last executing test programs: 8.986070571s ago: executing program 4 (id=378): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r3, 0x10}, &(0x7f00000000c0)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0xb7fc}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x68d5}]}}]}, 0x40}}, 0x0) 8.911068055s ago: executing program 4 (id=379): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000000)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x80000000}]}}]}, 0x38}}, 0x0) bind$pptp(r0, 0x0, 0x0) 7.246092688s ago: executing program 4 (id=391): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) shutdown(r0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1d}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) listen(r0, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 7.119934534s ago: executing program 4 (id=393): prlimit64(0x0, 0xa, &(0x7f0000001c80)={0x4, 0x83fd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYRES8=r2, @ANYRES8=r0, @ANYRES8=r0, @ANYRESDEC=r3], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xf, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x47, &(0x7f00000005c0)=ANY=[], 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=r5, @ANYRESHEX=r3, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x100, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) mmap(&(0x7f00002fe000/0x2000)=nil, 0x2000, 0x2000006, 0x20010, 0xffffffffffffffff, 0x8df27000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b00)={r6, 0xe0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0xc8, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x4, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}, @call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x1000, &(0x7f0000000a00)=""/4096, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x8, 0x9}, 0x10, r9, r6, 0x3, &(0x7f0000001b40)=[r4], &(0x7f0000001b80)=[{0x2, 0x4, 0xe, 0x8}, {0x1, 0x1, 0x6, 0xa}, {0x5, 0x1, 0xc}], 0x10, 0x7}, 0x94) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x6, 0xa, 0x3}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, 0x0, &(0x7f0000000440)) 6.585323871s ago: executing program 0 (id=397): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_stall_count', 0xa2740, 0x1f7) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r8, 0x6, 0x6, 0x0, &(0x7f0000000040)) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) recvmmsg(r9, &(0x7f0000003900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)}, 0x2d}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x10002, 0x0) setsockopt$inet6_int(r9, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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"/322, @ANYRES16=r2], 0x21c}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b0001000000000904"], 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000000)={0x8, 0x5, 0x329, 0x5, 0x9, 0x1}) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/61, 0x3d}], 0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.488003736s ago: executing program 3 (id=402): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 4.383008941s ago: executing program 3 (id=403): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_io_uring_setup(0x11c, &(0x7f0000000100)={0x0, 0xea8, 0x2000, 0x1, 0x3a}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd61954a5b00172f00fe8000000000000000000000020000bbfe8000000000000000000000000000aa0c2088be0000000101008100000086dd080088"], 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x2048dc, &(0x7f0000000740)=ANY=[], 0x1, 0x343, &(0x7f0000000bc0)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x39) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x14, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='\x00', 0x0, r0) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 4.285333696s ago: executing program 3 (id=404): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$kcm(0x2, 0x922000000001, 0x106) socket(0x10, 0x2, 0x4) r1 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsmount(r1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) lsetxattr$system_posix_acl(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="10000400000000002000060000000000"], 0x84, 0x2) preadv2(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, 0xfffffffa, 0x4, 0x1b) 4.20001886s ago: executing program 3 (id=405): mprotect(&(0x7f000093a000/0x2000)=nil, 0x2000, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x20, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000040)={0x8000000000000001, 0xa8, 0x3984ebbf, 0x6, 0x400, 0x8, 0x0, 0x78ed}, &(0x7f0000000080)={0x10001, 0x4, 0x7, 0xfffffffffffffffc, 0x1000, 0x1, 0x8, 0x7}, &(0x7f00000000c0)={0x8, 0x3, 0x35f, 0x9, 0x3, 0x4, 0x5, 0x100}, &(0x7f0000000100)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000140), 0x8}) shutdown(r1, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="894465d10200000000000000200000000010004d07a98da8aa48b3848de9fd0000"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r3) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) getsockopt$MRT(r7, 0x0, 0xd1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000008c0)={0x0, 0xe969, 0x0, [0x400, 0x3, 0xfb27, 0x7fffffff, 0x4], [0x8, 0x81, 0x8, 0x7, 0xcb0, 0xfffffffffffffe00, 0x1000, 0x4, 0x7, 0xf8, 0xffffffffffff0001, 0x10001, 0x10000, 0x3, 0x5, 0x8, 0x1, 0x0, 0x1, 0x7, 0x5, 0x9, 0x6, 0x7, 0x4, 0x80000001, 0x0, 0x6, 0x6, 0x6, 0x6, 0x0, 0x3, 0x9, 0x2, 0x8, 0x7, 0x6, 0x0, 0x56c, 0x80, 0x0, 0x8, 0x1, 0x5, 0x7ff, 0x9, 0x0, 0x6, 0x100000001, 0xe37, 0xb68d, 0x7fffffff, 0x6, 0xb, 0x2, 0x100000000, 0x3, 0xdb6, 0xfffffffffffffffe, 0x4, 0x1, 0xeeb, 0x3, 0x0, 0xb8, 0xbe, 0xd, 0x6, 0x60, 0xffffffff00000001, 0x3, 0x9, 0x0, 0xfff, 0x3, 0x6, 0x1, 0xed3, 0x9, 0x7, 0x2, 0x401, 0xed4, 0x1, 0x6, 0x7, 0x135, 0xfffffffffffffff8, 0x7, 0x4, 0x4, 0x2, 0x1, 0x81, 0x10000, 0x7, 0x2000000, 0x5, 0x5, 0xbab, 0x2f, 0x6, 0x7fffffff, 0xe723, 0xb8d, 0x4, 0x1, 0xfff, 0x7fffffffffffffff, 0xfffffffffffffff5, 0x4, 0x8, 0xb, 0x0, 0x3, 0x7ff, 0x4, 0x0, 0x200, 0x9]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000d00)={r8, 0x3, 0x0, [0x8, 0x10000, 0x3, 0x9, 0x4], [0x19, 0x100000001, 0x3, 0xfffffffffffffff7, 0xffffffff, 0x7fff, 0x7fffffff, 0x86, 0xa, 0x71, 0x81, 0x8001, 0x2, 0xc69, 0x3, 0x2, 0x7fff, 0x7, 0x75, 0x8, 0x9, 0x9d, 0xb5f, 0xffffffffffffff48, 0x7fff, 0x0, 0xb40f, 0x1, 0x6, 0x5, 0x8, 0x90, 0x5, 0x8, 0x8000, 0xffffffffffffffff, 0x8, 0x10001, 0x3, 0xba, 0x5, 0x7f, 0x8, 0x400, 0x7, 0x1, 0x4, 0x2, 0x0, 0x0, 0x8, 0x2, 0x535, 0x55a, 0xfffffffffffffff9, 0x3, 0x8, 0x3, 0x9, 0x10001, 0x401, 0x1, 0x0, 0x4, 0x40, 0x5, 0x5, 0xbf, 0x3, 0x1f9, 0x5, 0xc, 0x1, 0x8001, 0x1, 0xfa2, 0x800, 0x6, 0x4, 0x5, 0x8, 0x400, 0x8001, 0x3, 0x1, 0x1, 0x6, 0x1, 0x400, 0x8, 0x955b, 0x2dbe3461, 0x8, 0x8, 0x2, 0x2b5, 0x9, 0xf4dc, 0xfffffffffffffffe, 0xffffffff00000001, 0xa, 0x7, 0x7fff, 0x3, 0x7, 0x6, 0x10000, 0xffffffffffffffee, 0x1, 0x3, 0x3, 0x5849ba31, 0xfa, 0xd, 0x8, 0x9, 0x5030000000, 0x8, 0x1b, 0x7, 0xa]}) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) read(r0, &(0x7f0000000040)=""/182, 0xb6) 3.826602378s ago: executing program 2 (id=409): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x10400, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8000000000000000, &(0x7f0000006680)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000002, 0x810, r0, 0xe9d64000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) sync_file_range(r1, 0x6, 0x9fd, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797a30000000000900010073797a3100000000080007006e617400140004800800024054dd5e54080001400000000014000000110001"], 0x70}}, 0x24044850) close(r2) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/132, 0xfffffffffffffdb8}, {0x0}, {&(0x7f0000000040)=""/76, 0x4c}], 0x3, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3.688120925s ago: executing program 2 (id=411): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000080)=0xec8, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x1}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0xcf47, 0x3, 0xffff, 0x9dff, 0x1, "8003e3ffff070900"}) write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r6 = getpid() syz_pidfd_open(r6, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3.314294365s ago: executing program 2 (id=412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x88040}, 0x20000080) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vcsu(0x0, 0x481, 0x400000) r9 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x139, 0x0}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) socket(0xa, 0x3, 0xff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b'], 0x1c}}, 0x4000054) 2.368199452s ago: executing program 1 (id=414): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x163d}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8b, 0x911c, 0xffffffffffffffff, 0x9, 0x3}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x8080, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x0, 0x232, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) 2.344048323s ago: executing program 2 (id=415): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_io_uring_setup(0x11c, &(0x7f0000000100)={0x0, 0xea8, 0x2000, 0x1, 0x3a}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd61954a5b00172f00fe8000000000000000000000020000bbfe8000000000000000000000000000aa0c2088be0000000101008100000086dd080088"], 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x2048dc, &(0x7f0000000740)=ANY=[], 0x1, 0x343, &(0x7f0000000bc0)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x39) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x14, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='\x00', 0x0, r0) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 2.331247513s ago: executing program 1 (id=416): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$kcm(0x2, 0x922000000001, 0x106) socket(0x10, 0x2, 0x4) r1 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsmount(r1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) lsetxattr$system_posix_acl(&(0x7f0000000340)='./bus\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="10000400000000002000060000000000"], 0x84, 0x2) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xfffffffa, 0x4, 0x1b) 2.328531604s ago: executing program 2 (id=417): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4048000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300000000000000) 2.312122114s ago: executing program 0 (id=418): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.292666146s ago: executing program 1 (id=419): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) io_uring_enter(r2, 0x7, 0x9c8c, 0x11, &(0x7f0000000000)={[0x5]}, 0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f00000007c0)=[{{&(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000008000000000000000070000008608000000020102"], 0x18}}], 0x1, 0x2000c044) close(r4) unshare(0x2c020400) epoll_create(0x4000) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2718, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) memfd_create(&(0x7f0000000680)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xf2w\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x0) splice(r3, 0x0, r4, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r7 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x100000002) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.239508588s ago: executing program 3 (id=420): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@data_err_ignore}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000080)={0x7, 0x0, 0x4, 0x3, 0x495d}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4, "d30f388c42647612d91de4353d68b0fa00", 0x0, 0x8, 0x4000000, 0x7}, 0x3c) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f, 0xa7}, 0x3c) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) getsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x5e) fallocate(r0, 0x0, 0x0, 0x8800000) r4 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 2.19510631s ago: executing program 0 (id=421): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x30}}], 0x1, 0x0) 2.187361031s ago: executing program 0 (id=422): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000811179000000000085000000cd00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x1000) r7 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000001340)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r8, 0xffffffff80000102, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r9, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$TCSBRKP(r5, 0x5425, 0x8) 2.177046131s ago: executing program 1 (id=423): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f00000000c0)={0x1, 0x0, 0xff, 0x7a78, 0xb, 0x2}) r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0) io_uring_setup(0x1684, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) 946.833883ms ago: executing program 3 (id=424): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001640)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x3a, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000003900093af036d6760000000004000000040000000c0001800600060086dd"], 0x24}}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f00000007c0)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000180)=""/183, 0xb7, 0x7f) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b40)=@newtaction={0x1c, 0x76, 0x1, 0x0, 0x0, {}, [{0x4}, {0x4}]}, 0x1c}}, 0x8080) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r7, 0x5411, 0x1000000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xe, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff0000001fbfa100000000000007010000f8ffffffb702000008000000b7030000dd00000085005890787c88bee5bf41ad3b0044cd3b233b0e14700000000002"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x40800, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r9) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r10, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x24044080) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x64, r10, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0xffffff08, 0xb, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5a05}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff9}]}, 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x4) 636.424069ms ago: executing program 2 (id=425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56}, 0x28) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(0x0, r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x88040}, 0x20000080) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vcsu(0x0, 0x481, 0x400000) r9 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x139, 0x0}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) socket(0xa, 0x3, 0xff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00\b'], 0x1c}}, 0x4000054) 617.836719ms ago: executing program 1 (id=426): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r4 = socket(0x1, 0x3, 0x0) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f0000000700)=""/214, 0x7ff}) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) socket$kcm(0x11, 0x3, 0x0) getpgrp(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000001000008000000000ff07006caf900000001000009500000000000017"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") 403.1166ms ago: executing program 4 (id=427): unshare(0x2c020400) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) splice(r1, 0x0, r0, 0x0, 0x400009, 0x4) fcntl$setpipe(r0, 0x407, 0x69e) (fail_nth: 1) 390.217991ms ago: executing program 4 (id=428): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_stall_count', 0xa2740, 0x1f7) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x6, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet6_tcp_int(r8, 0x6, 0x6, 0x0, &(0x7f0000000040)) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) recvmmsg(r9, &(0x7f0000003900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)}, 0x2d}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x10002, 0x0) setsockopt$inet6_int(r9, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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"/322, @ANYRES16=r2], 0x21c}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b0001000000000904"], 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000000)={0x8, 0x5, 0x329, 0x5, 0x9, 0x1}) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/61, 0x3d}], 0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 261.693947ms ago: executing program 0 (id=429): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_io_uring_setup(0x11c, &(0x7f0000000100)={0x0, 0xea8, 0x2000, 0x1, 0x3a}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd61954a5b00172f00fe8000000000000000000000020000bbfe8000000000000000000000000000aa0c2088be0000000101008100000086dd080088"], 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x2048dc, &(0x7f0000000740)=ANY=[], 0x1, 0x343, &(0x7f0000000bc0)="$eJzs3cGLG1UcB/BfY+22tdvsQQQF8aEXvYTd9R8wSAvigrJ2pXoQpu6shkyTJRMqKWJ7E2/+HcWjN0EEz3vx7s3bXjz2UIwk2d1u4u7BQna25POB5L3My5d5k/DC7zJ5+7d/vNveKRs7WT9q76W4EhG1xxErUYtDFw7a2rh/KY57GO/Ub//5+iefff5hc2PjxmZKN5u33l1PKV1/49dvvv3pzd/6L3368/VflmJv5Yv9v9f/2ntl79X9f2593SpTq0ydbj9l6U6328/uFHnabpXtRkofF3lW5qnVKfPe1PhO0d3dHaSss718dbeXl2XKOoPUzgep30393iBlX2WtTmo0Gmn5aiyWZ7nerUebm1lzDpPhDP0we+DK9Mter5mN1vDSf5Jbj+Y6MQDgXJqt/2txeXy8ovr/sET5//X/hUWv/5+F+n8RjOr/Swfrd5r6HwAAAAAAAAAAAAAAngePh8P6cDisH7azj6rnx3z5/hfbsRv3LkcU39/burc1aSfjzZ1oRRF5rEY9nkQMj8T4TsGbH2zcWE1jK7F898EkP2pfmM6vRT1WpvOj51F+LaU0fJDSdP7F8T9aHOXXox4vn5xfn5x/Jn8p3n7rWL4R9fjjy+hGEdsxyj7Nf7eW0vsfbczkl8bvAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAxNNKRE/fvbzROG5/kj/bXX416PDl5f/7VE/fnvxivXaz22gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgUDm4386KIu+dfedhnDI0PFDVxM6+EzG3U/x+LU77nHXOV+fawZo8H/Op+IcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKvB00++qZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECVysH9dlYUeW+OnaqvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HnybwAAAP//V3Yinw==") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x39) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x14, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='\x00', 0x0, r0) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 51.033727ms ago: executing program 0 (id=430): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x6340, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='trusted.overlay.impure\x00', &(0x7f00000000c0)='\xff\xff', 0x2, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x45, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x34, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x40000) (async) listen(0xffffffffffffffff, 0x40000) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000300)='wg1\x00', 0x4) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) (async) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x9}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x32}]}, 0x40}}, 0x40) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) (async) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x7fffffff) (async) sendfile(r6, r5, 0x0, 0x7fffffff) ftruncate(r4, 0x2007ffb) (async) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) sendmmsg(r1, 0x0, 0x0, 0xc040) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) 0s ago: executing program 1 (id=431): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x26, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) kernel console output (not intermixed with test programs): [ 18.699356][ T28] audit: type=1400 audit(1774552538.527:62): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.721510][ T28] audit: type=1400 audit(1774552538.527:63): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.744149][ T28] audit: type=1400 audit(1774552538.527:64): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.767140][ T28] audit: type=1400 audit(1774552538.527:65): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.790162][ T28] audit: type=1400 audit(1774552538.527:66): avc: denied { read open } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. [ 24.668334][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 24.668348][ T28] audit: type=1400 audit(1774552544.497:70): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.697351][ T28] audit: type=1400 audit(1774552544.527:71): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.698069][ T3298] cgroup: Unknown subsys name 'net' [ 24.725330][ T28] audit: type=1400 audit(1774552544.557:72): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.841590][ T3298] cgroup: Unknown subsys name 'cpuset' [ 24.847670][ T3298] cgroup: Unknown subsys name 'rlimit' [ 24.956636][ T28] audit: type=1400 audit(1774552544.787:73): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.980242][ T28] audit: type=1400 audit(1774552544.787:74): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.001134][ T28] audit: type=1400 audit(1774552544.787:75): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.021499][ T28] audit: type=1400 audit(1774552544.787:76): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.035973][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.041928][ T28] audit: type=1400 audit(1774552544.787:77): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.075719][ T28] audit: type=1400 audit(1774552544.787:78): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.091155][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.099378][ T28] audit: type=1400 audit(1774552544.787:79): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 26.231623][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 26.269565][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 26.302866][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 26.362396][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.369465][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.376638][ T3318] bridge_slave_0: entered allmulticast mode [ 26.383028][ T3318] bridge_slave_0: entered promiscuous mode [ 26.405876][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.413068][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.420296][ T3313] bridge_slave_0: entered allmulticast mode [ 26.426786][ T3313] bridge_slave_0: entered promiscuous mode [ 26.433117][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.440171][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.448020][ T3318] bridge_slave_1: entered allmulticast mode [ 26.454443][ T3318] bridge_slave_1: entered promiscuous mode [ 26.460743][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 26.474194][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 26.486999][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.494189][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.501447][ T3313] bridge_slave_1: entered allmulticast mode [ 26.507759][ T3313] bridge_slave_1: entered promiscuous mode [ 26.540746][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.548119][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.556199][ T3324] bridge_slave_0: entered allmulticast mode [ 26.562844][ T3324] bridge_slave_0: entered promiscuous mode [ 26.578455][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.592942][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.602161][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.609357][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.616594][ T3324] bridge_slave_1: entered allmulticast mode [ 26.623133][ T3324] bridge_slave_1: entered promiscuous mode [ 26.632906][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.654854][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.679693][ T3313] team0: Port device team_slave_0 added [ 26.691207][ T3313] team0: Port device team_slave_1 added [ 26.705949][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.716162][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.730781][ T3318] team0: Port device team_slave_0 added [ 26.737225][ T3318] team0: Port device team_slave_1 added [ 26.777152][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.784275][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.791418][ T3309] bridge_slave_0: entered allmulticast mode [ 26.797706][ T3309] bridge_slave_0: entered promiscuous mode [ 26.804135][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.811215][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.837457][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.849010][ T3324] team0: Port device team_slave_0 added [ 26.859448][ T3324] team0: Port device team_slave_1 added [ 26.865115][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.872291][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.879509][ T3311] bridge_slave_0: entered allmulticast mode [ 26.885938][ T3311] bridge_slave_0: entered promiscuous mode [ 26.892634][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.899693][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.906829][ T3309] bridge_slave_1: entered allmulticast mode [ 26.913387][ T3309] bridge_slave_1: entered promiscuous mode [ 26.919978][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.927061][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.953134][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.964138][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.971115][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.997182][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.011821][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.018907][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.026125][ T3311] bridge_slave_1: entered allmulticast mode [ 27.032849][ T3311] bridge_slave_1: entered promiscuous mode [ 