last executing test programs: 3.242299854s ago: executing program 2 (id=319): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x200012, &(0x7f0000000600), 0x4, 0x5a4, &(0x7f0000000640)="$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") syz_clone(0x102400, &(0x7f0000000000)="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", 0xfa, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="08dfbd1f5cb3fb52ff69e045f129065eecf2780b16fd70064204c027b8bcc2f2e6588b3dfc3f2f9be118f71a2576d0c40f30e2447c2ff4670df4a368526e19ce679aa2b2a8824a29c67febe5cf1073b4674859529e44338d7deb0f80094cbc49f78d952c2ade25bd5ca62568deabf78331abaf1ee080001d17dd5e7e256d92391e910aba7340f5a11e687a5ae036562a5f2f1e7266112d983c3dcb0be708852557d7fc4e") r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000009c0)=0x4, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0xffffffffffffffff, 0x200000a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x6, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000340)='/sys/power/reserved_size', 0x40042, 0x0) fremovexattr(r1, &(0x7f00000001c0)=@random={'trusted.', '\xc5\xb5\xb1\x8a\x89I\x89\xe3\x00'}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x19d01, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) shmget(0x2, 0x4000, 0x54000000, &(0x7f0000c2e000/0x4000)=nil) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x1, 0x4, 0x8001, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f40)={'syztnl0\x00', &(0x7f0000000e80)={'gre0\x00', 0x0, 0x7, 0x700, 0x7fff, 0x1, {{0x27, 0x4, 0x3, 0x6, 0x9c, 0x68, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@generic={0x82, 0xe, "e31c63ed3b29a21106f1f45d"}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x25, 0x0, 0x4, [0x7fff]}, @timestamp={0x44, 0x14, 0x7f, 0x0, 0x1, [0x6, 0xe2d, 0x7, 0x2]}, @lsrr={0x83, 0x27, 0x68, [@dev={0xac, 0x14, 0x14, 0xc}, @multicast2, @empty, @broadcast, @private=0xa010100, @remote, @multicast1, @broadcast, @multicast1]}, @timestamp={0x44, 0x1c, 0x8, 0x0, 0x6, [0x4, 0x4, 0x9, 0x7b2a392a, 0x5c2, 0x9]}, @rr={0x7, 0x17, 0x74, [@rand_addr=0x64010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x16}, @loopback, @dev={0xac, 0x14, 0x14, 0x26}]}]}}}}}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r5, &(0x7f00000001c0)=ANY=[], 0x200002e6) fcntl$setpipe(r5, 0x407, 0x7000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x8, 0x1e, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @ldst={0x2, 0x0, 0x0, 0x3, 0x7, 0xfffffffffffffff4, 0xffffffffffffffff}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x1, 0xd, 0x6, 0x3, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001100)='GPL\x00', 0x8, 0xe4, &(0x7f0000001140)=""/228, 0x41000, 0x11, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001280)={0x4, 0xb, 0x2, 0xffff07ae}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f00000012c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001300)=[{0x4, 0x2, 0x5}, {0x2, 0x4, 0x0, 0xb}, {0x2, 0x5, 0xa, 0x9}, {0x4, 0x5, 0x8, 0x1}, {0x0, 0x4, 0x9, 0xa}, {0x2, 0x4, 0xc, 0x3}, {0x2, 0x3, 0x6}], 0x10, 0xf}, 0x94) pwritev(r6, &(0x7f00000016c0)=[{&(0x7f00000015c0)="9c63ba0b2a8053a35e7317ba1fe23459370c8a21cd61cbaf2b1d73603bb39739069c35fa414bbb54eeef29009e4d2bd9c1de2beaea3bb90875bfd1c451cdf1a0b2bba22d7c7a31002d4af2596f72ea3b824adf77698ec4624c557e3b1498f283bcce416ee2a96ba122fe6054a60607ae538771625ea23709bf0dc588dad8cc362529dc53d75d5438828f29c67cf04a55f3459d3ba5461031568515a7dd7cc03a8d47fdac3e8f68809028aa8ceaf81fa31f65c0a589d71307aece4f4b152089f58d5ff3c2112482", 0xc7}], 0x1, 0x3b97f384, 0xa) 2.73650846s ago: executing program 3 (id=327): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x10000, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x400000000000000, 0x4000015}, 0x2c000010) 2.488851742s ago: executing program 3 (id=329): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x6, 0xff}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000000c0)="088ceb1dbfc6d0b4532acf72234775be770b40a7bfcde33f65c777", 0x1b}, {&(0x7f0000000200)="985d0b3f70b1e75e82e0bad4f8e8ad9d612bfb03b3411f976bed5ffeb189452d82941a2243c09f93378271d515bff1acff28c31b03607eef6fea095e4425ec6d1c5830adc729bcbf5fb55451762264572298486f34b90cb71a4963e1b49885cc21b0496a40761de6cee6fdcbdfc016a25d127d6ca057393405b54cbafc169e64dc4d02054659eaa7af0ce89d55c41cee1e6fabedecbeae25f34d5c2c37c788d5defe9eb2997dcf18e265ddc016069c7fc368c98400e7cff3e71ab939d3a5a4d65f7f49b18bc5bc9436b01c403c2a098255fc504dacd01b8a7c337105151fae37760c6e24bd", 0xe5}, {&(0x7f0000000300)="2617cfe902fff0730ded8eb8e73994e43d23c852a016a010f9e00aaed966ac8dda35bb1d739c", 0x26}, {&(0x7f0000000340)="d6f721766ec2ec", 0x7}, {0x0}, {&(0x7f0000000500)="4989c991ddb863a2e81600487be5451bae8f99c19d768c8c643352523d87a7d151a768df03a9f2eee9af09ac35a907f20e91e1fce35b7d776c636ad621f8c83d569d87837c018703a1c295238e28a4ab83d2352053e95be01301fdb883656dd2615f476b5df311566035c68a91f7fa06e98fe4a1c2c29c8daad8e6b8032e68eaa56542021f0b29d02a1345dff2fd3ec97c2d08de7c7776475745f11ac48a54255441", 0xa2}], 0x6}}], 0x1, 0x45) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100030000002ad30000010000001c000180060001000200000008000300ac1400"/42], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000080)) r6 = syz_open_dev$loop(0x0, 0x100, 0x2) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000000)) ioctl$BLKCRYPTOGENERATEKEY(r6, 0xc030128a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000dc0)=@newtaction={0x21c, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfd, {}, [{0x208, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x204, 0x7, 0x10000000, 0x200000, 0x6}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x8c, 0xc, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0xe4e, 0x3, 0x4, 0x3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xc}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x100}]}, {0xf, 0x6, "1abf842170b99b2d385cd0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x114, 0x2, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7b84, 0xffffffffffffffff, 0x0, 0x4000}, 0x1}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x696}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xa}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0xc9}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xe, 0x100000, 0x4, 0x6, 0x3}}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xd, 0x2, 0x4, 0x4}, 0x1}}]}, {0x4b, 0x6, "0745eda98a44af97ae46a19127d038c5123f3cb17331ff9148552ed3e66c1ec3da02b7f8bf5c416577450e40e13f05636db4c6ad1b3b41745844ead184f6931b6094c2079d7cfc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x20048840}, 0x1004) select(0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) 2.017636597s ago: executing program 2 (id=336): r0 = io_uring_setup(0x3fa0, &(0x7f00000001c0)={0x0, 0x228b, 0x2, 0x0, 0x31e}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64(r1, &(0x7f0000000840)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6c3c5238bebfbce6236501dd64c37eeaeec2d13731c56a864da45a465e64de685887f27f84f348e4149ccee167605da33c412d53af0256fc973711375855a0a610654714099f4d540f9cba457b1813b73957a98aa2cc497c1e3ea00", 0x79, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$phonet(0x23, 0x2, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f00000000c0)={0x7, 0x944, 0x9, 0x7, 0x4, 0x20, 0x1}) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000805}, 0x4048880) r4 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x210000, &(0x7f0000000500)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x20010, r3, 0xfe745000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0x8ffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000396d8d182ecc000907f036d67600dfffeb03000000040000000c000180060006"], 0x24}}, 0x8090) statx(r4, 0x0, 0x1000, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r7, r7, 0x0, 0xe3aa6ea) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @multicast1}, &(0x7f00000004c0)=0xc) r8 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000005304010000000026a65835c1231300000600000500000a14000000ec03010000"], 0x69}}, 0x40000) socket(0x15, 0x5, 0x0) 1.916899679s ago: executing program 1 (id=338): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x8, 0x5, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (rerun: 32) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r4 = syz_clone(0xd280b691, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) (async) r6 = socket(0x28, 0x5, 0x0) (async) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 64) listen(r7, 0x4) (async, rerun: 64) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d933da5d884deaa1a31dfdebdb18eaf94051746cee450f817eaf4e251fa1b59599d253304474be7c7aba60b092ff2fcd2c206533ee6b598b25848da4c29a31927b5bcf9a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) (async, rerun: 32) recvfrom$inet_nvme(r6, 0x0, 0x0, 0x40000002, 0x0, 0x0) (async, rerun: 32) bind$vsock_stream(r6, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @local}, 0x10) (async) r9 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000018c0)={&(0x7f00008cd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/131, 0x83, 0x1, &(0x7f00000008c0)=""/4096, 0x1000}, &(0x7f0000001900)=0x40) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa0000feffffffffffffff004000000000000000000a0000000000fb00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000080003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) (rerun: 32) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="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"], 0xec}}, 0x8040) (async) r11 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 1.77473601s ago: executing program 2 (id=340): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYRESOCT], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000240001800c00010069623a6776653000140002"], 0x38}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x160, r7, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_PUBL={0x6, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "0240b5706d288a38c565aba9385d0d8f215ad1f1516091bf"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffa}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "7122d740b2a97440de9c17bea79b9abe31c1c83567fafe1d7e028c21b43e838ebd"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5f01}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x400f0}, 0x800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r5, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="fe000000000000001c0012000c00010062ef6e64000000000c0002000800870004"], 0x3c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r12, 0x6, 0x1, 0xfffffffffffffffc, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x0, 0xee00}}, './file0\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r11, r13, 0x0, 0x10, &(0x7f0000000340)=':*)%[&$}]-{(:-%\x00'}, 0x30) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000030000000d00000003000004e0387401000000000500000003f400005e00000000000000040000000900"/75], &(0x7f0000000900)=""/41, 0x4b, 0x29, 0x0, 0x1, 0x10000, @value=r13}, 0x28) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0x0, 0xffff, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r13, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r4}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r13, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x16, 0x19, &(0x7f0000000680)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x0, 0x5, 0x0, 0x9, 0x1, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @cb_func={0x18, 0x3}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x2}], &(0x7f0000000780)='GPL\x00', 0xd, 0xb7, &(0x7f00000007c0)=""/183, 0x41000, 0x3, '\x00', r2, @fallback=0xe, r14, 0x8, &(0x7f0000000980)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0xf, 0x7fffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000bc0)=[r13, r15, r16, r13, r17, r13, r13], &(0x7f0000000c00)=[{0x1, 0x5, 0x7, 0xc}, {0x5, 0x4, 0x7, 0x2}, {0x4, 0x2, 0x7, 0x2}, {0x4, 0x4, 0x1, 0x7}], 0x10, 0x6}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0008000012000000240012800b000180677265746170000014000280060011004e240000080004000400000008000a00", @ANYRES32=r10, @ANYBLOB], 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.75070708s ago: executing program 2 (id=341): sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x38, 0x0, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0xfffffffe}]}]}]}, 0x38}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) syz_io_uring_setup(0x1f9b, &(0x7f0000000340)={0x0, 0xffffff7c, 0x82, 0x0, 0x345}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000640)={{r3}, 0x0, 0x20, @inherit={0x50, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x10000, {0x12, 0x8000, 0x4, 0x3, 0x6}, [0x85]}}, @subvolid=0xffffffffffffff93}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001640)={@mcast1, 0x9, 0x2, 0x1, 0xa, 0x3f, 0xcd}, &(0x7f0000001680)=0x20) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1}, {0x2, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r4], 0x5c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002800), r5) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f00000028c0)={0x0, 0xd00, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r6, 0xf01, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) 1.673473601s ago: executing program 1 (id=342): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd4, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x454, &(0x7f0000000740)="$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") 1.476020734s ago: executing program 3 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}, 0x1, 0x1c}, 0x4) 1.435622544s ago: executing program 3 (id=344): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1d, 0x2, 0x6) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r7, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000080)='5', 0x1}, {0x0, 0x33}, {&(0x7f0000000140)="93b28dc4ebdf6a03c6d8f177d1716f3e0c7e47255978562c9d8142fb89d6abca33ec791f77d4f97f2a16fc0c92f484e5ce36f13a5515895ba576711ccdd12ebb5a4bfe3828007c1272ccb4a2989a5d2c462235fdb11465adff69fb0a957b56b1fe0a2257", 0x5}], 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x27, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a80)='syzkaller\x00', 0x5, 0x2a, &(0x7f0000000ac0)=""/42, 0x40e00, 0x20, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000b00)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x2, 0xd, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r1, r1], &(0x7f0000000bc0)=[{0x2, 0x2, 0x401, 0xa}, {0x2, 0x4, 0x3}, {0x2, 0x1, 0x6, 0xa}]}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r9, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x20, 0x80, 0x1b8, 0x5, {{0x49, 0x4, 0x2, 0x7, 0x124, 0x67, 0x0, 0x8, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x5a, [@local, @loopback]}, @timestamp_addr={0x44, 0x2c, 0xe0, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x344}, {@broadcast, 0x7fff}, {@loopback, 0xa}, {@broadcast, 0x8}, {@broadcast, 0x7}]}, @rr={0x7, 0x1b, 0x7e, [@empty, @local, @empty, @rand_addr=0x64010102, @multicast1, @loopback]}, @cipso={0x86, 0x6e, 0x1, [{0x6, 0x12, "b5c8ddb1d56448f6ff600fe610945614"}, {0x0, 0x4, "3f1d"}, {0x5, 0xe, "960a0ea492a88de3db75d09a"}, {0x1b49de82e15cd61c, 0x3, "14"}, {0x1, 0x7, "ef2b628afe"}, {0x5, 0xe, "8f01dc91a76dbcf1ee4a5d86"}, {0x1, 0xd, "9db5296ead6ecfefa9d7b2"}, {0x7, 0xf, "373e46249deb0b0c2b71363a4d"}, {0x5, 0x10, "d014d93cd1f8b7a55cf93bbafcd9"}]}, @timestamp={0x44, 0x8, 0xda, 0x0, 0x2, [0x1]}, @generic={0x83, 0xa, "ec11740ea1c1a85d"}, @ssrr={0x89, 0x27, 0x40, [@multicast1, @remote, @broadcast, @private=0xa010102, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote]}, @rr={0x7, 0x13, 0x96, [@empty, @local, @loopback, @private=0xa010100]}]}}}}}) clock_gettime(0xfffffffe, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x20, 0x8000, 0x5a19, 0x4, {{0x9, 0x4, 0x0, 0x2b, 0x24, 0x68, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010102, {[@generic={0x82, 0xd, "a15729351487e56d318cd4"}, @noop]}}}}}) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000ffffffff0c000000040003800c00018008000100", @ANYRES32=r17, @ANYBLOB="a7abd7a66caa65e0af411f983991a23e96"], 0x24}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x12c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x25}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x30}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1ff}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r17}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004881) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r18 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) 1.422937734s ago: executing program 0 (id=345): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x80000000000000a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0x12000021) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xff}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0xbd19, 0x3}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8001}]}, 0x60}, 0x1, 0x0, 0x0, 0x5ff9c45154b325a2}, 0x4805) close(r0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, r4, &(0x7f0000000580)) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c00000035cdc06aec0772140d62c3c39d"], 0x2c}, 0x1, 0x0, 0x0, 0x24044800}, 0x844) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xcc, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x81}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x3000)=nil) 1.322073295s ago: executing program 0 (id=348): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8605, &(0x7f0000000100)={[{@grpjquota}, {@abort}, {@nolazytime}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}]}, 0x81, 0x645, &(0x7f0000000180)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x3e0, 0x2e8, 0x2e8, 0x3e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x260, 0x288, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg1\x00', {}, '\x00', {0xff}, 0xc, 0x17}}, @common=@inet=@hashlimit2={{0x150}, {'batadv0\x00', {0x5, 0x3, 0x24, 0x9, 0xd353, 0x10001, 0x0, 0x40, 