}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440dc6bb, 0x4, @perf_config_ext={0xb2a5, 0x3ff}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f0000000400)=[{&(0x7f0000000180)='X', 0x1}], 0x1) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000100)=0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {0xffff, 0x8}, {0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0xfffffd60, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xf, 0x10, 0x10, 0x2, 0x2, 0x10001}}, {0x4}}]}]}, 0x58}}, 0x0) r6 = socket(0xa, 0x4, 0x87) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'veth1_macvtap\x00', 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x1e0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x23, "bd6c6791d59eb8073df96e8c387f9a39ad157b35ec9c6df6a9a118ca69a0"}}}, {{@ipv6={@remote, @private2={0xfc, 0x2, '\x00', 0x2}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5}, 0x0, 0x1d0, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@l2tp={{0x30}, {0x0, 0x4, 0x2, 0x0, 0x5}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01080000000000000000050000000900010073797a30000000000900030073797a310000000054000000060a010400000000000000000500000008000b40000000002c0004802800018008000100667764001c0002800800034000000002080001400000008d080002400000000d0900010073797a30"], 0xc8}}, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000fcdbdf25170000005c00068014000300322d73352e3a000000000000004363844400040067636d00616573290000000000000000000000000000000000000000000000001c0000009ea2d328893918672a5ca222a631017cc0f4457113a8"], 0x70}, 0x1, 0x0, 0x0, 0x806}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private2, 0x206e, r7}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) 0s ago: executing program 0 (id=338): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x4, 0x1946}, 0x0, 0x10000, 0x4, 0x8, 0x58, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa9902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc, 0x9ca3}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x71, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = socket$kcm(0x11, 0x3, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x8907, 0x0) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0x5, &(0x7f0000001e80)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x9666888f3631c53c, 0x48, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8711b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000300)}, 0x828, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x38}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb269}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x2001c885) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8000b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x2}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts. [ 28.041017][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 28.041034][ T28] audit: type=1400 audit(1786088349.519:126): avc: denied { mounton } for pid=3282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.070756][ T28] audit: type=1400 audit(1786088349.549:127): avc: denied { mount } for pid=3282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.071451][ T3282] cgroup: Unknown subsys name 'net' [ 28.098776][ T28] audit: type=1400 audit(1786088349.579:128): avc: denied { unmount } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.195714][ T3282] cgroup: Unknown subsys name 'cpuset' [ 28.202220][ T3282] cgroup: Unknown subsys name 'rlimit' [ 28.321241][ T28] audit: type=1400 audit(1786088349.799:129): avc: denied { setattr } for pid=3282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.345301][ T28] audit: type=1400 audit(1786088349.799:130): avc: denied { create } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.366419][ T28] audit: type=1400 audit(1786088349.799:131): avc: denied { write } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.387394][ T28] audit: type=1400 audit(1786088349.799:132): avc: denied { read } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.408672][ T28] audit: type=1400 audit(1786088349.799:133): avc: denied { mounton } for pid=3282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.434745][ T28] audit: type=1400 audit(1786088349.799:134): avc: denied { mount } for pid=3282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.441209][ T3286] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.458407][ T28] audit: type=1400 audit(1786088349.829:135): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.507419][ T3282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.783588][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.791021][ T3292] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.798236][ T3292] bridge_slave_0: entered allmulticast mode [ 29.804890][ T3292] bridge_slave_0: entered promiscuous mode [ 29.822556][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.829728][ T3292] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.836934][ T3292] bridge_slave_1: entered allmulticast mode [ 29.843499][ T3292] bridge_slave_1: entered promiscuous mode [ 29.899156][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.906612][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.913856][ T3299] bridge_slave_0: entered allmulticast mode [ 29.920345][ T3299] bridge_slave_0: entered promiscuous mode [ 29.927927][ T3292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.943341][ T3293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.950530][ T3293] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.957786][ T3293] bridge_slave_0: entered allmulticast mode [ 29.964157][ T3293] bridge_slave_0: entered promiscuous mode [ 29.971252][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.978573][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.985733][ T3299] bridge_slave_1: entered allmulticast mode [ 29.992141][ T3299] bridge_slave_1: entered promiscuous mode [ 29.999240][ T3292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.014935][ T3293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.022233][ T3293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.029778][ T3293] bridge_slave_1: entered allmulticast mode [ 30.036319][ T3293] bridge_slave_1: entered promiscuous mode [ 30.054602][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.062065][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.069453][ T3298] bridge_slave_0: entered allmulticast mode [ 30.075886][ T3298] bridge_slave_0: entered promiscuous mode [ 30.097541][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.104687][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.111907][ T3298] bridge_slave_1: entered allmulticast mode [ 30.118542][ T3298] bridge_slave_1: entered promiscuous mode [ 30.129999][ T3293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.140368][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.150589][ T3292] team0: Port device team_slave_0 added [ 30.164967][ T3293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.175301][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.185632][ T3292] team0: Port device team_slave_1 added [ 30.196159][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.203387][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.211285][ T3297] bridge_slave_0: entered allmulticast mode [ 30.217851][ T3297] bridge_slave_0: entered promiscuous mode [ 30.237415][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.248422][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.258355][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.265710][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.272908][ T3297] bridge_slave_1: entered allmulticast mode [ 30.279532][ T3297] bridge_slave_1: entered promiscuous mode [ 30.311209][ T3293] team0: Port device team_slave_0 added [ 30.317725][ T3299] team0: Port device team_slave_0 added [ 30.323681][ T3292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.331035][ T3292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.357701][ T3292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.369401][ T3298] team0: Port device team_slave_0 added [ 30.379956][ T3293] team0: Port device team_slave_1 added [ 30.390666][ T3299] team0: Port device team_slave_1 added [ 30.396903][ T3292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.403973][ T3292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.430606][ T3292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.442554][ T3298] team0: Port device team_slave_1 added [ 30.449831][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.480812][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.491646][ T3293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.498941][ T3293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.525996][ T3293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.537667][ T3293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.544826][ T3293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.571138][ T3293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.585287][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.592425][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.618581][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.644473][ T3297] team0: Port device team_slave_0 added [ 30.650545][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.657710][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.683997][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.695072][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.702043][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.728492][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.749731][ T3297] team0: Port device team_slave_1 added [ 30.766411][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.773411][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.799632][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.817395][ T3292] hsr_slave_0: entered promiscuous mode [ 30.823642][ T3292] hsr_slave_1: entered promiscuous mode [ 30.840417][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.847504][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.873690][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.891650][ T3293] hsr_slave_0: entered promiscuous mode [ 30.897771][ T3293] hsr_slave_1: entered promiscuous mode [ 30.903718][ T3293] debugfs: 'hsr0' already exists in 'hsr' [ 30.909697][ T3293] Cannot create hsr debugfs