last executing test programs: 3.659901689s ago: executing program 2 (id=493): r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) ptrace(0x10, r0) r1 = syz_pidfd_open(r0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) waitid$P_PIDFD(0x3, r1, 0x0, 0xa000000c, 0x0) 1.78341208s ago: executing program 0 (id=513): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x326, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x4050) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000240000000000800014000000000180003801400010069705f7674693000000000000000000014000000110001"], 0x80}}, 0x0) socket$kcm(0x10, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.709113242s ago: executing program 0 (id=516): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r0 = timerfd_create(0x8, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4044}, 0x20004850) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000d, 0x11, 0xffffffffffffffff, 0xec778000) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.698042102s ago: executing program 2 (id=517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24048814) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.695128133s ago: executing program 1 (id=518): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf35, 0x2}, 0x1224, 0x0, 0x0, 0x9, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="13030000760091"], 0xfe33) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f90c24fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f000000000000", 0x29}], 0x1}, 0x20000000) 1.658037663s ago: executing program 2 (id=519): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xc, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9}, 0x420, 0xe52, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x83, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x28}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x220881f, &(0x7f00000000c0), 0x1, 0x511, &(0x7f0000000f00)="$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") 1.657787083s ago: executing program 0 (id=520): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc0, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002fd}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.632939615s ago: executing program 1 (id=521): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0xfffffdef) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1e00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305829, &(0x7f0000000040)=0xc00600000000c006) 1.362792252s ago: executing program 0 (id=532): mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000680)={0x0, 0x20, &(0x7f0000000640)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}, @in={0x2, 0x4e22, @remote}]}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) 1.259694845s ago: executing program 0 (id=523): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x80042000000fffe, 0x4) 1.122740738s ago: executing program 1 (id=525): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, &(0x7f0000000040), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc081}, 0x40400c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500050000000500010006000000140007800600044000000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.122573769s ago: executing program 3 (id=526): bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) keyctl$get_security(0x11, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000400), 0xffff, 0x167602) unshare(0x26020480) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="4b2a586b7d5b174351d3d86ae2e83e5e0f9770820a0cff5defa494bb12c4ff4e38ad97f53b0ad6b7e5f91d245955be64d884a75a5facdc19719942f47751ed03600c2ea65051fecd09576e62038c8b607d06efb545fc9ad5e4df0d25ec5a384862d179ecd800494d7baf6228659473d808cdcff2d848626ea1bb06f55bb36604738b070fd6faf11af3eb592a31b21d518abaf7dc56886d7946d17338", 0xfffffffffffffe05, 0x4000014, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.107494549s ago: executing program 2 (id=527): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@quota}, {@noinit_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1, 0x519, &(0x7f00000014c0)="$eJzs3V1PZGcdAPD/GZgtLCA0elGbtDZuDRDdAcRuiRe1Jkavmqj1viIMhDAwBIZ2IVVp/AAmxlgTr3rljYkfwMTsRzAmm+i9UeNLdFcvNtHdMefMy7LsmQV2ZxiE3y85nOc85zn8n/9M5pnzljMBXFqvRMS1iHhQr9enI2K8WV9oTnHQmNJ2d++8v5ROSdTrb/8jiUgadWmzqUP/c6S52VBEfPNrEd9JHo+7s7e/vliplLebyzO1ja2Znb3962sbi6vl1fLm/PzcjYXXF15bmO1KnqMR8cZX/vyTH/78q2/8+nPv/eGdv059L2nWRzzMo9saqRez16JlMCK2exGsTwazDAEA+H/Q2s//dERMx3gMZHtzAAAAwEVS/9Jo/DeJqJ/I0MmaAQAAAOdKIbsHNimUmvcBjMZLH5ZKjXt4PxFXC5XqTu2zK9XdzeXGvbITUSysrFXKs817hSeimKTLc1m5vRwR9w4vl+cj4vmI+PH4cLZcWqpWlvt98gMAAAAuiZEjx///frzJf/rRLwAAAKDLJvrdAQAAAKDnHP8DAADAxef4HwAAAC60r7/1VjrVW79/vfzu3u569d3ry+Wd9dLG7lJpqbq9VVqtVlezZ/ZtHPf/KtXq1hdic/fmTK38t7FGXXV3s/bO2iM/gQ0AAACcoec/dev3SUQcfHE4m1JX+t0p4EwMnqbxn3rXD+DsDfS7A0DfnOr7H7hQiv3uANB3yTHrhz76bv6K3/SiNwAAQC9MfjL/+v/AsecGDgpn1EWgR5z/g8vL9X+4vE57/d/+AlwcxRgIB/JwubUfATr8aP1Ic97x4R0nvv5frz9VxwAAgK4ZzaakUIrIzgOMRqFQKkWMZccExWRlrVKejYiPRcTvxovPpctz2ZZJJMfdNAwAAAAAAAAAAAAAAAAAAAAAAAAAZOr1JOqnsHCq1gAAAMB5EFH4S5I9zT9icvzV0aPnB64k98azeUS897O3P7y5WKttz6X1/2zX137arP98P85gAAAAAEe1jtOz+XC/ewMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADARXP3zvtLreks4/79yxExkRd/MIay+VAUI+Lqv5IYPLRdEhEDXYh/8EFEvJAXP0m7FRPNXuTFH+5z/JEuxIfL7FY6/ryZ9/krxCvZPP/zdyMboZ5d5/Gv0B7/BnLip3Vj7dKTvXj7lzMd438Q8eJg/vjTip/E2KPxDxrjz7UT5vjtb+3vd1pX/yhiMvf7J2m3SUsztY2tmZ29/etrG4ur5dXy5vz83I2F1xdeW5idWVmrlJt/c2P86KVfPXhS/lc7xJ9o558//r56wvzv37555+ONYrG9efIw/tS1/Pf/hQ7xC813/TPNcrp+slU+aJQPe/kXv325VX4zJ//lo/lPx5H3Pz//qRPmP/2NH/zxhE0BgDOws7e/vliplLcvdeGZXo10t+hcZPFMhSu9yiJ9Xc9DgnmF7z/t5unub4dVA51XnavC0DFtIp7r68gEAAB02+PHwAAAAAAAAAAAAAAAAAAAAMBZ6/GTxu6nheKRmAfZ3248PR8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHv+FwAA//9xi8yk") socket$inet(0x2, 0x2, 0x1) r0 = fsopen(0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x37, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000140)='\x00@\xf1f\x9e#l \xa8\xfe\xbb\x18F\b\r\xc0(\xcff|2\x81\xba\xfeA\xa4!\xcb\xaa[\xbbn\t\x0e\xfd)\x974T\xfc\xba\x82P\x11\xd9\x97\xa1\xe7\x9b\x9e\xacq\x99\xe4\xe5EH\x84xn\x88\x88^6d\x90\xd3R\xb7\xbc\xd7\x94\x82\xd2\x14\x18T\xce}:\xc6t\xff\xed!_-\xcd\xa5\t\xc2\xeb\xc8\x1cA\xb4tW\r\x9c\xec\t$\xa5\xf4\"g>\xb8\xf3\xab\x12\x8a\xc4\xa1 \xf5\xe2\x18\xd4m\xe3\x92\x89E\x7f #,\x8dzk\x13\xd0\x17\xc0\xbdC\xfd\xd6\xf2v\xd6B\xab\x01\xc0(w2\xdaf3\xff\x8ei\xfehj\x9f\xac\x9f\xf5\x1c{\x8f\x1ei\xc9\x03\t5\xd238\xbe\x85\xe6XD\x04\x8fq\xca\xbaO\x16\x92\x18\xcd\xf5;i\xb0\xb4mtT\xcc\xaf\xb6?T\xc9\xb1\xb1>\xd2\xa0W\xcfN\xdb\xedK\xa9\x1b1r\x00\x00\x00\x004\xa0\xcb)\x0ej|l\xd0\xb4\b]\xe2\xc1\xe2\x18\x06O\x1f\x1e\x1d\xb5+\f\x7fs.A\xd7\"9&\xb1\xf6\xba\xd5\xbf6\xaf\xfb\xad\xdb5\xbd>\xb8\x17\xc2\x95^\xbe\x9c<\xfc\v\xfe\x8b\xd62v\x97\x8aW\xef0\v\xd3\x9b\x80\xdfk\xde\x9c\xfd_^\x0e\xefN\x14o', &(0x7f0000000080)="ce", 0xff00) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c034002a10100fea0020037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.06651737s ago: executing program 3 (id=528): r0 = socket$igmp(0x2, 0x3, 0x2) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x1f, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 972.047022ms ago: executing program 1 (id=529): timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r1, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x20) tkill(r3, 0x7) close_range(r2, 0xffffffffffffffff, 0x0) 971.821473ms ago: executing program 3 (id=530): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) unshare(0x2c020400) msgget$private(0x0, 0x240) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) 932.705074ms ago: executing program 3 (id=531): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1aff"], 0x7c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 901.872595ms ago: executing program 3 (id=533): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140), 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r0], 0x20, 0x2400e044}, 0x6) 776.120158ms ago: executing program 2 (id=534): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) io_setup(0x200, 0x0) io_destroy(0x0) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 775.836398ms ago: executing program 2 (id=535): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800) ioprio_set$pid(0x3, 0x0, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) 466.581087ms ago: executing program 4 (id=537): r0 = syz_open_procfs(0x0, 0x0) writev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x4}, 0x10, 0x0, 0xfffffffd, 0x3, 0x9, 0x8001, 0x7ffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000ec0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xfd) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) 412.269448ms ago: executing program 4 (id=538): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x119111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x2, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x74}}, 0x4000840) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x22, 0x3, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e03"], 0x0, 0x52}, 0x28) poll(&(0x7f0000000040)=[{r0, 0x8200}, {r2, 0x9000}, {r3}], 0x3, 0x9) ptrace(0x10, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x70, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x100}}, 0x0) 339.33855ms ago: executing program 0 (id=539): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24040880) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f00000000c0)='./file1\x00', 