27.054074][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.061062][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.087519][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.107167][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.114222][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.140859][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.152613][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.166246][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.175958][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.183157][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.209475][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.221178][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.245777][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.270271][ T3324] hsr_slave_0: entered promiscuous mode [ 27.276340][ T3324] hsr_slave_1: entered promiscuous mode [ 27.311240][ T3313] hsr_slave_0: entered promiscuous mode [ 27.317381][ T3313] hsr_slave_1: entered promiscuous mode [ 27.323325][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 27.329060][ T3313] Cannot create hsr debugfs directory [ 27.339468][ T3311] team0: Port device team_slave_0 added [ 27.346723][ T3311] team0: Port device team_slave_1 added [ 27.353175][ T3309] team0: Port device team_slave_0 added [ 27.365154][ T3318] hsr_slave_0: entered promiscuous mode [ 27.371468][ T3318] hsr_slave_1: entered promiscuous mode [ 27.377464][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 27.383208][ T3318] Cannot create hsr debugfs directory [ 27.393878][ T3309] team0: Port device team_slave_1 added [ 27.425503][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.432766][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.458719][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.476268][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.483255][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.509397][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.529847][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.537041][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.563078][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.578987][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.586026][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.612125][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.699440][ T3309] hsr_slave_0: entered promiscuous mode [ 27.705631][ T3309] hsr_slave_1: entered promiscuous mode [ 27.711629][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 27.717437][ T3309] Cannot create hsr debugfs directory [ 27.725149][ T3311] hsr_slave_0: entered promiscuous mode [ 27.731171][ T3311] hsr_slave_1: entered promiscuous mode [ 27.737061][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 27.743017][ T3311] Cannot create hsr debugfs directory [ 27.778092][ T3324] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.794904][ T3324] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.816312][ T3324] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.825662][ T3324] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.891036][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.913755][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.922820][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.946535][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.970453][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.981512][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.990161][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.004902][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.028448][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.037141][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.050865][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.060844][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.077129][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.095163][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.109817][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.121075][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.130436][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.140382][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.154894][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.161976][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.194018][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.201100][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.215819][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.248268][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.265554][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.280541][ T3324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.296617][ T497] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.303741][ T497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.315303][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.326213][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.337069][ T497] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.344152][ T497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.360566][ T497] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.367792][ T497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.376726][ T497] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.383860][ T497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.393553][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.408687][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.418873][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.425963][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.434957][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.442055][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.491377][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.506855][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.516857][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.562390][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.569559][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.592869][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.607955][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.617434][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.624797][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.675387][ T3324] veth0_vlan: entered promiscuous mode [ 28.687778][ T3324] veth1_vlan: entered promiscuous mode [ 28.700747][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.757153][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.790379][ T3324] veth0_macvtap: entered promiscuous mode [ 28.808155][ T3324] veth1_macvtap: entered promiscuous mode [ 28.835125][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.850425][ T3313] veth0_vlan: entered promiscuous mode [ 28.871970][ T3318] veth0_vlan: entered promiscuous mode [ 28.884811][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.897164][ T3318] veth1_vlan: entered promiscuous mode [ 28.907834][ T3313] veth1_vlan: entered promiscuous mode [ 28.927510][ T3311] veth0_vlan: entered promiscuous mode [ 28.937757][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.947221][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.959272][ T3309] veth0_vlan: entered promiscuous mode [ 28.965360][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.974234][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.987169][ T3311] veth1_vlan: entered promiscuous mode [ 28.998355][ T3309] veth1_vlan: entered promiscuous mode [ 29.019037][ T3318] veth0_macvtap: entered promiscuous mode [ 29.032606][ T3313] veth0_macvtap: entered promiscuous mode [ 29.042513][ T3318] veth1_macvtap: entered promiscuous mode [ 29.050526][ T3324] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.052271][ T3313] veth1_macvtap: entered promiscuous mode [ 29.075504][ T3311] veth0_macvtap: entered promiscuous mode [ 29.088443][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.106092][ T3311] veth1_macvtap: entered promiscuous mode [ 29.116628][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.127398][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.140499][ T3309] veth0_macvtap: entered promiscuous mode [ 29.151398][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.152056][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.152126][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.152155][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.152192][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.171691][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.174193][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.206332][ T3309] veth1_macvtap: entered promiscuous mode [ 29.211015][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.212927][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.214027][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.214075][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.214189][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.214253][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.214329][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.214434][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.214721][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.214862][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.254958][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.255069][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.287137][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.287180][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.366426][ T3489] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5'. [ 29.369405][ T3489] loop4: detected capacity change from 0 to 512 [ 29.369648][ T3489] vfat: Unknown parameter 'ÿÿ0000000000000000000000300000000000000000000003' [ 29.372077][ T3489] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5'. [ 29.445386][ T3493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 29.581019][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.628375][ T3498] random: crng reseeded on system resumption [ 29.691086][ T3504] loop4: detected capacity change from 0 to 512 [ 29.697920][ T3504] EXT4-fs: Ignoring removed oldalloc option [ 29.719240][ T3504] EXT4-fs: quotafile must be on filesystem root [ 29.769294][ C1] hrtimer: interrupt took 47829 ns [ 29.796790][ T3502] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 29.853669][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 29.853684][ T28] audit: type=1400 audit(1774552549.687:129): avc: denied { create } for pid=3486 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.972640][ T28] audit: type=1400 audit(1774552549.807:130): avc: denied { write } for pid=3478 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.224083][ T28] audit: type=1400 audit(1774552549.827:131): avc: denied { allowed } for pid=3485 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 30.349639][ T28] audit: type=1400 audit(1774552549.827:132): avc: denied { create } for pid=3485 comm="syz.0.1" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.499196][ T28] audit: type=1400 audit(1774552549.827:133): avc: denied { map } for pid=3485 comm="syz.0.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.671090][ T28] audit: type=1400 audit(1774552549.827:134): avc: denied { read write } for pid=3485 comm="syz.0.