0x40}, {0x5a2f}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x6, 0x3}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xffffff00], [0x0, 0xffffffff], 'wlan0\x00', 'netdevsim0\x00', {}, {0xff}, 0x2c, 0x0, 0x1, 0x7b}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}, {0xa, 0x0, 0x1, [0xff, 0x6, 0xff, 0x4608, 0x3, 0xe, 0x2, 0x8000, 0x4, 0x400, 0x800, 0x0, 0x8, 0x7, 0x0, 0x50], 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0x0, 0x8, 0x400, 'snmp\x00', 'syz1\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x9, @loopback, 0x7, 0x3}, 0x20) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x1080001, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x54e, &(0x7f00000010c0)="$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") r3 = open(&(0x7f00000009c0)='./bus\x00', 0x501140, 0x0) getdents64(r3, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESHEX=0x0, @ANYRESHEX], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000290000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TIOCMGET(r5, 0x5415, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x6, 0x0, 0x5, 0x0}) move_pages(0x0, 0x3, &(0x7f0000000880)=[&(0x7f00006bb000/0x4000)=nil, &(0x7f00003fc000/0x4000)=nil, &(0x7f0000561000/0x1000)=nil], &(0x7f0000000840)=[0x59, 0x8, 0x1ff, 0x3, 0xdc7, 0xfff, 0x1aaf], 0x0, 0x4) 1.321541945s ago: executing program 3 (id=349): pipe(0x0) fsopen(&(0x7f0000000000)='sysv\x00', 0x0) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x6200}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket(0xa, 0x801, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, 0x0) socket(0x840000000002, 0x801, 0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r2], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001340)={{0x0, 0x9f6, 0x5, 0x101, 0x0, 0xb8be, 0x40000000, 0x0, 0x5, 0x4, 0x9, 0x8, 0xfffffffffffffff9, 0xff, 0x1}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800dd8d000000000000"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100010000000000850000000000", @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}, 0x1, 0x1f00000000000000}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f00000029c0)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xae4}, 0x1c, &(0x7f0000002700)=[{&(0x7f00000012c0)="0f6e26e7377f", 0x6}], 0x1}}, {{&(0x7f0000002780)={0xa, 0x4e22, 0x55f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000002800)}}], 0x2, 0x40088c4) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x4008840) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) close(0x3) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'usrquota', 0x3a, '', 0x3a, './file1', 0x3a, [0x16]}, 0x30) 1.319195645s ago: executing program 1 (id=350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000340)={0x9, 0x9}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) syz_init_net_socket$llc(0x1a, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000048000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000380), &(0x7f00000000c0)=r4}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x102000, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) unshare(0x6c040000) 1.254937646s ago: executing program 2 (id=351): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000080)={0x60, 0x2, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x20, &(0x7f0000000040)=[{0x8000000000000000, 0x8, 0x93c8}], 0x1, 0x8, 0x2, 0x40, 0x8}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum, @struct={0x10, 0x3, 0x0, 0x4, 0x0, 0x9, [{0x9, 0x0, 0xffff}, {0x7, 0x0, 0x6}, {0x800, 0x3, 0x200}]}, @func={0xc, 0x0, 0x0, 0xc, 0x4}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x3, 0x11ff}]}]}}, &(0x7f0000000f40)=""/4073, 0x82, 0xfe9, 0x9}, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xfc, 0x0, 0x40, 0x7fff, 0x2, 0x3e, 0xfffbffed, 0x294, 0x40, 0x1dd, 0xf, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x7, 0x4, 0xd, 0x1c8, 0xe6, 0x1004, 0x3}]}, 0x78) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001200050026bd7000ffdbdf25070000081800ab8008001d000300000004008700080042"], 0x2c}, 0x1, 0x0, 0x0, 0x8804}, 0x4c040) close(r1) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) unshare(0x400) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 1.194351227s ago: executing program 0 (id=352): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r7, 0x25, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r13 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r13, 0x400, 0x1) memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x2c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x2d}, @TCA_CODEL_TARGET={0x8, 0x1, 0x10001}, @TCA_CODEL_TARGET={0x8, 0x1, 0x13}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x8, 0x3ff, 0xffffffff, 0x0, 0x4, 0x7fff}}, {0x4}}]}]}, 0x80}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000380)}, {&(0x7f00000004c0)="4832a13e6e2858", 0x7}], 0x2, 0x0, 0x0, 0x810}, 0x20000020) fsmount(0xffffffffffffffff, 0x0, 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@abort}, {@barrier_val}, {@nogrpid}, {@resgid}, {@noinit_itable}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x1, 0x4ef, &(0x7f0000000a40)="$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") 1.082640267s ago: executing program 4 (id=355): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x214400) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000080)='wireguard\x00', 0x0, &(0x7f00000000c0)={@align=0x401, {0x6, 0xfb, 0x4, 0x8}}, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0xce, 0x8000) syz_emit_ethernet(0xe8e, &(0x7f0000001080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0xe58, 0x3a, 0xff, @remote, @mcast2, {[], @dest_unreach={0x1, 0x5, 0x0, 0xfe, '\x00', {0x7, 0x6, "724bc1", 0x400, 0x32, 0x1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x3a, 0x1c3, '\x00', [@hao={0xc9, 0x10, @mcast2}, @generic={0x4, 0xe0b, "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"}]}]}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000240)=r2}, 0x20) ppoll(&(0x7f0000000000)=[{r2, 0x4200}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)=0x1d) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x4, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0xfffffffffffffe9e, 0x2, 'hsr0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x20008000) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28e8ff00", @ANYRES16=r5, @ANYBLOB="10002cbd700000dcdf25000000001400020077673200"/34], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) 1.068863068s ago: executing program 2 (id=356): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="d3f34746b238aaaaaaaaaaaa0800458b76007f268c85d1001c00000000ac14140be000000100004e200008907dcae28a98e0b4b62b1460b469db24cc816d2fc2f5d6565867b396271c5538164d87eec2aa53b7224053ce60a15c95b625c2743247ffb30c069045cae19eb68f36e84eae7728ad29d3"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) iopl(0x3) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0xc, 0x0, 0xffffffffffffffff, 0x39) futex(&(0x7f0000000200)=0x1, 0x6, 0xf2, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) r6 = timerfd_create(0x4, 0x80000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@initdev, @remote}, &(0x7f00000001c0)=0xc) timerfd_settime(r6, 0x0, &(0x7f0000000100)={{r7, r8+60000000}, {r9, r10+60000000}}, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.055772788s ago: executing program 4 (id=357): openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0x40000000000, 0x2002) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000080000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.018653158s ago: executing program 32 (id=356): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="d3f34746b238aaaaaaaaaaaa0800458b76007f268c85d1001c00000000ac14140be000000100004e200008907dcae28a98e0b4b62b1460b469db24cc816d2fc2f5d6565867b396271c5538164d87eec2aa53b7224053ce60a15c95b625c2743247ffb30c069045cae19eb68f36e84eae7728ad29d3"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) iopl(0x3) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0xc, 0x0, 0xffffffffffffffff, 0x39) futex(&(0x7f0000000200)=0x1, 0x6, 0xf2, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) r6 = timerfd_create(0x4, 0x80000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@initdev, @remote}, &(0x7f00000001c0)=0xc) timerfd_settime(r6, 0x0, &(0x7f0000000100)={{r7, r8+60000000}, {r9, r10+60000000}}, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.013847439s ago: executing program 0 (id=359): r0 = socket$inet6(0xa, 0x3, 0x5) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f00000000c0)=0x4000004) pwritev(r1, 0x0, 0x0, 0x1, 0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000640)={[{@abort}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x36}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46b, &(0x7f0000000bc0)="$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") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x1}, 0xfd}, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) statx(r4, &(0x7f0000000080)='./file0\x00', 0x1000, 0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000700, r5, &(0x7f0000000180)) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) r7 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x4b) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000001"], 0x108}}], 0x2, 0xc040) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = open(&(0x7f0000000140)='./file0\x00', 0x101020, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000180)={0x0, 0x2, r8, 0x8e9, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r1, 0x3ff}) 910.998449ms ago: executing program 4 (id=360): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x4, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 520.149024ms ago: executing program 1 (id=361): r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x5, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x60}}], 0x400000000000172, 0x4000000) 519.939354ms ago: executing program 4 (id=362): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, 0xfffffffc}, &(0x7f0000ffe000), &(0x7f0000000100), &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x2, &(0x7f0000000180)=[0x1, 0x3], 0xfe) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x79, 0x0, 0x0, 0x48}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x21) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x100, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xffff}, {0x1, 0x1}}}, 0x100}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 953.21µs ago: executing program 0 (id=363): pipe(0x0) fsopen(&(0x7f0000000000)='sysv\x00', 0x0) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x6200}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket(0xa, 0x801, 0x0) getsockopt(r0, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, 0x0) socket(0x840000000002, 0x801, 0x100) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r2], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001340)={{0x0, 0x9f6, 0x5, 0x101, 0x0, 0xb8be, 0x40000000, 0x0, 0x5, 0x4, 0x9, 0x8, 0xfffffffffffffff9, 0xff, 0x1}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800dd8d000000000000"], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100010000000000850000000000", @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x18}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f00000029c0)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xae4}, 0x1c, &(0x7f0000002700)=[{&(0x7f00000012c0)="0f6e26e7377f", 0x6}], 0x1}}, {{&(0x7f0000002780)={0xa, 0x4e22, 0x55f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000002800)}}], 0x2, 0x40088c4) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x4008840) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) close(0x3) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'usrquota', 0x3a, '', 0x3a, './file1', 0x3a, [0x16]}, 0x30) 591.07µs ago: executing program 1 (id=364): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="880000001900010000000000000000001d01000005000d0001000000150003000000000000000000062e346aa0f998570000000015000200000000000002000003ef7506ecbef9700600000015000400000000000000000000000000000000010100000008000900", @ANYRES32=0x0, @ANYBLOB="0c000b00000000000000000808000e00", @ANYRES32=0x0, @ANYBLOB="080005"], 0x88}}, 0x0) 131.44µs ago: executing program 3 (id=365): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000140)={{0xffffffffffffffff, &(0x7f0000000000)='%.\x00', 0x40000, &(0x7f0000000040)={@_ha_fsid={[0x7, 0x8]}, {0xc, 0x7, 0x7, 0x1}}, 0x80, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x80000001}, {[0x81, 0x9, 0x4, 0x3]}, 0x9, 0x27, &(0x7f0000000100)=""/39}) syz_io_uring_setup(0x35e8, &(0x7f00000001c0)={0x0, 0xf5c3, 0x20000, 0x0, 0x45, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) (async) r1 = syz_io_uring_setup(0x35e8, &(0x7f00000001c0)={0x0, 0xf5c3, 0x20000, 0x0, 0x45, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000300)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000340)=0x80, 0x4) (async) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000340)=0x80, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x80) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80) close_range(r2, r1, 0x2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000380)={0x2, {0x2, 0x7, 0x2, 0x2fe6, 0xfffc}}) (async) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000380)={0x2, {0x2, 0x7, 0x2, 0x2fe6, 0xfffc}}) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000400)={0x3, &(0x7f00000003c0)=[{}, {}, {}]}) (async) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000400)={0x3, &(0x7f00000003c0)=[{}, {}, {}]}) io_setup(0x1a9e, &(0x7f0000000440)) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000480), 0x204000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) fcntl$setown(r1, 0x8, r4) (async) fcntl$setown(r1, 0x8, r4) fcntl$setflags(r3, 0x2, 0x1) r5 = dup(r3) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000540)=r0, 0x4) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000540)=r0, 0x4) io_setup(0x4, &(0x7f0000000580)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000005c0)={0x0, 0x1}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000640)={r6, 0x3}, &(0x7f0000000680)=0x8) syz_emit_ethernet(0x1a, &(0x7f00000006c0)={@remote, @random="3b1778e8b9eb", @void, {@mpls_mc={0x8848, {[{0x4, 0x0, 0x1}, {0x8, 0x0, 0x1}], @generic="5666a154"}}}}, &(0x7f0000000700)={0x1, 0x1, [0x576, 0x2ce, 0x10b, 0x93f]}) fallocate(r3, 0x71, 0xfffffffffffffffe, 0x5) bind$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x4e24, @empty}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000780)={0x5, 0x5, 0x40, 0x80, 0x10, 0xe, 0x0, 0x3, 0x1, 0x8, 0x7, 0x8, 0x7, 0xfd}, 0xe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={r0, 0x0, 0xa7, 0x1000, &(0x7f00000007c0)="c0bf74fc39b6435dc0ef709c83275f00ff83c646a9f91166528af99f6ee2e06715e85bc5d54cbc1ac432072d3eedcfa5cce99a299770d754c56c499ac997e22fc84820e9fb03d981e2d3e3a3b9a987e32bc39c09897bee40852ccf7292e234a5f7f7b708d58725d639b45f38bee2d1f97c4267573fd7d6537048139464c2a09bbfa21dc9d0ea3e02d8c9111bc1e4b0b801bdb0cb2252e96b08abfe5ec33d514af234d5e6697e0c", &(0x7f0000000880)=""/4096, 0xffff, 0x0, 0x84, 0x49, &(0x7f0000001880)="6229e180b2c1670ebbd3c72361e008d82cfdd7cb44c6f639be99475dda8aff4c59878a296611e87505fbb4cf6da80d4ae5aa1b5739eb82ead8ff93f290a0fb3986e843e89287ebbbc8fdce5e28a9cc756e07e7b4bc8905ed2b4a13523ae7cb4b3bc6c430194c5816f1bb848b8fc0df6451af775dc2250ea5b37ad85eb785c85e1b10d082", &(0x7f0000001940)="c4a54c4f7b6990196f71011df092f31801f6199bda7d888117a41c0962f9b238a8142f5deba1a0a6ebe91b4fe26bf5eb68e7ea7a9b1f715c2bf87d2a2c4c4b525b70fd0cc3e533fe70", 0x6, 0x0, 0x3}, 0x50) r7 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001ac0)={{{@in6=@local, @in6=@remote}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000001bc0)=0xe8) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001ac0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@private1}}, &(0x7f0000001bc0)=0xe8) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000001c00)=0x0) mount$9p_fd(0x0, &(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80), 0x1081040, &(0x7f0000001c40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r7}}, {@version_L}, {@access_uid={'access', 0x3d, 0xee00}}, {@uname={'uname', 0x3d, '}{@[.'}}, {@ignoreqv}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@noxattr}], [{@euid_gt={'euid>', r8}}, {@fowner_lt={'fowner<', r9}}, {@appraise_type}]}}) (async) mount$9p_fd(0x0, &(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80), 0x1081040, &(0x7f0000001c40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r7}}, {@version_L}, {@access_uid={'access', 0x3d, 0xee00}}, {@uname={'uname', 0x3d, '}{@[.'