0x808, &(0x7f0000000800)=ANY=[], 0x1, 0x242, &(0x7f0000000300)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x4a8e) 266.030932ms ago: executing program 4 (id=540): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x1000, 0x103) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000027) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x836d9fb164f927b3) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="ce", 0x1}], 0x1, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x0, 0x1, 0x238, 0x840b, 0x1, "f0ffffff00010066d9fffeffffffffffffe000", 0x9}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) 215.444784ms ago: executing program 4 (id=541): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}], 0x1, 0x2400c0a2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x40cf, &(0x7f0000000040)={0x0, 0x9c3d, 0xc000, 0x10c, 0xa0002f4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 158.599875ms ago: executing program 1 (id=542): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8cc0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0xe3fe, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) r2 = getpid() write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12) 131.984056ms ago: executing program 4 (id=543): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x200000000000002, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x281}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 59.966758ms ago: executing program 1 (id=544): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 57.595018ms ago: executing program 4 (id=545): r0 = inotify_init() openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=546): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) r1 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7}) mq_timedreceive(r1, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. [ 29.137644][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 29.137659][ T28] audit: type=1400 audit(1777759320.867:117): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.166675][ T28] audit: type=1400 audit(1777759320.897:118): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.167403][ T3286] cgroup: Unknown subsys name 'net' [ 29.194372][ T28] audit: type=1400 audit(1777759320.927:119): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.329069][ T3286] cgroup: Unknown subsys name 'cpuset' [ 29.335113][ T3286] cgroup: Unknown subsys name 'rlimit' [ 29.464302][ T28] audit: type=1400 audit(1777759321.197:120): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.492275][ T28] audit: type=1400 audit(1777759321.197:121): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.512918][ T28] audit: type=1400 audit(1777759321.197:122): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.533544][ T28] audit: type=1400 audit(1777759321.197:123): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.540183][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.554115][ T28] audit: type=1400 audit(1777759321.207:124): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.583537][ T28] audit: type=1400 audit(1777759321.207:125): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.599239][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.608571][ T28] audit: type=1400 audit(1777759321.217:126): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.779456][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.786603][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.793755][ T3298] bridge_slave_0: entered allmulticast mode [ 30.800322][ T3298] bridge_slave_0: entered promiscuous mode [ 30.827985][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.835090][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.842193][ T3298] bridge_slave_1: entered allmulticast mode [ 30.848530][ T3298] bridge_slave_1: entered promiscuous mode [ 30.875301][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.882414][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.889524][ T3297] bridge_slave_0: entered allmulticast mode [ 30.895788][ T3297] bridge_slave_0: entered promiscuous mode [ 30.914984][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.922149][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.929412][ T3297] bridge_slave_1: entered allmulticast mode [ 30.935922][ T3297] bridge_slave_1: entered promiscuous mode [ 30.947297][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.973368][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.992938][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.000085][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.007285][ T3304] bridge_slave_0: entered allmulticast mode [ 31.013688][ T3304] bridge_slave_0: entered promiscuous mode [ 31.026625][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.033689][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.040807][ T3305] bridge_slave_0: entered allmulticast mode [ 31.047109][ T3305] bridge_slave_0: entered promiscuous mode [ 31.054754][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.064089][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.071231][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.078325][ T3304] bridge_slave_1: entered allmulticast mode [ 31.084723][ T3304] bridge_slave_1: entered promiscuous mode [ 31.097594][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.104713][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.111903][ T3305] bridge_slave_1: entered allmulticast mode [ 31.118268][ T3305] bridge_slave_1: entered promiscuous mode [ 31.125247][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.138988][ T3298] team0: Port device team_slave_0 added [ 31.145636][ T3298] team0: Port device team_slave_1 added [ 31.184032][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.197112][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.204238][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.211436][ T3306] bridge_slave_0: entered allmulticast mode [ 31.217752][ T3306] bridge_slave_0: entered promiscuous mode [ 31.225289][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.235079][ T3297] team0: Port device team_slave_0 added [ 31.241564][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.250910][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.257880][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.283837][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.294542][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.301648][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.308902][ T3306] bridge_slave_1: entered allmulticast mode [ 31.315168][ T3306] bridge_slave_1: entered promiscuous mode [ 31.322135][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.336145][ T3297] team0: Port device team_slave_1 added [ 31.346293][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.353315][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.379215][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.413719][ T3305] team0: Port device team_slave_0 added [ 31.424379][ T3304] team0: Port device team_slave_0 added [ 31.430799][ T3304] team0: Port device team_slave_1 added [ 31.437947][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.447913][ T3305] team0: Port device team_slave_1 added [ 31.453660][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.460629][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.486500][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.505932][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.523442][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.530431][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.556460][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.585313][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.592324][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.618255][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.631363][ T3298] hsr_slave_0: entered promiscuous mode [ 31.637379][ T3298] hsr_slave_1: entered promiscuous mode [ 31.648960][ T3306] team0: Port device team_slave_0 added [ 31.654888][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.661839][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.687740][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.699326][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.706405][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.732392][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.743324][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.750267][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.776214][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.790139][ T3306] team0: Port device team_slave_1 added [ 31.819331][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.826279][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.852224][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.876079][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.883059][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.908982][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.925460][ T3297] hsr_slave_0: entered promiscuous mode [ 31.931479][ T3297] hsr_slave_1: entered promiscuous mode [ 31.937287][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 31.943020][ T3297] Cannot create hsr debugfs directory [ 31.961422][ T3305] hsr_slave_0: entered promiscuous mode [ 31.967323][ T3305] hsr_slave_1: entered promiscuous mode [ 31.973123][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 