last executing test programs: 3.215124877s ago: executing program 1 (id=340): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x80009, 0x510, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x8001ff, 0x0, 0x8, 0x8, 0x23, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) write(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x4, &(0x7f0000000100), 0x21, 0x4b1, &(0x7f0000000980)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000001000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000180), 0xd11, 0x80000) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f0000000200)=0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r9, 0x25, 0x2, @void}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r10, r11}, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x45, 0x0, 0x1, 0xffffffd0}, {0x3d}, {0x16, 0x0, 0x3, 0x20000000}]}) 2.263886668s ago: executing program 4 (id=346): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x0, 0x4000}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) syz_io_uring_setup(0x1e10, &(0x7f00000000c0)={0x0, 0x0, 0x2000, 0x3}, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x1e10, &(0x7f00000000c0)={0x0, 0x0, 0x2000, 0x3}, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x4, 0x6, 0x200800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x25, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x1000000000000000, 0x4, 0x5, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x25, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x1000000000000000, 0x4, 0x5, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0xcb, 0x0, 0x1, 0x0, 0x0, 0x10002, 0x42008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xece}, 0x121d}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r6, 0x0, &(0x7f0000000080)=""/89}, 0x20) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x20}}, 0x24000010) recvfrom$inet_nvme(r7, &(0x7f00000002c0)=""/11, 0xb, 0x10000, &(0x7f0000000500)=@l2tp={0x2, 0x0, @private=0xa010102, 0x1}, 0x80) (async) recvfrom$inet_nvme(r7, &(0x7f00000002c0)=""/11, 0xb, 0x10000, &(0x7f0000000500)=@l2tp={0x2, 0x0, @private=0xa010102, 0x1}, 0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000040)=0x8) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) setpriority(0x2, 0x0, 0x5) (async) setpriority(0x2, 0x0, 0x5) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000400), 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000)={r8, 0xc}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={r8, @in={{0x2, 0x4e23, @empty}}, 0x80000001, 0x8, 0x4, 0x1, 0x52, 0x2, 0xa6}, &(0x7f0000000080)=0x9c) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r9, 0x6, 0xd, 0x0, &(0x7f0000000280)) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@delchain={0x4a4, 0x65, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0x5}, {0x4, 0xffff}, {0xffff, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xfb, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0xddabaa61}, @TCA_CHAIN={0x8, 0xb, 0xb3e}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_POLICE={0x454, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xcf383823}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x292, 0x5, 0x3ff, 0x80, 0x8ddb403, 0x4d, 0x1, 0x10, 0xffffffe4, 0x7, 0x8790, 0x40, 0x3ff, 0x643, 0x4bd, 0xa1, 0xc93, 0x9daf, 0xfffffff9, 0x5, 0xff, 0x6, 0x5, 0x3a80, 0xb3ea, 0x8, 0x8, 0x3eed, 0xfffffffa, 0xffffffc0, 0x53cc, 0x9, 0xf, 0x9, 0x7, 0xff, 0x0, 0x39091250, 0x7, 0x7fff, 0xff, 0x0, 0x6, 0x80, 0x2, 0x1, 0xd, 0x16ed, 0x7f, 0x0, 0x4, 0x1, 0x8000, 0x400000, 0xa241, 0x8, 0x401, 0x80000001, 0x3, 0x7, 0x4, 0x1, 0xffffff7f, 0xfffffffc, 0xd9c, 0x7f, 0xfffffce6, 0xe48, 0x9, 0x8000, 0x4b, 0xc9f, 0x5, 