directory [ 30.927232][ T3299] hsr_slave_0: entered promiscuous mode [ 30.933181][ T3299] hsr_slave_1: entered promiscuous mode [ 30.939117][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 30.945066][ T3299] Cannot create hsr debugfs directory [ 30.950933][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.958403][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.984649][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.021342][ T3298] hsr_slave_0: entered promiscuous mode [ 31.027825][ T3298] hsr_slave_1: entered promiscuous mode [ 31.033804][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 31.039574][ T3298] Cannot create hsr debugfs directory [ 31.083007][ T3297] hsr_slave_0: entered promiscuous mode [ 31.089063][ T3297] hsr_slave_1: entered promiscuous mode [ 31.095014][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 31.100871][ T3297] Cannot create hsr debugfs directory [ 31.271772][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.280572][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.288330][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.297193][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.305020][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.313778][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.321797][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.330488][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.354574][ T3292] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.364125][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.371891][ T3292] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.380895][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.395508][ T3292] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.404310][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.414850][ T3292] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.423833][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.441764][ T3293] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.450605][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.458494][ T3293] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.467234][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.475101][ T3293] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.483804][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.499320][ T3293] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.507989][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.532212][ T3298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.540945][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.560524][ T3298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.569272][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.577343][ T3298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.586531][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.595087][ T3298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.603562][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.627435][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.636166][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.644006][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.652826][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.661486][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.670595][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.683216][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.692187][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.701466][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.736384][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.754811][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.762082][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.785223][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.792466][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.809609][ T3292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.836532][ T3293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.858256][ T3292] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.868879][ T3293] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.886582][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.893822][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.903242][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.910830][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.922464][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.929791][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.938853][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.949373][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.956532][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.967330][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.991127][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.001578][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.010414][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.017591][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.035973][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.043167][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.053545][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.060743][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.083359][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.090506][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.122794][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.231869][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.339604][ T3292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.393019][ T3293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.410995][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.428210][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.462717][ T3299] veth0_vlan: entered promiscuous mode [ 32.491705][ T3299] veth1_vlan: entered promiscuous mode [ 32.531970][ T3299] veth0_macvtap: entered promiscuous mode [ 32.552189][ T3299] veth1_macvtap: entered promiscuous mode [ 32.574727][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.587002][ T3292] veth0_vlan: entered promiscuous mode [ 32.606711][ T3292] veth1_vlan: entered promiscuous mode [ 32.614971][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.639606][ T3297] veth0_vlan: entered promiscuous mode [ 32.654188][ T3293] veth0_vlan: entered promiscuous mode [ 32.664976][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.674306][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.691179][ T3297] veth1_vlan: entered promiscuous mode [ 32.701337][ T3293] veth1_vlan: entered promiscuous mode [ 32.715161][ T77] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.725160][ T77] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.739793][ T3292] veth0_macvtap: entered promiscuous mode [ 32.748139][ T3292] veth1_macvtap: entered promiscuous mode [ 32.750365][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.762273][ T3293] veth0_macvtap: entered promiscuous mode [ 32.787835][ T3298] veth0_vlan: entered promiscuous mode [ 32.797394][ T3293] veth1_macvtap: entered promiscuous mode [ 32.815336][ T3298] veth1_vlan: entered promiscuous mode [ 32.830622][ T3297] veth0_macvtap: entered promiscuous mode [ 32.838976][ T3297] veth1_macvtap: entered promiscuous mode [ 32.855467][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.864175][ T3292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.879990][ T3293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.890793][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.905769][ T3293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.917502][ T3298] veth0_macvtap: entered promiscuous mode [ 32.929918][ T3292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.945189][ T3298] veth1_macvtap: entered promiscuous mode [ 32.974326][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.999739][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.014989][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.028551][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.044826][ T378] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.061278][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 33.061299][ T28] audit: type=1400 audit(1786088354.539:160): avc: denied { create } for pid=3498 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.112914][ T28] audit: type=1400 audit(1786088354.559:161): avc: denied { getopt } for pid=3498 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.140071][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.151805][ T28] audit: type=1400 audit(1786088354.639:162): avc: denied { open } for pid=3502 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.180645][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.219483][ T3506] loop1: detected capacity change from 0 to 4096 [ 33.232308][ T28] audit: type=1400 audit(1786088354.639:163): avc: denied { perfmon } for pid=3502 comm="syz.3.4" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.243482][ T3509] program syz.2.