31.978877][ T3305] Cannot create hsr debugfs directory [ 31.986637][ T3304] hsr_slave_0: entered promiscuous mode [ 31.992636][ T3304] hsr_slave_1: entered promiscuous mode [ 31.998369][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 32.004115][ T3304] Cannot create hsr debugfs directory [ 32.061215][ T3306] hsr_slave_0: entered promiscuous mode [ 32.067138][ T3306] hsr_slave_1: entered promiscuous mode [ 32.072932][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 32.078664][ T3306] Cannot create hsr debugfs directory [ 32.227689][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.235994][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.243558][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.251969][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.259625][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.268061][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.277943][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.286404][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.305396][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.313791][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.323965][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.332660][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.340333][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.349465][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.359978][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.368657][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.387784][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.395897][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.403647][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.412273][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.419853][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.428444][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.436074][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.444426][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.479276][ T3297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.488076][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.495839][ T3297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.504409][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.512070][ T3297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.520496][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.532625][ T3297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.541111][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.572332][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.581061][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.589040][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.597074][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.605198][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.613569][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.621455][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.629856][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.661319][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.695661][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.704572][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.714192][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.726704][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.737400][ T585] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.744537][ T585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.759862][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.767020][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.775472][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.782521][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.794818][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.804639][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.816879][ T585] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.823929][ T585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.837094][ T585] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.844212][ T585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.852949][ T585] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.860005][ T585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.871630][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.890768][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.900551][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.907592][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.922005][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.929085][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.965294][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.981669][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.988722][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.006849][ T585] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.013929][ T585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.063980][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.226302][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.243140][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.254504][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.265812][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.334932][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.408041][ T3304] veth0_vlan: entered promiscuous mode [ 33.425559][ T3304] veth1_vlan: entered promiscuous mode [ 33.456538][ T3298] veth0_vlan: entered promiscuous mode [ 33.464638][ T3305] veth0_vlan: entered promiscuous mode [ 33.481159][ T3304] veth0_macvtap: entered promiscuous mode [ 33.490663][ T3305] veth1_vlan: entered promiscuous mode [ 33.496947][ T3298] veth1_vlan: entered promiscuous mode [ 33.505003][ T3304] veth1_macvtap: entered promiscuous mode [ 33.526577][ T3306] veth0_vlan: entered promiscuous mode [ 33.535657][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.549767][ T3297] veth0_vlan: entered promiscuous mode [ 33.555945][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.570641][ T3298] veth0_macvtap: entered promiscuous mode [ 33.579271][ T3306] veth1_vlan: entered promiscuous mode [ 33.587408][ T3305] veth0_macvtap: entered promiscuous mode [ 33.594034][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.602937][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.613635][ T3298] veth1_macvtap: entered promiscuous mode [ 33.620265][ T3297] veth1_vlan: entered promiscuous mode [ 33.626906][ T3305] veth1_macvtap: entered promiscuous mode [ 33.633514][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.642464][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.662653][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.679795][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.690535][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.691365][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.719736][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.728598][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.737383][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.751001][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.765434][ T3306] veth0_macvtap: entered promiscuous mode [ 33.774824][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.789833][ T3306] veth1_macvtap: entered promiscuous mode [ 33.804757][ T314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.815710][ T314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.831801][ T3297] veth0_macvtap: entered promiscuous mode [ 33.846361][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.856489][ T314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.877290][ T314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.887401][ T3508] loop1: detected capacity change from 0 to 512 [ 33.899546][ T3508] EXT4-fs: Ignoring removed i_version option [ 33.904007][ T3297] veth1_macvtap: entered promiscuous mode [ 33.911424][ T3508] ext4: Unknown parameter 'nouser_xattr.grpquota' [ 33.928324][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.957215][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.967480][ T3508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 33.983750][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.001938][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.019252][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.031075][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.059218][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.079657][ T3513] syzkaller0: entered promiscuous mode [ 34.085282][ T3513] syzkaller0: entered allmulticast mode [ 34.140423][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 34.140439][ T28] audit: type=1400 audit(1777759325.877:176): avc: denied { watch } for pid=3521 comm="syz.0.11" path="/1" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.175744][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.210655][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.223734][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.231098][ T28] audit: type=1400 audit(1777759325.957:177): avc: denied { mount } for pid=3528 comm="syz.1.14" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 34.266561][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.267772][ T28] audit: type=1400 audit(1777759325.977:178): avc: denied { allowed } for pid=3533 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 