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.824548][ T28] audit: type=1400 audit(1774552550.327:135): avc: denied { create } for pid=3510 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.923669][ T28] audit: type=1400 audit(1774552550.327:136): avc: denied { bind } for pid=3510 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.024920][ C0] Illegal XDP return value 16128 on prog (id 5) dev bond_slave_1, expect packet loss! [ 31.051078][ T28] audit: type=1400 audit(1774552550.327:137): avc: denied { listen } for pid=3510 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.154998][ T28] audit: type=1400 audit(1774552550.367:138): avc: denied { connect } for pid=3510 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.616813][ T3527] netlink: 212 bytes leftover after parsing attributes in process `syz.0.13'. [ 31.627214][ T3527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.635745][ T3527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.803495][ T3529] loop4: detected capacity change from 0 to 128 [ 31.939425][ T3529] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.14'. [ 32.023888][ T3531] loop2: detected capacity change from 0 to 164 [ 32.041664][ T3531] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 32.690709][ T3534] loop2: detected capacity change from 0 to 512 [ 32.718675][ T3534] ext4: Unknown parameter 'uid>00000000000000000000' [ 34.694538][ T3549] loop0: detected capacity change from 0 to 512 [ 34.704638][ T3549] ======================================================= [ 34.704638][ T3549] WARNING: The mand mount option has been deprecated and [ 34.704638][ T3549] and is ignored by this kernel. Remove the mand [ 34.704638][ T3549] option from the mount to silence this warning. [ 34.704638][ T3549] ======================================================= [ 34.769983][ T3555] loop4: detected capacity change from 0 to 512 [ 34.782087][ T3555] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 34.806037][ T3555] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.20: bad orphan inode 15 [ 34.824045][ T3555] loop4: lost filesystem error report for type 5 error -117 [ 34.824273][ T3555] ext4_test_bit(bit=14, block=18) = 1 [ 34.831780][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 34.831800][ C0] EXT4-fs (loop4): initial error at time 1774552554: ext4_orphan_get:1417 [ 34.831844][ C0] EXT4-fs (loop4): last error at time 1774552554: ext4_orphan_get:1417 [ 34.864446][ T3563] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.871229][ T3555] is_bad_inode(inode)=0 [ 34.880632][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 34.880703][ T28] audit: type=1400 audit(1774552554.707:159): avc: denied { getopt } for pid=3548 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.906307][ T3555] NEXT_ORPHAN(inode)=1023 [ 34.910955][ T3555] max_ino=32 [ 34.914204][ T3555] i_nlink=0 [ 34.931162][ T3555] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2970: inode #15: comm syz.4.20: corrupted xattr block 19: invalid header [ 34.951523][ T3555] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.951821][ T3555] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 34.977915][ T3555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 34.996789][ T28] audit: type=1400 audit(1774552554.827:160): avc: denied { create } for pid=3566 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 35.008059][ T3555] ext2 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.033757][ T28] audit: type=1400 audit(1774552554.827:161): avc: denied { mount } for pid=3551 comm="syz.4.20" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.065779][ T28] audit: type=1400 audit(1774552554.847:162): avc: denied { create } for pid=3566 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_tcpdiag_socket permissive=1 [ 35.225798][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.362013][ T28] audit: type=1400 audit(1774552555.197:163): avc: denied { write } for pid=3585 comm="syz.0.27" name="ip6_mr_cache" dev="proc" ino=4026532657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 35.386757][ T3586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 35.397631][ T3587] random: crng reseeded on system resumption [ 35.431534][ T28] audit: type=1400 audit(1774552555.217:164): avc: denied { create } for pid=3585 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.454435][ T28] audit: type=1400 audit(1774552555.217:165): avc: denied { ioctl } for pid=3585 comm="syz.0.27" path="socket:[5060]" dev="sockfs" ino=5060 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.482457][ T28] audit: type=1400 audit(1774552555.317:166): avc: denied { setopt } for pid=3588 comm="syz.0.28" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.506078][ T28] audit: type=1400 audit(1774552555.317:167): avc: denied { read } for pid=3588 comm="syz.0.28" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.020881][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 36.082767][ T28] audit: type=1400 audit(1774552555.907:168): avc: denied { read write } for pid=3593 comm="syz.2.30" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.463879][ T3606] loop1: detected capacity change from 0 to 128 [ 36.585303][ T3606] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.31'. [ 36.934656][ T3611] capability: warning: `syz.4.33' uses deprecated v2 capabilities in a way that may be insecure [ 37.313596][ T3616] loop4: detected capacity change from 0 to 512 [ 37.668026][ T3632] loop0: detected capacity change from 0 to 512 [ 38.254085][ T3632] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 38.385015][ T3633] syz.2.39 (3633) used greatest stack depth: 8976 bytes left [ 38.468138][ T3645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.480047][ T3647] ipt_rpfilter: unknown options [ 38.506824][ T3632] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.40: bad orphan inode 15 [ 38.550974][ T3632] loop0: lost filesystem error report for type 5 error -117 [ 38.551199][ T3632] ext4_test_bit(bit=14, block=18) = 1 [ 38.564039][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 38.564067][ C0] EXT4-fs (loop0): initial error at time 1774552558: ext4_orphan_get:1417 [ 38.564086][ C0] EXT4-fs (loop0): last error at time 1774552558: ext4_orphan_get:1417 [ 38.674942][ T3653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.44'. [ 38.704230][ T3632] is_bad_inode(inode)=0 [ 38.723141][ T3632] NEXT_ORPHAN(inode)=1023 [ 38.739860][ T3632] max_ino=32 [ 38.753447][ T3632] i_nlink=0 [ 38.771053][ T3632] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2970: inode #15: comm syz.0.40: corrupted xattr block 19: invalid header [ 38.833367][ T3632] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.833574][ T3632] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 38.866483][ T3655] bridge0: entered promiscuous mode [ 38.879482][ T3655] bridge0: port 3(macsec1) entered blocking state [ 38.901350][ T3655] bridge0: port 3(macsec1) entered disabled state [ 38.912354][ T3632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 38.929495][ T3655] macsec1: entered allmulticast mode [ 38.947316][ T3655] bridge0: entered allmulticast mode [ 38.953093][ T3632] ext2 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.970837][ T3655] macsec1: left allmulticast mode [ 38.983209][ T3655] bridge0: left allmulticast mode [ 39.006073][ T3655] bridge0: left promiscuous mode [ 39.033213][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 39.130886][ T3660] netlink: 'syz.4.47': attribute type 11 has an invalid length. [ 39.148006][ T3660] netlink: 132 bytes leftover after parsing attributes in process `syz.4.47'. [ 39.242893][ T3663] loop2: detected capacity change from 0 to 512 [ 39.359922][ T3669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.50'. [ 39.391944][ T3671] tipc: Started in network mode [ 39.396952][ T3671] tipc: Node identity 52f2a85ae87e, cluster identity 4711 [ 39.415909][ T3671] tipc: Enabled bearer , priority 0 [ 39.565480][ T3671] syzkaller0: entered promiscuous mode [ 39.571896][ T3671] syzkaller0: entered allmulticast mode [ 39.581020][ T3671] tipc: Resetting bearer [ 39.591621][ T3670] tipc: Resetting bearer [ 39.641977][ T3670] tipc: Disabling bearer [ 39.666288][ T3688] loop3: detected capacity change from 0 to 128 [ 39.689346][ T3685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.857896][ T3688] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.54'. [ 40.011434][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 40.011461][ T28] audit: type=1400 audit(1774552559.837:199): avc: denied { create } for pid=3695 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.039821][ T3694] loop0: detected capacity change from 0 to 512 [ 40.224497][ T28] audit: type=1400 audit(1774552559.877:200): avc: denied { setopt } for pid=3695 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.647783][ T28] audit: type=1326 audit(1774552559.927:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3695 comm="syz.1.57" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa2596c799 code=0x0 [ 40.988802][ T3706] loop0: detected capacity change from 0 to 512 [ 41.042593][ T28] audit: type=1400 audit(1774552560.877:202): avc: denied { name_bind } for pid=3712 comm="syz.4.64" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.135189][ T3713] vlan2: entered allmulticast mode [ 41.338788][ T28] audit: type=1400 audit(1774552560.897:203): avc: denied { node_bind } for pid=3712 comm="syz.4.64" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 41.495202][ T3721] loop1: detected capacity change from 0 to 256 [ 41.572109][ T3721] FAT-fs (loop1): Directory bread(block 64) failed [ 41.578761][ T3721] FAT-fs (loop1): Directory bread(block 65) failed [ 41.585453][ T3721] FAT-fs (loop1): Directory bread(block 66) failed [ 41.592023][ T3721] FAT-fs (loop1): Directory bread(block 67) failed [ 41.598559][ T3721] FAT-fs (loop1): Directory bread(block 68) failed [ 41.605074][ T3721] FAT-fs (loop1): Directory bread(block 69) failed [ 41.612305][ T3721] FAT-fs (loop1): Directory bread(block 70) failed [ 41.618936][ T3721] FAT-fs (loop1): Directory bread(block 71) failed [ 41.625819][ T3721] FAT-fs (loop1): Directory bread(block 72) failed [ 41.631976][ T28] audit: type=1400 audit(1774552561.357:204): avc: denied { write } for pid=3712 comm="syz.4.64" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.632602][ T3721] FAT-fs (loop1): Directory bread(block 73) failed [ 41.818412][ T3726] xt_socket: unknown flags 0x4c [ 42.564462][ T3731] loop2: detected capacity change from 0 to 1764 [ 43.825432][ T3734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.315400][ T3731] Zero length message leads to an empty skb [ 44.325887][ T28] audit: type=1400 audit(1774552563.837:205): avc: denied { mount } for pid=3724 comm="syz.2.66" name="/" dev="loop2" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 44.602848][ T3726] kexec: Could not allocate control_code_buffer [ 44.642894][ T28] audit: type=1400 audit(1774552564.107:206): avc: denied { bind } for pid=3738 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 44.846190][ T3749] team0 (unregistering): Port device team_slave_0 removed [ 44.857220][ T3749] team0 (unregistering): Port device team_slave_1 removed [ 45.028642][ T28] audit: type=1400 audit(1774552564.127:207): avc: denied { kexec_image_load } for pid=3724 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 45.048572][ T28] audit: type=1400 audit(1774552564.157:208): avc: denied { associate } for pid=3724 comm="syz.2.66" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 45.069254][ T28] audit: type=1400 audit(1774552564.237:209): avc: denied { mount } for pid=3738 comm="syz.4.69" name="/" dev="ramfs" ino=6319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 45.091604][ T28] audit: type=1400 audit(1774552564.457:210): avc: denied { create } for pid=3738 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.111873][ T28] audit: type=1400 audit(1774552564.457:211): avc: denied { bind } for pid=3738 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.131273][ T28] audit: type=1400 audit(1774552564.657:212): avc: denied { mount } for pid=3744 comm="syz.3.70" name="/" dev="rpc_pipefs" ino=5774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 45.154764][ T28] audit: type=1400 audit(1774552564.707:213): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 45.174855][ T28] audit: type=1400 audit(1774552564.787:214): avc: denied { connect } for pid=3751 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.207271][ T3759] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.221115][ T28] audit: type=1400 audit(1774552565.047:215): avc: denied { ioctl } for pid=3758 comm="syz.2.73" path="socket:[6330]" dev="sockfs" ino=6330 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.272771][ T28] audit: type=1400 audit(1774552565.047:216): avc: denied { connect } for pid=3758 comm="syz.2.