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.267810][ T77] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.280322][ T77] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.290041][ T3506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.311949][ T28] audit: type=1400 audit(1786088354.639:164): avc: denied { kernel } for pid=3502 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.331780][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.333252][ T28] audit: type=1400 audit(1786088354.679:165): avc: denied { create } for pid=3508 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 33.362350][ T28] audit: type=1400 audit(1786088354.689:166): avc: denied { write } for pid=3508 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 33.380658][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.382174][ T28] audit: type=1400 audit(1786088354.699:167): avc: denied { create } for pid=3508 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.410813][ T28] audit: type=1400 audit(1786088354.699:168): avc: denied { bind } for pid=3508 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.431641][ T28] audit: type=1400 audit(1786088354.709:169): avc: denied { prog_load } for pid=3508 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.455218][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.466891][ T3517] loop0: detected capacity change from 0 to 1024 [ 33.482774][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.499569][ T3517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.515327][ T77] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.552737][ T77] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.614785][ T77] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.701290][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.710828][ T3523] sit0: entered promiscuous mode [ 33.720472][ T3523] sit0: entered allmulticast mode [ 33.756569][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.814729][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.983114][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.124063][ T3534] loop3: detected capacity change from 0 to 2048 [ 34.241805][ T3534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.456910][ T3536] loop0: detected capacity change from 0 to 512 [ 34.628355][ T3536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.690690][ T3536] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.713885][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.471141][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.641355][ T3566] syzkaller0: entered promiscuous mode [ 35.670951][ T3566] syzkaller0: entered allmulticast mode [ 35.732044][ T3571] loop3: detected capacity change from 0 to 512 [ 35.741476][ T3571] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.19: Directory hole found for htree index block 0 [ 35.756194][ T3571] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 35.756326][ T3571] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 35.765427][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 35.765451][ C0] EXT4-fs (loop3): initial error at time 1786088357: dx_probe:791: inode 2 [ 35.765477][ C0] EXT4-fs (loop3): last error at time 1786088357: dx_probe:791: inode 2 [ 35.800406][ T3571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.805089][ T3569] syzkaller0: entered promiscuous mode [ 35.871242][ T3569] syzkaller0: entered allmulticast mode [ 36.110234][ T3578] syz_tun: entered allmulticast mode [ 36.183965][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.258832][ T3589] Zero length message leads to an empty skb [ 36.523100][ T3597] tipc: Enabling of bearer rejected, failed to enable media [ 37.435906][ T3622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 37.894376][ T3609] syz.4.28 (3609) used greatest stack depth: 10368 bytes left [ 37.943987][ T3628] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 38.144446][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 38.144472][ T28] audit: type=1400 audit(1786088359.619:239): avc: denied { write } for pid=3634 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.209474][ T3636] can: request_module (can-proto-5) failed. [ 38.326740][ T3642] loop0: detected capacity change from 0 to 256 [ 38.337332][ T28] audit: type=1400 audit(1786088359.819:240): avc: denied { mount } for pid=3641 comm="syz.0.35" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.885859][ T3645] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 38.933775][ T3645] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 39.456063][ T3645] syz.0.35 (3645) used greatest stack depth: 9792 bytes left [ 39.468084][ T28] audit: type=1400 audit(1786088360.329:241): avc: denied { create } for pid=3641 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 39.489340][ T28] audit: type=1400 audit(1786088360.339:242): avc: denied { write } for pid=3641 comm="syz.0.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 39.665747][ T3648] syzkaller0: entered promiscuous mode [ 39.707968][ T3648] syzkaller0: entered allmulticast mode [ 39.902149][ T28] audit: type=1400 audit(1786088361.379:243): avc: denied { create } for pid=3654 comm="syz.4.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 40.036742][ T28] audit: type=1400 audit(1786088361.409:244): avc: denied { ioctl } for pid=3654 comm="syz.4.38" path="socket:[4781]" dev="sockfs" ino=4781 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 40.248605][ T28] audit: type=1400 audit(1786088361.409:245): avc: denied { bind } for pid=3654 comm="syz.4.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 40.269190][ T28] audit: type=1400 audit(1786088361.409:246): avc: denied { listen } for pid=3654 comm="syz.4.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 40.557428][ T28] audit: type=1400 audit(1786088361.689:247): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 40.578207][ T28] audit: type=1400 audit(1786088361.719:248): avc: denied { create } for pid=3649 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 41.313729][ T3683] loop3: detected capacity change from 0 to 128 [ 41.324405][ T3681] loop0: detected capacity change from 0 to 1024 [ 41.344109][ T3681] EXT4-fs: Ignoring removed bh option [ 41.396206][ T3681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.422519][ T3690] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 41.519300][ T3690] FAT-fs (loop3): Filesystem has been set read-only [ 41.602408][ T3697] syzkaller0: entered promiscuous mode [ 41.626132][ T3697] syzkaller0: entered allmulticast mode [ 41.658088][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 41.672269][ T3697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 41.793938][ T3719] loop4: detected capacity change from 0 to 1024 [ 41.828558][ T3719] loop4: detected capacity change from 0 to 512 [ 42.866585][ T3732] loop2: detected capacity change from 0 to 1024 [ 42.896200][ T3732] EXT4-fs: Ignoring removed orlov option [ 42.947898][ T3732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.167370][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 43.167386][ T28] audit: type=1400 audit(1786088364.649:280): avc: denied { write } for pid=3677 comm="syz.0.42" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.254043][ T28] audit: type=1400 audit(1786088364.649:281): avc: denied { remove_name } for pid=3677 comm="syz.0.42" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.340807][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.362168][ T28] audit: type=1400 audit(1786088364.649:282): avc: denied { rmdir } for pid=3677 comm="syz.0.42" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 43.405346][ T3738] loop4: detected capacity change from 0 to 256 [ 43.419895][ T28] audit: type=1400 audit(1786088364.779:283): avc: denied { create } for pid=3736 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.540297][ T28] audit: type=1400 audit(1786088364.879:284): avc: denied { write } for pid=3739 comm="syz.1.51" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 43.574305][ T3738] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.591596][ T28] audit: type=1400 audit(1786088364.879:285): avc: denied { ioctl } for pid=3739 comm="syz.1.51" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 43.762691][ T28] audit: type=1400 audit(1786088365.109:286): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 43.816251][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.271472][ T3755] loop3: detected capacity change from 0 to 1024 [ 44.307566][ T3755] EXT4-fs: Ignoring removed bh option [ 44.363814][ T3755] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 44.417348][ T3754] loop2: detected capacity change from 0 to 2048 [ 44.425282][ T3755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.599625][ T3754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.650057][ T3754] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.683995][ T3766] syzkaller0: entered promiscuous mode [ 44.716498][ T3766] syzkaller0: entered allmulticast mode [ 44.734445][ T28] audit: type=1400 audit(1786088366.199:287): avc: denied { setattr } for pid=3753 comm="syz.2.57" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.919691][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.927046][ T3749] loop0: detected capacity change from 0 to 1024 [ 45.119721][ T28] audit: type=1400 audit(1786088366.599:288): avc: denied { bind } for pid=3773 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 45.192298][ T28] audit: type=1400 audit(1786088366.639:289): avc: denied { listen } for pid=3773 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 45.310780][ T3777] mmap: syz.3.61 (3777) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.381115][ T3749] ======================================================= [ 45.381115][ T3749] WARNING: The mand mount option has been deprecated and [ 45.381115][ T3749] and is ignored by this kernel. Remove the mand [ 45.381115][ T3749] option from the mount to silence this warning. [ 45.381115][ T3749] ======================================================= [ 45.680829][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.747551][ T3787] syz.2.64 uses obsolete (PF_INET,SOCK_PACKET) [ 45.797575][ T3749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.851878][ T3749] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.018073][ T3779] loop1: detected capacity change from 0 to 512 [ 46.052884][ T3779] EXT4-fs: Ignoring removed nobh option [ 46.094931][ T3779] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 46.118973][ T3779] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.63: invalid indirect mapped block 256 (level 1) [ 46.119342][ T3779] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 46.123066][ T3779] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.63: invalid indirect mapped block 2683928664 (level 1) [ 46.123412][ T3779] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 46.136034][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 46.136375][ C1] EXT4-fs (loop1): initial error at time 1786088367: ext4_free_branches:1023: inode 13 [ 46.137724][ C1] EXT4-fs (loop1): last error at time 1786088367: ext4_free_branches:1023: inode 13 [ 46.151860][ T3779] EXT4-fs (loop1): 1 truncate cleaned up [ 46.190255][ T3779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.626848][ T3795] loop3: detected capacity change from 0 to 2048 [ 46.635719][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.712097][ T3798] loop2: detected capacity change from 0 to 1024 [ 46.864581][ T3803] loop4: detected capacity change from 0 to 256 [ 47.353835][ T3800] loop1: detected capacity change from 0 to 164 [ 47.690814][ T3803] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.808762][ T3795] loop3: p2 p3 p7 [ 47.814661][ T3790] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 