last executing test programs: 3.930730505s ago: executing program 2 (id=220): syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @empty, @val={@void, {0x8100, 0x5, 0x0, 0x2}}, {@can={0xc, {{0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "676217e68de904ad"}}}}, &(0x7f0000000140)={0x1, 0x4, [0xf4c, 0x81e, 0x533, 0x7c7]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000001500)={'sit0\x00', 0x0, 0x70f, 0x1, 0x3, 0x6, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x64, 0x0, 0x6, 0x29, 0x0, @multicast1, @private=0xa010102}}}}) accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/pid\x00') rename(0x0, &(0x7f0000000c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 3.75035859s ago: executing program 2 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0xfe, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfff, 0x3}, 0x0, 0x10000, 0xfffffffb, 0x5, 0x0, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000000}, 0x0, 0x2, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x88000000, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000002c0), 0x5}, 0x0, 0x8, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0xe, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x66, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000000)={0x7, 'vcan0\x00', {0xff}, 0x8003}) poll(0x0, 0x0, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000f2ffffff00"/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[], 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f0000000d80)=""/4125, 0x101d}, {&(0x7f00000001c0)=""/111, 0x6f}, {&(0x7f00000006c0)=""/143, 0x8f}, {&(0x7f0000004200)=""/4113, 0x1011}, {&(0x7f0000000340)=""/252, 0xfc}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000000840)=""/252, 0xfc}, {&(0x7f00000009c0)=""/174, 0xae}, {&(0x7f0000000a80)=""/98, 0x62}], 0xa}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="34010000", @ANYRES16=0x0, @ANYBLOB="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"/314], 0x134}, 0x1, 0x0, 0x0, 0x240008c1}, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x400, 0x0) 3.392920323s ago: executing program 3 (id=234): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f8ffffff00000000040000008500000036000000850000000800000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30e0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0xa000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0xffff, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x10002}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) r3 = socket(0x2, 0x3, 0xff) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) (async) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000940)={0x3ff, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x108) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r5, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000140)={0x1, 0x1, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}]}) 3.294706306s ago: executing program 3 (id=237): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x80000006) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000000c0)={r1}) write$sndseq(r3, &(0x7f0000001080)=[{0x41, 0x0, 0x3, 0xfd, @time={0x0, 0x3}, {0x46, 0x1}, {0xf}, @raw8={"80a9d4ba7408faaebe04c3c6"}}], 0x1c) r4 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, 0x0, r4) 3.234503128s ago: executing program 3 (id=239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) (fail_nth: 4) 2.938485539s ago: executing program 3 (id=242): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) fcntl$dupfd(r0, 0x406, r0) creat(&(0x7f00000002c0)='./file0\x00', 0x8) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1780, 0x0, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/212, 0xd4}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.721510806s ago: executing program 2 (id=245): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001002f0000000800074000030000080008400000000a0400164008001540000000030400170058000d"], 0xd4}}, 0x0) 2.458054175s ago: executing program 2 (id=246): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) 2.194852985s ago: executing program 1 (id=248): unshare(0x22020400) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB='\b\x00\a'], 0x2c}}, 0x0) 2.168249476s ago: executing program 1 (id=251): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x5}, {0x45}, {0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 2.098813198s ago: executing program 2 (id=252): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x569, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.098625038s ago: executing program 4 (id=253): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="40020000100001002cbc7005000000007f000001000000000000000000000000fc010000000000000000000000000001ffffecdf4e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x8000}, 0x44050) 2.0353983s ago: executing program 3 (id=254): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4000814) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x10, 0x3, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000000)={@remote, @multicast2, r6}, 0xc) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="7a0a00ff0000000071103700000000009500001700000000f6fbde367051f95cceba9220263f825d71e6bf353e74637aed2771db1a23b13f42ee935666f70315ac7b261259548938b72078c6148a8a243c701ee89f0ac12f1efcaa72738cc8432a13926a48c65037b681c5bfa7462c76878b1795c09c84890d055c89d42401526d08d561485ac39850d444"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, 0x0, 0x0) 1.571841996s ago: executing program 4 (id=255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x40008c0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d90300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18}, './file0\x00'}) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {0xfff1, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010040}, 0x4000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r12 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r12, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x2, 0x3a, '-Z%*:\'', 0x3a, '', 0x3a, './file0', 0x3a, [0x50, 0x50, 0x4f, 0x46]}, 0x31) 1.370384053s ago: executing program 2 (id=257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x389080, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f00000007c0)={0x50, r2, 0x300, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000003c0)=0x2, 0x4) accept4(r0, &(0x7f00000000c0)=@ax25={{0x3, @null}, [@null, @remote, @remote, @bcast, @rose, @null, @default, @rose]}, &(0x7f0000000140)=0x80, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fff1f00006000540001c020008000640"], 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x24008000) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000580)={[0x4]}, &(0x7f00000005c0), &(0x7f0000000680)={r5, r6+60000000}, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r7, 0xffffffffffffff7f, 0x0) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/91, 0x5b}, {&(0x7f00000002c0)=""/191, 0xbf}], 0x2, &(0x7f00000006c0)=""/233, 0xe9}, 0x7f}], 0x1, 0x40, &(0x7f0000000540)={r3, r4+10000000}) 812.991922ms ago: executing program 4 (id=258): syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000400)='./file2\x00', 0xd091, &(0x7f0000000c00), 0x1, 0xb9f, &(0x7f0000001e40)="$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") r0 = socket$caif_stream(0x25, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={0xffffffffffffffff, 0x0, 0x123, 0x28, &(0x7f0000000980)="328dc0b9f60a83e59cf9dc33fdb7e6d99ff586425ad6c9605a4a5d51be6f72fed7d3d75d34113bfba07345c420be15abb1ec2c03a226e78717da3e9046848bef15ffafe129ac99bd357acb51ed51e3125cf116ce8d38f564383aa094ddfc695120389c125de00cc794fd07178dc400534aee1f417145fba10f145d74370869d15f8f1a7071bb00bbc8add2881c81cf8c524a974434b5cf71ba756e45422619bb3e785743e463c05c952096fb033f46f456c40b17fb0ce43826974e4e85a3f9ad1e220eaa0437d40f9583ae1f26f46075b4ff056ce137e6", &(0x7f0000000380)=""/40, 0x9, 0x0, 0x15c, 0x86, &(0x7f00000004c0)="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", &(0x7f0000000c40)="9d33538d263ee9010092d85f3d31a41762dd54fcc8d1cf63eb3c73761a3752426c403178a2d586197a26b8f95e1b4cf248f47035590d6275b9a869f8efc9704b695b114f9cde99317ca006feaa14f3f3b8579a5f6da90456cd26379ae557224d813ba0cb5b222719e611d4fcafa60ad2b9de884b2d99143123f83660d12b033117657454074e", 0x3, 0x0, 0x10001}, 0x50) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000300)=0x3ff, 0x4) connect$caif(r0, &(0x7f0000000040)=@util={0x25, "a1a23b02a0c8121422dba7f6a8390ee3"}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1783, 0x0, 0x1, 0x2000164}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d215c06007c09e8fe55a10a0015400100142603600e1208000f0000000401a80016002900014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000c06010200000000000000000000000a0900020073797a31000000000900020073020031000000000900020073797a3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x4) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e21, 0x10000002, @loopback, 0x6}, 0x1c) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r7, 0x200204) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 700.447046ms ago: executing program 1 (id=259): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000040018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 568.238ms ago: executing program 1 (id=262): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000ffff00010000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x0) 466.842644ms ago: executing program 1 (id=264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30fff500000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 427.215095ms ago: executing program 4 (id=265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xf071d66a62c5f274}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x34, 0x0, 0x44000}, 0x0) 405.882886ms ago: executing program 1 (id=266): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffe46) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000004c0)={0x2, r1, 'id1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYRESDEC=r2, @ANYRES8=r0, @ANYRESDEC=r2, @ANYRES8=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r6, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10616, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1fb, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r6, 0xa) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x20040040) socket$kcm(0x10, 0x400000002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000140)=0x8001, 0x8) 294.79171ms ago: executing program 0 (id=267): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x16000000}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 291.86157ms ago: executing program 4 (id=268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r2], 0x20}, 0x339}, 0x4000) 247.581751ms ago: executing program 0 (id=269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r1, 0x1, 0x1, 0xfffffffe, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0xffffffa6, 