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.393279][ T3797] loop1: detected capacity change from 0 to 1024 [ 46.402514][ T3797] EXT4-fs: inline encryption not supported [ 46.437341][ T3794] FAULT_INJECTION: forcing a failure. [ 46.437341][ T3794] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.491431][ T3797] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.565232][ T3794] CPU: 0 UID: 0 PID: 3794 Comm: syz.4.84 Not tainted syzkaller #0 PREEMPT(full) [ 46.565258][ T3794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 46.565272][ T3794] Call Trace: [ 46.565279][ T3794] [ 46.565288][ T3794] __dump_stack+0x1d/0x30 [ 46.565386][ T3794] dump_stack_lvl+0x95/0xd0 [ 46.565412][ T3794] dump_stack+0x15/0x1b [ 46.565498][ T3794] should_fail_ex+0x263/0x280 [ 46.565528][ T3794] should_fail+0xb/0x20 [ 46.565615][ T3794] should_fail_usercopy+0x1a/0x20 [ 46.565722][ T3794] _copy_from_user+0x1c/0xb0 [ 46.565824][ T3794] __sys_bpf+0x183/0x7e0 [ 46.565850][ T3794] __x64_sys_bpf+0x41/0x50 [ 46.565885][ T3794] x64_sys_call+0x10cb/0x3020 [ 46.565915][ T3794] do_syscall_64+0x12c/0x370 [ 46.565965][ T3794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.565992][ T3794] RIP: 0033:0x7fe66a3fc799 [ 46.566009][ T3794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.566047][ T3794] RSP: 002b:00007fe668e57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.566151][ T3794] RAX: ffffffffffffffda RBX: 00007fe66a675fa0 RCX: 00007fe66a3fc799 [ 46.566180][ T3794] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 000000000000000f [ 46.566193][ T3794] RBP: 00007fe668e57090 R08: 0000000000000000 R09: 0000000000000000 [ 46.566207][ T3794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.566281][ T3794] R13: 00007fe66a676038 R14: 00007fe66a675fa0 R15: 00007fffa8655bb8 [ 46.566298][ T3794] [ 46.800399][ T3806] loop4: detected capacity change from 0 to 512 [ 46.887142][ T3797] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.85: lblock 2 mapped to illegal pblock 2 (length 1) [ 46.901279][ T3797] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 46.902036][ T3797] EXT4-fs (loop1): Remounting filesystem read-only [ 46.911142][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 46.911166][ C1] EXT4-fs (loop1): initial error at time 1774552566: ext4_map_blocks:776: inode 3: block 2 [ 46.911197][ C1] EXT4-fs (loop1): last error at time 1774552566: ext4_map_blocks:776: inode 3: block 2 [ 47.505349][ T3816] loop4: detected capacity change from 0 to 256 [ 47.800468][ T3816] FAT-fs (loop4): Directory bread(block 64) failed [ 47.807162][ T3816] FAT-fs (loop4): Directory bread(block 65) failed [ 47.814110][ T3816] FAT-fs (loop4): Directory bread(block 66) failed [ 47.820730][ T3816] FAT-fs (loop4): Directory bread(block 67) failed [ 47.827485][ T3816] FAT-fs (loop4): Directory bread(block 68) failed [ 47.834216][ T3816] FAT-fs (loop4): Directory bread(block 69) failed [ 47.841003][ T3816] FAT-fs (loop4): Directory bread(block 70) failed [ 47.847570][ T3816] FAT-fs (loop4): Directory bread(block 71) failed [ 47.861175][ T3797] EXT4-fs (loop1): 1 orphan inode deleted [ 47.899452][ T3797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.912382][ T3816] FAT-fs (loop4): Directory bread(block 72) failed [ 47.919445][ T3816] FAT-fs (loop4): Directory bread(block 73) failed [ 48.738563][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.778377][ T3829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.96'. [ 49.154089][ T3843] loop3: detected capacity change from 0 to 512 [ 49.228710][ T3854] FAULT_INJECTION: forcing a failure. [ 49.228710][ T3854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.242150][ T3854] CPU: 1 UID: 0 PID: 3854 Comm: syz.2.102 Not tainted syzkaller #0 PREEMPT(full) [ 49.242176][ T3854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 49.242187][ T3854] Call Trace: [ 49.242193][ T3854] [ 49.242228][ T3854] __dump_stack+0x1d/0x30 [ 49.242327][ T3854] dump_stack_lvl+0x95/0xd0 [ 49.242369][ T3854] dump_stack+0x15/0x1b [ 49.242392][ T3854] should_fail_ex+0x263/0x280 [ 49.242420][ T3854] should_fail+0xb/0x20 [ 49.242443][ T3854] should_fail_usercopy+0x1a/0x20 [ 49.242517][ T3854] copy_folio_from_iter_atomic+0x269/0x1170 [ 49.242605][ T3854] ? shmem_write_begin+0xfc/0x1f0 [ 49.242633][ T3854] ? shmem_write_begin+0x135/0x1f0 [ 49.242727][ T3854] generic_perform_write+0x2c1/0x490 [ 49.242756][ T3854] shmem_file_write_iter+0xc5/0xf0 [ 49.242842][ T3854] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 49.242869][ T3854] vfs_write+0x5a6/0x9f0 [ 49.242950][ T3854] ksys_write+0xdc/0x1a0 [ 49.242967][ T3854] __x64_sys_write+0x40/0x50 [ 49.242983][ T3854] x64_sys_call+0x27e1/0x3020 [ 49.243125][ T3854] do_syscall_64+0x12c/0x370 [ 49.243146][ T3854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.243244][ T3854] RIP: 0033:0x7f826613c799 [ 49.243258][ T3854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.243274][ T3854] RSP: 002b:00007f8264b8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 49.243291][ T3854] RAX: ffffffffffffffda RBX: 00007f82663b5fa0 RCX: 00007f826613c799 [ 49.243304][ T3854] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 49.243367][ T3854] RBP: 00007f8264b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 49.243379][ T3854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.243390][ T3854] R13: 00007f82663b6038 R14: 00007f82663b5fa0 R15: 00007ffe30243948 [ 49.243405][ T3854] [ 49.670408][ T3873] loop3: detected capacity change from 0 to 512 [ 49.698884][ T3873] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 49.711225][ T3873] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 49.725628][ T3873] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.108: Corrupt directory, running e2fsck is recommended [ 49.756589][ T3873] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 49.766448][ T3873] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.108: corrupted in-inode xattr: e_name out of bounds [ 49.785280][ T3873] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.787204][ T3873] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.108: couldn't read orphan inode 15 (err -117) [ 49.796971][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 49.797091][ C0] EXT4-fs (loop3): initial error at time 1774552569: ext4_iget_extra_inode:5025: inode 15 [ 49.797364][ C0] EXT4-fs (loop3): last error at time 1774552569: ext4_iget_extra_inode:5025: inode 15 [ 49.841989][ T3873] loop3: lost filesystem error report for type 5 error -117 [ 49.846526][ T3873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.869132][ T3873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.943930][ T3900] netlink: 'syz.3.112': attribute type 6 has an invalid length. [ 49.969368][ T3902] loop3: detected capacity change from 0 to 512 [ 50.079656][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 50.079670][ T28] audit: type=1400 audit(1774552569.907:237): avc: denied { lock } for pid=3910 comm="syz.0.117" path="socket:[6092]" dev="sockfs" ino=6092 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.096732][ T3915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.261122][ T28] audit: type=1400 audit(1774552570.087:238): avc: denied { create } for pid=3925 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.261287][ T3926] netlink: 388 bytes leftover after parsing attributes in process `syz.3.122'. [ 50.281407][ T28] audit: type=1400 audit(1774552570.097:239): avc: denied { write } for pid=3925 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.321622][ T28] audit: type=1400 audit(1774552570.097:240): avc: denied { nlmsg_write } for pid=3925 comm="syz.3.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.568616][ T3933] loop2: detected capacity change from 0 to 1024 [ 50.579692][ T3933] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.619026][ T3933] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.631846][ T3933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.651268][ T28] audit: type=1400 audit(1774552570.487:241): avc: denied { add_name } for pid=3932 comm="syz.2.124" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.672812][ T3933] EXT4-fs error (device loop2): __ext4_iget:5378: inode #12: block 13: comm syz.2.124: invalid block [ 50.686696][ T3933] EXT4-fs (loop2): Remounting filesystem read-only [ 50.697101][ T28] audit: type=1400 audit(1774552570.507:242): avc: denied { create } for pid=3932 comm="syz.2.124" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.725676][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.754768][ T3936] loop1: detected capacity change from 0 to 512 [ 50.761214][ T28] audit: type=1400 audit(1774552570.587:243): avc: denied { cpu } for pid=3937 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 50.831821][ T28] audit: type=1400 audit(1774552570.667:244): avc: denied { mount } for pid=3943 comm="syz.2.128" name="/" dev="autofs" ino=7169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 51.025922][ T3957] loop4: detected capacity change from 0 to 1024 [ 51.048373][ T3957] EXT4-fs: Ignoring removed orlov option [ 51.089103][ T3961] loop1: detected capacity change from 0 to 256 [ 51.141287][ T3961] FAT-fs (loop1): Directory bread(block 64) failed [ 51.148117][ T3961] FAT-fs (loop1): Directory bread(block 65) failed [ 51.154954][ T3961] FAT-fs (loop1): Directory bread(block 66) failed [ 51.161790][ T3961] FAT-fs (loop1): Directory bread(block 67) failed [ 51.169046][ T3961] FAT-fs (loop1): Directory bread(block 68) failed [ 51.175915][ T3961] FAT-fs (loop1): Directory bread(block 69) failed [ 51.182911][ T3961] FAT-fs (loop1): Directory bread(block 70) failed [ 51.189967][ T3961] FAT-fs (loop1): Directory bread(block 71) failed [ 51.197018][ T3961] FAT-fs (loop1): Directory bread(block 72) failed [ 51.203751][ T3961] FAT-fs (loop1): Directory bread(block 73) failed [ 51.382895][ T3957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.399866][ T28] audit: type=1400 audit(1774552571.227:245): avc: denied { read write } for pid=3955 comm="syz.4.133" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.458723][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.468114][ T28] audit: type=1400 audit(1774552571.227:246): avc: denied { open } for pid=3955 comm="syz.4.133" path="/27/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.733014][ T3965] syz.2.135 uses obsolete (PF_INET,SOCK_PACKET) [ 51.843451][ T3967] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 51.850036][ T3967] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 51.910414][ T3967] vhci_hcd vhci_hcd.0: Device attached [ 52.021876][ T3967] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.090149][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 52.121097][ T3968] vhci_hcd: connection closed [ 52.121806][ T30] vhci_hcd vhci_hcd.2: stop threads [ 52.179742][ T30] vhci_hcd vhci_hcd.2: release socket [ 52.211003][ T10] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 52.237420][ T30] vhci_hcd vhci_hcd.2: disconnect device [ 52.480839][ T3981] loop4: detected capacity change from 0 to 8192 [ 52.532026][ T3981] loop4: p1 < > p2 p4 < p5 > [ 52.556046][ T3981] loop4: partition table partially beyond EOD, truncated [ 52.618974][ T3981] loop4: p1 start 134217728 is beyond EOD, truncated [ 52.665837][ T3981] loop4: p2 size 591360 extends beyond EOD, truncated [ 52.736670][ T3981] loop4: p5 size 591360 extends beyond EOD, truncated [ 53.931808][ T4017] netlink: 16 bytes leftover after parsing attributes in process `syz.4.151'. [ 53.975174][ T4023] loop3: detected capacity change from 0 to 512 [ 54.015119][ T4023] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.056827][ T4030] loop4: detected capacity change from 0 to 512 [ 54.099093][ T4035] netlink: 88 bytes leftover after parsing attributes in process `syz.1.156'. [ 54.108554][ T4035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4035 comm=syz.1.156 [ 54.121178][ T4035] netlink: 88 bytes leftover after parsing attributes in process `syz.1.156'. [ 54.188149][ T4023] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #17: comm syz.3.155: inode has both inline data and extents flags [ 54.203032][ T4023] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 54.203202][ T4023] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.155: couldn't read orphan inode 17 (err -117) [ 54.212393][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 54.212415][ C0] EXT4-fs (loop3): initial error at time 1774552574: ext4_orphan_get:1391: inode 17 [ 54.212452][ C0] EXT4-fs (loop3): last error at time 1774552574: ext4_orphan_get:1391: inode 17 [ 54.250099][ T4023] loop3: lost filesystem error report for type 5 error -117 [ 54.262112][ T4023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.482381][ T4023] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.155: bg 0: block 65: padding at end of block bitmap is not set [ 55.091746][ T4023] __quota_error: 9 callbacks suppressed [ 55.091943][ T4023] Quota error (device loop3): write_blk: dquota write failed [ 55.218595][ T4023] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 55.267906][ T28] audit: type=1400 audit(1774552575.097:256): avc: denied { setopt } for pid=4021 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.277959][ T4023] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.155: Failed to acquire dquot type 0 [ 55.351627][ T4062] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4062 comm=syz.1.166 [ 55.451825][ T4070] loop0: detected capacity change from 0 to 512 [ 55.467907][ T4072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.589213][ T28] audit: type=1400 audit(1774552575.417:257): avc: denied { create } for pid=4077 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.647102][ T28] audit: type=1400 audit(1774552575.457:258): avc: denied { create } for pid=4077 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 55.657498][ T4023] syz.3.155 (4023) used greatest stack depth: 8568 bytes left [ 55.669881][ T28] audit: type=1400 audit(1774552575.457:259): avc: denied { setattr } for pid=4077 comm="syz.0.172" name="PNPIPE" dev="sockfs" ino=6746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 55.778252][ T4086] loop4: detected capacity change from 0 to 256 [ 55.860885][ T28] audit: type=1400 audit(1774552575.457:260): avc: denied { getopt } for pid=4077 