34.344883][ T28] audit: type=1400 audit(1777759326.017:179): avc: denied { create } for pid=3533 comm="syz.3.4" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.393372][ T28] audit: type=1400 audit(1777759326.047:180): avc: denied { ioctl } for pid=3536 comm="syz.1.16" path="socket:[4787]" dev="sockfs" ino=4787 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.465496][ T3544] loop0: detected capacity change from 0 to 2048 [ 34.472364][ T28] audit: type=1400 audit(1777759326.047:181): avc: denied { bind } for pid=3536 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.512958][ T3544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.515222][ T28] audit: type=1400 audit(1777759326.047:182): avc: denied { write } for pid=3536 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.544746][ T28] audit: type=1400 audit(1777759326.047:183): avc: denied { read } for pid=3536 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.564011][ T28] audit: type=1400 audit(1777759326.117:184): avc: denied { create } for pid=3539 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.583484][ T28] audit: type=1400 audit(1777759326.197:185): avc: denied { mount } for pid=3545 comm="syz.4.5" name="/" dev="autofs" ino=5169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 34.903377][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.906227][ T3582] all: renamed from bridge_slave_1 (while UP) [ 36.600106][ T3610] loop0: detected capacity change from 0 to 256 [ 36.650927][ T3610] FAT-fs (loop0): IO charset cp949 not found [ 36.742208][ T3620] mmap: syz.4.40 (3620) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.864713][ T3620] loop4: detected capacity change from 0 to 512 [ 36.895210][ T3620] ======================================================= [ 36.895210][ T3620] WARNING: The mand mount option has been deprecated and [ 36.895210][ T3620] and is ignored by this kernel. Remove the mand [ 36.895210][ T3620] option from the mount to silence this warning. [ 36.895210][ T3620] ======================================================= [ 36.981514][ T3620] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.40: inode has both inline data and extents flags [ 36.999869][ T3620] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.003478][ T3620] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.40: couldn't read orphan inode 15 (err -117) [ 37.013268][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 37.013377][ C0] EXT4-fs (loop4): initial error at time 1777759328: ext4_orphan_get:1397: inode 15 [ 37.013747][ C0] EXT4-fs (loop4): last error at time 1777759328: ext4_orphan_get:1397: inode 15 [ 37.123208][ T3620] loop4: lost filesystem error report for type 5 error -117 [ 37.134767][ T3620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.189063][ T3620] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 37.476512][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.800246][ T3646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'. [ 38.997106][ T3660] loop3: detected capacity change from 0 to 512 [ 39.048561][ T3660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.105674][ T3660] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.163687][ T3660] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.52: corrupted xattr block 33: invalid header [ 39.186330][ T3662] loop1: detected capacity change from 0 to 512 [ 39.204189][ T3660] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 39.223443][ T3660] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.52: corrupted xattr block 33: invalid header [ 39.226763][ T3662] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.293043][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.327444][ T3675] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.333477][ T3662] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 39.346957][ T3675] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.349633][ T3662] System zones: [ 39.353815][ T3675] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.356595][ T3662] 0-2 [ 39.357398][ T3675] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.357435][ T3675] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.357584][ T3675] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.374742][ T3662] , 18-18 [ 39.380147][ T3675] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.380235][ T3675] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.380271][ T3675] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.380375][ T3675] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 39.397269][ T3662] , 34-34 [ 39.553939][ T3662] EXT4-fs (loop1): 1 orphan inode deleted [ 39.572330][ T30] __quota_error: 39 callbacks suppressed [ 39.572344][ T30] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 39.587929][ T30] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 39.605396][ T30] loop1: lost filesystem error report for type 5 error -117 [ 39.605543][ T30] EXT4-fs (loop1): Remounting filesystem read-only [ 39.624012][ T3662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.661392][ T3662] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.727226][ T28] audit: type=1400 audit(1777759331.457:225): avc: denied { wake_alarm } for pid=3683 comm="syz.3.62" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.790497][ T28] audit: type=1400 audit(1777759331.527:226): avc: denied { create } for pid=3685 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 39.993607][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.995402][ T3690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 40.015826][ T3690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 40.237158][ T28] audit: type=1400 audit(1777759331.967:227): avc: denied { create } for pid=3707 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 40.265164][ T28] audit: type=1400 audit(1777759331.987:228): avc: denied { write } for pid=3707 comm="syz.4.71" path="socket:[4996]" dev="sockfs" ino=4996 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 40.605749][ T3733] loop1: detected capacity change from 0 to 164 [ 40.652144][ T28] audit: type=1400 audit(1777759332.387:229): avc: denied { mount } for pid=3730 comm="syz.1.73" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 40.700864][ T28] audit: type=1400 audit(1777759332.437:230): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 40.740178][ T28] audit: type=1400 audit(1777759332.467:231): avc: denied { create } for pid=3736 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.773882][ T28] audit: type=1400 audit(1777759332.467:232): avc: denied { bind } for pid=3736 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.870564][ T3737] loop1: detected capacity change from 0 to 8192 [ 40.915709][ T28] audit: type=1400 audit(1777759332.647:233): avc: denied { mount } for pid=3736 comm="syz.1.76" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 41.818685][ T3765] Zero length message leads to an empty skb [ 41.883549][ T3746] loop2: detected capacity change from 0 to 1024 [ 41.910473][ T3746] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.934842][ T3746] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.975700][ T3742] syz.1.76 (3742) used greatest stack depth: 9984 bytes left [ 41.996923][ T3746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.044736][ T3737] syz.1.76 (3737) used greatest stack depth: 9776 bytes left [ 42.083864][ T3768] loop3: detected capacity change from 0 to 164 [ 42.114622][ T3746] EXT4-fs error (device loop2): __ext4_iget:5481: inode #12: block 13: comm syz.2.79: invalid block [ 42.212849][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.699142][ T3802] syz.1.100 (3802) used greatest stack depth: 9664 bytes left [ 42.734391][ T3809] Illegal XDP return value 3809 on prog (id 21) dev syz_tun, expect packet loss! [ 42.786665][ T3813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 42.786965][ T3811] netlink: 172 bytes leftover after parsing attributes in process `syz.0.103'. [ 42.806254][ T3811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 42.816638][ T3811] netlink: 172 bytes leftover after parsing attributes in process `syz.0.103'. [ 42.831204][ T3811] netlink: 100 bytes leftover after parsing attributes in process `syz.0.103'. [ 42.841798][ T3811] netlink: 32 bytes leftover after parsing attributes in process `syz.0.103'. [ 42.853449][ T3813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.861436][ T3813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.869403][ T3813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.877160][ T3813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.027734][ T3818] loop0: detected capacity change from 0 to 2048 [ 43.045002][ T3818] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.087897][ T3818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.275807][ T3822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.109'. [ 43.285603][ T3822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.109'. [ 43.301881][ T3818] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.106: bg 0: block 2: invalid block bitmap [ 43.324745][ T3818] EXT4-fs (loop0): Remounting filesystem read-only [ 43.378089][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.393157][ T3818] syz.0.106 (3818) used greatest stack depth: 8576 bytes left [ 44.188016][ T3901] IPVS: Scheduler module ip_vs_ not found [ 44.521541][ T3910] loop0: detected capacity