last executing test programs: 1m10.934757868s ago: executing program 0 (id=3265): socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x4000, 0x0, 0x0, 0x3, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b07, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2c100, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8414) perf_event_open(0x0, 0x0, 0xf, r0, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1m10.860459061s ago: executing program 0 (id=3268): getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m10.733568547s ago: executing program 0 (id=3270): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m10.722356478s ago: executing program 0 (id=3271): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 1m10.632090092s ago: executing program 0 (id=3273): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c69700005000100"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010001}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x14000883}, 0x80) 1m7.477460492s ago: executing program 0 (id=3277): socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x4000, 0x0, 0x0, 0x3, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b07, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2c100, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8414) perf_event_open(0x0, 0x0, 0xf, r1, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x38}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1m7.477087172s ago: executing program 32 (id=3277): socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x4000, 0x0, 0x0, 0x3, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b07, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2c100, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8414) perf_event_open(0x0, 0x0, 0xf, r1, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a31000000000800410073697700140033007465616d5f736c6176655f3000000000212262f19e1f05e2c0e3bdb8b54ce7c02cfa1b56d5701e0e8f1fd86e3e7a1a4f22caa5dfdc2fc247032cabd4c4797014baa78e374f6ecc874902342f3fdda78e6068b8171e6aa3de12b5a439289095170cca34257ce23db258f73976ef9f86c12a4e91c83edb640d0991dfc1bd22cb028e0910486432f2c5796211b67e95abea14c294dcdde3bb3aa9fc2f51a40d59d99d050000000000000004281304475fdbb119a76090a2a849d34fb0352cb7e53dd16db56edd7229a2322a8e38535911b1b264be33adf47ddc33db"], 0x38}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 7.404340969s ago: executing program 1 (id=3953): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x120, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000003000000004000003f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0008000018"], 0x50) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x1, @mcast2, 0x8}, 0x1c) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x400d4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="43762543779d49d13cae9069c75dd2545f118d0cadd94265ed9a1fa8b09db2a4b1f8ba798681ec2156b4e909b96cdb4e8bac0513de0e4734ca5b93c482a8a6c28ff6538b39372e1817ed82c014a1cf901bdafc85656e2a7bac25a7b1443e7307ebe051c92f740bd36ac4a1504e6c2f", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fddbdf250300000008000c000000000005000700020000000500210001000000050005000000000008000b000400000014001f0000000000000000000000ffff0a0101000c0016000200000000000000050007000000000006001a004e240000"], 0x6c}, 0x1, 0x0, 0x0, 0x5050}, 0x6048040) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000003c0)=0x50000) 7.347618012s ago: executing program 1 (id=3954): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x2, 0x19c871, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bond_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYRESDEC=r0, @ANYRES64=r2], 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @rand_addr=0x64010101}}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newtclass={0x58, 0x28, 0xd9acf1daec79ef29, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffff, 0xf}, {0x7, 0x13}, {0xfff1, 0x9}}, [@tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0xf8}}, @TCA_RATE={0x6, 0x5, {0x10, 0x7}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0xe, 0x81}}, @TCA_RATE={0x6, 0x5, {0x10, 0x3}}]}, 0x58}}, 0x4008000) bind$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0x9, @mcast2, 0x8000, 0x2}, 0x20) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000900)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r4, @ANYRESOCT, @ANYRES64, @ANYRES32, @ANYRES8=0x0, @ANYRES16=r5], 0x1, 0x272, &(0x7f0000000380)="$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") setgroups(0x1, &(0x7f0000000040)=[0x0]) newfstatat(0xffffffffffffff9c, &(0x7f00000049c0)='./file1\x00', &(0x7f0000000880), 0x1000) gettid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000d40)={{{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000a00)=0xe8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@data_journal}, {@noauto_da_alloc}, {@prjquota}, {@nombcache}, {@delalloc}, {@quota}], [{@permit_directio}, {@appraise_type}, {@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x280}}, {@fowner_lt={'fowner<', r7}}, {@obj_user={'obj_user', 0x3d, '+(!/,'}}, {@uid_gt}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '\'\\/+^\xfd}\x18,!{*'}}]}, 0x7f, 0x47b, &(0x7f0000000e40)="$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") lstat(0x0, &(0x7f0000000780)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r9, 0x1, 0x2f, &(0x7f0000000600)=0xdf8, 0x4) socket(0x28, 0x5, 0x0) 6.32876151s ago: executing program 1 (id=3963): r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000240)={0x0, 0xd0b9, 0x132c8, 0x3, 0x80030a}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) pipe2(0x0, 0x84000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x52080, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000380)="$eJzs289rHFUcAPDv7CZt06YmlvqjaavRKgZ/JE1aaw9eFAUPCoIe6jEm2xK7baSJYEvQKFKPUhCv4lHwL/CkF1FPglc9K4UiubQKwsrszia729383GRr9/OBSd6beZv3vjvzdt+blwmgaw2nP5KI/oj4LSIGKtn6AsOVX7eWFqb+XlqYSqJUeuOvpFzu5tLCVLVo9XX7qpmeiNwnSRxuUu/c5SvnJ4vFwqUsPzZ/4d2xuctXnpm5MHmucK5wceL06ZMnxp87NfFsW+JM47o59MHskUOvvHXttakz197+6ZusvXuiIY42GV7t4OOlUpur66z9Nemkp4MNYUPylW4aveX+PxD5WDl5A/Hyxx1tHLCtSqVS6f7WhxdLwF0siU63AOiM6hd9Ov+tbjs09Lgj3HihMgFK476VbZUjPZHLyvQ2zG/baTgiziz+82W6xfbchwAAqPNdOv55utn4Lxe194XuydZQBiPi3og4EBGnIuJgRNwXUS77QEQ8uMH6GxdJbh//5K5vKrB1Ssd/z2drW/Xjv+roLwbzWW5/Of7e5OxMsXA8e09Gond3mh9fpY7vX/r1s1bHasd/6ZbWXx0LZu243rO7/jXTk/OTW4m51o2PIoZ6msWfLK8EJBFxKCKGNlnHzJNfH2l1bO34V9GGdabSVxFPVM7/YjTEX5Wsvj45tieKheNj1avidj//cvX1VvVvKf42SM//3qbX/3L8g0nteu3cxuu4+vunLec0m73+dyVv1u17f3J+/tJ4xK7k1Uqja/dPNJSbWCmfxj9yrHn/PxAr78ThiEgv4qMR8VBEPJy1/ZGIeDQijq0S/48vPvZO/Z4/+tcf//ZK45/e0PlfSeyKxj3NE/nzP3xbV+ngSnJ95/9kOTWS7VnP59962lUs7N7q2wcAAAD/C7mI6I8kN7qczuVGRyv/w38w9uaKs3PzT52dfe/idOUZgcHozVXvdA3U3A8dz6b11fxEQ/5Edt/483xfOT86NVuc7nTw0OX2tej/qT/znW4dsO08rwXdS/+H7rVW//93h9oB7Dzf/9C9mvT/vk60A9h5zb7/P+xAO4Cd19D/LftBFzH/h+6l/0P30v+hK831xVoPyUvcJYkvjlbOeXv+YOTulLgktiPR6U8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9vgvAAD//+F55Qw=") openat(0xffffffffffffff9c, 0x0, 0x8042, 0x10) truncate(0x0, 0x2fffffd) eventfd2(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, 0x0, 0x5ef768c147daadb0) ioperm(0x0, 0x7, 0x80006) io_setup(0x3ff, &(0x7f0000000500)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_getevents(r5, 0x8, 0x0, 0x0, 0x0) io_submit(r5, 0x2, &(0x7f0000000a80)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x3, 0x1a, r3, &(0x7f0000000800)="631b082c5bd70ec9a8d76a83ab8edc9fb8c9e4363f3f9d790a612d6e552920333aade37db63fb04b155889fafa2cd7d50895d57c48decc40fbb5dbef8c5e5023864ea3e72693403540a5bda61dad11c0352082d0b4db9a28c80c17e6fee8f402cea13da4651fb570c95b65914cf0e5b46106ee42c39c38f16c9d2828705ca83e633e8f32c968aae591bb76def258f830da5fc0d7b0c2c6456ca6c5c2112e4ffa1d6fcbc45843b3302d19ff79be0a5bfdac8e82550b8f309b769adfe1d110e2f398c80a3de7fd0a14a932ada177957a88bbe32784c2e48df9336add83862b", 0xde, 0x19, 0x0, 0x3}, 0x0]) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 6.008102625s ago: executing program 1 (id=3965): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x2, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8a8, 0x6, 0x6, 0x8, 0xfffffff7}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44090}, 0x0) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="af", 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000008400000000000000ff5b"], 0x18, 0x20000001}, 0x20008000) socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) tkill(r2, 0x12) waitid(0x1, r2, 0x0, 0x8, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80003, 0x6) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[], 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x341001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0xfdd5) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)="54d8ce3899e6dab42435522a595d", 0xe}], 0x1}}], 0x1, 0x0) 4.700020717s ago: executing program 5 (id=3979): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="ccfd", 0x2}], 0x1}, 0x40010) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000880)="1a", 0x1}], 0x1}, 0x0) 3.829284838s ago: executing program 3 (id=3985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) 3.804071529s ago: executing program 5 (id=3986): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001fc0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000a00)) socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000380), &(0x7f0000000480)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.647922427s ago: executing program 5 (id=3987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000300c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c000280050001000000000006000340000000000800074000000000040006"], 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000004001800068014"], 0xac}}, 0x0) 3.616450168s ago: executing program 5 (id=3988): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0xfffffffd, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 3.009524767s ago: executing program 3 (id=3994): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) 2.885279413s ago: executing program 1 (id=3996): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="ccfd", 0x2}], 0x1}, 0x40010) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000880)="1a", 0x1}], 0x1}, 0x0) 2.693301362s ago: executing program 5 (id=3999): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0xf9, 0x1224, &(0x7f0000000600)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x189800, 0x9b) r0 = inotify_init1(0x800) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xc0000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x5, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES16=r1], 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="70020000", @ANYRES16=r2, @ANYBLOB="0f0700000000000000006700000048000e", @ANYBLOB="00004bacfe0ef54796fe5f220bf4dd1b60bcf68a8977b2f16d130474fdfbedea8c5fa5d4c7d3e4"], 0x270}, 0x1, 0x0, 0x0, 0x44890}, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x50000003) syz_emit_ethernet(0x52, &(0x7f0000001840)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002000090780000fe05e6673f0303fe"], 0x0) 2.063864882s ago: executing program 2 (id=4002): r0 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x5db}], 0x1}, 0x84) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/102, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f00000023c0)=""/4098, 0x1e1}, {&(0x7f00000000c0)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x5b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0xa}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/207, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000000000)={0x77359400}) 2.062160132s ago: executing program 5 (id=4003): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x2, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8a8, 0x6, 0x6, 0x8, 0xfffffff7}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44090}, 0x0) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="af", 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000008400000000000000ff5b"], 0x18, 0x20000001}, 0x20008000) socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) tkill(r2, 0x12) waitid(0x1, r2, 0x0, 0x8, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80003, 0x6) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[], 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x341001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0xfdd5) 2.060911782s ago: executing program 1 (id=4004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_usb_connect$cdc_ecm(0x5, 0x150, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r3, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) 1.8996346s ago: executing program 2 (id=4005): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x4000, 0x0, 0x0, 0xf, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg(0xffffffffffffffff, 0x0, 0x20040010) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, 0x0, 0x20000000) r2 = socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x9) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x5c}}, 0x85800) r3 = socket(0x18, 0x3, 0x0) socket$inet(0x2, 0x2, 0xfff7fffd) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000040000100fcff0700fedbdf250100000004004780180001801400108008000280", @ANYRES64=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4004001}, 0x4008094) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000021000000100800010001"], 0x1c}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a80)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb20d78ee079025a165439c3807988a195c5e9da978992641d9a95ee2d46e69f5fa6d85020808e39cdb774faad5bf0f82a191d8a532568e4b8f41d7a0a486b29852035517c7147030ef58acbb59f058ad6e4b2d755a594e976b449339c7148ec59ee9441fe17910bc2ddb83b16677c9f59ed8098400c68942e253877cbf8b01ff493674dfab23be4426390e1e53f15c45de80d176b9bc9fbc51e3a8c6907d1560a15cdef782f6e954ecc9bbe2fb91ef8c2f9bae1a85a6bc0b7f9cd73d6826f788b90f805ce1f78761e3100fd752a98f6df451bd4f6d610aac6f9f93d2bc1c752a6fed0655af74f5b4c72e51b82a06c99fa1f3848541655ab3358f2d86fdc5cc2acb15513a6bdf73d245586cb94a37c602aa2756f8497f9ca746187680142c2b4d81c7d1e7ef938ed66ae51f26a893d887376", 0x15f}], 0x1}, 0x6400000c) 1.863270142s ago: executing program 4 (id=4007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x480, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x10, 0x4}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x450, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xfd1, 0x5a979510, 0xf3f9, 0x6, 0x7, 0x5, 0x9, 0x7f, 0x6, 0xa1e1, 0x7, 0x5, 0x1, 0xa1d, 0x0, 0x8001, 0x400, 0x90, 0x1, 0x2, 0xfffffff0, 0x5, 0x0, 0x8000, 0x5, 0xc, 0x4, 0xffff, 0x5da3, 0x4, 0x2, 0x6, 0x375cc0, 0xffff, 0x3, 0x3, 0x4, 0xa47, 0x9, 0xac9, 0x81, 0x7, 0xfffffffa, 0x38, 0x200, 0x3, 0x80000001, 0x1, 0x7, 0x3, 0x75225542, 0x40, 0x4, 0x7, 0x83b7, 0x200, 0x5, 0x1, 0x2, 0x9, 0x2, 0x8, 0xb, 0xae, 0x0, 0xffffffff, 0xa838, 0xff, 0xe2, 0x4, 0xfffffffd, 0x9, 0x1, 0x8, 0x4, 0x1ff, 0xfffffff7, 0xaf6, 0x9, 0x7, 0x1, 0x5, 0xffffffc0, 0x7, 0x0, 0x2, 0x1, 0x6, 0x8, 0x8, 0x4, 0x6cd, 0x1, 0x9b, 0x2, 0x3, 0xfffffff7, 0x7, 0x1, 0x5, 0x9, 0x8, 0x4, 0x0, 0xf1f0, 0xd, 0x89a, 0x80000000, 0x9, 0x1, 0x2, 0x800, 0x3, 0x4, 0x100, 0x8, 0x80000001, 0x1, 0x6d0ed44a, 0x80e, 0x400, 0xa, 0x4, 0xe, 0x3, 0x1, 0x5c9f, 0x10, 0xf5, 0x5, 0xf9b, 0xff, 0x8, 0x0, 0x2, 0x4, 0x9, 0x7f, 0x4, 0x9, 0x0, 0x4, 0x9, 0x6, 0x3, 0x10, 0x9, 0x9, 0x0, 0x100, 0xf, 0xc235, 0x4, 0x9, 0xfffffff5, 0x1, 0x3f10a647, 0x800, 0xffffff00, 0x4, 0x7, 0x4, 0x7, 0x40, 0x4, 0x57, 0x7ff, 0x37, 0x6, 0x7, 0xef, 0x7fff, 0x9, 0x401, 0x6, 0x8, 0x8, 0x2d, 0x200, 0x10, 0x3ff, 0x474b52a7, 0x8e, 0x1, 0xfffffffd, 0x9, 0x140, 0x7, 0x80, 0x6, 0x3af, 0xe, 0xffff, 0x7, 0x1, 0x5, 0x5, 0xc0f, 0x2, 0x8, 0xbddb, 0x1000, 0x7fffffff, 0xaa, 0x2, 0xd9b0, 0xd13, 0x0, 0x5, 0xbf8f, 0x400, 0xb, 0x6, 0x244, 0xa3ac, 0x9, 0xb16, 0x40, 0x4, 0x5, 0x0, 0x7, 0x5, 0x4, 0x7fff, 0x400, 0x9, 0x0, 0x6, 0x2, 0x8, 0xfffffffc, 0xa4b, 0x3, 0x1, 0x7ff, 0x8001, 0x8, 0x7, 0x4, 0x7, 0x7, 0xffffffff, 0x7, 0x9, 0x4, 0x9, 0x40000, 0x7, 0x3, 0x6, 0x8, 0xff, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0x6, 0x8, 0x8, {0x8, 0x0, 0x8, 0xc7c9, 0x4, 0x4}, {0x1, 0x1, 0x3ff, 0x2000, 0x8}, 0x7, 0x2, 0x8}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xc3}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) 1.709637779s ago: executing program 3 (id=4008): timerfd_create(0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) pipe2(0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000080)={0x0, @in6={{0x2, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x8, 0x806}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = socket$inet_udp(0x2, 0x2, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x52b7, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f00000003c0)) migrate_pages(r2, 0x7, &(0x7f0000000680)=0x9, &(0x7f00000006c0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) bind$inet6(r4, &(0x7f0000000700)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x7}, 