0x3ff, 0x2, 0xffff, 0x7, 0xffffffff, 0x8001, 0x0, 0x8, 0x3, 0x7, 0x8, 0x5, 0xfffffff8, 0x632, 0x2, 0x80, 0x51b, 0xe, 0x401, 0x7, 0xffff7476, 0x0, 0x10001, 0x368, 0xb617, 0xf7ffffff, 0x191, 0x81, 0x8, 0x0, 0x3, 0x7e, 0x5fe, 0x80000000, 0x3, 0xdf, 0x4, 0xfffffffa, 0x7, 0x10000, 0x4, 0x3, 0x3, 0xffffffff, 0x1, 0x6, 0x7, 0x3, 0x100, 0xfffffffd, 0xe1, 0x3, 0xa, 0x3, 0x9, 0x6, 0x7, 0x6, 0x5, 0x9, 0xfffffff1, 0x77a, 0x1, 0x3838, 0x3, 0x5, 0x0, 0xc, 0x3, 0x7fffffff, 0x0, 0x0, 0x7, 0x400, 0x5, 0x2, 0x3, 0x4, 0x400, 0x4, 0xe, 0x5b, 0x6, 0x1ff, 0x9, 0x200, 0xff, 0x2, 0x0, 0x8001, 0x2, 0x8, 0x3, 0x6, 0x400, 0x4, 0xf, 0x9, 0x9, 0x3, 0x10001, 0x1, 0x9, 0xfffffff9, 0x3, 0x26, 0xfffff001, 0xfffffffb, 0x200, 0x8, 0x5, 0x5, 0x4, 0x8, 0x0, 0x200, 0x5, 0x7, 0xe0, 0xd, 0xfffffff9, 0x7, 0x200, 0x4, 0x4, 0x0, 0x7, 0xc4bc, 0x3, 0x200, 0x9, 0xe, 0x414, 0xc, 0x10000, 0x0, 0x6, 0x1, 0xffffffff, 0x1, 0xff, 0x3, 0x6, 0x8, 0x9, 0x7f5, 0x9, 0x10001, 0x3d, 0x6, 0x2, 0x3, 0x4c9, 0x5, 0xfffffff9, 0x4, 0x73c4b588, 0xae4, 0x7, 0x1, 0x4, 0x6, 0x3ff, 0x10000, 0xef4, 0x4, 0x4, 0x5, 0x6, 0x94d, 0x4, 0x3, 0x1ff, 0x3, 0x7f, 0x1, 0x5, 0x8, 0x452, 0x1, 0x29, 0x97, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdd, 0x30000005, 0x0, 0x6, 0xf70, {0xfa, 0x2, 0x9, 0xfff9, 0x1, 0x36}, {0xac, 0x1, 0x4, 0x101, 0x2, 0x8}, 0xffff, 0x4, 0x9}}]}]}}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setrlimit(0x8, &(0x7f0000000000)={0x1, 0xfffffffffffff800}) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}], 0x1, 0x0, 0x0, 0x1) (async) futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}], 0x1, 0x0, 0x0, 0x1) 2.007020976s ago: executing program 0 (id=348): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) getpid() r0 = socket(0x2, 0x3, 0xff) close_range(r0, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'}) sendmmsg$inet(r1, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x1, 0x40014) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r2, 0x22, &(0x7f00000011c0)={0x0}, 0x1) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) sendfile(r6, r5, 0x0, 0x7fffffff) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 1.595711249s ago: executing program 1 (id=354): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x40, 0x1, 0x0, 0x8}, {0x8, 0x0, 0x0, 0x20000003}]}) socket$inet_sctp(0x2, 0x1, 0x84) (async) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0x3) (async, rerun: 64) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) (rerun: 64) 1.595341089s ago: executing program 2 (id=355): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x2ddfdbfb, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1a}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x4000, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {0x0, 0x6558, 0x8}}}}}}, 0x2e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x100, 0x70ad30, 0x25dfdbfd, {0x2, 0x10, 0x20, 0xc0, 0x3, 0x0, 0xfd, 0x1, 0x2a00}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r7, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000f9000007008201", @ANYRES32=r9, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) ptrace(0x10, r11) ptrace$peeksig(0x4209, r11, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000001500)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@bridge_getneigh={0x30, 0x1e, 0x400, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, r6, 0x1410, 0xb004}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x10000}, @IFLA_GROUP={0x8, 0x1b, 0x7}]}, 0x30}}, 0x0) 1.538463911s ago: executing program 2 (id=356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r5, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x3, @empty, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0x6}], 