47.837114][ T3790] FAT-fs (loop4): Filesystem has been set read-only [ 48.232603][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.260654][ T3798] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 48.260654][ T3798] [ 48.280378][ T3807] udevd[3807]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 48.298842][ T3806] udevd[3806]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 48.423947][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 48.423979][ T28] audit: type=1400 audit(1786088369.899:299): avc: denied { write } for pid=3810 comm="syz.0.69" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.546935][ T3795] loop3: detected capacity change from 0 to 128 [ 48.563706][ T28] audit: type=1400 audit(1786088370.039:300): avc: denied { create } for pid=3794 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 48.589312][ T3395] Process accounting resumed [ 48.676476][ T3817] loop3: detected capacity change from 0 to 1024 [ 48.716425][ T3798] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 48.767781][ T28] audit: type=1400 audit(1786088370.249:302): avc: denied { create } for pid=3796 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.819318][ T28] audit: type=1400 audit(1786088370.279:303): avc: denied { module_request } for pid=3818 comm="syz.4.71" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.868902][ T3824] loop4: detected capacity change from 0 to 2048 [ 48.892585][ T28] audit: type=1400 audit(1786088370.199:301): avc: denied { mount } for pid=3799 comm="syz.1.68" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 48.944071][ T3824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.052907][ T3831] netlink: 'syz.0.72': attribute type 1 has an invalid length. [ 49.060885][ T3831] netlink: 59060 bytes leftover after parsing attributes in process `syz.0.72'. [ 49.107730][ T3831] loop0: detected capacity change from 0 to 512 [ 49.115686][ T28] audit: type=1400 audit(1786088370.599:304): avc: denied { mounton } for pid=3826 comm="syz.0.72" path="/12/file0" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 49.156659][ T3831] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.287488][ T3831] EXT4-fs (loop0): orphan cleanup on readonly fs [ 49.302994][ T3831] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.72: Allocating blocks 41-42 which overlap fs metadata [ 49.317473][ T3831] loop0: lost filesystem error report for type 5 error -117 [ 49.331305][ T3831] Quota error (device loop0): write_blk: dquota write failed [ 49.338960][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 49.339000][ C1] EXT4-fs (loop0): initial error at time 1786088370: ext4_mb_mark_diskspace_used:4222 [ 49.339071][ C1] EXT4-fs (loop0): last error at time 1786088370: ext4_mb_mark_diskspace_used:4222 [ 49.373743][ T3831] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 49.384180][ T3831] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.72: Failed to acquire dquot type 0 [ 49.395477][ T3831] loop0: lost filesystem error report for type 5 error -117 [ 49.398660][ T3831] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 49.421241][ T3831] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #12: comm syz.0.72: corrupted inode contents [ 49.433457][ T3831] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 49.443857][ T3831] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #12: comm syz.0.72: mark_inode_dirty error [ 49.465552][ T3831] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 49.466405][ T3831] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #12: comm syz.0.72: corrupted inode contents [ 49.488880][ T3831] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 49.489503][ T3831] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #12: comm syz.0.72: mark_inode_dirty error [ 49.510209][ T3831] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 49.511566][ T3831] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #12: comm syz.0.72: corrupted inode contents [ 49.532941][ T3831] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 49.533494][ T3831] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 49.551962][ T3831] loop0: lost filesystem error report for type 5 error -117 [ 49.554753][ T3831] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #12: comm syz.0.72: corrupted inode contents [ 49.574353][ T3831] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 49.575833][ T3831] EXT4-fs error (device loop0): ext4_truncate:4691: inode #12: comm syz.0.72: mark_inode_dirty error [ 49.596426][ T3831] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 49.597227][ T3831] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 49.615762][ T3831] loop0: lost filesystem error report for type 5 error -117 [ 49.617237][ T3831] EXT4-fs (loop0): 1 truncate cleaned up [ 49.670064][ T28] audit: type=1400 audit(1786088370.629:305): avc: denied { write } for pid=3818 comm="syz.4.71" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.797361][ T28] audit: type=1400 audit(1786088371.169:306): avc: denied { write } for pid=3818 comm="syz.4.71" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.797627][ T3831] EXT4-fs (loop0): pa ffff888107618f50: logic 1, phys. 41, len 23 [ 49.827275][ T3831] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 49.838823][ T3831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.852733][ T3831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.885678][ T3821] netlink: 'syz.4.71': attribute type 1 has an invalid length. [ 49.893344][ T3821] netlink: 224 bytes leftover after parsing attributes in process `syz.4.71'. [ 49.996482][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.209116][ T3831] syz.0.72 (3831) used greatest stack depth: 9728 bytes left [ 50.460444][ T3852] loop0: detected capacity change from 0 to 512 [ 50.494545][ T3852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.543255][ T3852] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.121207][ T3850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.77'. [ 51.193699][ T3844] loop4: detected capacity change from 0 to 764 [ 51.210261][ T3861] loop3: detected capacity change from 0 to 512 [ 51.257835][ T3861] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.79: Directory hole found for htree index block 0 [ 51.341788][ T3861] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 51.342474][ T3861] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 51.352582][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 51.352600][ C0] EXT4-fs (loop3): initial error at time 1786088372: dx_probe:791: inode 2 [ 51.352630][ C0] EXT4-fs (loop3): last error at time 1786088372: dx_probe:791: inode 2 [ 51.433861][ T3865] loop2: detected capacity change from 0 to 1024 [ 51.785181][ T3861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.880225][ T3868] syz.2.81 (3868): attempted to duplicate a private mapping with mremap. This is not supported. [ 51.939296][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.948848][ T3868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 51.981851][ T3868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 52.095695][ T3855] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 52.649010][ T3889] loop0: detected capacity change from 0 to 8192 [ 52.656543][ T3889] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.747598][ T3885] xt_CT: No such helper "netbios-ns" [ 52.911704][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.071523][ T3888] loop1: detected capacity change from 0 to 512 [ 53.212904][ T3892] netlink: 68 bytes leftover after parsing attributes in process `syz.3.86'. [ 53.322883][ T3888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.341122][ T3888] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.431233][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 53.431251][ T28] audit: type=1326 audit(1786088374.899:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.1.85" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa51129e0d9 code=0x7ffc0000 [ 53.436396][ T3895] syz.4.88 (3895) used greatest stack depth: 9480 bytes left [ 53.445613][ T28] audit: type=1326 audit(1786088374.919:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.1.85" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51129e0d9 code=0x7ffc0000 [ 53.515312][ T28] audit: type=1326 audit(1786088374.949:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.1.85" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51129e0d9 code=0x7ffc0000 [ 53.558259][ T28] audit: type=1326 audit(1786088374.949:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.1.85" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51129e0d9 code=0x7ffc0000 [ 53.590934][ T28] audit: type=1326 audit(1786088374.979:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.1.85" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa51129e0d9 code=0x7ffc0000 [ 53.614407][ T3908] loop0: detected capacity change from 0 to 2048 [ 53.619555][ T28] audit: type=1400 audit(1786088374.979:336): avc: denied { write } for pid=3887 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.662562][ T28] audit: type=1400 audit(1786088374.979:337): avc: denied { nlmsg_write } for pid=3887 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.665278][ T3908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.691097][ T28] audit: type=1326 audit(1786088374.979:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.1.85" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51129e0d9 code=0x7ffc0000 [ 53.721245][ T28] audit: type=1326 audit(1786088374.979:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.1.85" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51129e0d9 code=0x7ffc0000 [ 53.752215][ T28] audit: type=1326 audit(1786088374.999:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3887 comm="syz.1.85" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51129e0d9 code=0x7ffc0000 [ 53.843167][ T3892] loop3: detected capacity change from 0 to 512 [ 53.986992][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.989859][ T3892] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.3.86: corrupted xattr block 95: invalid header [ 53.998842][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.006990][ T3921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.92'. [ 54.016140][ T3892] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.044628][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 