0x7}, 0x1c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) write$fault_inject(r5, &(0x7f00000005c0)='10\x00', 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0xd) write$binfmt_format(r6, &(0x7f0000000000)='1\x00', 0x2400) 1.621949083s ago: executing program 4 (id=4009): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0xfffffffd, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 1.344672066s ago: executing program 3 (id=4010): r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000240)={0x0, 0xd0b9, 0x132c8, 0x3, 0x80030a}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) pipe2(0x0, 0x84000) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x52080, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000380)="$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") openat(0xffffffffffffff9c, 0x0, 0x8042, 0x10) truncate(0x0, 0x2fffffd) r4 = eventfd2(0x0, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, 0x0, 0x5ef768c147daadb0) ioperm(0x0, 0x7, 0x80006) io_setup(0x3ff, &(0x7f0000000500)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_getevents(r7, 0x8, 0x0, 0x0, 0x0) io_submit(r7, 0x2, &(0x7f0000000a80)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x3, 0x1a, r3, &(0x7f0000000800)="631b082c5bd70ec9a8d76a83ab8edc9fb8c9e4363f3f9d790a612d6e552920333aade37db63fb04b155889fafa2cd7d50895d57c48decc40fbb5dbef8c5e5023864ea3e72693403540a5bda61dad11c0352082d0b4db9a28c80c17e6fee8f402cea13da4651fb570c95b65914cf0e5b46106ee42c39c38f16c9d2828705ca83e633e8f32c968aae591bb76def258f830da5fc0d7b0c2c6456ca6c5c2112e4ffa1d6fcbc45843b3302d19ff79be0a5bfdac8e82550b8f309b769adfe1d110e2f398c80a3de7fd0a14a932ada177957a88bbe32784c2e48df9336add83862b", 0xde, 0x19, 0x0, 0x3}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x3, 0x7, r5, 0x0, 0x0, 0x7, 0x0, 0x2, r4}]) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 1.06049772s ago: executing program 4 (id=4011): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffe, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$unix(0x1, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x32600) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x2}, 0xb) 1.05913629s ago: executing program 4 (id=4012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) kexec_load(0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200000000}], 0x0) socket(0x15, 0x5, 0x0) 492.634506ms ago: executing program 2 (id=4013): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000814000780080011400000000005001500060000000500010006000000050005000a20000005000400000000000900020073797a32000000001000030068"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x114905, 0x4, 0x0, 0x7, 0xff, 0x4000, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4f64, 0x830d}, 0x110f00, 0x3, 0xfffffffc, 0x1, 0x0, 0x0, 0xcf35, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r1, r1, r1, r1], 0x0, 0x10, 0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x5}]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)'], 0x28}, 0x922bac8576bdadce) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, &(0x7f0000000340)=r2, 0x38) 423.924139ms ago: executing program 3 (id=4014): bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x9, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 340.059284ms ago: executing program 2 (id=4015): r0 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x5db}], 0x1}, 0x84) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/102, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f00000023c0)=""/4098, 0x1e1}, {&(0x7f00000000c0)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x5b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0xa}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/207, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000000000)={0x77359400}) 333.031974ms ago: executing program 3 (id=4016): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) getpriority(0x1, r0) 259.518438ms ago: executing program 2 (id=4017): getpid() perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a20, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0xb9, 0x0, 0x0, 0xf, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x12100) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x24000881) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r4, 0x0, 0x32600) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4a10}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) 215.40478ms ago: executing program 2 (id=4018): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) 104.795495ms ago: executing program 4 (id=4019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x480, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x10, 0x4}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x450, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xfd1, 0x5a979510, 0xf3f9, 0x6, 0x7, 0x5, 0x9, 0x7f, 0x6, 0xa1e1, 0x7, 0x5, 0x1, 0xa1d, 0x0, 0x8001, 0x400, 0x90, 0x1, 0x2, 0xfffffff0, 0x5, 0x0, 0x8000, 0x5, 0xc, 0x4, 0xffff, 0x5da3, 0x4, 0x2, 0x6, 0x375cc0, 0xffff, 0x3, 0x3, 0x4, 0xa47, 0x9, 0xac9, 0x81, 0x7, 0xfffffffa, 0x38, 0x200, 0x3, 0x80000001, 0x1, 0x7, 0x3, 0x75225542, 0x40, 0x4, 0x7, 0x83b7, 0x200, 0x5, 0x1, 0x2, 0x9, 0x2, 0x8, 0xb, 0xae, 0x0, 0xffffffff, 0xa838, 0xff, 0xe2, 0x4, 0xfffffffd, 0x9, 0x1, 0x8, 0x4, 0x1ff, 0xfffffff7, 0xaf6, 0x9, 0x7, 0x1, 0x5, 0xffffffc0, 0x7, 0x0, 0x2, 0x1, 0x6, 0x8, 0x8, 0x4, 0x6cd, 0x1, 0x9b, 0x2, 0x3, 0xfffffff7, 0x7, 0x1, 0x5, 0x9, 0x8, 0x4, 0x0, 0xf1f0, 0xd, 0x89a, 0x80000000, 0x9, 0x1, 0x2, 0x800, 0x3, 0x4, 0x100, 0x8, 0x80000001, 0x1, 0x6d0ed44a, 0x80e, 0x400, 0xa, 0x4, 0xe, 0x3, 0x1, 0x5c9f, 0x10, 0xf5, 0x5, 0xf9b, 0xff, 0x8, 0x0, 0x2, 0x4, 0x9, 0x7f, 0x4, 0x9, 0x0, 0x4, 0x9, 0x6, 0x3, 0x10, 0x9, 0x9, 0x0, 0x100, 0xf, 0xc235, 0x4, 0x9, 0xfffffff5, 0x1, 0x3f10a647, 0x800, 0xffffff00, 0x4, 0x7, 0x4, 0x7, 0x40, 0x4, 0x57, 0x7ff, 0x37, 0x6, 0x7, 0xef, 0x7fff, 0x9, 0x401, 0x6, 0x8, 0x8, 0x2d, 0x200, 0x10, 0x3ff, 0x474b52a7, 0x8e, 0x1, 0xfffffffd, 0x9, 0x140, 0x7, 0x80, 0x6, 0x3af, 0xe, 0xffff, 0x7, 0x1, 0x5, 0x5, 0xc0f, 0x2, 0x8, 0xbddb, 0x1000, 0x7fffffff, 0xaa, 0x2, 0xd9b0, 0xd13, 0x0, 0x5, 0xbf8f, 0x400, 0xb, 0x6, 0x244, 0xa3ac, 0x9, 0xb16, 0x40, 0x4, 0x5, 0x0, 0x7, 0x5, 0x4, 0x7fff, 0x400, 0x9, 0x0, 0x6, 0x2, 0x8, 0xfffffffc, 0xa4b, 0x3, 0x1, 0x7ff, 0x8001, 0x8, 0x7, 0x4, 0x7, 0x7, 0xffffffff, 0x7, 0x9, 0x4, 0x9, 0x40000, 0x7, 0x3, 0x6, 0x8, 0xff, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0x6, 0x8, 0x8, {0x8, 0x0, 0x8, 0xc7c9, 0x4, 0x4}, {0x1, 0x1, 0x3ff, 0x2000, 0x8}, 0x7, 0x2, 0x8}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xc3}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) 0s ago: executing program 4 (id=4020): r0 = syz_io_uring_setup(0x40fd, &(0x7f0000000080)={0x0, 0x46a1, 0x2, 0x2, 0x16d}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r1 = io_uring_setup(0x786f, &(0x7f00000001c0)={0x0, 0x91a4, 0x1, 0x0, 0x143, 0x0, r0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0xfcc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x24000890) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x12c}}, './file0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x68, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x80a}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0xa}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x22}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1ff, 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc8841}, 0x20048090) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"/262], 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r7 = socket(0x2d, 0x2, 0x0) setsockopt(r7, 0x11d, 0x1, &(0x7f0000000500)="01000000", 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000001140)="$eJzs3c9rXNUeAPDvncmkSZv30j4ej9fyHi/wFi1I00wtVt3Y1oVdFCzYhYiLhiapodMfNCmYWGgKLhQURNyKdOM/4F66dyeCunMtVJGKikpH7syddDKZSdIkM9Pmfj5wM/ece2fO+c6dM/fce3PmBpBbY+mfQsT+iAfnk4jRpmUjUV84lq13/6ebF9IpiWr1lR+TSLK8xvpJ9rgnSwxFxJenIv5RXF3u3MLipclKte5WxJH5y9eOzC0sHp69PHlx+uL0lfLRZ48dn3iufKy8LXHuyR5Pn3n5P++//cYzM19VDidxIs6V3pqKlji2y1iMxYMsxOb8gYg4ns60eV+eNDsghFwrZp/HUkT8K0ajWEvVjcbse32tHNBV1WJEFcipRPuHnGr0AxrH9hs7Dj7X5V5J79w7WT8AWh3/QP3cSAzVjo1230+ajowGauc29m5D+WkZf9488HE6xYrzEL8ub52BbSink6XbEfHvdvEntbrtrUWaxl9YUY8kIiYiYjCr34tbqEPSNN+N8zBr2Wz8hYg4kT2m+ac2Wf5YS7rX8QOQT3dPZjvypTT1cP+X9j0a/Z9Y1f+pXxtq3XdtRr/3f537f439/VDtHHmhpR+W9lnOtn/JUmvGd++e/rBT+c39v3RKy2/0BXvh3u2IAy3xv5MGm/V/0viTNts/XeX8iY2V8dLXP5zutKzf8VfvRBxse/zzsFeazrVenxzOlpWPlY/MzFamJ+p/25bx+Revf9qp/H7Hn27/3R3ib9r+hdbnpe/JtQ2W8dnZO5c7LRtZN/7C94NJ/XhzMMt5c3J+/no5YjA5k61Sv5BVyz+6dl0a6zReI43/0P/bt/8Vn//bK19nuPGVuQHXXr10v9OyzWz/povJD6obrEMnafxT62//Ve0/zftgOXVrzTJ+ee3GfzstWyv+4S3GBgAAAAAAAHlTqF2DTQrjy/OFwvh4fbzsP2N3oXJ1bv6pmas3rkxFHKr9P2Sp0LjSPVpPJ2m6nP0/bCN9tCX9dETsi4iPisO19PiFq5WpfgcPAAAAAAAAAAAAAAAAAAAAj4k92fj/xn2qfy7Wx/8DOdHNG8wBjzftH/Kr1v5X3eIJyAP7f8gv7R/yS/uH/NL+Ib+0f8gv7R/yS/uH/NL+AQAAAGBH2ve/u98mEbH0/HBtSg1my4wIgp2t1O8KAH1T7HcFgL5ZvvSvsw+5s6H+/+/ZjwN2vzpAHyTtMmudg+rajf9u22cCAAAAAAAAAAAAAF1wcH/78f+JscGw4xn2B/m1hfH/fjoAnnB++h/yyzE+sN4o/qFOC4z/BwAAAAAAAAAAAICeGalNSWE8Gws8EoXC+HjE3yJib5SSmdnK9ERE/D0ivimWdqXpcr8rDQAAAAAAAAAAAAAAAAAAADvM3MLipclKZfp688wfq3J29kzjLqg9KOuFeMRnRdL7t2U4IpZzShGPWufuzezKPrZbeZ2BuYXF5LdqTRKxFI9PgFuKa5tn1v3qGOzqFxMAAAAAAAAAAAAAAAAAAORQ09jj9g580uMaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvPbz/f/dm+h0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBk+isAAP//GjM9YA==") unshare(0x28000600) msgget$private(0x0, 0x0) kernel console output (not intermixed with test programs): 0x0 after dequeue, screwing up backlog [ 209.520522][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.532324][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.551989][ T3409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.735895][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.782132][ T3409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.782208][ T3409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.969265][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2754'. [ 212.492833][ T29] audit: type=1400 audit(1789197629.058:317): avc: denied { write } for pid=10621 comm="syz.4.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 213.183437][ T3389] net_ratelimit: 13 callbacks suppressed [ 213.183453][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.320409][T10676] netlink: 'syz.2.2793': attribute type 1 has an invalid length. [ 213.320429][T10676] netlink: 'syz.2.2793': attribute type 2 has an invalid length. [ 213.320447][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2793'. [ 213.323077][T10676] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2793'. [ 213.323746][T10676] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2793'. [ 213.329478][T10676] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2793'. [ 213.344638][T10676] openvswitch: netlink: Flow key attr not present in new flow. [ 213.433338][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.743631][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.816288][T10712] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2809'. [ 213.955345][ T29] audit: type=1400 audit(1789197630.518:318): avc: denied { write } for pid=10713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.998116][T10732] SET target dimension over the limit! [ 214.024225][ T29] audit: type=1400 audit(1789197630.588:319): avc: denied { write } for pid=10743 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.028386][T10745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2819'. [ 214.145240][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.151822][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.151917][ T29] audit: type=1400 audit(1789197630.708:320): avc: denied { write } for pid=10749 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.191128][ T29] audit: type=1400 audit(1789197630.738:321): avc: denied { write } for pid=10767 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.223394][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.261814][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.301817][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.095331][T10780] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2822'. [ 217.182666][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.456950][T10807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2835'. [ 217.790455][T10814] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.790499][T10814] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.790629][T10814] bridge_slave_0: entered allmulticast mode [ 217.791026][T10814] bridge_slave_0: entered promiscuous mode [ 217.792377][T10814] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.792407][T10814] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.792455][T10814] bridge_slave_1: entered allmulticast mode [ 217.792977][T10814] bridge_slave_1: entered promiscuous mode [ 217.804910][T10814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.805976][T10814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.816480][T10814] team0: Port device team_slave_0 added [ 217.817268][T10814] team0: Port device team_slave_1 added [ 217.827684][T10814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.827697][T10814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.827728][T10814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.828307][T10814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.828318][T10814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.828364][T10814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.848717][T10814] hsr_slave_0: entered promiscuous mode [ 217.849121][T10814] hsr_slave_1: entered promiscuous mode [ 217.849353][T10814] debugfs: 'hsr0' already exists in 'hsr' [ 217.849377][T10814] Cannot create hsr debugfs directory [ 218.384749][ T3382] net_ratelimit: 1 callbacks suppressed [ 218.384765][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.515040][T10814] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.665443][T10853] siw: device registration error -23 [ 218.918967][T10814] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.940685][T10855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2850'. [ 218.972664][T10814] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.011473][T10863] siw: device registration error -23 [ 219.064776][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2857'. [ 219.122516][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2862'. [ 219.421838][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.907297][ T1504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.929289][T10814] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.028165][T10814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.030235][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2872'. [ 220.048787][T10814] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.049407][T10814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.066956][T10814] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.069267][T10814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.463421][ T1504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.503298][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.823109][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.461779][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.543157][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.953147][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.023961][T10814] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 223.026818][T10814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.046374][T10814] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.086407][T10917] netlink: 'syz.2.2874': attribute type 1 has an invalid length. [ 223.086426][T10917] netlink: 'syz.2.2874': attribute type 2 has an invalid length. [ 223.108501][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.143847][T10814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.149693][T10814] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.153076][ T491] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.153107][ T491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.183428][ T548] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.183464][ T548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.236632][T10929] siw: device registration error -23 [ 223.334644][T10950] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2885'. [ 223.334910][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2885'. [ 223.349936][T10948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2883'. [ 223.410479][T10814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.502705][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2891'. [ 223.510838][T10971] netlink: 'syz.4.2891': attribute type 2 has an invalid length. [ 223.540296][T10814] veth0_vlan: entered promiscuous mode [ 223.542756][T10814] veth1_vlan: entered promiscuous mode [ 