0x80}, 0x5050) 187.065104ms ago: executing program 0 (id=270): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000030010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) 72.265578ms ago: executing program 0 (id=271): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fchdir(0xffffffffffffffff) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80000006) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000000c0)) write$sndseq(r2, &(0x7f0000001080)=[{0x41, 0x0, 0x3, 0xfd, @time={0x0, 0x3}, {0x46, 0x1}, {0xf}, @raw8={"80a9d4ba7408faaebe04c3c6"}}], 0x1c) r3 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, 0x0, r3) 71.919458ms ago: executing program 3 (id=272): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffe46) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000004c0)={0x2, r1, 'id1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYRESDEC=r2, @ANYRES8=r0, @ANYRESDEC=r2, @ANYRES8=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r6, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10616, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1fb, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r6, 0xa) sendmsg$NFT_BATCH(r5, 0x0, 0x20040040) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000140)=0x8001, 0x8) 71.674328ms ago: executing program 0 (id=273): unshare(0x22020400) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\a'], 0x2c}}, 0x0) 45.230589ms ago: executing program 4 (id=274): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) fcntl$dupfd(r0, 0x406, r0) creat(&(0x7f00000002c0)='./file0\x00', 0x8) socket(0x80000000000000a, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1780, 0x0, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/212, 0xd4}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 0 (id=275): syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000400)='./file2\x00', 0xd091, &(0x7f0000000c00), 0x1, 0xb9f, &(0x7f0000001e40)="$eJzs3c9rHGUfAPDvTDZpkvZ9k768BytCIx5akG6SttpaPLQexYNgoXqqMT9K6LaVJoIpBdOb4EWlnjx5UkGPXqWIevIgeup/IIUiaf+AyMzOJmuyP9Jk2wnN5wOz+zzzZPf5zsJ355mdZzIB7Flj2UMacSgiPk0iRor1aUQM5KXBiOX63z1cuTmdLUmsrr71dxJJRDxYuTndeK+keN6fPVTyV8YfP0X8r29zvwtLNy5P1Wqz14v6+OKV98cXlm4cm78ydWn20uzV4y9PnJh85eTpl06uv2hwZ9u6dCr95PfXX/vm9sUvf/v+9HMfJ3E2DhRtzdux0Xa7HYuxtc+kWSUi3tnme+42fcX2tNpOAAB2n7RpDHcoRqIvL9WNRHW+1OAAAACAnvgoIlYBAACAp1zi+B8AAACeco15AA9Wbk43lnJnJABPyv1zETFaz//G9f31lkos58+D0R8Rww+TpiuD6td7j/ag/7GI+O6LU4ezJbpchw/01vKtiHim1f4/yfN/tPjvFxvzP42IiR70P7ahLv/hyWmV//Xjgu75f7YH/ct/AAAAAAAA6J075+on8jef/0/X5v9Ei/N/fS3O3W1H9/N/6b0edAO0cP9cxKtN9/Z52JT/hdG+ovaffD5AfzI3X5udiIj/RsTR6N+X1Sc79PH1D2f+bNfWPP8vW7L+G3MBizjuVfb9+zUzU4tTO9lmoO7+rYhnK63yP1nb/ycx1HL+75tb7OOXCz/OtWvrnv8t9G+xY6Cj1a8ijrTc/6/f0S3pfH++8Xw8MN4YFWx24fmfv23X/7byH+iJbP8/3Dn/R5Pm+3UutHqXzlcCTQwfu9Subbvj/4HkfH5X0YFi3YdTi4vXJyMGkjc2rz/e5UOAPaKRD418yfL/6Autj//Xx/+tf/97t/iWSCNiqnjO6u9t6HPfxV8/axdPm/zf6a1+gS3I8n/mkfb/j174/O2V8+3639r+/2S+Tz9arPH7H3S21QQtO04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYTdKIOBBJWl0rp2m1GrE/Iv4fw2nt2sLii3PXPrg6k7VFjEZ/Ojdfm52IiJF6Pcnqk3l5vX58Q/1ERByMiNsjQ3m9On2tNlP2xgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBmf0QciCStRkSal9O0Wq23/TVSdnQAAABAz4yWHQAAAADw2Dn+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCHDh6+czeJiOUzQ/mSGSja+kuNDHjc0rIDAErTV3YAQGkqZQcAlMYxPpB0aR9s22IEAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCXHDl0524SEctnhvIlM1C09ZcaGfC4pWUHAJSmr+wAgNJUyg4AKI1jfCDp0j7YtsUIAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAvWVi6cXmqVpu9rtCxUImIXRCGgsITKpT9zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDT7J8AAAD//6AU/g4=") r0 = socket$caif_stream(0x25, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={0xffffffffffffffff, 0x0, 0x123, 0x28, &(0x7f0000000980)="328dc0b9f60a83e59cf9dc33fdb7e6d99ff586425ad6c9605a4a5d51be6f72fed7d3d75d34113bfba07345c420be15abb1ec2c03a226e78717da3e9046848bef15ffafe129ac99bd357acb51ed51e3125cf116ce8d38f564383aa094ddfc695120389c125de00cc794fd07178dc400534aee1f417145fba10f145d74370869d15f8f1a7071bb00bbc8add2881c81cf8c524a974434b5cf71ba756e45422619bb3e785743e463c05c952096fb033f46f456c40b17fb0ce43826974e4e85a3f9ad1e220eaa0437d40f9583ae1f26f46075b4ff056ce137e6", &(0x7f0000000380)=""/40, 0x9, 0x0, 0x15c, 0x86, &(0x7f00000004c0)="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", &(0x7f0000000c40)="9d33538d263ee9010092d85f3d31a41762dd54fcc8d1cf63eb3c73761a3752426c403178a2d586197a26b8f95e1b4cf248f47035590d6275b9a869f8efc9704b695b114f9cde99317ca006feaa14f3f3b8579a5f6da90456cd26379ae557224d813ba0cb5b222719e611d4fcafa60ad2b9de884b2d99143123f83660d12b033117657454074e", 0x3, 0x0, 0x10001}, 0x50) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000300)=0x3ff, 0x4) connect$caif(r0, &(0x7f0000000040)=@util={0x25, "a1a23b02a0c8121422dba7f6a8390ee3"}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x1783, 0x0, 0x1, 0x2000164}, &(0x7f0000000dc0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d215c06007c09e8fe55a10a0015400100142603600e1208000f0000000401a80016002900014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000c06010200000000000000000000000a0900020073797a31000000000900020073020031000000000900020073797a3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x4) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e21, 0x10000002, @loopback, 0x6}, 0x1c) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r7, 0x200204) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) kernel console output (not intermixed with test programs): [ 22.845647][ T28] audit: type=1400 audit(1774687367.421:62): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.867750][ T28] audit: type=1400 audit(1774687367.421:63): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.890532][ T28] audit: type=1400 audit(1774687367.421:64): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.913551][ T28] audit: type=1400 audit(1774687367.421:65): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.936708][ T28] audit: type=1400 audit(1774687367.421:66): avc: denied { read open } for pid=3195 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. [ 27.648651][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 27.648681][ T28] audit: type=1400 audit(1774687372.221:70): avc: denied { mounton } for pid=3268 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.677778][ T28] audit: type=1400 audit(1774687372.251:71): avc: denied { mount } for pid=3268 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.680061][ T3268] cgroup: Unknown subsys name 'net' [ 27.705679][ T28] audit: type=1400 audit(1774687372.281:72): avc: denied { unmount } for pid=3268 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.845620][ T3268] cgroup: Unknown subsys name 'cpuset' [ 27.851929][ T3268] cgroup: Unknown subsys name 'rlimit' [ 27.964473][ T28] audit: type=1400 audit(1774687372.531:73): avc: denied { setattr } for pid=3268 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.990652][ T28] audit: type=1400 audit(1774687372.541:74): avc: denied { create } for pid=3268 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.017909][ T28] audit: type=1400 audit(1774687372.541:75): avc: denied { write } for pid=3268 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.038460][ T28] audit: type=1400 audit(1774687372.541:76): avc: denied { read } for pid=3268 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.043479][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.059353][ T28] audit: type=1400 audit(1774687372.551:77): avc: denied { mounton } for pid=3268 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.092368][ T28] audit: type=1400 audit(1774687372.551:78): avc: denied { mount } for pid=3268 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.115717][ T28] audit: type=1400 audit(1774687372.561:79): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.121134][ T3268] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.290266][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 30.327847][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 30.363568][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.370910][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.378196][ T3311] bridge_slave_0: entered allmulticast mode [ 30.384945][ T3311] bridge_slave_0: entered promiscuous mode [ 30.396375][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.403572][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.410734][ T3311] bridge_slave_1: entered allmulticast mode [ 30.417255][ T3311] bridge_slave_1: entered promiscuous mode [ 30.426401][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 30.482565][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.500819][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 30.514088][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.547714][ T3311] team0: Port device team_slave_0 added [ 30.553418][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.560609][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.567824][ T3315] bridge_slave_0: entered allmulticast mode [ 30.574210][ T3315] bridge_slave_0: entered promiscuous mode [ 30.583210][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.590384][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.597606][ T3315] bridge_slave_1: entered allmulticast mode [ 30.604065][ T3315] bridge_slave_1: entered promiscuous mode [ 30.623494][ T3311] team0: Port device team_slave_1 added [ 30.629264][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 30.667303][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.674542][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.681792][ T3318] bridge_slave_0: entered allmulticast mode [ 30.688438][ T3318] bridge_slave_0: entered promiscuous mode [ 30.708848][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.718021][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.725406][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.732510][ T3318] bridge_slave_1: entered allmulticast mode [ 30.739029][ T3318] bridge_slave_1: entered promiscuous mode [ 30.748135][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.755148][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.781295][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.797205][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.816507][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.823538][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.849778][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.888586][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.898621][ T3315] team0: Port device team_slave_0 added [ 30.905292][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.914389][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.921591][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.928841][ T3316] bridge_slave_0: entered allmulticast mode [ 30.935295][ T3316] bridge_slave_0: entered promiscuous mode [ 30.945899][ T3315] team0: Port