last executing test programs: 1m4.820495683s ago: executing program 2 (id=3): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xa4852bf90cc84669) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="01eeff00", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fcdbdf252700000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x8) (async) sendmsg$nl_generic(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000003c000100fcff0700040000000100000004004880400001"], 0x64}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async, rerun: 64) r4 = dup(r2) (rerun: 64) geteuid() (async) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x9) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)='\v&', 0x2}], 0x1}}], 0x1, 0x1) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x8001, 0x2d, 0x0, 0x91b}, {0xff, 0x4, 0xff, 0x1ff}, {0x61de, 0xf, 0x2, 0x1}]}, 0x10) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) (async) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x3c020000) (async, rerun: 32) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060088"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (rerun: 32) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x5290c0, 0x0) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00022dbd7400fedbdf25020000003c000680060001000a000000060005004e21000005000200060000000800060001000000060001000a0000000800060010000000080003000a0101020800030002000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r12 = socket$kcm(0x2, 0xa, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r13) 1m4.640927599s ago: executing program 2 (id=15): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x22042, 0xfc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) socket$inet6(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x3a) 1m3.205740923s ago: executing program 2 (id=20): r0 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32], 0xff, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") mknod$loop(&(0x7f00000003c0)='./file0\x00', 0xfff, 0x0) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r4 = socket(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2203, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='!', 0x1}], 0x1}, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x21140200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) faccessat(r0, &(0x7f0000000400)='./file0\x00', 0x40) ioctl$TUNGETVNETLE(r5, 0xc008744c, &(0x7f0000000180)) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r4, 0x0, 0x0, 0xfffffd49, 0x20044080, 0x1}) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000080)={[{@minixdf}, {@nobarrier}, {@norecovery}, {@noinit_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x6, 0xfff) 1m3.034733561s ago: executing program 2 (id=23): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000000ac0)="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"/472, 0x1d8}, {&(0x7f0000000e40)="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", 0x224}, {&(0x7f0000000840)="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", 0x13f}, {&(0x7f00000001c0)="f39a9e8346ddfd46f5ba7fbc251c8dc80c42d5501285b1bc305d7f699524d78bca1a151bfd74ca3d4f468f1244e6951083a7e19dec00"/64, 0x40}, {&(0x7f0000000240)="12dfbd793db81fe455d97618c2aedf67f1b166ec59876a1fbbe13986e69655d6f600262371ef8dae091786d7f9a5d7ca234f8852df8f05000f02b5258ec56ec5fdd5f3c2", 0x44}, {&(0x7f0000000180)="30c8efd9bd233c1c7c12a97e", 0xc}], 0x6, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) 1m2.025685104s ago: executing program 2 (id=28): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x57, 0xd1c, 0xfffb, {0x802, 0x1}, {0x5b, 0x2}, @cond=[{0x1f7, 0x0, 0x6f5, 0x4, 0x5, 0xfffe}, {0xffff, 0x9, 0x1, 0x46, 0x8, 0xfd}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r1, 0xfff, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r2, &(0x7f0000002c80)=[{{&(0x7f0000000940)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="00dd41dc115d27cf850a782da28375b561df298712d56b", 0x2}], 0x1}}, {{&(0x7f0000000c40)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d80), 0x30}}], 0x2, 0x41) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0x2, 0x3, 0x3, 0x0, 0x87}) 1m1.846449041s ago: executing program 32 (id=28): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x57, 0xd1c, 0xfffb, {0x802, 0x1}, {0x5b, 0x2}, @cond=[{0x1f7, 0x0, 0x6f5, 0x4, 0x5, 0xfffe}, {0xffff, 0x9, 0x1, 0x46, 0x8, 0xfd}]}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r1, 0xfff, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r2, &(0x7f0000002c80)=[{{&(0x7f0000000940)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="00dd41dc115d27cf850a782da28375b561df298712d56b", 0x2}], 0x1}}, {{&(0x7f0000000c40)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d80), 0x30}}], 0x2, 0x41) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0x2, 0x3, 0x3, 0x0, 0x87}) 6.106750822s ago: executing program 4 (id=314): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) set_mempolicy(0x3, &(0x7f0000000180)=0xfffffffffffffffc, 0x5) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)={0x80000, 0x10, 0x41}, 0x18) bind$xdp(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf250000000007d72a971345d48b5c0d75bcb24996fad3eac9228260416dd2a52f7569e7906daa9cbb8634a89d0145001946b164255c3e79bcd4b0a249660b482af41eeb47ad46c3a7fd1ee6fe1e0fda11fd42de4975765e31c8fbfbb4c9ab0cbaec85e4684f52ccb8099f86e8c0698509f28bd832d79f9173360abecf0d1d3faea1cd140c67618ccd104b7a9f71d3f1ca84bd5650425c2a9ee5246d2820d5b6d829f1011ad577669a488e3e5a1470c64a8bd5bc2e20f9365f5d55c3993b825a3357d926959e155aebfe407d5c937607e2680f1b50f282a2", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="5b51711fa0da2d73a4b0e9c72c28379d30eb171da02c1d734fb3f20678b7fc1a94eb", 0x22}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {0x101}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000"], 0x190) syz_emit_ethernet(0x66, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0xfffd, 0x2f, 0x1, @loopback={0x4000000}, @empty}}}}}}}, 0x0) 5.704575668s ago: executing program 4 (id=318): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r1, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x3}, &(0x7f0000000440)=0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r3, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xb5834924f44ad1c5}, 0x840) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x5e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010102}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r7, 0x1) recvmsg$unix(r6, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=r8, 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={'\x00', 0x1, 0xf, 0x4, 0xe, 0x3, 0xffffffffffffffff}) 5.321178217s ago: executing program 3 (id=325): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x2, 0x4, 0x7fff, 0x3}, 0x10) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='-.\x00', 0x3) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x5, 0x1}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="d63d00000116ae0089"]) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000240000000000000001000"], 0x14}}, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r2, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r2], 0x65) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200000000000000000000000000010004c910"], 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f0000000540)=[{0x0}], 0x1, 0x20033, 0x51b) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)=0x2) write(r6, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) recvmmsg(r6, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) 3.493609778s ago: executing program 4 (id=337): socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000100010018110000", @ANYRES32=r3, @ANYBLOB="0000000000800000b702000014000000b7030000000000308500000005000000bca900000000000035090100000000009500500000000006b70200000000000073adf0ff00000000b509020000000000dbaaf0fff10000002f89080000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001822000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000036080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x9, 0x29, 0x80, 0x9, 0xffffffff, 0x91b1}, [@TCA_NETEM_DELAY_DIST={0x14, 0x2, "c9cb428070784c98a6d0869fffffffff"}]}}}]}, 0x60}}, 0x0) 3.373822315s ago: executing program 3 (id=338): r0 = syz_io_uring_setup(0x5477, &(0x7f00000011c0)={0x0, 0xbc09, 0x2, 0x2, 0x1}, &(0x7f0000001180), &(0x7f0000001400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001340)={'\x00', 0x0, 0x4, 0x7ff, 0x7, 0x8000, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000040)='fdinfo/3\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x70bd2b, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4850) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000100000000000000000008510000006000000180000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782520000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xf) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f0000000280)="af2178d12dd14c1ac862abd8b7fcf7ae604f7d0a81689f3144e9fcc51ed382a7b2528534af423fb98e8567e0b8a1702153", 0x31}], 0x1, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r4, {0x8c9}}, './file0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001440)=ANY=[@ANYBLOB="2c0000002000010000000000fcdbdf25028000000200000210000000da08000400fbffffff0800010000000000bfca7311552d3aa2e151aee1fb0ffc50516a77ee132bf51668de720a311d32a569a391acb8c918526b60b76075eaf4b2743765040b4590191176"], 0x2c}}, 0x8008) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000140), 0x10) r7 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x1d, &(0x7f0000000080)=0x4, 0x4) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, 0x0, &(0x7f0000000040)) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) read(r7, &(0x7f00000002c0)=""/72, 0x48) sendmsg$can_bcm(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x24, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xe02, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b5d48da6811cd874f3c107bd10bc8831026d4072dd2c54bd79f35321619c67d39e5f49bae641ed1511200"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) pread64(r2, &(0x7f0000001240)=""/250, 0xfa, 0x0) 2.984939063s ago: executing program 0 (id=340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x8400, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14b0}}, 0x0) 2.91380422s ago: executing program 0 (id=341): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000001b40)=ANY=[@ANYBLOB="9feb010070da8d85a3f52a18000000000004006400000064000000030000000b000000000000070000000001000000000000090200000004000000000000110400000002000000080000000000000b0500000002000000030000930d000000000400000004000000000400000004000000020000000800000005000000006100000000"], &(0x7f0000000a40)=""/4096, 0x7f, 0x1000, 0x0, 0xfffff966}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000980), 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") socket$inet6(0x10, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8002, &(0x7f0000000140)=ANY=[@ANYBLOB='nodots,tz=UTC,nodots,dos1xflopp[,check=normal,\x00'], 0x0, 0x1e8, &(0x7f0000000280)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f0000001000), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="00f10018158000"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ff"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e26, 0x100000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1e}, 0x1c, &(0x7f0000000580)}}, {{&(0x7f0000000080)={0xa, 0x10, 0x9, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)='\f', 0x1}], 0x1}}], 0x2, 0x200400c0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.881345094s ago: executing program 1 (id=342): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b400000000000000711013000000000084050000000000009500000000000000c425406d7638b19a232fbcc60a8d767e101edb3adb9bfe2cd6063916e6bdde6abe37afa25b23ea19ffca6ab10d4865fd5fbd8975a10757892412c7139997c984c25906a692f6069a7dc45ec5be78e2096499e5715a267fde3d1141cbc5fa2c4191d07bba2ae3749f9fafa5425a1a075c33b009ff75a21bc2d3822fd035bd288418b03a941dc814a62de57c4492072004a031f57bf6dcf45a78976d6655ea44020871e888a2391fd9026bbf3ed1c42a62c35ef9e2220d8fc9dc21bd3bfc687fc0209da1336f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080009800000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000040000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={&(0x7f0000000100)="ed2b60cdf13f163e3145e2ca7ca357e7157f774cdcc0494eb2657c9751389d09ca6c05779473da09a0aacd7963c29e6bf07f5938600ba792dff6a5931055224a209a553e599f179d1a0e7cc2efec374b045c2cf12869c637bb53e8b662cb7bf092e132edb0c9ea33a4ed98a643b4ec4fbdb676df1cc4e1ebbdc7d4c0353c9d4693806dfa4f75bec6293bcfc7a7d1556c25fd7edc7ca15aa8aadc441167a31e796e71487bab5d069741d5dd325b4aa04a1bacb24db9c0cf9e84d3a782744b828caad753038e08dc8dc749b9b1dff9775f9574ce5b8b8f5f", &(0x7f0000000200)=""/231, &(0x7f0000000040)="dc2371e42208499e8093fd4c848e27d9d54d5bf16398b6ef2976f819e19727f7ce775b16c497800d88b5960a628a7c01e39ff367fc944c955afc159c23d385c721b81be2b4ed73e61d9c1e1c247a358a885918a35c7513cf", &(0x7f0000000300)="486af3322cb31b8b342bce518d8d5a7a22f91fd5d7f3fdf2b0aa96cd466a5402c557e560ec3664436556589e600141e7adcdb239a650824bdd01dbbd15c209eef3", 0x3, r0, 0x4}, 0x38) r5 = semget$private(0x0, 0x0, 0x200) semop(r5, &(0x7f00000003c0)=[{0x2, 0x9, 0x800}, {0x3, 0x8, 0x1800}], 0x2) 2.817353912s ago: executing program 1 (id=343): migrate_pages(0x0, 0x6, &(0x7f00000000c0), 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x6, 0x4, 0x80}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000340)={[{0x2b, 'pids'}, {0x2d, 'rlimit'}]}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000002840)=ANY=[@ANYRES32=r5, @ANYRES64=r2, @ANYRES8=r2, @ANYRES32=r3, @ANYRESDEC=r3, @ANYBLOB="36ca42b13ea9b4429f14e47f1b444abeb1d3c219f324197adba014f0681543f102164bb81601c84a31d664f46a37bdec490fefe4774086aa629c0d4db8137bbec85211578578b1efa741761ad14b31110246fb99547608bbf5b828ddd751625b8e1e44ef85d2845a5f778bd75a952d636a86b4edd1e003900fe5438d99105bbf7a9db207aea5f5e7f8e0c3c182a7254861108b529805d5a61bd71027956b6e9f98e3b3936f7cd54421b45fd8b9671134e8ca7aef0e70dde59e48d58a37b2d7c1bf55638ecad17ae5eef94f10186b68016eb85f08c75e61435ac2269ff305beeab568fb5942a0a08c80a2e173fa937bd69d732203aacdc0ef85551214ec55b7df41ea1ec1fbabb050a0f329ef6b545b6f1ed7861b673f038b0edce4d1cc97ab1e2975b9eab52dde3577441832f50dc027321355f6546bcc81f5ca3222106a4595546c8d50cd76940188b110e0c75c941068fe48c56439ba253e767d26e01f1f6932cda99844c3c706b009b2d848dc8a3250fbdc9110e72914fd213e024461dabc2d419dce6d487ce1dccc8feb51e8f762e49c2ba14118710d9770da5f38a02c29a2cd94003f3d93c7b156c6355eb9cbdd1444534b47f3250890ae346a21f2492e47caab9af28a26d4abb1751364543d800978a990baffe4c0a005895584bc79ec75e8d31e3209503ff8e0b54ddc4fc5c2542f147506486051b4b34b103a9c4bf6d1ea5dda001298380cfc5fa82174846e44d90a875a9d9ece08fbf5344c5f64476889f16413a5f0dd5ba50f156030d0bbd4d2c6eeac66523d3a05ff1b0bc8c32475ebe3aec3b38479672bf44e64bc816cfd5629932b4dd048207da51b50c39fcadaaab0866f187b593922f5986b2aded03cf5e69cbc5e3ea2a6c5f91aee8cce8c499cb3f292d9325aeb6115a839024e23cc1d25140ff3f2de7eea1a48fecda7bfb4f6f4b119f307194f0e8babaa6ab12f6f9d66e97648f88980da339d87c01559fc5933d81dcc4d84801b858fff4f56b3b5fbb77d7af61a35baee3e0f24c014b81dbb805835afe6dda064c70cfcaa04dafc013a6c2407b06c1609074bb94aef5da607c383f2db8c8106148b05774bd134c04cd96b4adef83680e187965af83643c4a767d559d5828dc7570b0d9fb461d300c792b8c375e84ba08244021b1f1a8624cf2c098e4df2d3e01c79faae869f619898ef8e7b83a20ace7a3fe0a41c9bc2561c17253fdb9d703c4a6d106fac33bda260c617c672a38a351ef4c13016490746f6e09cca9b93b5e7bff8ee28afb301a09f93075d5f5b27251d8426127f97a290596ef38aa4f57b8f8ecae2a493dd0fbdfdbc58ead418458fcc356bcbc9d3e4fc1936abac3d4fa99232b27b7a11f36655d8ea44c047e04aa6be1ec9f0d90b84f553ca25c6f6d8f70249d990f71b22f954495dc170a7bc7e4d7bc3ffac29d4a7a891017aa9b7cf62c2dd3f6604852804a2f9530b7617e31c303a7eadf7c07a18fe6ce6ccf670b3a4e8f6f5ebeb98783fbb6d3722d43d95239350ac90ca18a0d7bbd3e6c5c214b5e12b55d02152e0e26fb538443251ee9fa6862c2db396fa7d714bf672f0a014bcae072d226155288adf9b60a472c2dda9a56c317eb970d4f49b4793c5dabcb750ff30443354f200d21dda0ce48d021dd9cebbe6da03b7ecd428ec834d56bae2d8c253196ce8e294eb95f9b9ec99405bed15f835a91ba6445db7ba6d842b70662d52688565a096aa9a10dae3b6f309ebdff66f8b4da107499d3c0209ca7d1df3a2ccacbc6657cc3efdd8a21b68da19b8d557e11c92d85d9edbd7ef48fa77b578c10c8cd8276d695e5844450f7a77c3a2414f3cf57bc6261ade245dd5d271d7c49c6338b5c97efd4e743014b6e960c311a66d92270