223.549866][T10814] veth0_macvtap: entered promiscuous mode [ 223.551433][T10814] veth1_macvtap: entered promiscuous mode [ 223.556745][T10814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.557964][T10814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.582219][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.590480][ T29] audit: type=1400 audit(1789197640.148:322): avc: denied { mounton } for pid=10814 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 223.621734][ T3788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.624849][ T3790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.625022][ T3790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.625212][ T3790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.705740][T10978] netlink: 'syz.3.2893': attribute type 10 has an invalid length. [ 223.720509][T10978] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 223.810187][T10994] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2899'. [ 223.810578][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2899'. [ 223.947316][T11011] __nla_validate_parse: 1 callbacks suppressed [ 223.947333][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2906'. [ 223.958053][T11011] netlink: 'syz.4.2906': attribute type 2 has an invalid length. [ 224.147091][ T29] audit: type=1400 audit(1789197640.708:323): avc: denied { create } for pid=11021 comm="syz.3.2910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 224.294075][T11036] netlink: 'syz.2.2916': attribute type 1 has an invalid length. [ 224.294095][T11036] netlink: 'syz.2.2916': attribute type 2 has an invalid length. [ 224.325309][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2918'. [ 224.342568][T11038] netlink: 'syz.3.2918': attribute type 2 has an invalid length. [ 224.508306][T11051] netlink: 'syz.3.2923': attribute type 29 has an invalid length. [ 224.510325][T11051] netlink: 'syz.3.2923': attribute type 29 has an invalid length. [ 224.613262][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2927'. [ 224.623891][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.707664][ T29] audit: type=1400 audit(1789197641.268:324): avc: denied { ioctl } for pid=11067 comm="syz.0.2932" path="socket:[30131]" dev="sockfs" ino=30131 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 225.463708][T11137] veth0_vlan: entered allmulticast mode [ 225.664678][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.792409][T11163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.089299][T11192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.145126][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.152583][T11198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2992'. [ 226.701842][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.991936][T11232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.743442][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.781857][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.183341][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.557186][T11266] validate_nla: 13 callbacks suppressed [ 229.557222][T11266] netlink: 'syz.3.3016': attribute type 4 has an invalid length. [ 229.557260][T11266] netlink: 'syz.3.3016': attribute type 1 has an invalid length. [ 229.557328][T11266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.611957][ T548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.669295][ T548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.700144][T11275] netlink: 'syz.3.3018': attribute type 1 has an invalid length. [ 229.700164][T11275] netlink: 'syz.3.3018': attribute type 2 has an invalid length. [ 229.823404][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.063066][ T548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.126091][ T548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.175972][T11248] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.176005][T11248] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.176116][T11248] bridge_slave_0: entered allmulticast mode [ 230.176592][T11248] bridge_slave_0: entered promiscuous mode [ 230.177758][T11248] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.177789][T11248] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.177862][T11248] bridge_slave_1: entered allmulticast mode [ 230.178341][T11248] bridge_slave_1: entered promiscuous mode [ 230.189888][T11248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.191167][T11248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.203371][T11248] team0: Port device team_slave_0 added [ 230.204189][T11248] team0: Port device team_slave_1 added [ 230.214714][T11248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.214728][T11248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.214783][T11248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.215318][T11248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.215329][T11248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.215359][T11248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.232722][T11248] hsr_slave_0: entered promiscuous mode [ 230.233383][T11248] hsr_slave_1: entered promiscuous mode [ 230.233667][T11248] debugfs: 'hsr0' already exists in 'hsr' [ 230.233680][T11248] Cannot create hsr debugfs directory [ 230.400678][ T548] bridge_slave_1: left allmulticast mode [ 230.400851][ T548] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.402461][ T548] bridge_slave_0: left allmulticast mode [ 230.402623][ T548] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.570300][ T29] audit: type=1400 audit(1789197647.128:325): avc: denied { write } for pid=11299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.630279][ T29] audit: type=1400 audit(1789197647.188:326): avc: denied { write } for pid=11325 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.654155][ T548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.660532][ T548] bond0 (unregistering): Released all slaves [ 230.837503][T11338] netlink: 'syz.0.3026': attribute type 21 has an invalid length. [ 230.864744][ T3390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.949853][T11310] netlink: 'syz.4.3027': attribute type 4 has an invalid length. [ 230.949892][T11310] netlink: 'syz.4.3027': attribute type 1 has an invalid length. [ 230.950013][T11310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.950585][ T3026] 8021q: adding VLAN 0 to HW filter on device eth2 [ 230.953599][T11338] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3026'. [ 231.006478][T11347] netlink: 'syz.2.3038': attribute type 1 has an invalid length. [ 231.006498][T11347] netlink: 'syz.2.3038': attribute type 2 has an invalid length. [ 231.008950][ T548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.008967][ T548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.010821][ T548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.010837][ T548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.108910][T11351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3040'. [ 231.182274][ T548] team0 (unregistering): Port device team_slave_1 removed [ 231.184901][ T548] team0 (unregistering): Port device team_slave_0 removed [ 231.217743][ T3400] infiniband syz1: ib_query_port failed (-19) [ 231.237493][T11361] netlink: 'syz.4.3044': attribute type 21 has an invalid length. [ 231.237565][T11361] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3044'. [ 231.316569][T11371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.344030][T11248] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 231.347280][T11248] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 231.349457][T11248] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 231.375821][T11248] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.376561][T11248] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 231.383338][T11248] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.383857][T11248] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 231.391348][T11248] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 231.398380][ T29] audit: type=1400 audit(1789197647.968:327): avc: denied { write } for pid=11363 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.464902][T11248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.469317][T11248] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.472645][ T491] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.472678][ T491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.503388][ T491] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.503497][ T491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.527709][ T29] audit: type=1400 audit(1789197648.088:328): avc: denied { write } for pid=11392 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.707563][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3056'. [ 231.723998][T11248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.770060][ T29] audit: type=1400 audit(1789197648.328:329): avc: denied { write } for pid=11412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.808615][ T29] audit: type=1400 audit(1789197648.368:330): avc: denied { write } for pid=11439 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.857355][T11248] veth0_vlan: entered promiscuous mode [ 231.861134][T11248] veth1_vlan: entered promiscuous mode [ 231.870470][T11248] veth0_macvtap: entered promiscuous mode [ 231.872143][T11248] veth1_macvtap: entered promiscuous mode [ 231.876672][T11248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.880265][T11248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.902056][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.939507][ T29] audit: type=1400 audit(1789197648.498:331): avc: denied { write } for pid=11444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.959303][ T29] audit: type=1400 audit(1789197648.508:332): avc: denied { write } for pid=11455 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.073316][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.221840][ T3409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.711781][ T3409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.943309][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.002059][ T548] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.002179][ T548] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.002264][ T548] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.002297][ T548] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.082034][T11464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.342571][ T3389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.413126][ T3794] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.499285][ T3794] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.534946][T11511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.548599][T11476] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.548631][T11476] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.548746][T11476] bridge_slave_0: entered allmulticast mode [ 233.549133][T11476] bridge_slave_0: entered promiscuous mode [ 233.550097][T11476] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.550128][T11476] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.550183][T11476] bridge_slave_1: entered allmulticast mode [ 233.550655][T11476] bridge_slave_1: entered promiscuous mode [ 233.594597][T11476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.595702][T11476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.612743][T11476] team0: Port device team_slave_0 added [ 233.614353][T11476] team0: Port device team_slave_1 added [ 233.633848][T11476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.633862][T11476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.633892][T11476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.634439][T11476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.634450][T11476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.634556][T11476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.694094][T11476] hsr_slave_0: entered promiscuous mode [ 233.697904][T11476] hsr_slave_1: entered promiscuous mode [ 233.983134][ T3382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.833501][ T3794] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.867669][ T3794] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.964631][ T3794] bridge_slave_1: left allmulticast mode [ 234.964776][ T3794] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.971817][ T3794] bridge_slave_0: left allmulticast mode [ 234.972034][ T3794] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.975637][T11542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3085'. [ 235.030923][T11542] validate_nla: 9 callbacks suppressed [ 235.030953][T11542] netlink: 'syz.0.3085': attribute type 39 has an invalid length. [ 235.054300][T11553] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3090'. [ 235.097265][ T3794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.107100][T11565] netlink: 'syz.4.3091': attribute type 1 has an invalid length. [ 235.107118][T11565] netlink: 'syz.4.3091': attribute type 2 has an invalid length. [ 235.126850][ T3794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.130900][ T3794] bond0 (unregistering): Released all slaves [ 235.152922][T11549] netlink: 'syz.3.3087': attribute type 4 has an invalid length. [ 235.152990][T11549] netlink: 'syz.3.3087': attribute type 1 has an invalid length. [ 235.153048][T11549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.155555][T11554] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 235.159050][ T29] audit: type=1400 audit(1789197651.718:333): avc: denied { write } for pid=11552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.205104][ T29] audit: type=1400 audit(1789197651.758:334): avc: denied { write } for pid=11571 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.240231][ T3026] 8021q: adding VLAN 0 to HW filter on device eth1 [ 235.265009][ T3794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.265028][ T3794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.269715][ T3794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.269730][ T3794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.491545][ T3794] team0 (unregistering): Port device team_slave_1 removed [ 235.497685][ T3794] team0 (unregistering): Port device team_slave_0 removed [ 235.511279][T11602] netlink: 'syz.3.3098': attribute type 29 has an invalid length. [ 235.511323][T11602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3098'. [ 235.511363][T11602] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3098'. [ 235.574772][ T3026] 8021q: adding VLAN 0 to HW filter on device eth2 [ 235.633365][T11609] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3101'. [ 235.636595][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 235.636610][ T29] audit: type=1400 audit(1789197652.198:337): avc: denied { create } for pid=11608 comm="syz.1.3101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 235.735712][ T29] audit: type=1400 audit(1789197652.298:338): avc: denied { write } for pid=11615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.781872][ T29] audit: type=1400 audit(1789197652.338:339): avc: denied { write } for pid=11633 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.885330][T11476] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 235.899086][T11476] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 235.899663][T11476] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 235.917307][T11476] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 235.917919][T11476] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 235.920917][ T29] audit: type=1400 audit(1789197652.488:340): avc: denied { write } for pid=11636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.933699][T11476] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 235.935399][T11476] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 235.945371][ T29] audit: type=1400 audit(1789197652.508:341): avc: denied { write } for pid=11652 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.976225][T11476] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.029533][T11476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.041076][T11476] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.050750][ T548] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.050794][ T548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.071581][ T548] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.071634][ T548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.105612][T11667] netlink: 'syz.0.3111': attribute type 39 has an invalid length. [ 236.170078][T11678] siw: device registration error -23 [ 236.247797][T11476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.372418][T11476] veth0_vlan: entered promiscuous mode [ 236.374502][T11476] veth1_vlan: entered promiscuous mode [ 236.404319][T11476] veth0_macvtap: entered promiscuous mode [ 236.406498][T11476] veth1_macvtap: entered promiscuous mode [ 236.410423][T11476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.432119][T11476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.435102][ T548] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.460038][T11711] netlink: 'syz.1.3124': attribute type 8 has an invalid length. [ 236.511855][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.512082][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.512138][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.564194][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3125'. [ 236.645483][T11717] netlink: 'syz.4.3125': attribute type 2 has an invalid length. [ 236.839632][ T29] audit: type=1400 audit(1789197653.398:342): avc: denied { write } for pid=11743 comm="syz.1.