device team_slave_1 added [ 30.965992][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.973137][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.980412][ T3316] bridge_slave_1: entered allmulticast mode [ 30.986824][ T3316] bridge_slave_1: entered promiscuous mode [ 31.012386][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.019630][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.026879][ T3314] bridge_slave_0: entered allmulticast mode [ 31.033333][ T3314] bridge_slave_0: entered promiscuous mode [ 31.040079][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.047323][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.054469][ T3314] bridge_slave_1: entered allmulticast mode [ 31.061013][ T3314] bridge_slave_1: entered promiscuous mode [ 31.082277][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.092525][ T3318] team0: Port device team_slave_0 added [ 31.108231][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.115341][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.141293][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.153217][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.167915][ T3318] team0: Port device team_slave_1 added [ 31.176066][ T3311] hsr_slave_0: entered promiscuous mode [ 31.182105][ T3311] hsr_slave_1: entered promiscuous mode [ 31.189390][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.199892][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.209507][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.216599][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.242603][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.263519][ T3316] team0: Port device team_slave_0 added [ 31.270143][ T3316] team0: Port device team_slave_1 added [ 31.293323][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.300324][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.326456][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.365338][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.372302][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.398401][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.409843][ T3314] team0: Port device team_slave_0 added [ 31.425455][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.432406][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.458518][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.473215][ T3314] team0: Port device team_slave_1 added [ 31.488508][ T3315] hsr_slave_0: entered promiscuous mode [ 31.494444][ T3315] hsr_slave_1: entered promiscuous mode [ 31.500527][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 31.506315][ T3315] Cannot create hsr debugfs directory [ 31.511963][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.519007][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.545085][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.588109][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.595124][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.621090][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.659410][ T3318] hsr_slave_0: entered promiscuous mode [ 31.665573][ T3318] hsr_slave_1: entered promiscuous mode [ 31.671389][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 31.677195][ T3318] Cannot create hsr debugfs directory [ 31.682952][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.689982][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.716036][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.729048][ T3316] hsr_slave_0: entered promiscuous mode [ 31.735219][ T3316] hsr_slave_1: entered promiscuous mode [ 31.741156][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 31.746931][ T3316] Cannot create hsr debugfs directory [ 31.821071][ T3314] hsr_slave_0: entered promiscuous mode [ 31.827216][ T3314] hsr_slave_1: entered promiscuous mode [ 31.833156][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 31.839109][ T3314] Cannot create hsr debugfs directory [ 31.910825][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.937690][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.960761][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.976880][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.016272][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.029688][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.038930][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.055034][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.099119][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.108858][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.118163][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.128023][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.172674][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.182279][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.191475][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.201395][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.224533][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.253735][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.266107][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.274193][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.281731][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.290826][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.299970][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.317910][ T2103] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.325041][ T2103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.337838][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.349459][ T2103] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.356543][ T2103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.382869][ T2103] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.389973][ T2103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.407444][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.414559][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.428949][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.464061][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.473097][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.492757][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.499858][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.513925][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.522864][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.529991][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.567520][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.574681][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.592191][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.599356][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.623703][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.635508][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.655495][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.671746][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.697798][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.723830][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.730990][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.746924][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.754065][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.780059][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.828433][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.842119][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.853531][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.960062][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.983558][ T3316] veth0_vlan: entered promiscuous mode [ 33.025642][ T3316] veth1_vlan: entered promiscuous mode [ 33.057357][ T3311] veth0_vlan: entered promiscuous mode [ 33.096420][ T3311] veth1_vlan: entered promiscuous mode [ 33.121645][ T3318] veth0_vlan: entered promiscuous mode [ 33.146270][ T3315] veth0_vlan: entered promiscuous mode [ 33.152490][ T3311] veth0_macvtap: entered promiscuous mode [ 33.160259][ T3316] veth0_macvtap: entered promiscuous mode [ 33.168065][ T3316] veth1_macvtap: entered promiscuous mode [ 33.178760][ T3311] veth1_macvtap: entered promiscuous mode [ 33.185939][ T3318] veth1_vlan: entered promiscuous mode [ 33.202744][ T3315] veth1_vlan: entered promiscuous mode [ 33.215442][ T3314] veth0_vlan: entered promiscuous mode [ 33.228755][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.238114][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.246352][ T3318] veth0_macvtap: entered promiscuous mode [ 33.257617][ T3318] veth1_macvtap: entered promiscuous mode [ 33.267994][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.275536][ T3314] veth1_vlan: entered promiscuous mode [ 33.287337][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.299399][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.310535][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.324669][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.333596][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.344166][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.355060][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.369810][ T3315] veth0_macvtap: entered promiscuous mode [ 33.377978][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.388196][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.397214][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.410926][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 33.410943][ T28] audit: type=1400 audit(1774687377.981:90): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.pl9yKq/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.447383][ T3315] veth1_macvtap: entered promiscuous mode [ 33.454971][ T28] audit: type=1400 audit(1774687377.981:91): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.479156][ T28] audit: type=1400 audit(1774687377.981:92): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.pl9yKq/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.505802][ T28] audit: type=1400 audit(1774687377.981:93): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.506507][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.529706][ T28] audit: type=1400 audit(1774687377.991:94): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.pl9yKq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.563074][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.563118][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.563221][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.589332][ T28] audit: type=1400 audit(1774687377.991:95): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.pl9yKq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.618423][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.633303][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.643635][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.651483][ T28] audit: type=1400 