change from 0 to 1024 [ 44.565033][ T3910] EXT4-fs: Mount option(s) incompatible with ext3 [ 44.686794][ T3913] loop3: detected capacity change from 0 to 512 [ 44.755865][ T3913] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.819503][ T3913] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8857e02c, mo2=0002] [ 44.839139][ T3913] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.143: invalid indirect mapped block 2683928664 (level 1) [ 44.854186][ T3913] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 44.855502][ T3913] EXT4-fs (loop3): Remounting filesystem read-only [ 44.865274][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 44.865323][ C0] EXT4-fs (loop3): initial error at time 1777759336: ext4_free_branches:1023: inode 11 [ 44.866197][ C0] EXT4-fs (loop3): last error at time 1777759336: ext4_free_branches:1023: inode 11 [ 44.905622][ T3913] EXT4-fs (loop3): 1 truncate cleaned up [ 44.921927][ T3913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.970768][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.069562][ T3920] loop2: detected capacity change from 0 to 256 [ 45.136381][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 45.136423][ T28] audit: type=1400 audit(1777759336.867:273): avc: denied { mount } for pid=3919 comm="syz.2.145" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.172521][ T28] audit: type=1400 audit(1777759336.907:274): avc: denied { write } for pid=3926 comm="syz.4.148" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.236563][ T28] audit: type=1400 audit(1777759336.917:275): avc: denied { write } for pid=3919 comm="syz.2.145" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 45.311347][ T3928] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 45.320995][ T3928] FAT-fs (loop2): Filesystem has been set read-only [ 45.484552][ T3920] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.507242][ T3920] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 45.529459][ T3920] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 45.542063][ T3920] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 45.607373][ T3304] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196) [ 45.620706][ T28] audit: type=1400 audit(1777759337.357:276): avc: denied { kexec_image_load } for pid=3931 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 46.061755][ T28] audit: type=1400 audit(1777759337.797:277): avc: denied { mount } for pid=3957 comm="syz.0.156" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 46.127995][ T28] audit: type=1400 audit(1777759337.817:278): avc: denied { watch } for pid=3957 comm="syz.0.156" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 46.744385][ T28] audit: type=1400 audit(1777759338.477:279): avc: denied { read write } for pid=3969 comm="syz.4.163" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 46.811820][ T28] audit: type=1400 audit(1777759338.477:280): avc: denied { open } for pid=3969 comm="syz.4.163" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 46.934039][ T3968] loop3: detected capacity change from 0 to 256 [ 47.099673][ T3979] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 47.134383][ T3979] FAT-fs (loop3): Filesystem has been set read-only [ 47.165775][ T3972] loop1: detected capacity change from 0 to 1024 [ 47.169074][ T28] audit: type=1400 audit(1777759338.897:281): avc: denied { tracepoint } for pid=3981 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 47.192920][ T3972] EXT4-fs: Mount option(s) incompatible with ext3 [ 47.210526][ T28] audit: type=1400 audit(1777759338.947:282): avc: denied { ioctl } for pid=3981 comm="syz.0.167" path="socket:[10366]" dev="sockfs" ino=10366 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.290301][ T3968] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.319898][ T3968] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 47.341355][ T3968] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 47.359579][ T3968] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 47.405873][ T3306] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 47.573181][ T3991] loop3: detected capacity change from 0 to 1024 [ 47.601752][ T3991] EXT4-fs: Mount option(s) incompatible with ext3 [ 47.762820][ T4003] syz.2.174 uses obsolete (PF_INET,SOCK_PACKET) [ 47.902613][ T4015] __nla_validate_parse: 59 callbacks suppressed [ 47.902630][ T4015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.179'. [ 47.932518][ T4016] loop4: detected capacity change from 0 to 128 [ 47.938574][ T4015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.179'. [ 48.297608][ T4025] loop3: detected capacity change from 0 to 256 [ 48.592783][ T4048] netlink: 'syz.2.194': attribute type 1 has an invalid length. [ 48.617698][ T1039] kernel read not supported for file [fscontext] (pid: 1039 comm: kworker/0:2) [ 48.670588][ T4048] 8021q: adding VLAN 0 to HW filter on device bond2 [ 48.693280][ T4048] bond1: (slave bond2): making interface the new active one [ 48.729574][ T4048] bond1: (slave bond2): Enslaving as an active interface with an up link [ 48.758568][ T4061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.194'. [ 49.061312][ T4057] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 49.071242][ T4061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.392255][ T4080] syz_tun: entered promiscuous mode [ 49.411791][ T4081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 49.415766][ T4080] vlan2: entered promiscuous mode [ 49.602977][ T4090] netlink: 36 bytes leftover after parsing attributes in process `syz.0.208'. [ 50.118886][ T4103] loop3: detected capacity change from 0 to 512 [ 50.153233][ T4103] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.164714][ T4103] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 50.213677][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 50.213692][ T28] audit: type=1400 audit(1777759341.947:338): avc: denied { setopt } for pid=4102 comm="syz.3.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.331068][ T4109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'. [ 50.448214][ T4114] ref_ctr increment failed for inode: 0xdb offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104cc72c0 [ 50.558257][ T28] audit: type=1400 audit(1777759342.287:339): avc: denied { create } for pid=4117 comm="syz.1.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 50.610438][ T28] audit: type=1400 audit(1777759342.287:340): avc: denied { ioctl } for pid=4117 comm="syz.1.220" path="socket:[10618]" dev="sockfs" ino=10618 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 50.704343][ T28] audit: type=1400 audit(1777759342.437:341): avc: denied { map } for pid=4123 comm="syz.4.223" path="socket:[10642]" dev="sockfs" ino=10642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.780047][ T28] audit: type=1400 audit(1777759342.437:342): avc: denied { read accept } for pid=4123 comm="syz.4.223" path="socket:[10642]" dev="sockfs" ino=10642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.204660][ T28] audit: type=1400 audit(1777759342.937:343): avc: denied { execute } for pid=4139 comm="syz.2.229" path="/49/file0" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 51.267278][ T4142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.240'. [ 51.325881][ T4146] netlink: 20 bytes leftover after parsing attributes in process `syz.3.231'. [ 51.334046][ T4142] netlink: 36 bytes leftover after parsing attributes in process `syz.0.240'. [ 51.444853][ T28] audit: type=1400 audit(1777759343.177:344): avc: denied { block_suspend } for pid=4149 comm="syz.0.232" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.493227][ T28] audit: type=1400 audit(1777759343.227:345): avc: denied { setopt } for pid=4154 comm="syz.3.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 51.972599][ T4180] netlink: 'syz.4.243': attribute type 1 has an invalid length. [ 52.030178][ T4180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.038262][ T4183] bond1: entered promiscuous mode [ 52.085285][ T4180] bond1: (slave dummy0): making interface the new active one [ 52.098633][ T4180] dummy0: entered promiscuous mode [ 52.107335][ T4185] loop0: detected capacity change from 0 to 1024 [ 52.116457][ T4180] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 52.133032][ T4185] EXT4-fs: Ignoring removed orlov option [ 52.156032][ T4185] EXT4-fs: Ignoring removed nobh option [ 52.173101][ T4183] bond1 (unregistering): left promiscuous mode [ 52.205079][ T4183] dummy0: left promiscuous mode [ 52.214974][ T4185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.242547][ T4183] bond1 (unregistering): (slave dummy0): Releasing active interface [ 52.272299][ T4183] bond1 (unregistering): Released all slaves [ 52.305945][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.431515][ T4199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.249'. [ 52.440572][ T4201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.450934][ T4201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.463625][ T4201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.477864][ T4201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.622724][ T28] audit: type=1326 audit(1777759344.357:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.1.252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c068acdd9 code=0x7ffc0000 [ 52.651423][ T28] audit: type=1326 