519abff5096fb3bc66dd1ba1b36875a5ca93acff39dd8f63f0acd7280cbeb33a0896c413e887679bb360ede70a5bb1231a5ff682e3dbd2462bdcf994a3d8f8ec47c598c6b4e860335fd47456a70fd783f1e6ed1a7f463d94b884fa502f18274464e740c86f6ec061673daf5f0b9eb34e1898a574d6cc0dc11c9da5deca73c93fa11057e5642b110de2b75decc295f664519c7d901001880854a9e14f163705c4695b7dfb1e006ba7f818e9ca1c6b5677a7550ba4a3ddb951128dc781ac7ea30e279d763e18d31100ef37e0e3365e5abff376b3bae99d4aba0e44bcebe51d9c144f2373d43555d7bba27b5124cd382ef70f5d71a8034fc471993b8b80f4222567fba5708d26984dedcaf579b08a8b76cb7fd35cef9a5df59fd37158e3868b14a5a09d30f769c2fda71e9c29dd442a92a99a50e9445e182c984324ef2faa0e039bf296679812da9a3f1592e823d3333847aaf15d2cc27bcbe250a3bdd68fdc1aa080a360fa862c7499f0d9c04862e465296982f567c3c2e31386762799b77e618e8778307c8986332cdb2dd960bf3d45ef45039905ef2a35582a1091f84385bde20b5edbb744894dd5b4202ee1421a8a4b139968afd8bedeb47829e676b5cad8f6b326224e337c129eccc0ab53b6ee15619c50ec2f8db471eaa4f4f6b242c9a8fc7a57bc9f2680759d7114b792026d63e62db9dd24d1d38136fc3139509bb5fd090783f7557823dc7c537865a84bbfe88ae4bf955e17484ecb9f5682cf2e9c54a44159c10a5e8edd9d0b2afd69ac541d8b8c4682b53bbabaa52348b03ed113724f0c0bfedb8a2b6543a5bf6ea553356aab7bc77daaa95e49304b46ad4f0cf5a399e26af6668c763832cf7c55614ef571e5343d92aad815807546c801cd07162e7dc02da6edef2b5ea684645d21f578917bee7e0b24485bdc6f09c4b28d39a8298db4ddca5dfe5f5d952cae6739081b19afc8f8795afd822df65abe704df9696eff325461c80ea91035e22778f2156918e19f58aaf91a313d3f2c729f75c7801db671e446504aaeb264a202e1b948493dfa98e7e7cc90be88ca375263cdd91831dd319bb4eb254d8b894fe5fb45cbe23d945e13389b233184ef0a1afa1226eece10285afdbe3128592e038039c91d895c481af504aa97a948ebd1c806d27738686cbf001ab80b13765d20747d7d66f00a81ac8db4021b5ead0e7f314052d788ad5650fc549432e74c1435b4f727da83c1236d3f4a90b472060ba4185febfc53ab12826534fc6dc5cc9f11709555f7a9bfc8ceb961f4f60bc391cb6384073ff904940246161e0ee29ae1f1e1f895b071ffc48f120a8cd9ba31be38da74e71512bbaa5339f30f77722c1ed02af6e3326e92c88237cc258af1bca6bc09b1306086f7a069dfd5248f4d6e185cf5e34eb31d6f52ca1afa257a7ff6ec7533fb254f062b495974af3c55de844cfa5633a5d8536355669a3b8daa03f203b3366cb11094e8e0ca80516c0745c051afb57eb0f03c505a71047a8b62a3130e22fa328c92b675c6afc7943b2b0d36c9f0895a194feb2e96169c24ec9b9c5a728e59c5093363f9121593d32c35f7daf076e4d98c12c0138205e65a6bec71b2db6ac87415c43f28027d2e49a92f920f1136a1720c3009ef3769052a70b7186aefe7c1bf666969e8cbc4cd94fc206b5f79513a18e74c9aa4806b7fe0cf6c5822d6289f31058b640be22f8588870301ecf12a8e3bb3ec9707ffe7e5e4cb1507f762e6e1f80e0960dc52f62925ab50e9a8411b193ba6a901f2d62e64f42d805bbc67dd1f732cf6dc9b24308478e874d805238adc7cf34068a5f431c2cfacce83d4eefb7aa43d1f374295b9c8624a26ca49e42b3c38821a2986784965797bad4474ecd43f2b36310df2d24eb764c52a1517b50104a38ac5d0b11ebe979424e9b3d77e1c5447332181b86031cb775a2a1725aa58899f80eb610857254e2f065dbad6d51b70f7007ad0e03bdd03948b9445afb65ba491919f2087330781c8e142687de0d93d73f944a866ae3773bd35843d758b54554f266673fb854978cfa05acd69deba919cf06fe9f0f58cb01423a6b86c588b1fc71b895c8769116a163d09191d91198a6a281797b98a651ce24290e1a708e38c37efa7c929ab1c581e2bb7147b63a4af107bafbd96051c347303001b4dae59d5a5339ef6912a463b115292b6964dfe0fc382160c03092e24c2371eeaa2b519f25de69ba1ffd4dd75edfd4be360f5fdec6ca90901c9f0581e9a08c90b5cd1e2b77dde43a060bced38ecdf4511018ce8fc29f280f11a0a836dd3fa037df0c1d4500a2f8684d71efa7d49215e2c1ad8d0c53aa025d451c2d776aa364c2e1c768a8a21f73ccb2b6140578f073ea743c2a09e21344814e7270a9bbcf3ee79327e7a3356c3e4633e8d3a5c6058c1eebff3e5195e728a6f8601291ca4f59835bde0b3941dafb0736bf6ebd72c00a55983c7210f358b4ab15f04976b0335df082a44329b969a3206cf128f8f9da96afbc18eda92f2a1599084fe78a1543e97069dccadcd965d16543df1850cf3ef5b32f1663d9aeb3097aad8b0bfcec214548fb7b0cc39b3b0191dfbeaef02ffe74f165d89a701f067477804e5fdf3213ed6e4248c0f298315ab0bd7e8654c4c1a54757339f165e474aaeed4a141661161b75a348c6955ff6a5b36f54bcd430a927de85cec3c888d1956d92a90d76cb77ffb98004605194744d9bc5c9b3850f2477ac10af0b5b5c063052f9d6a18a52ca91c565c44d75428f7050933a5ce9ec0a6a7c5f74ec2c16678459cc36048b1b68a6fe789087d74aa49e382c6ab4f5822f2b07f0ac951ba949870a0bf48fa7062c046451fef7bb290d4abc1e46686604c55ae4cf8f381a694db42a8b4f6864cc511d6d08715e419b969155525de774851bf0c00d5485e3abe06470759cab1a920aa97c79b8c8604a6648d2f13fa2ac60bcb2d7210c14b3661db47d2986107d15580c8e61f3115def1a8307113214e1c2ed8535257d92b2fa532d34100f42ce85f4c359213cd0fa699836b4c191aec52b8b4184d98328c3ce805766e3023709f8a297d109d76de9a6f18cb56adf816c569f3635c9dfe2271b24056a3aca4b9c259bb52c7a2edb83394140365dc8aa3058471ca2dd345410156b9f81f13b7139298d414a897cb9edce0ed0d2cbbcded91e304b68ab069ddb824c01e3555ae21f98e7f10dcf5955383a1c1539c020fa08977a1678a17b08d9ce6e8f992f8eef243543aded0bb7326d87a794e7125ef52e69586f096c46c3f328c43c8ab564eeb1c4df9e4b9e198dc7bda6e79a30e3591eda9d6042b9ebc8bbb8fe115ec33ab553e0bdad357b6536cd1c093d206e527f0957ab08c8a74f9d408805b48b56f8bc2a25ab5eee11ef596b17cbb97114285f120c7ba8f37084157fae7312e340cc8d9ae771d33d00e646c4fed012362492f366076d93fcaaa3488df01b680d04cabfb380430e787e89d27b5876d5c3e9c11f0f5ecbe20c5f194439ca83ef2d8171de0b4673bcc0eaa4cab407ba1e0ed6ae10a1e3506bc7184c4442bf647c637cd933a9501deacb6c0c573150cfe8c7ad08dff1440f9302bcdab5b13e6a6e0f1062ab4dd3293f7c3deef14a693fbf22d48b78dc2ea0bf0c62f8e348d50b00611e16ea10970f57e899f41e0e98c6fc68f56a5971e1f0e68ef83434361044b1f38fc08b604adf01b141b0a7f2c903ba30a42ca0b9183ba17cc4b47f9f1bd133c870d7b64b5b7519113a059039d6195a06e93e6d4245156b6c4397d3044b7b3c2e0dc042f21cb6f721ab38e560e6f7460322e279ed569a48f54a1599ace1b34d3cbd350f08bf14fcf5f0bb0137a773237a3f19ab81a0057833f5103bccce85aae5d22b8fa404222503b28a197324bd66a7c5bac3", @ANYRES8=r6], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, 0x0, 0x441, 0x14a) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_SETFSUUID(r9, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "e9aec4948650d5f86e4f17bf4a0c9cc8"}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8943, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x61}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 2.625413166s ago: executing program 5 (id=344): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@remote, @in6=@ipv4={""/10, ""/2, @loopback}}}, {{@in6=@private0}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449", 0x80) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) gettid() r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) creat(0x0, 0x81) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x1, 0x8008, 0x0, 0x12, 0x19, 0x11, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8, 0x4]}) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x801, @loopback}}, 0x1e) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0xfe) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) inotify_init() iopl(0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)='na\f ', 0x4}], 0x1) 2.112344341s ago: executing program 1 (id=345): unshare(0x6a040000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x1d, 0x2, 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x6a, 0x6e, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x113, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), 0x0}, 0x20) listen(r0, 0x8) accept$inet(r0, 0x0, 0x0) inotify_init1(0x80000) socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name, &(0x7f0000000340)=0x10, 0x140800) setsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000380)=0x6, 0x4) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x6c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006b0000006a0a00ff000000002600000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100800000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 2.018472434s ago: executing program 0 (id=346): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000180), 0x3) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f00000024c0)=""/209, 0xd1, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd}) close_range(r0, 0xffffffffffffffff, 0x0) 1.992205469s ago: executing program 3 (id=347): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0xffffff14, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="8b332abd7000ffdbdf250300000000000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40084) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1.975854976s ago: executing program 0 (id=348): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2b, 0x9, 0x0, 0x0, 0x0, 0x4, 0x40738, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xa}, 0x242, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0xffffff14, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="8b332abd7000ffdbdf250300000000000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40084) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1.952913152s ago: executing program 5 (id=349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r1, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x3}, &(0x7f0000000440)=0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r3, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xb5834924f44ad1c5}, 0x840) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x5e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010102}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r7, 0x1) recvmsg$unix(r6, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=r8, 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={'\x00', 0x1, 0xf, 0x4, 0xe, 0x3, 0xffffffffffffffff}) 1.166917876s ago: executing program 1 (id=350): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6}, 0x2002, 0x32, 0x43a1bd56, 0x6, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x48800) 1.090892331s ago: executing program 5 (id=351): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}], 0x10}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x70bd26, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2c}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x4, 0x2, 0x0, 0x2, 0x0, 0xffffffffffffffff}, {0xfff, 0x800}, {0x3}, 0x70bd2a, 0x3500, 0xa, 0x0, 0x0, 0x26}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r3 = getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f00000001c0)) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0xe091}}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x9566, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x14, 0x0, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}}, 0x14}, 0x1, 0x0, 0x0, 0x848}, 0x4004810) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) 1.08386329s ago: executing program 1 (id=352): socketpair$unix(0x1, 0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300), 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0xa3d8, &(0x7f0000000340)=[{&(0x7f00000000c0)='\x009zL', 0x4}], 0x1, 0x0, 0x1, {0x2}}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r4, 0x0, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) 969.683489ms ago: executing program 5 (id=353): syz_clone3(&(0x7f00000004c0)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0x0}, 0x58) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x120, 0x1170, 0x1398, 0x120, 0x1170, 0x240, 0x1398, 0x1398, 0x240, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x60}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@private0, @private0, [], [], '\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x9e) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 943.265524ms ago: executing program 1 (id=354): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x8000, 0x0) pread64(r1, 0x0, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010428bd70000000000000030000", @ANYRES32=0x0, @ANYBLOB="0000000000040000300012800b00010067656e657665000020000280080001000100000014000300000000000000000000000000000000011400030067656e6576"], 0x64}, 0x1, 0x0, 0x0, 0x8008}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1, &(0x7f0000000200), 0x1, 0x4d6, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x10) mount$bind(0x0, 0x0, &(0x7f00000000c0), 0x10c0000, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3f, 0xfffffff6, 0xa, 0x4, 0x401, 0x81}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x81, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x8, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) fsopen(0x0, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0x20) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xe, 0x4, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xff, 0x100000001}, 0x0, 0x0, 0x6, 0x1, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x40000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0xc0000, 0xdd, 0x479c28ea, 0x1, 0x2, 0xb}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 904.693697ms ago: executing program 3 (id=355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r1, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x3}, &(0x7f0000000440)=0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r3, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xb5834924f44ad1c5}, 0x840) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x5e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r7, 0x1) recvmsg$unix(r6, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=r8, 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={'\x00', 0x1, 0xf, 0x4, 0xe, 0x3, 0xffffffffffffffff}) 847.302797ms ago: executing program 5 (id=356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xc30e343f, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x11, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) 823.963612ms ago: executing program 0 (id=357): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000280)=""/10, &(0x7f0000000080)=0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x83bb3000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f00000001c0)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}, 0x2, 0x474, &(0x7f0000001340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x22042, 0xfc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000002002100000000000000000085000000870000001801000020207025007b1af8ff00000000bfa100000000000007010000f8ffff00b70300000000000085000065d0106e1263e89a00"/89], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001a21414aa000000000000000000ffffffff0c00ffef0000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000600000000004400050064010102000000000000000000000000000000003c00000002000000ac1414aa00000000000000000000000006000000040300"/180], 0xfc}}, 0x0) socket$inet6(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) 0s ago: executing program 3 (id=358): perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x158, 0x0, 0x11004, 0x0, 0x82, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async) r0 = perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x158, 0x0, 0x11004, 0x0, 0x82, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) syz_read_part_table(0x5df, &(0x7f0000000000)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a0000000500"], 0x5c}}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) fsopen(&(0x7f0000000100)='selinuxfs\x00', 0x0) (async) r5 = fsopen(&(0x7f0000000100)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000ffdbdf250a00000006800800040003000000040001800000"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000680)={'vxcan1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x9c, r8, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xdd}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8001}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) socket$kcm(0x10, 0x7, 0x0) (async) r10 = socket$kcm(0x10, 0x7, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x0, 0x4}, {}, {}, {}, {}, {0xfffffffe}]}, @fwd, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x96}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) (async) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) sendmsg$inet(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): [ 19.557237][ T28] audit: type=1400 audit(1773308661.594:62): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.579485][ T28] audit: type=1400 audit(1773308661.594:63): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.602340][ T28] audit: type=1400 audit(1773308661.594:64): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.625422][ T28] audit: type=1400 audit(1773308661.594:65): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.648760][ T28] audit: type=1400 audit(1773308661.594:66): avc: denied { read open } for pid=3194 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. [ 23.908179][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 