audit(1774687377.991:96): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.672159][ T28] audit: type=1400 audit(1774687378.011:97): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.683977][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.696445][ T28] audit: type=1400 audit(1774687378.011:98): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="gadgetfs" ino=4773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.731926][ T3314] veth0_macvtap: entered promiscuous mode [ 33.745970][ T3314] veth1_macvtap: entered promiscuous mode [ 33.757370][ T28] audit: type=1400 audit(1774687378.311:99): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.797290][ T70] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.806642][ T70] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.815926][ T70] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.841715][ T70] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.859033][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.900020][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.924352][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.933301][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.948987][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.987359][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.051343][ T3503] loop2: detected capacity change from 0 to 1024 [ 34.066181][ T3503] ======================================================= [ 34.066181][ T3503] WARNING: The mand mount option has been deprecated and [ 34.066181][ T3503] and is ignored by this kernel. Remove the mand [ 34.066181][ T3503] option from the mount to silence this warning. [ 34.066181][ T3503] ======================================================= [ 34.123311][ C1] hrtimer: interrupt took 47046 ns [ 34.145571][ T3503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.179489][ T3506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 34.210957][ T3513] loop1: detected capacity change from 0 to 512 [ 34.229063][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.256499][ T3502] mmap: syz.3.10 (3502) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.289394][ T3513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.364282][ T3519] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.378661][ T3506] syz.1.11 (3506) used greatest stack depth: 10424 bytes left [ 34.393650][ T3519] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 34.410991][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.492110][ T3517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12'. [ 34.562673][ T3528] loop1: detected capacity change from 0 to 1024 [ 34.570614][ T3528] EXT4-fs: Ignoring removed orlov option [ 34.576546][ T3528] EXT4-fs: Ignoring removed bh option [ 34.635819][ T3528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.807421][ T3535] netlink: 'syz.2.15': attribute type 5 has an invalid length. [ 34.834494][ T3537] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.895982][ T3539] batadv0: entered promiscuous mode [ 34.902224][ T3539] gretap0: entered promiscuous mode [ 34.911220][ T3539] batadv0: left promiscuous mode [ 34.921676][ T3539] gretap0: left promiscuous mode [ 34.955559][ T3537] netlink: 83 bytes leftover after parsing attributes in process `syz.2.16'. [ 34.957152][ T3542] dummy0: entered promiscuous mode [ 34.969777][ T3542] macsec1: entered allmulticast mode [ 34.975722][ T3542] dummy0: entered allmulticast mode [ 34.982681][ T3542] dummy0: left allmulticast mode [ 34.987843][ T3542] dummy0: left promiscuous mode [ 35.123981][ T3549] loop2: detected capacity change from 0 to 512 [ 35.149024][ T3549] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 35.163372][ T3549] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 35.172953][ T3560] IPVS: length: 247 != 8 [ 35.197278][ T3549] EXT4-fs (loop2): 1 truncate cleaned up [ 35.211386][ T3565] loop3: detected capacity change from 0 to 164 [ 35.213764][ T3549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.220660][ T3565] iso9660: Bad value for 'map' [ 35.319416][ T3564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 35.339957][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.389097][ T3528] syz.1.13 (3528) used greatest stack depth: 10008 bytes left [ 35.416828][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.484092][ T3584] loop3: detected capacity change from 0 to 4096 [ 35.554171][ T3584] netlink: 'syz.3.29': attribute type 21 has an invalid length. [ 35.585077][ T3584] netlink: 120 bytes leftover after parsing attributes in process `syz.3.29'. [ 35.705544][ T3584] loop3: detected capacity change from 0 to 512 [ 35.712706][ T3584] EXT4-fs: dax option not supported [ 35.790759][ T3627] netlink: 36 bytes leftover after parsing attributes in process `syz.3.34'. [ 36.070817][ T3680] loop3: detected capacity change from 0 to 1024 [ 36.077761][ T3680] EXT4-fs: Ignoring removed orlov option [ 36.083631][ T3680] EXT4-fs: Ignoring removed bh option [ 36.200458][ T3680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.515315][ T3564] syz.0.25 (3564) used greatest stack depth: 9992 bytes left [ 36.527859][ T3706] loop1: detected capacity change from 0 to 256 [ 36.638837][ T3713] Zero length message leads to an empty skb [ 36.646928][ T3713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=3713 comm=syz.0.40 [ 36.668812][ T3713] loop0: detected capacity change from 0 to 512 [ 36.721428][ T3713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.735462][ T3713] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.753079][ T3613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.33'. [ 36.799691][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.850836][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.952342][ T3736] EXT4-fs: Ignoring removed bh option [ 37.016268][ T3736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.109490][ T3746] syz.4.50: attempt to access beyond end of device [ 37.109490][ T3746] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 37.137136][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.138303][ T3746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 37.269164][ T3753] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 37.412489][ T3768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.643860][ T3775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.59'. [ 37.690044][ T3775] GUP no longer grows the stack in syz.4.59 (3775): 200000009000-20000000a000 (200000005000) [ 37.748229][ T3775] CPU: 0 UID: 0 PID: 3775 Comm: syz.4.59 Not tainted syzkaller #0 PREEMPT(full) [ 37.748267][ T3775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 37.748292][ T3775] Call Trace: [ 37.748301][ T3775] [ 37.748311][ T3775] __dump_stack+0x1d/0x30 [ 37.748344][ T3775] dump_stack_lvl+0x95/0xd0 [ 37.748398][ T3775] dump_stack+0x15/0x1b [ 37.748422][ T3775] __get_user_pages+0x195b/0x1ea0 [ 37.748525][ T3775] ? __mt_destroy+0xce/0xe0 [ 37.748556][ T3775] __gup_longterm_locked+0x8d7/0xe30 [ 37.748633][ T3775] ? __rcu_read_unlock+0x33/0x70 [ 37.748659][ T3775] ? try_get_folio+0x369/0x3b0 [ 37.748687][ T3775] ? try_grab_folio_fast+0xdc/0x370 [ 37.748732][ T3775] gup_fast_fallback+0x1f3/0x13c0 [ 37.748775][ T3775] get_user_pages_fast+0x5f/0x90 [ 37.748815][ T3775] __iov_iter_get_pages_alloc+0x24e/0x6f0 [ 37.748908][ T3775] iov_iter_get_pages2+0x5e/0xa0 [ 37.748985][ T3775] __se_sys_vmsplice+0x541/0xfd0 [ 37.749011][ T3775] ? __perf_event_task_sched_out+0x192/0x710 [ 37.749094][ T3775] __x64_sys_vmsplice+0x55/0x70 [ 37.749117][ T3775] x64_sys_call+0x28e9/0x3020 [ 37.749145][ T3775] do_syscall_64+0x12c/0x370 [ 37.749208][ T3775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.749237][ T3775] RIP: 0033:0x7f1f9a65c799 [ 37.749266][ T3775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.749292][ T3775] RSP: 002b:00007f1f990af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 37.749380][ T3775] RAX: ffffffffffffffda RBX: 00007f1f9a8d5fa0 RCX: 00007f1f9a65c799 [ 37.749397][ T3775] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000007 [ 37.749412][ T3775] RBP: 00007f1f9a6f2c99 R08: 0000000000000000 R09: 0000000000000000 [ 37.749425][ T3775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.749438][ T3775] R13: 00007f1f9a8d6038 R14: 00007f1f9a8d5fa0 R15: 00007ffe8c347318 [ 37.749457][ T3775] [ 38.258668][ T3781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.424831][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 38.424896][ T28] audit: type=1400 audit(1774687382.991:183): avc: denied { create } for pid=3787 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 38.459918][ T3795] EXT4-fs: Ignoring removed orlov option [ 38.465739][ T3795] EXT4-fs: Ignoring removed bh option [ 38.568746][ T28] audit: type=1400 audit(1774687383.091:184): avc: denied { sys_admin } for pid=3787 comm="syz.3.63" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 38.815439][ T3795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.905571][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.999264][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.071897][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.100598][ T3815] set_capacity_and_notify: 5 callbacks suppressed [ 39.100616][ T3815] loop3: detected capacity change from 0 to 1024 [ 39.258747][ T28] audit: type=1400 audit(1774687383.791:185): avc: denied { setopt } for pid=3823 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.284804][ T28] audit: type=1400 audit(1774687383.811:186): avc: denied { create } for pid=3824 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.368821][ T3815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.431249][ T28] audit: type=1400 audit(1774687383.901:187): avc: denied { ioctl } for pid=3827 comm="syz.4.71" path="socket:[5421]" dev="sockfs" ino=5421 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.470823][ T3839] netlink: 'syz.4.72': attribute type 10 has an invalid length. [ 39.478883][ T3839] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.486131][ T3839] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.496416][ T3839] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.503537][ T3839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.510982][ T3839] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.518200][ T3839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.531285][ T3839] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 39.625457][ T3848] loop1: detected capacity change from 0 to 136 [ 39.635350][ T3848] ISOFS: unable to read i-node block [ 39.640682][ T3848] isofs_fill_super: get root inode failed [ 39.654000][ T28] audit: type=1400 audit(1774687384.151:188): avc: denied { firmware_load } for pid=3824 comm="syz.1.69" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 39.964874][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.002245][ T3848] syz.1.69 (3848) used greatest stack depth: 9912 bytes left [ 40.036238][ T3866] loop2: detected capacity change from 0 to 1024 [ 40.043186][ T3866] EXT4-fs: Ignoring removed orlov option [ 40.048963][ T3866] EXT4-fs: Ignoring removed bh option [ 40.159405][ T3866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.260169][ T28] audit: type=1400 audit(1774687384.831:189): avc: denied { create } for pid=3865 comm="syz.4.