last executing test programs: 11.318500312s ago: executing program 2 (id=190): r0 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x8, 0x44, 0x5a, 0x9, 0x0, 0x1, 0x40, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x4, @perf_config_ext={0x6, 0x91}, 0x8088, 0x9, 0x6, 0x9, 0x5, 0x3, 0x40, 0x0, 0x5, 0x0, 0x3d45}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140)}, 0x828, 0x0, 0x3, 0x0, 0x40000000008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8040}, 0x0, 0x1, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x5}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x8486, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) clock_gettime(0x4, &(0x7f0000000400)) (async) r1 = getuid() lchown(&(0x7f0000000400)='./file0\x00', r1, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x2, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x86, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000300), &(0x7f0000000380), 0x8, 0x6b, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) r4 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@struct={0x3, 0x0, 0x0, 0x4, 0x1, 0x2}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}]}]}, {0x0, [0x61, 0x5f, 0x5f]}}, 0x0, 0x4d, 0x0, 0x9}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r4, r2, 0x0, 0x0, 0x0}, 0x30) 11.273052234s ago: executing program 2 (id=191): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f0000000000)={[{@bsdgroups}]}, 0x5, 0x527, &(0x7f0000000c40)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000340), &(0x7f0000000540)={0x0, 0xfb, 0xee, 0x2, 0x0, "31562dcfb95c646176f23f92e2859cbe", "2716c8605f9c972be1f88360ad586d690f7c600cf7ba2fbc75dff4cfb65af8d06f8607d0e177941a484f47d192ec1c5625edb5bf153200072751243060350e1fac08356c3a18967a72b20e7a7802dc5ec7e405a91109794cad7c6213023e7a6bf8b066e7dc944e4164758f2f3cf599d3d8da28555e0f61598421abf8788d1ec8bb6bf52af66b3cc9c2181e45c6fcd7ff174884d9898a6d6bf07bac57064cec3d61093774fe5ac573bc616b6857545a7e0fd388d66134fe7f2b7721aa7693dc7509f749490578bd547abc97ae11e76aaaa547b289ac19274654"}, 0xee, 0x2) 11.180946026s ago: executing program 2 (id=194): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x2}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x2, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0x5) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobarrier}, {@dioread_lock}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x36, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x0, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x122) fcntl$notify(r1, 0x402, 0x8000003d) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r2 = open(&(0x7f0000000200)='.\x00', 0x21c102, 0x11a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x65}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) 10.335821216s ago: executing program 2 (id=199): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000100), &(0x7f0000000180)=0x4) listen(r2, 0xfffffffd) accept4(r2, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000040)={r5, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x8}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r5, 0x1000, 0x4, 0xb1}, &(0x7f0000000200)=0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 9.160742575s ago: executing program 3 (id=208): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000100), &(0x7f0000000180)=0x4) listen(r2, 0xfffffffd) accept4(r2, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x8}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x1000, 0x4, 0xb1}, &(0x7f0000000200)=0x10) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 8.065319802s ago: executing program 2 (id=212): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/irq/1/smp_affinity\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)=',1', 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x8a0a5, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10002, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x10001, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x94cf, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000100"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r5, 0x40047451, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x202, &(0x7f0000000140)={&(0x7f0000000200)=""/24, 0x18}) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000001c80)={{r2}, "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"}) ptrace$setsig(0x4203, r7, 0x7, &(0x7f00000001c0)={0x1c, 0xac, 0x4}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000101010100000000000000000a0000000c001980050001"], 0x20}}, 0x0) r9 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r9, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd, 0x1a}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) close(0x3) 7.218138493s ago: executing program 1 (id=215): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x280, 0x0) write(r3, &(0x7f0000000300)="22a108000000000000009646ced13e932687629c4360a54a5387958eeea817feafba64bf542ee6869b4495f30929f9a2fb70943a28adbeb07da74c8ef9debd1440ff7c", 0x43) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0xfffe, @multicast2}}, 0x1e) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) recvmmsg(r3, &(0x7f0000005f80)=[{{&(0x7f0000000380)=@can, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/24, 0x18}], 0x2, &(0x7f0000000740)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000800)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000002540)=[{&(0x7f00000009c0)=""/138, 0x8a}, {&(0x7f0000000a80)=""/89, 0x59}, {&(0x7f0000000b00)=""/196, 0xc4}, {&(0x7f0000000c00)=""/18, 0x12}, {&(0x7f0000000c40)=""/208, 0xd0}, {&(0x7f0000000d40)=""/206, 0xce}, {&(0x7f0000000e40)=""/210, 0xd2}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)}, {&(0x7f0000002500)=""/23, 0x17}], 0xa, &(0x7f0000002600)=""/137, 0x89}, 0x5}, {{&(0x7f00000026c0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000003980)=[{&(0x7f0000002740)=""/48, 0x30}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/126, 0x7e}, {&(0x7f0000003800)=""/74, 0x4a}, {&(0x7f0000003880)=""/232, 0xe8}], 0x5, &(0x7f0000003a00)=""/208, 0xd0}, 0x5}, {{0x0, 0x0, &(0x7f0000004f00)=[{0xfffffffffffffffc}, {&(0x7f0000003b00)=""/196, 0xc4}, {&(0x7f0000003c00)=""/138, 0x8a}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/225, 0xe1}, {&(0x7f0000004dc0)=""/64, 0x40}, {&(0x7f0000004e00)=""/243, 0xf3}], 0x7, &(0x7f0000004f80)=""/4096, 0x1000}, 0xce76b66}], 0x4, 0x40, &(0x7f0000006080)={0x77359400}) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xd}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x4, 0x4, 0x8}, 0x50) 7.081718496s ago: executing program 3 (id=217): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e26, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 6.507269601s ago: executing program 2 (id=219): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) 5.829879257s ago: executing program 3 (id=223): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000100), &(0x7f0000000180)=0x4) listen(r2, 0xfffffffd) accept4(r2, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000040)={r5, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x8}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r5, 0x1000, 0x4, 0xb1}, &(0x7f0000000200)=0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 5.664524131s ago: executing program 1 (id=225): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x280, 0x0) write(r3, &(0x7f0000000300)="22a108000000000000009646ced13e932687629c4360a54a5387958eeea817feafba64bf542ee6869b4495f30929f9a2fb70943a28adbeb07da74c8ef9debd1440ff7c", 0x43) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0xfffe, @multicast2}}, 0x1e) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) recvmmsg(r3, &(0x7f0000005f80)=[{{&(0x7f0000000380)=@can, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/24, 0x18}], 0x2, &(0x7f0000000740)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000800)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000002540)=[{&(0x7f00000009c0)=""/138, 0x8a}, {&(0x7f0000000a80)=""/89, 0x59}, {&(0x7f0000000b00)=""/196, 0xc4}, {&(0x7f0000000c00)=""/18, 0x12}, {&(0x7f0000000c40)=""/208, 0xd0}, {&(0x7f0000000d40)=""/206, 0xce}, {&(0x7f0000000e40)=""/210, 0xd2}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)}, {&(0x7f0000002500)=""/23, 0x17}], 0xa, &(0x7f0000002600)=""/137, 0x89}, 0x5}, {{&(0x7f00000026c0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000003980)=[{&(0x7f0000002740)=""/48, 0x30}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/126, 0x7e}, {&(0x7f0000003800)=""/74, 0x4a}, {&(0x7f0000003880)=""/232, 0xe8}], 0x5, &(0x7f0000003a00)=""/208, 0xd0}, 0x5}, {{0x0, 0x0, &(0x7f0000004f00)=[{0xfffffffffffffffc}, {&(0x7f0000003b00)=""/196, 0xc4}, {&(0x7f0000003c00)=""/138, 0x8a}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/225, 0xe1}, {&(0x7f0000004dc0)=""/64, 0x40}, {&(0x7f0000004e00)=""/243, 0xf3}], 0x7, &(0x7f0000004f80)=""/4096, 0x1000}, 0xce76b66}], 0x4, 0x40, &(0x7f0000006080)={0x77359400}) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xd}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x4, 0x4, 0x8}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000600850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f00000002c0)) 4.645392247s ago: executing program 1 (id=229): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x10, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@jmp={0x5, 0x1, 0x7, 0x0, 0x9, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf0}, 0x94) 4.439972392s ago: executing program 1 (id=230): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x4e0d1c98, 0x7}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001cc0)={{r0}, &(0x7f0000001c40), &(0x7f0000001c80)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0x5ee, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xf7be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.439027072s ago: executing program 0 (id=231): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4.304404394s ago: executing program 4 (id=232): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) getsockopt$inet6_mreq(r0, 0x29, 0x12, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000e, 0x31, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x4000000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0xfd}, 0xa}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0xca33, @remote}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="f4", 0x1}], 0x5) r3 = socket(0x400000000010, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r9) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES64=r5, @ANYRESHEX=r6, @ANYBLOB="01000000000000000000040000000800020003000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8000, @dev={0xfe, 0x80, '\x00', 0x23}, 0x200}, 