}}, {@ignoreqv}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@noxattr}], [{@euid_gt={'euid>', r8}}, {@fowner_lt={'fowner<', r9}}, {@appraise_type}]}}) syz_clone(0x1000000, &(0x7f0000001d80)="429b3dfc7d515a5f6722e922d52c3b8f5eeb2566ed94e32cb635f5ef8bd6c9cae2b108cc2101443a44f07e52809a5ecdb190cfcd2707169ed7c3834c3fb9aecdfb2c3dada9d403bebb980aa4a1dbf99bda7c970148f7c6d677321fbda0a458d1c6b3d7d77d9b4ea54d74f11c64b701942ddd22d371bcddf7705fa72a52e58894c86dab0c1e229a1c8c84e19e4b25ed44956bac1879f7f824fe136c5460711f3e9714a528d3d938ba1aca3103d18d36708b4a1d", 0xb3, &(0x7f0000001e40), &(0x7f0000001e80), &(0x7f0000001ec0)="e831e69a524f0b1ef59e1ab838ea639a082bc2d04492146f7205d6fcb017372d0b55ff093bc5661ed9a4ff58583b01fa05c7968c4e0c4363a982348116aa5dca4332df9b6d6f8c708daf8782e0ff50966eff48be7d") ppoll(&(0x7f0000001f40)=[{r1, 0x10}, {r0, 0x814b}, {r3, 0x5040}, {r1, 0x200}, {r1}, {r5, 0x2000}], 0x6, &(0x7f0000001f80), &(0x7f0000001fc0)={[0x7]}, 0x8) 0s ago: executing program 4 (id=366): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c8, 0x2, 0x9dff, 0xe, "3d52e3ff00"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x1a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000008000000000a20000000000a03000000000000000011070000000900010073797a300000000090000000090a010400000000000000000700000008000a40000000000900020073797830000000000900010073797a3000000000080005400000000d4c0012803c0001800a0001006c696d69740000002c0002800c00024000000000000010000c0001400000000000000001080004400000000108000340000100000c000180080001006475700808000340000001"], 0xd8}, 0x1, 0x0, 0x0, 0x40400c4}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.176' (ED25519) to the list of known hosts. [ 31.839744][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 31.839764][ T28] audit: type=1400 audit(1778244125.422:117): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.868987][ T28] audit: type=1400 audit(1778244125.452:118): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.869670][ T3288] cgroup: Unknown subsys name 'net' [ 31.897120][ T28] audit: type=1400 audit(1778244125.482:119): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.014423][ T3288] cgroup: Unknown subsys name 'cpuset' [ 32.020674][ T3288] cgroup: Unknown subsys name 'rlimit' [ 32.150487][ T28] audit: type=1400 audit(1778244125.732:120): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.178386][ T28] audit: type=1400 audit(1778244125.732:121): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.191988][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.199232][ T28] audit: type=1400 audit(1778244125.732:122): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.229049][ T28] audit: type=1400 audit(1778244125.732:123): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.240229][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.249692][ T28] audit: type=1400 audit(1778244125.732:124): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.279641][ T28] audit: type=1400 audit(1778244125.732:125): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.304789][ T28] audit: type=1400 audit(1778244125.732:126): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.598454][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.605740][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.613011][ T3299] bridge_slave_0: entered allmulticast mode [ 33.619562][ T3299] bridge_slave_0: entered promiscuous mode [ 33.634942][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.642079][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.649353][ T3300] bridge_slave_0: entered allmulticast mode [ 33.655701][ T3300] bridge_slave_0: entered promiscuous mode [ 33.667052][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.674245][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.681411][ T3299] bridge_slave_1: entered allmulticast mode [ 33.687871][ T3299] bridge_slave_1: entered promiscuous mode [ 33.696416][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.703503][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.710654][ T3300] bridge_slave_1: entered allmulticast mode [ 33.717108][ T3300] bridge_slave_1: entered promiscuous mode [ 33.754228][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.768338][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.786493][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.800223][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.829950][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.837149][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.844348][ T3307] bridge_slave_0: entered allmulticast mode [ 33.850681][ T3307] bridge_slave_0: entered promiscuous mode [ 33.866792][ T3299] team0: Port device team_slave_0 added [ 33.872451][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.879639][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.887069][ T3307] bridge_slave_1: entered allmulticast mode [ 33.893340][ T3307] bridge_slave_1: entered promiscuous mode [ 33.903212][ T3300] team0: Port device team_slave_0 added [ 33.911916][ T3299] team0: Port device team_slave_1 added [ 33.926517][ T3300] team0: Port device team_slave_1 added [ 33.961263][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.970445][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.977594][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.984865][ T3303] bridge_slave_0: entered allmulticast mode [ 33.991187][ T3303] bridge_slave_0: entered promiscuous mode [ 34.001503][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.008739][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.015915][ T3306] bridge_slave_0: entered allmulticast mode [ 34.022629][ T3306] bridge_slave_0: entered promiscuous mode [ 34.029247][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.036270][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.062268][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.073920][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.087021][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.094178][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.101273][ T3303] bridge_slave_1: entered allmulticast mode [ 34.107637][ T3303] bridge_slave_1: entered promiscuous mode [ 34.114224][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.121267][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.147236][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.158044][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.165224][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.172362][ T3306] bridge_slave_1: entered allmulticast mode [ 34.178801][ T3306] bridge_slave_1: entered promiscuous mode [ 34.185193][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.192196][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.218124][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.240389][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.247451][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.273398][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.299031][ T3307] team0: Port device team_slave_0 added [ 34.312141][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.322461][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.336970][ T3307] team0: Port device team_slave_1 added [ 34.343737][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.354072][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.371370][ T3299] hsr_slave_0: entered promiscuous mode [ 34.377366][ T3299] hsr_slave_1: entered promiscuous mode [ 34.400807][ T3306] team0: Port device team_slave_0 added [ 34.420349][ T3300] hsr_slave_0: entered promiscuous mode [ 34.426393][ T3300] hsr_slave_1: entered promiscuous mode [ 34.432164][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 34.437964][ T3300] Cannot create hsr debugfs directory [ 34.444377][ T3306] team0: Port device team_slave_1 added [ 34.450172][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.457158][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.483267][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.494833][ T3303] team0: Port device team_slave_0 added [ 34.518144][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.525166][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.551156][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.562528][ T3303] team0: Port device team_slave_1 added [ 34.590238][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.597324][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.623468][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.647234][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.654282][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.680223][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.699421][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.706445][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.732424][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.754364][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.761443][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.787457][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.807232][ T3307] hsr_slave_0: entered promiscuous mode [ 34.813203][ T3307] hsr_slave_1: entered promiscuous mode [ 34.819056][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 34.824814][ T3307] Cannot create hsr debugfs directory [ 34.883653][ T3306] hsr_slave_0: entered promiscuous mode [ 34.889604][ T3306] hsr_slave_1: entered promiscuous mode [ 34.895623][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 34.901375][ T3306] Cannot create hsr debugfs directory [ 34.913765][ T3303] hsr_slave_0: entered promiscuous mode [ 34.919895][ T3303] hsr_slave_1: entered promiscuous mode [ 34.925788][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 34.931527][ T3303] Cannot create hsr debugfs directory [ 35.026034][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.034519][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.042125][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.050438][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.067944][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.076608][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.095842][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.104484][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.144759][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.153473][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.165190][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.173644][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.181422][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.190143][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.197914][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.206478][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.233464][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.242010][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.249860][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.259333][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.271676][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.280443][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.288821][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.297191][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.339988][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.348547][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.361095][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.369704][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.377701][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.386260][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.394056][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.402812][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.441655][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.450363][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.458299][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.467252][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.474885][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.483325][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.496462][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.503414][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.512049][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.523103][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.550182][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.566325][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.574781][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.581851][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.592249][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.607470][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.614602][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.623046][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.630120][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.646968][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.654125][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.665976][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.683101][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.694441][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.701496][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.719014][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.726182][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.748211][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.767319][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.774438][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.797586][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.804662][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.824813][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.850690][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.880464][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.888306][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.900131][ T2151] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.907221][ T2151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.096351][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.113206][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.126993][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.200178][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.217851][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.318322][ T3300] veth0_vlan: entered promiscuous mode [ 36.330999][ T3299] veth0_vlan: entered promiscuous mode [ 36.341285][ T3300] veth1_vlan: entered promiscuous mode [ 36.355673][ T3299] veth1_vlan: entered promiscuous mode [ 36.379392][ T3300] veth0_macvtap: entered promiscuous mode [ 36.396517][ T3300] veth1_macvtap: entered promiscuous mode [ 36.414987][ T3299] veth0_macvtap: entered promiscuous mode [ 36.425279][ T3299] veth1_macvtap: entered promiscuous mode [ 36.447071][ T3306] veth0_vlan: entered promiscuous mode [ 36.453533][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.468775][ T3307] veth0_vlan: entered promiscuous mode [ 36.475855][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.483617][ T3303] veth0_vlan: entered promiscuous mode [ 36.494845][ T3303] veth1_vlan: entered promiscuous mode [ 36.502502][ T3306] veth1_vlan: entered promiscuous mode [ 36.516314][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.523862][ T2054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.532612][ T2054] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.543291][ T3307] veth1_vlan: entered promiscuous mode [ 36.558603][ T2054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.567566][ T2054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.584297][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.600045][ T2151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.613987][ T2151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.618082][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.623262][ T2151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.648998][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.664387][ T3303] veth0_macvtap: entered promiscuous mode [ 36.676329][ T3306] veth0_macvtap: entered promiscuous mode [ 36.688109][ T3303] veth1_macvtap: entered promiscuous mode [ 36.704106][ T3307] veth0_macvtap: entered promiscuous mode [ 36.716702][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.729375][ T3307] veth1_macvtap: entered promiscuous mode [ 36.736381][ T3306] veth1_macvtap: entered promiscuous mode [ 36.744872][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.769610][ T2054] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.789237][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.799740][ T3510] loop3: detected capacity change from 0 to 1024 [ 36.806569][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.816161][ T2054] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.824787][ T3510] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.835083][ T3510] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 36.849915][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 36.849935][ T28] audit: type=1400 audit(1778244130.432:163): avc: denied { prog_load } for pid=3511 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.866545][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.882196][ T28] audit: type=1400 audit(1778244130.432:164): avc: denied { bpf } for pid=3511 comm="syz.1.7" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.903033][ T28] audit: type=1400 audit(1778244130.432:165): avc: denied { write } for pid=3511 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.923742][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.942258][ T2054] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.942278][ T28] audit: type=1400 audit(1778244130.462:166): avc: denied { create } for pid=3509 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.974192][ T28] audit: type=1400 audit(1778244130.482:167): avc: denied { bind } for pid=3509 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.002387][ T2054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.007083][ T28] audit: type=1400 audit(1778244130.482:168): avc: denied { connect } for pid=3509 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.034438][ T28] audit: type=1400 audit(1778244130.512:169): avc: denied { map_create } for pid=3511 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.038280][ T2054] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.053630][ T28] audit: type=1400 audit(1778244130.512:170): avc: denied { map_read map_write } for pid=3511 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.084136][ T28] audit: type=1400 audit(1778244130.612:171): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 37.111908][ T3515] loop1: detected capacity change from 0 to 512 [ 37.128968][ T2054] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.140382][ T28] audit: type=1400 audit(1778244130.722:172): avc: denied { mounton } for pid=3514 comm="syz.1.8" path="/3/file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.148959][ T2054] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.198591][ T2054] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.202516][ T3515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.217780][ T2054] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.239816][ T3515] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.254799][ T3515] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.265097][ T2054] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.291019][ T2054] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.319171][ T2054] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.570962][ T3531] loop2: detected capacity change from 0 to 764 [ 37.717293][ T3531] Zero length message leads to an empty skb [ 37.982917][ T3510] loop3: detected capacity change from 0 to 512 [ 38.113632][ T3534] loop0: detected capacity change from 0 to 512 [ 38.139063][ T3534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.210039][ T3537] ref_ctr increment failed for inode: 0x18 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810498ec00 [ 38.269886][ T3537] netlink: 112 bytes leftover after parsing attributes in process `syz.2.10'. [ 38.315109][ T3534] mmap: syz.0.9 (3534) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.580408][ T3537] syz.2.10 (3537) used greatest stack depth: 10848 bytes left [ 38.662176][ T3542] -1: renamed from syzkaller0 [ 38.768647][ T3544] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12'. [ 38.997264][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.362936][ T3559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 39.545897][ T3510] loop3: detected capacity change from 0 to 256 [ 40.243660][ T3510] vfat: Unknown parameter 'ÿÿÿÿ0x00000000000000000xffffffffffffffff' [ 40.711530][ T3565] FAULT_INJECTION: forcing a failure. [ 40.711530][ T3565] name failslab, interval 1, probability 0, space 0, times 1 [ 40.748076][ T3565] CPU: 1 UID: 0 PID: 3565 Comm: syz.3.19 Not tainted syzkaller #0 PREEMPT(full) [ 40.748107][ T3565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 40.748119][ T3565] Call Trace: [ 40.748127][ T3565] [ 40.748136][ T3565] __dump_stack+0x1d/0x30 [ 40.748228][ T3565] dump_stack_lvl+0x95/0xd0 [ 40.748254][ T3565] dump_stack+0x15/0x1b [ 40.748277][ T3565] should_fail_ex+0x263/0x280 [ 40.748309][ T3565] ? alloc_bprm+0x5c/0x350 [ 40.748420][ T3565] should_failslab+0x8c/0xb0 [ 40.748466][ T3565] __kmalloc_cache_noprof+0x5f/0x400 [ 40.748530][ T3565] alloc_bprm+0x5c/0x350 [ 40.748560][ T3565] do_execveat_common+0x104/0x720 [ 40.748746][ T3565] ? do_getname+0x102/0x1c0 [ 40.748770][ T3565] __x64_sys_execveat+0x76/0xa0 [ 40.748850][ T3565] x64_sys_call+0x2a33/0x3020 [ 40.748878][ T3565] do_syscall_64+0x12c/0x3b0 [ 40.748921][ T3565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.749025][ T3565] RIP: 0033:0x7f63cf34cdd9 [ 40.749047][ T3565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.749078][ T3565] RSP: 002b:00007f63cdd9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 40.749129][ T3565] RAX: ffffffffffffffda RBX: 00007f63cf5c5fa0 RCX: 00007f63cf34cdd9 [ 40.749143][ T3565] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 40.749157][ T3565] RBP: 00007f63cdd9f090 R08: 0000000000001000 R09: 0000000000000000 [ 40.749169][ T3565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.749240][ T3565] R13: 00007f63cf5c6038 R14: 00007f63cf5c5fa0 R15: 00007ffd5ad71af8 [ 40.749260][ T3565] [ 41.331961][ T3597] loop4: detected capacity change from 0 to 512 [ 41.352181][ T3599] netlink: 36 bytes leftover after parsing attributes in process `syz.1.26'. [ 41.368913][ T3600] loop2: detected capacity change from 0 to 128 [ 41.418414][ T3597] EXT4-fs: Ignoring removed nobh option [ 41.502408][ T3597] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.510025][ T3597] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.25: EA inode hash validation failed [ 41.523853][ T3597] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.530836][ T3600] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.873376][ T3607] loop0: detected capacity change from 0 to 128 [ 42.056071][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 42.056102][ T28] audit: type=1400 audit(1778244135.512:208): avc: denied { mount } for pid=3590 comm="syz.0.24" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 42.103929][ T3597] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.25: corrupted inode contents [ 42.327483][ T3597] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.328029][ T3597] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #15: comm syz.4.25: mark_inode_dirty error [ 42.337955][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 42.337973][ C0] EXT4-fs (loop4): initial error at time 1778244135: ext4_do_update_inode:5690: inode 15 [ 42.338004][ C0] EXT4-fs (loop4): last error at time 1778244135: ext4_do_update_inode:5690: inode 15 [ 42.388751][ T3600] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.454182][ T3597] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.454594][ T3597] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.25: corrupted inode contents [ 42.516922][ T3597] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.517112][ T3597] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.25: mark_inode_dirty error [ 42.557538][ T3611] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.28'. [ 42.575233][ T28] audit: type=1400 audit(1778244136.142:209): avc: denied { write } for pid=3586 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.609802][ T28] audit: type=1400 audit(1778244136.192:210): avc: denied { write } for pid=3586 comm="syz.2.23" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.634962][ T3597] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.636633][ T3597] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.25: mark inode dirty (error -117) [ 42.687114][ T3600] syz.2.23 (3600) used greatest stack depth: 9328 bytes left [ 42.708357][ T3597] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.708579][ T3597] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 42.734696][ T28] audit: type=1400 audit(1778244136.192:211): avc: denied { create } for pid=3586 comm="syz.2.23" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 42.768589][ T3306] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.812218][ T3597] EXT4-fs (loop4): 1 orphan inode deleted [ 42.824772][ T28] audit: type=1400 audit(1778244136.342:212): avc: denied { bind } for pid=3614 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.850125][ T3597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 42.907653][ T28] audit: type=1400 audit(1778244136.372:213): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.935515][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.191341][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.198556][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.206544][ T3624] bridge0: entered allmulticast mode [ 43.214052][ T3624] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 43.232997][ T3624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.32'. [ 43.283533][ T28] audit: type=1400 audit(1778244136.842:214): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.348989][ T3626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 43.360323][ T3626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 43.468390][ T3628] netlink: 'syz.0.34': attribute type 1 has an invalid length. [ 43.518553][ T28] audit: type=1400 audit(1778244137.102:215): avc: denied { setopt } for pid=3630 comm="syz.1.35" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.630889][ T28] audit: type=1400 audit(1778244137.132:216): avc: denied { write } for pid=3630 comm="syz.1.35" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.696331][ T3635] loop0: detected capacity change from 0 to 2048 [ 43.712991][ T3638] FAULT_INJECTION: forcing a failure. [ 43.712991][ T3638] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.772688][ T3638] CPU: 0 UID: 0 PID: 3638 Comm: syz.4.33 Not tainted syzkaller #0 PREEMPT(full) [ 43.772721][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 43.772736][ T3638] Call Trace: [ 43.772768][ T3638] [ 43.772777][ T3638] __dump_stack+0x1d/0x30 [ 43.772802][ T3638] dump_stack_lvl+0x95/0xd0 [ 43.772824][ T3638] dump_stack+0x15/0x1b [ 43.772846][ T3638] should_fail_ex+0x263/0x280 [ 43.772879][ T3638] should_fail+0xb/0x20 [ 43.772955][ T3638] should_fail_usercopy+0x1a/0x20 [ 43.773008][ T3638] _copy_to_user+0x20/0xa0 [ 43.773066][ T3638] simple_read_from_buffer+0xb5/0x130 [ 43.773105][ T3638] proc_fail_nth_read+0x10e/0x150 [ 43.773169][ T3638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 43.773224][ T3638] vfs_read+0x1ab/0x7f0 [ 43.773255][ T3638] ? __rcu_read_unlock+0x4e/0x70 [ 43.773286][ T3638] ? __fget_files+0x184/0x1c0 [ 43.773310][ T3638] ? mutex_lock+0x57/0x90 [ 43.773334][ T3638] ksys_read+0xdc/0x1a0 [ 43.773434][ T3638] __x64_sys_read+0x40/0x50 [ 43.773462][ T3638] x64_sys_call+0x2886/0x3020 [ 43.773488][ T3638] do_syscall_64+0x12c/0x3b0 [ 43.773580][ T3638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.773608][ T3638] RIP: 0033:0x7fa8e6edd60e [ 43.773628][ T3638] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 43.773648][ T3638] RSP: 002b:00007fa8e596efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.773671][ T3638] RAX: ffffffffffffffda RBX: 00007fa8e596f6c0 RCX: 00007fa8e6edd60e [ 43.773693][ T3638] RDX: 000000000000000f RSI: 00007fa8e596f0a0 RDI: 0000000000000003 [ 43.773756][ T3638] RBP: 00007fa8e596f090 R08: 0000000000000000 R09: 0000000000000000 [ 43.773772][ T3638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.773787][ T3638] R13: 00007fa8e7196038 R14: 00007fa8e7195fa0 R15: 00007ffdcf0006f8 [ 43.773809][ T3638] [ 43.967830][ T3640] loop2: detected capacity change from 0 to 512 [ 43.980377][ T3640] FAT-fs (loop2): Directory bread(block 199916) failed [ 43.998205][ T3635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.011774][ T3640] FAT-fs (loop2): Directory bread(block 199917) failed [ 44.087519][ T3640] FAT-fs (loop2): Directory bread(block 199918) failed [ 44.124237][ T28] audit: type=1400 audit(1778244137.662:217): avc: denied { write } for pid=3634 comm="syz.0.37" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.125967][ T3640] FAT-fs (loop2): Directory bread(block 199919) failed [ 44.160691][ T3651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 44.176432][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.185600][ T3651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 44.195777][ T3651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 44.207037][ T3640] FAT-fs (loop2): Directory bread(block 199920) failed [ 44.214423][ T3640] FAT-fs (loop2): Directory bread(block 199921) failed [ 44.239331][ T3651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 44.251467][ T3640] FAT-fs (loop2): Directory bread(block 199922) failed [ 44.259009][ T3640] FAT-fs (loop2): Directory bread(block 199923) failed [ 44.262022][ T3651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 44.293075][ T3651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 44.308209][ T3657] loop0: detected capacity change from 0 to 512 [ 44.317565][ T3657] EXT4-fs (loop0): orphan cleanup on readonly fs [ 44.324356][ T3657] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.42: Failed to acquire dquot type 1 [ 44.336112][ T3657] loop0: lost filesystem error report for type 5 error -117 [ 44.341139][ T3657] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.42: Failed to acquire dquot type 1 [ 44.348524][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 44.348546][ C0] EXT4-fs (loop0): last error at time 1778244137: ext4_acquire_dquot:7034 [ 44.385786][ T3657] loop0: lost filesystem error report for type 5 error -117 [ 44.387604][ T3657] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.42: bg 0: block 248: padding at end of block bitmap is not set [ 44.409705][ T3657] loop0: lost filesystem error report for type 5 error -117 [ 44.410033][ T3657] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 44.426680][ T3657] loop0: lost filesystem error report for type 5 error -117 [ 44.427682][ T3657] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.42: Failed to acquire dquot type 1 [ 44.432811][ T3651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 44.443732][ T3657] loop0: lost filesystem error report for type 5 error -117 [ 44.458012][ T3657] EXT4-fs (loop0): 1 orphan inode deleted [ 44.474860][ T3651] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 44.486086][ T3657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.518954][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.569296][ T3669] sctp: [Deprecated]: syz.0.44 (pid 3669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 44.569296][ T3669] Use struct sctp_sack_info instead [ 44.998305][ T3693] loop1: detected capacity change from 0 to 512 [ 45.020735][ T3693] EXT4-fs (loop1): 1 orphan inode deleted [ 45.031968][ T3693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.148388][ T3693] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.54: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 45.244753][ T3693] EXT4-fs (loop1): Remounting filesystem read-only [ 45.382977][ T3700] loop4: detected capacity change from 0 to 1764 [ 45.391338][ T3700] iso9660: Unknown parameter 'fowner<00000000000000000000' [ 46.135360][ T3700] syz.4.55 (3700) used greatest stack depth: 8760 bytes left [ 46.364409][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.074251][ T3709] loop0: detected capacity change from 0 to 1764 [ 47.080996][ T3709] iso9660: Unknown parameter 'fowner<00000000000000000000' [ 49.273782][ T3718] loop4: detected capacity change from 0 to 1024 [ 49.373150][ T3718] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.386226][ T3718] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 49.404263][ T3718] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: comm syz.4.59: inode #1: comm syz.4.59: iget: illegal inode # [ 49.418678][ T3718] loop4: lost filesystem error report for type 5 error -117 [ 49.422162][ T3718] EXT4-fs (loop4): no journal found [ 49.431823][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 49.431840][ C0] EXT4-fs (loop4): initial error at time 1778244143: ext4_get_journal_inode:5896 [ 49.431861][ C0] EXT4-fs (loop4): last error at time 1778244143: ext4_get_journal_inode:5896 [ 49.476617][ T3718] EXT4-fs (loop4): can't get journal size [ 49.521484][ T3718] EXT4-fs (loop4): failed to initialize system zone (-22) [ 49.532114][ T3718] EXT4-fs (loop4): mount failed [ 49.866782][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 49.866852][ T28] audit: type=1400 audit(1778244143.452:245): avc: denied { getopt } for pid=3712 comm="syz.4.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.246759][ T28] audit: type=1400 audit(1778244143.822:246): avc: denied { read write } for pid=3725 comm="syz.0.61" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 50.273927][ T3729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.297633][ T3732] __nla_validate_parse: 4 callbacks suppressed [ 50.297649][ T3732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.62'. [ 50.330917][ T3729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.368122][ T28] audit: type=1400 audit(1778244143.822:247): avc: denied { open } for pid=3725 comm="syz.0.61" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 50.482429][ T3728] loop0: detected capacity change from 0 to 512 [ 50.497786][ T28] audit: type=1400 audit(1778244143.852:248): avc: denied { name_connect } for pid=3726 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 50.542232][ T3728] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 50.585841][ T28] audit: type=1400 audit(1778244143.852:249): avc: denied { read write } for pid=3725 comm="syz.0.61" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.640988][ T3728] EXT4-fs (loop0): 1 truncate cleaned up [ 50.672402][ T3728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.678107][ T28] audit: type=1400 audit(1778244143.852:250): avc: denied { open } for pid=3725 comm="syz.0.61" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.710174][ T28] audit: type=1400 audit(1778244143.852:251): avc: denied { ioctl } for pid=3725 comm="syz.0.61" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.735983][ T28] audit: type=1400 audit(1778244143.872:252): avc: denied { create } for pid=3731 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.755600][ T28] audit: type=1400 audit(1778244143.872:253): avc: denied { create } for pid=3731 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 50.776106][ T28] audit: type=1400 audit(1778244143.882:254): avc: denied { create } for pid=3731 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.800227][ T3732] vlan2: entered promiscuous mode [ 50.809979][ T3732] syz_tun: entered promiscuous mode [ 51.763641][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.795775][ T3754] netlink: 132 bytes leftover after parsing attributes in process `syz.0.69'. [ 51.817472][ T3752] loop4: detected capacity change from 0 to 1024 [ 51.852222][ T3752] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.891696][ T3752] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 52.069519][ T3764] loop4: detected capacity change from 0 to 512 [ 52.362695][ T3744] loop1: detected capacity change from 0 to 128 [ 52.404083][ T3763] tipc: Can't bind to reserved service type 0 [ 52.569394][ T3752] loop4: detected capacity change from 0 to 256 [ 52.667470][ T3752] vfat: Unknown parameter 'ÿÿÿÿ0x00000000000000000xffffffffffffffff' [ 52.821267][ T3769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.963372][ T3771] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 52.982697][ T3766] loop2: detected capacity change from 0 to 128 [ 53.035938][ T2151] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 53.164861][ T49] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 53.516790][ T3778] syz.2.74: attempt to access beyond end of device [ 53.516790][ T3778] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 53.822473][ T3793] netlink: 'syz.0.84': attribute type 3 has an invalid length. [ 53.881808][ T3789] No such timeout policy "syz1" [ 54.289628][ T3804] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 54.355221][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 54.581363][ T3811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.90'. [ 54.829270][ T2151] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 54.895367][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 54.895385][ T28] audit: type=1400 audit(1778244148.482:273): avc: denied { read write } for pid=3824 comm="syz.4.96" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.933580][ T3823] syz.2.95 uses obsolete (PF_INET,SOCK_PACKET) [ 54.944460][ T28] audit: type=1400 audit(1778244148.482:274): avc: denied { open } for pid=3824 comm="syz.4.96" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 55.331254][ T3380] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 55.343852][ T28] audit: type=1400 audit(1778244148.522:275): avc: denied { write } for pid=3822 comm="syz.2.95" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.373078][ T28] audit: type=1400 audit(1778244148.522:276): avc: denied { open } for pid=3822 comm="syz.2.95" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.416182][ T28] audit: type=1400 audit(1778244148.522:277): avc: denied { ioctl } for pid=3822 comm="syz.2.95" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.481868][ T3831] syzkaller0: entered promiscuous mode [ 55.495732][ T3831] syzkaller0: entered allmulticast mode [ 55.498582][ T28] audit: type=1400 audit(1778244148.522:278): avc: denied { ioctl } for pid=3822 comm="syz.2.95" path="socket:[6271]" dev="sockfs" ino=6271 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.536076][ T28] audit: type=1400 audit(1778244148.932:279): avc: denied { ioctl } for pid=3824 comm="syz.4.96" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 55.571948][ T28] audit: type=1400 audit(1778244148.992:280): avc: denied { create } for pid=3824 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 55.592513][ T28] audit: type=1400 audit(1778244148.992:281): avc: denied { ioctl } for pid=3824 comm="syz.4.96" path="socket:[6278]" dev="sockfs" ino=6278 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 55.617812][ T28] audit: type=1400 audit(1778244149.032:282): avc: denied { read } for pid=3824 comm="syz.4.