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 236.840069][T11749] netlink: 'syz.1.3135': attribute type 10 has an invalid length. [ 236.880137][T11749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.880159][T11749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.896713][T11749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.896806][T11749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.956128][ T3794] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.007630][ T3794] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.075365][ T3794] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.149591][ T3794] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.182788][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3150'. [ 237.189075][T11732] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.189117][T11732] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.189189][T11732] bridge_slave_0: entered allmulticast mode [ 237.194551][T11732] bridge_slave_0: entered promiscuous mode [ 237.197792][T11732] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.197823][T11732] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.197943][T11732] bridge_slave_1: entered allmulticast mode [ 237.203442][T11732] bridge_slave_1: entered promiscuous mode [ 237.255227][T11732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.261483][T11732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.310350][T11732] team0: Port device team_slave_0 added [ 237.319819][T11732] team0: Port device team_slave_1 added [ 237.353834][T11732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.353848][T11732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.353875][T11732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.354683][T11732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.354696][T11732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.354728][T11732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.405322][ T3794] bridge_slave_1: left allmulticast mode [ 237.405343][ T3794] bridge_slave_1: left promiscuous mode [ 237.405479][ T3794] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.438837][ T3794] bridge_slave_0: left allmulticast mode [ 237.438857][ T3794] bridge_slave_0: left promiscuous mode [ 237.439156][ T3794] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.609479][ T3794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.632024][ T3794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.635016][ T3794] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 237.638812][ T3794] bond0 (unregistering): Released all slaves [ 237.684914][T11732] hsr_slave_0: entered promiscuous mode [ 237.685283][T11732] hsr_slave_1: entered promiscuous mode [ 237.685788][T11732] debugfs: 'hsr0' already exists in 'hsr' [ 237.685802][T11732] Cannot create hsr debugfs directory [ 237.689670][ T29] audit: type=1400 audit(1789197654.248:343): avc: denied { mounton } for pid=11818 comm="syz.1.3165" path="/30/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 237.761592][ T3794] hsr_slave_0: left promiscuous mode [ 237.767876][ T3794] hsr_slave_1: left promiscuous mode [ 237.768277][ T3794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.768293][ T3794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.768738][ T3794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.768750][ T3794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.792288][ T3794] veth1_macvtap: left promiscuous mode [ 237.792315][ T3794] veth0_macvtap: left promiscuous mode [ 237.792391][ T3794] veth1_vlan: left promiscuous mode [ 237.792465][ T3794] veth0_vlan: left promiscuous mode [ 237.846492][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3172'. [ 237.935764][T11853] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3179'. [ 238.050750][ T3794] team0 (unregistering): Port device team_slave_1 removed [ 238.065187][ T3794] team0 (unregistering): Port device team_slave_0 removed [ 238.317972][T11905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3199'. [ 238.350457][ T29] audit: type=1400 audit(1789197654.908:344): avc: denied { write } for pid=11888 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.379449][ T29] audit: type=1400 audit(1789197654.948:345): avc: denied { write } for pid=11917 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.409723][ T3026] 8021q: adding VLAN 0 to HW filter on device eth1 [ 238.562508][T11732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.565141][T11732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 238.565911][T11732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.584222][T11732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 238.585419][T11732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.588706][T11732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 238.589389][T11732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 238.593387][T11732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 238.631652][ T29] audit: type=1400 audit(1789197655.198:346): avc: denied { write } for pid=11924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.674472][T11732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.691114][T11732] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.697996][ T3788] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.698029][ T3788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.701111][ T3794] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.701142][ T3794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.755580][T11961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3210'. [ 238.962437][T11732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.983125][T12007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.983207][T12007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.983758][T12007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.983831][T12007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.082961][T12018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3222'. [ 239.117918][T11732] veth0_vlan: entered promiscuous mode [ 239.120975][T11732] veth1_vlan: entered promiscuous mode [ 239.153522][T11732] veth0_macvtap: entered promiscuous mode [ 239.161436][T11732] veth1_macvtap: entered promiscuous mode [ 239.186377][T11732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.195464][T11732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.212073][ T3788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.212251][ T548] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.212289][ T548] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.212459][ T548] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.607773][ T42] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.669977][ T42] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.751476][ T42] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.810303][T12049] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.810332][T12049] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.810387][T12049] bridge_slave_0: entered allmulticast mode [ 239.811142][T12049] bridge_slave_0: entered promiscuous mode [ 239.882618][ T42] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.885325][T12049] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.885418][T12049] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.885484][T12049] bridge_slave_1: entered allmulticast mode [ 239.886037][T12049] bridge_slave_1: entered promiscuous mode [ 239.927291][T12049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.929918][T12049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.016433][T12049] team0: Port device team_slave_0 added [ 240.017168][T12049] team0: Port device team_slave_1 added [ 240.033669][ T42] bridge_slave_1: left allmulticast mode [ 240.033879][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.034700][ T42] bridge_slave_0: left allmulticast mode [ 240.034830][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.210347][T12126] siw: device registration error -23 [ 240.217450][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.233310][ T42] bond0 (unregistering): (slave team0): Releasing backup interface [ 240.240405][ T42] team0: left promiscuous mode [ 240.242872][ T42] bond0 (unregistering): Released all slaves [ 240.346477][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3269'. [ 240.443814][T12135] validate_nla: 11 callbacks suppressed [ 240.443862][T12135] netlink: 'syz.3.3269': attribute type 2 has an invalid length. [ 240.498413][ T42] team0 (unregistering): Port device team_slave_1 removed [ 240.512102][ T42] team0 (unregistering): Port device team_slave_0 removed [ 243.484831][T12049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.484846][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.484881][T12049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.544184][T12049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.544200][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.544233][T12049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.657257][T12049] hsr_slave_0: entered promiscuous mode [ 243.660668][T12049] hsr_slave_1: entered promiscuous mode [ 243.660976][T12049] debugfs: 'hsr0' already exists in 'hsr' [ 243.660990][T12049] Cannot create hsr debugfs directory [ 243.790200][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 243.790215][ T29] audit: type=1400 audit(1789197660.348:350): avc: denied { write } for pid=12147 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.864293][ T29] audit: type=1400 audit(1789197660.428:351): avc: denied { write } for pid=12178 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.917229][ T3026] 8021q: adding VLAN 0 to HW filter on device eth1 [ 243.981517][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.027068][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.067511][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.120648][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.143160][ T29] audit: type=1400 audit(1789197660.708:352): avc: denied { write } for pid=12191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.198974][ T29] audit: type=1400 audit(1789197660.758:353): avc: denied { write } for pid=12208 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.398545][ T42] bridge_slave_1: left allmulticast mode [ 244.398568][ T42] bridge_slave_1: left promiscuous mode [ 244.398684][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.401583][ T42] bridge_slave_0: left allmulticast mode [ 244.401775][ T42] bridge_slave_0: left promiscuous mode [ 244.401912][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.476094][ T29] audit: type=1400 audit(1789197661.038:354): avc: denied { write } for pid=12218 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.545921][ T29] audit: type=1400 audit(1789197661.108:355): avc: denied { write } for pid=12241 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.581468][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.594681][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.595444][ T42] bond0 (unregistering): Released all slaves [ 244.598492][T12049] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 244.600570][T12049] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 244.654680][T12049] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 244.671802][T12049] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 244.717765][ T42] hsr_slave_0: left promiscuous mode [ 244.727229][ T42] hsr_slave_1: left promiscuous mode [ 244.727795][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.727812][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.737094][ T29] audit: type=1400 audit(1789197661.298:356): avc: denied { write } for pid=12247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.737537][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.737553][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.776463][ T29] audit: type=1400 audit(1789197661.318:357): avc: denied { write } for pid=12265 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.838266][ T42] veth1_macvtap: left promiscuous mode [ 244.838296][ T42] veth0_macvtap: left promiscuous mode [ 244.838363][ T42] veth1_vlan: left promiscuous mode [ 244.838400][ T42] veth0_vlan: left promiscuous mode [ 244.884766][ T29] audit: type=1400 audit(1789197661.448:358): avc: denied { write } for pid=12267 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.954910][ T29] audit: type=1400 audit(1789197661.518:359): avc: denied { write } for pid=12286 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.041055][ T42] team0 (unregistering): Port device team_slave_1 removed [ 245.054659][ T42] team0 (unregistering): Port device team_slave_0 removed [ 245.131282][T12049] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 245.141714][T12049] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 245.142272][T12049] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 245.167799][T12049] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.236185][T12157] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.236219][T12157] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.236282][T12157] bridge_slave_0: entered allmulticast mode [ 245.236777][T12157] bridge_slave_0: entered promiscuous mode [ 245.247649][T12157] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.247682][T12157] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.247772][T12157] bridge_slave_1: entered allmulticast mode [ 245.248227][T12157] bridge_slave_1: entered promiscuous mode [ 245.325839][T12157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.336063][T12157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.388698][T12157] team0: Port device team_slave_0 added [ 245.389799][T12157] team0: Port device team_slave_1 added [ 245.429973][T12049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.434017][T12157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.434030][T12157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.435775][T12157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.437181][T12157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.437193][T12157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.437303][T12157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.521830][T12049] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.527500][ T3790] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.527533][ T3790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.560594][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.560631][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.627189][T12157] hsr_slave_0: entered promiscuous mode [ 245.627632][T12157] hsr_slave_1: entered promiscuous mode [ 245.627841][T12157] debugfs: 'hsr0' already exists in 'hsr' [ 245.627855][T12157] Cannot create hsr debugfs directory [ 245.735658][ T3026] 8021q: adding VLAN 0 to HW filter on device eth4 [ 245.937373][T12049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.962541][T12157] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 245.975033][T12157] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.977251][T12157] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 245.999098][T12157] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 245.999692][T12157] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 246.017803][T12157] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 246.024991][T12157] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 246.041232][T12157] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 246.106160][T12400] netlink: 'syz.3.3327': attribute type 10 has an invalid length. [ 246.108467][T12400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.108485][T12400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.109004][T12400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.109047][T12400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.244527][T12157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.270976][T12157] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.283399][ T3788] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.283435][ T3788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.288661][ T3794] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.288691][ T3794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.354840][T12049] veth0_vlan: entered promiscuous mode [ 246.371322][T12049] veth1_vlan: entered promiscuous mode [ 246.420062][T12049] veth0_macvtap: entered promiscuous mode [ 246.429352][T12049] veth1_macvtap: entered promiscuous mode [ 246.458934][T12049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.465173][T12049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.514970][ T3788] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.516021][ T3788] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.516110][ T3788] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.516141][ T3788] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.779115][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3335'. [ 246.819643][T12157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.842880][T12463] netlink: 'syz.4.3335': attribute type 2 has an invalid length. [ 246.884331][T12471] netlink: 'syz.3.3338': attribute type 10 has an invalid length. [ 247.015681][T12494] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3342'. [ 247.096886][T12494] netlink: 'syz.3.3342': attribute type 39 has an invalid length. [ 247.205979][T12157] veth0_vlan: entered promiscuous mode [ 247.212577][T12157] veth1_vlan: entered promiscuous mode [ 247.247727][T12157] veth0_macvtap: entered promiscuous mode [ 247.257475][T12157] veth1_macvtap: entered promiscuous mode [ 247.309445][T12157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.321460][T12157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.327390][T12534] netlink: 'syz.3.3351': attribute type 10 has an invalid length. [ 247.401790][ T3788] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.401837][ T3788] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.401932][ T3788] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.401966][ T3788] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.490439][T12551] FAULT_INJECTION: forcing a failure. [ 247.490439][T12551] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 247.490484][T12551] CPU: 0 UID: 0 PID: 12551 Comm: syz.2.3354 Not tainted syzkaller #0 PREEMPT(lazy) [ 247.490583][T12551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.490630][T12551] Call Trace: [ 247.490637][T12551] [ 247.490644][T12551] __dump_stack+0x1d/0x30 [ 247.490671][T12551] dump_stack_lvl+0x95/0xd0 [ 247.490695][T12551] dump_stack+0x15/0x1b [ 247.490785][T12551] should_fail_ex+0x262/0x280 [ 247.490817][T12551] should_fail_alloc_page+0xf2/0x100 [ 247.490849][T12551] __alloc_frozen_pages_noprof+0x157/0x400 [ 247.490936][T12551] alloc_pages_mpol+0xaf/0x1d0 [ 247.490962][T12551] alloc_pages_noprof+0x94/0x140 [ 247.491061][T12551] pte_alloc_one+0x1c/0xc0 [ 247.491084][T12551] handle_mm_fault+0x20d5/0x3bb0 [ 247.491179][T12551] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 247.491230][T12551] do_user_addr_fault+0x404/0x1060 [ 247.491342][T12551] exc_page_fault+0x62/0xa0 [ 247.491372][T12551] asm_exc_page_fault+0x26/0x30 [ 247.491399][T12551] RIP: 0010:__get_user_4+0x14/0x30 [ 247.491429][T12551] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 247.491453][T12551] RSP: 0018:ffffc900024c3e08 EFLAGS: 00050287 [ 247.491521][T12551] RAX: 00007f17445af000 RBX: ffff888104a12280 RCX: ffffffff81a90826 [ 247.491616][T12551] RDX: 00007ffffffff000 RSI: 0000000000000000 RDI: ffff888104a127f8 [ 247.491631][T12551] RBP: ffffc900024c3f48 R08: 0001888104a127ff R09: 0000000000000000 [ 247.491648][T12551] R10: ffffc900024c3e58 R11: 0001c900024c3e58 R12: ffff88812dfebf00 [ 247.491664][T12551] R13: 0000000000000000 R14: 00007f17445af000 R15: 0000000000000001 [ 247.491719][T12551] ? lookup_ioctx+0x26/0x1e0 [ 247.491755][T12551] lookup_ioctx+0x35/0x1e0 [ 247.491788][T12551] __se_sys_io_submit+0x57/0x280 [ 247.491911][T12551] __x64_sys_io_submit+0x43/0x50 [ 247.491937][T12551] x64_sys_call+0x221c/0x2550 [ 247.491962][T12551] do_syscall_64+0x112/0x360 [ 247.492001][T12551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.492151][T12551] RIP: 0033:0x7f1745bae159 [ 247.492176][T12551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.492195][T12551] RSP: 002b:00007f1744607028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 247.492217][T12551] RAX: ffffffffffffffda RBX: 00007f1745e35fa0 RCX: 00007f1745bae159 [ 247.492234][T12551] RDX: 0000200000001980 RSI: 0000000000000001 RDI: 00007f17445af000 [ 247.492322][T12551] RBP: 00007f1745c4503b R08: 0000000000000000 R09: 0000000000000000 [ 247.492338][T12551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.492352][T12551] R13: 00007f1745e36038 R14: 00007f1745e35fa0 R15: 00007ffdbfd11ed8 [ 247.492371][T12551] [ 248.277598][T12604] netlink: 'syz.1.3366': attribute type 10 has an invalid length. [ 248.481358][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3368'. [ 248.767198][ T3026] 8021q: adding VLAN 0 to HW filter on device eth1 [ 250.738424][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 250.738516][ T29] audit: type=1400 audit(1789197667.298:382): avc: denied { write } for pid=12671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.161653][ T29] audit: type=1400 audit(1789197667.698:383): avc: denied { write } for pid=12682 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.930312][T12686] loop2: detected capacity change from 0 to 8192 [ 251.946975][T12686] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 251.963992][ T29] audit: type=1400 audit(1789197668.508:384): avc: denied { mount } for pid=12685 comm="syz.2.3382" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 251.965704][ T3026] 8021q: adding VLAN 0 to HW filter on device eth2 [ 252.101413][ T29] audit: type=1400 audit(1789197668.658:385): avc: denied { unmount } for pid=11476 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 252.243323][T12712] loop1: detected capacity change from 0 to 2048 [ 252.274001][T12712] EXT4-fs (loop1): failed to initialize system zone (-117) [ 252.274039][T12712] EXT4-fs (loop1): mount failed [ 252.306021][ T29] audit: type=1400 audit(1789197668.868:386): avc: denied { write } for pid=12703 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.310177][ T29] audit: type=1400 audit(1789197668.868:387): avc: denied { map } for pid=12710 comm="syz.1.3392" path="socket:[38421]" dev="sockfs" ino=38421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 252.357962][ T29] audit: type=1400 audit(1789197668.908:388): avc: denied { write } for pid=12728 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.379639][ T3026] 8021q: adding VLAN 0 to HW filter on device eth3 [ 252.583382][ T29] audit: type=1400 audit(1789197669.148:389): avc: denied { write } for pid=12741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.591640][ T29] audit: type=1400 audit(1789197669.148:390): avc: denied { ioctl } for pid=12755 comm="syz.1.3397" path="socket:[38475]" dev="sockfs" ino=38475 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.650624][ T29] audit: type=1400 audit(1789197669.208:391): avc: denied { write } for pid=12761 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.021779][T12791] netlink: 'syz.1.3411': attribute type 2 has an invalid length. [ 253.858130][T12838] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3427'. [ 254.023503][T12848] FAULT_INJECTION: forcing a failure. [ 254.023503][T12848] name failslab, interval 1, probability 0, space 0, times 1 [ 254.023549][T12848] CPU: 1 UID: 0 PID: 12848 Comm: syz.2.3430 Not tainted syzkaller #0 PREEMPT(lazy) [ 254.023654][T12848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.023670][T12848] Call Trace: [ 254.023691][T12848] [ 254.023699][T12848] __dump_stack+0x1d/0x30 [ 254.023733][T12848] dump_stack_lvl+0x95/0xd0 [ 254.023857][T12848] dump_stack+0x15/0x1b [ 254.023883][T12848] should_fail_ex+0x262/0x280 [ 254.023957][T12848] should_failslab+0x8c/0xb0 [ 254.023986][T12848] __kmalloc_node_noprof+0xdb/0x500 [ 254.024020][T12848] ? crypto_create_tfm_node+0x5b/0x230 [ 254.024054][T12848] ? crypto_create_tfm_node+0x5b/0x230 [ 254.024080][T12848] ? should_fail_ex+0xdb/0x280 [ 254.024103][T12848] crypto_create_tfm_node+0x5b/0x230 [ 254.024207][T12848] crypto_spawn_tfm2+0x43/0x80 [ 254.024244][T12848] ? __pfx_rsassa_pkcs1_init_tfm+0x10/0x10 [ 254.024272][T12848] rsassa_pkcs1_init_tfm+0x26/0x60 [ 254.024365][T12848] ? __pfx_rsassa_pkcs1_init_tfm+0x10/0x10 [ 254.024416][T12848] crypto_sig_init_tfm+0x6c/0x80 [ 254.024442][T12848] crypto_create_tfm_node+0xcf/0x230 [ 254.024470][T12848] crypto_alloc_tfm_node+0xb8/0x280 [ 254.024561][T12848] crypto_alloc_sig+0x2d/0x40 [ 254.024585][T12848] public_key_verify_signature+0x142/0x4e0 [ 254.024623][T12848] ? should_fail_ex+0xdb/0x280 [ 254.024705][T12848] x509_check_for_self_signed+0x1c4/0x250 [ 254.024739][T12848] x509_cert_parse+0x3bf/0x450 [ 254.024822][T12848] x509_key_preparse+0x3c/0x420 [ 254.024849][T12848] asymmetric_key_preparse+0x68/0xb0 [ 254.024886][T12848] __key_create_or_update+0x2df/0x840 [ 254.024931][T12848] key_create_or_update+0x42/0x60 [ 254.025035][T12848] __se_sys_add_key+0x2a5/0x360 [ 254.025137][T12848] __x64_sys_add_key+0x67/0x80 [ 254.025195][T12848] x64_sys_call+0x1fa9/0x2550 [ 254.025225][T12848] do_syscall_64+0x112/0x360 [ 254.025265][T12848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.025301][T12848] RIP: 0033:0x7f1745bae159 [ 254.025317][T12848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.025335][T12848] RSP: 002b:00007f1744607028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 254.025358][T12848] RAX: ffffffffffffffda RBX: 00007f1745e35fa0 RCX: 00007f1745bae159 [ 254.025423][T12848] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 254.025440][T12848] RBP: 00007f1745c4503b R08: ffffffffffffffff R09: 0000000000000000 [ 254.025457][T12848] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 254.025474][T12848] R13: 00007f1745e36038 R14: 00007f1745e35fa0 R15: 00007ffdbfd11ed8 [ 254.025497][T12848] [ 254.189772][T12862] netlink: 'syz.4.3439': attribute type 2 has an invalid length. [ 254.249142][T12863] netlink: 'syz.3.3434': attribute type 4 has an invalid length. [ 254.249172][T12863] netlink: 'syz.3.3434': attribute type 1 has an invalid length. [ 254.249258][T12863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.366075][T12869] netlink: 'syz.3.3441': attribute type 10 has an invalid length. [ 254.496968][T12884] team0: No ports can be present during mode change [ 254.549309][T12891] netlink: 'syz.1.3449': attribute type 1 has an invalid length. [ 254.549404][T12891] netlink: 'syz.1.3449': attribute type 2 has an invalid length. [ 254.578991][T12887] bridge_slave_0: left allmulticast mode [ 254.579014][T12887] bridge_slave_0: left promiscuous mode [ 254.579313][T12887] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.641491][T12900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3450'. [ 254.767758][T12887] bridge_slave_1: left allmulticast mode [ 254.767859][T12887] bridge_slave_1: left promiscuous mode [ 254.767990][T12887] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.856221][T12887] bond0: (slave bond_slave_0): Releasing backup interface [ 254.872795][T12887] bond0: (slave bond_slave_1): Releasing backup interface [ 254.891548][T12887] team0: Port device team_slave_0 removed [ 254.907407][T12887] team0: Port device team_slave_1 removed [ 254.920979][T12887] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 254.921155][T12896] team0: Mode changed to "activebackup" [ 254.921434][T12902] vlan0: entered promiscuous mode [ 254.943822][T12902] team0: Port device vlan0 added [ 254.961310][T12904] tipc: Started in network mode [ 254.961345][T12904] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 254.961391][T12904] tipc: Enabled bearer , priority 0 [ 255.079746][T12925] netlink: 'syz.4.3462': attribute type 2 has an invalid length. [ 255.751798][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 255.751813][ T29] audit: type=1326 audit(1789197672.288:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12943 comm="syz.4.3470" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f513b82e159 code=0x0 [ 255.826627][T12957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3474'. [ 256.071667][ T3382] tipc: Node number set to 11578026 [ 256.271115][T12970] netlink: 'syz.3.3480': attribute type 2 has an invalid length. [ 256.311124][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3483'. [ 256.311155][T12976] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3483'. [ 256.311219][T12976] FAULT_INJECTION: forcing a failure. [ 256.311219][T12976] name failslab, interval 1, probability 0, space 0, times 0 [ 256.311325][T12976] CPU: 1 UID: 0 PID: 12976 Comm: syz.5.3483 Not tainted syzkaller #0 PREEMPT(lazy) [ 256.311354][T12976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.311367][T12976] Call Trace: [ 256.311427][T12976] [ 256.311434][T12976] __dump_stack+0x1d/0x30 [ 256.311469][T12976] dump_stack_lvl+0x95/0xd0 [ 256.311495][T12976] dump_stack+0x15/0x1b [ 256.311517][T12976] should_fail_ex+0x262/0x280 [ 256.311552][T12976] ? alloc_netdev_mqs+0x863/0xa90 [ 256.311600][T12976] should_failslab+0x8c/0xb0 [ 256.311633][T12976] __kmalloc_cache_noprof+0x7a/0x400 [ 256.311668][T12976] ? alloc_netdev_mqs+0x863/0xa90 [ 256.311742][T12976] alloc_netdev_mqs+0x863/0xa90 [ 256.311765][T12976] rtnl_create_link+0x239/0x720 [ 256.311793][T12976] rtnl_newlink_create+0x17a/0x4a0 [ 256.311862][T12976] ? security_capable+0x7b/0x90 [ 256.311949][T12976] ? netlink_ns_capable+0x86/0xa0 [ 256.311977][T12976] rtnl_newlink+0x1255/0x1510 [ 256.312010][T12976] ? __memcg_slab_free_hook+0xa6/0x340 [ 256.312118][T12976] ? __kfree_skb+0x109/0x150 [ 256.312148][T12976] ? __memcg_slab_free_hook+0x154/0x340 [ 256.312251][T12976] ? __rcu_read_unlock+0x4e/0x70 [ 256.312281][T12976] ? avc_has_perm_noaudit+0xa3/0x120 [ 256.312308][T12976] ? cred_has_capability+0x224/0x2a0 [ 256.312356][T12976] ? selinux_capable+0x31/0x40 [ 256.312395][T12976] ? security_capable+0x7b/0x90 [ 256.312419][T12976] ? ns_capable+0x80/0xb0 [ 256.312590][T12976] ? __pfx_rtnl_newlink+0x10/0x10 [ 256.312622][T12976] rtnetlink_rcv_msg+0x64b/0x720 [ 256.312655][T12976] netlink_rcv_skb+0x11e/0x220 [ 256.312684][T12976] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 256.312766][T12976] rtnetlink_rcv+0x1c/0x30 [ 256.312789][T12976] netlink_unicast+0x5a9/0x680 [ 256.312821][T12976] netlink_sendmsg+0x5be/0x6f0 [ 256.312866][T12976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.312902][T12976] ____sys_sendmsg+0x532/0x580 [ 256.312930][T12976] ___sys_sendmsg+0x195/0x1e0 [ 256.313027][T12976] __x64_sys_sendmsg+0xd4/0x160 [ 256.313057][T12976] x64_sys_call+0x22ab/0x2550 [ 256.313089][T12976] do_syscall_64+0x112/0x360 [ 256.313148][T12976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.313234][T12976] RIP: 0033:0x7fa3f66fe159 [ 256.313253][T12976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.313274][T12976] RSP: 002b:00007fa3f5157028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.313312][T12976] RAX: ffffffffffffffda RBX: 00007fa3f6985fa0 RCX: 00007fa3f66fe159 [ 256.313385][T12976] RDX: 0000000000048810 RSI: 00002000000000c0 RDI: 0000000000000004 [ 256.313401][T12976] RBP: 00007fa3f679503b R08: 0000000000000000 R09: 0000000000000000 [ 256.313414][T12976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.313474][T12976] R13: 00007fa3f6986038 R14: 00007fa3f6985fa0 R15: 00007ffe1a166ff8 [ 256.313494][T12976] [ 256.394544][ T29] audit: type=1400 audit(1789197672.958:394): avc: denied { getopt } for pid=12983 comm="syz.2.3486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 256.818385][T13007] netlink: 'syz.1.3497': attribute type 10 has an invalid length. [ 256.872208][ T29] audit: type=1400 audit(1789197673.428:395): avc: denied { read write } for pid=13013 comm="syz.4.3501" name="uhid" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 256.872245][ T29] audit: type=1400 audit(1789197673.428:396): avc: denied { open } for pid=13013 comm="syz.4.3501" path="/dev/uhid" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 256.874220][ T3400] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 256.875092][ T3400] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 257.531666][ T29] audit: type=1400 audit(1789197674.038:397): avc: denied { ioctl } for pid=13035 comm="syz.3.3511" path="socket:[39108]" dev="sockfs" ino=39108 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 258.230123][T13076] validate_nla: 3 callbacks suppressed [ 258.230138][T13076] netlink: 'syz.3.3527': attribute type 10 has an invalid length. [ 258.274981][T13080] loop5: detected capacity change from 0 to 2048 [ 