audit(1777759344.357:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.1.252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c068acdd9 code=0x7ffc0000 [ 52.784046][ T4218] loop3: detected capacity change from 0 to 512 [ 52.800761][ T4218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.825419][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.854305][ T4216] loop4: detected capacity change from 0 to 512 [ 52.885030][ T4216] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.895784][ T4216] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 53.078103][ T4229] loop4: detected capacity change from 0 to 1024 [ 53.096055][ T4229] EXT4-fs: Mount option(s) incompatible with ext3 [ 53.198952][ T4233] loop4: detected capacity change from 0 to 764 [ 53.208240][ T4233] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 53.350186][ T4246] ref_ctr increment failed for inode: 0x13b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888105323cc0 [ 53.469608][ T4253] loop1: detected capacity change from 0 to 256 [ 53.578079][ T4256] loop4: detected capacity change from 0 to 512 [ 53.591296][ T4256] EXT4-fs (loop4): 1 truncate cleaned up [ 53.610562][ T4256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.641508][ T4256] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.274: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 53.664729][ T4259] loop2: detected capacity change from 0 to 1024 [ 53.675442][ T4262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.693580][ T4262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.702112][ T4259] EXT4-fs: Mount option(s) incompatible with ext3 [ 53.753201][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.815083][ T4268] loop3: detected capacity change from 0 to 1024 [ 53.822058][ T4268] EXT4-fs: Ignoring removed orlov option [ 53.842200][ T4268] EXT4-fs: Ignoring removed nobh option [ 53.870301][ T4268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.006970][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.056957][ T4278] __nla_validate_parse: 3 callbacks suppressed [ 54.056974][ T4278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.281'. [ 54.151848][ T4285] syzkaller0: entered promiscuous mode [ 54.157477][ T4285] syzkaller0: entered allmulticast mode [ 54.317708][ T4297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 54.326724][ T4297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 55.013928][ T4327] ref_ctr increment failed for inode: 0x12c offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888103d2f2c0 [ 55.157228][ T4338] loop4: detected capacity change from 0 to 512 [ 55.210265][ T4338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.224863][ T28] kauditd_printk_skb: 2127 callbacks suppressed [ 55.224875][ T28] audit: type=1326 audit(1777759347.940:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.0.310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2641226b57 code=0x7ffc0000 [ 55.256609][ T28] audit: type=1326 audit(1777759347.940:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.0.310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26411ce159 code=0x7ffc0000 [ 55.275576][ T4338] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.281960][ T28] audit: type=1326 audit(1777759347.940:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.0.310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2641226b57 code=0x7ffc0000 [ 55.318896][ T28] audit: type=1326 audit(1777759347.940:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.0.310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26411ce159 code=0x7ffc0000 [ 55.344392][ T28] audit: type=1326 audit(1777759347.940:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.0.310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2641226b57 code=0x7ffc0000 [ 55.369829][ T28] audit: type=1326 audit(1777759347.940:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.0.310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26411ce159 code=0x7ffc0000 [ 55.369905][ T4342] 9pnet: p9_errstr2errno: server reported unknown error 0000000000 [ 55.395272][ T28] audit: type=1326 audit(1777759347.940:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.0.310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2641226b57 code=0x7ffc0000 [ 55.395362][ T28] audit: type=1326 audit(1777759347.940:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.0.310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26411ce159 code=0x7ffc0000 [ 55.395440][ T28] audit: type=1326 audit(1777759347.940:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.0.310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2641226b57 code=0x7ffc0000 [ 55.395469][ T28] audit: type=1326 audit(1777759347.940:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.0.310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f26411ce159 code=0x7ffc0000 [ 55.523031][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.698405][ T4360] xt_hashlimit: size too large, truncated to 1048576 [ 55.993094][ T4364] netlink: 'syz.0.314': attribute type 12 has an invalid length. [ 56.623752][ T4392] capability: warning: `syz.2.326' uses 32-bit capabilities (legacy support in use) [ 57.076045][ T4404] 9pnet: p9_errstr2errno: server reported unknown error 0000000000 [ 57.121174][ T4409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 57.274811][ T4415] syzkaller0: entered promiscuous mode [ 57.286699][ T4415] syzkaller0: entered allmulticast mode [ 57.302644][ T4417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 57.395670][ T4421] syzkaller0: entered promiscuous mode [ 57.415020][ T4421] syzkaller0: entered allmulticast mode [ 57.625529][ T4443] bridge0: port 3(syz_tun) entered blocking state [ 57.632327][ T4443] bridge0: port 3(syz_tun) entered disabled state [ 57.648763][ T4443] syz_tun: entered allmulticast mode [ 57.662689][ T4443] syz_tun: entered promiscuous mode [ 57.679742][ T4443] bridge0: port 3(syz_tun) entered blocking state [ 57.686266][ T4443] bridge0: port 3(syz_tun) entered forwarding state [ 57.694947][ T4439] 9pnet: p9_errstr2errno: server reported unknown error 0000000000 [ 57.710624][ T4446] loop2: detected capacity change from 0 to 512 [ 57.718439][ T4448] netlink: 'syz.0.345': attribute type 8 has an invalid length. [ 57.729714][ T4446] EXT4-fs: test_dummy_encryption option not supported [ 58.819944][ T4483] netlink: 'syz.1.360': attribute type 4 has an invalid length. [ 58.856331][ T4483] netlink: 'syz.1.360': attribute type 4 has an invalid length. [ 58.933969][ T4497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.943390][ T4497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.987032][ T4501] loop4: detected capacity change from 0 to 1024 [ 59.001549][ T4501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.046445][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.496731][ T4520] loop4: detected capacity change from 0 to 512 [ 60.519920][ T4520] EXT4-fs: test_dummy_encryption option not supported [ 60.670817][ T4540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.381'. [ 60.684154][ T4539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.695162][ T28] kauditd_printk_skb: 1762 callbacks suppressed [ 60.695191][ T28] audit: type=1326 audit(1777759353.420:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.1.379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c068acdd9 code=0x0 [ 60.734457][ T4539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.544965][ T4563] loop3: detected capacity change from 0 to 512 [ 61.562110][ T4563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.577643][ T28] audit: type=1400 audit(1777759354.310:4248): avc: denied { remount } for pid=4562 comm="syz.3.389" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.605074][ T4563] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 61.626256][ T4570] loop1: detected capacity change from 0 to 512 [ 61.635711][ T4563] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 61.636834][ T4570] EXT4-fs: test_dummy_encryption option not supported [ 61.717977][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.751044][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 61.761673][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 61.772876][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 61.784455][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 61.792716][ T4583] loop0: detected capacity change from 0 to 2048 [ 61.804295][ T4586] loop3: detected capacity change from 0 to 512 [ 61.812518][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 61.826495][ T4583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.828404][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 61.848190][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 61.861157][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 61.876740][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 61.878182][ T4590] netlink: 'syz.2.400': attribute type 1 has an invalid length. [ 61.886925][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 61.902634][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 61.912807][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 61.918489][ T28] audit: type=1400 audit(1777759354.640:4249): avc: denied { write } for pid=4582 comm="syz.0.398" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.922459][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 61.953261][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 