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.719681][ T3834] pim6reg: entered allmulticast mode [ 55.728612][ T3834] pim6reg: left allmulticast mode [ 55.802613][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 55.939103][ T2151] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 55.960195][ T2151] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 56.868096][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 56.885498][ T3858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 56.971220][ T3858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 57.049465][ T3858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50704 sclass=netlink_route_socket pid=3858 comm=syz.3.106 [ 57.979082][ T36] bond1: (slave ip6gretap1): link status up again after 0 ms [ 58.024658][ T3873] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.110' sets config #1 [ 58.037152][ T36] bond1: (slave ip6gretap1): link status up again after 0 ms [ 58.058289][ T3865] process 'syz.4.108' launched '/dev/fd/7' with NULL argv: empty string added [ 58.068011][ T36] bond1: (slave ip6gretap1): link status up again after 0 ms [ 58.079066][ T3880] loop1: detected capacity change from 0 to 512 [ 58.086262][ T3880] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 58.098095][ T2151] bond1: (slave ip6gretap1): link status up again after 0 ms [ 58.107542][ T3880] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 58.115989][ T3880] EXT4-fs (loop1): failed to initialize system zone (-117) [ 58.124517][ T3880] EXT4-fs (loop1): mount failed [ 58.124939][ T49] bond1: (slave ip6gretap1): link status up again after 0 ms [ 58.184323][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 58.233938][ T3869] gretap0: entered promiscuous mode [ 58.259206][ T3895] netlink: 20 bytes leftover after parsing attributes in process `syz.4.117'. [ 58.264243][ T3897] loop0: detected capacity change from 0 to 512 [ 58.280209][ T3897] FAT-fs (loop0): Directory bread(block 199916) failed [ 58.288972][ T3897] FAT-fs (loop0): Directory bread(block 199917) failed [ 58.300109][ T3897] FAT-fs (loop0): Directory bread(block 199918) failed [ 58.309313][ T3897] FAT-fs (loop0): Directory bread(block 199919) failed [ 58.315827][ T2151] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 58.317059][ T3897] FAT-fs (loop0): Directory bread(block 199920) failed [ 58.330987][ T3897] FAT-fs (loop0): Directory bread(block 199921) failed [ 58.338365][ T3897] FAT-fs (loop0): Directory bread(block 199922) failed [ 58.346314][ T3897] FAT-fs (loop0): Directory bread(block 199923) failed [ 58.417599][ T3899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'. [ 58.465964][ T3903] syzkaller0: entered promiscuous mode [ 58.471129][ T3904] netlink: 36 bytes leftover after parsing attributes in process `syz.0.118'. [ 58.475194][ T3903] syzkaller0: entered allmulticast mode [ 58.503758][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 58.633386][ T3911] loop4: detected capacity change from 0 to 512 [ 58.658482][ T3911] FAT-fs (loop4): Directory bread(block 199916) failed [ 58.670802][ T3911] FAT-fs (loop4): Directory bread(block 199917) failed [ 58.709293][ T3911] FAT-fs (loop4): Directory bread(block 199918) failed [ 59.642603][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 59.658960][ T3911] FAT-fs (loop4): Directory bread(block 199919) failed [ 59.666439][ T3911] FAT-fs (loop4): Directory bread(block 199920) failed [ 59.673439][ T3911] FAT-fs (loop4): Directory bread(block 199921) failed [ 59.689400][ T3911] FAT-fs (loop4): Directory bread(block 199922) failed [ 59.747281][ T3911] FAT-fs (loop4): Directory bread(block 199923) failed [ 59.757989][ T3924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.127'. [ 59.831173][ T3924] vlan2: entered promiscuous mode [ 59.961455][ T3924] syz_tun: entered promiscuous mode [ 59.979605][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 59.979622][ T28] audit: type=1400 audit(1778244153.562:299): avc: denied { getopt } for pid=3925 comm="syz.0.128" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.003761][ T2151] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 60.019807][ T3911] netlink: 36 bytes leftover after parsing attributes in process `syz.4.122'. [ 60.143769][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 60.345149][ T3934] loop2: detected capacity change from 0 to 128 [ 60.520657][ T217] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 60.691988][ T2151] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 60.743058][ T3937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.131'. [ 61.996650][ T3939] loop0: detected capacity change from 0 to 1024 [ 62.070125][ T3939] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 62.070125][ T3939] [ 62.111087][ T3949] netlink: 176 bytes leftover after parsing attributes in process `syz.2.134'. [ 62.150182][ T3939] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 62.325784][ T28] audit: type=1400 audit(1778244155.902:300): avc: denied { mounton } for pid=3957 comm="syz.2.138" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 62.350745][ T3958] tmpfs: Unknown parameter 'ÏF¥.ì' [ 62.359021][ T3959] loop4: detected capacity change from 0 to 512 [ 62.390155][ T3960] loop2: detected capacity change from 0 to 1024 [ 62.420962][ T3960] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 62.479504][ T3960] JBD2: no valid journal superblock found [ 62.502742][ T3960] EXT4-fs (loop2): Could not load journal inode [ 62.520069][ T3959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.545807][ T3959] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.646282][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.815536][ T3960] loop2: detected capacity change from 0 to 512 [ 62.872641][ T3960] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.841439][ T30] net_ratelimit: 11 callbacks suppressed [ 63.841459][ T30] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 63.864282][ T3960] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.875986][ T3960] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.138: Allocating blocks 41-42 which overlap fs metadata [ 63.890295][ T3960] loop2: lost filesystem error report for type 5 error -117 [ 63.893704][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 63.907485][ C0] EXT4-fs (loop2): initial error at time 1778244157: ext4_mb_mark_diskspace_used:4222 [ 63.917094][ C0] EXT4-fs (loop2): last error at time 1778244157: ext4_mb_mark_diskspace_used:4222 [ 63.931750][ T3973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.141'. [ 63.971643][ T217] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 64.003971][ T3960] Quota error (device loop2): write_blk: dquota write failed [ 64.121987][ T3960] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 64.125055][ T3975] loop1: detected capacity change from 0 to 128 [ 64.140733][ T3960] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.138: Failed to acquire dquot type 0 [ 64.140798][ T3960] loop2: lost filesystem error report for type 5 error -117 [ 64.142591][ T28] audit: type=1400 audit(1778244157.722:301): avc: denied { write } for pid=3974 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.153746][ T3960] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 64.153833][ T3960] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.138: corrupted inode contents [ 64.153863][ T3960] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 64.153999][ T3960] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #12: comm syz.2.138: mark_inode_dirty error [ 64.154027][ T3960] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 64.156612][ T3960] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.138: corrupted inode contents [ 64.156642][ T3960] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 64.157869][ T3960] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.138: mark_inode_dirty error [ 64.157898][ T3960] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 64.158053][ T3960] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.138: corrupted inode contents [ 64.158083][ T3960] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 64.158156][ T3960] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 64.158177][ T3960] loop2: lost filesystem error report for type 5 error -117 [ 64.158389][ T3960] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.138: corrupted inode contents [ 64.158415][ T3960] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 64.158549][ T3960] EXT4-fs error (device loop2): ext4_truncate:4690: inode #12: comm syz.2.138: mark_inode_dirty error [ 64.158576][ T3960] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 64.158659][ T3960] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 64.158679][ T3960] loop2: lost filesystem error report for type 5 error -117 [ 64.158865][ T3960] EXT4-fs (loop2): 1 truncate cleaned up [ 64.163819][ T3960] EXT4-fs (loop2): pa ffff888107d6af50: logic 1, phys. 41, len 23 [ 64.163846][ T3960] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 64.164464][ T3960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.187731][ T3978] loop3: detected capacity change from 0 to 512 [ 64.194660][ T3978] FAT-fs (loop3): Directory bread(block 199916) failed [ 64.194688][ T3978] FAT-fs (loop3): Directory bread(block 199917) failed [ 64.194709][ T3978] FAT-fs (loop3): Directory bread(block 199918) failed [ 64.194797][ T3978] FAT-fs (loop3): Directory bread(block 199919) failed [ 64.194818][ T3978] FAT-fs (loop3): Directory bread(block 199920) failed [ 64.194838][ T3978] FAT-fs (loop3): Directory bread(block 199921) failed [ 64.194859][ T3978] FAT-fs (loop3): Directory bread(block 199922) failed [ 64.194939][ T3978] FAT-fs (loop3): Directory bread(block 199923) failed [ 64.254649][ T30] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 64.259296][ T28] audit: type=1400 audit(1778244157.812:302): avc: denied { block_suspend } for pid=3974 comm="syz.4.142" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.329340][ T3983] netlink: 36 bytes leftover after parsing attributes in process `syz.3.143'. [ 64.421408][ T2151] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 64.510576][ T28] audit: type=1326 audit(1778244158.092:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.0.146" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e8a14cdd9 code=0x0 [ 64.666584][ T28] audit: type=1400 audit(1778244158.252:304): avc: denied { bind } for pid=3974 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.014582][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.032810][ T3975] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.189402][ T3988] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.196657][ T3988] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.374738][ T3999] loop2: detected capacity change from 0 to 128 [ 65.752034][ T3988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.830774][ T3988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.841132][ T28] audit: type=1400 audit(1778244159.422:305): avc: denied { ioctl } for pid=4003 comm="syz.1.148" path="socket:[5968]" dev="sockfs" ino=5968 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.996710][ T3993] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.147'. [ 66.181314][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.212515][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.434759][ T30] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.220934][ T3524] IPVS: starting estimator thread 0... [ 67.382181][ T4012] loop1: detected capacity change from 0 to 512 [ 67.414710][ T4012] ======================================================= [ 67.414710][ T4012] WARNING: The mand mount option has been deprecated and [ 67.414710][ T4012] and is ignored by this kernel. Remove the mand [ 67.414710][ T4012] option from the mount to silence this warning. [ 67.414710][ T4012] ======================================================= [ 67.461484][ T4015] loop3: detected capacity change from 0 to 128 [ 67.464668][ T2151] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.643833][ T4013] IPVS: using max 2688 ests per chain, 134400 per kthread [ 67.728314][ T28] audit: type=1400 audit(1778244161.242:306): avc: denied { read append } for pid=4014 comm="syz.3.152" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 67.996369][ T4012] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.1.149: corrupted xattr block 95: invalid header [ 68.011288][ T4012] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.023702][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 68.039370][ C0] EXT4-fs (loop1): initial error at time 1778244161: ext4_expand_extra_isize_ea:2810: inode 11 [ 68.049743][ C0] EXT4-fs (loop1): last error at time 1778244161: ext4_expand_extra_isize_ea:2810: inode 11 [ 68.148209][ T4012] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 68.187085][ T4012] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.149: bg 0: block 7: invalid block bitmap [ 68.200540][ T4012] loop1: lost filesystem error report for type 5 error -117 [ 68.202877][ T4012] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 68.241359][ T4012] loop1: lost filesystem error report for type 5 error -117 [ 68.262330][ T4012] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #11: comm syz.1.149: corrupted xattr block 95: invalid header [ 68.357414][ T4012] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 68.361750][ T4012] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 68.408204][ T4012] EXT4-fs (loop1): 1 orphan inode deleted [ 68.452688][ T4012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.506672][ T4030] FAULT_INJECTION: forcing a failure. [ 68.506672][ T4030] name failslab, interval 1, probability 0, space 0, times 0 [ 68.539690][ T28] audit: type=1400 audit(1778244161.242:307): avc: denied { open } for pid=4014 comm="syz.3.152" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 68.571036][ T4030] CPU: 0 UID: 0 PID: 4030 Comm: syz.0.155 Not tainted syzkaller #0 PREEMPT(full) [ 68.571071][ T4030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 68.571083][ T4030] Call Trace: [ 68.571090][ T4030] [ 68.571160][ T4030] __dump_stack+0x1d/0x30 [ 68.571184][ T4030] dump_stack_lvl+0x95/0xd0 [ 68.571206][ T4030] dump_stack+0x15/0x1b [ 68.571229][ T4030] should_fail_ex+0x263/0x280 [ 68.571258][ T4030] should_failslab+0x8c/0xb0 [ 68.571372][ T4030] kmem_cache_alloc_noprof+0x66/0x3f0 [ 68.571459][ T4030] ? security_file_alloc+0x32/0xf0 [ 68.571485][ T4030] security_file_alloc+0x32/0xf0 [ 68.571505][ T4030] init_file+0x5b/0x1b0 [ 68.571527][ T4030] alloc_empty_file+0x85/0x1e0 [ 68.571547][ T4030] path_openat+0x65/0x2050 [ 68.571630][ T4030] ? terminate_walk+0x1e6/0x210 [ 68.571675][ T4030] ? path_openat+0x1ab2/0x2050 [ 68.571763][ T4030] ? path_openat+0x1b01/0x2050 [ 68.571790][ T4030] ? _parse_integer_limit+0x170/0x190 [ 68.571818][ T4030] do_file_open+0x16c/0x290 [ 68.571904][ T4030] do_open_execat+0xab/0x240 [ 68.571929][ T4030] alloc_bprm+0x25/0x350 [ 68.571957][ T4030] do_execveat_common+0x104/0x720 [ 68.571989][ T4030] ? do_getname+0x102/0x1c0 [ 68.572069][ T4030] __x64_sys_execveat+0x76/0xa0 [ 68.572096][ T4030] x64_sys_call+0x2a33/0x3020 [ 68.572123][ T4030] do_syscall_64+0x12c/0x3b0 [ 68.572157][ T4030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.572191][ T4030] RIP: 0033:0x7f3e8a14cdd9 [ 68.572211][ T4030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.572233][ T4030] RSP: 002b:00007f3e88ba7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 68.572260][ T4030] RAX: ffffffffffffffda RBX: 00007f3e8a3c5fa0 RCX: 00007f3e8a14cdd9 [ 68.572351][ T4030] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 68.572368][ T4030] RBP: 00007f3e88ba7090 