0x1c) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800c10, &(0x7f0000000840)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c666c7573682c646f74732c666c7573682c636865636b3d72656c617865642c71756965742c6572726f72733d72656d6f756e742d726f2c6e6f646f74732c00b809a6ed6a11fd459311c6140e8fc5300da85a95aa4baee25ecaf74c5cbc6b1859889a3eefa76b125b44478c5d9df7ed620840988ed102de6bdb80347c0d7a22e428bc9b0c5cde00c4c0746c933fe95479447bdbc7ad9cdf0a2818932a48f56a08110dbb247eed43b3fcd06f3fe3271b983a7cdddd3e777fc3ed4e1018676eb3b7240e886b92de0fb08c4649c5dff139c5d52aa2efce92b1992a44726bc2148221de8fc839f8d265bd368ad972a7e05961bcb381eb8ba1e21ec8e57ddb6a3f2d938caae1d44478336dcba441194be678fa1a9cf58062e1b80b60879938283c85f681d6e4353aba860e7958f489e70148933574c3359f34f6aa3f0e2e6f44adcc35e9e8267d999a75b7cfd6c962350eadc8c910afc0a572729ccd07007626f08a2701da467af2faff7a4a24177b765f2669abdf555c0c626ca0198e92e1c7b48ab8002d8a15d9619c1b3c80d2a979be623b0d5c538f59b8235e2bf27ceea76a82cade017ecd56eef67302"], 0x1f, 0x242, &(0x7f0000000540)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mount(&(0x7f0000000200)=@rnullb, &(0x7f0000000240)='./file2\x00', 0x0, 0x8c5008, 0x0) 4.304024634s ago: executing program 0 (id=233): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x209, 0x2, 0x0, 0x5, 0x87c, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000240)='./file0\x00', 0x2004000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0], 0xfe, 0x1244, &(0x7f0000000b40)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x14e174135c0b87af) creat(&(0x7f00000002c0)='./file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0x4) clock_adjtime(0xa, &(0x7f00000000c0)={0x401, 0x8, 0xfff, 0x1, 0x1, 0x5e1, 0x1, 0x400, 0x4, 0xfffffffffffffffd, 0xffffffffffffffab, 0x401, 0x5, 0x80000000, 0x8, 0xe, 0x5a0, 0x19, 0x1, 0x1f3, 0x7fff, 0x8000000000000001, 0x3, 0x6, 0x2d76, 0x3}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000900)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1e, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000f2000000000000040018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a00fe00000000b5090800000100007baaf0ff00000000be9800000000000004080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008f2ffff450000007600000018140000", @ANYRES32=r3, @ANYBLOB="0000000000000000bf9100000000000076080000000000008500000084000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000001c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000300)='p:test/event1 ./file0:0x0 arg2=%bx', 0x22) ioctl$XFS_IOC_FSINUMBERS(r4, 0xc0205867, &(0x7f0000000800)={&(0x7f0000000080)=0x5, 0x77e02846, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], &(0x7f00000007c0)}) 3.952207883s ago: executing program 3 (id=234): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e26, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 3.051235015s ago: executing program 0 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000100), &(0x7f0000000180)=0x4) listen(r2, 0xfffffffd) accept4(r2, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x8}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x1000, 0x4, 0xb1}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 3.033264046s ago: executing program 4 (id=236): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x280, 0x0) write(r3, &(0x7f0000000300)="22a108000000000000009646ced13e932687629c4360a54a5387958eeea817feafba64bf542ee6869b4495f30929f9a2fb70943a28adbeb07da74c8ef9debd1440ff7c", 0x43) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0xfffe, @multicast2}}, 0x1e) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) recvmmsg(r3, &(0x7f0000005f80)=[{{&(0x7f0000000380)=@can, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f00000006c0)=""/24, 0x18}], 0x2, &(0x7f0000000740)=""/138, 0x8a}, 0x6}, {{&(0x7f0000000800)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000002540)=[{&(0x7f00000009c0)=""/138, 0x8a}, {&(0x7f0000000a80)=""/89, 0x59}, {&(0x7f0000000b00)=""/196, 0xc4}, {&(0x7f0000000c00)=""/18, 0x12}, {&(0x7f0000000c40)=""/208, 0xd0}, {&(0x7f0000000d40)=""/206, 0xce}, {&(0x7f0000000e40)=""/210, 0xd2}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)}, {&(0x7f0000002500)=""/23, 0x17}], 0xa, &(0x7f0000002600)=""/137, 0x89}, 0x5}, {{&(0x7f00000026c0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000003980)=[{&(0x7f0000002740)=""/48, 0x30}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/126, 0x7e}, {&(0x7f0000003800)=""/74, 0x4a}, {&(0x7f0000003880)=""/232, 0xe8}], 0x5, &(0x7f0000003a00)=""/208, 0xd0}, 0x5}, {{0x0, 0x0, &(0x7f0000004f00)=[{0xfffffffffffffffc}, {&(0x7f0000003b00)=""/196, 0xc4}, {&(0x7f0000003c00)=""/138, 0x8a}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/225, 0xe1}, {&(0x7f0000004dc0)=""/64, 0x40}, {&(0x7f0000004e00)=""/243, 0xf3}], 0x7, &(0x7f0000004f80)=""/4096, 0x1000}, 0xce76b66}], 0x4, 0x40, &(0x7f0000006080)={0x77359400}) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xd}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x4, 0x4, 0x8}, 0x50) 3.012163566s ago: executing program 1 (id=237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) io_submit(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000000)='pimreg1\x00'}) r3 = syz_io_uring_setup(0x3bd4, &(0x7f0000000240)={0x0, 0xcc19, 0x130c8, 0x1, 0x80030d}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f00000002c0), 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3, 0xe}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbf7fffffffff, 0xffffffffffffffff, 0x1) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x201, 0xffffffffffffffff) tkill(0x0, 0x13) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0xe8, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x20040000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0xd0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7, 0x11, 0x40000, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x6, 0x7], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x100008}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r7, 0x25, 0x0, @void}, 0x10) 1.606099151s ago: executing program 3 (id=238): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2, 0x7f}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0xfffffffffffffefb, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x6, 0x5, 0x0) 1.388815196s ago: executing program 0 (id=239): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20040081) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="540026000e2c929340e3a7d6b51c7cb41397491fc0a8949af54b6ddd58", @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f0000000000"], 0x54}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000880)='./tracing/uprobe_events\x00', &(0x7f00000008c0)={0x4481, 0x42}, 0x18) clock_gettime(0x0, 0x0) utimensat(r1, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x4801) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x140f, 0x20, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x1002, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000002, 0x10, 0xffffffffffffffff, 0xffffa000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xc}, 0x209, 0x2, 0x0, 0x5, 0x87c, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x2c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x4dd9cb860130c27e) 1.388217636s ago: executing program 4 (id=240): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@local, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in=@loopback, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0x101}, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) (fail_nth: 7) 1.307805018s ago: executing program 4 (id=241): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f00000006c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff0000000000000000e4ffffff06020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff0000000000000000e4ffffff06020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}}, 0x4804) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}}, 0x4804) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "4178523668c0403f", "8c40ebdba0826f3413955d7f9dd2d135", "82320841", "ac397ad1a3657df8"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "4178523668c0403f", "8c40ebdba0826f3413955d7f9dd2d135", "82320841", "ac397ad1a3657df8"}, 0x28) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) lsetxattr$system_posix_acl(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {0x1, 0x3}, [{0x2, 0xd}], {0x4, 0x8}, [{}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x2}, {0x8, 0x2}, {0x8, 0x4}], {0x10, 0x1}}, 0xfecc, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) (async) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='dir0/tracing_on\x00', 0x0, 0x0) read(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002d00)=""/4110, 0x100e}], 0x1}, 0x5}], 0x2, 0x23, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) r8 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)={0x10}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 681.646383ms ago: executing program 0 (id=242): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0xa001}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x2000077c, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r3, &(0x7f0000001f00)="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", 0x1ea) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0xf501d000) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x40080, &(0x7f0000000800)={0x11, 0x18, r6, 0x1, 0xc0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 438.936519ms ago: executing program 1 (id=243): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4c42bb4f92, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)='G', 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r2, 0x4, 0x7c00) vmsplice(r3, &(0x7f0000000680)=[{&(0x7f0000000340)="3d8b", 0x2}], 0x1, 0xc) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r4 = socket(0x2d, 0x2, 0x0) write(r4, 0x0, 0x0) 355.967271ms ago: executing program 3 (id=244): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000100), &(0x7f0000000180)=0x4) listen(r2, 0xfffffffd) accept4(r2, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000040)={r5, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x8}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 336.936142ms ago: executing program 4 (id=245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = dup(r1) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[], 0x32600) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) ioctl$XFS_IOC_SCRUB_METADATA(r4, 0xc040583c, &(0x7f00000001c0)={0xe, 0xc8, 0x4, 0x7, 0x3}) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000480)={0x60, 0x1, &(0x7f000000c000/0xb000)=nil, &(0x7f0000009000/0x4000)=nil, 0x3, &(0x7f00000003c0)=[{0xceb, 0x4, 0x3}, {0x8, 0x4f}, {0x66bd6bc4, 