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.995874][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.217728][ T28] audit: type=1400 audit(1774552575.497:261): avc: denied { shutdown } for pid=4065 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.237780][ T28] audit: type=1400 audit(1774552575.547:262): avc: denied { ioctl } for pid=4065 comm="syz.2.167" path="socket:[6749]" dev="sockfs" ino=6749 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.362406][ T28] audit: type=1400 audit(1774552576.027:263): avc: denied { connect } for pid=4085 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 56.487817][ T4086] FAT-fs (loop4): Directory bread(block 64) failed [ 56.630174][ T4086] FAT-fs (loop4): Directory bread(block 65) failed [ 56.787599][ T4086] FAT-fs (loop4): Directory bread(block 66) failed [ 56.794322][ T4086] FAT-fs (loop4): Directory bread(block 67) failed [ 56.801013][ T4086] FAT-fs (loop4): Directory bread(block 68) failed [ 56.807634][ T4086] FAT-fs (loop4): Directory bread(block 69) failed [ 56.814322][ T4086] FAT-fs (loop4): Directory bread(block 70) failed [ 56.820928][ T4086] FAT-fs (loop4): Directory bread(block 71) failed [ 56.827702][ T4086] FAT-fs (loop4): Directory bread(block 72) failed [ 56.834453][ T4086] FAT-fs (loop4): Directory bread(block 73) failed [ 56.854627][ T4103] loop1: detected capacity change from 0 to 512 [ 56.896417][ T4103] EXT4-fs error (device loop1): __ext4_fill_super:5563: inode #2: comm syz.1.179: iget: checksum invalid [ 56.939583][ T4103] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 56.939799][ T4103] EXT4-fs (loop1): get root inode failed [ 56.948794][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 56.948815][ C1] EXT4-fs (loop1): initial error at time 1774552576: __ext4_fill_super:5563: inode 2 [ 56.948843][ C1] EXT4-fs (loop1): last error at time 1774552576: __ext4_fill_super:5563: inode 2 [ 56.993079][ T4111] loop0: detected capacity change from 0 to 512 [ 57.041009][ T4103] EXT4-fs (loop1): mount failed [ 57.168135][ T4116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=4116 comm=syz.2.183 [ 57.340959][ T10] usb 5-1: enqueue for inactive port 0 [ 57.499717][ T10] usb 5-1: enqueue for inactive port 0 [ 57.964931][ T4132] loop1: detected capacity change from 0 to 128 [ 57.971808][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 58.061174][ T4132] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.189'. [ 58.613178][ T4150] loop0: detected capacity change from 0 to 128 [ 58.838127][ T4156] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 58.889998][ T4159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4159 comm=syz.2.196 [ 58.933308][ T4159] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 58.966479][ T4161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.014013][ T4164] netlink: 'syz.2.199': attribute type 7 has an invalid length. [ 59.042650][ T40] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.051965][ T4164] netlink: 'syz.2.199': attribute type 7 has an invalid length. [ 59.059948][ T40] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.080844][ T40] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.115799][ T40] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.545704][ T4177] tmpfs: Bad value for 'mpol' [ 59.860854][ T4186] netlink: 40 bytes leftover after parsing attributes in process `syz.1.208'. [ 60.057843][ T4190] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 60.082562][ T4190] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 60.093034][ T4190] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 60.225155][ T4201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.321184][ T4207] loop0: detected capacity change from 0 to 128 [ 60.435292][ T4207] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.213'. [ 60.942430][ T4216] loop2: detected capacity change from 0 to 512 [ 61.200417][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 61.200454][ T28] audit: type=1400 audit(1774552581.027:273): avc: denied { map } for pid=4205 comm="syz.3.217" path="socket:[7119]" dev="sockfs" ino=7119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.352939][ T28] audit: type=1400 audit(1774552581.067:274): avc: denied { read } for pid=4205 comm="syz.3.217" path="socket:[7119]" dev="sockfs" ino=7119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.838850][ T4228] netlink: 136 bytes leftover after parsing attributes in process `syz.2.225'. [ 61.989975][ T28] audit: type=1326 audit(1774552581.817:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.2.228" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f826613c799 code=0x0 [ 62.197501][ T4244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.238023][ T4247] can0: slcan on ptm0. [ 62.541776][ T28] audit: type=1400 audit(1774552582.067:276): avc: denied { read } for pid=3038 comm="dhcpcd" name="n26" dev="tmpfs" ino=2044 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.563747][ T28] audit: type=1400 audit(1774552582.067:277): avc: denied { open } for pid=3038 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=2044 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.588538][ T28] audit: type=1400 audit(1774552582.067:278): avc: denied { getattr } for pid=3038 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=2044 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.613592][ T28] audit: type=1400 audit(1774552582.167:279): avc: denied { create } for pid=4249 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.637938][ T28] audit: type=1400 audit(1774552582.167:280): avc: denied { write } for pid=4249 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=2051 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.664868][ T28] audit: type=1400 audit(1774552582.167:281): avc: denied { append } for pid=4249 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=2051 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.689235][ T28] audit: type=1400 audit(1774552582.187:282): avc: denied { unlink } for pid=4261 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=2051 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.859619][ T4273] loop1: detected capacity change from 0 to 512 [ 62.967651][ T4273] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.237: invalid indirect mapped block 256 (level 2) [ 63.023652][ T4283] xt_hashlimit: size too large, truncated to 1048576 [ 63.123566][ T4273] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.126099][ T4273] EXT4-fs (loop1): 2 truncates cleaned up [ 63.135650][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 63.135679][ C1] EXT4-fs (loop1): initial error at time 1774552582: ext4_free_branches:1023: inode 11 [ 63.135717][ C1] EXT4-fs (loop1): last error at time 1774552582: ext4_free_branches:1023: inode 11 [ 63.429514][ T4273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.462325][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.541905][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.567770][ T4300] loop1: detected capacity change from 0 to 512 [ 63.740435][ T4309] lo speed is unknown, defaulting to 1000 [ 63.753048][ T4309] lo speed is unknown, defaulting to 1000 [ 63.774869][ T4309] lo speed is unknown, defaulting to 1000 [ 63.800384][ T4309] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 63.807935][ T4309] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 64.242494][ T4309] lo speed is unknown, defaulting to 1000 [ 64.271359][ T4247] can0 (unregistered): slcan off ptm0. [ 64.313777][ T4309] lo speed is unknown, defaulting to 1000 [ 64.320112][ T4321] lo speed is unknown, defaulting to 1000 [ 64.344946][ T4309] lo speed is unknown, defaulting to 1000 [ 64.399179][ T4309] lo speed is unknown, defaulting to 1000 [ 64.459448][ T4309] lo speed is unknown, defaulting to 1000 [ 64.614060][ T4340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.803838][ T4368] loop3: detected capacity change from 0 to 256 [ 64.909088][ T4368] FAT-fs (loop3): Directory bread(block 64) failed [ 64.915755][ T4368] FAT-fs (loop3): Directory bread(block 65) failed [ 64.930965][ T4368] FAT-fs (loop3): Directory bread(block 66) failed [ 64.937598][ T4368] FAT-fs (loop3): Directory bread(block 67) failed [ 65.000970][ T4368] FAT-fs (loop3): Directory bread(block 68) failed [ 65.011173][ T4368] FAT-fs (loop3): Directory bread(block 69) failed [ 65.017724][ T4368] FAT-fs (loop3): Directory bread(block 70) failed [ 65.078901][ T4368] FAT-fs (loop3): Directory bread(block 71) failed [ 65.093677][ T4368] FAT-fs (loop3): Directory bread(block 72) failed [ 65.108316][ T4368] FAT-fs (loop3): Directory bread(block 73) failed [ 65.325182][ T4374] FAULT_INJECTION: forcing a failure. [ 65.325182][ T4374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.438177][ T4374] CPU: 1 UID: 0 PID: 4374 Comm: syz.3.259 Not tainted syzkaller #0 PREEMPT(full) [ 65.438208][ T4374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 65.438221][ T4374] Call Trace: [ 65.438227][ T4374] [ 65.438260][ T4374] __dump_stack+0x1d/0x30 [ 65.438285][ T4374] dump_stack_lvl+0x95/0xd0 [ 65.438309][ T4374] dump_stack+0x15/0x1b [ 65.438329][ T4374] should_fail_ex+0x263/0x280 [ 65.438412][ T4374] should_fail+0xb/0x20 [ 65.438437][ T4374] should_fail_usercopy+0x1a/0x20 [ 65.438469][ T4374] _copy_from_user+0x1c/0xb0 [ 65.438492][ T4374] ___sys_sendmsg+0xc1/0x1e0 [ 65.438531][ T4374] __x64_sys_sendmsg+0xd4/0x160 [ 65.438571][ T4374] x64_sys_call+0x194c/0x3020 [ 65.438627][ T4374] do_syscall_64+0x12c/0x370 [ 65.438680][ T4374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.438705][ T4374] RIP: 0033:0x7f9d7483c799 [ 65.438729][ T4374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.438748][ T4374] RSP: 002b:00007f9d73297028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.438770][ T4374] RAX: ffffffffffffffda RBX: 00007f9d74ab5fa0 RCX: 00007f9d7483c799 [ 65.438784][ T4374] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 65.438859][ T4374] RBP: 00007f9d73297090 R08: 0000000000000000 R09: 0000000000000000 [ 65.438873][ T4374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.438885][ T4374] R13: 00007f9d74ab6038 R14: 00007f9d74ab5fa0 R15: 00007ffcfef1e588 [ 65.438901][ T4374] [ 65.734055][ T4387] loop2: detected capacity change from 0 to 1764 [ 65.741230][ T4387] iso9660: Unknown parameter 'utF8' [ 65.778687][ T4386] netlink: 'syz.1.262': attribute type 2 has an invalid length. [ 65.811255][ T3476] IPVS: starting estimator thread 0... [ 65.927531][ T4395] sch_fq: defrate 4294967295 ignored. [ 65.933152][ T4391] IPVS: using max 1920 ests per chain, 96000 per kthread [ 66.069626][ T4401] netlink: 'syz.1.266': attribute type 10 has an invalid length. [ 66.077841][ T4401] hsr0: entered promiscuous mode [ 66.084863][ T4401] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 66.095269][ T4401] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 66.108136][ T4401] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 66.241009][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 66.241025][ T28] audit: type=1326 audit(1774552586.067:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4406 comm="syz.0.268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f938d7dc799 code=0x0 [ 66.451046][ T28] audit: type=1400 audit(1774552586.247:300): avc: denied { execute } for pid=4410 comm="syz.2.269" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.479584][ T4415] netlink: 'syz.2.269': attribute type 5 has an invalid length. [ 66.495874][ T4415] netlink: 168 bytes leftover after parsing attributes in process `syz.2.269'. [ 66.505078][ T28] audit: type=1400 audit(1774552586.247:301): avc: denied { write } for pid=4410 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 66.698030][ T4418] netlink: 15678 bytes leftover after parsing attributes in process `syz.4.270'. [ 67.027128][ T4420] lo speed is unknown, defaulting to 1000 [ 67.150033][ T28] audit: type=1400 audit(1774552586.977:302): avc: denied { write } for pid=4437 comm="syz.0.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.325971][ T4445] loop1: detected capacity change from 0 to 512 [ 67.339732][ T4450] loop3: detected capacity change from 0 to 512 [ 68.338665][ T4450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.359334][ T4460] loop4: detected capacity change from 0 to 1024 [ 68.365953][ T28] audit: type=1400 audit(1774552588.187:303): avc: denied { create } for pid=4461 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.373471][ T4462] lo speed is unknown, defaulting to 1000 [ 68.531505][ T4460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.553133][ T4463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4463 comm=syz.3.280 [ 68.699767][ T28] audit: type=1400 audit(1774552588.327:304): avc: denied { read } for pid=4464 comm="syz.1.284" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.756368][ T28] audit: type=1400 audit(1774552588.327:305): avc: denied { open } for pid=4464 comm="syz.1.284" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.819900][ T28] audit: type=1400 audit(1774552588.327:306): avc: denied { ioctl } for pid=4464 comm="syz.1.284" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.868706][ T28] audit: type=1400 audit(1774552588.407:307): avc: denied { connect } for pid=4457 comm="syz.4.