R08: 0000000000001000 R09: 0000000000000000 [ 68.572406][ T4030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.572419][ T4030] R13: 00007f3e8a3c6038 R14: 00007f3e8a3c5fa0 R15: 00007ffcd71ba1d8 [ 68.572437][ T4030] [ 68.710810][ T4031] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 68.737995][ T28] audit: type=1400 audit(1778244161.242:308): avc: denied { ioctl } for pid=4014 comm="syz.3.152" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 68.738036][ T28] audit: type=1400 audit(1778244161.552:309): avc: denied { create } for pid=4014 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.738059][ T28] audit: type=1400 audit(1778244161.652:310): avc: denied { setopt } for pid=4014 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.866347][ T4031] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 68.912064][ T4010] netlink: 14 bytes leftover after parsing attributes in process `syz.4.150'. [ 68.924680][ T28] audit: type=1400 audit(1778244162.292:311): avc: denied { write } for pid=4009 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 68.967256][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 69.045106][ T4034] loop2: detected capacity change from 0 to 512 [ 69.061091][ T4034] FAT-fs (loop2): Directory bread(block 199916) failed [ 69.076212][ T4034] FAT-fs (loop2): Directory bread(block 199917) failed [ 69.118346][ T4036] FAULT_INJECTION: forcing a failure. [ 69.118346][ T4036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.134288][ T4034] FAT-fs (loop2): Directory bread(block 199918) failed [ 69.141296][ T4034] FAT-fs (loop2): Directory bread(block 199919) failed [ 69.146812][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.149388][ T4034] FAT-fs (loop2): Directory bread(block 199920) failed [ 69.180590][ T4036] CPU: 1 UID: 0 PID: 4036 Comm: syz.0.156 Not tainted syzkaller #0 PREEMPT(full) [ 69.180679][ T4036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 69.180692][ T4036] Call Trace: [ 69.180698][ T4036] [ 69.180705][ T4036] __dump_stack+0x1d/0x30 [ 69.180729][ T4036] dump_stack_lvl+0x95/0xd0 [ 69.180749][ T4036] dump_stack+0x15/0x1b [ 69.180830][ T4036] should_fail_ex+0x263/0x280 [ 69.180864][ T4036] should_fail+0xb/0x20 [ 69.180893][ T4036] should_fail_usercopy+0x1a/0x20 [ 69.180955][ T4036] strncpy_from_user+0x27/0x250 [ 69.180976][ T4036] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 69.181080][ T4036] do_getname+0x59/0x1c0 [ 69.181161][ T4036] getname_uflags+0x23/0x30 [ 69.181213][ T4036] __x64_sys_execveat+0x5d/0xa0 [ 69.181239][ T4036] x64_sys_call+0x2a33/0x3020 [ 69.181268][ T4036] do_syscall_64+0x12c/0x3b0 [ 69.181302][ T4036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.181392][ T4036] RIP: 0033:0x7f3e8a14cdd9 [ 69.181411][ T4036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.181499][ T4036] RSP: 002b:00007f3e88ba7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 69.181550][ T4036] RAX: ffffffffffffffda RBX: 00007f3e8a3c5fa0 RCX: 00007f3e8a14cdd9 [ 69.181567][ T4036] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 69.181582][ T4036] RBP: 00007f3e88ba7090 R08: 0000000000001000 R09: 0000000000000000 [ 69.181597][ T4036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.181611][ T4036] R13: 00007f3e8a3c6038 R14: 00007f3e8a3c5fa0 R15: 00007ffcd71ba1d8 [ 69.181629][ T4036] [ 69.351360][ T4034] FAT-fs (loop2): Directory bread(block 199921) failed [ 69.358583][ T4034] FAT-fs (loop2): Directory bread(block 199922) failed [ 69.365509][ T4034] FAT-fs (loop2): Directory bread(block 199923) failed [ 69.468863][ T4034] netlink: 36 bytes leftover after parsing attributes in process `syz.2.157'. [ 69.470852][ T4010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.500723][ T4010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.520304][ T4010] bond0 (unregistering): Released all slaves [ 69.541914][ T3380] infiniband syz1: ib_query_port failed (-19) [ 69.561948][ T4045] loop1: detected capacity change from 0 to 512 [ 69.572898][ T28] audit: type=1400 audit(1778244163.152:312): avc: denied { read } for pid=4042 comm="syz.0.160" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 69.663191][ T28] audit: type=1400 audit(1778244163.182:313): avc: denied { open } for pid=4042 comm="syz.0.160" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 69.716224][ T4045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.742416][ T4045] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.764489][ T4051] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.163'. [ 69.829157][ T28] audit: type=1400 audit(1778244163.402:314): avc: denied { read } for pid=4060 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.906768][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.940885][ T4068] loop2: detected capacity change from 0 to 512 [ 69.971987][ T4068] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.026784][ T4068] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 70.043752][ T4068] System zones: 0-2, 18-18, 34-34 [ 70.071369][ T4071] loop1: detected capacity change from 0 to 128 [ 70.135637][ T4071] netlink: 48 bytes leftover after parsing attributes in process `syz.1.164'. [ 70.155510][ T4068] EXT4-fs (loop2): 1 orphan inode deleted [ 70.156007][ T4068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.156107][ T4068] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.208764][ T4068] ipip0: entered allmulticast mode [ 70.243466][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 70.286379][ T30] EXT4-fs (loop2): Remounting filesystem read-only [ 70.395661][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.570862][ T4111] ipvlan2: entered allmulticast mode [ 70.587960][ T4111] bond0: entered allmulticast mode [ 70.602175][ T4111] bond_slave_0: entered allmulticast mode [ 70.750667][ T4111] bond_slave_1: entered allmulticast mode [ 70.758263][ T4111] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 70.766769][ T4111] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 71.353259][ T4124] loop2: detected capacity change from 0 to 128 [ 72.776120][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 72.776166][ T28] audit: type=1400 audit(1778244166.362:326): avc: denied { write } for pid=4125 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.785348][ T4133] openvswitch: netlink: Missing key (keys=40, expected=80) [ 75.390714][ T4145] netlink: 112 bytes leftover after parsing attributes in process `syz.0.178'. [ 75.491952][ T4147] No such timeout policy "syz1" [ 76.121655][ T4152] loop2: detected capacity change from 0 to 4096 [ 76.141131][ T4152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.146648][ T4160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.182'. [ 76.298708][ T4165] loop0: detected capacity change from 0 to 4096 [ 76.305949][ T4165] EXT4-fs: Ignoring removed nobh option [ 76.315245][ T4165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.330265][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.337520][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.344923][ T4167] bridge0: entered allmulticast mode [ 76.352954][ T4167] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 76.371706][ T4167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.183'. [ 76.474163][ T28] audit: type=1400 audit(1778244170.002:327): avc: denied { write } for pid=4151 comm="syz.2.180" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.557402][ T4171] netlink: 'syz.4.186': attribute type 29 has an invalid length. [ 76.632424][ T4172] netlink: 'syz.4.186': attribute type 29 has an invalid length. [ 76.815887][ T4175] loop4: detected capacity change from 0 to 1024 [ 76.842182][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.863223][ T4175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.887916][ T4178] netlink: 'syz.3.188': attribute type 29 has an invalid length. [ 76.901613][ T4178] netlink: 'syz.3.188': attribute type 29 has an invalid length. [ 76.927327][ T28] audit: type=1400 audit(1778244170.512:328): avc: denied { write } for pid=4174 comm="syz.4.187" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.981863][ T28] audit: type=1400 audit(1778244170.562:329): avc: denied { write } for pid=4174 comm="syz.4.187" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.011019][ T4175] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 77.020321][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.037127][ T28] audit: type=1400 audit(1778244170.562:330): avc: denied { write } for pid=4174 comm="syz.4.187" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.078886][ T4187] FAULT_INJECTION: forcing a failure. [ 77.078886][ T4187] name failslab, interval 1, probability 0, space 0, times 0 [ 77.098042][ T28] audit: type=1400 audit(1778244170.562:331): avc: denied { write } for pid=4174 comm="syz.4.187" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.099199][ T4185] loop3: detected capacity change from 0 to 1024 [ 77.120551][ T4187] CPU: 0 UID: 0 PID: 4187 Comm: syz.2.193 Not tainted syzkaller #0 PREEMPT(full) [ 77.120633][ T4187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 77.120646][ T4187] Call Trace: [ 77.120653][ T4187] [ 77.120661][ T4187] __dump_stack+0x1d/0x30 [ 77.120687][ T4187] dump_stack_lvl+0x95/0xd0 [ 77.120709][ T4187] dump_stack+0x15/0x1b [ 77.120755][ T4187] should_fail_ex+0x263/0x280 [ 77.120785][ T4187] should_failslab+0x8c/0xb0 [ 77.120866][ T4187] kmem_cache_alloc_noprof+0x66/0x3f0 [ 77.120904][ T4187] ? alloc_empty_file+0x70/0x1e0 [ 77.120928][ T4187] alloc_empty_file+0x70/0x1e0 [ 77.120951][ T4187] path_openat+0x65/0x2050 [ 77.121024][ T4187] ? __schedule+0x936/0xd20 [ 77.121124][ T4187] ? tick_program_event+0x79/0xc0 [ 77.121154][ T4187] ? preempt_schedule_irq+0x2d/0x50 [ 77.121188][ T4187] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 77.121237][ T4187] do_file_open+0x16c/0x290 [ 77.121273][ T4187] do_open_execat+0xab/0x240 [ 77.121300][ T4187] alloc_bprm+0x25/0x350 [ 77.121328][ T4187] do_execveat_common+0x104/0x720 [ 77.121371][ T4187] ? do_getname+0x102/0x1c0 [ 77.121391][ T4187] __x64_sys_execveat+0x76/0xa0 [ 77.121420][ T4187] x64_sys_call+0x2a33/0x3020 [ 77.121481][ T4187] do_syscall_64+0x12c/0x3b0 [ 77.121510][ T4187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.121534][ T4187] RIP: 0033:0x7f0f7942cdd9 [ 77.121552][ T4187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.121571][ T4187] RSP: 002b:00007f0f77e7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 77.121594][ T4187] RAX: ffffffffffffffda RBX: 00007f0f796a5fa0 RCX: 00007f0f7942cdd9 [ 77.121636][ T4187] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 77.121650][ T4187] RBP: 00007f0f77e7f090 R08: 0000000000001000 R09: 0000000000000000 [ 77.121664][ T4187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.121678][ T4187] R13: 00007f0f796a6038 R14: 00007f0f796a5fa0 R15: 00007ffca0dec288 [ 77.121698][ T4187] [ 77.130562][ T28] audit: type=1400 audit(1778244170.562:332): avc: denied { remove_name } for pid=4174 comm="syz.4.187" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.217927][ T4191] pimreg: entered allmulticast mode [ 77.224724][ T28] audit: type=1400 audit(1778244170.562:333): avc: denied { rename } for pid=4174 comm="syz.4.187" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.237352][ T4191] pimreg: left allmulticast mode [ 77.248979][ T4185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.293547][ T28] audit: type=1400 audit(1778244170.562:334): avc: denied { reparent } for pid=4174 comm="syz.4.187" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.353080][ T4195] netlink: 104 bytes leftover after parsing attributes in process `syz.1.195'. [ 77.374833][ T28] audit: type=1400 audit(1778244170.562:335): avc: denied { add_name } for pid=4174 comm="syz.4.187" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.403011][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.498616][ T4185] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 77.638110][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.843910][ T4226] loop2: detected capacity change from 0 to 1024 [ 77.865866][ T4226] EXT4-fs: Ignoring removed bh option [ 77.885519][ T4226] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.903003][ T4226] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 77.922537][ T4226] System zones: 0-1, 3-12 [ 77.929108][ T4226] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #3: block 1: comm syz.2.207: lblock 1 mapped to illegal pblock 1 (length 1) [ 77.944646][ T4226] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 77.944969][ T4226] EXT4-fs (loop2): Remounting filesystem read-only [ 77.954108][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 77.954158][ C0] EXT4-fs (loop2): initial error at time 1778244171: ext4_map_blocks:833: inode 3: block 1 [ 77.954251][ C0] EXT4-fs (loop2): last error at time 1778244171: ext4_map_blocks:833: inode 3: block 1 [ 77.991855][ T4226] __quota_error: 11 callbacks suppressed [ 77.991893][ T4226] Quota error (device loop2): write_blk: dquota write failed [ 78.006734][ T4226] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 78.015509][ T4239] netlink: 112 bytes leftover after parsing attributes in process `syz.3.213'. [ 78.017046][ T4226] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 78.035808][ T4226] EXT4-fs (loop2): 1 orphan inode deleted [ 78.043384][ T4226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.985744][ T4251] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 79.061445][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.157579][ T4261] loop0: detected capacity change from 0 to 1764 [ 79.164353][ T4261] iso9660: Unknown parameter 'fowner<00000000000000000000' [ 79.237263][ T4260] loop3: detected capacity change from 0 to 128 [ 79.304189][ T4260] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000020) [ 79.316427][ T4268] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0015:00bb with DS=0x13 [ 79.383741][ T28] audit: type=1400 audit(1778244172.882:347): avc: denied { write } for pid=4267 comm="syz.4.222" name="ip_mr_cache" dev="proc" ino=4026532585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 79.455704][ T4278] loop4: detected capacity change from 0 to 512 [ 79.572545][ T4281] syzkaller0: entered promiscuous mode [ 79.580814][ T4278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.607445][ T4281] syzkaller0: entered allmulticast mode [ 79.643356][ T4281] tc action pedit offset 64 out of bounds [ 79.649183][ T4281] tc action pedit offset 64 out of bounds [ 79.654953][ T4281] tc action pedit offset 64 out of bounds [ 79.660707][ T4281] tc action pedit offset 64 out of bounds [ 79.666683][ T4281] tc action pedit offset 64 out of bounds [ 79.672992][ T4281] tc action pedit offset 64 out of bounds [ 79.678767][ T4281] tc action pedit offset 64 out of bounds [ 79.684519][ T4281] tc action pedit offset 64 out of bounds [ 79.690258][ T4281] tc action pedit offset 64 out of bounds [ 79.696009][ T4281] tc action pedit offset 64 out of bounds [ 79.701764][ T4281] 0: reclassify loop, rule prio 0, protocol 800 [ 79.767659][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.629504][ T4294] loop3: detected capacity change from 0 to 1024 [ 80.636417][ T4294] EXT4-fs: Ignoring removed orlov option [ 80.642089][ T4294] EXT4-fs: Ignoring removed nobh option [ 80.721214][ T4294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.788659][ T28] audit: type=1400 audit(1778244174.352:348): avc: denied { write } for pid=4288 comm="syz.3.229" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.039434][ T28] audit: type=1400 audit(1778244174.612:349): avc: denied { listen } for pid=4300 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.065996][ T4308] SET target dimension over the limit! [ 81.319292][ T4315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=4315 comm=syz.0.236 [ 81.405986][ T28] audit: type=1400 audit(1778244174.982:350): avc: denied { bind } for pid=4317 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.425580][ T4318] x_tables: duplicate underflow at hook 1 [ 82.104230][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.335654][ T4330] loop0: detected capacity change from 0 to 512 [ 82.358004][ T4330] EXT4-fs (loop0): 1 orphan inode deleted [ 82.364255][ T4330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.378737][ T4330] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.241: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 82.380283][ T28] audit: type=1400 audit(1778244175.922:351): avc: denied { write } for pid=4327 comm="syz.0.241" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.420416][ T28] audit: type=1400 audit(1778244175.922:352): avc: denied { add_name } for pid=4327 comm="syz.0.241" name=02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.454634][ T4330] EXT4-fs (loop0): Remounting filesystem read-only [ 82.471155][ T4337] loop3: detected capacity change from 0 to 1024 [ 82.479496][ T4337] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.487977][ T4337] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 82.516055][ T4337] loop3: detected capacity change from 0 to 512 [ 82.529505][ T4337] loop3: detected capacity change from 0 to 256 [ 82.540282][ T4337] vfat: Unknown parameter 'ÿÿÿÿ0x00000000000000000xffffffffffffffff' [ 82.606679][ T28] audit: type=1400 audit(1778244176.192:353): avc: denied { write } for pid=4327 comm="syz.0.241" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.903350][ T4343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.949919][ T1038] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 83.015713][ T4351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. [ 83.041964][ T4353] FAULT_INJECTION: forcing a failure. [ 83.041964][ T4353] name failslab, interval 1, probability 0, space 0, times 0 [ 83.057168][ T4353] CPU: 1 UID: 0 PID: 4353 Comm: syz.2.248 Not tainted syzkaller #0 PREEMPT(full) [ 83.057262][ T4353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 83.057274][ T4353] Call Trace: [ 83.057281][ T4353] [ 