0x8, 0x6}, {0x1, 0x5a, 0x9}, {0x9, 0x5, 0xfff}, {0x3, 0x10, 0x9}, {0x8, 0x68, 0x7}, {0x8, 0x9, 0x101}], 0x8, 0x5, 0x72, 0x28, 0x38, 0x5e}) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 68.872738ms ago: executing program 0 (id=246): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNATTACHFILTER(r1, 0x400454d1, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="24b455a9a9166a659a00010002108000000000000220200000000000"], 0x24}}, 0x4080) r2 = syz_clone(0x4060000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r2) ptrace(0x4208, r2) ptrace(0x4207, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRES16=r4, @ANYRES16=0x0], 0x38}}, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000027000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) fchdir(r7) r8 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214d, 0x400, 0x3, 0xcf, 0x0, r7}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/usbtest/new_id\x00', 0x460440, 0x0) write(r9, &(0x7f0000000140)='0547 2Y', 0x7) io_uring_enter(r8, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001cc0)={{r0}, &(0x7f0000001c40), &(0x7f0000001c80)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0x5ee, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xf7be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) kernel console output (not intermixed with test programs): [ 21.687273][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 21.687292][ T28] audit: type=1400 audit(1787232709.943:118): avc: denied { write } for pid=3219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.718034][ T28] audit: type=1400 audit(1787232709.963:119): avc: denied { write } for pid=3230 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.762560][ T28] audit: type=1400 audit(1787232710.023:120): avc: denied { write } for pid=3233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.793118][ T28] audit: type=1400 audit(1787232710.053:121): avc: denied { write } for pid=3244 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.862730][ T28] audit: type=1400 audit(1787232710.123:122): avc: denied { write } for pid=3247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.886051][ T28] audit: type=1400 audit(1787232710.123:123): avc: denied { write } for pid=3258 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.163786][ T28] audit: type=1400 audit(1787232710.423:124): avc: denied { write } for pid=3261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.187955][ T28] audit: type=1400 audit(1787232710.433:125): avc: denied { write } for pid=3272 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. [ 28.363525][ T28] audit: type=1400 audit(1787232716.623:126): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.386579][ T28] audit: type=1400 audit(1787232716.643:127): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.387261][ T3284] cgroup: Unknown subsys name 'net' [ 28.415564][ T28] audit: type=1400 audit(1787232716.683:128): avc: denied { unmount } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.553109][ T3284] cgroup: Unknown subsys name 'cpuset' [ 28.559557][ T3284] cgroup: Unknown subsys name 'rlimit' [ 28.648930][ T28] audit: type=1400 audit(1787232716.903:129): avc: denied { setattr } for pid=3284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.672477][ T28] audit: type=1400 audit(1787232716.903:130): avc: denied { create } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.691233][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.693634][ T28] audit: type=1400 audit(1787232716.903:131): avc: denied { write } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.721898][ T3284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.722841][ T28] audit: type=1400 audit(1787232716.903:132): avc: denied { read } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.752152][ T28] audit: type=1400 audit(1787232716.903:133): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.774141][ T28] audit: type=1400 audit(1787232716.953:134): avc: denied { relabelto } for pid=3288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.801087][ T28] audit: type=1400 audit(1787232716.953:135): avc: denied { write } for pid=3288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.894593][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.901876][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.909198][ T3302] bridge_slave_0: entered allmulticast mode [ 30.915735][ T3302] bridge_slave_0: entered promiscuous mode [ 30.933741][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.940846][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.948342][ T3302] bridge_slave_1: entered allmulticast mode [ 30.955011][ T3302] bridge_slave_1: entered promiscuous mode [ 30.988329][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.995500][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.002689][ T3295] bridge_slave_0: entered allmulticast mode [ 31.009124][ T3295] bridge_slave_0: entered promiscuous mode [ 31.030756][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.037909][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.045078][ T3295] bridge_slave_1: entered allmulticast mode [ 31.051757][ T3295] bridge_slave_1: entered promiscuous mode [ 31.058182][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.065304][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.072639][ T3296] bridge_slave_0: entered allmulticast mode [ 31.079000][ T3296] bridge_slave_0: entered promiscuous mode [ 31.085939][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.093130][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.100517][ T3300] bridge_slave_0: entered allmulticast mode [ 31.107108][ T3300] bridge_slave_0: entered promiscuous mode [ 31.114900][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.133324][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.140435][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.147718][ T3296] bridge_slave_1: entered allmulticast mode [ 31.154294][ T3296] bridge_slave_1: entered promiscuous mode [ 31.160844][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.168000][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.175146][ T3300] bridge_slave_1: entered allmulticast mode [ 31.181706][ T3300] bridge_slave_1: entered promiscuous mode [ 31.189047][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.228106][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.247487][ T3302] team0: Port device team_slave_0 added [ 31.253344][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.261221][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.268416][ T3299] bridge_slave_0: entered allmulticast mode [ 31.275065][ T3299] bridge_slave_0: entered promiscuous mode [ 31.282729][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.293120][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.303283][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.313430][ T3302] team0: Port device team_slave_1 added [ 31.319350][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.326720][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.333964][ T3299] bridge_slave_1: entered allmulticast mode [ 31.340243][ T3299] bridge_slave_1: entered promiscuous mode [ 31.351694][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.362026][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.400706][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.407756][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.435392][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.451205][ T3295] team0: Port device team_slave_0 added [ 31.462188][ T3300] team0: Port device team_slave_0 added [ 31.468176][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.475560][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.501658][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.513956][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.523987][ T3295] team0: Port device team_slave_1 added [ 31.530352][ T3296] team0: Port device team_slave_0 added [ 31.537087][ T3300] team0: Port device team_slave_1 added [ 31.550172][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.564282][ T3296] team0: Port device team_slave_1 added [ 31.579018][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.586145][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.612047][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.635841][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.642914][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.669178][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.680156][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.687174][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.713550][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.728648][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.735784][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.761880][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.782882][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.790230][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.816852][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.834257][ T3299] team0: Port device team_slave_0 added [ 31.841017][ T3299] team0: Port device team_slave_1 added [ 31.847078][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.854235][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.880366][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.898698][ T3302] hsr_slave_0: entered promiscuous mode [ 31.904806][ T3302] hsr_slave_1: entered promiscuous mode [ 31.924827][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.931853][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.958267][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.969786][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.976806][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.003151][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.025975][ T3296] hsr_slave_0: entered promiscuous mode [ 32.032375][ T3296] hsr_slave_1: entered promiscuous mode [ 32.038268][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 32.044018][ T3296] Cannot create hsr debugfs directory [ 32.078785][ T3300] hsr_slave_0: entered promiscuous mode [ 32.084944][ T3300] hsr_slave_1: entered promiscuous mode [ 32.090864][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 32.096633][ T3300] Cannot create hsr debugfs directory [ 32.109800][ T3295] hsr_slave_0: entered promiscuous mode [ 32.115995][ T3295] hsr_slave_1: entered promiscuous mode [ 32.122021][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 32.128014][ T3295] Cannot create hsr debugfs directory [ 32.161073][ T3299] hsr_slave_0: entered promiscuous mode [ 32.167334][ T3299] hsr_slave_1: entered promiscuous mode [ 