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.537111][ T3875] loop4: detected capacity change from 0 to 164 [ 40.543772][ T3875] iso9660: Unknown parameter 'checkliet' [ 40.566929][ T28] audit: type=1400 audit(1774687385.141:190): avc: denied { write } for pid=3873 comm="syz.4.83" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.631816][ T3875] __nla_validate_parse: 1 callbacks suppressed [ 40.631831][ T3875] netlink: 96 bytes leftover after parsing attributes in process `syz.4.83'. [ 40.633523][ T28] audit: type=1400 audit(1774687385.141:191): avc: denied { open } for pid=3873 comm="syz.4.83" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.664189][ T3882] loop3: detected capacity change from 0 to 512 [ 40.679765][ T28] audit: type=1400 audit(1774687385.191:192): avc: denied { connect } for pid=3874 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.832607][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.855145][ T3897] loop0: detected capacity change from 0 to 128 [ 40.899609][ T3901] dummy0: entered promiscuous mode [ 40.908631][ T3893] loop1: detected capacity change from 0 to 256 [ 40.924894][ T3901] macsec1: entered allmulticast mode [ 40.930321][ T3901] dummy0: entered allmulticast mode [ 40.944989][ T3901] dummy0: left allmulticast mode [ 40.969933][ T3901] dummy0: left promiscuous mode [ 41.090138][ T3905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=3905 comm=syz.0.95 [ 41.119558][ T3908] loop2: detected capacity change from 0 to 1024 [ 41.225084][ T3905] loop0: detected capacity change from 0 to 512 [ 41.265851][ T3905] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 41.280155][ T3908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.304184][ T3905] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 41.343828][ T3905] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.95: Corrupt directory, running e2fsck is recommended [ 41.403145][ T3905] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 41.425792][ T3905] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.95: corrupted in-inode xattr: e_name out of bounds [ 41.439694][ T3905] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.439974][ T3905] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.95: couldn't read orphan inode 15 (err -117) [ 41.449150][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 41.449187][ C1] EXT4-fs (loop0): initial error at time 1774687386: ext4_iget_extra_inode:5025: inode 15 [ 41.449225][ C1] EXT4-fs (loop0): last error at time 1774687386: ext4_iget_extra_inode:5025: inode 15 [ 41.487173][ T3905] loop0: lost filesystem error report for type 5 error -117 [ 41.488674][ T3905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.513360][ T3905] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 41.524966][ T3905] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 41.535119][ T3905] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.95: Corrupt directory, running e2fsck is recommended [ 41.550002][ T3905] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 41.561611][ T3905] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 41.585636][ T3905] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.95: Corrupt directory, running e2fsck is recommended [ 41.605502][ T3917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=3917 comm=syz.0.95 [ 41.624959][ T3905] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 41.645116][ T3905] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 41.662691][ T3905] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.95: Corrupt directory, running e2fsck is recommended [ 41.686816][ T3917] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 41.724477][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.761761][ T3919] loop0: detected capacity change from 0 to 1024 [ 41.862065][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.872647][ T3921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 41.925329][ T3919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.029228][ T3930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.065228][ T3930] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.103165][ T3937] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.114158][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.129668][ T3930] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.99: corrupted inode contents [ 42.148264][ T3937] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.159558][ T3930] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #2: comm syz.2.99: mark_inode_dirty error [ 42.189491][ T3937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.223219][ T3930] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.99: corrupted inode contents [ 42.236987][ T3937] FAULT_INJECTION: forcing a failure. [ 42.236987][ T3937] name failslab, interval 1, probability 0, space 0, times 1 [ 42.260211][ T3930] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.99: mark_inode_dirty error [ 42.295477][ T3937] CPU: 1 UID: 0 PID: 3937 Comm: syz.4.103 Not tainted syzkaller #0 PREEMPT(full) [ 42.295589][ T3937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 42.295602][ T3937] Call Trace: [ 42.295610][ T3937] [ 42.295619][ T3937] __dump_stack+0x1d/0x30 [ 42.295652][ T3937] dump_stack_lvl+0x95/0xd0 [ 42.295676][ T3937] dump_stack+0x15/0x1b [ 42.295756][ T3937] should_fail_ex+0x263/0x280 [ 42.295789][ T3937] should_failslab+0x8c/0xb0 [ 42.295823][ T3937] __kmalloc_noprof+0xb8/0x4e0 [ 42.295845][ T3937] ? qtree_write_dquot+0x70/0x300 [ 42.295918][ T3937] qtree_write_dquot+0x70/0x300 [ 42.295945][ T3937] ? mod_memcg_lruvec_state+0x191/0x290 [ 42.295979][ T3937] v2_write_dquot+0xd9/0x130 [ 42.296083][ T3937] dquot_commit+0x21b/0x260 [ 42.296112][ T3937] ext4_write_dquot+0x126/0x1d0 [ 42.296143][ T3937] ext4_mark_dquot_dirty+0x95/0xd0 [ 42.296180][ T3937] __dquot_alloc_space+0x7d0/0x8a0 [ 42.296223][ T3937] ext4_mb_new_blocks+0x8fa/0x1f50 [ 42.296276][ T3937] ? __kmalloc_noprof+0x1e3/0x4e0 [ 42.296362][ T3937] ? ext4_ext_search_right+0x30b/0x4f0 [ 42.296398][ T3937] ? ext4_inode_to_goal_block+0x188/0x1d0 [ 42.296432][ T3937] ext4_ext_map_blocks+0xdc9/0x2fb0 [ 42.296468][ T3937] ? __brelse+0x32/0x60 [ 42.296556][ T3937] ? from_kprojid+0x171/0x3a0 [ 42.296650][ T3937] ? ext4_mark_iloc_dirty+0xd4e/0xdb0 [ 42.296727][ T3937] ? mark_buffer_dirty+0xfa/0x220 [ 42.296772][ T3937] ? ext4_fc_track_inode+0x9f/0x5f0 [ 42.296804][ T3937] ext4_map_create_blocks+0xce/0x3a0 [ 42.296858][ T3937] ext4_map_blocks+0x594/0x970 [ 42.296903][ T3937] ext4_convert_inline_data_nolock+0x195/0x5a0 [ 42.296970][ T3937] ext4_convert_inline_data+0x2bd/0x360 [ 42.297013][ T3937] ext4_fallocate+0x163/0x2f0 [ 42.297046][ T3937] vfs_fallocate+0x3b6/0x450 [ 42.297107][ T3937] madvise_vma_behavior+0x2a1/0x20c0 [ 42.297142][ T3937] ? mas_prev+0x5a/0x80 [ 42.297173][ T3937] ? find_vma_prev+0x9c/0xe0 [ 42.297225][ T3937] madvise_do_behavior+0x5de/0xa10 [ 42.297257][ T3937] do_madvise+0x10e/0x190 [ 42.297298][ T3937] __x64_sys_madvise+0x63/0x80 [ 42.297330][ T3937] x64_sys_call+0x1eff/0x3020 [ 42.297413][ T3937] do_syscall_64+0x12c/0x370 [ 42.297461][ T3937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.297486][ T3937] RIP: 0033:0x7f1f9a65c799 [ 42.297502][ T3937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.297576][ T3937] RSP: 002b:00007f1f990af028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 42.297643][ T3937] RAX: ffffffffffffffda RBX: 00007f1f9a8d5fa0 RCX: 00007f1f9a65c799 [ 42.297662][ T3937] RDX: 0000000000000009 RSI: 0000000000600003 RDI: 0000200000000000 [ 42.297680][ T3937] RBP: 00007f1f990af090 R08: 0000000000000000 R09: 0000000000000000 [ 42.297696][ T3937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.297712][ T3937] R13: 00007f1f9a8d6038 R14: 00007f1f9a8d5fa0 R15: 00007ffe8c347318 [ 42.297739][ T3937] [ 42.302085][ T3941] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.99: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 42.302085][ T3941] [ 42.307318][ T3937] EXT4-fs error (device loop4): ext4_write_dquot:6981: comm syz.4.103: Failed to commit dquot type 1 [ 42.307485][ T3937] EXT4-fs (loop4): Remounting filesystem read-only [ 42.307512][ T3937] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 18, error -30) [ 42.349761][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.554212][ T3900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.643159][ T3900] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 42.653837][ T3900] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 42.654201][ T3900] System zones: 0-5 [ 42.742687][ T3900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.813735][ T3943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.105'. [ 42.826884][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.331932][ T3964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 43.344078][ T3964] : the hash_elasticity option has been deprecated and is always 16 [ 43.352697][ T3964] : trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 43.365190][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.442047][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 43.442062][ T28] audit: type=1400 audit(1774687388.011:212): avc: denied { bind } for pid=3963 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.470616][ T28] audit: type=1400 audit(1774687388.021:213): avc: denied { name_bind } for pid=3963 comm="syz.1.110" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 43.500920][ T28] audit: type=1400 audit(1774687388.021:214): avc: denied { node_bind } for pid=3963 comm="syz.1.110" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 43.564861][ T28] audit: type=1400 audit(1774687388.131:215): avc: denied { watch } for pid=3968 comm="syz.2.111" path="/proc/sys/net/ipv4/tcp_congestion_control" dev="proc" ino=5672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 43.646044][ T3973] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.654183][ T3973] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.707179][ T3973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.769457][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.129787][ T28] audit: type=1400 audit(1774687388.701:216): avc: denied { read write } for pid=3979 comm="syz.3.116" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 44.461035][ T28] audit: type=1400 audit(1774687388.701:217): avc: denied { open } for pid=3979 comm="syz.3.116" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 44.513792][ T3994] set_capacity_and_notify: 4 callbacks suppressed [ 