0x1, 0x40002142, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xffffffffffffff88, 0x2, @TCA_SFB_PARMS={0x21, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40106614, &(0x7f0000000140)) 1.489932032s ago: executing program 1 (id=357): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x220, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xa}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @qdisc_kind_options=@q_red={{0x8}, {0x168, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0xa}, @TCA_RED_MAX_P={0x8, 0x3, 0x8}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xc}}, @TCA_RED_MAX_P={0x8, 0x3, 0x8}, @TCA_RED_PARMS={0x14, 0x1, {0x80000001, 0x3, 0xfffff001, 0x2, 0x15, 0x9, 0x4}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x3}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x7f, 0xc8cb4d3f, 0xc, 0x14, 0xa, 0x2}}]}}, @qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x2, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x61bc}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xff}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0xff}]}}, @TCA_RATE={0x6, 0x5, {0x4f, 0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}, @qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x101}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x9}}]}}]}, 0x220}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.451984353s ago: executing program 1 (id=358): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x1) sendto(r0, &(0x7f0000000080)="4ceddb78227532920ddc44f36d4a9d612c5da5f15c01ac35b53b62f26e5e8a27251d03f26b2cfa037692bb4ae70b09c9372ac300187397ed4bc51c198d3fa3adeab96b283aa2edcc82805e08138806c9d223c80de198a38b905f3eb28707f46ba52a2d8ac8e91868b0c4dfe50de484882c8cf628cb2e65fad4e79e167575db1812b81cd25e186723b6e2106bbd94afc8c50bced8b84295a0279d069aa4af1e440032f86193ff005773cac2ae299a4bf05f7d16307ef36d62cda56d6f6d8f2fba530cabfab80187dd0bd2136381797fcef1305647a81add813a3472684eea6fcdfd849a7e231227545d9dc834847065dc8f11852c4e9a8ceb", 0xf8, 0x8000, &(0x7f0000000340)=@generic={0xa, "a378836eaa8ce8c59fcaf45615bc44d25a5416c238fba86b3d4abffbcaab7f3bd986b946b94b6ed8a77349fc6fd1a628cd7b296fc34cb022ba9e74c0c13f223032f45bf52087604e7f8e5b07415369e2ea84d194d69489c847aa28ce0955b59f5e325e407563177f581b0170279c4f7004da8beec52b151f4a8d199f1694"}, 0x80) socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xae}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@fwd={0x7}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0x30, 0x0, 0x5f, 0x5f]}}, 0x0, 0x45}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x2000000000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x3}) syz_emit_ethernet(0x86, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x78, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x6, 0x1f, {0x17, 0x4, 0x3, 0x0, 0x7ff, 0x68, 0x1c62, 0xd9, 0x2f, 0xe58, @empty, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x11, 0x3, [{0x7, 0x9, "a88088bea18f92"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x4c, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x5}, {@loopback, 0x20005}, {@loopback, 0x6345}, {@remote, 0x329}, {@rand_addr=0x64010102, 0x4}]}]}}}}}}}, 0x0) 1.448158014s ago: executing program 1 (id=359): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000002c0)={0x0, 0x0, 0x10001, 0x80005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000002c0), 0x0) 1.397626285s ago: executing program 1 (id=360): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, 0x0, 0x41) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000"], 0x0, 0x6c, 0x0, 0x1, 0x3}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400"], 