83.057366][ T4353] __dump_stack+0x1d/0x30 [ 83.057396][ T4353] dump_stack_lvl+0x95/0xd0 [ 83.057420][ T4353] dump_stack+0x15/0x1b [ 83.057442][ T4353] should_fail_ex+0x263/0x280 [ 83.057474][ T4353] should_failslab+0x8c/0xb0 [ 83.057548][ T4353] kmem_cache_alloc_noprof+0x66/0x3f0 [ 83.057608][ T4353] ? mm_alloc+0x2b/0xa0 [ 83.057632][ T4353] mm_alloc+0x2b/0xa0 [ 83.057653][ T4353] alloc_bprm+0x20e/0x350 [ 83.057735][ T4353] do_execveat_common+0x104/0x720 [ 83.057831][ T4353] ? do_getname+0x102/0x1c0 [ 83.057851][ T4353] __x64_sys_execveat+0x76/0xa0 [ 83.057884][ T4353] x64_sys_call+0x2a33/0x3020 [ 83.057994][ T4353] do_syscall_64+0x12c/0x3b0 [ 83.058028][ T4353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.058054][ T4353] RIP: 0033:0x7f0f7942cdd9 [ 83.058072][ T4353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.058094][ T4353] RSP: 002b:00007f0f77e7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 83.058146][ T4353] RAX: ffffffffffffffda RBX: 00007f0f796a5fa0 RCX: 00007f0f7942cdd9 [ 83.058205][ T4353] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 83.058221][ T4353] RBP: 00007f0f77e7f090 R08: 0000000000001000 R09: 0000000000000000 [ 83.058237][ T4353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.058253][ T4353] R13: 00007f0f796a6038 R14: 00007f0f796a5fa0 R15: 00007ffca0dec288 [ 83.058275][ T4353] [ 83.308487][ T4359] IPVS: Error connecting to the multicast addr [ 83.362310][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.432428][ T4359] loop4: detected capacity change from 0 to 512 [ 83.525085][ T4366] bridge0: left allmulticast mode [ 83.572053][ T4359] EXT4-fs (loop4): 1 orphan inode deleted [ 83.606522][ T4359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.696723][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 83.696738][ T28] audit: type=1400 audit(1778244177.282:355): avc: denied { write } for pid=4358 comm="syz.4.251" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.731484][ T4359] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.251: invalid indirect mapped block 234881024 (level 0) [ 83.815808][ T4366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.830856][ T4366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.838880][ T4359] EXT4-fs (loop4): Remounting filesystem read-only [ 83.864434][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.905270][ T1038] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 83.910011][ T28] audit: type=1400 audit(1778244177.492:356): avc: denied { name_bind } for pid=4373 comm="syz.4.254" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 84.028461][ T4379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.253'. [ 84.079545][ T4376] bridge0: entered allmulticast mode [ 84.085483][ T4376] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 84.106532][ T28] audit: type=1400 audit(1778244177.662:357): avc: denied { create } for pid=4373 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 84.447694][ T4378] netlink: 'syz.1.255': attribute type 29 has an invalid length. [ 84.465868][ T4381] netlink: 'syz.1.255': attribute type 29 has an invalid length. [ 84.594055][ T2151] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.615177][ T2151] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.625203][ T2151] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.637653][ T2151] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.422712][ T28] audit: type=1400 audit(1778244178.992:358): avc: denied { read write } for pid=4391 comm="syz.2.257" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 85.584249][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 85.609438][ T28] audit: type=1400 audit(1778244178.992:359): avc: denied { open } for pid=4391 comm="syz.2.257" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 85.792865][ T28] audit: type=1400 audit(1778244179.372:360): avc: denied { getattr } for pid=4402 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.382144][ T4405] loop4: detected capacity change from 0 to 128 [ 86.596794][ T28] audit: type=1400 audit(1778244180.162:361): avc: denied { read } for pid=4408 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.620186][ T28] audit: type=1400 audit(1778244180.162:362): avc: denied { open } for pid=4408 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.736589][ T28] audit: type=1400 audit(1778244180.322:363): avc: denied { nlmsg_read } for pid=4415 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.909038][ T28] audit: type=1400 audit(1778244180.492:364): avc: denied { write } for pid=4401 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.981811][ T4431] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 87.090350][ T4431] SELinux: failed to load policy [ 87.410342][ T4452] loop2: detected capacity change from 0 to 512 [ 87.441624][ T4452] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 87.462357][ T4454] syzkaller0: entered promiscuous mode [ 87.484901][ T4454] syzkaller0: entered allmulticast mode [ 87.497747][ T4452] EXT4-fs (loop2): orphan cleanup on readonly fs [ 87.514389][ T4454] tcf_pedit_act: 7 callbacks suppressed [ 87.514406][ T4454] tc action pedit offset 64 out of bounds [ 87.525791][ T4454] tc action pedit offset 64 out of bounds [ 87.531534][ T4454] tc action pedit offset 64 out of bounds [ 87.537284][ T4454] tc action pedit offset 64 out of bounds [ 87.543198][ T4454] tc action pedit offset 64 out of bounds [ 87.548948][ T4454] tc action pedit offset 64 out of bounds [ 87.554702][ T4454] tc action pedit offset 64 out of bounds [ 87.560451][ T4454] tc action pedit offset 64 out of bounds [ 87.566336][ T4454] tc action pedit offset 64 out of bounds [ 87.572115][ T4454] tc action pedit offset 64 out of bounds [ 87.577915][ T4454] 0: reclassify loop, rule prio 0, protocol 800 [ 87.591355][ T4452] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.276: Block bitmap for bg 0 marked uninitialized [ 87.624382][ T4452] loop2: lost filesystem error report for type 5 error -117 [ 87.633698][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 87.647704][ C0] EXT4-fs (loop2): initial error at time 1778244181: ext4_read_block_bitmap_nowait:517 [ 87.657476][ C0] EXT4-fs (loop2): last error at time 1778244181: ext4_read_block_bitmap_nowait:517 [ 87.669776][ T4452] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 87.678618][ T4452] loop2: lost filesystem error report for type 5 error -117 [ 87.678892][ T4452] EXT4-fs (loop2): 1 orphan inode deleted [ 87.692771][ T4452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 87.706945][ T4452] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 87.804309][ T4452] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 87.814060][ T4452] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.276: Block bitmap for bg 0 marked uninitialized [ 87.842270][ T4452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'. [ 87.859888][ T4452] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.276: Block bitmap for bg 0 marked uninitialized [ 87.888266][ T4452] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.276: Block bitmap for bg 0 marked uninitialized [ 87.942680][ T4452] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.276: Block bitmap for bg 0 marked uninitialized [ 88.009504][ T4478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 88.032848][ T4478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 88.096445][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.199110][ T4488] loop2: detected capacity change from 0 to 512 [ 88.316731][ T4469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50704 sclass=netlink_route_socket pid=4469 comm=syz.4.278 [ 88.365250][ T4494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 88.394304][ T4488] FAT-fs (loop2): Directory bread(block 199916) failed [ 88.401389][ T4488] FAT-fs (loop2): Directory bread(block 199917) failed [ 88.408307][ T4488] FAT-fs (loop2): Directory bread(block 199918) failed [ 88.415247][ T4488] FAT-fs (loop2): Directory bread(block 199919) failed [ 88.444535][ T4488] FAT-fs (loop2): Directory bread(block 199920) failed [ 88.520449][ T4488] FAT-fs (loop2): Directory bread(block 199921) failed [ 88.569481][ T4497] loop4: detected capacity change from 0 to 512 [ 88.595397][ T4488] FAT-fs (loop2): Directory bread(block 199922) failed [ 88.620833][ T4497] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.652766][ T4488] FAT-fs (loop2): Directory bread(block 199923) failed [ 88.693263][ T4497] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.283: corrupted xattr entries [ 88.699778][ T4488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.282'. [ 88.722595][ T4497] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.722846][ T4497] EXT4-fs (loop4): 1 truncate cleaned up [ 88.732079][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 88.732101][ C1] EXT4-fs (loop4): initial error at time 1778244182: xattr_find_entry:337: inode 15 [ 88.732128][ C1] EXT4-fs (loop4): last error at time 1778244182: xattr_find_entry:337: inode 15 [ 88.765762][ T4497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.786108][ T4497] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.812235][ T4501] SET target dimension over the limit! [ 89.018067][ T4503] FAULT_INJECTION: forcing a failure. [ 89.018067][ T4503] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 89.078891][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 89.078907][ T28] audit: type=1326 audit(1778244182.652:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.4.287" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e6f1cdd9 code=0x7ffc0000 [ 89.104408][ T4503] CPU: 1 UID: 0 PID: 4503 Comm: syz.0.285 Not tainted syzkaller #0 PREEMPT(full) [ 89.104487][ T4503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 89.104562][ T4503] Call Trace: [ 89.104569][ T4503] [ 89.104577][ T4503] __dump_stack+0x1d/0x30 [ 89.104603][ T4503] dump_stack_lvl+0x95/0xd0 [ 89.104669][ T4503] dump_stack+0x15/0x1b [ 89.104722][ T4503] should_fail_ex+0x263/0x280 [ 89.104752][ T4503] should_fail_alloc_page+0xf2/0x100 [ 89.104786][ T4503] __alloc_frozen_pages_noprof+0x108/0x350 [ 89.104886][ T4503] alloc_pages_mpol+0xb3/0x260 [ 89.104912][ T4503] alloc_pages_noprof+0x8f/0x140 [ 89.104991][ T4503] __pud_alloc+0x47/0x460 [ 89.105019][ T4503] handle_mm_fault+0x1eac/0x2e70 [ 89.105067][ T4503] ? mt_find+0x8c1/0xa10 [ 89.105120][ T4503] ? check_vma_flags+0x26d/0x330 [ 89.105150][ T4503] __get_user_pages+0x1290/0x1f10 [ 89.105177][ T4503] ? lapic_next_event+0x11/0x20 [ 89.105206][ T4503] get_user_pages_remote+0x1d5/0x6b0 [ 89.105283][ T4503] ? down_read+0x76/0xb0 [ 89.105308][ T4503] copy_string_kernel+0x1ca/0x470 [ 89.105337][ T4503] do_execveat_common+0x561/0x720 [ 89.105414][ T4503] __x64_sys_execveat+0x76/0xa0 [ 89.105443][ T4503] x64_sys_call+0x2a33/0x3020 [ 89.105469][ T4503] do_syscall_64+0x12c/0x3b0 [ 89.105498][ T4503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.105567][ T4503] RIP: 0033:0x7f3e8a14cdd9 [ 89.105584][ T4503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.105603][ T4503] RSP: 002b:00007f3e88ba7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 89.105685][ T4503] RAX: ffffffffffffffda RBX: 00007f3e8a3c5fa0 RCX: 00007f3e8a14cdd9 [ 89.105708][ T4503] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 89.105722][ T4503] RBP: 00007f3e88ba7090 R08: 0000000000001000 R09: 0000000000000000 [ 89.105736][ T4503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.105758][ T4503] R13: 00007f3e8a3c6038 R14: 00007f3e8a3c5fa0 R15: 00007ffcd71ba1d8 [ 89.105848][ T4503] [ 89.263828][ T4507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=4507 comm=syz.4.287 [ 89.270623][ T28] audit: type=1326 audit(1778244182.662:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.4.287" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e6f1cdd9 code=0x7ffc0000 [ 89.406084][ T4513] loop3: detected capacity change from 0 to 128 [ 89.442150][ T4507] netlink: 'syz.4.287': attribute type 4 has an invalid length. [ 89.512565][ T28] audit: type=1326 audit(1778244182.662:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.4.287" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e6f1cdd9 code=0x7ffc0000 [ 89.561358][ T28] audit: type=1326 audit(1778244182.662:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.4.287" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fa8e6f1cdd9 code=0x7ffc0000 [ 89.568393][ T4519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 89.593717][ T28] audit: type=1326 audit(1778244182.662:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.4.287" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e6f1cdd9 code=0x7ffc0000 [ 89.602569][ T4517] audit: audit_backlog=65 > audit_backlog_limit=64 [ 89.645360][ T4517] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 89.656281][ T28] audit: type=1326 audit(1778244182.662:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.4.287" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e6f1cdd9 code=0x7ffc0000 [ 89.816948][ T4517] audit: backlog limit exceeded [ 89.908028][ T28] audit: type=1326 audit(1778244182.662:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.4.287" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e6f1cdd9 code=0x7ffc0000 [ 90.040196][ T4507] netlink: 'syz.4.287': attribute type 17 has an invalid length. [ 90.296713][ T4537] syzkaller0: entered promiscuous mode [ 90.302303][ T4537] syzkaller0: entered allmulticast mode [ 90.344360][ T4542] netlink: 'syz.3.296': attribute type 29 has an invalid length. [ 90.352956][ T4542] netlink: 'syz.3.296': attribute type 29 has an invalid length. [ 90.519294][ T4549] loop0: detected capacity change from 0 to 128 [ 90.566989][ T4551] loop3: detected capacity change from 0 to 512 [ 90.629295][ T4549] syz.0.299: attempt to access beyond end of device [ 90.629295][ T4549] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 90.642971][ T4549] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 90.651820][ T4551] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.662206][ T4551] EXT4-fs (loop3): too many log groups per flexible block group [ 90.670147][ T4551] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 90.677050][ T4551] EXT4-fs (loop3): mount failed [ 90.682151][ T4549] syz.0.299: attempt to access beyond end of device [ 90.682151][ T4549] loop0: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 90.702546][ T4549] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 90.756461][ T4549] syz.0.299: attempt to access beyond end of device [ 90.756461][ T4549] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 90.769819][ T4549] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 90.775854][ T4555] loop2: detected capacity change from 0 to 2048 [ 90.780496][ T4549] syz.0.299: attempt to access beyond end of device [ 90.780496][ T4549] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 90.798319][ T4549] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 90.940499][ T4555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.968294][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.118312][ T4563] loop3: detected capacity change from 0 to 128 [ 91.452006][ T4549] syz.0.299: attempt to access beyond end of device [ 91.452006][ T4549] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 91.507178][ T4567] loop4: detected capacity change from 0 to 128 [ 91.580575][ T4549] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 91.682143][ T4549] syz.0.299: attempt to access beyond end of device [ 91.682143][ T4549] loop0: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 91.713235][ T4567] netlink: 'syz.4.304': attribute type 9 has an invalid length. [ 91.736243][ T4549] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 91.752112][ T4572] netlink: 'syz.2.306': attribute type 29 has an invalid length. [ 91.770968][ T4549] syz.0.299: attempt to access beyond end of device [ 91.770968][ T4549] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 91.785594][ T4573] netlink: 'syz.2.306': attribute type 29 has an invalid length. [ 91.813518][ T4549] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 91.866771][ T4575] loop2: detected capacity change from 0 to 512 [ 91.898215][ T4575] FAT-fs (loop2): Directory bread(block 199916) failed [ 91.928504][ T4575] FAT-fs (loop2): Directory bread(block 199917) failed [ 91.962838][ T4575] FAT-fs (loop2): Directory bread(block 199918) failed [ 92.021112][ T4575] FAT-fs (loop2): Directory bread(block 199919) failed [ 92.049138][ T4577] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.308: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 92.083809][ T4575] FAT-fs (loop2): Directory bread(block 199920) failed [ 92.122593][ T4575] FAT-fs (loop2): Directory bread(block 199921) failed [ 92.124259][ T4577] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 92.132715][ T4577] EXT4-fs error (device loop4): ext4_quota_enable:7228: comm syz.4.308: Bad quota inode: 4, type: 1 [ 92.141887][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 92.141911][ C1] EXT4-fs (loop4): initial error at time 1778244185: ext4_ext_check_inode:521: inode 4 [ 92.141938][ C1] EXT4-fs (loop4): last error at time 1778244185: ext4_ext_check_inode:521: inode 4 [ 92.150126][ T4575] FAT-fs (loop2): Directory bread(block 199922) failed [ 92.192121][ T4575] FAT-fs (loop2): Directory bread(block 199923) failed [ 92.230779][ T4577] loop4: lost filesystem error report for type 5 error -117 [ 92.234514][ T4577] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.292167][ T4587] netlink: 36 bytes leftover after parsing attributes in process `syz.2.307'. [ 92.354172][ T4577] EXT4-fs (loop4): mount failed [ 92.498018][ T4594] netlink: 44 bytes leftover after parsing attributes in process `syz.2.314'. [ 92.711579][ T4600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 92.729966][ T4600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 92.767868][ T4604] netlink: 248 bytes leftover after parsing attributes in process `syz.1.318'. [ 