23.908197][ T28] audit: type=1400 audit(1773308665.944:70): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.937665][ T28] audit: type=1400 audit(1773308665.974:71): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.938439][ T3296] cgroup: Unknown subsys name 'net' [ 23.965945][ T28] audit: type=1400 audit(1773308666.004:72): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.062311][ T3296] cgroup: Unknown subsys name 'cpuset' [ 24.068741][ T3296] cgroup: Unknown subsys name 'rlimit' [ 24.198127][ T28] audit: type=1400 audit(1773308666.234:73): avc: denied { setattr } for pid=3296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.228712][ T28] audit: type=1400 audit(1773308666.234:74): avc: denied { create } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.249465][ T28] audit: type=1400 audit(1773308666.234:75): avc: denied { write } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.270045][ T28] audit: type=1400 audit(1773308666.234:76): avc: denied { read } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.290495][ T28] audit: type=1400 audit(1773308666.254:77): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 24.297919][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.311382][ T28] audit: type=1400 audit(1773308666.254:78): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.344793][ T28] audit: type=1400 audit(1773308666.254:79): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.391189][ T3296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.214623][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 26.251485][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 26.260324][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 26.318324][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 26.335678][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.342887][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.350050][ T3317] bridge_slave_0: entered allmulticast mode [ 26.356561][ T3317] bridge_slave_0: entered promiscuous mode [ 26.379190][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.386466][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.393868][ T3317] bridge_slave_1: entered allmulticast mode [ 26.400552][ T3317] bridge_slave_1: entered promiscuous mode [ 26.413259][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.420383][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.427500][ T3311] bridge_slave_0: entered allmulticast mode [ 26.433964][ T3311] bridge_slave_0: entered promiscuous mode [ 26.443190][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.450320][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.457556][ T3311] bridge_slave_1: entered allmulticast mode [ 26.464138][ T3311] bridge_slave_1: entered promiscuous mode [ 26.484857][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 26.518342][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.528625][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.540733][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.547854][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.554958][ T3316] bridge_slave_0: entered allmulticast mode [ 26.561208][ T3316] bridge_slave_0: entered promiscuous mode [ 26.572759][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.587081][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.602229][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.609398][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.616609][ T3316] bridge_slave_1: entered allmulticast mode [ 26.623330][ T3316] bridge_slave_1: entered promiscuous mode [ 26.640889][ T3317] team0: Port device team_slave_0 added [ 26.661118][ T3317] team0: Port device team_slave_1 added [ 26.666988][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.674212][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.681411][ T3310] bridge_slave_0: entered allmulticast mode [ 26.688289][ T3310] bridge_slave_0: entered promiscuous mode [ 26.699220][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.706554][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.713777][ T3310] bridge_slave_1: entered allmulticast mode [ 26.720426][ T3310] bridge_slave_1: entered promiscuous mode [ 26.730067][ T3311] team0: Port device team_slave_0 added [ 26.740889][ T3311] team0: Port device team_slave_1 added [ 26.747593][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.757731][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.800649][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.807896][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.815247][ T3312] bridge_slave_0: entered allmulticast mode [ 26.821653][ T3312] bridge_slave_0: entered promiscuous mode [ 26.828255][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.835351][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.861753][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.877614][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.884716][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.910926][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.922950][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.932240][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.939190][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.965482][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.976210][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.983362][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.991071][ T3312] bridge_slave_1: entered allmulticast mode [ 26.997626][ T3312] bridge_slave_1: entered promiscuous mode [ 27.004583][ T3316] team0: Port device team_slave_0 added [ 27.017889][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.027444][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.034652][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.060649][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.072218][ T3316] team0: Port device team_slave_1 added [ 27.099571][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.109250][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.116342][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.142381][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.157747][ T3310] team0: Port device team_slave_0 added [ 27.173424][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.183290][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.190413][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.216617][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.230251][ T3310] team0: Port device team_slave_1 added [ 27.266173][ T3317] hsr_slave_0: entered promiscuous mode [ 27.272292][ T3317] hsr_slave_1: entered promiscuous mode [ 27.284512][ T3311] hsr_slave_0: entered promiscuous mode [ 27.290684][ T3311] hsr_slave_1: entered promiscuous mode [ 27.296506][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 27.302373][ T3311] Cannot create hsr debugfs directory [ 27.309487][ T3312] team0: Port device team_slave_0 added [ 27.318203][ T3312] team0: Port device team_slave_1 added [ 27.324084][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.331122][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.357203][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.381663][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.388717][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.415022][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.441426][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.448408][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.474406][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.495230][ T3316] hsr_slave_0: entered promiscuous mode [ 27.501196][ T3316] hsr_slave_1: entered promiscuous mode [ 27.507305][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 27.513231][ T3316] Cannot create hsr debugfs directory [ 27.524170][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.531735][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.558174][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.589364][ T3312] hsr_slave_0: entered promiscuous mode [ 27.595544][ T3312] hsr_slave_1: entered promiscuous mode [ 27.601741][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 27.607501][ T3312] Cannot create hsr debugfs directory [ 27.639916][ T3310] hsr_slave_0: entered promiscuous mode [ 27.645890][ T3310] hsr_slave_1: entered promiscuous mode [ 27.651889][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 27.657708][ T3310] Cannot create hsr debugfs directory [ 27.818513][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.826987][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.835705][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.846165][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.870179][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.879418][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.888319][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.897228][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.933811][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.945109][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.954099][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.966061][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.001909][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.011682][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.021120][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.030437][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.039214][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.072776][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.081691][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.090754][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.102493][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.112475][ T2489] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.119523][ T2489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.142186][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.152971][ T2489] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.160019][ T2489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.169732][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.189434][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.207760][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.214826][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.240323][ T2489] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.247492][ T2489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.267265][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.282816][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.293255][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.308972][ T2489] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.316052][ T2489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.329722][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.342507][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.349550][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.359958][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.370679][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.387291][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.394442][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.411344][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.418683][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.437728][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.450942][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.461568][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.506808][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.528519][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.547311][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.564394][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.571542][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.580624][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.587858][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.623405][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.634614][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.655838][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.666762][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.679906][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.725494][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.749269][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.805280][ T3310] veth0_vlan: entered promiscuous mode [ 28.813739][ T3310] veth1_vlan: entered promiscuous mode [ 28.857109][ T3310] veth0_macvtap: entered promiscuous mode [ 28.873099][ T3310] veth1_macvtap: entered promiscuous mode [ 28.896121][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.908099][ T3316] veth0_vlan: entered promiscuous mode [ 28.920413][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.945783][ T2489] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.955257][ T2489] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.964299][ T3316] veth1_vlan: entered promiscuous mode [ 28.977033][ T2489] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.989981][ T2489] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.000623][ T3312] veth0_vlan: entered promiscuous mode [ 29.009583][ T3317] veth0_vlan: entered promiscuous mode [ 29.024683][ T3317] veth1_vlan: entered promiscuous mode [ 29.036367][ T3316] veth0_macvtap: entered promiscuous mode [ 29.049271][ T3312] veth1_vlan: entered promiscuous mode [ 29.060754][ T3316] veth1_macvtap: entered promiscuous mode [ 29.069759][ T3311] veth0_vlan: entered promiscuous mode [ 29.081981][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 29.082054][ T28] audit: type=1400 audit(1773308671.124:91): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.ZIWebp/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.114880][ T3311] veth1_vlan: entered promiscuous mode [ 29.115402][ T28] audit: type=1400 audit(1773308671.154:92): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.124330][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.150509][ T28] audit: type=1400 audit(1773308671.154:93): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.ZIWebp/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.154607][ T3317] veth0_macvtap: entered promiscuous mode [ 29.184452][ T28] audit: type=1400 audit(1773308671.154:94): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.189781][ T3317] veth1_macvtap: entered promiscuous mode [ 29.213474][ T28] audit: type=1400 audit(1773308671.154:95): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.ZIWebp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 29.243721][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.245810][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.266454][ T28] audit: type=1400 audit(1773308671.154:96): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.ZIWebp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 29.278829][ T3312] veth0_macvtap: entered promiscuous mode [ 29.299637][ T28] audit: type=1400 audit(1773308671.154:97): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.319489][ T28] audit: type=1400 audit(1773308671.194:98): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.320915][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.349678][ T28] audit: type=1400 audit(1773308671.194:99): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="gadgetfs" ino=3852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 29.377499][ T3311] veth0_macvtap: entered promiscuous mode [ 29.385063][ T3311] veth1_macvtap: entered promiscuous mode [ 29.385470][ T28] audit: type=1400 audit(1773308671.414:100): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.420621][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.429383][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.447185][ T2012] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.457293][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.468981][ T3312] veth1_macvtap: entered promiscuous mode [ 29.477850][ T2012] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.501660][ T2012] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.520671][ T2012] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.531472][ T2012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.545886][ T2012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.555071][ T2012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.573632][ T2012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.591019][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.602171][ T2012] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.618372][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.634263][ T2012] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.671366][ T2012] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.690614][ T3488] FAULT_INJECTION: forcing a failure. [ 29.690614][ T3488] name failslab, interval 1, probability 0, space 0, times 1 [ 29.705036][ T2012] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.711358][ T3488] CPU: 1 UID: 0 PID: 3488 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 29.711429][ T3488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 29.711441][ T3488] Call Trace: [ 29.711447][ T3488] [ 29.711455][ T3488] __dump_stack+0x1d/0x30 [ 29.711481][ T3488] dump_stack_lvl+0x95/0xd0 [ 29.711516][ T3488] dump_stack+0x15/0x1b [ 29.711582][ T3488] should_fail_ex+0x263/0x280 [ 29.711643][ T3488] ? __se_sys_mount+0xef/0x2e0 [ 29.711665][ T3488] should_failslab+0x8c/0xb0 [ 29.711714][ T3488] __kmalloc_cache_noprof+0x5f/0x410 [ 29.711842][ T3488] ? memdup_user+0x99/0xd0 [ 29.711862][ T3488] __se_sys_mount+0xef/0x2e0 [ 29.711883][ T3488] ? fput+0x8f/0xc0 [ 29.711906][ T3488] ? ksys_write+0x194/0x1a0 [ 29.711925][ T3488] __x64_sys_mount+0x67/0x80 [ 29.711960][ T3488] x64_sys_call+0x2d61/0x3020 [ 29.712037][ T3488] do_syscall_64+0x12c/0x370 [ 29.712100][ T3488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.712170][ T3488] RIP: 0033:0x7feff1dec799 [ 29.712187][ T3488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.712205][ T3488] RSP: 002b:00007feff083f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 29.712226][ T3488] RAX: ffffffffffffffda RBX: 00007feff2065fa0 RCX: 00007feff1dec799 [ 29.712246][ T3488] RDX: 00002000000000c0 RSI: 0000200000000300 RDI: 0000000000000000 [ 29.712259][ T3488] RBP: 00007feff083f090 R08: 0000200000000a40 R09: 0000000000000000 [ 29.712273][ T3488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.712286][ T3488] R13: 00007feff2066038 R14: 00007feff2065fa0 R15: 00007ffca4f6e118 [ 29.712303][ T3488] [ 29.764648][ T3491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5'. [ 29.787051][ T3494] FAULT_INJECTION: forcing a failure. [ 29.787051][ T3494] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 29.907913][ T3494] CPU: 1 UID: 0 PID: 3494 Comm: syz.3.7 Not tainted syzkaller #0 PREEMPT(full) [ 29.907963][ T3494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 29.908032][ T3494] Call Trace: [ 29.908039][ T3494] [ 29.908046][ T3494] __dump_stack+0x1d/0x30 [ 29.908071][ T3494] dump_stack_lvl+0x95/0xd0 [ 29.908094][ T3494] dump_stack+0x15/0x1b [ 29.908118][ T3494] should_fail_ex+0x263/0x280 [ 29.908222][ T3494] should_fail+0xb/0x20 [ 29.908241][ T3494] should_fail_usercopy+0x1a/0x20 [ 29.908314][ T3494] _copy_from_user+0x1c/0xb0 [ 29.908389][ T3494] input_event_from_user+0x5e/0x190 [ 29.908414][ T3494] ? input_inject_event+0x104/0x120 [ 29.908519][ T3494] evdev_write+0x1b0/0x2b0 [ 29.908546][ T3494] ? __pfx_evdev_write+0x10/0x10 [ 29.908576][ T3494] vfs_write+0x269/0x9f0 [ 29.908722][ T3494] ? __rcu_read_unlock+0x4e/0x70 [ 29.908743][ T3494] ? __fget_files+0x184/0x1c0 [ 29.908801][ T3494] ksys_write+0xdc/0x1a0 [ 29.908858][ T3494] __x64_sys_write+0x40/0x50 [ 29.908878][ T3494] x64_sys_call+0x27e1/0x3020 [ 29.908898][ T3494] do_syscall_64+0x12c/0x370 [ 29.908913][ T3494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.908977][ T3494] RIP: 0033:0x7feff1dec799 [ 29.908988][ T3494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.909000][ T3494] RSP: 002b:00007feff083f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 29.909046][ T3494] RAX: ffffffffffffffda RBX: 00007feff2065fa0 RCX: 00007feff1dec799 [ 29.909116][ T3494] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 29.909183][ T3494] RBP: 00007feff083f090 R08: 0000000000000000 R09: 0000000000000000 [ 29.909263][ T3494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.909271][ T3494] R13: 00007feff2066038 R14: 00007feff2065fa0 R15: 00007ffca4f6e118 [ 29.909283][ T3494] [ 29.911497][ T3486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 30.110665][ T3486] batadv_slave_0: entered promiscuous mode [ 30.117917][ T3486] batadv_slave_0: entered allmulticast mode [ 30.141183][ T3393] kernel read not supported for file /mdstat (pid: 3393 comm: kworker/0:4) [ 30.152203][ T2012] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.179375][ T2012] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.223430][ T3507] netlink: 80 bytes leftover after parsing attributes in process `syz.4.11'. [ 30.242448][ T2012] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.264435][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.288862][ T3516] loop1: detected capacity change from 0 to 256 [ 30.297584][ T3511] netlink: 'syz.3.12': attribute type 10 has an invalid length. [ 30.305485][ T3511] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12'. [ 30.318014][ C1] hrtimer: interrupt took 26280 ns [ 30.329760][ T3511] dummy0: entered promiscuous mode [ 30.346459][ T3511] dummy0: entered allmulticast mode [ 30.356348][ T3516] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 30.373186][ T3511] bridge0: port 3(dummy0) entered blocking state [ 30.430980][ T3511] bridge0: port 3(dummy0) entered disabled state [ 30.438595][ T3511] bridge0: port 3(dummy0) entered blocking state [ 30.445096][ T3511] bridge0: port 3(dummy0) entered forwarding state [ 30.468848][ T3516] loop1: detected capacity change from 0 to 512 [ 30.489316][ T3516] EXT4-fs: quotafile must be on filesystem root [ 30.675228][ T3530] loop2: detected capacity change from 0 to 512 [ 30.680041][ T3511] syz.3.12 (3511) used greatest stack depth: 10400 bytes left [ 30.834313][ T3530] EXT4-fs: Ignoring removed oldalloc option [ 31.074131][ T3537] loop3: detected capacity change from 0 to 1024 [ 31.081397][ T3537] ======================================================= [ 31.081397][ T3537] WARNING: The mand mount option has been deprecated and [ 31.081397][ T3537] and is ignored by this kernel. Remove the mand [ 31.081397][ T3537] option from the mount to silence this warning. [ 31.081397][ T3537] ======================================================= [ 31.116810][ T3537] EXT4-fs: inline encryption not supported [ 31.122944][ T3537] EXT4-fs: Ignoring removed bh option [ 31.180601][ T3530] EXT4-fs (loop2): 1 truncate cleaned up [ 31.226049][ T3537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.410512][ T3530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.650528][ T3542] loop4: detected capacity change from 0 to 512 [ 31.705505][ T3542] EXT4-fs (loop4): 1 truncate cleaned up [ 31.728886][ T3542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.813300][ T3516] mmap: syz.1.13 (3516) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.825805][ T3547] loop0: detected capacity change from 0 to 4096 [ 31.865408][ T3547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.911889][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.921685][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.931876][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.959020][ T3551] loop2: detected capacity change from 0 to 128 [ 32.042099][ T3556] loop3: detected capacity change from 0 to 4096 [ 32.050914][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.090449][ T3556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.165575][ T3560] loop0: detected capacity change from 0 to 1764 [ 32.186220][ T3560] grow_buffers: requested out-of-range block 18446744072010032070 for device loop0 [ 32.238956][ T3560] isofs_fill_super: bread failed, dev=loop0, iso_blknum=1297723875, block=-1699519546 [ 32.248989][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.358440][ T3566] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.393488][ T3566] Zero length message leads to an empty skb [ 32.400876][ T3566] syzkaller0: entered promiscuous mode [ 32.406522][ T3566] syzkaller0: entered allmulticast mode [ 32.518271][ T3570] loop1: detected capacity change from 0 to 1024 [ 32.525647][ T3570] EXT4-fs: inline encryption not supported [ 32.531949][ T3570] EXT4-fs: Ignoring removed bh option [ 32.556375][ T3570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.184846][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.198006][ T2489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.229550][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 34.229567][ T28] audit: type=1400 audit(1773308676.264:189): avc: denied { create } for pid=3589 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_xfrm_socket permissive=1 [ 34.304645][ T2489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.335725][ T28] audit: type=1400 audit(1773308676.374:190): avc: denied { create } for pid=3589 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_rdma_socket permissive=1 [ 34.399356][ T3590] lo speed is unknown, defaulting to 1000 [ 34.414222][ T2489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.441374][ T28] audit: type=1400 audit(1773308676.374:191): avc: denied { write } for pid=3589 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_rdma_socket permissive=1 [ 34.503969][ T28] audit: type=1400 audit(1773308676.424:192): avc: denied { setopt } for pid=3589 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.537601][ T3590] lo speed is unknown, defaulting to 1000 [ 34.677668][ T3603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.764519][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.793431][ T3594] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 34.826653][ T2489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.848101][ T3590] lo speed is unknown, defaulting to 1000 [ 34.871805][ T3590] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 34.890082][ T28] audit: type=1400 audit(1773308676.924:193): avc: denied { create } for pid=3589 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 34.910414][ T3590] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 34.986608][ T3590] lo speed is unknown, defaulting to 1000 [ 35.055362][ T3590] lo speed is unknown, defaulting to 1000 [ 35.079880][ T2489] bridge_slave_1: left allmulticast mode [ 35.090858][ T3594] syz.1.30 (3594) used greatest stack depth: 10312 bytes left [ 35.091707][ T28] audit: type=1400 audit(1773308677.124:194): avc: denied { create } for pid=3609 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 35.124792][ T2489] bridge_slave_1: left promiscuous mode [ 35.132702][ T2489] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.151913][ T2489] bridge_slave_0: left allmulticast mode [ 35.157722][ T2489] bridge_slave_0: left promiscuous mode [ 35.163419][ T28] audit: type=1400 audit(1773308677.124:195): avc: denied { write } for pid=3609 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 35.186041][ T2489] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.195783][ T3617] Unsupported ieee802154 address type: 0 [ 35.195913][ T28] audit: type=1400 audit(1773308677.154:196): avc: denied { create } for pid=3612 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 35.251824][ T28] audit: type=1400 audit(1773308677.164:197): avc: denied { ioctl } for pid=3612 comm="syz.4.35" path="socket:[4958]" dev="sockfs" ino=4958 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 35.256010][ T3626] EXT4-fs (loop4): inodes count not valid: 9 vs 32 [ 35.287011][ T28] audit: type=1400 audit(1773308677.174:198): avc: denied { ioctl } for pid=3609 comm="syz.3.34" path="socket:[5359]" dev="sockfs" ino=5359 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 35.340018][ T2489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.362109][ T2489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.380457][ T2489] bond0 (unregistering): Released all slaves [ 35.390440][ T3590] lo speed is unknown, defaulting to 1000 [ 35.393392][ T3583] chnl_net:caif_netlink_parms(): no params data found [ 35.408568][ T3620] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 35.419080][ T3590] lo speed is unknown, defaulting to 1000 [ 35.426483][ T3590] lo speed is unknown, defaulting to 1000 [ 35.435163][ T3590] lo speed is unknown, defaulting to 1000 [ 35.454122][ T3610] siw: device registration error -23 [ 35.512264][ T3644] set_capacity_and_notify: 3 callbacks suppressed [ 35.512280][ T3644] loop1: detected capacity change from 0 to 256 [ 35.537096][ T3644] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 35.537245][ T2489] hsr_slave_0: left promiscuous mode [ 35.571285][ T2489] hsr_slave_1: left promiscuous mode [ 35.577453][ T2489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.585437][ T2489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.594407][ T2489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.608052][ T2489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.623581][ T2489] veth1_macvtap: left promiscuous mode [ 35.629254][ T2489] veth0_macvtap: left promiscuous mode [ 35.634956][ T2489] veth1_vlan: left promiscuous mode [ 35.640620][ T2489] veth0_vlan: left promiscuous mode [ 35.674802][ T3650] netlink: 'syz.3.37': attribute type 10 has an invalid length. [ 35.682570][ T3650] netlink: 40 bytes leftover after parsing attributes in process `syz.3.37'. [ 35.708663][ T3644] loop1: detected capacity change from 0 to 512 [ 35.764324][ T3644] EXT4-fs: quotafile must be on filesystem root [ 35.826478][ T2489] team0 (unregistering): Port device team_slave_1 removed [ 35.844972][ T2489] team0 (unregistering): Port device team_slave_0 removed [ 35.954146][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.971478][ T3583] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.989893][ T3583] bridge_slave_0: entered allmulticast mode [ 36.001795][ T3583] bridge_slave_0: entered promiscuous mode [ 36.018794][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.035258][ T3583] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.050818][ T3583] bridge_slave_1: entered allmulticast mode [ 36.062335][ T3583] bridge_slave_1: entered promiscuous mode [ 36.201534][ T3666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=3666 comm=syz.4.39 [ 36.223152][ T3583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.301773][ T3670] loop0: detected capacity change from 0 to 1024 [ 36.302741][ T3670] EXT4-fs: inline encryption not supported [ 36.302955][ T3670] EXT4-fs: Ignoring removed bh option [ 36.362996][ T3670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.424000][ T3583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.465144][ T3583] team0: Port device team_slave_0 added [ 36.467198][ T3583] team0: Port device team_slave_1 added [ 36.584742][ T3583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.586026][ T3583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.586068][ T3583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.595416][ T3583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.595733][ T3583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.595775][ T3583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.730274][ T3583] hsr_slave_0: entered promiscuous mode [ 36.730747][ T3583] hsr_slave_1: entered promiscuous mode [ 36.731152][ T3583] debugfs: 'hsr0' already exists in 'hsr' [ 36.731167][ T3583] Cannot create hsr debugfs directory [ 36.789853][ T3677] loop3: detected capacity change from 0 to 4096 [ 36.803081][ T3677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.840120][ T3583] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.849882][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.961914][ T3583] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.075102][ T3691] loop3: detected capacity change from 0 to 128 [ 37.099375][ T3670] syz.0.40 (3670) used greatest stack depth: 9784 bytes left [ 37.100940][ T3583] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.127361][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.203058][ T3661] lo speed is unknown, defaulting to 1000 [ 37.229653][ T3698] loop0: detected capacity change from 0 to 512 [ 37.250452][ T3583] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.269749][ T3698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 37.310611][ T3698] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.565208][ T3698] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.655495][ T3583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.823431][ T3583] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.949602][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 37.976172][ T2489] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.983295][ T2489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.287591][ T2489] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.294714][ T2489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.715888][ T3745] loop1: detected capacity change from 0 to 1024 [ 38.722612][ T3745] EXT4-fs: inline encryption not supported [ 38.728560][ T3745] EXT4-fs: Ignoring removed bh option [ 38.939081][ T3583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.034548][ T3745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.378552][ T3583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.472729][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.610161][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 39.610179][ T28] audit: type=1326 audit(1773308681.644:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3773 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85e07c799 code=0x7ffc0000 [ 39.691325][ T28] audit: type=1326 audit(1773308681.644:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3773 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85e07c799 code=0x7ffc0000 [ 39.748389][ T28] audit: type=1326 audit(1773308681.644:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3773 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85e07c799 code=0x7ffc0000 [ 39.787947][ T3780] loop3: detected capacity change from 0 to 1024 [ 39.795475][ T3780] EXT4-fs: inline encryption not supported [ 39.801688][ T3780] EXT4-fs: Ignoring removed bh option [ 39.928542][ T3783] loop1: detected capacity change from 0 to 128 [ 39.987729][ T3780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.114988][ T28] audit: type=1326 audit(1773308681.694:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3773 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fa85e07c799 code=0x7ffc0000 [ 40.193694][ T28] audit: type=1326 audit(1773308681.694:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3773 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85e07c799 code=0x7ffc0000 [ 40.268131][ T28] audit: type=1326 audit(1773308681.694:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3773 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85e07c799 code=0x7ffc0000 [ 40.308776][ T3583] veth0_vlan: entered promiscuous mode [ 40.318974][ T3583] veth1_vlan: entered promiscuous mode [ 40.325698][ T28] audit: type=1326 audit(1773308681.694:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3773 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa85e07c799 code=0x7ffc0000 [ 40.362296][ T3583] veth0_macvtap: entered promiscuous mode [ 40.369911][ T3583] veth1_macvtap: entered promiscuous mode [ 40.376022][ T28] audit: type=1326 audit(1773308681.694:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3773 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa85e07c799 code=0x7ffc0000 [ 40.486890][ T3794] hub 8-0:1.0: USB hub found [ 40.491657][ T3794] hub 8-0:1.0: 8 ports detected [ 40.501919][ T3794] netlink: 'syz.0.56': attribute type 36 has an invalid length. [ 40.554448][ T3797] netlink: 'syz.0.56': attribute type 10 has an invalid length. [ 40.582767][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.637634][ T3794] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 40.647782][ T3794] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 41.026421][ T3797] macvlan1: entered allmulticast mode [ 41.027278][ T28] audit: type=1400 audit(1773308682.364:215): avc: denied { create } for pid=3791 comm="syz.0.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 41.033877][ T3797] veth1_vlan: entered allmulticast mode [ 41.058769][ T28] audit: type=1400 audit(1773308682.494:216): avc: denied { write } for pid=3791 comm="syz.0.56" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.060096][ T3797] team0: Port device macvlan1 added [ 41.089676][ T3583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.108711][ T3583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.125215][ T262] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.138474][ T262] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.147951][ T262] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.185016][ T262] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.273973][ T2012] kworker/u8:7: attempt to access beyond end of device [ 41.273973][ T2012] loop1: rw=1, sector=145, nr_sectors = 40 limit=128 [ 41.299374][ T2012] kworker/u8:7: attempt to access beyond end of device [ 41.299374][ T2012] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 41.323178][ T3811] 9p: Bad value for 'wfdno' [ 41.350224][ T2012] kworker/u8:7: attempt to access beyond end of device [ 41.350224][ T2012] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 41.364508][ T3811] vlan2: entered promiscuous mode [ 41.369559][ T3811] macvtap0: entered promiscuous mode [ 41.377967][ T3803] loop0: detected capacity change from 0 to 164 [ 41.386200][ T2012] kworker/u8:7: attempt to access beyond end of device [ 41.386200][ T2012] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 41.406033][ T3813] lo speed is unknown, defaulting to 1000 [ 41.408893][ T2012] kworker/u8:7: attempt to access beyond end of device [ 41.408893][ T2012] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 41.434505][ T2012] kworker/u8:7: attempt to access beyond end of device [ 41.434505][ T2012] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 41.453581][ T3803] rock: directory entry would overflow storage [ 41.460697][ T3803] rock: sig=0x5252, size=5, remaining=3 [ 41.480978][ T2012] kworker/u8:7: attempt to access beyond end of device [ 41.480978][ T2012] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 41.568919][ T3818] sock: sock_set_timeout: `syz.5.63' (pid 3818) tries to set negative timeout [ 42.195941][ T2012] kworker/u8:7: attempt to access beyond end of device [ 42.195941][ T2012] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 42.209653][ T2012] kworker/u8:7: attempt to access beyond end of device [ 42.209653][ T2012] loop1: rw=1, sector=305, nr_sectors = 8 limit=128 [ 42.226871][ T2012] kworker/u8:7: attempt to access beyond end of device [ 42.226871][ T2012] loop1: rw=1, sector=321, nr_sectors = 8 limit=128 [ 42.734610][ T3821] loop3: detected capacity change from 0 to 512 [ 42.812288][ T3824] loop5: detected capacity change from 0 to 4096 [ 43.022505][ T3824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.036283][ T3821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 43.096249][ T3821] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.139967][ T3583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.223991][ T3833] siw: device registration error -23 [ 43.425831][ T3833] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 43.594035][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.095673][ T3866] syz.0.71 uses obsolete (PF_INET,SOCK_PACKET) [ 44.117627][ T3860] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 44.333050][ T3862] bond0: (slave bond_slave_1): Releasing backup interface [ 44.436151][ T3884] sock: sock_set_timeout: `syz.3.78' (pid 3884) tries to set negative timeout [ 44.461248][ T3882] loop4: detected capacity change from 0 to 164 [ 44.484395][ T3882] rock: directory entry would overflow storage [ 44.492877][ T3882] rock: sig=0x5252, size=5, remaining=3 [ 46.146481][ T3895] lo speed is unknown, defaulting to 1000 [ 46.270902][ T3901] netlink: 80 bytes leftover after parsing attributes in process `syz.1.81'. [ 46.290709][ T3898] loop0: detected capacity change from 0 to 512 [ 46.321021][ T3898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 46.356486][ T3898] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.377414][ T3906] netlink: 'syz.3.82': attribute type 10 has an invalid length. [ 46.385162][ T3906] netlink: 40 bytes leftover after parsing attributes in process `syz.3.82'. [ 46.393704][ T3911] loop4: detected capacity change from 0 to 128 [ 46.708759][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 47.628814][ T28] kauditd_printk_skb: 151 callbacks suppressed [ 47.628829][ T28] audit: type=1400 audit(1773308689.664:368): avc: denied { create } for pid=3924 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 48.354557][ T3925] process 'syz.1.87' launched './file1' with NULL argv: empty string added [ 48.374355][ T28] audit: type=1400 audit(1773308690.384:369): avc: denied { ioctl } for pid=3924 comm="syz.1.87" path="socket:[6639]" dev="sockfs" ino=6639 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 48.480229][ T3929] loop3: detected capacity change from 0 to 128 [ 48.689501][ T28] audit: type=1400 audit(1773308690.384:370): avc: denied { execute } for pid=3924 comm="syz.1.87" name="file1" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.115806][ T28] audit: type=1400 audit(1773308690.504:371): avc: denied { execute_no_trans } for pid=3924 comm="syz.1.87" path="/14/file1" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.153448][ T3941] siw: device registration error -23 [ 49.212393][ T3941] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 49.241126][ T3943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.91'. [ 49.378326][ T3940] loop1: detected capacity change from 0 to 8192 [ 49.398206][ T3940] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.825496][ T4018] loop0: detected capacity change from 0 to 4096 [ 51.829751][ T28] audit: type=1400 audit(1773308693.864:372): avc: denied { create } for pid=4017 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.861936][ T28] audit: type=1400 audit(1773308693.894:373): avc: denied { setopt } for pid=4017 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.878170][ T4019] Cannot find set identified by id 0 to match [ 51.896346][ T4018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.926252][ T4026] FAULT_INJECTION: forcing a failure. [ 51.926252][ T4026] name failslab, interval 1, probability 0, space 0, times 0 [ 51.927665][ T4028] netlink: 80 bytes leftover after parsing attributes in process `syz.4.97'. [ 51.939308][ T4026] CPU: 0 UID: 0 PID: 4026 Comm: syz.1.95 Not tainted syzkaller #0 PREEMPT(full) [ 51.939336][ T4026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 51.939348][ T4026] Call Trace: [ 51.939355][ T4026] [ 51.939363][ T4026] __dump_stack+0x1d/0x30 [ 51.939390][ T4026] dump_stack_lvl+0x95/0xd0 [ 51.939415][ T4026] dump_stack+0x15/0x1b [ 51.939476][ T4026] should_fail_ex+0x263/0x280 [ 51.939500][ T4026] should_failslab+0x8c/0xb0 [ 51.939521][ T4026] kmem_cache_alloc_noprof+0x66/0x400 [ 51.939624][ T4026] ? ep_insert+0x2cf/0xe00 [ 51.939676][ T4026] ep_insert+0x2cf/0xe00 [ 51.939753][ T4026] ? security_capable+0x7b/0x90 [ 51.939777][ T4026] do_epoll_ctl+0x686/0x8a0 [ 51.939874][ T4026] __x64_sys_epoll_ctl+0xcb/0x100 [ 51.939903][ T4026] x64_sys_call+0x2a8b/0x3020 [ 51.939972][ T4026] do_syscall_64+0x12c/0x370 [ 51.939994][ T4026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.940017][ T4026] RIP: 0033:0x7fa85e07c799 [ 51.940034][ T4026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.940052][ T4026] RSP: 002b:00007fa85cad7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 51.940113][ T4026] RAX: ffffffffffffffda RBX: 00007fa85e2f5fa0 RCX: 00007fa85e07c799 [ 51.940127][ T4026] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005 [ 51.940139][ T4026] RBP: 00007fa85cad7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.940152][ T4026] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 51.940165][ T4026] R13: 00007fa85e2f6038 R14: 00007fa85e2f5fa0 R15: 00007ffe2e05c058 [ 51.940228][ T4026] [ 51.992387][ T28] audit: type=1400 audit(1773308693.964:374): avc: denied { block_suspend } for pid=4025 comm="syz.1.95" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.012840][ T4024] netlink: 'syz.5.96': attribute type 10 has an invalid length. [ 52.076490][ T4032] netlink: 80 bytes leftover after parsing attributes in process `syz.3.98'. [ 52.081376][ T4024] netlink: 40 bytes leftover after parsing attributes in process `syz.5.96'. [ 52.096133][ T28] audit: type=1400 audit(1773308694.064:375): avc: denied { create } for pid=4017 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.097666][ T4024] dummy0: entered promiscuous mode [ 52.112679][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.113690][ T4024] dummy0: entered allmulticast mode [ 52.158397][ T28] audit: type=1400 audit(1773308694.064:376): avc: denied { map } for pid=4017 comm="syz.3.93" path="socket:[6747]" dev="sockfs" ino=6747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.167795][ T4024] bridge0: port 3(dummy0) entered blocking state [ 52.202738][ T28] audit: type=1400 audit(1773308694.064:377): avc: denied { read } for pid=4017 comm="syz.3.93" path="socket:[6747]" dev="sockfs" ino=6747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.273670][ T4024] bridge0: port 3(dummy0) entered disabled state [ 52.281629][ T4024] bridge0: port 3(dummy0) entered blocking state [ 52.288164][ T4024] bridge0: port 3(dummy0) entered forwarding state [ 52.295930][ T4042] loop1: detected capacity change from 0 to 512 [ 52.311708][ T4037] lo speed is unknown, defaulting to 1000 [ 52.323020][ T4042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 52.356679][ T4042] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.506984][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 52.553626][ T4051] loop1: detected capacity change from 0 to 164 [ 52.581003][ T4051] rock: directory entry would overflow storage [ 52.587731][ T4051] rock: sig=0x5252, size=5, remaining=3 [ 52.625699][ T4052] loop5: detected capacity change from 0 to 1024 [ 52.633218][ T4052] EXT4-fs: inline encryption not supported [ 52.639281][ T4052] EXT4-fs: Ignoring removed bh option [ 52.655109][ T4052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.690861][ T28] audit: type=1400 audit(1773308694.714:378): avc: denied { read append } for pid=4046 comm="syz.5.101" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.822102][ T4059] sock: sock_set_timeout: `syz.3.104' (pid 4059) tries to set negative timeout [ 54.033257][ T4061] loop4: detected capacity change from 0 to 512 [ 54.086794][ T28] audit: type=1326 audit(1773308696.124:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40853ac799 code=0x7ffc0000 [ 54.110183][ T3583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.111439][ T28] audit: type=1326 audit(1773308696.124:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40853ac799 code=0x7ffc0000 [ 54.142696][ T28] audit: type=1326 audit(1773308696.124:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40853ac799 code=0x7ffc0000 [ 54.145556][ T4061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 54.167504][ T28] audit: type=1326 audit(1773308696.124:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40853ac799 code=0x7ffc0000 [ 54.209248][ T28] audit: type=1326 audit(1773308696.124:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40853ac799 code=0x7ffc0000 [ 54.235911][ T4061] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.269196][ T28] audit: type=1326 audit(1773308696.124:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40853ac799 code=0x7ffc0000 [ 54.302603][ T28] audit: type=1326 audit(1773308696.124:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40853ac799 code=0x7ffc0000 [ 54.351599][ T28] audit: type=1326 audit(1773308696.124:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40853ac799 code=0x7ffc0000 [ 54.391323][ T28] audit: type=1326 audit(1773308696.124:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.0.