0x48) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000003c0)=0x40000004) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) io_setup(0x81, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000004c0)=ANY=[]) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdc06, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000) unshare(0x22020600) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0xfffd, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000007cc0), 0x8100, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 1.340073547s ago: executing program 4 (id=363): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000002000010027bd7000000000000a00004000000000004000001400030068737230000000000000000000000067239e2a004e234e236f8fd3f00146633a8d"], 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlinkprop={0x40, 0x6c, 0x400, 0x70bd23, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x3c600, 0x11000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xe}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x189c}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x81}]}, 0x40}, 0x1, 0x0, 0x0, 0x45}, 0x40000) fcntl$setown(r3, 0x8, r1) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) sync_file_range(r6, 0x3, 0xfffffffffffffff7, 0x7) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x74, r7, 0x200, 0x70bd2a, 0x25dfdbf8, {0x3, 0x0, 0x14}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe0cd245125f6260a}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000000)={[{@errors_remount}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@sb={'sb', 0x3d, 0x1}}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x45a, &(0x7f0000000d80)="$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") r8 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f00000005c0)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000380)=@nbd={'/dev/nbd', 0x0}, r9, &(0x7f0000000440)) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000340)={0xc, 0x1}) 1.334635598s ago: executing program 3 (id=364): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000beb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200050000050005000000cc580a"], 0x80}}, 0x24000000) 1.310746148s ago: executing program 3 (id=365): syz_io_uring_setup(0x411a, &(0x7f0000000000)={0x0, 0xb932, 0x1000, 0x1, 0x28b}, 0x0, 0x0, &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000e, 0x810, 0xffffffffffffffff, 0x8000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={r3, 0x800, 0x30}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000200)={r3, 0x7fff, 0x9, 0x3, 0x6, 0x113, 0x5, 0x200, {r5, @in={{0x2, 0x4e21, @multicast2}}, 0x5, 0x1, 0xb62, 0x58e7, 0x5}}, &(0x7f0000000180)=0xb0) sendfile(r0, r4, 0x0, 0x8000fffffffe) fcntl$getownex(r4, 0x10, &(0x7f00000002c0)={0x0, 0x0}) syz_open_procfs$pagemap(r6, &(0x7f0000000300)) 1.156684763s ago: executing program 3 (id=366): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f00000006c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c757466383d312c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757365667265652c73686f72746e616d653d77696e6e742c005a086502454ede48cd0c582ac337a877be0c36a8e60d572dbe625e0680a225abe4d4fc79e83de86dce78be26dba8f6ff0abfb9c2fba30a14b3b206ad905e994c27e6d4fc5d74f88b749758f85a07efcf3e17bd78aad46a325ec58b65332fe45ac5db6e722db0a32946415f0b3403d53ad233d1fe2593f1d4fe07041a0091b2f43c1e87fa638a217f4108c00d47c229ae1229250e"], 0x1, 0x373, &(0x7f0000000340)="$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") truncate(&(0x7f0000000380)='./file2\x00', 0xcb05) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019880)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2a8, 0x258, 0x258, 