92.770957][ T4602] set_capacity_and_notify: 1 callbacks suppressed [ 92.770974][ T4602] loop3: detected capacity change from 0 to 256 [ 92.818054][ T4606] loop2: detected capacity change from 0 to 1024 [ 92.837282][ T4606] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.319: Failed to acquire dquot type 0 [ 92.863597][ T4606] loop2: lost filesystem error report for type 5 error -117 [ 92.863705][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 92.877528][ C1] EXT4-fs (loop2): initial error at time 1778244186: ext4_acquire_dquot:7034 [ 92.886362][ C1] EXT4-fs (loop2): last error at time 1778244186: ext4_acquire_dquot:7034 [ 92.900209][ T4606] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 92.916480][ T4606] EXT4-fs (loop2): 1 truncate cleaned up [ 92.922622][ T4606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.949083][ T4615] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.319: Failed to acquire dquot type 0 [ 93.042553][ T4612] netlink: 176 bytes leftover after parsing attributes in process `syz.1.321'. [ 93.129462][ T4624] loop4: detected capacity change from 0 to 512 [ 93.137051][ T4624] FAT-fs (loop4): Directory bread(block 199916) failed [ 93.144255][ T4624] FAT-fs (loop4): Directory bread(block 199917) failed [ 93.251307][ T4624] FAT-fs (loop4): Directory bread(block 199918) failed [ 93.259966][ T4624] FAT-fs (loop4): Directory bread(block 199919) failed [ 93.267131][ T4624] FAT-fs (loop4): Directory bread(block 199920) failed [ 93.274439][ T4624] FAT-fs (loop4): Directory bread(block 199921) failed [ 93.281408][ T4624] FAT-fs (loop4): Directory bread(block 199922) failed [ 93.314665][ T4624] FAT-fs (loop4): Directory bread(block 199923) failed [ 93.628802][ T4637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 93.657102][ T4637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 93.694935][ T4624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.324'. [ 93.774253][ T4637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50704 sclass=netlink_route_socket pid=4637 comm=syz.3.329 [ 93.880040][ T4647] openvswitch: netlink: Missing key (keys=40, expected=80) [ 93.891466][ T4645] loop0: detected capacity change from 0 to 512 [ 93.930234][ T4645] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.332: corrupted xattr entries [ 93.950656][ T4645] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.953738][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 93.969527][ C1] EXT4-fs (loop0): initial error at time 1778244187: xattr_find_entry:337: inode 15 [ 93.978972][ C1] EXT4-fs (loop0): last error at time 1778244187: xattr_find_entry:337: inode 15 [ 93.993046][ T4645] EXT4-fs (loop0): 1 truncate cleaned up [ 94.006279][ T4645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.034940][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.050869][ T4645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.096855][ T4652] loop4: detected capacity change from 0 to 512 [ 94.161295][ T4652] EXT4-fs: Ignoring removed bh option [ 94.182113][ T28] kauditd_printk_skb: 150 callbacks suppressed [ 94.182130][ T28] audit: type=1400 audit(1778244187.742:530): avc: denied { create } for pid=4655 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 94.221344][ T4652] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.244046][ T4671] netlink: 16 bytes leftover after parsing attributes in process `syz.2.340'. [ 94.255457][ T4671] tipc: Enabling of bearer rejected, failed to enable media [ 94.260209][ T4652] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 94.264387][ T4671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=4671 comm=syz.2.340 [ 94.294961][ T28] audit: type=1400 audit(1778244187.802:531): avc: denied { setopt } for pid=4670 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.314947][ T4652] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 94.327006][ T4678] Falling back ldisc for ttyS3. [ 94.332877][ T4652] EXT4-fs (loop4): orphan cleanup on readonly fs [ 94.340484][ T4652] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 4 [ 94.350329][ T4652] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 94.360601][ T4652] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.335: Failed to acquire dquot type 1 [ 94.362687][ T4681] loop2: detected capacity change from 0 to 512 [ 94.371743][ T4652] loop4: lost filesystem error report for type 5 error -5 [ 94.380927][ T4652] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.335: Invalid block bitmap block 0 in block_group 0 [ 94.401412][ T4652] loop4: lost filesystem error report for type 5 error -117 [ 94.402006][ T4652] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.335: Invalid block bitmap block 0 in block_group 0 [ 94.422652][ T4652] loop4: lost filesystem error report for type 5 error -117 [ 94.423574][ T4652] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.335: Invalid block bitmap block 0 in block_group 0 [ 94.431317][ C1] EXT4-fs (loop4): error count since last fsck: 3 [ 94.431340][ C1] EXT4-fs (loop4): last error at time 1778244187: ext4_read_block_bitmap_nowait:483 [ 94.446248][ T4681] FAT-fs (loop2): Directory bread(block 199916) failed [ 94.452664][ T4652] loop4: lost filesystem error report for type 5 error -117 [ 94.468300][ T4652] Quota error (device loop4): write_blk: dquota write failed [ 94.475918][ T4681] FAT-fs (loop2): Directory bread(block 199917) failed [ 94.483184][ T4652] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 94.500037][ T4652] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.335: Failed to acquire dquot type 1 [ 94.511201][ T4652] loop4: lost filesystem error report for type 5 error -28 [ 94.511367][ T4681] FAT-fs (loop2): Directory bread(block 199918) failed [ 94.525734][ T4652] Quota error (device loop4): write_blk: dquota write failed [ 94.537214][ T4681] FAT-fs (loop2): Directory bread(block 199919) failed [ 94.537299][ T4681] FAT-fs (loop2): Directory bread(block 199920) failed [ 94.537321][ T4681] FAT-fs (loop2): Directory bread(block 199921) failed [ 94.537356][ T4681] FAT-fs (loop2): Directory bread(block 199922) failed [ 94.537404][ T4681] FAT-fs (loop2): Directory bread(block 199923) failed [ 94.578124][ T4681] netlink: 36 bytes leftover after parsing attributes in process `syz.2.341'. [ 94.584240][ T4652] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 94.611545][ T4652] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.335: Failed to acquire dquot type 1 [ 94.624319][ T4652] loop4: lost filesystem error report for type 5 error -28 [ 94.626216][ T4652] EXT4-fs (loop4): 1 orphan inode deleted [ 94.635064][ T28] audit: type=1404 audit(1778244188.202:532): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 94.701692][ T28] audit: type=1400 audit(1778244188.242:533): avc: denied { prog_load } for pid=4693 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 94.735860][ T4652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.749257][ T3306] FAT-fs (loop2): Directory bread(block 199916) failed [ 94.764734][ T3306] FAT-fs (loop2): Directory bread(block 199917) failed [ 94.765122][ T4652] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.864121][ T4709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.352'. [ 94.875646][ T4652] syz.4.335 (4652) used greatest stack depth: 7824 bytes left [ 94.925187][ T4709] veth3: entered allmulticast mode [ 94.996383][ T30] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.045433][ T30] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.110138][ T30] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.189540][ T30] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.288965][ T30] bridge_slave_1: left allmulticast mode [ 95.299759][ T30] bridge_slave_1: left promiscuous mode [ 95.312422][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.329571][ T30] bridge_slave_0: left allmulticast mode [ 95.336006][ T30] bridge_slave_0: left promiscuous mode [ 95.342127][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.505589][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.515976][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.530007][ T30] bond0 (unregistering): Released all slaves [ 95.546595][ T30] bond1 (unregistering): Released all slaves [ 95.766850][ T30] hsr_slave_0: left promiscuous mode [ 95.777161][ T30] hsr_slave_1: left promiscuous mode [ 95.782832][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.791071][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.798756][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.806807][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.818299][ T30] veth1_macvtap: left promiscuous mode [ 95.827708][ T30] veth0_macvtap: left promiscuous mode [ 95.833358][ T30] veth1_vlan: left promiscuous mode [ 95.838826][ T30] veth0_vlan: left promiscuous mode [ 95.920488][ T30] team0 (unregistering): Port device team_slave_1 removed [ 95.933469][ T30] team0 (unregistering): Port device team_slave_0 removed [ 96.117399][ T2151] ================================================================== [ 96.125545][ T2151] BUG: KCSAN: data-race in __stop_tty / pty_write_room [ 96.132431][ T2151] [ 96.134773][ T2151] write to 0xffff88810d3bc994 of 1 bytes by task 4784 on cpu 1: [ 96.142427][ T2151] __stop_tty+0x36/0x90 [ 96.146607][ T2151] n_tty_ioctl_helper+0x2d1/0x370 [ 96.151846][ T2151] n_tty_ioctl+0x101/0x220 [ 96.156291][ T2151] tty_ioctl+0x83e/0xb80 [ 96.160651][ T2151] __se_sys_ioctl+0xce/0x140 [ 96.165357][ T2151] __x64_sys_ioctl+0x43/0x50 [ 96.170159][ T2151] x64_sys_call+0x1563/0x3020 [ 96.174873][ T2151] do_syscall_64+0x12c/0x3b0 [ 96.179510][ T2151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.185423][ T2151] [ 96.187766][ T2151] read to 0xffff88810d3bc994 of 1 bytes by task 2151 on cpu 0: [ 96.195316][ T2151] pty_write_room+0x19/0x70 [ 96.199845][ T2151] tty_write_room+0x3f/0x60 [ 96.204452][ T2151] __process_echoes+0x36/0x6b0 [ 96.209321][ T2151] n_tty_receive_buf_common+0x8d3/0xc00 [ 96.214985][ T2151] n_tty_receive_buf2+0x33/0x40 [ 96.219854][ T2151] tty_ldisc_receive_buf+0x66/0xf0 [ 96.224998][ T2151] tty_port_default_receive_buf+0x59/0x90 [ 96.230778][ T2151] flush_to_ldisc+0x148/0x340 [ 96.235530][ T2151] process_scheduled_works+0x4f0/0x9c0 [ 96.241020][ T2151] worker_thread+0x58a/0x780 [ 96.245632][ T2151] kthread+0x22a/0x280 [ 96.249727][ T2151] ret_from_fork+0x146/0x330 [ 96.254352][ T2151] ret_from_fork_asm+0x1a/0x30 [ 96.259231][ T2151] [ 96.261561][ T2151] value changed: 0x00 -> 0x01 [ 96.266246][ T2151] [ 96.268586][ T2151] Reported by Kernel Concurrency Sanitizer on: [ 96.274750][ T2151] CPU: 0 UID: 0 PID: 2151 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 96.284316][ T2151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 96.294389][ T2151] Workqueue: events_unbound flush_to_ldisc [ 96.300234][ T2151] ================================================================== [ 97.154926][ T49] bridge_slave_1: left allmulticast mode [ 97.160639][ T49] bridge_slave_1: left promiscuous mode [ 97.166511][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.174830][ T49] bridge_slave_0: left allmulticast mode [ 97.180588][ T49] bridge_slave_0: left promiscuous mode [ 97.186595][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.256480][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.265762][ T49] bond_slave_0: left allmulticast mode [ 97.272084][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.281182][ T49] bond_slave_1: left allmulticast mode [ 97.287801][ T49] bond0 (unregistering): Released all slaves [ 97.338803][ T49] hsr_slave_0: left promiscuous mode [ 97.346419][ T49] hsr_slave_1: left promiscuous mode [ 97.352159][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.359750][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.414020][ T49] team0 (unregistering): Port device team_slave_1 removed [ 97.426039][ T49] team0 (unregistering): Port device team_slave_0 removed [ 97.757686][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.798577][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.848168][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.906313][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.190961][ T49] bridge_slave_1: left allmulticast mode [ 98.196862][ T49] bridge_slave_1: left promiscuous mode [ 98.202772][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.211350][ T49] bridge_slave_0: left allmulticast mode [ 98.217234][ T49] bridge_slave_0: left promiscuous mode [ 98.223274][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.232670][ T49] bridge_slave_1: left allmulticast mode [ 98.238498][ T49] bridge_slave_1: left promiscuous mode [ 98.244855][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.252451][ T49] bridge_slave_0: left allmulticast mode [ 98.258324][ T49] bridge_slave_0: left promiscuous mode [ 98.264266][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.357961][ T49] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 98.367041][ T49] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 98.437506][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.446888][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.456553][ T49] bond0 (unregistering): Released all slaves [ 98.465258][ T49] bond1 (unregistering): Released all slaves [ 98.491788][ T49] hsr_slave_0: left promiscuous mode [ 98.497700][ T49] hsr_slave_1: left promiscuous mode [ 98.503485][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.511234][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.519427][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.526947][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.537504][ T49] hsr_slave_0: left promiscuous mode [ 98.543199][ T49] hsr_slave_1: left promiscuous mode [ 98.548946][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.556570][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.566798][ T49] veth1_macvtap: left promiscuous mode [ 98.572413][ T49] veth0_macvtap: left promiscuous mode [ 98.578109][ T49] veth1_vlan: left promiscuous mode [ 98.583428][ T49] veth0_vlan: left promiscuous mode [ 98.658829][ T49] team0 (unregistering): Port device team_slave_1 removed [ 98.669647][ T49] team0 (unregistering): Port device team_slave_0 removed [ 98.755767][ T49] team0 (unregistering): Port device team_slave_1 removed [ 98.767228][ T49] team0 (unregistering): Port device team_slave_0 removed [ 99.185773][ T28] kauditd_printk_skb: 26286 callbacks suppressed [ 99.185789][ T28] audit: type=1400 audit(1778244192.762:26259): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 99.193083][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.213846][ T28] audit: type=1400 audit(1778244192.772:26260): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 99.220614][ T3022] audit: audit_lost=189 audit_rate_limit=0 audit_backlog_limit=64 [ 99.241524][ T28] audit: type=1400 audit(1778244192.772:26261): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 99.250033][ T3022] audit: backlog limit exceeded [ 99.275706][ T28] audit: type=1400 audit(1778244192.772:26262): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 99.275737][ T28] audit: type=1400 audit(1778244192.772:26263): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 99.275764][ T28] audit: type=1400 audit(1778244192.772:26264): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 99.275790][ T28] audit: type=1400 audit(1778244192.772:26265): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 99.467325][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.526535][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.578549][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.638072][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.725442][ T49] bridge_slave_1: left allmulticast mode [ 99.731166][ T49] bridge_slave_1: left promiscuous mode [ 99.737099][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.745428][ T49] bridge_slave_0: left allmulticast mode [ 99.751198][ T49] bridge_slave_0: left promiscuous mode [ 99.757041][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.848773][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.859258][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.869511][ T49] bond0 (unregistering): Released all slaves [ 99.927438][ T49] hsr_slave_0: left promiscuous mode [ 99.933056][ T49] hsr_slave_1: left promiscuous mode [ 99.939382][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.946881][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.954449][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.961897][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.972553][ T49] veth1_macvtap: left promiscuous mode [ 99.978200][ T49] veth0_macvtap: left promiscuous mode [ 99.983785][ T49] veth1_vlan: left promiscuous mode [ 99.989021][ T49] veth0_vlan: left promiscuous mode [ 100.058038][ T49] team0 (unregistering): Port device team_slave_1 removed [ 100.070276][ T49] team0 (unregistering): Port device team_slave_0 removed [ 100.486510][ T49] IPVS: stop unused estimator thread 0... [ 104.193749][ T28] kauditd_printk_skb: 45357 callbacks suppressed [ 104.193776][ T28] audit: type=1400 audit(1778244197.772:71350): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.209972][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.221368][ T28] audit: type=1400 audit(1778244197.782:71351): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.228200][ T3022] audit: audit_lost=281 audit_rate_limit=0 audit_backlog_limit=64 [ 104.249162][ T28] audit: type=1400 audit(1778244197.782:71352): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.257085][ T3022] audit: backlog limit exceeded [ 104.278093][ T28] audit: type=1400 audit(1778244197.782:71353): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.283710][ T3022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 104.304617][ T28] audit: type=1400 audit(1778244197.782:71354): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 104.311182][ T3022] audit: audit_lost=282 audit_rate_limit=0 audit_backlog_limit=64