258.278498][T13078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3528'. [ 258.282849][T13080] EXT4-fs (loop5): failed to initialize system zone (-117) [ 258.282888][T13080] EXT4-fs (loop5): mount failed [ 258.343036][T13078] netlink: 'syz.1.3528': attribute type 39 has an invalid length. [ 258.365729][T13092] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3533'. [ 258.433806][ T29] audit: type=1400 audit(1789197674.998:398): avc: denied { connect } for pid=13102 comm="syz.2.3537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 258.434671][ T29] audit: type=1400 audit(1789197674.998:399): avc: denied { write } for pid=13102 comm="syz.2.3537" name="icmp6" dev="proc" ino=4026532495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 258.435636][ T29] audit: type=1400 audit(1789197674.998:400): avc: denied { bind } for pid=13102 comm="syz.2.3537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 258.435659][ T29] audit: type=1400 audit(1789197674.998:401): avc: denied { name_bind } for pid=13102 comm="syz.2.3537" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 258.435752][ T29] audit: type=1400 audit(1789197674.998:402): avc: denied { node_bind } for pid=13102 comm="syz.2.3537" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 258.646450][T13110] netlink: 'syz.2.3541': attribute type 10 has an invalid length. [ 259.004746][T13113] netlink: 'syz.2.3542': attribute type 1 has an invalid length. [ 259.023105][T13113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.108788][T13113] bond1: (slave gretap0): making interface the new active one [ 259.116454][T13113] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 259.182259][T13116] netlink: 'syz.3.3543': attribute type 1 has an invalid length. [ 259.182276][T13116] netlink: 'syz.3.3543': attribute type 2 has an invalid length. [ 259.317521][T13119] netlink: 'syz.2.3544': attribute type 2 has an invalid length. [ 259.567859][T13127] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3547'. [ 259.577314][T13125] loop4: detected capacity change from 0 to 2048 [ 259.597820][T13125] EXT4-fs (loop4): failed to initialize system zone (-117) [ 259.597970][T13125] EXT4-fs (loop4): mount failed [ 260.289292][T13150] netlink: 'syz.1.3553': attribute type 4 has an invalid length. [ 260.289311][T13150] netlink: 'syz.1.3553': attribute type 1 has an invalid length. [ 260.289346][T13150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.293671][T13148] netlink: 'syz.3.3552': attribute type 10 has an invalid length. [ 260.691354][T13167] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3559'. [ 260.750315][ T11] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 260.750872][ T11] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 262.540780][ T29] audit: type=1400 audit(1789197679.098:403): avc: denied { getattr } for pid=13184 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.568014][ T29] audit: type=1400 audit(1789197679.108:404): avc: denied { read } for pid=13186 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.568120][ T29] audit: type=1400 audit(1789197679.108:405): avc: denied { open } for pid=13186 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.614849][ T29] audit: type=1400 audit(1789197679.158:406): avc: denied { write } for pid=13183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.614888][ T29] audit: type=1400 audit(1789197679.158:407): avc: denied { create } for pid=13183 comm="dhcpcd-run-hook" name="resolv.conf.eth2.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.614922][ T29] audit: type=1400 audit(1789197679.158:408): avc: denied { write } for pid=13183 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.ipv4ll" dev="tmpfs" ino=14003 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.614954][ T29] audit: type=1400 audit(1789197679.158:409): avc: denied { append } for pid=13183 comm="dhcpcd-run-hook" name="resolv.conf.eth2.ipv4ll" dev="tmpfs" ino=14003 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.615032][ T29] audit: type=1400 audit(1789197679.158:410): avc: denied { write } for pid=13194 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.615057][ T29] audit: type=1400 audit(1789197679.158:411): avc: denied { unlink } for pid=13194 comm="rm" name="resolv.conf.eth2.ipv4ll" dev="tmpfs" ino=14003 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 262.821624][ T29] audit: type=1400 audit(1789197679.378:412): avc: denied { write } for pid=13197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.677702][T13243] vlan2: entered allmulticast mode [ 263.677867][T13243] bridge0: port 3(vlan2) entered blocking state [ 263.677893][T13243] bridge0: port 3(vlan2) entered disabled state [ 263.678402][T13243] vlan2: entered promiscuous mode [ 263.813457][T13253] loop2: detected capacity change from 0 to 4096 [ 263.813965][T13253] EXT4-fs: test_dummy_encryption option not supported [ 264.737206][T13262] validate_nla: 3 callbacks suppressed [ 264.737224][T13262] netlink: 'syz.3.3576': attribute type 1 has an invalid length. [ 264.737240][T13262] netlink: 'syz.3.3576': attribute type 2 has an invalid length. [ 265.026143][T13272] netlink: 'syz.4.3579': attribute type 2 has an invalid length. [ 267.134579][T13305] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.134725][T13305] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.234744][T13315] netlink: 'syz.3.3587': attribute type 10 has an invalid length. [ 267.258921][T13315] syz_tun: entered promiscuous mode [ 267.277860][T13315] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 267.291980][ T491] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.292120][ T491] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.292163][ T491] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.292264][ T491] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.498719][T13325] loop3: detected capacity change from 0 to 512 [ 267.500161][T13325] EXT4-fs: inline encryption not supported [ 267.517187][T13325] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 267.517429][T13325] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3588: invalid indirect mapped block 2683928664 (level 1) [ 267.517458][T13325] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 267.518496][T13325] EXT4-fs (loop3): 1 truncate cleaned up [ 267.519336][T13325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.592480][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 267.592497][ T29] audit: type=1400 audit(1789197684.158:424): avc: denied { write } for pid=13324 comm="syz.3.3588" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.592557][ T29] audit: type=1400 audit(1789197684.158:425): avc: denied { add_name } for pid=13324 comm="syz.3.3588" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.592584][ T29] audit: type=1400 audit(1789197684.158:426): avc: denied { create } for pid=13324 comm="syz.3.3588" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 267.592611][ T29] audit: type=1400 audit(1789197684.158:427): avc: denied { read write } for pid=13324 comm="syz.3.3588" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 267.592715][ T29] audit: type=1400 audit(1789197684.158:428): avc: denied { open } for pid=13324 comm="syz.3.3588" path="/77/file0/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 267.598272][ T29] audit: type=1400 audit(1789197684.158:429): avc: denied { ioctl } for pid=13324 comm="syz.3.3588" path="/77/file0/file0/file0" dev="loop3" ino=13 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 267.598326][T13325] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1803188595: comm syz.3.3588: invalid block [ 267.759652][T11732] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.766242][T13331] netlink: 'syz.5.3592': attribute type 4 has an invalid length. [ 267.766289][T13331] netlink: 'syz.5.3592': attribute type 1 has an invalid length. [ 267.766406][T13331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.821444][T13334] loop1: detected capacity change from 0 to 164 [ 267.851027][ T29] audit: type=1400 audit(1789197684.408:430): avc: denied { mount } for pid=13333 comm="syz.1.3590" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 268.033425][T13345] netlink: 'syz.5.3594': attribute type 1 has an invalid length. [ 268.033514][T13345] netlink: 'syz.5.3594': attribute type 2 has an invalid length. [ 268.184998][T13346] rock: directory entry would overflow storage [ 268.185030][T13346] rock: sig=0x4f50, size=4, remaining=3 [ 268.185056][T13346] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 268.739253][ T29] audit: type=1400 audit(1789197685.298:431): avc: denied { unmount } for pid=11248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 268.770989][ T29] audit: type=1400 audit(1789197685.328:432): avc: denied { read } for pid=13360 comm="syz.4.3601" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 268.796968][ T29] audit: type=1400 audit(1789197685.368:433): avc: denied { create } for pid=13353 comm="syz.2.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 268.852811][T13367] netlink: 'syz.3.3603': attribute type 2 has an invalid length. [ 268.858441][T13374] loop1: detected capacity change from 0 to 164 [ 268.984272][T13385] loop5: detected capacity change from 0 to 128 [ 268.992689][T13385] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 268.992851][T13385] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 269.006304][T13385] FAULT_INJECTION: forcing a failure. [ 269.006304][T13385] name failslab, interval 1, probability 0, space 0, times 0 [ 269.006336][T13385] CPU: 0 UID: 0 PID: 13385 Comm: syz.5.3609 Not tainted syzkaller #0 PREEMPT(lazy) [ 269.006413][T13385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.006428][T13385] Call Trace: [ 269.006436][T13385] [ 269.006445][T13385] __dump_stack+0x1d/0x30 [ 269.006474][T13385] dump_stack_lvl+0x95/0xd0 [ 269.006499][T13385] dump_stack+0x15/0x1b [ 269.006600][T13385] should_fail_ex+0x262/0x280 [ 269.006628][T13385] ? ext4_find_extent+0x17f/0x7a0 [ 269.006663][T13385] should_failslab+0x8c/0xb0 [ 269.006697][T13385] __kmalloc_noprof+0xd0/0x4d0 [ 269.006749][T13385] ? ext4_find_extent+0x17f/0x7a0 [ 269.006790][T13385] ext4_find_extent+0x17f/0x7a0 [ 269.006829][T13385] ext4_ext_map_blocks+0x10b/0x2f40 [ 269.006906][T13385] ext4_map_create_blocks+0xd1/0x390 [ 269.006941][T13385] ext4_map_blocks+0x57f/0x9a0 [ 269.006969][T13385] _ext4_get_block+0x117/0x370 [ 269.007034][T13385] ext4_get_block+0x39/0x50 [ 269.007056][T13385] ext4_block_write_begin+0x695/0xcb0 [ 269.007089][T13385] ? __pfx_ext4_get_block+0x10/0x10 [ 269.007113][T13385] ? folio_mapping+0xb9/0xe0 [ 269.007193][T13385] ext4_write_begin+0x657/0xeb0 [ 269.007302][T13385] generic_perform_write+0x186/0x490 [ 269.007337][T13385] ext4_buffered_write_iter+0x2e3/0x480 [ 269.007369][T13385] ext4_file_write_iter+0x36e/0x1020 [ 269.007413][T13385] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 269.007439][T13385] ? hrtimer_start_range_ns+0x108/0x120 [ 269.007462][T13385] ? _raw_spin_unlock+0x9/0x30 [ 269.007484][T13385] ? finish_task_switch+0x121/0x340 [ 269.007573][T13385] ? avc_policy_seqno+0x15/0x30 [ 269.007599][T13385] ? selinux_file_permission+0x1dc/0x310 [ 269.007669][T13385] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 269.007698][T13385] vfs_write+0x57f/0x9a0 [ 269.007734][T13385] __x64_sys_pwrite64+0xfd/0x150 [ 269.007815][T13385] x64_sys_call+0x23be/0x2550 [ 269.007844][T13385] do_syscall_64+0x112/0x360 [ 269.007881][T13385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.007921][T13385] RIP: 0033:0x7fa3f66fe159 [ 269.007938][T13385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.007960][T13385] RSP: 002b:00007fa3f5157028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 269.007983][T13385] RAX: ffffffffffffffda RBX: 00007fa3f6985fa0 RCX: 00007fa3f66fe159 [ 269.007999][T13385] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000004 [ 269.008014][T13385] RBP: 00007fa3f679503b R08: 0000000000000000 R09: 0000000000000000 [ 269.008066][T13385] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 269.008081][T13385] R13: 00007fa3f6986038 R14: 00007fa3f6985fa0 R15: 00007ffe1a166ff8 [ 269.008104][T13385] [ 269.041352][T12157] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 269.464601][T13359] Process accounting resumed [ 269.527096][T13407] netlink: 'syz.4.3617': attribute type 1 has an invalid length. [ 269.783469][T13434] loop1: detected capacity change from 0 to 512 [ 269.783936][T13434] EXT4-fs: Ignoring removed orlov option [ 269.788518][T13434] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 269.807711][T13432] validate_nla: 1 callbacks suppressed [ 269.807755][T13432] netlink: 'syz.3.3626': attribute type 2 has an invalid length. [ 269.998828][T13449] loop1: detected capacity change from 0 to 1024 [ 270.018192][T13449] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 270.018753][T13449] JBD2: no valid journal superblock found [ 270.018764][T13449] EXT4-fs (loop1): Could not load journal inode [ 270.136852][T13455] loop3: detected capacity change from 0 to 2048 [ 270.165405][T13455] EXT4-fs (loop3): failed to initialize system zone (-117) [ 270.165503][T13455] EXT4-fs (loop3): mount failed [ 271.329856][T13482] netlink: 'syz.2.3641': attribute type 2 has an invalid length. [ 271.578999][T13496] loop2: detected capacity change from 0 to 2048 [ 271.595311][T13496] EXT4-fs (loop2): failed to initialize system zone (-117) [ 271.595341][T13496] EXT4-fs (loop2): mount failed [ 271.785944][T13507] device-mapper: ioctl: Unable to rename non-existent device, to [ 271.952128][ T42] IPVS: starting estimator thread 0... [ 272.052376][T13517] IPVS: using max 2304 ests per chain, 115200 per kthread [ 272.131951][T13525] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3655'. [ 272.156678][T13525] netlink: 'syz.3.3655': attribute type 2 has an invalid length. [ 272.366614][T13533] loop3: detected capacity change from 0 to 2048 [ 272.409407][T13533] EXT4-fs (loop3): failed to initialize system zone (-117) [ 272.409445][T13533] EXT4-fs (loop3): mount failed [ 273.301680][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 273.301696][ T29] audit: type=1400 audit(1789197689.728:456): avc: denied { ioctl } for pid=13538 comm="syz.5.3661" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 273.606407][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3671'. [ 273.632859][T13573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3672'. [ 273.669543][T13573] netlink: 'syz.2.3672': attribute type 39 has an invalid length. [ 273.709236][T13582] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 273.780340][T13590] netlink: 'syz.2.3680': attribute type 29 has an invalid length. [ 273.780358][T13590] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3680'. [ 273.782109][T13590] netlink: 'syz.2.3680': attribute type 29 has an invalid length. [ 273.782164][T13590] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3680'. [ 273.790083][T13590] netlink: 'syz.2.3680': attribute type 29 has an invalid length. [ 273.790100][T13590] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3680'. [ 274.960260][T13626] loop2: detected capacity change from 0 to 512 [ 274.965339][T13626] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 274.965376][T13626] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 274.967813][T13626] EXT4-fs (loop2): 1 truncate cleaned up [ 274.968581][T13626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.111704][ T29] audit: type=1400 audit(1789197691.648:457): avc: denied { write } for pid=13625 comm="syz.2.3693" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 275.111736][ T29] audit: type=1400 audit(1789197691.648:458): avc: denied { append } for pid=13625 comm="syz.2.3693" path="/150/bus/blkio.bfq.io_merged_recursive" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 275.718485][T13636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3691'. [ 275.745549][T13619] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.745741][T13619] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.792857][T13633] netlink: 'syz.3.3691': attribute type 39 has an invalid length. [ 276.441661][ T29] audit: type=1400 audit(1789197692.998:459): avc: denied { read } for pid=13637 comm="syz.1.3695" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 276.441690][ T29] audit: type=1400 audit(1789197692.998:460): avc: denied { open } for pid=13637 comm="syz.1.3695" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 276.646291][T13619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.665614][T13619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.872788][T13628] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 276.872869][ T3794] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.873538][ T3788] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.873578][ T3788] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.873610][ T3788] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.874272][T13628] EXT4-fs (loop2): Remounting filesystem read-only [ 276.940873][T11476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.231231][T13657] netlink: 'syz.3.3702': attribute type 6 has an invalid length. [ 278.227029][ T29] audit: type=1400 audit(1789197694.788:461): avc: denied { sqpoll } for pid=13683 comm="syz.3.3713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 278.252993][T13686] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3712'. [ 278.285554][T13686] netlink: 'syz.2.3712': attribute type 39 has an invalid length. [ 278.313206][ T29] audit: type=1400 audit(1789197694.878:462): avc: denied { mount } for pid=13691 comm="syz.1.3716" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 278.313753][T13692] Cannot find set identified by id 0 to match [ 278.387121][ T29] audit: type=1400 audit(1789197694.948:463): avc: denied { mount } for pid=13691 comm="syz.1.3716" name="/" dev="ramfs" ino=41033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 278.675254][ T29] audit: type=1400 audit(1789197695.238:464): avc: denied { setopt } for pid=13683 comm="syz.3.3713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 278.704566][T13698] loop3: detected capacity change from 0 to 1024 [ 278.716949][T13698] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 278.737918][T13698] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.3713: lblock 2 mapped to illegal pblock 2 (length 1) [ 278.737958][T13698] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 278.738097][T13698] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 278.738114][T13698] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.3713: lblock 0 mapped to illegal pblock 48 (length 1) [ 278.738165][T13698] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 278.738222][T13698] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 278.738237][T13698] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.3713: Failed to acquire dquot type 0 [ 278.738266][T13698] loop3: lost filesystem error report for type 5 error -117 [ 278.738354][T13698] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 278.738371][T13698] loop3: lost filesystem error report for type 5 error -117 [ 278.738470][T13698] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.3713: mark_inode_dirty error [ 278.738568][T13698] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 278.738636][T13698] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 278.738696][T13698] EXT4-fs (loop3): 1 orphan inode deleted [ 278.739193][T13698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.812052][ T3794] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 278.812261][ T3794] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 278.812280][ T3794] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:20: Failed to release dquot type 0 [ 278.954058][ T29] audit: type=1400 audit(1789197695.518:465): avc: denied { getopt } for pid=13703 comm="syz.5.3718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 279.055405][ T29] audit: type=1400 audit(1789197695.608:466): avc: denied { allowed } for pid=13707 comm="syz.2.3719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 280.032600][T13722] loop5: detected capacity change from 0 to 512 [ 280.039562][T13722] EXT4-fs (loop5): 1 truncate cleaned up [ 280.040663][T13722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.249170][ T29] audit: type=1400 audit(1789197696.808:467): avc: denied { unmount } for pid=11248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 280.302874][T12157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.352113][ T29] audit: type=1400 audit(1789197696.908:468): avc: denied { mount } for pid=13732 comm="syz.1.3726" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 280.480377][T13740] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3729'. [ 280.509596][T13740] netlink: 'syz.5.3729': attribute type 39 has an invalid length. [ 281.078899][T13757] xt_NFQUEUE: number of total queues is 0 [ 281.148984][T11732] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.149463][T11732] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 281.149522][T11732] loop3: lost filesystem error report for type 5 error -117 [ 281.149583][T11732] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 281.149599][T11732] loop3: lost filesystem error report for type 5 error -117 [ 281.149776][T11732] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 281.149877][T11732] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 281.150037][T11732] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 281.150061][T11732] loop3: lost filesystem error report for type 5 error -117 [ 281.326968][T13763] loop3: detected capacity change from 0 to 512 [ 281.346287][T13763] EXT4-fs (loop3): 1 truncate cleaned up [ 281.346656][T13763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.502624][T11732] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.201183][T13784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3744'. [ 282.270793][T13788] netlink: 'syz.3.3744': attribute type 39 has an invalid length. [ 282.911063][T13803] loop4: detected capacity change from 0 to 512 [ 282.925080][T13808] loop3: detected capacity change from 0 to 512 [ 282.925390][T13808] EXT4-fs: inline encryption not supported [ 282.930336][T13808] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 282.930534][T13808] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3751: invalid indirect mapped block 2683928664 (level 1) [ 282.930638][T13808] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 282.935662][T13808] EXT4-fs (loop3): 1 truncate cleaned up [ 282.936063][T13808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.975129][T13803] EXT4-fs (loop4): 1 truncate cleaned up [ 282.975529][T13803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.982287][T11732] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.097145][T12049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.419336][T13837] loop5: detected capacity change from 0 to 512 [ 283.421559][T13837] EXT4-fs: inline encryption not supported [ 283.461215][T13837] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 283.462030][T13837] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3762: invalid indirect mapped block 2683928664 (level 1) [ 283.462072][T13837] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 283.484202][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 283.484228][ C1] EXT4-fs (loop5): initial error at time 1789197700: ext4_free_branches:1023: inode 13 [ 283.484267][ C1] EXT4-fs (loop5): last error at time 1789197700: ext4_free_branches:1023: inode 13 [ 283.484568][T13837] EXT4-fs (loop5): 1 truncate cleaned up [ 283.484942][T13837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.500755][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 283.500771][ T29] audit: type=1400 audit(1789197700.068:471): avc: denied { write } for pid=13834 comm="syz.5.3762" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.521917][T12157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.707335][T13852] loop2: detected capacity change from 0 to 128 [ 283.753383][T13852] loop2: detected capacity change from 0 to 512 [ 283.776046][T13852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.776309][T13852] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.779170][ T29] audit: type=1400 audit(1789197700.338:472): avc: denied { write } for pid=13847 comm="syz.2.3768" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.779656][ T29] audit: type=1400 audit(1789197700.338:473): avc: denied { append } for pid=13847 comm="syz.2.3768" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 284.119526][T11476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.137831][T13866] Cannot find set identified by id 0 to match [ 284.512423][ T29] audit: type=1400 audit(1789197701.078:474): avc: denied { sqpoll } for pid=13870 comm="syz.5.3774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 284.563329][T13874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3775'. [ 284.595085][T13874] netlink: 'syz.2.3775': attribute type 39 has an invalid length. [ 284.784732][T13880] loop3: detected capacity change from 0 to 512 [ 284.839320][T13880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.839387][T13880] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.841171][ T29] audit: type=1400 audit(1789197701.398:475): avc: denied { write } for pid=13879 comm="syz.3.3778" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 284.935851][T11732] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.118077][T13895] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3782'. [ 285.275679][T13895] loop4: detected capacity change from 0 to 512 [ 285.298441][T13895] ext4: Unknown parameter 'permit_directio' [ 285.813260][T13913] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3789'. [ 285.832616][T13913] netlink: 'syz.2.3789': attribute type 39 has an invalid length. [ 285.934060][ T29] audit: type=1400 audit(1789197702.498:476): avc: denied { firmware_load } for pid=13914 comm="syz.1.3790" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 286.246401][T13933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3797'. [ 286.246492][T13933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3797'. [ 286.476713][T13933] loop5: detected capacity change from 0 to 512 [ 286.508457][T13933] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 286.522397][T13933] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.3797: bad orphan inode 131083 [ 286.522454][T13933] loop5: lost filesystem error report for type 5 error -117 [ 286.532070][T13933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.546961][T13933] EXT4-fs error (device loop5): ext4_readdir:280: inode #2: block 13: comm syz.5.3797: path /87/file1: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 286.552449][T13933] netlink: 'syz.5.3797': attribute type 21 has an invalid length. [ 287.424268][T13950] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3802'. [ 287.444222][T13950] netlink: 'syz.1.3802': attribute type 39 has an invalid length. [ 287.871312][T13918] xt_NFQUEUE: number of total queues is 0 [ 287.942721][T12157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.074513][T13972] loop2: detected capacity change from 0 to 164 [ 288.261863][T13976] rock: directory entry would overflow storage [ 288.261877][T13976] rock: sig=0x4f50, size=4, remaining=3 [ 288.261894][T13976] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 288.328925][T13982] netlink: 'syz.5.3813': attribute type 1 has an invalid length. [ 288.328977][T13982] netlink: 'syz.5.3813': attribute type 2 has an invalid length. [ 288.598407][T13990] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3814'. [ 288.625981][T13992] Cannot find set identified by id 0 to match [ 288.647118][T13993] loop3: detected capacity change from 0 to 128 [ 288.732520][T13993] loop3: detected capacity change from 0 to 512 [ 288.760095][T13993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.760496][T13993] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.795147][ T29] audit: type=1400 audit(1789197705.358:477): avc: denied { write } for pid=13987 comm="syz.3.3816" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.801474][T13990] loop5: detected capacity change from 0 to 512 [ 288.810836][T13990] ext4: Unknown parameter 'permit_directio' [ 289.074257][T11732] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.116140][T14001] loop2: detected capacity change from 0 to 512 [ 289.133770][T14001] EXT4-fs (loop2): 1 truncate cleaned up [ 289.134351][T14001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.018869][T11476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.161784][T14018] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3823'. [ 291.167920][T14017] netlink: 'syz.1.3824': attribute type 1 has an invalid length. [ 291.167937][T14017] netlink: 'syz.1.3824': attribute type 2 has an invalid length. [ 291.201326][T14019] loop2: detected capacity change from 0 to 128 [ 291.297681][T14013] loop2: detected capacity change from 0 to 512 [ 291.344621][T14013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.344917][T14013] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.416272][ T29] audit: type=1400 audit(1789197707.978:478): avc: denied { write } for pid=14011 comm="syz.2.3822" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 291.499490][T11476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.545791][T14035] loop3: detected capacity change from 0 to 164 [ 291.639196][ T29] audit: type=1400 audit(1789197708.198:479): avc: denied { create } for pid=14027 comm="syz.5.3826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 291.665818][T14031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.666868][T14031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.722721][T14042] loop4: detected capacity change from 0 to 164 [ 291.834857][T14043] rock: directory entry would overflow storage [ 291.834888][T14043] rock: sig=0x4f50, size=4, remaining=3 [ 291.834906][T14043] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 291.912407][T14045] rock: directory entry would overflow storage [ 291.912420][T14045] rock: sig=0x4f50, size=4, remaining=3 [ 291.912435][T14045] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 292.132044][T14051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.133295][T14051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.633887][T14062] netlink: 'syz.4.3837': attribute type 10 has an invalid length. [ 292.633912][T14062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.634020][T14062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.635837][T14062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.635851][T14062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.745853][T14059] loop2: detected capacity change from 0 to 512 [ 293.125593][T14079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.125788][T14079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.258908][T14086] loop4: detected capacity change from 0 to 164 [ 293.305155][T14088] loop2: detected capacity change from 0 to 164 [ 293.749608][T14091] rock: directory entry would overflow storage [ 293.749622][T14091] rock: sig=0x4f50, size=4, remaining=3 [ 293.749651][T14091] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 293.750150][T14090] rock: directory entry would overflow storage [ 293.750216][T14090] rock: sig=0x4f50, size=4, remaining=3 [ 293.750228][T14090] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 294.761476][T14111] xt_NFQUEUE: number of total queues is 0 [ 295.234032][T14122] loop2: detected capacity change from 0 to 512 [ 295.252155][T14122] EXT4-fs (loop2): 1 truncate cleaned up [ 295.252839][T14122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.308751][T14129] loop4: detected capacity change from 0 to 164 [ 295.346479][T11476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.362334][T14131] loop2: detected capacity change from 0 to 164 [ 295.606159][T14133] rock: directory entry would overflow storage [ 295.606174][T14133] rock: sig=0x4f50, size=4, remaining=3 [ 295.606188][T14133] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 295.844088][T14135] rock: directory entry would overflow storage [ 295.844103][T14135] rock: sig=0x4f50, size=4, remaining=3 [ 295.844116][T14135] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 295.934110][T14137] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3860'. [ 296.138339][ T29] audit: type=1400 audit(1789197712.698:480): avc: denied { setopt } for pid=14146 comm="syz.3.3864" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 296.157373][T14149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.159835][T14149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.351406][T14151] loop5: detected capacity change from 0 to 128 [ 296.518593][T14162] loop3: detected capacity change from 0 to 128 [ 296.608164][T14162] loop3: detected capacity change from 0 to 512 [ 296.742993][T14162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.743133][T14162] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.822830][ T29] audit: type=1400 audit(1789197713.388:481): avc: denied { write } for pid=14156 comm="syz.3.3869" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 296.952957][T11732] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.213126][T14176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3872'. [ 297.220826][T14176] netlink: 'syz.2.3872': attribute type 39 has an invalid length. [ 297.311191][T14180] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3873'. [ 297.557779][T14188] loop5: detected capacity change from 0 to 164 [ 297.674239][T14188] rock: directory entry would overflow storage [ 297.674252][T14188] rock: sig=0x4f50, size=4, remaining=3 [ 297.674286][T14188] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 297.684240][T14186] tipc: Resetting bearer [ 298.072116][ T491] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.072178][ T491] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.072233][ T491] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.072343][ T491] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.356176][ T29] audit: type=1400 audit(1789197714.918:482): avc: denied { write } for pid=14204 comm="syz.2.3881" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 298.386482][T14205] usb usb8: usbfs: process 14205 (syz.2.3881) did not claim interface 0 before use [ 298.406852][T14202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.407004][T14202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.550130][T14210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3883'. [ 298.563008][T14210] netlink: 'syz.2.3883': attribute type 39 has an invalid length. [ 298.630000][T14214] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3885'. [ 298.656250][T14218] xt_NFQUEUE: number of total queues is 0 [ 299.542727][T14239] loop2: detected capacity change from 0 to 512 [ 299.549702][T14241] loop5: detected capacity change from 0 to 164 [ 299.659046][T14241] rock: directory entry would overflow storage [ 299.659060][T14241] rock: sig=0x4f50, size=4, remaining=3 [ 299.659075][T14241] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 299.735743][T14239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.735810][T14239] ext4 filesystem being mounted at /204/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.752855][T14249] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3897'. [ 299.756340][T14249] netlink: 'syz.5.3897': attribute type 39 has an invalid length. [ 299.766121][ T29] audit: type=1400 audit(1789197716.328:483): avc: denied { write } for pid=14238 comm="syz.2.3894" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.770588][ T29] audit: type=1400 audit(1789197716.328:484): avc: denied { write } for pid=14238 comm="syz.2.3894" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.797001][T11476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.346530][T14265] loop5: detected capacity change from 0 to 128 [ 300.447045][T14270] Cannot find set identified by id 0 to match [ 300.644563][T14274] loop3: detected capacity change from 0 to 512 [ 300.659975][T14274] EXT4-fs (loop3): 1 truncate cleaned up [ 300.660370][T14274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.956860][T11732] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.021964][T14286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3909'. [ 301.113679][T14290] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3912'. [ 301.134903][T14290] netlink: 'syz.3.3912': attribute type 39 has an invalid length. [ 301.210839][T14293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3913'. [ 301.322944][T14300] loop2: detected capacity change from 0 to 164 [ 301.341130][T14300] rock: directory entry would overflow storage [ 301.341141][T14300] rock: sig=0x4f50, size=4, remaining=3 [ 301.341158][T14300] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 301.448046][T14311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.449179][T14311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.496846][T14315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3922'. [ 301.497981][T14317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3923'. [ 301.525030][T14317] netlink: 'syz.3.3923': attribute type 39 has an invalid length. [ 301.536687][T14319] loop2: detected capacity change from 0 to 512 [ 301.549524][T14319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.549597][T14319] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.553812][ T29] audit: type=1400 audit(1789197718.118:485): avc: denied { write } for pid=14318 comm="syz.2.3924" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 301.556164][ T29] audit: type=1400 audit(1789197718.118:486): avc: denied { write } for pid=14318 comm="syz.2.3924" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 301.579165][T11476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.667948][T14333] Cannot find set identified by id 0 to match [ 301.823290][T14340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.823390][T14340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.934909][T14342] loop5: detected capacity change from 0 to 164 [ 301.950397][T14342] rock: directory entry would overflow storage [ 301.950409][T14342] rock: sig=0x4f50, size=4, remaining=3 [ 301.950431][T14342] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 302.022333][T14346] loop5: detected capacity change from 0 to 512 [ 302.042494][T14346] EXT4-fs (loop5): 1 truncate cleaned up [ 302.042960][T14346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.089354][T12157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.192820][T14351] loop5: detected capacity change from 0 to 512 [ 302.238941][T14351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.239136][T14351] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.249187][ T29] audit: type=1400 audit(1789197718.808:487): avc: denied { write } for pid=14349 comm="syz.5.3933" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 302.544108][T14358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3935'. [ 302.561308][T12157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.626473][T14364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3938'. [ 302.693221][T14369] netlink: 'syz.1.3938': attribute type 39 has an invalid length. [ 304.647785][T14425] loop2: detected capacity change from 0 to 512 [ 304.669758][T14425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.669814][T14425] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 304.708762][ T29] audit: type=1400 audit(1789197721.268:488): avc: denied { write } for pid=14424 comm="syz.2.3961" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 304.836138][T11476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.276787][T14447] loop4: detected capacity change from 0 to 512 [ 305.289856][T14447] EXT4-fs (loop4): 1 truncate cleaned up [ 305.290329][T14447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.391051][T14450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.391186][T14450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.556065][T12049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.588055][T14458] loop4: detected capacity change from 0 to 512 [ 306.073512][T14458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.073570][T14458] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.076049][ T29] audit: type=1400 audit(1789197722.638:489): avc: denied { write } for pid=14457 comm="syz.4.3971" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 306.127138][T12049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.165701][T14473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.165994][T14473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.191416][T14467] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.191702][T14467] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.301645][ T3790] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.301723][ T3790] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.302054][ T3790] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.302150][ T3790] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.950222][T14492] loop4: detected capacity change from 0 to 8192 [ 306.951179][T14492] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 306.952344][T14490] loop2: detected capacity change from 0 to 512 [ 306.981472][T14490] EXT4-fs (loop2): 1 truncate cleaned up [ 306.982051][T14490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.015469][ T29] audit: type=1400 audit(1789197723.578:490): avc: denied { watch watch_reads } for pid=14491 comm="syz.4.3982" path="/101/file1" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 307.065729][T11476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.363333][ T29] audit: type=1400 audit(1789197723.928:491): avc: denied { connect } for pid=14505 comm="syz.5.3986" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 308.081987][T14520] loop2: detected capacity change from 0 to 512 [ 308.088309][T14520] EXT4-fs (loop2): 1 truncate cleaned up [ 308.089013][T14520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.180740][T11476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.182471][T14527] loop3: detected capacity change from 0 to 164 [ 308.366141][T14533] loop2: detected capacity change from 0 to 512 [ 308.376675][T14537] netlink: 'syz.4.3998': attribute type 1 has an invalid length. [ 308.376693][T14537] netlink: 'syz.4.3998': attribute type 2 has an invalid length. [ 308.378644][T14533] EXT4-fs (loop2): 1 truncate cleaned up [ 308.379053][T14533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.459819][T11476] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.459898][T14540] loop5: detected capacity change from 0 to 8192 [ 308.462875][T14540] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 308.479639][T14544] rock: directory entry would overflow storage [ 308.479650][T14544] rock: sig=0x4f50, size=4, remaining=3 [ 308.479664][T14544] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 309.230924][T14563] netlink: 'syz.2.4005': attribute type 10 has an invalid length. [ 309.238897][T14566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.238992][T14566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.679483][T14575] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.679695][T14575] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.876556][T14580] loop3: detected capacity change from 0 to 512 [ 309.897259][T14580] EXT4-fs (loop3): 1 truncate cleaned up [ 309.897631][T14580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.951881][ T3782] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.952214][ T3782] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.952305][ T3782] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.952391][ T3782] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.652917][T11732] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.793223][T14596] loop3: detected capacity change from 0 to 164 [ 310.909249][T14601] loop2: detected capacity change from 0 to 164 [ 311.031713][T14605] rock: directory entry would overflow storage [ 311.031726][T14605] rock: sig=0x4f50, size=4, remaining=3 [ 311.031742][T14605] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 311.144419][T14608] rock: directory entry would overflow storage [ 311.144454][T14608] rock: sig=0x4f50, size=4, remaining=3 [ 311.144470][T14608] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 311.355726][T14602] ================================================================== [ 311.355760][T14602] BUG: KCSAN: data-race in probe_sched_switch / tracing_stop_cmdline_record [ 311.355798][T14602] [ 311.355804][T14602] read-write to 0xffffffff895f91e0 of 4 bytes by task 14611 on cpu 1: [ 311.355821][T14602] tracing_stop_cmdline_record+0x28/0xc0 [ 311.355851][T14602] __ftrace_event_enable_disable+0x323/0x4b0 [ 311.355885][T14602] ftrace_event_set_open+0xe6/0x200 [ 311.355907][T14602] do_dentry_open+0x49f/0xa60 [ 311.355926][T14602] vfs_open+0x37/0x1e0 [ 311.355943][T14602] path_openat+0xc01/0x10d0 [ 311.355968][T14602] do_file_open+0x16c/0x290 [ 311.355992][T14602] do_sys_openat2+0xa0/0x130 [ 311.356012][T14602] __x64_sys_openat+0xf2/0x120 [ 311.356031][T14602] x64_sys_call+0x1f72/0x2550 [ 311.356055][T14602] do_syscall_64+0x112/0x360 [ 311.356083][T14602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.356103][T14602] [ 311.356108][T14602] read to 0xffffffff895f91e0 of 4 bytes by task 14602 on cpu 0: [ 311.356125][T14602] probe_sched_switch+0x46/0xa0 [ 311.356141][T14602] __schedule+0xc34/0xd20 [ 311.356159][T14602] preempt_schedule_common+0x12/0x40 [ 311.356178][T14602] preempt_schedule_thunk+0x16/0x40 [ 311.356206][T14602] _raw_spin_unlock_irqrestore+0x27/0x30 [ 311.356225][T14602] __unix_dgram_recvmsg+0x3a4/0x860 [ 311.356246][T14602] unix_dgram_recvmsg+0x7e/0x90 [ 311.356268][T14602] sock_recvmsg_nosec+0xc2/0xf0 [ 311.356292][T14602] ____sys_recvmsg+0x26f/0x280 [ 311.356310][T14602] ___sys_recvmsg+0x11f/0x3a0 [ 311.356328][T14602] do_recvmmsg+0x1e5/0x560 [ 311.356346][T14602] __x64_sys_recvmmsg+0xe5/0x170 [ 311.356365][T14602] x64_sys_call+0x77f/0x2550 [ 311.356388][T14602] do_syscall_64+0x112/0x360 [ 311.356415][T14602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.356435][T14602] [ 311.356438][T14602] value changed: 0x00000001 -> 0x00000000 [ 311.356449][T14602] [ 311.356452][T14602] Reported by Kernel Concurrency Sanitizer on: [ 311.356463][T14602] CPU: 0 UID: 0 PID: 14602 Comm: syz.3.4016 Not tainted syzkaller #0 PREEMPT(lazy) [ 311.356493][T14602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.356505][T14602] ================================================================== [ 311.364362][T14611] loop4: detected capacity change from 0 to 1024 [ 311.373710][T14611] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 311.388348][T14611] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.4020: lblock 2 mapped to illegal pblock 2 (length 1) [ 311.388387][T14611] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 311.388571][T14611] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 311.388591][T14611] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 48: comm syz.4.4020: lblock 0 mapped to illegal pblock 48 (length 1) [ 311.388699][T14611] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 311.388828][T14611] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 311.388851][T14611] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.4020: Failed to acquire dquot type 0 [ 311.388875][T14611] loop4: lost filesystem error report for type 5 error -117 [ 311.388972][T14611] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 311.388992][T14611] loop4: lost filesystem error report for type 5 error -117 [ 311.389113][T14611] EXT4-fs error (device loop4): ext4_evict_inode:269: inode #11: comm syz.4.4020: mark_inode_dirty error [ 311.389139][T14611] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 311.389296][T14611] EXT4-fs warning (device loop4): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 311.389415][T14611] EXT4-fs (loop4): 1 orphan inode deleted [ 311.390061][T14611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.401652][ T3788] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 311.401842][ T3788] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 311.401938][ T3788] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:17: Failed to release dquot type 0 [ 312.029436][T12049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.029806][T12049] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 312.029831][T12049] loop4: lost filesystem error report for type 5 error -117 [ 312.029906][T12049] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 312.029922][T12049] loop4: lost filesystem error report for type 5 error -117 [ 312.029971][T12049] EXT4-fs error (device loop4): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 312.029993][T12049] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 312.030086][T12049] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 312.030109][T12049] loop4: lost filesystem error report for type 5 error -117 [ 315.903303][ T3794] bridge_slave_1: left allmulticast mode [ 315.903334][ T3794] bridge_slave_1: left promiscuous mode [ 315.903404][ T3794] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.904011][ T3794] bridge_slave_0: left allmulticast mode [ 315.904022][ T3794] bridge_slave_0: left promiscuous mode [ 315.904177][ T3794] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.975133][ T3794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.976108][ T3794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.976716][ T3794] bond0 (unregistering): Released all slaves [ 315.979092][ T3382] syz0: Port: 1 Link DOWN [ 316.015346][ T3794] hsr_slave_0: left promiscuous mode [ 316.015645][ T3794] hsr_slave_1: left promiscuous mode [ 316.016085][ T3794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.016095][ T3794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.016333][ T3794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.016348][ T3794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.018890][ T3794] veth1_macvtap: left promiscuous mode [ 316.018925][ T3794] veth0_macvtap: left promiscuous mode [ 316.018948][ T3794] veth1_vlan: left promiscuous mode [ 316.018986][ T3794] veth0_vlan: left promiscuous mode [ 316.089245][ T3794] team0 (unregistering): Port device team_slave_1 removed [ 316.091413][ T3794] team0 (unregistering): Port device team_slave_0 removed