44.513820][ T3994] loop4: detected capacity change from 0 to 512 [ 44.756970][ T28] audit: type=1400 audit(1774687388.701:218): avc: denied { bpf } for pid=3979 comm="syz.3.116" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.912602][ T3994] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 44.947269][ T28] audit: type=1400 audit(1774687388.701:219): avc: denied { perfmon } for pid=3979 comm="syz.3.116" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.130056][ T4000] loop4: detected capacity change from 0 to 1024 [ 45.225492][ T4000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.250672][ T28] audit: type=1400 audit(1774687388.951:220): avc: denied { module_request } for pid=3979 comm="syz.3.116" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.357562][ T4000] FAULT_INJECTION: forcing a failure. [ 45.357562][ T4000] name failslab, interval 1, probability 0, space 0, times 0 [ 45.426736][ T28] audit: type=1400 audit(1774687389.561:221): avc: denied { create } for pid=3993 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.463309][ T4000] CPU: 1 UID: 0 PID: 4000 Comm: syz.4.120 Not tainted syzkaller #0 PREEMPT(full) [ 45.463403][ T4000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 45.463419][ T4000] Call Trace: [ 45.463427][ T4000] [ 45.463436][ T4000] __dump_stack+0x1d/0x30 [ 45.463468][ T4000] dump_stack_lvl+0x95/0xd0 [ 45.463549][ T4000] dump_stack+0x15/0x1b [ 45.463579][ T4000] should_fail_ex+0x263/0x280 [ 45.463620][ T4000] should_failslab+0x8c/0xb0 [ 45.463641][ T4000] __kmalloc_noprof+0xb8/0x4e0 [ 45.463664][ T4000] ? ext4_find_extent+0x17a/0x790 [ 45.463701][ T4000] ext4_find_extent+0x17a/0x790 [ 45.463735][ T4000] ? ext4_ext_map_blocks+0x1df2/0x2fb0 [ 45.463798][ T4000] ext4_ext_map_blocks+0x10d/0x2fb0 [ 45.463881][ T4000] ? ext4_fill_raw_inode+0x68c/0xe00 [ 45.463933][ T4000] ? mark_buffer_dirty+0xfa/0x220 [ 45.463984][ T4000] ? ext4_fc_track_inode+0x9f/0x5f0 [ 45.464105][ T4000] ext4_map_create_blocks+0xce/0x3a0 [ 45.464205][ T4000] ext4_map_blocks+0x594/0x970 [ 45.464249][ T4000] ext4_convert_inline_data_nolock+0x195/0x5a0 [ 45.464287][ T4000] ext4_convert_inline_data+0x2bd/0x360 [ 45.464359][ T4000] ext4_fallocate+0x163/0x2f0 [ 45.464401][ T4000] vfs_fallocate+0x3b6/0x450 [ 45.464423][ T4000] file_ioctl+0x4e3/0x5c0 [ 45.464443][ T4000] do_vfs_ioctl+0x7c9/0xe70 [ 45.464462][ T4000] ? selinux_file_ioctl+0x5f7/0xcb0 [ 45.464493][ T4000] ? __rcu_read_unlock+0x4e/0x70 [ 45.464584][ T4000] ? __rcu_read_unlock+0x4e/0x70 [ 45.464677][ T4000] ? __fget_files+0x184/0x1c0 [ 45.464757][ T4000] ? mutex_lock+0x57/0x90 [ 45.464796][ T4000] __se_sys_ioctl+0x82/0x140 [ 45.464814][ T4000] __x64_sys_ioctl+0x43/0x50 [ 45.464896][ T4000] x64_sys_call+0x1563/0x3020 [ 45.464928][ T4000] do_syscall_64+0x12c/0x370 [ 45.464955][ T4000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.465042][ T4000] RIP: 0033:0x7f1f9a65c799 [ 45.465057][ T4000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.465077][ T4000] RSP: 002b:00007f1f990af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 45.465099][ T4000] RAX: ffffffffffffffda RBX: 00007f1f9a8d5fa0 RCX: 00007f1f9a65c799 [ 45.465117][ T4000] RDX: 0000200000000040 RSI: 0000000040305839 RDI: 0000000000000004 [ 45.465146][ T4000] RBP: 00007f1f990af090 R08: 0000000000000000 R09: 0000000000000000 [ 45.465162][ T4000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.465188][ T4000] R13: 00007f1f9a8d6038 R14: 00007f1f9a8d5fa0 R15: 00007ffe8c347318 [ 45.465208][ T4000] [ 45.933035][ T3978] loop1: detected capacity change from 0 to 4096 [ 45.975802][ T3978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.035624][ T3978] EXT4-fs (loop1): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 46.078587][ T4008] netlink: 32 bytes leftover after parsing attributes in process `syz.0.122'. [ 46.093443][ T3978] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 46.105805][ T3978] System zones: 0-5 [ 46.119613][ T4008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'. [ 46.119927][ T4010] FAULT_INJECTION: forcing a failure. [ 46.119927][ T4010] name failslab, interval 1, probability 0, space 0, times 0 [ 46.136828][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.143337][ T4010] CPU: 1 UID: 0 PID: 4010 Comm: syz.2.121 Not tainted syzkaller #0 PREEMPT(full) [ 46.143402][ T4010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 46.143415][ T4010] Call Trace: [ 46.143423][ T4010] [ 46.143432][ T4010] __dump_stack+0x1d/0x30 [ 46.143491][ T4010] dump_stack_lvl+0x95/0xd0 [ 46.143584][ T4010] dump_stack+0x15/0x1b [ 46.143657][ T4010] should_fail_ex+0x263/0x280 [ 46.143752][ T4010] should_failslab+0x8c/0xb0 [ 46.143826][ T4010] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 46.143984][ T4010] ? __alloc_skb+0x2d6/0x690 [ 46.144115][ T4010] __alloc_skb+0x2d6/0x690 [ 46.144296][ T4010] ? __alloc_skb+0x200/0x690 [ 46.144401][ T4010] netlink_alloc_large_skb+0xbf/0xf0 [ 46.144512][ T4010] netlink_sendmsg+0x40c/0x6f0 [ 46.144707][ T4010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.144858][ T4010] ____sys_sendmsg+0x563/0x5b0 [ 46.144977][ T4010] ___sys_sendmsg+0x195/0x1e0 [ 46.145130][ T4010] __x64_sys_sendmsg+0xd4/0x160 [ 46.145296][ T4010] x64_sys_call+0x194c/0x3020 [ 46.145383][ T4010] do_syscall_64+0x12c/0x370 [ 46.145475][ T4010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.145565][ T4010] RIP: 0033:0x7fccfb06c799 [ 46.145628][ T4010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.145713][ T4010] RSP: 002b:00007fccf9abf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.145799][ T4010] RAX: ffffffffffffffda RBX: 00007fccfb2e5fa0 RCX: 00007fccfb06c799 [ 46.145850][ T4010] RDX: 0000000020040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 46.145871][ T4010] RBP: 00007fccf9abf090 R08: 0000000000000000 R09: 0000000000000000 [ 46.145887][ T4010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.145899][ T4010] R13: 00007fccfb2e6038 R14: 00007fccfb2e5fa0 R15: 00007ffe3411a0a8 [ 46.145933][ T4010] [ 46.296946][ T4017] loop2: detected capacity change from 0 to 1024 [ 46.368443][ T3978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.395344][ T4017] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.402261][ T4017] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.415888][ T4017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.433101][ T4022] loop3: detected capacity change from 0 to 512 [ 46.443570][ T4022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.481619][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.501844][ T4029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.129'. [ 46.523515][ T4022] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.126: invalid indirect mapped block 1025 (level 1) [ 46.544709][ T4022] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.546985][ T4022] EXT4-fs (loop3): Remounting filesystem read-only [ 46.556331][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 46.556356][ C1] EXT4-fs (loop3): initial error at time 1774687391: ext4_free_branches:1023: inode 11 [ 46.556412][ C1] EXT4-fs (loop3): last error at time 1774687391: ext4_free_branches:1023: inode 11 [ 46.595359][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.604704][ T4029] loop0: detected capacity change from 0 to 512 [ 46.614993][ T4022] EXT4-fs (loop3): 2 truncates cleaned up [ 46.621150][ T4022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.663295][ T4029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.690187][ T4040] loop2: detected capacity change from 0 to 512 [ 46.697209][ T4039] netlink: 204 bytes leftover after parsing attributes in process `syz.4.132'. [ 46.718820][ T4040] vfat: Unknown parameter '' [ 46.724336][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.755298][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.766184][ T4042] loop1: detected capacity change from 0 to 512 [ 46.773798][ T4042] EXT4-fs: inline encryption not supported [ 46.818480][ T4046] loop0: detected capacity change from 0 to 512 [ 46.823185][ T4042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.824468][ T4050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=4050 comm=syz.2.136 [ 46.859926][ T4042] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.883543][ T4050] loop2: detected capacity change from 0 to 512 [ 46.914940][ T4046] FAULT_INJECTION: forcing a failure. [ 46.914940][ T4046] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.947521][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.957461][ T4050] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 47.002891][ T4050] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 47.013324][ T4046] CPU: 0 UID: 0 PID: 4046 Comm: syz.0.135 Not tainted syzkaller #0 PREEMPT(full) [ 47.013355][ T4046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 47.013372][ T4046] Call Trace: [ 47.013379][ T4046] [ 47.013386][ T4046] __dump_stack+0x1d/0x30 [ 47.013438][ T4046] dump_stack_lvl+0x95/0xd0 [ 47.013469][ T4046] dump_stack+0x15/0x1b [ 47.013492][ T4046] should_fail_ex+0x263/0x280 [ 47.013527][ T4046] should_fail+0xb/0x20 [ 47.013613][ T4046] should_fail_usercopy+0x1a/0x20 [ 47.013718][ T4046] strncpy_from_user+0x27/0x250 [ 47.013804][ T4046] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 47.013860][ T4046] do_getname+0x59/0x1c0 [ 47.013886][ T4046] getname_flags+0x1d/0x30 [ 47.013917][ T4046] do_sys_openat2+0x60/0x130 [ 47.013983][ T4046] __x64_sys_openat+0xf2/0x120 [ 47.014021][ T4046] x64_sys_call+0x1e39/0x3020 [ 47.014049][ T4046] do_syscall_64+0x12c/0x370 [ 47.014084][ T4046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.014114][ T4046] RIP: 0033:0x7fc756e4c799 [ 47.014131][ T4046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.014150][ T4046] RSP: 002b:00007fc75589f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 47.014247][ T4046] RAX: ffffffffffffffda RBX: 00007fc7570c5fa0 RCX: 00007fc756e4c799 [ 47.014267][ T4046] RDX: 0000000000000042 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 47.014285][ T4046] RBP: 00007fc75589f090 R08: 0000000000000000 R09: 0000000000000000 [ 47.014300][ T4046] R10: 0000000000000035 R11: 0000000000000246 R12: 0000000000000001 [ 47.014312][ T4046] R13: 00007fc7570c6038 R14: 00007fc7570c5fa0 R15: 00007ffd6545ee88 [ 47.014389][ T4046] [ 47.061535][ T4050] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.136: Corrupt directory, running e2fsck is recommended [ 47.207973][ T4050] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 47.208059][ T4050] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.136: corrupted in-inode xattr: e_name out of bounds [ 47.208093][ T4050] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.208225][ T4050] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.136: couldn't read orphan inode 15 (err -117) [ 47.208258][ T4050] loop2: lost filesystem error report for type 5 error -117 [ 47.208869][ T4050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.233208][ T4050] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 47.313992][ T4052] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.339946][ T4050] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 47.339974][ T4050] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.136: Corrupt directory, running e2fsck is recommended [ 47.344027][ T4050] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 47.344059][ T4050] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 47.344074][ T4050] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.136: Corrupt directory, running e2fsck is recommended [ 47.396657][ T4050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2304 sclass=netlink_route_socket pid=4050 comm=syz.2.136 [ 47.396889][ T4050] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 47.396920][ T4050] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 47.396961][ T4050] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.136: Corrupt directory, running e2fsck is recommended [ 47.404315][ T4050] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 47.485543][ T4062] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 47.580336][ T4062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 47.580361][ T4062] netlink: 580 bytes leftover after parsing attributes in process `syz.0.140'. [ 47.580374][ T4062] netlink: 88 bytes leftover after parsing attributes in process `syz.0.140'. [ 47.584646][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.634135][ T4052] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.694250][ T4062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 47.803973][ T4076] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 47.848185][ T4076] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.864938][ T4052] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.879117][ T4076] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.922184][ T4079] batadv0: entered promiscuous mode [ 47.928623][ T4079] gretap0: entered promiscuous mode [ 47.936449][ T4079] batadv0: left promiscuous mode [ 47.941945][ T4079] gretap0: left promiscuous mode [ 48.031388][ T4052] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.063245][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.080523][ T4085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.164380][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.340679][ T3668] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.362564][ T3668] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.556089][ T4108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.594331][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 48.594348][ T28] audit: type=1400 audit(1774687393.161:248): avc: denied { create } for pid=4107 comm="syz.2.154" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.672431][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.692440][ T3684] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.762954][ T3684] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.821213][ T28] audit: type=1400 audit(1774687393.391:249): avc: denied { create } for pid=4118 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.872362][ T4127] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.884150][ T28] audit: type=1400 audit(1774687393.411:250): avc: denied { setopt } for pid=4118 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.904883][ T4127] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.923753][ T4127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.938783][ T4127] FAULT_INJECTION: forcing a failure. [ 48.938783][ T4127] name failslab, interval 1, probability 0, space 0, times 0 [ 48.995608][ T28] audit: type=1400 audit(1774687393.511:251): avc: denied { read append open } for pid=4126 comm="syz.2.159" path="/35/file0/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.185915][ T4136] EXT4-fs: Ignoring removed orlov option [ 49.192060][ T4136] EXT4-fs: Ignoring removed bh option [ 49.213399][ T4127] CPU: 1 UID: 0 PID: 4127 Comm: syz.2.159 Not tainted syzkaller #0 PREEMPT(full) [ 49.213482][ T4127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 49.213495][ T4127] Call Trace: [ 49.213501][ T4127] [ 49.213511][ T4127] __dump_stack+0x1d/0x30 [ 49.213571][ T4127] dump_stack_lvl+0x95/0xd0 [ 49.213601][ T4127] dump_stack+0x15/0x1b [ 49.213641][ T4127] should_fail_ex+0x263/0x280 [ 49.213668][ T4127] should_failslab+0x8c/0xb0 [ 49.213695][ T4127] kmem_cache_alloc_noprof+0x66/0x400 [ 49.213790][ T4127] ? ext4_mb_new_blocks+0x2f0/0x1f50 [ 49.213822][ T4127] ext4_mb_new_blocks+0x2f0/0x1f50 [ 49.213966][ T4127] ? __kmalloc_noprof+0x1e3/0x4e0 [ 49.214000][ T4127] ? ext4_inode_to_goal_block+0x188/0x1d0 [ 49.214032][ T4127] ext4_ext_map_blocks+0xdc9/0x2fb0 [ 49.214077][ T4127] ? __brelse+0x32/0x60 [ 49.214129][ T4127] ? from_kprojid+0x171/0x3a0 [ 49.214224][ T4127] ? ext4_mark_iloc_dirty+0xd4e/0xdb0 [ 49.214271][ T4127] ? mark_buffer_dirty+0xfa/0x220 [ 49.214304][ T4127] ? ext4_fc_track_inode+0x9f/0x5f0 [ 49.214336][ T4127] ext4_map_create_blocks+0xce/0x3a0 [ 49.214423][ T4127] ext4_map_blocks+0x594/0x970 [ 49.214463][ T4127] ext4_convert_inline_data_nolock+0x195/0x5a0 [ 49.214557][ T4127] ext4_convert_inline_data+0x2bd/0x360 [ 49.214623][ T4127] ext4_fallocate+0x163/0x2f0 [ 49.214660][ T4127] vfs_fallocate+0x3b6/0x450 [ 49.214684][ T4127] madvise_vma_behavior+0x2a1/0x20c0 [ 49.214765][ T4127] ? mas_prev+0x5a/0x80 [ 49.214794][ T4127] ? find_vma_prev+0x9c/0xe0 [ 49.214826][ T4127] madvise_do_behavior+0x5de/0xa10 [ 49.214867][ T4127] do_madvise+0x10e/0x190 [ 49.214905][ T4127] __x64_sys_madvise+0x63/0x80 [ 49.214996][ T4127] x64_sys_call+0x1eff/0x3020 [ 49.215023][ T4127] do_syscall_64+0x12c/0x370 [ 49.215060][ T4127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.215089][ T4127] RIP: 0033:0x7fccfb06c799 [ 49.215130][ T4127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.215154][ T4127] RSP: 002b:00007fccf9abf028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 49.215175][ T4127] RAX: ffffffffffffffda RBX: 00007fccfb2e5fa0 RCX: 00007fccfb06c799 [ 49.215190][ T4127] RDX: 0000000000000009 RSI: 0000000000600003 RDI: 0000200000000000 [ 49.215203][ T4127] RBP: 00007fccf9abf090 R08: 0000000000000000 R09: 0000000000000000 [ 49.215217][ T4127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.215290][ T4127] R13: 00007fccfb2e6038 R14: 00007fccfb2e5fa0 R15: 00007ffe3411a0a8 [ 49.215315][ T4127] [ 49.509324][ T28] audit: type=1400 audit(1774687393.511:252): avc: denied { map } for pid=4126 comm="syz.2.159" path="/35/file0/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.552439][ T28] audit: type=1400 audit(1774687393.511:253): avc: denied { write } for pid=4126 comm="syz.2.159" path="/35/file0/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.620162][ T28] audit: type=1400 audit(1774687394.051:254): avc: denied { watch } for pid=4137 comm="syz.3.163" path="/32/file1" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 49.661003][ T4136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.755235][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.790755][ T4148] set_capacity_and_notify: 10 callbacks suppressed [ 49.790854][ T4148] loop3: detected capacity change from 0 to 1024 [ 49.811779][ T4150] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 49.828526][ T4150] Cannot find del_set index 34823 as target [ 49.873837][ T4148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.999162][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.058690][ T4164] netlink: 'syz.1.172': attribute type 4 has an invalid length. [ 50.066319][ T28] audit: type=1400 audit(1774687394.631:255): avc: denied { write } for pid=4162 comm="syz.0.171" name="ipv6_route" dev="proc" ino=4026532756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 50.158557][ T4163] loop0: detected capacity change from 0 to 4096 [ 50.190594][ T4163] EXT4-fs: Ignoring removed bh option [ 50.230756][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.246713][ T4175] loop2: detected capacity change from 0 to 512 [ 50.253262][ T4163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.285002][ T4175] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.309202][ T4175] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.177: invalid indirect mapped block 1025 (level 1) [ 50.352660][ T4175] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.352825][ T4175] EXT4-fs (loop2): Remounting filesystem read-only [ 50.362122][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 50.362142][ C1] EXT4-fs (loop2): initial error at time 1774687394: ext4_free_branches:1023: inode 11 [ 50.362178][ C1] EXT4-fs (loop2): last error at time 1774687394: ext4_free_branches:1023: inode 11 [ 50.410153][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.440990][ T4175] EXT4-fs (loop2): 2 truncates cleaned up [ 50.447118][ T4175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.489712][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.491664][ T4185] loop0: detected capacity change from 0 to 1024 [ 50.507129][ T4185] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.590873][ T4185] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.748430][ T4185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.777347][ T4192] loop3: detected capacity change from 0 to 1024 [ 50.844606][ T4192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.027825][ T28] audit: type=1400 audit(1774687395.601:256): avc: denied { write } for pid=4191 comm="syz.3.182" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.114271][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.457541][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.631515][ T4179] loop1: detected capacity change from 0 to 4096 [ 51.638660][ T28] audit: type=1400 audit(1774687396.141:257): avc: denied { read write } for pid=4203 comm="syz.3.184" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.679495][ T4209] loop2: detected capacity change from 0 to 1024 [ 51.691022][ T4179] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.207499][ T4213] loop0: detected capacity change from 0 to 1024 [ 52.214421][ T4213] EXT4-fs: Ignoring removed orlov option [ 52.220158][ T4213] EXT4-fs: Ignoring removed bh option [ 52.269090][ T4179] EXT4-fs (loop1): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 52.294273][ T4216] capability: warning: `syz.4.186' uses deprecated v2 capabilities in a way that may be insecure [ 52.354509][ T4209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.376520][ T4213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.501558][ T4179] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 52.576662][ T4216] tipc: Started in network mode [ 52.590559][ T4179] System zones: 0-5 [ 52.604973][ T4216] tipc: Node identity 5, cluster identity 3 [ 52.614844][ T4216] tipc: Node number set to 5 [ 52.620698][ T4179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.686992][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.706139][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.855366][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.890571][ T4238] loop1: detected capacity change from 0 to 128 [ 52.962711][ T4243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 53.022562][ T4247] ref_ctr increment failed for inode: 0xd0 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104ce0000 [ 53.041694][ T4248] loop3: detected capacity change from 0 to 136 [ 53.204255][ T4252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 53.216925][ T4252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.197'. [ 53.302744][ T4248] ISOFS: unable to read i-node block [ 53.308363][ T4248] isofs_fill_super: get root inode failed [ 53.535598][ T4261] EXT4-fs: inline encryption not supported [ 53.607462][ T4261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 53.628246][ T4261] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.645057][ T4268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.661499][ T4261] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 3: comm syz.2.201: lblock 3 mapped to illegal pblock 3 (length 3) [ 53.678423][ T4261] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 53.690986][ T4261] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.690986][ T4261] [ 53.703330][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 53.703343][ T28] audit: type=1400 audit(1774687398.271:263): avc: denied { append } for pid=4260 comm="syz.2.201" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.711221][ T4274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.732860][ T4261] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.201: bg 0: block 112: padding at end of block bitmap is not set [ 53.776335][ T4261] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 53.805042][ T4281] bond1: entered allmulticast mode [ 53.810541][ T4281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.821517][ T4261] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.821517][ T4261] [ 53.843621][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.886327][ T28] audit: type=1400 audit(1774687398.461:264): avc: denied { accept } for pid=4286 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.929104][ T28] audit: type=1400 audit(1774687398.491:265): avc: denied { write } for pid=4286 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.955137][ T3660] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 53.995763][ T3660] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 54.035832][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.049336][ T3660] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.049336][ T3660] [ 54.061064][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.135838][ T28] audit: type=1400 audit(1774687398.691:266): avc: denied { ioctl } for pid=4297 comm="syz.1.211" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.312239][ T28] audit: type=1400 audit(1774687398.861:267): avc: denied { mount } for pid=4295 comm="syz.4.209" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 54.349134][ T28] audit: type=1400 audit(1774687398.871:268): avc: denied { write } for pid=4295 comm="syz.4.209" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.395914][ T28] audit: type=1400 audit(1774687398.871:269): avc: denied { ioctl } for pid=4295 comm="syz.4.209" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.423465][ T28] audit: type=1400 audit(1774687398.871:270): avc: denied { watch watch_reads } for pid=4295 comm="syz.4.209" path="/42/file0/file0" dev="loop4" ino=1856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 54.447934][ T28] audit: type=1400 audit(1774687398.921:271): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 54.471216][ T28] audit: type=1400 audit(1774687399.021:272): avc: denied { create } for pid=4315 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.574817][ T4322] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 54.590710][ T4322] System zones: 0-1, 3-36 [ 54.601602][ T4322] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.218: bad orphan inode 134217728 [ 54.639454][ T4322] loop4: lost filesystem error report for type 5 error -117 [ 54.744619][ T4331] SELinux: unknown common socke. [ 54.795566][ T4331] SELinux: failed to load policy [ 54.855666][ T4339] netlink: 20 bytes leftover after parsing attributes in process `syz.3.222'. [ 54.866912][ T4341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 55.006436][ T4349] set_capacity_and_notify: 9 callbacks suppressed [ 55.006454][ T4349] loop0: detected capacity change from 0 to 1024 [ 55.041405][ T4353] netlink: 'syz.3.227': attribute type 4 has an invalid length. [ 55.088595][ T4359] netlink: 36 bytes leftover after parsing attributes in process `syz.4.229'. [ 55.179568][ T4366] loop4: detected capacity change from 0 to 1024 [ 55.385587][ T4385] FAULT_INJECTION: forcing a failure. [ 55.385587][ T4385] name failslab, interval 1, probability 0, space 0, times 0 [ 55.403509][ T4385] CPU: 0 UID: 0 PID: 4385 Comm: syz.3.239 Not tainted syzkaller #0 PREEMPT(full) [ 55.403543][ T4385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 55.403560][ T4385] Call Trace: [ 55.403568][ T4385] [ 55.403577][ T4385] __dump_stack+0x1d/0x30 [ 55.403628][ T4385] dump_stack_lvl+0x95/0xd0 [ 55.403696][ T4385] dump_stack+0x15/0x1b [ 55.403722][ T4385] should_fail_ex+0x263/0x280 [ 55.403758][ T4385] should_failslab+0x8c/0xb0 [ 55.403787][ T4385] kmem_cache_alloc_noprof+0x66/0x400 [ 55.403817][ T4385] ? skb_clone+0x151/0x1f0 [ 55.403940][ T4385] skb_clone+0x151/0x1f0 [ 55.404009][ T4385] __netlink_deliver_tap+0x2c9/0x500 [ 55.404055][ T4385] netlink_unicast+0x66b/0x690 [ 55.404111][ T4385] netlink_sendmsg+0x5c8/0x6f0 [ 55.404158][ T4385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.404272][ T4385] ____sys_sendmsg+0x563/0x5b0 [ 55.404372][ T4385] ___sys_sendmsg+0x195/0x1e0 [ 55.404428][ T4385] __x64_sys_sendmsg+0xd4/0x160 [ 55.404477][ T4385] x64_sys_call+0x194c/0x3020 [ 55.404610][ T4385] do_syscall_64+0x12c/0x370 [ 55.404655][ T4385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.404683][ T4385] RIP: 0033:0x7f45e1aec799 [ 55.404704][ T4385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.404727][ T4385] RSP: 002b:00007f45e053f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.404768][ T4385] RAX: ffffffffffffffda RBX: 00007f45e1d65fa0 RCX: 00007f45e1aec799 [ 55.404786][ T4385] RDX: 0000000020040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 55.404814][ T4385] RBP: 00007f45e053f090 R08: 0000000000000000 R09: 0000000000000000 [ 55.404829][ T4385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.404959][ T4385] R13: 00007f45e1d66038 R14: 00007f45e1d65fa0 R15: 00007ffcea7ff7f8 [ 55.404981][ T4385] [ 55.594180][ T4388] netlink: 'syz.1.238': attribute type 27 has an invalid length. [ 55.671077][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.678505][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.848914][ T4404] netlink: 204 bytes leftover after parsing attributes in process `syz.2.245'. [ 55.863370][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.907772][ T4388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.202967][ T3660] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.217319][ T3660] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.271362][ T3660] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.296046][ T3660] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.311580][ T4413] loop4: detected capacity change from 0 to 1024 [ 56.327445][ T4411] can0: slcan on ttyS3. [ 56.350275][ T4413] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.384901][ T4409] can0 (unregistered): slcan off ttyS3. [ 56.545588][ T4429] loop2: detected capacity change from 0 to 1024 [ 56.552617][ T4426] loop0: detected capacity change from 0 to 1024 [ 56.700704][ T4424] loop1: detected capacity change from 0 to 8192 [ 57.210496][ T4446] tipc: Enabled bearer , priority 0 [ 57.238304][ T4446] syzkaller0: entered promiscuous mode [ 57.258486][ T4446] syzkaller0: entered allmulticast mode [ 57.317984][ T4446] tipc: Resetting bearer [ 57.344307][ T4445] tipc: Resetting bearer [ 57.392575][ T4445] tipc: Disabling bearer [ 57.920003][ T4451] loop4: detected capacity change from 0 to 4096 [ 57.989096][ T4451] netlink: 'syz.4.258': attribute type 21 has an invalid length. [ 58.025557][ T4451] netlink: 120 bytes leftover after parsing attributes in process `syz.4.258'. [ 58.115813][ T4468] netlink: 'syz.0.263': attribute type 8 has an invalid length. [ 58.201709][ T4474] loop0: detected capacity change from 0 to 512 [ 58.404186][ T4476] loop1: detected capacity change from 0 to 256 [ 58.586016][ T4488] loop3: detected capacity change from 0 to 256 [ 58.712522][ T3283] ================================================================== [ 58.716301][ T4494] netlink: 'syz.0.275': attribute type 21 has an invalid length. [ 58.720688][ T3283] BUG: KCSAN: data-race in fill_mg_cmtime / simple_unlink [ 58.735497][ T3283] [ 58.737837][ T3283] write to 0xffff8881016f1b1c of 4 bytes by task 3304 on cpu 1: [ 58.745483][ T3283] simple_unlink+0x54/0x80 [ 58.749916][ T3283] shmem_unlink+0x12d/0x140 [ 58.754634][ T3283] shmem_rename2+0x18e/0x310 [ 58.759289][ T3283] vfs_rename+0x97f/0xad0 [ 58.763663][ T3283] filename_renameat2+0x3b6/0x6e0 [ 58.768725][ T3283] __se_sys_rename+0x4a/0x1c0 [ 58.773436][ T3283] __x64_sys_rename+0x31/0x40 [ 58.778137][ T3283] x64_sys_call+0x2b3/0x3020 [ 58.782763][ T3283] do_syscall_64+0x12c/0x370 [ 58.787412][ T3283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.793325][ T3283] [ 58.795660][ T3283] read to 0xffff8881016f1b1c of 4 bytes by task 3283 on cpu 0: [ 58.803215][ T3283] fill_mg_cmtime+0x5b/0x270 [ 58.807824][ T3283] generic_fillattr+0x24a/0x340 [ 58.812697][ T3283] shmem_getattr+0x181/0x200 [ 58.817324][ T3283] vfs_getattr_nosec+0x146/0x1e0 [ 58.822285][ T3283] vfs_getattr+0x48/0x60 [ 58.826545][ T3283] vfs_statx_path+0x28/0x140 [ 58.831162][ T3283] vfs_statx+0xc4/0x170 [ 58.835340][ T3283] vfs_fstatat+0x118/0x170 [ 58.839782][ T3283] __se_sys_newfstatat+0x55/0x3e0 [ 58.844862][ T3283] __x64_sys_newfstatat+0x55/0x70 [ 58.849916][ T3283] x64_sys_call+0x2c64/0x3020 [ 58.854625][ T3283] do_syscall_64+0x12c/0x370 [ 58.859361][ T3283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.865276][ T3283] [ 58.867622][ T3283] value changed: 0x10caa7a7 -> 0x1166972e [ 58.873394][ T3283] [ 58.875741][ T3283] Reported by Kernel Concurrency Sanitizer on: [ 58.881925][ T3283] CPU: 0 UID: 0 PID: 3283 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 58.890804][ T3283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 58.900895][ T3283] ================================================================== [ 58.909285][ T4494] netlink: 120 bytes leftover after parsing attributes in process `syz.0.275'.