0x2a8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'geneve0\x00', '\x00', {0xff}, {}, 0x11}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff000000], [], 'pim6reg0\x00', 'erspan0\x00', {}, {}, 0x32}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3d8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[], 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef435000000e3bd6efb440009000e002e0010000000ba80013ffa85f59a0000005a8c3774fa0af3dc59a933c1e6a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f", 0x67}], 0x1}, 0x0) splice(r2, &(0x7f0000000040)=0x10, r4, 0x0, 0x807, 0x0) write$tun(r3, &(0x7f0000000200)={@val={0x0, 0x9ea8}, @val={0x6, 0x3, 0x416, 0x8001, 0xc, 0x1000}, @eth={@remote, @local, @void, {@generic={0x9200, "3d750b49296d28257a96db1fcb1f82cd055cae2e1c8e280d9593bac305613cc8679ad32ee88e5143577af3397e84d648907eecfdb294f56e5d319feccd87f80c27bb50f1a6bdc97c1d2b64f6638724cfff38838e8c66c5e531ae6a829f6088d450f7e53adb55d65e3f264984c0b4754306277d65e771a35b751239885f476f7b9f114f5991"}}}}, 0xa1) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f0000000140)="04c3", 0x2}], 0x1, 0x7) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x52014, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8841}, 0x280048c6) getegid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0), 0x0, 0x46f, &(0x7f0000000bc0)="$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") 1.109086774s ago: executing program 0 (id=367): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000200100000004000480080002000100000008000100000000000400088030000c800c000b80080009"], 0x5c}, 0x1, 0x0, 0x0, 0x40000044}, 0x404c884) 1.086138136s ago: executing program 0 (id=368): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390494db11db05998ddc49289fa4", @ANYRES32=0x0, @ANYBLOB="10000000001000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000001200000214000200fc"], 0x5c}}, 0x0) 1.023740677s ago: executing program 0 (id=369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYRES16=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x8000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x34}}, 0x8004) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) open_by_handle_at(r9, &(0x7f0000000040)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x81, 0x5, 0x4, 0x1, 0x91b8, 0xfff}}, 0x600800) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301010000000000000000020080010800010001", @ANYRES64=r10, @ANYBLOB="6f81508191cc0136440785494ee38fb5fb21962a61d6e5ebc06abb02ef0df6017dd707572a43084208bf188368d3999732242bb2f44c7f103a621a81fbd0e8b375dd1faff6579033a85a", @ANYRES16=r10], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000103050000000000000021000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20000804}, 0x48844) 1.023590207s ago: executing program 4 (id=370): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000002c0)={0x0, 0x0, 0x10001, 0x80005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000002c0), 0x0) 1.019131088s ago: executing program 2 (id=371): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@errors_continue}, {@delalloc}, {@data_err_ignore}, {@errors_remount}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$eJzs3M9vFdUeAPDv3PbSAo9HH49HAg+1gMbGxBYKCgs3mJi40MSIC1k2bSGVCxjahZBGLonBNYl7w9K408StLo0r/wBcuDAxJETZAG68Zu6dub29P3p7S2nT3s8nGThn5sycc2bmzD0zpzMB9K3R9J8k4l8RcS8i9taiyxOM1v57/HBx+snDxekoVyrn/kiq6R6l8Uy+3u4sMlaIKHyWNG7wbh6Yv37j0lSpNHstytX4xMLljyfmr994de7y1MXZi7NXJs+cOXXyxOnXJ19rLvJw10olrbPSej069OnVwwffPn/n3enB5o011qOjfK0/y12TRr5vO3ipcXvbwJ6GcNJar5sbWhhWbTg7DYtp+18sHT1fm520a0PA9lKpVCpDnReXK81utcwBtqwkNrsEwObIf+jT+998qs0pbkT3Y9M9OFu7AXr0cLFyM2L6cb3+g1HI0hSb7m9TK/SZejIaER+W//oynWKl5xC/rlOGAEDf++Fs1g1Moqn/V4gDDen+nY2hjETEfyJiX0T8NyL2R8T/IpalXSaJqKyQ//7mGfX8v81GEQr311q31Uj7f29kY1v5lOWbJxkZyGJ7IvIO8+zxbJ+MRXHowlxp9kSH7e/okn9j/y+d0vzzvmBWjvuDTZ3NmamFqbXVttWDWxGHBpvrnwymBy4fxkki4mBEHOphuyMN4blXvjpcjzTdVnSvf1Wl7XDEOoyfVe5GvFw7/uVYdvyXckwaxycLLeOTE8NRmj0+kZ4Fx9vm8dPPt9/rlH/X+n/3W/Mqb53+/tzTVrsuPf67Gs7/yMdvl+o/kkQk9fHa+YjKQG953P7l8+p2R4+1Llvr+b8j+aAaztvXJ1MLC9dOROxI3mmdP7m0bh7P06f1HzvWvv3vy9ZJ98T/IyI9iZ+LiOcjBvKyH4mIoxHRpmp1P7754kedlq3y/H9m0vrPtL3+LTv+S+P1qwzkK6dzBi4dufekw8Ujq//elY//qWpoLOLv6Hj9S5ZdIlZb0qfegQAAALAFFKL6t/+F8Xq4UBgfrz0D2h+7CqWr8wsvRMSVmdo7AiNRLFyYK83mD+RGopjkzz9HGuKTTfGT2XPjLwZ2VuPj01dLM5tdeehzu6ttPmlp/6nfe3zOC2xB2+g9NKBH3dr/gTsbVBBgw/n9h/7V0P47fdmi7C9lYHvy+w/9q137vxlfr/jugmsGbH0VbRn62srtv/v3NoGtazDer4errz37+Cf0Df1/6Eu9vtffW6Ay1H7RcLT5YsDwsynGzjZ5bUog7Vmt4waLEbG6xDvXkkXeBez8hYdCbxscitZFA7HSWkn77zhERLnjWule6VqeiwfW/eTPv4my3qfNN0vttLjKw/20Aff7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAtvJPAAAA//8tL8+m") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000005ff070000000000000300000d"], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0xa, 0x32e, 0x2000}, 0x28) 962.872469ms ago: executing program 4 (id=372): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x4040010) (async) r0 = socket$inet6(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async, rerun: 32) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) mkdirat(r3, &(0x7f0000000000)='./file0\x00', 0x10e) (async, rerun: 64) r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x111000, 0x59) (rerun: 64) syz_clone3(&(0x7f00000015c0)={0x2000000, &(0x7f0000001500)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0xfffa, {r4}}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) (async) r7 = eventfd2(0x1ff, 0x80800) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) (async) unshare(0x8020400) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r9, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {}, [{0x2, 0x5}], {0x4, 0x6}, [], {0x20, 0x2}, {0x20, 0x7}}, 0x2c, 0x2) io_submit(r6, 0x6, &(0x7f0000001580)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xf, r0, &(0x7f00000000c0)="38ab43e7d7e58c6bc5a83293e3132490ebfd2fdcd37531c20026434d227ee921e4f9a5a4bfae5e1a83299b15cdb8966a3828fe64794ae2569575f5223bcc7a737f8aa0323d9f98b92710947d7623f358f60cf264088adb89001ec9d92e4ee52a889bc62170e5ce38065fd511b5592944e546ac0bbe493cbf20251487603acd13a7abbcb6cc09c7c4d5ffe6270700d6979bbf", 0x92, 0x1, 0x0, 0x3, r7}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000180)="7b9d9b08f805e8958789b5a860abd4d440689eb4229740639ae569ce9f2b2d5075aabeaaf9f833aeb67ceb56e75221a175171ee3cc14fafdda", 0x39, 0x6, 0x0, 0x2, r8}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f0000000280)="9f791bac92d97d0d79501ba9e3c5b845a2f7b697fc0a615c958db7a06b1f3c3d75a18c611773ac09adcf3499fb6f2e917208f19668ffb570ee75c60d8c4708707ba644e03490f9405e8f055e5afdca56ea38b7985132b9a867a683ad592caf4775e4a6b4652e2d5ecf35bda43a6e5d8b8ff3242b697014032959e7b6ba13b1faa52e88d659db04e1eb60eb43f33dab24e7172d253b3a157f6abe5a16f8fbef71f227c042589cfae087e023f06dcab2e80726705bdcdfcaf9778bafbdcc565fc96bc7beca24f4c7753f013506526fb0aa7a41a79609c60b17f3e880ec3e02f304e137d6f4", 0xe4, 0xf, 0x0, 0x0, r9}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1, 0x7fff, r0, &(0x7f00000003c0)="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", 0x1000, 0xffffffffffffffcb, 0x0, 0x1}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x5, 0x3, r0, &(0x7f0000001400)="42bf2f1e3e15bfc3b80f8b6d460f747b9e29f56cebc8f1cf4cfe75ff15b66964830c3568030da1991d439a1b273c54ac2873baebd4a4bef7bf07ed1a55c9d8e65afa838f725aeb4c5e45ffba150349465bb584130085ae67b01245bc5acbb6e3f0bf7099ee10ff586a1c768bb43ac5e1817794c7b39413153e26a10cbb64289db49d6d23149f1cc099072b8f2f42ac98daa35e3031bc90f0195ed06219911a83f8e907fb1f4ead9baf160e3f2a4bbc841a852b79195c529fe407b7", 