32.173327][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 32.179123][ T3299] Cannot create hsr debugfs directory [ 32.360395][ T3296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.369289][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.376954][ T3296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.385720][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.393520][ T3296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.402092][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.409994][ T3296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.418901][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.445396][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.454244][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.462113][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.470717][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.478638][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.487394][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.495391][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.504614][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.531268][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.540187][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.553536][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.562732][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.572035][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.581634][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.589666][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.598255][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.636930][ T3295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.645707][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.653991][ T3295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.662771][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.670769][ T3295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.679752][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.696002][ T3295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.704421][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.735646][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.744504][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.752555][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.761191][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.770266][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.779388][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.787087][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.795744][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.806562][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.827481][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.844158][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.855890][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.864989][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.872363][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.888168][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.895743][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.904706][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.912214][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.938898][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.947058][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.954493][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.000038][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.011098][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.023859][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.031628][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.049241][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.056688][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.068198][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.076009][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.089434][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.096592][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.115610][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.122961][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.142815][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.173848][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.181119][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.202745][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.211298][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.420772][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.475279][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.488109][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.511316][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.555763][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.682958][ T3299] veth0_vlan: entered promiscuous mode [ 33.709347][ T3299] veth1_vlan: entered promiscuous mode [ 33.719960][ T3302] veth0_vlan: entered promiscuous mode [ 33.728779][ T3300] veth0_vlan: entered promiscuous mode [ 33.747727][ T3302] veth1_vlan: entered promiscuous mode [ 33.761387][ T3300] veth1_vlan: entered promiscuous mode [ 33.769387][ T3295] veth0_vlan: entered promiscuous mode [ 33.792064][ T3299] veth0_macvtap: entered promiscuous mode [ 33.804902][ T3302] veth0_macvtap: entered promiscuous mode [ 33.811591][ T3299] veth1_macvtap: entered promiscuous mode [ 33.818483][ T3295] veth1_vlan: entered promiscuous mode [ 33.832521][ T3302] veth1_macvtap: entered promiscuous mode [ 33.840787][ T3296] veth0_vlan: entered promiscuous mode [ 33.855346][ T3300] veth0_macvtap: entered promiscuous mode [ 33.865630][ T3300] veth1_macvtap: entered promiscuous mode [ 33.874898][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.882746][ T3296] veth1_vlan: entered promiscuous mode [ 33.895224][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.908629][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.919296][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.930366][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.944535][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.954072][ T3295] veth0_macvtap: entered promiscuous mode [ 33.967503][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.975845][ T3295] veth1_macvtap: entered promiscuous mode [ 33.983934][ T3425] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.995991][ T3296] veth0_macvtap: entered promiscuous mode [ 34.008965][ T3296] veth1_macvtap: entered promiscuous mode [ 34.024289][ T310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.040694][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.052376][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 34.052392][ T28] audit: type=1400 audit(1787232722.303:144): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.S4gMM0/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.054264][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.067621][ T28] audit: type=1400 audit(1787232722.313:145): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.115397][ T28] audit: type=1400 audit(1787232722.313:146): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.S4gMM0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.139085][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.144095][ T28] audit: type=1400 audit(1787232722.313:147): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.171883][ T28] audit: type=1400 audit(1787232722.313:148): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.S4gMM0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.174496][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.209468][ T28] audit: type=1400 audit(1787232722.313:149): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.S4gMM0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.210124][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.241805][ T28] audit: type=1400 audit(1787232722.313:150): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.273020][ T28] audit: type=1400 audit(1787232722.343:151): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.283589][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.296694][ T28] audit: type=1400 audit(1787232722.343:152): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="gadgetfs" ino=4676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.326359][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.341972][ T28] audit: type=1400 audit(1787232722.593:153): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.392476][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.415978][ T310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.426013][ T310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.447208][ T3513] loop2: detected capacity change from 0 to 512 [ 34.454348][ T3513] ======================================================= [ 34.454348][ T3513] WARNING: The mand mount option has been deprecated and [ 34.454348][ T3513] and is ignored by this kernel. Remove the mand [ 34.454348][ T3513] option from the mount to silence this warning. [ 34.454348][ T3513] ======================================================= [ 34.495680][ T3507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 34.506747][ T3507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 34.519682][ T3507] Zero length message leads to an empty skb [ 34.533038][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.547049][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.557199][ T3513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.563888][ T3515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3515 comm=syz.0.6 [ 34.581670][ T3513] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.594228][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.606407][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.621954][ T3507] loop3: detected capacity change from 0 to 1024 [ 34.643171][ T3507] loop3: detected capacity change from 0 to 2048 [ 34.649394][ T3520] loop4: detected capacity change from 0 to 512 [ 34.656189][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.656428][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.656792][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.696200][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.725242][ T3515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 34.742473][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.745059][ T3520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.765270][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.773323][ T3515] netlink: 'syz.0.6': attribute type 5 has an invalid length. [ 34.786481][ T3515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 34.802808][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.834595][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.848433][ T3520] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.864284][ T3526] xt_hashlimit: size too large, truncated to 1048576 [ 34.925510][ T3532] @0Ù: renamed from bond_slave_1 (while UP) [ 34.952376][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.961518][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.970624][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.986958][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.131258][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.229272][ T3538] Illegal XDP return value 4294967262 on prog (id 2) dev N/A, expect packet loss! [ 35.277666][ T3541] netlink: 'syz.3.10': attribute type 16 has an invalid length. [ 35.318911][ T3541] netlink: 'syz.3.10': attribute type 17 has an invalid length. [ 35.347157][ T3541] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 35.364176][ T3542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9'. [ 35.379217][ T3515] syz.0.6 (3515) used greatest stack depth: 10928 bytes left [ 35.398532][ T3544] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11'. [ 35.504740][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.732073][ T3552] loop0: detected capacity change from 0 to 512 [ 35.741510][ T3552] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 35.749785][ T3552] EXT4-fs (loop0): orphan cleanup on readonly fs [ 35.759041][ T3552] EXT4-fs error (device loop0): ext4_acquire_dquot:7049: comm syz.0.12: Failed to acquire dquot type 1 [ 35.770305][ T3552] loop0: lost filesystem error report for type 5 error -5 [ 35.772330][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 35.786299][ C0] EXT4-fs (loop0): initial error at time 1787232724: ext4_acquire_dquot:7049 [ 35.796602][ C0] EXT4-fs (loop0): last error at time 1787232724: ext4_acquire_dquot:7049 [ 35.820875][ T3552] EXT4-fs (loop0): Remounting filesystem read-only [ 35.829208][ T3552] EXT4-fs (loop0): 1 truncate cleaned up [ 35.845429][ T3552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.238128][ T3558] netlink: 'syz.3.14': attribute type 39 has an invalid length. [ 36.269893][ T3565] loop1: detected capacity change from 0 to 2048 [ 36.391718][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.417019][ T3571] loop4: detected capacity change from 0 to 512 [ 36.442701][ T3571] EXT4-fs: inline encryption not supported [ 36.471677][ T3571] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.482833][ T3573] loop0: detected capacity change from 0 to 512 [ 36.492063][ T3571] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.501143][ T3573] EXT4-fs: Ignoring removed i_version option [ 36.526935][ T3573] ext2: Unknown parameter 'obj_user' [ 36.537465][ T3571] EXT4-fs error (device loop4): ext4_acquire_dquot:7049: comm syz.4.17: Failed to acquire dquot type 1 [ 36.607881][ T3571] loop4: lost filesystem error report for type 5 error -5 [ 36.608158][ T3571] EXT4-fs (loop4): Remounting filesystem read-only [ 36.615390][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 36.615419][ C0] EXT4-fs (loop4): initial error at time 1787232724: ext4_acquire_dquot:7049 [ 36.615444][ C0] EXT4-fs (loop4): last error at time 1787232724: ext4_acquire_dquot:7049 [ 36.710655][ T3571] EXT4-fs (loop4): 1 truncate cleaned up [ 36.728666][ T3571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.864870][ T3571] EXT4-fs: Invalid want_extra_isize 46 [ 36.958660][ T3581] loop1: detected capacity change from 0 to 2048 [ 37.029097][ T3581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.092832][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.164681][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.647317][ T3591] loop4: detected capacity change from 0 to 512 [ 39.346246][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 39.346266][ T28] audit: type=1400 audit(1787232727.373:236): avc: denied { create } for pid=3609 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 39.586153][ T28] audit: type=1400 audit(1787232727.843:237): avc: denied { create } for pid=3616 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 39.587602][ T3620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3620 comm=syz.0.29 [ 39.642902][ T28] audit: type=1400 audit(1787232727.903:238): avc: denied { create } for pid=3616 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.705191][ T3621] mmap: syz.0.29 (3621) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.715524][ T3621] set_capacity_and_notify: 1 callbacks suppressed [ 39.715549][ T3621] loop0: detected capacity change from 0 to 136 [ 39.715999][ T3621] iso9660: Bad value for 'uid' [ 39.716016][ T3621] iso9660: Bad value for 'uid' [ 40.329801][ T28] audit: type=1400 audit(1787232728.583:239): avc: denied { connect } for pid=3609 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.400729][ T3627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.32'. [ 40.421301][ T28] audit: type=1400 audit(1787232728.673:240): avc: denied { ioctl } for pid=3624 comm="syz.3.31" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 40.458914][ T3627] netlink: 'syz.0.32': attribute type 32 has an invalid length. [ 40.529403][ T28] audit: type=1400 audit(1787232728.733:241): avc: denied { cpu } for pid=3630 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.558131][ T28] audit: type=1400 audit(1787232728.743:242): avc: denied { create } for pid=3630 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 40.612732][ T28] audit: type=1400 audit(1787232728.803:243): avc: denied { map } for pid=3624 comm="syz.3.31" path="socket:[5262]" dev="sockfs" ino=5262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.675138][ T28] audit: type=1400 audit(1787232728.803:244): avc: denied { read } for pid=3624 comm="syz.3.31" path="socket:[5262]" dev="sockfs" ino=5262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.728780][ T28] audit: type=1400 audit(1787232728.843:245): avc: denied { ioctl } for pid=3624 comm="syz.3.31" path="socket:[4961]" dev="sockfs" ino=4961 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.337785][ T3646] nfs: Unknown parameter 'system.posix_acl_default' [ 41.797179][ T3636] syz.0.32 (3636) used greatest stack depth: 10760 bytes left [ 42.260269][ T3655] netlink: 'syz.0.39': attribute type 32 has an invalid length. [ 42.274702][ T3655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 42.356309][ T3655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.39'. [ 42.374719][ T3655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.39'. [ 42.433440][ T3655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'. [ 43.328636][ T3682] loop1: detected capacity change from 0 to 2048 [ 43.372512][ T3665] loop4: detected capacity change from 0 to 1024 [ 43.395623][ T3665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.408844][ T3665] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.746339][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.246838][ T3695] loop1: detected capacity change from 0 to 512 [ 44.534961][ T3695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.590218][ T3695] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.030973][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 45.030990][ T28] audit: type=1400 audit(1787232733.283:340): avc: denied { write } for pid=3705 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 45.175132][ T3711] loop0: detected capacity change from 0 to 2048 [ 45.286105][ T3713] netlink: 'syz.4.53': attribute type 16 has an invalid length. [ 45.294163][ T3713] netlink: 'syz.4.53': attribute type 17 has an invalid length. [ 45.310202][ T3713] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 45.574041][ T3726] netlink: 'syz.4.56': attribute type 16 has an invalid length. [ 45.649757][ T3726] netlink: 'syz.4.56': attribute type 17 has an invalid length. [ 45.721162][ T3726] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 45.957863][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.005212][ T28] audit: type=1400 audit(1787232734.263:341): avc: denied { write } for pid=3729 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 46.132057][ T28] audit: type=1400 audit(1787232734.303:342): avc: denied { create } for pid=3733 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.153188][ T3737] netlink: 'syz.4.58': attribute type 16 has an invalid length. [ 46.153348][ T28] audit: type=1400 audit(1787232734.303:343): avc: denied { getopt } for pid=3733 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.182643][ T28] audit: type=1400 audit(1787232734.353:344): avc: denied { write } for pid=3729 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 46.200367][ T3737] netlink: 'syz.4.58': attribute type 17 has an invalid length. [ 46.210083][ T3741] loop2: detected capacity change from 0 to 128 [ 46.244762][ T3741] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.285503][ T3737] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 46.304510][ T3741] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.401687][ T28] audit: type=1400 audit(1787232734.653:345): avc: denied { mount } for pid=3748 comm="syz.1.61" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 46.424191][ T3749] sd 0:0:1:0: PR command failed: 1026 [ 46.429824][ T3749] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 46.452903][ T3749] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 46.488113][ T28] audit: type=1400 audit(1787232734.743:346): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 46.544374][ T28] audit: type=1400 audit(1787232734.803:347): avc: denied { setopt } for pid=3754 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.600518][ T28] audit: type=1400 audit(1787232734.803:348): avc: denied { bind } for pid=3754 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.648983][ T28] audit: type=1400 audit(1787232734.803:349): avc: denied { name_bind } for pid=3754 comm="syz.1.63" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 46.955532][ T3752] geneve2: entered promiscuous mode [ 47.367164][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.544461][ T3765] syz.1.64 (3765) used greatest stack depth: 10400 bytes left [ 47.701509][ T3771] loop1: detected capacity change from 0 to 2048 [ 47.720947][ T3773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 47.762887][ T3752] syz.4.62 (3752) used greatest stack depth: 9536 bytes left [ 47.814187][ T3776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 47.889653][ T3776] 8021q: adding VLAN 0 to HW filter on device team1 [ 47.971844][ T3779] netlink: 36 bytes leftover after parsing attributes in process `syz.3.68'. [ 48.008477][ T3779] netlink: 36 bytes leftover after parsing attributes in process `syz.3.68'. [ 48.020496][ T3779] netlink: 36 bytes leftover after parsing