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f40853ac799 code=0x7ffc0000 [ 54.415552][ T4072] tipc: Started in network mode [ 54.420529][ T4072] tipc: Node identity a27b21f7ae32, cluster identity 4711 [ 54.431544][ T4072] tipc: Enabled bearer , priority 0 [ 54.448935][ T4072] syzkaller0: entered promiscuous mode [ 54.455550][ T4072] syzkaller0: entered allmulticast mode [ 54.466004][ T4072] netlink: 44 bytes leftover after parsing attributes in process `syz.1.107'. [ 54.476537][ T4072] syzkaller0: mtu less than device minimum [ 54.485007][ T4071] tipc: Resetting bearer [ 54.512070][ T4071] tipc: Disabling bearer [ 54.795780][ T4082] syzkaller0: entered promiscuous mode [ 54.801471][ T4082] syzkaller0: entered allmulticast mode [ 54.809340][ T4079] netlink: 44 bytes leftover after parsing attributes in process `syz.0.108'. [ 54.829182][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 54.931561][ T4096] netlink: 'syz.1.111': attribute type 10 has an invalid length. [ 55.383431][ T4096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.111'. [ 55.449395][ T4103] loop0: detected capacity change from 0 to 512 [ 55.456112][ T4096] dummy0: entered promiscuous mode [ 55.492837][ T4096] dummy0: entered allmulticast mode [ 55.505404][ T4096] bridge0: port 3(dummy0) entered blocking state [ 55.538078][ T4096] bridge0: port 3(dummy0) entered disabled state [ 55.544772][ T4103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 55.568396][ T4096] bridge0: port 3(dummy0) entered blocking state [ 55.574931][ T4096] bridge0: port 3(dummy0) entered forwarding state [ 55.593914][ T4103] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.609036][ T4074] loop5: detected capacity change from 0 to 2048 [ 55.644169][ T4105] loop4: detected capacity change from 0 to 164 [ 55.662800][ T4074] EXT4-fs: Ignoring removed i_version option [ 55.795049][ T4105] rock: directory entry would overflow storage [ 55.802679][ T4105] rock: sig=0x5252, size=5, remaining=3 [ 55.826334][ T4074] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.840456][ T4074] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.847236][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 55.987307][ T4115] loop1: detected capacity change from 0 to 512 [ 56.083884][ T4115] EXT4-fs (loop1): 1 truncate cleaned up [ 56.107397][ T4115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.660346][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.714182][ T4125] SELinux: policydb string length 2097160 does not match expected length 8 [ 56.723263][ T4125] SELinux: failed to load policy [ 56.791049][ T4127] geneve1: entered promiscuous mode [ 56.796658][ T4127] macsec1: entered promiscuous mode [ 56.803986][ T4127] macsec1: entered allmulticast mode [ 56.847128][ T4137] loop1: detected capacity change from 0 to 512 [ 56.860357][ T4074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.875879][ T4127] geneve1: entered allmulticast mode [ 56.955940][ T4137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 56.979879][ T4127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.122'. [ 56.989060][ T4127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 56.991641][ T4137] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.069284][ T4150] sock: sock_set_timeout: `syz.0.126' (pid 4150) tries to set negative timeout [ 57.987622][ T28] kauditd_printk_skb: 118 callbacks suppressed [ 57.987677][ T28] audit: type=1400 audit(1773308700.024:506): avc: denied { ioctl } for pid=4151 comm="syz.3.127" path="socket:[6925]" dev="sockfs" ino=6925 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.049298][ T4160] loop3: detected capacity change from 0 to 1024 [ 58.103021][ T4160] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.116798][ T4160] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 58.126608][ T4160] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.179334][ T4160] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 58.187605][ T4160] EXT4-fs (loop3): orphan cleanup on readonly fs [ 58.195480][ T4160] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.127: Inode bitmap for bg 0 marked uninitialized [ 58.207964][ T4160] loop3: lost filesystem error report for type 5 error -117 [ 58.209231][ T4160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.328547][ T4166] loop4: detected capacity change from 0 to 512 [ 58.473727][ T4166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 58.511780][ T4166] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.546103][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.555372][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 58.601033][ T4174] loop1: detected capacity change from 0 to 128 [ 58.803396][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 59.039983][ T4173] loop3: detected capacity change from 0 to 512 [ 59.272185][ T4173] EXT4-fs (loop3): 1 truncate cleaned up [ 59.346179][ T4173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.935971][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.185866][ T4183] syzkaller1: entered promiscuous mode [ 60.201307][ T4183] syzkaller1: entered allmulticast mode [ 60.361501][ T28] audit: type=1400 audit(1773308702.354:507): avc: denied { bind } for pid=4185 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.389331][ T4188] netlink: 80 bytes leftover after parsing attributes in process `syz.0.135'. [ 60.430927][ T28] audit: type=1400 audit(1773308702.354:508): avc: denied { name_bind } for pid=4185 comm="syz.0.134" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 60.486735][ T28] audit: type=1400 audit(1773308702.354:509): avc: denied { node_bind } for pid=4185 comm="syz.0.134" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 60.598911][ T4197] lo speed is unknown, defaulting to 1000 [ 60.771468][ T28] audit: type=1400 audit(1773308702.804:510): avc: denied { sqpoll } for pid=4201 comm="syz.5.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 60.877246][ T4208] loop4: detected capacity change from 0 to 512 [ 60.913717][ T4208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 61.037952][ T4208] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.058094][ T4211] loop3: detected capacity change from 0 to 512 [ 61.122121][ T28] audit: type=1400 audit(1773308703.154:511): avc: denied { remount } for pid=4198 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.266154][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 61.456113][ T4202] lo speed is unknown, defaulting to 1000 [ 61.655037][ T28] audit: type=1400 audit(1773308703.624:512): avc: denied { write } for pid=4219 comm="syz.0.143" name="ptype" dev="proc" ino=4026532401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 61.850080][ T4231] loop4: detected capacity change from 0 to 128 [ 63.206784][ T4245] loop1: detected capacity change from 0 to 512 [ 63.384364][ T4245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 63.441611][ T4245] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.671926][ T4250] loop3: detected capacity change from 0 to 2048 [ 63.694811][ T4250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.740489][ T4250] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.801318][ T28] audit: type=1400 audit(1773308705.834:513): avc: granted { setsecparam } for pid=4249 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 63.862331][ T4254] netlink: 80 bytes leftover after parsing attributes in process `syz.4.152'. [ 63.902832][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 63.942019][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.958509][ T4258] loop1: detected capacity change from 0 to 512 [ 64.006597][ T4258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 64.073356][ T4263] sock: sock_set_timeout: `syz.3.154' (pid 4263) tries to set negative timeout [ 64.100002][ T4258] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.398778][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 64.443494][ T4276] loop5: detected capacity change from 0 to 128 [ 64.510826][ T28] audit: type=1400 audit(1773308706.544:514): avc: denied { getopt } for pid=4273 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 64.897228][ T28] audit: type=1326 audit(1773308706.934:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7e62c799 code=0x7ffc0000 [ 65.263198][ T4289] loop1: detected capacity change from 0 to 4096 [ 65.490867][ T28] audit: type=1326 audit(1773308707.044:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7e62c799 code=0x7ffc0000 [ 65.571026][ T4289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.630822][ T28] audit: type=1326 audit(1773308707.064:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7e62c799 code=0x7ffc0000 [ 65.699734][ T28] audit: type=1326 audit(1773308707.064:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7e62c799 code=0x7ffc0000 [ 65.751024][ T28] audit: type=1326 audit(1773308707.064:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c7e62c799 code=0x7ffc0000 [ 65.751057][ T28] audit: type=1326 audit(1773308707.064:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7e62c799 code=0x7ffc0000 [ 65.751084][ T28] audit: type=1326 audit(1773308707.064:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7e62c799 code=0x7ffc0000 [ 65.751142][ T28] audit: type=1326 audit(1773308707.064:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7e62c799 code=0x7ffc0000 [ 65.824509][ T4298] SELinux: policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c [ 65.824659][ T4298] SELinux: failed to load policy [ 65.825701][ T4298] loop7: detected capacity change from 0 to 16384 [ 65.860166][ T4289] syzkaller1: entered promiscuous mode [ 65.860188][ T4289] syzkaller1: entered allmulticast mode [ 66.447652][ T4307] loop4: detected capacity change from 0 to 512 [ 66.519197][ T4307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.535717][ T4316] loop5: detected capacity change from 0 to 512 [ 66.537227][ T4307] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.566812][ T4316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 66.600090][ T4307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.163'. [ 66.613950][ T4316] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.714610][ T4321] EXT4-fs (loop4): shut down requested (0) [ 66.738062][ T4327] sock: sock_set_timeout: `syz.0.169' (pid 4327) tries to set negative timeout [ 66.840636][ T3583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 66.908001][ T4332] siw: device registration error -23 [ 67.047803][ T4332] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 67.060862][ T4338] loop3: detected capacity change from 0 to 512 [ 67.088218][ T4338] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.103417][ T4338] EXT4-fs: Ignoring removed bh option [ 67.109224][ T4338] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.116243][ T4338] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.128132][ T4338] EXT4-fs: Mount option(s) incompatible with ext2 [ 67.139701][ T4341] loop5: detected capacity change from 0 to 256 [ 67.158788][ T4341] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 67.268889][ T4338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.171'. [ 67.282121][ T4341] EXT4-fs: quotafile must be on filesystem root [ 67.308869][ T4338] netlink: 'syz.3.171': attribute type 7 has an invalid length. [ 67.350863][ T4338] netlink: 'syz.3.171': attribute type 8 has an invalid length. [ 67.403152][ T4338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.171'. [ 67.658329][ T4347] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.674689][ T4347] EXT4-fs (loop3): mount failed [ 67.772354][ T4352] netlink: 80 bytes leftover after parsing attributes in process `syz.3.175'. [ 67.983624][ T4359] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.001967][ T4359] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.020242][ T4359] EXT4-fs error (device loop0): ext4_get_first_dir_block:3538: inode #12: comm syz.0.177: directory missing '.' [ 68.046258][ T4363] lo speed is unknown, defaulting to 1000 [ 68.057966][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.105944][ T4368] SELinux: policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c [ 68.116519][ T4368] SELinux: failed to load policy [ 68.155764][ T4289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 68.183203][ T4370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 68.195863][ T4370] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.210300][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.226543][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.285566][ T4375] netlink: 'syz.4.181': attribute type 9 has an invalid length. [ 68.293456][ T4375] netlink: 'syz.4.181': attribute type 6 has an invalid length. [ 68.348974][ T4381] set_capacity_and_notify: 4 callbacks suppressed [ 68.349047][ T4381] loop4: detected capacity change from 0 to 164 [ 68.378252][ T4381] rock: directory entry would overflow storage [ 68.388944][ T4381] rock: sig=0x5252, size=5, remaining=3 [ 68.392678][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 69.007338][ T4387] loop0: detected capacity change from 0 to 512 [ 69.024095][ T4387] EXT4-fs (loop0): 1 truncate cleaned up [ 69.036876][ T4387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.193933][ T4396] sock: sock_set_timeout: `syz.5.187' (pid 4396) tries to set negative timeout [ 69.832618][ T4397] siw: device registration error -23 [ 69.897500][ T71] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 465: padding at end of block bitmap is not set [ 69.940044][ T71] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 2158284 with max blocks 12 with error 28 [ 69.953107][ T71] EXT4-fs (loop0): This should not happen!! Data will be lost [ 69.953107][ T71] [ 69.962872][ T71] EXT4-fs (loop0): Total free blocks count 0 [ 69.968998][ T71] EXT4-fs (loop0): Free/Dirty block details [ 69.974948][ T71] EXT4-fs (loop0): free_blocks=0 [ 69.979988][ T71] EXT4-fs (loop0): dirty_blocks=12 [ 69.985171][ T71] EXT4-fs (loop0): Block reservation details [ 69.991188][ T71] EXT4-fs (loop0): i_reserved_data_blocks=12 [ 70.015637][ T28] kauditd_printk_skb: 182 callbacks suppressed [ 70.015654][ T28] audit: type=1400 audit(1773308712.054:704): avc: denied { setopt } for pid=4402 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.064113][ T4397] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 70.091024][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.261121][ T4414] loop0: detected capacity change from 0 to 256 [ 70.676195][ T4414] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 70.767719][ T4411] netlink: 60 bytes leftover after parsing attributes in process `syz.4.192'. [ 70.804523][ T4411] loop4: detected capacity change from 0 to 512 [ 70.835371][ T28] audit: type=1400 audit(1773308712.874:705): avc: denied { nlmsg_read } for pid=4422 comm="syz.3.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.911082][ T28] audit: type=1400 audit(1773308712.944:706): avc: denied { create } for pid=4424 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.946282][ T4430] netlink: 80 bytes leftover after parsing attributes in process `syz.3.196'. [ 70.954980][ T28] audit: type=1400 audit(1773308712.974:707): avc: denied { ioctl } for pid=4424 comm="syz.4.194" path="socket:[8345]" dev="sockfs" ino=8345 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.957840][ T4414] loop0: detected capacity change from 0 to 512 [ 70.989634][ T28] audit: type=1400 audit(1773308713.024:708): avc: denied { getopt } for pid=4424 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.086494][ T4426] lo speed is unknown, defaulting to 1000 [ 71.119323][ T4414] EXT4-fs: quotafile must be on filesystem root [ 71.128814][ T4435] lo speed is unknown, defaulting to 1000 [ 71.458019][ T4445] syzkaller1: entered promiscuous mode [ 71.463893][ T4445] syzkaller1: entered allmulticast mode [ 71.542970][ T4450] SELinux: policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c [ 71.561059][ T4450] SELinux: failed to load policy [ 71.854121][ T28] audit: type=1400 audit(1773308713.884:709): avc: denied { mount } for pid=4456 comm="syz.3.206" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 71.895306][ T3477] IPVS: starting estimator thread 0... [ 71.917472][ T28] audit: type=1400 audit(1773308713.934:710): avc: denied { setopt } for pid=4460 comm="syz.3.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.999717][ T4461] loop3: detected capacity change from 0 to 1024 [ 72.006818][ T4461] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 72.020429][ T4462] IPVS: using max 2688 ests per chain, 134400 per kthread [ 72.024849][ T28] audit: type=1400 audit(1773308713.934:711): avc: denied { read write } for pid=4460 comm="syz.3.207" dev="sockfs" ino=7621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.029387][ T4461] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 72.073031][ T4461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.148312][ T4467] loop1: detected capacity change from 0 to 512 [ 72.228679][ T4467] EXT4-fs (loop1): 1 truncate cleaned up [ 72.266318][ T4467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.360950][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.469627][ T28] audit: type=1400 audit(1773308714.504:712): avc: denied { getopt } for pid=4474 comm="syz.3.