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 68.888663][ T28] audit: type=1400 audit(1774552588.417:308): avc: denied { setattr } for pid=4449 comm="syz.3.280" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.925747][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.941466][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.976905][ T4479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.015602][ T4484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=4484 comm=syz.0.289 [ 69.032533][ T4484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.046784][ T4484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.052042][ T4479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.057084][ T4484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.079794][ T4484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.120850][ T4491] loop4: detected capacity change from 0 to 512 [ 69.151351][ T4479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.170272][ T4494] loop4: detected capacity change from 0 to 512 [ 69.178472][ T4494] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.186889][ T4494] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.216247][ T4494] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 69.224642][ T4494] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 69.234594][ T4494] EXT4-fs (loop4): 1 truncate cleaned up [ 69.242937][ T4494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.278988][ T4479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.290494][ T4494] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 4: comm syz.4.292: lblock 0 mapped to illegal pblock 4 (length 1) [ 69.307665][ T4494] EXT4-fs (loop4): Remounting filesystem read-only [ 69.399229][ T30] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.454811][ T30] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.489869][ T30] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.535666][ T30] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.546685][ T4502] loop1: detected capacity change from 0 to 512 [ 69.573892][ T4502] ext3: Unknown parameter 'smackfstransmute' [ 69.678644][ T4505] netlink: 48 bytes leftover after parsing attributes in process `syz.1.295'. [ 69.958234][ T4512] loop3: detected capacity change from 0 to 128 [ 69.997405][ T4512] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 70.101513][ T4506] IPVS: starting estimator thread 0... [ 70.301891][ T4517] IPVS: using max 2544 ests per chain, 127200 per kthread [ 72.250308][ T69] kworker/u8:4: attempt to access beyond end of device [ 72.250308][ T69] loop3: rw=1, sector=137, nr_sectors = 8 limit=128 [ 72.272470][ T69] kworker/u8:4: attempt to access beyond end of device [ 72.272470][ T69] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 72.299909][ T69] kworker/u8:4: attempt to access beyond end of device [ 72.299909][ T69] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 72.313771][ T69] kworker/u8:4: attempt to access beyond end of device [ 72.313771][ T69] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 72.339827][ T69] kworker/u8:4: attempt to access beyond end of device [ 72.339827][ T69] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 72.356157][ T69] kworker/u8:4: attempt to access beyond end of device [ 72.356157][ T69] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 72.370237][ T69] kworker/u8:4: attempt to access beyond end of device [ 72.370237][ T69] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 72.412721][ T69] kworker/u8:4: attempt to access beyond end of device [ 72.412721][ T69] loop3: rw=1, sector=249, nr_sectors = 16 limit=128 [ 72.432482][ T69] kworker/u8:4: attempt to access beyond end of device [ 72.432482][ T69] loop3: rw=1, sector=273, nr_sectors = 8 limit=128 [ 72.446577][ T69] kworker/u8:4: attempt to access beyond end of device [ 72.446577][ T69] loop3: rw=1, sector=289, nr_sectors = 8 limit=128 [ 72.461444][ T69] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 72.590744][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 72.590758][ T28] audit: type=1400 audit(1774552592.417:318): avc: denied { create } for pid=4548 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.790292][ T28] audit: type=1400 audit(1774552592.617:319): avc: denied { connect } for pid=4551 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.946575][ T28] audit: type=1400 audit(1774552592.617:320): avc: denied { write } for pid=4551 comm="syz.1.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.331050][ T4561] loop2: detected capacity change from 0 to 512 [ 73.401173][ T4562] netlink: 212 bytes leftover after parsing attributes in process `syz.0.310'. [ 73.412533][ T4562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.455423][ T4562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.493278][ T4571] netlink: 44 bytes leftover after parsing attributes in process `syz.3.314'. [ 73.517342][ T4569] loop1: detected capacity change from 0 to 512 [ 73.545066][ T4568] loop2: detected capacity change from 0 to 512 [ 73.579399][ T4568] ext3: Unknown parameter 'smackfstransmute' [ 73.727769][ T4579] netlink: 48 bytes leftover after parsing attributes in process `syz.1.315'. [ 73.859943][ T4577] 8021q: VLANs not supported on ip_vti0 [ 74.003689][ T4588] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.051067][ T4588] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.171841][ T4588] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.201421][ T4588] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.341132][ T4588] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.367409][ T4588] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.435410][ T4588] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 74.491009][ T4588] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.541804][ T4594] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 74.592237][ T30] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.610606][ T30] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.737329][ T30] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.745771][ T30] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.756651][ T30] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.770932][ T30] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.779231][ T30] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.796013][ T30] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.091924][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.230921][ T4603] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 75.273163][ T4607] loop4: detected capacity change from 0 to 512 [ 75.428034][ T4612] loop1: detected capacity change from 0 to 512 [ 75.446061][ T4612] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.463475][ T4612] EXT4-fs (loop1): too many log groups per flexible block group [ 75.484015][ T4612] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 75.500856][ T4612] EXT4-fs (loop1): mount failed [ 75.535931][ T4624] loop3: detected capacity change from 0 to 512 [ 75.560849][ T28] audit: type=1400 audit(1774552595.367:321): avc: denied { map } for pid=4621 comm="syz.4.333" path="pipe:[2498]" dev="pipefs" ino=2498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 75.586954][ T28] audit: type=1400 audit(1774552595.417:322): avc: denied { bind } for pid=4625 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.587739][ T4624] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #12: comm syz.3.334: corrupted in-inode xattr: bad e_name length [ 75.629803][ T28] audit: type=1400 audit(1774552595.417:323): avc: denied { name_bind } for pid=4625 comm="syz.4.335" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 75.651575][ T28] audit: type=1400 audit(1774552595.437:324): avc: denied { node_bind } for pid=4625 comm="syz.4.335" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 75.653912][ T4624] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 75.674125][ T28] audit: type=1400 audit(1774552595.437:325): avc: denied { listen } for pid=4625 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.674717][ T4624] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.334: couldn't read orphan inode 12 (err -117) [ 75.683621][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 75.683637][ C1] EXT4-fs (loop3): initial error at time 1774552595: ext4_iget_extra_inode:5025: inode 12 [ 75.683668][ C1] EXT4-fs (loop3): last error at time 1774552595: ext4_iget_extra_inode:5025: inode 12 [ 75.741319][ T4624] loop3: lost filesystem error report for type 5 error -117 [ 75.746691][ T4624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.774353][ T4624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 75.800695][ T28] audit: type=1400 audit(1774552595.617:326): avc: denied { ioctl } for pid=4623 comm="syz.3.334" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 75.827514][ T28] audit: type=1400 audit(1774552595.617:327): avc: denied { create } for pid=4623 comm="syz.3.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.869245][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.904649][ T4636] loop3: detected capacity change from 0 to 512 [ 75.930760][ T4638] netlink: 48 bytes leftover after parsing attributes in process `syz.1.339'. [ 75.949541][ T4640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.340'. [ 75.961365][ T4638] netlink: 40 bytes leftover after parsing attributes in process `syz.1.339'. [ 76.003831][ T4642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.012382][ T4642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.980963][ T4674] loop1: detected capacity change from 0 to 512 [ 77.131731][ T4685] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 77.241803][ T4685] loop2: detected capacity change from 0 to 512 [ 77.367908][ T4690] netlink: 212 bytes leftover after parsing attributes in process `syz.1.356'. [ 77.377540][ T4690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.386096][ T4690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.418554][ T4685] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 77.447553][ T4685] EXT4-fs (loop2): 1 truncate cleaned up [ 77.472847][ T4685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.505351][ T4685] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.652447][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 77.652531][ T28] audit: type=1400 audit(1774552597.487:338): avc: denied { read } for pid=4704 comm="syz.2.362" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 77.705954][ T28] audit: type=1400 audit(1774552597.517:339): avc: denied { open } for pid=4704 comm="syz.2.362" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 78.294658][ T4714] loop2: detected capacity change from 0 to 512 [ 78.331457][ T4716] syz.2.365: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 78.346108][ T4716] CPU: 0 UID: 0 PID: 4716 Comm: syz.2.365 Not tainted syzkaller #0 PREEMPT(full) [ 78.346187][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 78.346206][ T4716] Call Trace: [ 78.346214][ T4716] [ 78.346223][ T4716] __dump_stack+0x1d/0x30 [ 78.346252][ T4716] dump_stack_lvl+0x95/0xd0 [ 78.346331][ T4716] dump_stack+0x15/0x1b [ 78.346345][ T4716] warn_alloc+0x145/0x1c0 [ 78.346430][ T4716] ? __schedule+0x93c/0xd40 [ 78.346448][ T4716] ? update_load_avg+0x5d/0x680 [ 78.346465][ T4716] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 78.346527][ T4716] ? preempt_schedule_common+0x11/0x30 [ 78.346563][ T4716] ? __rcu_read_unlock+0x4e/0x70 [ 78.346575][ T4716] ? avc_has_perm_noaudit+0xab/0x130 [ 78.346593][ T4716] ? should_fail_ex+0x30/0x280 [ 78.346632][ T4716] ? xskq_create+0x36/0xe0 [ 78.346647][ T4716] vmalloc_user_noprof+0x7d/0xb0 [ 78.346709][ T4716] ? xskq_create+0x80/0xe0 [ 78.346725][ T4716] xskq_create+0x80/0xe0 [ 78.346781][ T4716] xsk_init_queue+0x70/0xb0 [ 78.346794][ T4716] xsk_setsockopt+0x3f5/0x640 [ 78.346807][ T4716] ? __pfx_xsk_setsockopt+0x10/0x10 [ 78.346821][ T4716] __sys_setsockopt+0x184/0x200 [ 78.346888][ T4716] __x64_sys_setsockopt+0x64/0x80 [ 78.346906][ T4716] x64_sys_call+0x2327/0x3020 [ 78.346992][ T4716] do_syscall_64+0x12c/0x370 [ 78.347007][ T4716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.347055][ T4716] RIP: 0033:0x7f826613c799 [ 78.347071][ T4716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.347153][ T4716] RSP: 002b:00007f8264b8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.347221][ T4716] RAX: ffffffffffffffda RBX: 00007f82663b5fa0 