attributes in process `syz.3.68'. [ 48.034178][ T3779] netlink: 36 bytes leftover after parsing attributes in process `syz.3.68'. [ 48.054594][ T3779] netlink: 36 bytes leftover after parsing attributes in process `syz.3.68'. [ 48.088033][ T3779] netlink: 36 bytes leftover after parsing attributes in process `syz.3.68'. [ 48.112629][ T3779] netlink: 36 bytes leftover after parsing attributes in process `syz.3.68'. [ 48.128011][ T3779] netlink: 36 bytes leftover after parsing attributes in process `syz.3.68'. [ 48.151834][ T3779] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.159334][ T3779] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.251176][ T3792] loop4: detected capacity change from 0 to 128 [ 48.267963][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.357443][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.692173][ T3424] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.704474][ T3424] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.722521][ T3424] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.751967][ T3424] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.178896][ T3795] loop1: detected capacity change from 0 to 128 [ 49.562939][ T3806] netlink: 'syz.2.74': attribute type 16 has an invalid length. [ 49.571040][ T3806] netlink: 'syz.2.74': attribute type 17 has an invalid length. [ 49.581380][ T3806] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 50.245815][ T3821] loop3: detected capacity change from 0 to 128 [ 50.595335][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 50.595352][ T28] audit: type=1400 audit(1787232738.853:413): avc: denied { ioctl } for pid=3826 comm="syz.0.81" path="socket:[5591]" dev="sockfs" ino=5591 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 50.626450][ T28] audit: type=1400 audit(1787232738.853:414): avc: denied { read write } for pid=3826 comm="syz.0.81" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 50.633787][ T1039] hid-generic 0000:0B00:0001.0001: unknown main item tag 0x0 [ 50.652448][ T28] audit: type=1400 audit(1787232738.853:415): avc: denied { open } for pid=3826 comm="syz.0.81" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 50.668591][ T1039] hid-generic 0000:0B00:0001.0001: unknown main item tag 0x0 [ 50.689432][ T1039] hid-generic 0000:0B00:0001.0001: unknown main item tag 0x1 [ 50.697731][ T1039] hid-generic 0000:0B00:0001.0001: unknown main item tag 0x0 [ 50.705548][ T1039] hid-generic 0000:0B00:0001.0001: unknown main item tag 0x0 [ 50.713520][ T1039] hid-generic 0000:0B00:0001.0001: unknown main item tag 0x0 [ 50.722078][ T1039] hid-generic 0000:0B00:0001.0001: unknown main item tag 0x0 [ 50.812905][ T1039] hid-generic 0000:0B00:0001.0001: hidraw0: HID v0.10 Device [syz0] on syz1 [ 50.888880][ T3836] netlink: 'syz.0.84': attribute type 16 has an invalid length. [ 50.898072][ T3836] netlink: 'syz.0.84': attribute type 17 has an invalid length. [ 50.939191][ T3836] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 51.010951][ T3834] fido_id[3834]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 51.140566][ T28] audit: type=1400 audit(1787232739.393:416): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 51.404299][ T3844] netlink: 'syz.4.86': attribute type 16 has an invalid length. [ 51.419630][ T3844] netlink: 'syz.4.86': attribute type 17 has an invalid length. [ 51.429387][ T3844] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 51.494980][ T3846] loop4: detected capacity change from 0 to 2048 [ 51.701429][ T28] audit: type=1400 audit(1787232739.953:417): avc: denied { write } for pid=3852 comm="syz.2.89" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.791789][ T28] audit: type=1400 audit(1787232740.043:418): avc: denied { create } for pid=3845 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.829128][ T3854] netlink: 'syz.2.89': attribute type 14 has an invalid length. [ 51.834975][ T28] audit: type=1400 audit(1787232740.043:419): avc: denied { read } for pid=3845 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.839129][ T3840] loop0: detected capacity change from 0 to 512 [ 52.050911][ T3840] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.457748][ T3872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.485944][ T3872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.509974][ T3864] netlink: 'syz.4.91': attribute type 12 has an invalid length. [ 52.519977][ T3840] EXT4-fs (loop0): 1 orphan inode deleted [ 52.528656][ T3840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.542062][ T68] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 52.549179][ T3840] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.552221][ T68] EXT4-fs error (device loop0): ext4_release_dquot:7085: comm kworker/u8:4: Failed to release dquot type 1 [ 52.694225][ T3840] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 52.910961][ T3878] loop1: detected capacity change from 0 to 512 [ 53.006410][ T3878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.090740][ T3878] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.148959][ T3884] __nla_validate_parse: 130 callbacks suppressed [ 53.148979][ T3884] netlink: 26 bytes leftover after parsing attributes in process `syz.3.96'. [ 53.166633][ T3840] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 53.378416][ T3840] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 53.468290][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.500021][ T3840] netlink: 1 bytes leftover after parsing attributes in process `syz.0.85'. [ 53.650745][ T3892] loop2: detected capacity change from 0 to 128 [ 53.931416][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.304087][ T3910] FAULT_INJECTION: forcing a failure. [ 54.304087][ T3910] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.334020][ T3910] CPU: 1 UID: 0 PID: 3910 Comm: syz.3.103 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.334180][ T3910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.334196][ T3910] Call Trace: [ 54.334204][ T3910] [ 54.334213][ T3910] __dump_stack+0x1d/0x30 [ 54.334287][ T3910] dump_stack_lvl+0x95/0xd0 [ 54.334312][ T3910] dump_stack+0x15/0x1b [ 54.334400][ T3910] should_fail_ex+0x262/0x280 [ 54.334436][ T3910] should_fail+0xb/0x20 [ 54.334510][ T3910] should_fail_usercopy+0x1a/0x20 [ 54.334541][ T3910] _copy_from_user+0x1c/0xb0 [ 54.334560][ T3910] ___sys_sendmsg+0xc1/0x1e0 [ 54.334606][ T3910] __x64_sys_sendmsg+0xd4/0x160 [ 54.334698][ T3910] x64_sys_call+0x22ab/0x2550 [ 54.334724][ T3910] do_syscall_64+0x112/0x360 [ 54.334749][ T3910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.334794][ T3910] RIP: 0033:0x7f9ae81ae0d9 [ 54.334811][ T3910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.334840][ T3910] RSP: 002b:00007f9ae6c07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.334937][ T3910] RAX: ffffffffffffffda RBX: 00007f9ae8435fa0 RCX: 00007f9ae81ae0d9 [ 54.335021][ T3910] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 54.335035][ T3910] RBP: 00007f9ae6c07090 R08: 0000000000000000 R09: 0000000000000000 [ 54.335051][ T3910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.335066][ T3910] R13: 00007f9ae8436038 R14: 00007f9ae8435fa0 R15: 00007fff6937b478 [ 54.335089][ T3910] [ 54.335638][ T3908] capability: warning: `syz.0.101' uses deprecated v2 capabilities in a way that may be insecure [ 54.522653][ T28] audit: type=1400 audit(1787232742.783:420): avc: denied { write } for pid=3912 comm="syz.3.104" name="protocols" dev="proc" ino=4026532644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 54.617408][ T3915] netlink: 72 bytes leftover after parsing attributes in process `syz.3.105'. [ 54.671043][ T3917] netlink: 44 bytes leftover after parsing attributes in process `syz.3.106'. [ 54.680645][ T3917] netlink: 43 bytes leftover after parsing attributes in process `syz.3.106'. [ 54.690889][ T3917] netlink: 'syz.3.106': attribute type 5 has an invalid length. [ 54.699391][ T3917] netlink: 43 bytes leftover after parsing attributes in process `syz.3.106'. [ 54.731453][ T3919] loop3: detected capacity change from 0 to 2048 [ 54.816578][ T3921] batman_adv: batadv0: Adding interface: veth0 [ 54.823157][ T3921] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.849520][ T3921] batman_adv: batadv0: Interface activated: veth0 [ 54.858900][ T28] audit: type=1400 audit(1787232743.123:421): avc: denied { bind } for pid=3920 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.887217][ T3921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.894905][ T3921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.903302][ T3921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.921450][ T3921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.937564][ T3921] batman_adv: batadv0: Interface deactivated: veth0 [ 54.944493][ T3921] batman_adv: batadv0: Removing interface: veth0 [ 55.073880][ T3927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.083565][ T3927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.143953][ T3931] No such timeout policy "syz1" [ 55.156838][ T3927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.165218][ T3927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.388920][ T3932] netlink: 'syz.3.110': attribute type 39 has an invalid length. [ 55.687274][ T3939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 55.768401][ T3942] loop1: detected capacity change from 0 to 512 [ 55.795084][ T3937] geneve2: left promiscuous mode [ 55.825016][ T3942] EXT4-fs: Ignoring removed nobh option [ 55.854713][ T3942] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.890101][ T3942] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 55.904768][ T3942] EXT4-fs (loop1): 1 truncate cleaned up [ 55.911259][ T3942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.925936][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 55.925954][ T28] audit: type=1400 audit(1787232744.183:424): avc: denied { write } for pid=3938 comm="syz.1.113" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.967884][ T28] audit: type=1400 audit(1787232744.223:425): avc: denied { read write } for pid=3938 comm="syz.1.113" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.993592][ T3946] loop0: detected capacity change from 0 to 512 [ 56.008591][ T28] audit: type=1400 audit(1787232744.223:426): avc: denied { open } for pid=3938 comm="syz.1.113" path="/23/file2/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.025669][ T3946] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.115588][ T3946] EXT4-fs (loop0): 1 truncate cleaned up [ 56.121823][ T3946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.179465][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.180586][ T3946] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 3391 (only 1 groups) [ 56.247262][ T3946] hsr0: entered promiscuous mode [ 56.276004][ T3946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 56.298788][ T3946] hsr_slave_0: left promiscuous mode [ 56.305896][ T3946] hsr_slave_1: left promiscuous mode [ 56.357590][ T3946] hsr0 (unregistering): left promiscuous mode [ 56.508479][ T28] audit: type=1326 audit(1787232744.763:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.2.117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b89d9e0d9 code=0x7ffc0000 [ 56.609861][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.897419][ T3962] xt_hashlimit: size too large, truncated to 1048576 [ 56.972073][ T3965] @0Ù: renamed from bond_slave_1 (while UP) [ 57.082192][ T28] audit: type=1326 audit(1787232744.763:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.2.117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b89d9e0d9 code=0x7ffc0000 [ 57.107749][ T28] audit: type=1326 audit(1787232744.763:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.2.117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b89d9e0d9 code=0x7ffc0000 [ 57.133228][ T28] audit: type=1326 audit(1787232744.763:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.2.117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b89d9e0d9 code=0x7ffc0000 [ 57.177198][ T28] audit: type=1326 audit(1787232744.763:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.2.117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f3b89d9e0d9 code=0x7ffc0000 [ 57.276775][ T28] audit: type=1326 audit(1787232744.763:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.2.117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b89d9e0d9 code=0x7ffc0000 [ 57.320104][ T28] audit: type=1326 audit(1787232744.763:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.2.117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b89d9e0d9 code=0x7ffc0000 [ 58.730006][ T3986] loop4: detected capacity change from 0 to 512 [ 58.964932][ T3986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.028171][ T3986] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.112514][ T3991] bonding: bond0 is being deleted... [ 59.145263][ T3991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.188962][ T3991] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 59.190107][ T4006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.214091][ T3991] bond0 (unregistering): Released all slaves [ 59.242530][ T4006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.353153][ T4005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.395980][ T4005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.420476][ T4006] netlink: 'syz.2.129': attribute type 39 has an invalid length. [ 59.436156][ T4005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.464363][ T4005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.600382][ T3997] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 59.710551][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.954605][ T4030] netlink: 'syz.0.144': attribute type 14 has an invalid length. [ 61.007795][ T4030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 61.018333][ T4031] loop1: detected capacity change from 0 to 512 [ 61.233895][ T4031] EXT4-fs (loop1): 1 orphan inode deleted [ 61.240647][ T4031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.254827][ T310] __quota_error: 6 callbacks suppressed [ 61.254843][ T310] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 61.288858][ T4031] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.302401][ T310] EXT4-fs error (device loop1): ext4_release_dquot:7085: comm kworker/u8:5: Failed to release dquot type 1 [ 61.369454][ T4034] loop2: detected capacity change from 0 to 128 [ 61.526450][ T4024] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 61.600793][ T28] audit: type=1400 audit(1787232749.853:440): avc: denied { mount } for pid=4046 comm="syz.0.138" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 61.646647][ T28] audit: type=1400 audit(1787232749.853:441): avc: denied { ioctl } for pid=4046 comm="syz.0.138" path="mnt:[4026533228]" dev="nsfs" ino=4026533228 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.653198][ T4050] loop0: detected capacity change from 0 to 512 [ 61.698410][ T4024] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 61.748826][ T4024] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 61.800661][ T4050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.815376][ T4050] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.866442][ T4024] netlink: 1 bytes leftover after parsing attributes in process `syz.1.134'. [ 61.896388][ T28] audit: type=1400 audit(1787232750.153:442): avc: denied { mount } for pid=4056 comm="syz.3.141" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 61.940739][ T28] audit: type=1400 audit(1787232750.183:443): avc: denied { search } for pid=4056 comm="syz.3.141" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 61.964218][ T28] audit: type=1400 audit(1787232750.183:444): avc: denied { append } for pid=4056 comm="syz.3.141" name="uprobe_events" dev="tracefs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 61.987285][ T28] audit: type=1400 audit(1787232750.183:445): avc: denied { open } for pid=4056 comm="syz.3.141" path="/33/tracing/uprobe_events" dev="tracefs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 62.013657][ T28] audit: type=1400 audit(1787232750.183:446): avc: denied { write } for pid=4056 comm="syz.3.141" name="uprobe_events" dev="tracefs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 62.052327][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.064431][ T4053] loop4: detected capacity change from 0 to 128 [ 62.092894][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.093673][ T28] audit: type=1400 audit(1787232750.343:447): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 62.236896][ T28] audit: type=1326 audit(1787232750.493:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4063 comm="syz.1.142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19af14e0d9 code=0x7ffc0000 [ 63.084730][ T4082] loop3: detected capacity change from 0 to 2048 [ 63.489201][ T4087] xt_hashlimit: size too large, truncated to 1048576 [ 63.492177][ T4092] tmpfs: Bad value for 'mpol' [ 63.557050][ T4085] loop1: detected capacity change from 0 to 128 [ 64.327206][ T4105] loop0: detected capacity change from 0 to 512 [ 64.338405][ T4105] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.351762][ T4105] EXT4-fs (loop0): shut down requested (1) [ 64.372527][ T3300] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 64.822617][ T4121] netlink: 108 bytes leftover after parsing attributes in process `syz.4.159'. [ 65.388524][ T4136] loop3: detected capacity change from 0 to 512 [ 65.429646][ T4136] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.465353][ T4136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.480723][ T4136] ext4 filesystem being mounted at /39/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.649570][ T4136] EXT4-fs error (device loop3): __ext4_new_inode:1081: comm syz.3.165: reserved inode found cleared - inode=1 [ 65.958822][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.243212][ T4149] GUP no longer grows the stack in syz.4.168 (4149): 200000005000-200000008000 (200000004000) [ 66.295658][ T4149] CPU: 0 UID: 0 PID: 4149 Comm: syz.4.168 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.295693][ T4149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.295708][ T4149] Call Trace: [ 66.295718][ T4149] [ 66.295755][ T4149] __dump_stack+0x1d/0x30 [ 66.295786][ T4149] dump_stack_lvl+0x95/0xd0 [ 66.295821][ T4149] dump_stack+0x15/0x1b [ 66.295843][ T4149] fixup_user_fault+0x4fe/0x550 [ 66.295865][ T4149] fault_in_user_writeable+0x5c/0xc0 [ 66.295912][ T4149] futex_lock_pi+0x5f4/0x7c0 [ 66.295999][ T4149] ? __pfx_futex_wake_mark+0x10/0x10 [ 66.296117][ T4149] do_futex+0x2ea/0x460 [ 66.296147][ T4149] __se_sys_futex+0x2f6/0x370 [ 66.296171][ T4149] ? xfd_validate_state+0x45/0xf0 [ 66.296275][ T4149] __x64_sys_futex+0x78/0x90 [ 66.296305][ T4149] x64_sys_call+0x22e2/0x2550 [ 66.296334][ T4149] do_syscall_64+0x112/0x360 [ 66.296370][ T4149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.296393][ T4149] RIP: 0033:0x7fa56af8e0d9 [ 66.296429][ T4149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.296449][ T4149] RSP: 002b:00007fa5699e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 66.296472][ T4149] RAX: ffffffffffffffda RBX: 00007fa56b215fa0 RCX: 00007fa56af8e0d9 [ 66.296488][ T4149] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 66.296505][ T4149] RBP: 00007fa56b025024 R08: 0000000000000000 R09: 0000000000000001 [ 66.296521][ T4149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.296591][ T4149] R13: 00007fa56b216038 R14: 00007fa56b215fa0 R15: 00007ffee673e888 [ 66.296615][ T4149] [ 66.299365][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 66.299450][ T28] audit: type=1400 audit(1787232754.553:477): avc: denied { name_bind } for pid=4148 comm="syz.4.168" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 66.419129][ T4149] loop4: detected capacity change from 0 to 1024 [ 66.515890][ T4149] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.541143][ T4149] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 66.552145][ T4149] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 66.563997][ T4149] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 66.566283][ T4152] loop3: detected capacity change from 0 to 128 [ 66.581538][ T4149] EXT4-fs (loop4): journal inode is deleted [ 66.591552][ T4159] netlink: 108 bytes leftover after parsing attributes in process `syz.1.171'. [ 66.697718][ T4174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 66.715831][ T4174] loop2: detected capacity change from 0 to 512 [ 66.752638][ T4174] EXT4-fs: Ignoring removed nobh option [ 66.758966][ T4174] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.784997][ T4174] EXT4-fs (loop2): 1 truncate cleaned up [ 66.791388][ T4174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.817074][ T4161] loop0: detected capacity change from 0 to 128 [ 66.846380][ T28] audit: type=1400 audit(1787232755.103:478): avc: denied { write } for pid=4172 comm="syz.2.177" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.978200][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.917169][ T28] audit: type=1400 audit(1787232756.173:479): avc: denied { name_bind } for pid=4193 comm="syz.1.181" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 67.960391][ T28] audit: type=1400 audit(1787232756.173:480): avc: denied { node_bind } for pid=4193 comm="syz.1.181" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 68.160527][ T28] audit: type=1326 