54.060538][ C0] EXT4-fs (loop3): initial error at time 1786088375: ext4_expand_extra_isize_ea:2810: inode 11 [ 54.071043][ C0] EXT4-fs (loop3): last error at time 1786088375: ext4_expand_extra_isize_ea:2810: inode 11 [ 54.085094][ T3892] EXT4-fs (loop3): Remounting filesystem read-only [ 54.117468][ T3892] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 54.149111][ T3925] UDC core: g1: couldn't find an available UDC or it's busy [ 54.170259][ T3892] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 54.257775][ T3892] EXT4-fs (loop3): 1 orphan inode deleted [ 54.311302][ T3927] loop2: detected capacity change from 0 to 512 [ 54.329527][ T3927] EXT4-fs: Mount option(s) incompatible with ext2 [ 54.362770][ T3932] syzkaller0: entered promiscuous mode [ 54.384289][ T3932] syzkaller0: entered allmulticast mode [ 54.429796][ T3934] netlink: 'syz.0.98': attribute type 13 has an invalid length. [ 54.447230][ T3892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.465385][ T3934] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 55.186622][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.354960][ T3951] netlink: 84 bytes leftover after parsing attributes in process `syz.3.102'. [ 56.018810][ T35] IPVS: starting estimator thread 0... [ 56.134683][ T3979] IPVS: using max 2256 ests per chain, 112800 per kthread [ 56.403640][ T3988] netlink: 32 bytes leftover after parsing attributes in process `syz.2.115'. [ 56.588731][ T3994] syzkaller0: entered promiscuous mode [ 56.594319][ T3994] syzkaller0: entered allmulticast mode [ 56.626493][ T3994] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 57.729893][ T4004] loop0: detected capacity change from 0 to 512 [ 57.753579][ T4018] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 57.921864][ T3991] loop3: detected capacity change from 0 to 512 [ 58.073731][ T4020] program syz.2.125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.156640][ T4022] loop2: detected capacity change from 0 to 764 [ 58.324197][ T3991] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 58.674708][ T4014] loop4: detected capacity change from 0 to 1024 [ 58.957641][ T4004] ------------[ cut here ]------------ [ 58.965483][ T4004] EA inode 11 i_nlink=2 [ 58.965500][ T4004] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#1: syz.0.121/4004 [ 58.985957][ T4004] Modules linked in: [ 58.991872][ T4004] CPU: 1 UID: 0 PID: 4004 Comm: syz.0.121 Not tainted syzkaller #0 PREEMPT(lazy) [ 59.003694][ T4004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.018261][ T4004] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 59.028054][ T4004] Code: 16 b4 96 ff 49 8d 7e 40 4c 8d 2d eb 93 5a 05 e8 16 9a b5 ff 49 8b 6e 40 4c 89 e7 e8 4a 95 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 41 7b da 03 90 90 90 90 90 90 90 [ 59.049973][ T4004] RSP: 0018:ffffc900104bb7f8 EFLAGS: 00010246 [ 59.057503][ T4004] RAX: ffff8881049e3ef0 RBX: ffff8881075d05a8 RCX: ffffffff81c2a466 [ 59.071054][ T4004] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3840 [ 59.080963][ T4004] RBP: 000000000000000b R08: 00018881075d055b R09: 0000000000000000 [ 59.091554][ T4004] R10: 0000000000000406 R11: 0000000000000002 R12: ffff8881075d0558 [ 59.101022][ T4004] R13: ffffffff871d3840 R14: ffff8881075d0510 R15: 0000000000000001 [ 59.112278][ T4004] FS: 00007f6f517d76c0(0000) GS:ffff8882ae9c8000(0000) knlGS:0000000000000000 [ 59.128274][ T4004] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.137525][ T4004] CR2: 00007fa511527dac CR3: 000000011cdb0000 CR4: 00000000003506f0 [ 59.149034][ T4004] Call Trace: [ 59.156554][ T4004] [ 59.162560][ T4004] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 59.173731][ T4004] ext4_xattr_delete_inode+0x6b5/0x790 [ 59.190073][ T4004] ext4_evict_inode+0xb18/0xdf0 [ 59.199071][ T4004] ? __pfx_ext4_evict_inode+0x10/0x10 [ 59.205402][ T4004] evict+0x2a5/0x510 [ 59.212333][ T4004] iput+0x430/0x5a0 [ 59.220032][ T4004] ext4_process_orphan+0x1a4/0x1c0 [ 59.227552][ T4004] ext4_orphan_cleanup+0x6a6/0xa10 [ 59.236424][ T4004] ext4_fill_super+0x33ab/0x3760 [ 59.244484][ T4004] ? __tsan_read8+0x1d/0x190 [ 59.250265][ T4004] ? set_blocksize+0x14c/0x270 [ 59.259143][ T4004] ? __pfx_ext4_fill_super+0x10/0x10 [ 59.268165][ T4004] get_tree_bdev_flags+0x291/0x300 [ 59.276722][ T4004] ? __pfx_ext4_fill_super+0x10/0x10 [ 59.285268][ T4004] get_tree_bdev+0x1f/0x30 [ 59.290430][ T4014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.291492][ T4004] ext4_get_tree+0x1c/0x30 [ 59.293103][ T4004] vfs_get_tree+0x57/0x1d0 [ 59.293188][ T4004] do_new_mount+0x288/0x8d0 [ 59.293414][ T4004] path_mount+0x4ad/0xb90 [ 59.294595][ T4004] __se_sys_mount+0x28c/0x2e0 [ 59.308493][ T4004] __x64_sys_mount+0x67/0x80 [ 59.308771][ T4004] x64_sys_call+0x2d61/0x3020 [ 59.309764][ T4004] do_syscall_64+0x136/0x3c0 [ 59.309954][ T4004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.310183][ T4004] RIP: 0033:0x7f6f52d7f34a [ 59.310383][ T4004] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.310703][ T4004] RSP: 002b:00007f6f517d6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.311223][ T4004] RAX: ffffffffffffffda RBX: 00007f6f517d6ee0 RCX: 00007f6f52d7f34a [ 59.311433][ T4004] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f6f517d6ea0 [ 59.311554][ T4004] RBP: 00002000000009c0 R08: 00007f6f517d6ee0 R09: 0000000000800718 [ 59.311584][ T4004] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 59.311668][ T4004] R13: 00007f6f517d6ea0 R14: 000000000000048d R15: 0000200000000200 [ 59.312733][ T4004] [ 59.312784][ T4004] ---[ end trace 0000000000000000 ]--- [ 59.315889][ T3991] EXT4-fs (loop3): 1 orphan inode deleted [ 59.344083][ T4004] EXT4-fs (loop0): 1 orphan inode deleted [ 59.394582][ T3991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.412861][ T3991] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.459576][ T4004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.559162][ T28] kauditd_printk_skb: 231 callbacks suppressed [ 59.559181][ T28] audit: type=1400 audit(1786088381.029:572): avc: denied { read write } for pid=4003 comm="syz.0.121" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.569187][ T28] audit: type=1400 audit(1786088381.039:573): avc: denied { open } for pid=4003 comm="syz.0.121" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 60.143331][ T3355] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 60.203997][ T378] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 60.291044][ T378] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 1 [ 60.296149][ T4034] fido_id[4034]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 60.330444][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.342038][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.398279][ T28] audit: type=1400 audit(1786088381.879:574): avc: denied { write } for pid=4035 comm="syz.2.129" name="functions" dev="configfs" ino=6225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.473268][ T28] audit: type=1400 audit(1786088381.889:575): avc: denied { write } for pid=4013 comm="syz.4.123" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.569471][ T28] audit: type=1400 audit(1786088382.049:576): avc: denied { create } for pid=4040 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.631107][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.737142][ T4049] Cannot find add_set index 0 as target [ 60.778960][ T28] audit: type=1400 audit(1786088382.259:577): avc: denied { write } for pid=4035 comm="syz.2.129" name="c.1" dev="configfs" ino=6234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.830581][ T4051] loop0: detected capacity change from 0 to 128 [ 60.947179][ T28] audit: type=1400 audit(1786088382.289:578): avc: denied { write } for pid=4035 comm="syz.2.129" name="c.1" dev="configfs" ino=6234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.018318][ T4051] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.118240][ T4051] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.157047][ T28] audit: type=1400 audit(1786088382.289:579): avc: denied { ioctl } for pid=4045 comm="syz.0.130" path="socket:[5921]" dev="sockfs" ino=5921 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 61.182691][ T4043] UDC core: g1: couldn't find an available UDC or it's busy [ 61.198446][ T4043] loop2: detected capacity change from 0 to 512 [ 61.216800][ T28] audit: type=1400 audit(1786088382.299:580): avc: denied { ioctl } for pid=4045 comm="syz.0.130" path="socket:[5922]" dev="sockfs" ino=5922 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 61.241825][ T4043] EXT4-fs: Ignoring removed nobh option [ 61.247610][ T4043] EXT4-fs: Ignoring removed nobh option [ 61.267807][ T4043] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 61.323417][ T4043] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 61.347696][ T4043] System zones: 1-12 [ 61.362737][ T4043] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.384116][ T4043] EXT4-fs error (device loop2): __ext4_iget:5533: inode #11: block 1042: comm syz.2.129: invalid block [ 61.444731][ T4043] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 61.444961][ T4043] EXT4-fs (loop2): Remounting filesystem read-only [ 61.460976][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 61.461004][ C1] EXT4-fs (loop2): initial error at time 1786088382: __ext4_iget:5533: inode 11: block 1042 [ 61.461041][ C1] EXT4-fs (loop2): last error at time 1786088382: __ext4_iget:5533: inode 11: block 1042 [ 61.591196][ T4043] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 62.193207][ T4063] syz.4.135 (4063) used greatest stack depth: 9088 bytes left [ 62.220529][ T4069] loop4: detected capacity change from 0 to 512 [ 62.231490][ T4069] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.242151][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 62.252132][ T3292] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.270724][ T4069] EXT4-fs (loop4): 1 truncate cleaned up [ 62.282856][ T4069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.678780][ T4079] loop0: detected capacity change from 0 to 512 [ 62.844036][ T4079] EXT4-fs: Ignoring removed bh option [ 62.854488][ T4079] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 62.867324][ T4079] EXT4-fs (loop0): 1 truncate cleaned up [ 62.873608][ T4082] loop3: detected capacity change from 0 to 128 [ 62.883089][ T4079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.908168][ T4082] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.982713][ T4082] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 62.988936][ T4073] loop1: detected capacity change from 0 to 128 [ 63.256925][ T4074] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.134'. [ 63.336543][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.347101][ T3293] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.392984][ T4079] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.565523][ T4091] syzkaller0: entered promiscuous mode [ 63.571310][ T4091] syzkaller0: entered allmulticast mode [ 63.900755][ T4097] loop3: detected capacity change from 0 to 512 [ 63.926152][ T4097] EXT4-fs: Ignoring removed nobh option [ 64.000695][ T4096] loop2: detected capacity change from 0 to 4096 [ 64.232085][ T4097] EXT4-fs (loop3): 1 orphan inode deleted [ 64.279072][ T4097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.327356][ T4096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.588243][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.639014][ T4073] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.803868][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.834061][ T4073] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.854423][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.982702][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.165164][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 66.165182][ T28] audit: type=1400 audit(1786088387.589:592): avc: denied { allowed } for pid=4105 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.229859][ T4106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.146'. [ 66.257364][ T28] audit: type=1400 audit(1786088387.609:593): avc: denied { sqpoll } for pid=4105 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.302361][ T28] audit: type=1400 audit(1786088387.619:594): avc: denied { read } for pid=4121 comm="syz.3.153" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.386639][ T28] audit: type=1400 audit(1786088387.619:595): avc: denied { open } for pid=4121 comm="syz.3.153" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.410546][ T28] audit: type=1400 audit(1786088387.639:596): avc: denied { write } for pid=4119 comm="syz.1.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 66.462522][ T4140] netlink: 76 bytes leftover after parsing attributes in process `syz.2.162'. [ 66.474659][ T28] audit: type=1400 audit(1786088387.719:597): avc: denied { setopt } for pid=4126 comm="syz.3.156" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.514674][ T28] audit: type=1400 audit(1786088387.979:598): avc: denied { getopt } for pid=4141 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 66.569954][ T28] audit: type=1400 audit(1786088388.019:599): avc: denied { getopt } for pid=4143 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.693508][ T4154] syzkaller0: entered promiscuous mode [ 66.699172][ T28] audit: type=1400 audit(1786088388.169:600): avc: denied { create } for pid=4155 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 66.735561][ T4154] syzkaller0: entered allmulticast mode [ 66.746031][ T28] audit: type=1400 audit(1786088388.179:601): avc: denied { setopt } for pid=4155 comm="syz.4.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 66.764694][ T4101] loop0: detected capacity change from 0 to 512 [ 66.919723][ T4175] loop4: detected capacity change from 0 to 512 [ 66.946680][ T4177] loop2: detected capacity change from 0 to 512 [ 66.957305][ T4175] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 67.005407][ T4177] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -ENXIO [ 67.083252][ T4184] tap0: tun_chr_ioctl cmd 1074025677 [ 67.090057][ T4184] tap0: linktype set to 768 [ 67.103109][ T4184] tap0: tun_chr_ioctl cmd 1074025672 [ 67.122852][ T4184] tap0: ignored: set checksum disabled [ 67.201625][ T4101] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.496308][ T4199] GUP no longer grows the stack in syz.1.184 (4199): 200000004000-20000000a000 (200000002000) [ 67.506858][ T4199] CPU: 1 UID: 0 PID: 4199 Comm: syz.1.184 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 67.506894][ T4199] Tainted: [W]=WARN [ 67.506902][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 67.506915][ T4199] Call Trace: [ 67.506924][ T4199] [ 67.506989][ T4199] __dump_stack+0x1d/0x30 [ 67.507055][ T4199] dump_stack_lvl+0x95/0xd0 [ 67.507078][ T4199] dump_stack+0x15/0x1b [ 67.507169][ T4199] __get_user_pages+0x1b27/0x1f10 [ 67.507209][ T4199] ? __rcu_read_unlock+0x4e/0x70 [ 67.507306][ T4199] get_user_pages_remote+0x1d5/0x6b0 [ 67.507343][ T4199] __access_remote_vm+0x156/0x4d0 [ 67.507381][ T4199] access_remote_vm+0x32/0x40 [ 67.507496][ T4199] proc_pid_cmdline_read+0x334/0x710 [ 67.507521][ T4199] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 67.507544][ T4199] vfs_readv+0x417/0x6d0 [ 67.507602][ T4199] __x64_sys_preadv+0xfd/0x1c0 [ 67.507689][ T4199] x64_sys_call+0x2915/0x3020 [ 67.507758][ T4199] do_syscall_64+0x136/0x3c0 [ 67.507791][ T4199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.507822][ T4199] RIP: 0033:0x7fa51129e0d9 [ 67.507841][ T4199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.507861][ T4199] RSP: 002b:00007fa50fcb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 67.507891][ T4199] RAX: ffffffffffffffda RBX: 00007fa511526180 RCX: 00007fa51129e0d9 [ 67.507908][ T4199] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000008 [ 67.507924][ T4199] RBP: 00007fa511335024 R08: 00000000fffffff9 R09: 0000000000000000 [ 67.507939][ T4199] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 67.507954][ T4199] R13: 00007fa511526218 R14: 00007fa511526180 R15: 00007fffaa4c8368 [ 67.507980][ T4199] [ 67.710753][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.878885][ T4209] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.008266][ T4212] netlink: 'syz.1.187': attribute type 13 has an invalid length. [ 68.091114][ T4221] loop3: detected capacity change from 0 to 1024 [ 68.104139][ T4220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 68.132852][ T4221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.355143][ T4227] loop4: detected capacity change from 0 to 512 [ 68.398477][ T4227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.406437][ T4101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.435481][ T4227] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.452259][ T4101] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.506458][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.522787][ T4227] dummy0: entered promiscuous mode [ 68.533640][ T4226] dummy0: left promiscuous mode [ 68.665120][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.773894][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.889414][ T4253] loop5: detected capacity change from 0 to 7 [ 68.915901][ T4254] netlink: 52 bytes leftover after parsing attributes in process `syz.0.200'. [ 68.939398][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.946739][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.977686][ T4255] netlink: 76 bytes leftover after parsing attributes in process `syz.0.200'. [ 69.027305][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.034486][ T4255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.042125][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.049214][ T4255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.059463][ T4255] netlink: 52 bytes leftover after parsing attributes in process `syz.0.200'. [ 69.069218][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.076356][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.439191][ T4269] loop2: detected capacity change from 0 to 512 [ 69.483914][ T4269] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 69.534406][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.541657][ T4277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.549014][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.556102][ T4277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.457877][ T4294] loop1: detected capacity change from 0 to 256 [ 70.550871][ T4294] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.347451][ T4292] loop0: detected capacity change from 0 to 1024 [ 71.427632][ T4292] EXT4-fs: Ignoring removed orlov option [ 71.676416][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 71.676433][ T28] audit: type=1400 audit(1786088393.149:627): avc: denied { bind } for pid=4327 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.773124][ T4329] netlink: 64 bytes leftover after parsing attributes in process `syz.1.230'. [ 72.336050][ T4292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.410358][ T4343] loop2: detected capacity change from 0 to 512 [ 72.612930][ T4343] EXT4-fs (loop2): 1 truncate cleaned up [ 72.622797][ T4343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.664780][ T28] audit: type=1400 audit(1786088394.139:628): avc: denied { write } for pid=4338 comm="syz.2.233" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.691061][ T4341] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.233: bg 0: block 465: padding at end of block bitmap is not set [ 72.752459][ T4341] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 72.773869][ T28] audit: type=1400 audit(1786088394.209:629): avc: denied { write } for pid=4289 comm="syz.0.217" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.780794][ T4341] EXT4-fs (loop2): This should not happen!! Data will be lost [ 72.780794][ T4341] [ 72.834102][ T4341] EXT4-fs (loop2): Total free blocks count 0 [ 72.842292][ T4341] EXT4-fs (loop2): Free/Dirty block details [ 72.848643][ T28] audit: type=1400 audit(1786088394.299:630): avc: denied { map } for pid=4338 comm="syz.2.233" path="/47/file0/file0/blkio.bfq.io_service_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.874769][ T4341] EXT4-fs (loop2): free_blocks=0 [ 72.880055][ T4341] EXT4-fs (loop2): dirty_blocks=1 [ 72.885350][ T4341] EXT4-fs (loop2): Block reservation details [ 72.891421][ T4341] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 72.919892][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.989255][ T3299] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 73.006640][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.184819][ T28] audit: type=1400 audit(1786088394.589:631): avc: denied { bind } for pid=4355 comm="syz.2.