61.962636][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 61.972263][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 61.982428][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 61.983775][ T4590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 61.991990][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.010731][ T28] audit: type=1400 audit(1777759354.640:4250): avc: denied { read write } for pid=4582 comm="syz.0.398" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.015234][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.049120][ T28] audit: type=1400 audit(1777759354.640:4251): avc: denied { open } for pid=4582 comm="syz.0.398" path="/82/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.075734][ T28] audit: type=1400 audit(1777759354.690:4252): avc: denied { map } for pid=4582 comm="syz.0.398" path="/82/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.085733][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.098727][ T28] audit: type=1400 audit(1777759354.690:4253): avc: denied { execute } for pid=4582 comm="syz.0.398" path="/82/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.155140][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.169144][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.177892][ T4590] bond3: (slave geneve2): making interface the new active one [ 62.187087][ T4590] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 62.200325][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.234157][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.255188][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.261429][ T4596] loop2: detected capacity change from 0 to 512 [ 62.280179][ T4596] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 62.286807][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.300588][ T4596] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.401: Invalid inode bitmap blk 4 in block_group 0 [ 62.318666][ T4596] loop2: lost filesystem error report for type 5 error -117 [ 62.320029][ T4596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.331488][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.350118][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.361604][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.371629][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.381028][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.390775][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.400897][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.410417][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.419885][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.430081][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.430085][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.430670][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.457740][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.468280][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.487054][ T28] audit: type=1400 audit(1777759355.210:4254): avc: denied { bind } for pid=4598 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.508308][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.530258][ T28] audit: type=1400 audit(1777759355.250:4255): avc: denied { write } for pid=4598 comm="syz.2.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.532764][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.586261][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.597399][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.607806][ T4577] 9pnet_fd: p9_fd_create_tcp (4577): problem connecting socket to 127.0.0.1 [ 62.722788][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.403'. [ 62.731819][ T4601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.403'. [ 62.843006][ T40] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 62.861724][ T40] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 62.875610][ T40] EXT4-fs (loop0): This should not happen!! Data will be lost [ 62.875610][ T40] [ 62.885574][ T40] EXT4-fs (loop0): Total free blocks count 0 [ 62.891923][ T40] EXT4-fs (loop0): Free/Dirty block details [ 62.892022][ T4612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'. [ 62.898137][ T40] EXT4-fs (loop0): free_blocks=4096 [ 62.912884][ T40] EXT4-fs (loop0): dirty_blocks=512 [ 62.918188][ T40] EXT4-fs (loop0): Block reservation details [ 62.924689][ T40] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 62.926145][ T4612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'. [ 62.956755][ T40] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 62.979197][ T3305] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 62.999920][ T4616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.410'. [ 63.062266][ T4616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 63.063949][ T28] audit: type=1400 audit(1777759355.790:4256): avc: denied { mounton } for pid=4619 comm="syz.1.411" path="/file0" dev="autofs" ino=13533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 63.287593][ T4635] loop3: detected capacity change from 0 to 2048 [ 63.313314][ T4635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.361504][ T4637] netlink: 28 bytes leftover after parsing attributes in process `syz.4.419'. [ 63.520523][ T4647] bond4: entered allmulticast mode [ 63.550083][ T4653] netlink: 24 bytes leftover after parsing attributes in process `syz.4.425'. [ 63.659964][ T4647] bridge1: entered promiscuous mode [ 63.690301][ T4647] bridge1: entered allmulticast mode [ 63.710546][ T4647] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 64.080242][ T4667] netlink: 44 bytes leftover after parsing attributes in process `syz.2.431'. [ 64.472544][ T4681] loop2: detected capacity change from 0 to 128 [ 64.628247][ T585] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 64.674111][ T4681] FAT-fs (loop2): error, clusters badly computed (1 != 163841) [ 64.679980][ T585] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 626 with error 28 [ 64.685549][ T4681] FAT-fs (loop2): Filesystem has been set read-only [ 64.704281][ T4681] FAT-fs (loop2): error, clusters badly computed (2 != 163842) [ 64.714332][ T4681] FAT-fs (loop2): error, clusters badly computed (3 != 163843) [ 64.734027][ T585] EXT4-fs (loop3): This should not happen!! Data will be lost [ 64.734027][ T585] [ 64.743197][ T4681] FAT-fs (loop2): error, clusters badly computed (4 != 163844) [ 64.754623][ T4681] FAT-fs (loop2): error, clusters badly computed (5 != 163845) [ 64.756188][ T585] EXT4-fs (loop3): Total free blocks count 0 [ 64.765571][ T4681] FAT-fs (loop2): error, clusters badly computed (6 != 163846) [ 64.782735][ T4681] FAT-fs (loop2): error, clusters badly computed (7 != 163847) [ 64.793220][ T585] EXT4-fs (loop3): Free/Dirty block details [ 64.808912][ T4681] FAT-fs (loop2): error, clusters badly computed (8 != 163848) [ 64.821297][ T4681] FAT-fs (loop2): error, clusters badly computed (9 != 163849) [ 64.830524][ T4681] FAT-fs (loop2): error, clusters badly computed (10 != 163850) [ 64.837400][ T585] EXT4-fs (loop3): free_blocks=4096 [ 64.844615][ T585] EXT4-fs (loop3): dirty_blocks=656 [ 64.863156][ T585] EXT4-fs (loop3): Block reservation details [ 64.870775][ T585] EXT4-fs (loop3): i_reserved_data_blocks=41 [ 64.881101][ T585] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 64.895118][ T3306] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 65.760292][ T4717] __nla_validate_parse: 1 callbacks suppressed [ 65.760349][ T4717] netlink: 52 bytes leftover after parsing attributes in process `syz.0.447'. [ 65.796614][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 65.796629][ T28] audit: type=1400 audit(1777759358.520:4266): avc: denied { bind } for pid=4720 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.849477][ T4722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.447'. [ 65.867029][ T28] audit: type=1400 audit(1777759358.520:4267): avc: denied { connect } for pid=4720 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.916356][ T4724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'. [ 65.921776][ T28] audit: type=1400 audit(1777759358.520:4268): avc: denied { write } for pid=4720 comm="syz.1.449" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.988537][ T28] audit: type=1400 audit(1777759358.630:4269): avc: denied { ioctl } for pid=4720 comm="syz.1.449" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.101564][ T4728] loop4: detected capacity change from 0 to 128 [ 66.179376][ T28] audit: type=1400 audit(1777759358.910:4270): avc: denied { ioctl } for pid=4733 comm="syz.1.454" path="socket:[12915]" dev="sockfs" ino=12915 ioctlcmd=0x6e81 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.206444][ T4728] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.222637][ T4734] netlink: 'syz.1.454': attribute type 27 has an invalid length. [ 66.264813][ T4728] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.324799][ T28] audit: type=1400 audit(1777759359.050:4271): avc: denied { write } for pid=4727 comm="syz.4.452" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.348647][ T28] audit: type=1400 audit(1777759359.050:4272): avc: denied { create } for pid=4739 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 66.384908][ T4741] futex_wake_op: syz.2.455 tries to shift op by 144; fix this program [ 66.397715][ T28] audit: type=1400 audit(1777759359.120:4273): avc: denied { setattr } for pid=4727 