audit(1787232756.413:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.4.184" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56af8e0d9 code=0x7ffc0000 [ 68.187718][ T4202] loop2: detected capacity change from 0 to 512 [ 68.197175][ T28] audit: type=1326 audit(1787232756.453:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.4.184" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56af8e0d9 code=0x7ffc0000 [ 68.227928][ T28] audit: type=1326 audit(1787232756.453:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.4.184" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fa56af8e0d9 code=0x7ffc0000 [ 68.254321][ T28] audit: type=1326 audit(1787232756.453:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.4.184" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56af8e0d9 code=0x7ffc0000 [ 68.268677][ T4205] loop4: detected capacity change from 0 to 512 [ 68.280257][ T28] audit: type=1326 audit(1787232756.453:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4200 comm="syz.4.184" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56af8e0d9 code=0x7ffc0000 [ 68.316115][ T4202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.357236][ T4202] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.382176][ T28] audit: type=1400 audit(1787232756.633:486): avc: denied { setattr } for pid=4199 comm="syz.2.185" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.394859][ T4205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.424784][ T4205] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.461498][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.488879][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.513282][ T4212] netlink: 108 bytes leftover after parsing attributes in process `syz.2.187'. [ 68.534990][ T4214] batman_adv: batadv0: Adding interface: veth0 [ 68.541635][ T4214] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.571011][ T4214] batman_adv: batadv0: Interface activated: veth0 [ 68.696934][ T4216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.705518][ T4216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.714539][ T4216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.722891][ T4216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.731763][ T4216] batman_adv: batadv0: Interface deactivated: veth0 [ 68.739466][ T4216] batman_adv: batadv0: Removing interface: veth0 [ 69.016646][ T4229] loop2: detected capacity change from 0 to 512 [ 69.047224][ T4229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.060716][ T4229] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.094740][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.105487][ T4231] netlink: 64 bytes leftover after parsing attributes in process `syz.1.193'. [ 69.165690][ T4236] loop2: detected capacity change from 0 to 1024 [ 69.173042][ T4236] EXT4-fs: Ignoring removed bh option [ 69.183736][ T4236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.501561][ T4247] netlink: 24 bytes leftover after parsing attributes in process `syz.4.197'. [ 69.971504][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.942711][ T4283] loop4: detected capacity change from 0 to 512 [ 70.965028][ T4283] EXT4-fs: Ignoring removed i_version option [ 70.978609][ T4283] ext2: Unknown parameter 'obj_user' [ 71.470435][ T4303] netlink: 'syz.0.209': attribute type 14 has an invalid length. [ 71.497836][ T4303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 72.333073][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 72.333175][ T28] audit: type=1400 audit(1787232760.583:559): avc: denied { write } for pid=4311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.412088][ T28] audit: type=1400 audit(1787232760.663:560): avc: denied { write } for pid=4328 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.641798][ T28] audit: type=1400 audit(1787232760.893:561): avc: denied { write } for pid=4333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.735587][ T28] audit: type=1400 audit(1787232760.993:562): avc: denied { write } for pid=4344 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.792813][ T4345] netlink: 'syz.2.212': attribute type 1 has an invalid length. [ 73.104055][ T28] audit: type=1400 audit(1787232761.363:563): avc: denied { bind } for pid=4348 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.200484][ T28] audit: type=1400 audit(1787232761.453:564): avc: denied { create } for pid=4348 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.254635][ T28] audit: type=1400 audit(1787232761.513:565): avc: denied { view } for pid=4353 comm="syz.4.218" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 73.337118][ T28] audit: type=1400 audit(1787232761.593:566): avc: denied { setopt } for pid=4353 comm="syz.4.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.358117][ T28] audit: type=1400 audit(1787232761.613:567): avc: denied { getopt } for pid=4353 comm="syz.4.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.285582][ T4371] netlink: 'syz.0.221': attribute type 14 has an invalid length. [ 74.421621][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 74.673754][ T28] audit: type=1400 audit(1787232762.933:568): avc: denied { create } for pid=4381 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 76.039547][ T4401] loop4: detected capacity change from 0 to 512 [ 76.128720][ T4405] loop0: detected capacity change from 0 to 8192 [ 77.947450][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 77.947468][ T28] audit: type=1400 audit(1787232765.753:577): avc: denied { bind } for pid=4408 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.161302][ T28] audit: type=1400 audit(1787232765.753:578): avc: denied { connect } for pid=4408 comm="syz.0.235" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.182720][ T28] audit: type=1400 audit(1787232765.753:579): avc: denied { write } for pid=4408 comm="syz.0.235" laddr=224.0.0.1 faddr=172.20.20.170 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.367533][ T28] audit: type=1400 audit(1787232766.593:580): avc: denied { allowed } for pid=4417 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.394665][ T4418] lo speed is unknown, defaulting to 1000 [ 78.404253][ T4418] lo speed is unknown, defaulting to 1000 [ 78.411543][ T4418] lo speed is unknown, defaulting to 1000 [ 78.613119][ T4418] infiniband syz0: set active [ 78.618076][ T4418] infiniband syz0: added lo [ 78.625357][ T4421] Cannot find add_set index 0 as target [ 78.633917][ T3366] lo speed is unknown, defaulting to 1000 [ 78.683690][ T4418] RDS/IB: syz0: added [ 78.688025][ T4418] smc: adding ib device syz0 with port count 1 [ 78.695066][ T4418] smc: ib device syz0 port 1 has no pnetid [ 78.703274][ T4418] lo speed is unknown, defaulting to 1000 [ 78.880589][ T4418] lo speed is unknown, defaulting to 1000 [ 79.067605][ T4418] lo speed is unknown, defaulting to 1000 [ 79.240175][ T4418] lo speed is unknown, defaulting to 1000 [ 79.368884][ T11] lo speed is unknown, defaulting to 1000 [ 79.386634][ T28] audit: type=1326 audit(1787232767.643:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.3.238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae81ae0d9 code=0x7ffc0000 [ 79.423243][ T28] audit: type=1326 audit(1787232767.643:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.3.238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae81ae0d9 code=0x7ffc0000 [ 79.474898][ T28] audit: type=1326 audit(1787232767.673:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.3.238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae81ae0d9 code=0x7ffc0000 [ 79.504071][ T28] audit: type=1326 audit(1787232767.673:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.3.238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9ae81ae0d9 code=0x7ffc0000 [ 79.535018][ T28] audit: type=1326 audit(1787232767.673:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.3.238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae81ae0d9 code=0x7ffc0000 [ 79.565166][ T28] audit: type=1326 audit(1787232767.713:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.3.238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae81ae0d9 code=0x7ffc0000 [ 79.605723][ T4436] batman_adv: batadv0: Adding interface: veth0 [ 79.612056][ T4436] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.638919][ T4436] batman_adv: batadv0: Interface activated: veth0 [ 79.646335][ T4418] lo speed is unknown, defaulting to 1000 [ 79.653654][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.661432][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.833886][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.891072][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.022549][ T4436] batman_adv: batadv0: Interface deactivated: veth0 [ 80.043734][ T4436] batman_adv: batadv0: Removing interface: veth0 [ 80.237151][ T4447] loop1: detected capacity change from 0 to 4096 [ 80.252423][ T4447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.632193][ T4447] ================================================================== [ 80.640421][ T4447] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 80.648526][ T4447] [ 80.650876][ T4447] write to 0xffff88810cf282e0 of 8 bytes by task 4456 on cpu 1: [ 80.658656][ T4447] filemap_splice_read+0x52a/0x790 [ 80.664256][ T4447] ext4_file_splice_read+0x8f/0xb0 [ 80.669412][ T4447] splice_direct_to_actor+0x261/0x680 [ 80.674914][ T4447] do_splice_direct+0x119/0x1a0 [ 80.679806][ T4447] do_sendfile+0x37d/0x640 [ 80.684684][ T4447] __x64_sys_sendfile64+0x105/0x150 [ 80.689926][ T4447] x64_sys_call+0x1015/0x2550 [ 80.694805][ T4447] do_syscall_64+0x112/0x360 [ 80.699518][ T4447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.705449][ T4447] [ 80.707794][ T4447] write to 0xffff88810cf282e0 of 8 bytes by task 4447 on cpu 0: [ 80.715445][ T4447] filemap_splice_read+0x52a/0x790 [ 80.720592][ T4447] ext4_file_splice_read+0x8f/0xb0 [ 80.726002][ T4447] splice_direct_to_actor+0x261/0x680 [ 80.731495][ T4447] do_splice_direct+0x119/0x1a0 [ 80.736475][ T4447] do_sendfile+0x37d/0x640 [ 80.741104][ T4447] __x64_sys_sendfile64+0x105/0x150 [ 80.746542][ T4447] x64_sys_call+0x1015/0x2550 [ 80.751691][ T4447] do_syscall_64+0x112/0x360 [ 80.756500][ T4447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.762617][ T4447] [ 80.764960][ T4447] value changed: 0x00000000000001e9 -> 0x00000000000001ea [ 80.772121][ T4447] [ 80.774894][ T4447] Reported by Kernel Concurrency Sanitizer on: [ 80.781850][ T4447] CPU: 0 UID: 0 PID: 4447 Comm: syz.1.243 Not tainted syzkaller #0 PREEMPT(lazy) [ 80.791553][ T4447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.802509][ T4447] ================================================================== [ 81.416259][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.