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.231824][ T4356] loop2: detected capacity change from 0 to 512 [ 73.265876][ T4356] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.238: iget: bad i_size value: 38620345925642 [ 73.294333][ T4356] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.294515][ T4356] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.238: couldn't read orphan inode 15 (err -117) [ 73.304278][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 73.304321][ C1] EXT4-fs (loop2): initial error at time 1786088394: ext4_orphan_get:1399: inode 15 [ 73.304359][ C1] EXT4-fs (loop2): last error at time 1786088394: ext4_orphan_get:1399: inode 15 [ 73.369178][ T4356] loop2: lost filesystem error report for type 5 error -117 [ 73.369850][ T4356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.457090][ T28] audit: type=1400 audit(1786088394.919:632): avc: denied { read } for pid=4355 comm="syz.2.238" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.575670][ T28] audit: type=1400 audit(1786088395.059:633): avc: denied { read } for pid=3018 comm="dhcpcd" name="n26" dev="tmpfs" ino=2429 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.608336][ T28] audit: type=1400 audit(1786088395.059:634): avc: denied { open } for pid=3018 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=2429 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.666769][ T28] audit: type=1400 audit(1786088395.059:635): avc: denied { getattr } for pid=3018 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=2429 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.752541][ T4368] netlink: 'syz.2.238': attribute type 4 has an invalid length. [ 73.761192][ T28] audit: type=1400 audit(1786088395.169:636): avc: denied { write } for pid=4355 comm="syz.2.238" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.798495][ T4368] netlink: 168 bytes leftover after parsing attributes in process `syz.2.238'. [ 73.833429][ T4362] loop4: detected capacity change from 0 to 512 [ 73.973980][ T4362] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.240: corrupted in-inode xattr: invalid ea_ino [ 74.003515][ T4362] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.004660][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 74.020465][ C0] EXT4-fs (loop4): initial error at time 1786088395: ext4_iget_extra_inode:5180: inode 15 [ 74.030592][ C0] EXT4-fs (loop4): last error at time 1786088395: ext4_iget_extra_inode:5180: inode 15 [ 74.082300][ T4362] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.240: couldn't read orphan inode 15 (err -117) [ 74.111809][ T4362] loop4: lost filesystem error report for type 5 error -117 [ 74.115370][ T4362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.389716][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.796069][ T4402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4402 comm=syz.3.243 [ 75.057935][ T4344] loop1: detected capacity change from 0 to 1024 [ 75.248943][ T4344] EXT4-fs: Ignoring removed orlov option [ 75.441291][ T4344] EXT4-fs warning (device loop1): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop1. [ 75.460976][ T77] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 75.485846][ T4408] loop4: detected capacity change from 0 to 512 [ 75.512277][ T4408] EXT4-fs: Ignoring removed nobh option [ 76.407106][ T4413] loop3: detected capacity change from 0 to 4096 [ 76.462860][ T77] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 76.475602][ T77] EXT4-fs (loop2): This should not happen!! Data will be lost [ 76.475602][ T77] [ 76.485432][ T77] EXT4-fs (loop2): Total free blocks count 0 [ 76.491662][ T77] EXT4-fs (loop2): Free/Dirty block details [ 76.497626][ T77] EXT4-fs (loop2): free_blocks=0 [ 76.502671][ T77] EXT4-fs (loop2): dirty_blocks=16001 [ 76.509237][ T4413] EXT4-fs: Ignoring removed orlov option [ 76.529332][ T77] EXT4-fs (loop2): Block reservation details [ 76.549434][ T4413] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.655899][ T4413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.735984][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 76.736012][ T28] audit: type=1400 audit(1786088398.209:655): avc: denied { write } for pid=4407 comm="syz.3.245" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.780892][ T77] EXT4-fs (loop2): i_reserved_data_blocks=16000 [ 76.782165][ T4408] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 76.792553][ T77] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 1 with error 28 [ 77.156044][ T4408] EXT4-fs (loop4): 1 truncate cleaned up [ 77.200632][ T4408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.235282][ T3299] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 77.278512][ T4425] loop1: detected capacity change from 0 to 1024 [ 77.326580][ T4425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 77.363700][ T4425] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.465999][ T28] audit: type=1400 audit(1786088398.909:656): avc: denied { write } for pid=4419 comm="syz.1.247" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.497112][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.530865][ T3299] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #19: comm syz-executor: data will be lost [ 77.593079][ T4432] loop3: detected capacity change from 0 to 512 [ 77.650866][ T4432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.688564][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.713973][ T28] audit: type=1400 audit(1786088399.189:657): avc: denied { create } for pid=4431 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 77.726001][ T4432] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.743630][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.759477][ T4432] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.250: corrupted xattr block 33: invalid checksum [ 77.786559][ T4432] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 77.806340][ T4432] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.250: corrupted xattr block 33: invalid checksum [ 77.900708][ T4432] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 77.946081][ T4432] EXT4-fs error (device loop3): ext4_xattr_block_find:1881: inode #15: comm syz.3.250: corrupted xattr block 33: invalid checksum [ 77.966931][ T28] audit: type=1400 audit(1786088399.429:658): avc: denied { setattr } for pid=4430 comm="syz.3.250" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.014723][ T4448] can0: slcan on ttyS3. [ 78.319670][ T28] audit: type=1400 audit(1786088399.519:659): avc: denied { create } for pid=4447 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.353625][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.417429][ T28] audit: type=1400 audit(1786088399.829:660): avc: denied { create } for pid=4452 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 78.625310][ T28] audit: type=1400 audit(1786088400.099:661): avc: denied { write } for pid=4455 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.697518][ T28] audit: type=1400 audit(1786088400.149:662): avc: denied { write } for pid=4473 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.799561][ T4472] Cannot find del_set index 4 as target [ 78.813987][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.908926][ T28] audit: type=1400 audit(1786088400.389:663): avc: denied { write } for pid=4475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.913247][ T4437] can0 (unregistered): slcan off ttyS3. [ 79.060946][ T4493] loop2: detected capacity change from 0 to 1024 [ 79.086762][ T28] audit: type=1400 audit(1786088400.569:664): avc: denied { write } for pid=4495 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.245671][ T4499] loop3: detected capacity change from 0 to 512 [ 79.269842][ T4499] EXT4-fs: Ignoring removed bh option [ 79.290868][ T4499] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 79.331695][ T4499] EXT4-fs (loop3): 1 truncate cleaned up [ 79.349296][ T4499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.416553][ T4499] IPVS: Unknown mcast interface: netpci0 [ 79.470625][ T4499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'. [ 79.502433][ T4499] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.262: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 79.539758][ T4453] loop1: detected capacity change from 0 to 512 [ 79.608766][ T4453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.638138][ T4453] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.675097][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.688243][ T4453] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.256: No space for directory leaf checksum. Please run e2fsck -D. [ 79.704216][ T4453] EXT4-fs error (device loop1): ext4_readdir:225: inode #2: comm syz.1.256: path /44/file0: directory fails checksum at offset 0 [ 79.764049][ T4511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'. [ 79.777952][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.171838][ T4522] gre0: Caught tx_queue_len zero misconfig [ 80.511884][ T4525] loop2: detected capacity change from 0 to 512 [ 80.642645][ T4525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.667315][ T4525] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.691808][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.815921][ T3712] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.961867][ T4541] loop2: detected capacity change from 0 to 256 [ 81.293048][ T4560] netlink: 16 bytes leftover after parsing attributes in process `syz.4.279'. [ 81.343884][ T4557] tipc: Started in network mode [ 81.361599][ T4557] tipc: Node identity 227e5fec5922, cluster identity 4711 [ 81.371438][ T4558] loop4: detected capacity change from 0 to 512 [ 81.378474][ T4557] tipc: Enabled bearer , priority 0 [ 81.387632][ T4558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.393138][ T4557] syzkaller0: entered promiscuous mode [ 81.405550][ T4557] syzkaller0: entered allmulticast mode [ 81.487721][ T4558] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 81.499856][ T4557] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 81.508125][ T4558] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 81.527050][ T4557] tipc: Resetting bearer [ 81.539437][ T4558] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 81.573964][ T4558] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 81.594050][ T4558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 81.617776][ T4556] tipc: Resetting bearer [ 81.635768][ T4556] tipc: Disabling bearer [ 81.795541][ T4549] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.279: dx entry: limit 65535 != root limit 120 [ 81.833318][ T4549] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.279: Corrupt directory, running e2fsck is recommended [ 81.937937][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.059695][ T4606] tipc: Started in network mode [ 82.072732][ T4606] tipc: Node identity 4, cluster identity 4711 [ 82.087911][ T4606] tipc: Node number set to 4 [ 82.680573][ T23] bridge0: entered promiscuous mode [ 82.911760][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 82.911800][ T28] audit: type=1400 audit(1786088404.339:668): avc: denied { listen } for pid=4700 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 82.951822][ T4698] syzkaller0: entered promiscuous mode [ 82.969674][ T4698] syzkaller0: entered allmulticast mode [ 83.049029][ T28] audit: type=1400 audit(1786088404.339:669): avc: denied { read } for pid=4700 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.119998][ T4707] loop2: detected capacity change from 0 to 1764 [ 83.537517][ T28] audit: type=1400 audit(1786088404.979:670): avc: denied { name_connect } for pid=4708 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 85.352395][ T4742] all: renamed from lo (while UP) [ 86.316978][ T4747] loop4: detected capacity change from 0 to 256 [ 86.399234][ T4753] syzkaller0: entered promiscuous mode [ 86.421179][ T4753] syzkaller0: entered allmulticast mode [ 86.634762][ T28] audit: type=1400 audit(1786088408.109:671): avc: denied { setopt } for pid=4767 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.647852][ T4766] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.312'. [ 86.662934][ T4769] usb251xb serial8250: supply vdd not found, using dummy regulator [ 86.676857][ T4769] usb251xb serial8250: hub is put in default configuration. [ 86.686017][ T28] audit: type=1400 audit(1786088408.139:672): avc: denied { mount } for pid=4767 comm="syz.1.311" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 86.709086][ T4769] usb251xb serial8250: Hub probed successfully [ 86.710966][ T4766] netlink: 'syz.3.312': attribute type 4 has an invalid length. [ 86.724328][ T28] audit: type=1400 audit(1786088408.139:673): avc: denied { mount } for pid=4767 comm="syz.1.311" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 86.747754][ T4768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.311'. [ 86.769938][ T4768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.311'. [ 86.823115][ T4768] netlink: 52 bytes leftover after parsing attributes in process `syz.1.311'. [ 86.903121][ T4768] netlink: 56 bytes leftover after parsing attributes in process `syz.1.311'. [ 87.079754][ T28] audit: type=1400 audit(1786088408.559:674): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 87.144331][ T28] audit: type=1400 audit(1786088408.619:675): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 87.241884][ T4779] loop1: detected capacity change from 0 to 512 [ 87.252431][ T4775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.313'. [ 87.271649][ T4779] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.315: Directory hole found for htree index block 0 [ 87.309658][ T4779] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 87.314632][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 87.330592][ C1] EXT4-fs (loop1): initial error at time 1786088408: dx_probe:791: inode 2 [ 87.339332][ C1] EXT4-fs (loop1): last error at time 1786088408: dx_probe:791: inode 2 [ 87.349518][ T4779] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 87.379359][ T4779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.681381][ T4795] netlink: 68 bytes leftover after parsing attributes in process `syz.0.319'. [ 87.788223][ T4796] loop3: detected capacity change from 0 to 8192 [ 87.796242][ T4796] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.993578][ T4793] xt_CT: No such helper "netbios-ns" [ 88.219284][ T4795] loop0: detected capacity change from 0 to 512 [ 88.309989][ T4795] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.0.319: corrupted xattr block 95: invalid header [ 88.342962][ T4795] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 88.344756][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 88.372597][ C1] EXT4-fs (loop0): initial error at time 1786088409: ext4_expand_extra_isize_ea:2810: inode 11 [ 88.387718][ C1] EXT4-fs (loop0): last error at time 1786088409: ext4_expand_extra_isize_ea:2810: inode 11 [ 88.404887][ T4795] EXT4-fs (loop0): Remounting filesystem read-only [ 88.411676][ T4795] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 88.422771][ T4795] EXT4-fs (loop0): 1 orphan inode deleted [ 88.429162][ T4795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.561422][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.587479][ T4800] loop3: detected capacity change from 0 to 512 [ 88.711500][ T3292] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.816200][ T4800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.855124][ T4800] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.881634][ T4811] loop1: detected capacity change from 0 to 1024 [ 88.913625][ T4811] EXT4-fs: Ignoring removed bh option [ 88.947558][ T28] audit: type=1326 audit(1786088410.419:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26a4ce0d9 code=0x7ffc0000 [ 88.994871][ T4811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.007910][ T28] audit: type=1326 audit(1786088410.419:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26a4ce0d9 code=0x7ffc0000 [ 89.033444][ T28] audit: type=1326 audit(1786088410.429:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26a4ce0d9 code=0x7ffc0000 [ 89.059005][ T28] audit: type=1326 audit(1786088410.429:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26a4ce0d9 code=0x7ffc0000 [ 89.084745][ T28] audit: type=1326 audit(1786088410.429:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff26a4ce0d9 code=0x7ffc0000 [ 89.110449][ T28] audit: type=1326 audit(1786088410.449:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26a4ce0d9 code=0x7ffc0000 [ 89.136920][ T28] audit: type=1326 audit(1786088410.459:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26a4ce0d9 code=0x7ffc0000 [ 89.169413][ T28] audit: type=1326 audit(1786088410.459:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26a4ce0d9 code=0x7ffc0000 [ 89.224457][ T28] audit: type=1326 audit(1786088410.459:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff26a4ce0d9 code=0x7ffc0000 [ 89.306105][ T28] audit: type=1326 audit(1786088410.459:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4799 comm="syz.3.320" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff26a4ce0d9 code=0x7ffc0000 [ 89.693608][ T3293] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.707716][ T4826] netlink: 20 bytes leftover after parsing attributes in process `syz.0.326'. [ 89.792276][ T4826] netlink: 20 bytes leftover after parsing attributes in process `syz.0.326'. [ 89.801494][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.831511][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.879525][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.931589][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.072693][ T4832] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 90.130973][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.262407][ T4842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.329'. [ 90.310660][ T4840] loop4: detected capacity change from 0 to 512 [ 90.352890][ T4840] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.331: bad orphan inode 15 [ 90.374123][ T4840] loop4: lost filesystem error report for type 5 error -117 [ 90.374237][ T4840] ext4_test_bit(bit=14, block=5) = 0 [ 90.381680][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 90.381702][ C0] EXT4-fs (loop4): initial error at time 1786088411: ext4_orphan_get:1425 [ 90.381798][ C0] EXT4-fs (loop4): last error at time 1786088411: ext4_orphan_get:1425 [ 90.440120][ T4840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.021454][ T3806] ================================================================== [ 91.029602][ T3806] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 91.036572][ T3806] [ 91.038912][ T3806] write to 0xffff888101d571e4 of 4 bytes by task 3808 on cpu 0: [ 91.046582][ T3806] shmem_mknod+0x143/0x170 [ 91.051025][ T3806] shmem_create+0x34/0x50 [ 91.055382][ T3806] path_openat+0xcfb/0x2000 [ 91.059913][ T3806] do_file_open+0x16c/0x290 [ 91.064441][ T3806] do_sys_openat2+0xa0/0x130 [ 91.069056][ T3806] __x64_sys_openat+0xf2/0x120 [ 91.073839][ T3806] x64_sys_call+0x1e39/0x3020 [ 91.078551][ T3806] do_syscall_64+0x136/0x3c0 [ 91.083167][ T3806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.089085][ T3806] [ 91.091419][ T3806] read to 0xffff888101d571e4 of 4 bytes by task 3806 on cpu 1: [ 91.098974][ T3806] fill_mg_cmtime+0x5b/0x240 [ 91.103583][ T3806] generic_fillattr+0x24d/0x340 [ 91.108462][ T3806] shmem_getattr+0x181/0x200 [ 91.113075][ T3806] vfs_getattr_nosec+0x146/0x1e0 [ 91.118038][ T3806] vfs_getattr+0x48/0x60 [ 91.122356][ T3806] vfs_statx_path+0x28/0x140 [ 91.126980][ T3806] vfs_statx+0xc4/0x170 [ 91.131346][ T3806] vfs_fstatat+0x118/0x170 [ 91.135788][ T3806] __se_sys_newfstatat+0x55/0x3e0 [ 91.140836][ T3806] __x64_sys_newfstatat+0x55/0x70 [ 91.145885][ T3806] x64_sys_call+0x2c64/0x3020 [ 91.150582][ T3806] do_syscall_64+0x136/0x3c0 [ 91.155195][ T3806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.161118][ T3806] [ 91.163458][ T3806] value changed: 0x1e92ee3e -> 0x1e9a8093 [ 91.169330][ T3806] [ 91.171677][ T3806] Reported by Kernel Concurrency Sanitizer on: [ 91.177848][ T3806] CPU: 1 UID: 0 PID: 3806 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 91.188291][ T3806] Tainted: [W]=WARN [ 91.192109][ T3806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.202199][ T3806] ================================================================== [ 91.246048][ T4854] syzkaller0: entered promiscuous mode [ 91.253877][ T4854] syzkaller0: entered allmulticast mode [ 91.368288][ T4840] EXT4-fs (loop4): shut down requested (2) [ 91.389888][ T4857] SELinux: Context X is not valid (left unmapped). [ 91.465522][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.