RCX: 00007f826613c799 [ 78.347229][ T4716] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 78.347237][ T4716] RBP: 00007f82661d2c99 R08: 0000000000000004 R09: 0000000000000000 [ 78.347245][ T4716] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.347253][ T4716] R13: 00007f82663b6038 R14: 00007f82663b5fa0 R15: 00007ffe30243948 [ 78.347264][ T4716] [ 78.347363][ T4716] Mem-Info: [ 78.567862][ T4716] active_anon:16242 inactive_anon:0 isolated_anon:0 [ 78.567862][ T4716] active_file:18557 inactive_file:2308 isolated_file:0 [ 78.567862][ T4716] unevictable:0 dirty:145 writeback:1 [ 78.567862][ T4716] slab_reclaimable:3446 slab_unreclaimable:16648 [ 78.567862][ T4716] mapped:43193 shmem:8787 pagetables:3256 [ 78.567862][ T4716] sec_pagetables:0 bounce:0 [ 78.567862][ T4716] kernel_misc_reclaimable:0 [ 78.567862][ T4716] free:1868225 free_pcp:10616 free_cma:0 [ 78.615290][ T4716] Node 0 active_anon:64964kB inactive_anon:0kB active_file:74228kB inactive_file:9244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:170692kB dirty:580kB writeback:0kB shmem:35148kB kernel_stack:3648kB pagetables:13024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 78.658816][ T4716] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 78.751044][ T4716] lowmem_reserve[]: 0 2879 7857 7857 [ 78.756549][ T4716] Node 0 DMA32 free:2944636kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948160kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 78.805197][ T4716] lowmem_reserve[]: 0 0 4978 4978 [ 78.815257][ T4716] Node 0 Normal free:4511676kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62412kB inactive_anon:0kB active_file:74228kB inactive_file:9244kB unevictable:8584kB writepending:580kB zspages:0kB present:5242880kB managed:5098240kB mlocked:8700kB bounce:0kB free_pcp:34440kB local_pcp:4712kB free_cma:0kB [ 78.850047][ T4716] lowmem_reserve[]: 0 0 0 0 [ 78.873735][ T4726] netlink: 20 bytes leftover after parsing attributes in process `syz.4.369'. [ 78.885973][ T4716] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 78.907713][ T4716] Node 0 DMA32: 5*4kB (M) 1*8kB (M) 4*16kB (M) 5*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944636kB [ 78.925536][ T4716] Node 0 Normal: 149*4kB (UE) 53*8kB (U) 3*16kB (UME) 1*32kB (U) 4*64kB (ME) 4*128kB (ME) 49*256kB (UME) 47*512kB (UME) 26*1024kB (UM) 13*2048kB (UME) 1077*4096kB (UME) = 4503116kB [ 78.944142][ T4716] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 78.953829][ T4716] 32115 total pagecache pages [ 78.969538][ T4716] 0 pages in swap cache [ 78.981014][ T4716] Free swap = 124996kB [ 78.985225][ T4716] Total swap = 124996kB [ 78.989408][ T4716] 2097051 pages RAM [ 78.993412][ T4716] 0 pages HighMem/MovableOnly [ 78.998131][ T4716] 81611 pages reserved [ 79.079081][ T4735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 79.088086][ T4735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 79.176157][ T4740] netlink: 'syz.2.373': attribute type 10 has an invalid length. [ 79.184037][ T4740] netlink: 32 bytes leftover after parsing attributes in process `syz.2.373'. [ 79.197716][ T4740] ipvlan2: entered promiscuous mode [ 79.207393][ T4740] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 79.634723][ T4748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.375'. [ 79.649014][ T4748] loop0: detected capacity change from 0 to 128 [ 79.657595][ T4748] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.681801][ T28] audit: type=1400 audit(1774552599.517:340): avc: denied { watch watch_reads } for pid=4742 comm="syz.2.374" path="/99" dev="tmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.711267][ T4748] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 79.723317][ T4748] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 79.732180][ T4748] FAT-fs (loop0): Filesystem has been set read-only [ 79.776956][ T4752] loop0: detected capacity change from 0 to 512 [ 79.997833][ T4766] FAULT_INJECTION: forcing a failure. [ 79.997833][ T4766] name failslab, interval 1, probability 0, space 0, times 0 [ 80.011457][ T4766] CPU: 1 UID: 0 PID: 4766 Comm: syz.3.382 Not tainted syzkaller #0 PREEMPT(full) [ 80.011483][ T4766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.011493][ T4766] Call Trace: [ 80.011498][ T4766] [ 80.011505][ T4766] __dump_stack+0x1d/0x30 [ 80.011609][ T4766] dump_stack_lvl+0x95/0xd0 [ 80.011695][ T4766] dump_stack+0x15/0x1b [ 80.011714][ T4766] should_fail_ex+0x263/0x280 [ 80.011738][ T4766] should_failslab+0x8c/0xb0 [ 80.011781][ T4766] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 80.011807][ T4766] ? __alloc_skb+0x2d6/0x690 [ 80.011834][ T4766] __alloc_skb+0x2d6/0x690 [ 80.011856][ T4766] ? __alloc_skb+0x200/0x690 [ 80.011956][ T4766] netlink_alloc_large_skb+0xbf/0xf0 [ 80.011981][ T4766] netlink_sendmsg+0x40c/0x6f0 [ 80.012019][ T4766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.012156][ T4766] ____sys_sendmsg+0x563/0x5b0 [ 80.012188][ T4766] ___sys_sendmsg+0x195/0x1e0 [ 80.012312][ T4766] __x64_sys_sendmsg+0xd4/0x160 [ 80.012350][ T4766] x64_sys_call+0x194c/0x3020 [ 80.012375][ T4766] do_syscall_64+0x12c/0x370 [ 80.012420][ T4766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.012445][ T4766] RIP: 0033:0x7f9d7483c799 [ 80.012462][ T4766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.012481][ T4766] RSP: 002b:00007f9d73297028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.012503][ T4766] RAX: ffffffffffffffda RBX: 00007f9d74ab5fa0 RCX: 00007f9d7483c799 [ 80.012572][ T4766] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 0000000000000003 [ 80.012591][ T4766] RBP: 00007f9d73297090 R08: 0000000000000000 R09: 0000000000000000 [ 80.012649][ T4766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.012663][ T4766] R13: 00007f9d74ab6038 R14: 00007f9d74ab5fa0 R15: 00007ffcfef1e588 [ 80.012700][ T4766] [ 80.447283][ T28] audit: type=1400 audit(1774552600.227:341): avc: denied { ioctl } for pid=4774 comm="syz.1.386" path="mnt:[4026532370]" dev="nsfs" ino=4026532370 ioctlcmd=0xb70d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 81.522286][ T4785] loop0: detected capacity change from 0 to 512 [ 81.546689][ T4787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.389'. [ 81.754261][ T4790] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.761546][ T4790] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.200436][ T4814] loop4: detected capacity change from 0 to 512 [ 82.287591][ T4814] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000005' [ 82.300960][ T4790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.363195][ T4790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.485075][ T30] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.512168][ T30] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.572336][ T30] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.603127][ T30] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.651115][ T30] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.659650][ T30] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.720182][ T30] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.738908][ T30] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.878137][ T4827] netlink: 212 bytes leftover after parsing attributes in process `syz.0.397'. [ 82.889233][ T4827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.898066][ T4827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.412726][ T4839] loop3: detected capacity change from 0 to 512 [ 84.858965][ T4847] loop2: detected capacity change from 0 to 1024 [ 84.875149][ T4847] EXT4-fs: Ignoring removed orlov option [ 84.894554][ T4847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.981888][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.271277][ T28] audit: type=1326 audit(1774552605.097:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4856 comm="syz.2.411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f826613c799 code=0x0 [ 85.319029][ T28] audit: type=1400 audit(1774552605.117:343): avc: denied { ioctl } for pid=4842 comm="syz.3.405" path="socket:[10515]" dev="sockfs" ino=10515 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.396346][ T4873] loop1: detected capacity change from 0 to 128 [ 86.405147][ T4872] loop2: detected capacity change from 0 to 512 [ 86.544307][ T28] audit: type=1400 audit(1774552606.377:344): avc: denied { getopt } for pid=4880 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 86.586108][ T4883] loop3: detected capacity change from 0 to 1024 [ 86.614929][ T4883] EXT4-fs: Ignoring removed orlov option [ 86.851197][ T28] audit: type=1400 audit(1774552606.677:345): avc: denied { mounton } for pid=4887 comm="syz.0.422" path="/85/file0" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.004004][ T4888] loop0: detected capacity change from 0 to 512 [ 87.622405][ T4883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.637814][ T4888] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 87.651064][ T4888] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 87.827467][ T4888] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.422: Corrupt directory, running e2fsck is recommended [ 87.861246][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.910130][ T4888] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 87.939733][ T4888] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.422: corrupted in-inode xattr: e_name out of bounds [ 87.964248][ T4888] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.965443][ T4888] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.422: couldn't read orphan inode 15 (err -117) [ 87.975181][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 87.975245][ C1] EXT4-fs (loop0): initial error at time 1774552607: ext4_iget_extra_inode:5025: inode 15 [ 87.975482][ C1] EXT4-fs (loop0): last error at time 1774552607: ext4_iget_extra_inode:5025: inode 15 [ 88.066451][ T4888] loop0: lost filesystem error report for type 5 error -117 [ 88.082995][ T4888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.138015][ T4888] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.191112][ T4898] openvswitch: netlink: Missing key (keys=40, expected=100) [ 88.227923][ T4898] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 88.353224][ T4906] loop1: detected capacity change from 0 to 512 [ 88.476792][ T4906] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 88.603783][ T4915] loop0: detected capacity change from 0 to 512 [ 88.640346][ T4906] EXT4-fs (loop1): 1 truncate cleaned up [ 88.738011][ T4906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.761838][ T4906] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.811136][ T28] audit: type=1400 audit(1774552608.647:346): avc: denied { setattr } for pid=4916 comm="syz.0.430" name="RAWv6" dev="sockfs" ino=11356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.851487][ T4918] ================================================================== [ 88.859581][ T4918] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 88.867750][ T4918] [ 88.870067][ T4918] write to 0xffff88811ba48ee8 of 8 bytes by task 4917 on cpu 0: [ 88.877700][ T4918] filemap_splice_read+0x523/0x780 [ 88.882819][ T4918] splice_direct_to_actor+0x26e/0x670 [ 88.888194][ T4918] do_splice_direct+0x119/0x1a0 [ 88.893052][ T4918] do_sendfile+0x382/0x650 [ 88.897459][ T4918] __x64_sys_sendfile64+0x105/0x150 [ 88.902656][ T4918] x64_sys_call+0x2dc4/0x3020 [ 88.907409][ T4918] do_syscall_64+0x12c/0x370 [ 88.912007][ T4918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.917908][ T4918] [ 88.920214][ T4918] write to 0xffff88811ba48ee8 of 8 bytes by task 4918 on cpu 1: [ 88.927818][ T4918] filemap_splice_read+0x523/0x780 [ 88.932917][ T4918] splice_direct_to_actor+0x26e/0x670 [ 88.938271][ T4918] do_splice_direct+0x119/0x1a0 [ 88.943099][ T4918] do_sendfile+0x382/0x650 [ 88.947495][ T4918] __x64_sys_sendfile64+0x105/0x150 [ 88.952679][ T4918] x64_sys_call+0x2dc4/0x3020 [ 88.957356][ T4918] do_syscall_64+0x12c/0x370 [ 88.961947][ T4918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.968014][ T4918] [ 88.970316][ T4918] value changed: 0x0000000000000346 -> 0x0000000000000354 [ 88.977490][ T4918] [ 88.979805][ T4918] Reported by Kernel Concurrency Sanitizer on: [ 88.985931][ T4918] CPU: 1 UID: 0 PID: 4918 Comm: syz.0.430 Not tainted syzkaller #0 PREEMPT(full) [ 88.995103][ T4918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.004832][ T4924] netlink: 212 bytes leftover after parsing attributes in process `syz.4.428'. [ 89.005236][ T4918] ================================================================== [ 89.023379][ T4920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.031910][ T4920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.300984][ T4902] Bluetooth: hci0: command 0x1003 tx timeout [ 90.300989][ T3536] Bluetooth: hci0: Opcode 0x1003 failed: -110