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.520610][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.559210][ T4478] sock: sock_set_timeout: `syz.3.211' (pid 4478) tries to set negative timeout [ 72.757557][ T4482] lo speed is unknown, defaulting to 1000 [ 72.885528][ T4488] loop5: detected capacity change from 0 to 512 [ 72.909721][ T4488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.910130][ T4488] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.955241][ T3583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.958584][ T4496] loop0: detected capacity change from 0 to 512 [ 73.199095][ T4496] /dev/loop0: Can't open blockdev [ 73.316928][ T4503] loop4: detected capacity change from 0 to 256 [ 73.380727][ T4503] msdos: Bad value for 'fmask' [ 73.422447][ T4500] siw: device registration error -23 [ 73.505682][ T4517] set_capacity_and_notify: 1 callbacks suppressed [ 73.505701][ T4517] loop1: detected capacity change from 0 to 512 [ 73.524295][ T4500] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 73.543787][ T28] audit: type=1400 audit(1773308715.584:713): avc: denied { write } for pid=4499 comm="syz.5.217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 73.615382][ T4517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 73.630153][ T4525] loop4: detected capacity change from 0 to 256 [ 73.642188][ T4517] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.667805][ T4525] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 73.836988][ T4525] loop4: detected capacity change from 0 to 512 [ 73.857653][ T4525] EXT4-fs: quotafile must be on filesystem root [ 74.234634][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 74.414987][ T4547] netlink: 32 bytes leftover after parsing attributes in process `syz.1.230'. [ 74.948629][ T4553] loop1: detected capacity change from 0 to 512 [ 74.971547][ T4553] EXT4-fs: Ignoring removed i_version option [ 74.984335][ T4553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.053343][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 75.053408][ T28] audit: type=1400 audit(1773308717.064:720): avc: denied { map } for pid=4552 comm="syz.1.232" path="/47/file1/cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.113152][ T4556] syzkaller1: entered promiscuous mode [ 75.118809][ T4556] syzkaller1: entered allmulticast mode [ 75.136436][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.334651][ T4562] loop1: detected capacity change from 0 to 512 [ 75.373095][ T4562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 75.478491][ T4567] loop5: detected capacity change from 0 to 1024 [ 75.486838][ T4567] EXT4-fs: inline encryption not supported [ 75.493066][ T4567] EXT4-fs: Ignoring removed bh option [ 75.511869][ T4562] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.592761][ T4567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.768532][ T4572] SELinux: policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c [ 75.879920][ T4572] SELinux: failed to load policy [ 75.918144][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 75.963260][ T4578] loop1: detected capacity change from 0 to 512 [ 76.011833][ T4578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 76.091604][ T4578] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.163613][ T28] audit: type=1400 audit(1773308718.204:721): avc: denied { rmdir } for pid=3583 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.203296][ T3583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.203758][ T4588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 76.258956][ T4588] bond_slave_0: entered promiscuous mode [ 76.263310][ T4592] netlink: 20 bytes leftover after parsing attributes in process `syz.5.243'. [ 76.282209][ T4588] macvlan2: entered promiscuous mode [ 76.291096][ T4588] bond0: entered promiscuous mode [ 76.300201][ T4588] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 76.383041][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 76.447630][ T28] audit: type=1326 audit(1773308718.474:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85e07c799 code=0x7ffc0000 [ 76.456906][ T4604] lo speed is unknown, defaulting to 1000 [ 76.499849][ T28] audit: type=1326 audit(1773308718.484:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85e07c799 code=0x7ffc0000 [ 76.551935][ T28] audit: type=1326 audit(1773308718.524:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85e07c799 code=0x7ffc0000 [ 76.601081][ T4598] loop5: detected capacity change from 0 to 512 [ 76.659887][ T28] audit: type=1326 audit(1773308718.524:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85e07c799 code=0x7ffc0000 [ 76.683704][ T28] audit: type=1326 audit(1773308718.524:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa85e07c799 code=0x7ffc0000 [ 76.720530][ T28] audit: type=1326 audit(1773308718.524:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85e07c799 code=0x7ffc0000 [ 76.744420][ T28] audit: type=1326 audit(1773308718.524:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85e07c799 code=0x7ffc0000 [ 76.744930][ T4598] EXT4-fs (loop5): 1 truncate cleaned up [ 76.768108][ T28] audit: type=1326 audit(1773308718.524:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4601 comm="syz.1.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85e07c799 code=0x7ffc0000 [ 76.817398][ T4598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.859130][ T4608] loop1: detected capacity change from 0 to 512 [ 76.915681][ T4608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 76.947530][ T4608] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.078125][ T50] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 465: padding at end of block bitmap is not set [ 77.094920][ T50] EXT4-fs (loop5): Delayed block allocation failed for inode 13 at logical offset 2158284 with max blocks 12 with error 28 [ 77.116916][ T4618] lo speed is unknown, defaulting to 1000 [ 77.122843][ T50] EXT4-fs (loop5): This should not happen!! Data will be lost [ 77.122843][ T50] [ 77.132816][ T50] EXT4-fs (loop5): Total free blocks count 0 [ 77.138818][ T50] EXT4-fs (loop5): Free/Dirty block details [ 77.149053][ T50] EXT4-fs (loop5): free_blocks=0 [ 77.155792][ T50] EXT4-fs (loop5): dirty_blocks=12 [ 77.180972][ T50] EXT4-fs (loop5): Block reservation details [ 77.191240][ T50] EXT4-fs (loop5): i_reserved_data_blocks=12 [ 77.198435][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 77.235324][ T4624] loop0: detected capacity change from 0 to 512 [ 77.263895][ T4624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 77.288895][ T4624] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.342435][ T3583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.599847][ T4639] lo speed is unknown, defaulting to 1000 [ 77.654291][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 77.761060][ T4643] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.779006][ T4652] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4652 comm=syz.0.261 [ 77.813781][ T4643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.019780][ T3583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.233156][ T4664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 78.279069][ T4669] IPVS: Scheduler module ip_vs_ not found [ 78.292119][ T4664] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.461023][ T4660] EXT4-fs (loop3): 1 truncate cleaned up [ 78.513997][ T4680] lo speed is unknown, defaulting to 1000 [ 78.523171][ T4660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.590027][ T3583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 78.653388][ T4685] set_capacity_and_notify: 3 callbacks suppressed [ 78.653406][ T4685] loop5: detected capacity change from 0 to 128 [ 78.752540][ T4688] loop0: detected capacity change from 0 to 128 [ 78.905483][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.943721][ T4690] syzkaller1: entered promiscuous mode [ 78.949242][ T4690] syzkaller1: entered allmulticast mode [ 81.000942][ T4700] netlink: 'syz.4.273': attribute type 1 has an invalid length. [ 81.014728][ T4700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.378977][ T28] kauditd_printk_skb: 135 callbacks suppressed [ 82.379054][ T28] audit: type=1400 audit(1773308724.414:865): avc: denied { read } for pid=4704 comm="syz.1.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.451675][ T4708] loop1: detected capacity change from 0 to 512 [ 82.551696][ T4711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=4711 comm=syz.3.277 [ 82.604444][ T4709] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 82.642751][ T28] audit: type=1326 audit(1773308724.674:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40853ac799 code=0x7ffc0000 [ 82.642805][ T28] audit: type=1326 audit(1773308724.674:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40853ac799 code=0x7ffc0000 [ 82.642831][ T28] audit: type=1326 audit(1773308724.674:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40853ac799 code=0x7ffc0000 [ 82.642876][ T28] audit: type=1326 audit(1773308724.674:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40853ac799 code=0x7ffc0000 [ 82.644471][ T28] audit: type=1326 audit(1773308724.684:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40853ac799 code=0x7ffc0000 [ 82.644508][ T28] audit: type=1326 audit(1773308724.684:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40853ac799 code=0x7ffc0000 [ 82.644534][ T28] audit: type=1326 audit(1773308724.684:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40853ac799 code=0x7ffc0000 [ 82.644627][ T28] audit: type=1326 audit(1773308724.684:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f40853ac799 code=0x7ffc0000 [ 82.644651][ T28] audit: type=1326 audit(1773308724.684:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4712 comm="syz.0.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40853ac799 code=0x7ffc0000 [ 82.661730][ T4708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 82.661797][ T4708] ext4 filesystem being mounted at /58/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.712469][ T4717] lo speed is unknown, defaulting to 1000 [ 82.773539][ T4705] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 1632 free clusters [ 82.951645][ T4705] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 10 with max blocks 1 with error 28 [ 82.951675][ T4705] EXT4-fs (loop1): This should not happen!! Data will be lost [ 82.951675][ T4705] [ 82.951690][ T4705] EXT4-fs (loop1): Total free blocks count 0 [ 82.951705][ T4705] EXT4-fs (loop1): Free/Dirty block details [ 82.951732][ T4705] EXT4-fs (loop1): free_blocks=1536 [ 82.951747][ T4705] EXT4-fs (loop1): dirty_blocks=1 [ 82.951760][ T4705] EXT4-fs (loop1): Block reservation details [ 82.951770][ T4705] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 82.983039][ T4729] loop0: detected capacity change from 0 to 512 [ 83.015224][ T4729] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 83.015290][ T4729] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.041584][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 83.160920][ T4731] loop5: detected capacity change from 0 to 512 [ 83.239230][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 83.267396][ T4731] EXT4-fs (loop5): 1 truncate cleaned up [ 83.311687][ T4744] netlink: 80 bytes leftover after parsing attributes in process `syz.0.285'. [ 83.388277][ T4731] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.398189][ T4739] lo speed is unknown, defaulting to 1000 [ 83.414422][ T4745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 83.439205][ T4743] lo speed is unknown, defaulting to 1000 [ 83.502737][ T4749] loop3: detected capacity change from 0 to 128 [ 83.876182][ T4753] loop4: detected capacity change from 0 to 4096 [ 83.948765][ T4753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.314530][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.421732][ T4760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 84.521159][ T4760] bond_slave_0: entered promiscuous mode [ 84.526915][ T4760] bond_slave_1: entered promiscuous mode [ 84.569213][ T4760] macvlan2: entered promiscuous mode [ 84.589942][ T30] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 465: padding at end of block bitmap is not set [ 84.605684][ T4731] syz.5.282 (4731) used greatest stack depth: 9352 bytes left [ 84.613575][ T4760] bond0: entered promiscuous mode [ 84.620664][ T4760] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 84.631065][ T30] EXT4-fs (loop5): Delayed block allocation failed for inode 13 at logical offset 2158284 with max blocks 12 with error 117 [ 84.680173][ T30] EXT4-fs (loop5): This should not happen!! Data will be lost [ 84.680173][ T30] [ 84.720467][ T3583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.212547][ T4774] SELinux: policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c [ 85.243535][ T4774] SELinux: failed to load policy [ 85.345928][ T4779] loop3: detected capacity change from 0 to 512 [ 85.374078][ T4779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 85.424053][ T4779] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.456329][ T4783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=531 sclass=netlink_route_socket pid=4783 comm=syz.5.296 [ 85.600824][ T4786] lo speed is unknown, defaulting to 1000 [ 85.633026][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 85.665048][ T4790] netlink: 176 bytes leftover after parsing attributes in process `syz.3.297'. [ 85.728395][ T4792] capability: warning: `syz.4.298' uses 32-bit capabilities (legacy support in use) [ 85.807688][ T4792] io-wq is not configured for unbound workers [ 85.886293][ T4801] sock: sock_set_timeout: `syz.4.300' (pid 4801) tries to set negative timeout [ 86.028917][ T4804] FAULT_INJECTION: forcing a failure. [ 86.028917][ T4804] name failslab, interval 1, probability 0, space 0, times 0 [ 86.041817][ T4804] CPU: 0 UID: 0 PID: 4804 Comm: syz.5.301 Not tainted syzkaller #0 PREEMPT(full) [ 86.041846][ T4804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 86.041859][ T4804] Call Trace: [ 86.041866][ T4804] [ 86.041945][ T4804] __dump_stack+0x1d/0x30 [ 86.041965][ T4804] dump_stack_lvl+0x95/0xd0 [ 86.042003][ T4804] dump_stack+0x15/0x1b [ 86.042087][ T4804] should_fail_ex+0x263/0x280 [ 86.042119][ T4804] should_failslab+0x8c/0xb0 [ 86.042134][ T4804] __kmalloc_noprof+0xb8/0x4e0 [ 86.042154][ T4804] ? nla_strdup+0x78/0xc0 [ 86.042239][ T4804] nla_strdup+0x78/0xc0 [ 86.042255][ T4804] nf_tables_newtable+0x3ba/0xea0 [ 86.042354][ T4804] nfnetlink_rcv+0xc1e/0x1720 [ 86.042383][ T4804] netlink_unicast+0x5c0/0x690 [ 86.042400][ T4804] netlink_sendmsg+0x5c8/0x6f0 [ 86.042446][ T4804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.042464][ T4804] ____sys_sendmsg+0x563/0x5b0 [ 86.042485][ T4804] ___sys_sendmsg+0x195/0x1e0 [ 86.042581][ T4804] __x64_sys_sendmsg+0xd4/0x160 [ 86.042601][ T4804] x64_sys_call+0x194c/0x3020 [ 86.042618][ T4804] do_syscall_64+0x12c/0x370 [ 86.042687][ T4804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.042702][ T4804] RIP: 0033:0x7f457f03c799 [ 86.042713][ T4804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.042726][ T4804] RSP: 002b:00007f457da97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.042740][ T4804] RAX: ffffffffffffffda RBX: 00007f457f2b5fa0 RCX: 00007f457f03c799 [ 86.042750][ T4804] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 86.042797][ T4804] RBP: 00007f457da97090 R08: 0000000000000000 R09: 0000000000000000 [ 86.042805][ T4804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.042813][ T4804] R13: 00007f457f2b6038 R14: 00007f457f2b5fa0 R15: 00007ffe8b3ef138 [ 86.042874][ T4804] [ 86.329395][ T4811] loop5: detected capacity change from 0 to 4096 [ 86.346227][ T4811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.376456][ T4814] loop4: detected capacity change from 0 to 128 [ 86.424184][ T4817] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.303: corrupted inode contents [ 86.442930][ T4817] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.443148][ T4817] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.303: mark_inode_dirty error [ 86.488620][ T4819] loop0: detected capacity change from 0 to 512 [ 86.495649][ T4817] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.495992][ T4817] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.303: corrupted inode contents [ 86.517230][ T4817] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.519186][ T4817] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.303: mark_inode_dirty error [ 86.539608][ T4817] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.539839][ T4817] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.303: corrupted inode contents [ 86.579912][ T4817] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.580938][ T4817] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.303: mark_inode_dirty error [ 86.685264][ T4819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.773232][ T4830] SELinux: policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c [ 86.784119][ T4830] SELinux: failed to load policy [ 86.851975][ T4819] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.864627][ T4817] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.872554][ T4817] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.303: corrupted inode contents [ 86.997445][ T4817] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.997962][ T4817] EXT4-fs error (device loop5): ext4_truncate:4587: inode #15: comm syz.5.303: mark_inode_dirty error [ 87.235886][ T4817] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.236853][ T4817] EXT4-fs error (device loop5): ext4_evict_inode:266: comm syz.5.303: couldn't truncate inode 15 (err -117) [ 87.300773][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 88.348278][ T4840] loop0: detected capacity change from 0 to 1024 [ 88.355207][ T4840] EXT4-fs: inline encryption not supported [ 88.361340][ T4840] EXT4-fs: Ignoring removed bh option [ 88.725612][ T3583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.754829][ T4840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.913172][ T28] kauditd_printk_skb: 493 callbacks suppressed [ 88.913188][ T28] audit: type=1400 audit(1773308730.954:1368): avc: denied { ioctl } for pid=4845 comm="syz.5.312" path="pid:[4026532378]" dev="nsfs" ino=4026532378 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 89.042108][ T28] audit: type=1400 audit(1773308730.954:1369): avc: denied { read } for pid=4845 comm="syz.5.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.114754][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.152884][ T4853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 89.163319][ T4852] loop1: detected capacity change from 0 to 512 [ 89.211056][ T4852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.247324][ T4852] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.256771][ T4855] siw: device registration error -23 [ 89.373033][ T4850] xt_TCPMSS: Only works on TCP SYN packets [ 89.380822][ T4863] netlink: 277 bytes leftover after parsing attributes in process `syz.1.315'. [ 89.390866][ T4863] hub 8-0:1.0: USB hub found [ 89.396742][ T4863] hub 8-0:1.0: 8 ports detected [ 89.405697][ T4863] netlink: 'syz.1.315': attribute type 10 has an invalid length. [ 89.444241][ T28] audit: type=1400 audit(1773308731.484:1370): avc: denied { unlink } for pid=3311 comm="syz-executor" name="bus" dev="tmpfs" ino=328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.515618][ T4855] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 89.525703][ T28] audit: type=1326 audit(1773308731.524:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff1dec799 code=0x7ffc0000 [ 89.525735][ T28] audit: type=1326 audit(1773308731.524:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff1dec799 code=0x7ffc0000 [ 89.525761][ T28] audit: type=1326 audit(1773308731.524:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff1dec799 code=0x7ffc0000 [ 89.525809][ T28] audit: type=1326 audit(1773308731.524:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feff1dec799 code=0x7ffc0000 [ 89.525834][ T28] audit: type=1326 audit(1773308731.524:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff1dec799 code=0x7ffc0000 [ 89.525860][ T28] audit: type=1326 audit(1773308731.524:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff1dec799 code=0x7ffc0000 [ 89.525928][ T28] audit: type=1326 audit(1773308731.524:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4871 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff1dec799 code=0x7ffc0000 [ 89.697229][ T4863] macvlan1: entered allmulticast mode [ 89.704396][ T4863] veth1_vlan: entered allmulticast mode [ 89.712515][ T4863] team0: Port device macvlan1 added [ 89.717892][ T4874] netlink: 80 bytes leftover after parsing attributes in process `syz.4.318'. [ 89.843654][ T4893] SELinux: policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c [ 89.856608][ T4893] SELinux: failed to load policy [ 89.888422][ T4887] FAULT_INJECTION: forcing a failure. [ 89.888422][ T4887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.933531][ T4898] lo speed is unknown, defaulting to 1000 [ 89.958523][ T4887] CPU: 1 UID: 0 PID: 4887 Comm: syz.0.322 Not tainted syzkaller #0 PREEMPT(full) [ 89.958550][ T4887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.958562][ T4887] Call Trace: [ 89.958569][ T4887] [ 89.958577][ T4887] __dump_stack+0x1d/0x30 [ 89.958637][ T4887] dump_stack_lvl+0x95/0xd0 [ 89.958660][ T4887] dump_stack+0x15/0x1b [ 89.958685][ T4887] should_fail_ex+0x263/0x280 [ 89.958707][ T4887] should_fail+0xb/0x20 [ 89.958808][ T4887] should_fail_usercopy+0x1a/0x20 [ 89.958835][ T4887] _copy_from_user+0x1c/0xb0 [ 89.958876][ T4887] restore_altstack+0x4b/0x300 [ 89.958968][ T4887] ? _raw_spin_unlock_irq+0x9/0x30 [ 89.958990][ T4887] ? __set_current_blocked+0x284/0x2e0 [ 89.959022][ T4887] __ia32_sys_rt_sigreturn+0xdb/0x350 [ 89.959124][ T4887] ? preempt_schedule_irq+0x2d/0x50 [ 89.959152][ T4887] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 89.959267][ T4887] ? irqentry_exit+0x91/0x520 [ 89.959318][ T4887] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 89.959348][ T4887] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 89.959410][ T4887] x64_sys_call+0x2823/0x3020 [ 89.959439][ T4887] do_syscall_64+0x12c/0x370 [ 89.959463][ T4887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.959488][ T4887] RIP: 0033:0x7f408534db19 [ 89.959506][ T4887] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 89.959575][ T4887] RSP: 002b:00007f4083dfea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 89.959599][ T4887] RAX: ffffffffffffffda RBX: 00007f4085625fa0 RCX: 00007f408534db19 [ 89.959615][ T4887] RDX: 00007f4083dfea80 RSI: 00007f4083dfebb0 RDI: 0000000000000021 [ 89.959630][ T4887] RBP: 00007f4083dff090 R08: 0000000000000000 R09: 0000000000000000 [ 89.959714][ T4887] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 89.959725][ T4887] R13: 00007f4085626038 R14: 00007f4085625fa0 R15: 00007fff98cc21f8 [ 89.959745][ T4887] [ 90.178668][ T4901] capability: warning: `syz.0.328' uses deprecated v2 capabilities in a way that may be insecure [ 90.212222][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.278422][ T4906] sock: sock_set_timeout: `syz.1.329' (pid 4906) tries to set negative timeout [ 90.511037][ T4908] loop3: detected capacity change from 0 to 512 [ 90.727833][ T4915] loop4: detected capacity change from 0 to 512 [ 90.841587][ T4908] EXT4-fs (loop3): 1 truncate cleaned up [ 90.850822][ T4915] EXT4-fs (loop4): 1 truncate cleaned up [ 90.861673][ T4908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.889028][ T4915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.192890][ T4921] loop5: detected capacity change from 0 to 512 [ 91.341062][ T4921] EXT4-fs (loop5): 1 truncate cleaned up [ 91.379002][ T4921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.654296][ T50] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 465: padding at end of block bitmap is not set [ 91.736475][ T50] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 2158284 with max blocks 12 with error 28 [ 91.774196][ T2489] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 465: padding at end of block bitmap is not set [ 91.859602][ T50] EXT4-fs (loop4): This should not happen!! Data will be lost [ 91.859602][ T50] [ 91.869722][ T50] EXT4-fs (loop4): Total free blocks count 0 [ 91.876114][ T50] EXT4-fs (loop4): Free/Dirty block details [ 91.882344][ T50] EXT4-fs (loop4): free_blocks=0 [ 91.887338][ T50] EXT4-fs (loop4): dirty_blocks=12 [ 91.895326][ T2489] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2158284 with max blocks 12 with error 28 [ 91.910316][ T2489] EXT4-fs (loop3): This should not happen!! Data will be lost [ 91.910316][ T2489] [ 91.920168][ T50] EXT4-fs (loop4): Block reservation details [ 91.931910][ T2489] EXT4-fs (loop3): Total free blocks count 0 [ 91.936440][ T50] EXT4-fs (loop4): i_reserved_data_blocks=12 [ 91.944496][ T2489] EXT4-fs (loop3): Free/Dirty block details [ 91.961444][ T2489] EXT4-fs (loop3): free_blocks=0 [ 91.968751][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.979864][ T2489] EXT4-fs (loop3): dirty_blocks=12 [ 91.989410][ T2489] EXT4-fs (loop3): Block reservation details [ 91.999903][ T2489] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 92.023675][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.194682][ T4942] netlink: 4804 bytes leftover after parsing attributes in process `syz.0.340'. [ 92.204648][ T4942] netlink: 4804 bytes leftover after parsing attributes in process `syz.0.340'. [ 92.222198][ T4936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.247513][ T4945] loop0: detected capacity change from 0 to 1024 [ 92.284817][ T4945] EXT4-fs: inline encryption not supported [ 92.312867][ T4945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.362753][ T4949] loop1: detected capacity change from 0 to 512 [ 92.478985][ T4949] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.343: inode has both inline data and extents flags [ 92.500517][ T4949] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.500647][ T4949] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.343: couldn't read orphan inode 15 (err -117) [ 92.509863][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 92.509885][ C0] EXT4-fs (loop1): initial error at time 1773308734: ext4_orphan_get:1391: inode 15 [ 92.509915][ C0] EXT4-fs (loop1): last error at time 1773308734: ext4_orphan_get:1391: inode 15 [ 92.549560][ T30] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 465: padding at end of block bitmap is not set [ 92.770464][ T4949] loop1: lost filesystem error report for type 5 error -117 [ 92.771843][ T4949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.819710][ T30] EXT4-fs (loop5): Delayed block allocation failed for inode 13 at logical offset 2158284 with max blocks 12 with error 117 [ 92.904366][ T30] EXT4-fs (loop5): This should not happen!! Data will be lost [ 92.904366][ T30] [ 93.083244][ T4961] lo speed is unknown, defaulting to 1000 [ 93.209956][ T4970] netlink: 80 bytes leftover after parsing attributes in process `syz.5.349'. [ 94.082918][ T4982] netlink: 'syz.5.351': attribute type 10 has an invalid length. [ 94.090685][ T4982] netlink: 40 bytes leftover after parsing attributes in process `syz.5.351'. [ 94.222325][ T28] kauditd_printk_skb: 340 callbacks suppressed [ 94.222340][ T28] audit: type=1400 audit(1773308736.264:1718): avc: denied { setopt } for pid=4984 comm="syz.5.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.251776][ T4988] netlink: 'syz.1.354': attribute type 3 has an invalid length. [ 94.273713][ T4990] netlink: 80 bytes leftover after parsing attributes in process `syz.3.355'. [ 94.293806][ T28] audit: type=1400 audit(1773308736.294:1719): avc: denied { bind } for pid=4984 comm="syz.5.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.356723][ T4988] loop1: detected capacity change from 0 to 512 [ 94.445553][ T4993] loop0: detected capacity change from 0 to 512 [ 94.523316][ T4993] EXT4-fs (loop0): 1 truncate cleaned up [ 94.620761][ T4999] lo speed is unknown, defaulting to 1000 [ 94.672197][ T5000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.356'. [ 94.992509][ T4994] lo speed is unknown, defaulting to 1000 [ 95.203819][ T5004] loop3: detected capacity change from 0 to 2048 [ 95.254078][ T3270] Alternate GPT is invalid, using primary GPT. [ 95.260674][ T3270] loop3: p1 p2 p3 [ 95.276989][ T5004] Alternate GPT is invalid, using primary GPT. [ 95.283478][ T5004] loop3: p1 p2 p3 [ 95.323410][ T28] audit: type=1400 audit(1773308737.364:1720): avc: denied { mount } for pid=5003 comm="syz.3.358" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 95.346324][ T5004] netlink: 16 bytes leftover after parsing attributes in process `syz.3.358'. [ 95.417003][ T3001] ================================================================== [ 95.425305][ T3001] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 95.431955][ T3001] [ 95.434335][ T3001] read-write to 0xffff888107dfb480 of 4 bytes by task 3270 on cpu 0: [ 95.442511][ T3001] dont_mount+0x2a/0x40 [ 95.446696][ T3001] vfs_unlink+0x206/0x490 [ 95.451040][ T3001] filename_unlinkat+0x1e2/0x410 [ 95.456001][ T3001] __se_sys_unlink+0x2b/0xe0 [ 95.460611][ T3001] __x64_sys_unlink+0x1f/0x30 [ 95.465396][ T3001] x64_sys_call+0x2eb6/0x3020 [ 95.470204][ T3001] do_syscall_64+0x12c/0x370 [ 95.474813][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.480714][ T3001] [ 95.483047][ T3001] read to 0xffff888107dfb480 of 4 bytes by task 3001 on cpu 1: [ 95.490610][ T3001] lookup_fast+0xf0/0x320 [ 95.494972][ T3001] path_lookupat+0x15c/0x500 [ 95.499598][ T3001] filename_lookup+0x190/0x390 [ 95.504480][ T3001] do_readlinkat+0x74/0x2f0 [ 95.509004][ T3001] __x64_sys_readlink+0x47/0x60 [ 95.513879][ T3001] x64_sys_call+0x2b51/0x3020 [ 95.518712][ T3001] do_syscall_64+0x12c/0x370 [ 95.523495][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.529402][ T3001] [ 95.531757][ T3001] value changed: 0x00300080 -> 0x00004080 [ 95.537588][ T3001] [ 95.540015][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 95.546173][ T3001] CPU: 1 UID: 0 PID: 3001 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 95.555031][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 95.565105][ T3001] ================================================================== [ 95.714672][ T50] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 465: padding at end of block bitmap is not set [ 95.781306][ T50] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 2158284 with max blocks 12 with error 28 [ 95.796553][ T50] EXT4-fs (loop0): This should not happen!! Data will be lost [ 95.796553][ T50] [ 95.806871][ T50] EXT4-fs (loop0): Total free blocks count 0 [ 95.814827][ T50] EXT4-fs (loop0): Free/Dirty block details [ 95.828476][ T50] EXT4-fs (loop0): free_blocks=0 [ 95.842844][ T50] EXT4-fs (loop0): dirty_blocks=12 [ 95.848004][ T50] EXT4-fs (loop0): Block reservation details [ 95.861482][ T50] EXT4-fs (loop0): i_reserved_data_blocks=12 [ 95.945058][ T28] audit: type=1400 audit(1773308737.984:1721): avc: denied { map } for pid=4987 comm="syz.1.354" path="/72/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.981475][ T28] audit: type=1400 audit(1773308737.984:1722): avc: denied { execute } for pid=4987 comm="syz.1.354" path="/72/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.031279][ T28] audit: type=1326 audit(1773308738.054:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85e07c799 code=0x7ffc0000 [ 96.071255][ T28] audit: type=1326 audit(1773308738.054:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa85e076517 code=0x7ffc0000 [ 96.114501][ T28] audit: type=1326 audit(1773308738.054:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa85e01db19 code=0x7ffc0000 [ 96.158134][ T28] audit: type=1326 audit(1773308738.054:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa85e076517 code=0x7ffc0000 [ 96.191380][ T28] audit: type=1326 audit(1773308738.054:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4987 comm="syz.1.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa85e01db19 code=0x7ffc0000 [ 97.243568][ T3316] EXT4-fs unmount: 6 callbacks suppressed [ 97.243603][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.