comm="syz.4.452" path="/94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 66.448279][ T28] audit: type=1400 audit(1777759359.170:4274): avc: denied { sys_admin } for pid=4739 comm="syz.1.457" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 66.482196][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.694250][ T49] bond0: (slave bond_slave_0): interface is now down [ 66.701193][ T28] audit: type=1400 audit(1777759359.430:4275): avc: denied { ioctl } for pid=4762 comm="syz.4.467" path="socket:[12999]" dev="sockfs" ino=12999 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.708566][ T49] bond0: (slave bond_slave_1): interface is now down [ 67.294750][ T4787] SELinux: failed to load policy [ 67.468297][ T4795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.476'. [ 67.524233][ T4795] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4795 comm=syz.4.476 [ 67.707912][ T4801] loop4: detected capacity change from 0 to 512 [ 67.743749][ T4804] loop2: detected capacity change from 0 to 128 [ 67.782007][ T4804] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 67.799743][ T4804] FAT-fs (loop2): Filesystem has been set read-only [ 67.813895][ T4804] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 67.830129][ T4804] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 67.849183][ T4804] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 67.863350][ T4804] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 67.879993][ T4804] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 67.904785][ T4807] process 'syz.0.480' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' with NULL argv: empty string added [ 67.963396][ T4804] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 67.988544][ T4804] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 68.024694][ T4804] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 68.067990][ T4803] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000ff0) [ 68.135003][ T4816] loop0: detected capacity change from 0 to 512 [ 68.151721][ T4816] EXT4-fs: test_dummy_encryption option not supported [ 68.543135][ T4830] netlink: 'syz.4.489': attribute type 16 has an invalid length. [ 68.570373][ T4828] syzkaller0: entered promiscuous mode [ 68.587742][ T4828] syzkaller0: entered allmulticast mode [ 68.935117][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.942710][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.959654][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.977982][ T4878] loop0: detected capacity change from 0 to 256 [ 69.985404][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.004197][ T4878] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.160811][ T1887] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.191548][ T4888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.500'. [ 70.195811][ T1887] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.319892][ T4893] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4893 comm=syz.1.500 [ 70.365310][ T4891] futex_wake_op: syz.0.501 tries to shift op by 144; fix this program [ 70.381476][ T1887] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.399975][ T1887] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.657490][ T4911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.509'. [ 70.676398][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'. [ 70.700867][ T4911] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4911 comm=syz.1.509 [ 70.859798][ T4927] netlink: 763 bytes leftover after parsing attributes in process `syz.1.518'. [ 70.946330][ T4933] loop2: detected capacity change from 0 to 512 [ 70.969368][ T4933] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 70.978310][ T4933] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.987227][ T4933] __quota_error: 11 callbacks suppressed [ 70.987277][ T4933] Quota error (device loop2): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 71.006342][ T4933] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.024117][ T4933] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 71.035249][ T4933] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.519: bg 0: block 15: invalid block bitmap [ 71.064957][ T4933] loop2: lost filesystem error report for type 5 error -117 [ 71.065908][ T4933] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 71.074310][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 71.074510][ C1] EXT4-fs (loop2): initial error at time 1777759363: ext4_validate_block_bitmap:432 [ 71.074702][ C1] EXT4-fs (loop2): last error at time 1777759363: ext4_validate_block_bitmap:432 [ 71.145937][ T4933] loop2: lost filesystem error report for type 5 error -117 [ 71.227709][ T4933] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #16: comm syz.2.519: data will be lost [ 71.283493][ T4933] EXT4-fs (loop2): 1 truncate cleaned up [ 71.314656][ T4933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.357034][ T28] audit: type=1400 audit(1777759364.080:4287): avc: denied { read write } for pid=4945 comm="syz.3.524" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.381899][ T28] audit: type=1400 audit(1777759364.110:4288): avc: denied { open } for pid=4945 comm="syz.3.524" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.431085][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.463638][ T4953] loop2: detected capacity change from 0 to 512 [ 71.474641][ T4953] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.486348][ T4955] syz_tun: entered allmulticast mode [ 71.509522][ T4955] dvmrp8: entered allmulticast mode [ 71.515144][ T4953] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 71.522405][ T4954] syz_tun: left allmulticast mode [ 71.531202][ T4953] Quota error (device loop2): write_blk: dquota write failed [ 71.541736][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 71.541755][ C1] EXT4-fs (loop2): initial error at time 1777759364: ext4_mb_generate_buddy:1317 [ 71.541775][ C1] EXT4-fs (loop2): last error at time 1777759364: ext4_mb_generate_buddy:1317 [ 71.569181][ T4953] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 71.579046][ T4953] Quota error (device loop2): write_blk: dquota write failed [ 71.586600][ T4953] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 71.597138][ T4953] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.527: Failed to acquire dquot type 1 [ 71.612641][ T4953] loop2: lost filesystem error report for type 5 error -28 [ 71.613453][ T4953] EXT4-fs (loop2): 1 truncate cleaned up [ 71.626874][ T4953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.640736][ T28] audit: type=1326 audit(1777759364.370:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.1.529" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c068acdd9 code=0x7fc00000 [ 71.644604][ T4953] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.527'. [ 71.689210][ T28] audit: type=1326 audit(1777759364.400:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4959 comm="syz.1.529" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5c068acdd9 code=0x7fc00000 [ 71.724012][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.183538][ T4981] loop0: detected capacity change from 0 to 512 [ 72.213701][ T28] audit: type=1400 audit(1777759364.940:4291): avc: denied { create } for pid=4978 comm="syz.4.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 72.573103][ T4981] ================================================================== [ 72.581227][ T4981] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 72.588632][ T4981] [ 72.590967][ T4981] read-write to 0xffff88810060e478 of 8 bytes by interrupt on cpu 0: [ 72.599043][ T4981] __xa_clear_mark+0xf5/0x1e0 [ 72.603743][ T4981] __folio_end_writeback+0xf4/0x360 [ 72.608964][ T4981] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 72.615244][ T4981] folio_end_writeback+0x1c/0x70 [ 72.620220][ T4981] mpage_write_end_io+0x245/0x4c0 [ 72.625269][ T4981] bio_endio+0x35b/0x3f0 [ 72.629521][ T4981] blk_update_request+0x338/0x710 [ 72.634578][ T4981] blk_mq_end_request+0x26/0x50 [ 72.639462][ T4981] lo_complete_rq+0x98/0x140 [ 72.644086][ T4981] blk_done_softirq+0x77/0xb0 [ 72.648786][ T4981] handle_softirqs+0xb9/0x280 [ 72.653491][ T4981] run_ksoftirqd+0x1c/0x30 [ 72.657935][ T4981] smpboot_thread_fn+0x32a/0x510 [ 72.662908][ T4981] kthread+0x22a/0x280 [ 72.666993][ T4981] ret_from_fork+0x146/0x330 [ 72.671598][ T4981] ret_from_fork_asm+0x1a/0x30 [ 72.676389][ T4981] [ 72.678722][ T4981] read to 0xffff88810060e478 of 8 bytes by task 4981 on cpu 1: [ 72.686273][ T4981] xas_find_marked+0x213/0x620 [ 72.691062][ T4981] filemap_get_folios_tag+0xfa/0x430 [ 72.696394][ T4981] file_write_and_wait_range+0x20c/0x2f0 [ 72.702055][ T4981] mmb_fsync_noflush+0x48/0x140 [ 72.706911][ T4981] fat_file_fsync+0x98/0x110 [ 72.711496][ T4981] __x64_sys_fdatasync+0x83/0xe0 [ 72.716429][ T4981] x64_sys_call+0x2d1f/0x3020 [ 72.721100][ T4981] do_syscall_64+0x12c/0x3b0 [ 72.725687][ T4981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.731572][ T4981] [ 72.733881][ T4981] value changed: 0xfffffffffffffc00 -> 0xffffffffc0000000 [ 72.740973][ T4981] [ 72.743280][ T4981] Reported by Kernel Concurrency Sanitizer on: [ 72.749430][ T4981] CPU: 1 UID: 0 PID: 4981 Comm: syz.0.539 Not tainted syzkaller #0 PREEMPT(full) [ 72.758620][ T4981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 72.768666][ T4981] ==================================================================