0xbb, 0x9}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000001500), 0x0, 0x1, 0x0, 0x1}]) 691.796078ms ago: executing program 2 (id=373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170e0000000000000000010000600500070000000000080009000000000014001f00000000000000ffffffffffffffe4000008000a00000000000600020001000000140020"], 0x5c}}, 0x0) 691.597538ms ago: executing program 4 (id=374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0) 689.235578ms ago: executing program 0 (id=375): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@barrier}]}, 0x1, 0x54a, &(0x7f0000000200)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x2900, 0x1cf) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x27dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x50afa, 0x70823}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x804) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f00000003c0)={@desc={0x1, 0x0, @desc2}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a00010029bd7000000000000220200000e45196"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) setns(r3, 0x8000000) write$binfmt_aout(r3, &(0x7f0000000200)={{0x10b, 0x10, 0x7, 0x67, 0x3ba, 0x800, 0x38, 0x11}, "cdce7a1548e5817cca1e171bf9e80df73789e0817ead42265df198a3", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x73c) 648.73946ms ago: executing program 4 (id=376): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x46, 0xe0a00) r1 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x10, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x7, 0x282dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x4000000000000008, 0x6}, 0x0, 0x10002, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f00000003c0)='./file2\x00', 0xc) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = msgget$private(0x0, 0x480) msgsnd(r5, &(0x7f0000000040)=ANY=[], 0x401, 0x0) msgsnd(r5, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0x401, 0x0) msgsnd(r5, &(0x7f0000000a00)=ANY=[@ANYBLOB="01"], 0x401, 0x0) msgctl$IPC_RMID(r5, 0x0) io_submit(0x0, 0x0, &(0x7f00000009c0)) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet6(0xa, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x2000) lsetxattr$trusted_overlay_upper(&(0x7f0000000400)='./file1\x00', &(0x7f0000000500), 0x0, 0xd9, 0x3) umount2(&(0x7f0000000200)='./file1\x00', 0x4) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)="13334dadb8d8507f05c56df3b52c0a1fc6a8790eafb227b2b748a7a90f36b95c4d62ec600cbeddb17f49ad3deebea327e58d6ec295db751812bec372552b3bb6406c9208f909327a6189b210502bfb5eb53636cdd99c80ce82a3", 0x5a}, {&(0x7f0000000240)="dfa0a972bb864728110012a98de0a57eb87e986dd74b264ce5cb52928dee575c7c31cebe012165976a842dde4fcb0c1f758c036a89f0cfb13e3e49969845891cc472897939ad5fc3cd0558aa5ca1bc13bf301625c216cde2990f307c3b2f8f48b412a7537de1112f8bbaba3c8280348a35c651d5a96e6da745f1f150416744f4429e8539c387fb1b73e14e9e26ae060cf4d1f9392273c653e01bcd7d7c3f420bb18a890afc5a87d74bfe66dd10df5fdb", 0xb0}], 0x2}, 0x44051) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x0, 0xfffffffffffffffe, 0x6, 0xb4, @buffer={0x0, 0x56, &(0x7f0000000040)=""/86}, &(0x7f0000000200)="0a823ac6aeb7", 0x0, 0x40002, 0x10023, 0xfffffffb, 0x0}) 637.84967ms ago: executing program 3 (id=377): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240400c4}, 0x0) 583.619241ms ago: executing program 2 (id=378): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x1) sendto(r0, &(0x7f0000000080)="4ceddb78227532920ddc44f36d4a9d612c5da5f15c01ac35b53b62f26e5e8a27251d03f26b2cfa037692bb4ae70b09c9372ac300187397ed4bc51c198d3fa3adeab96b283aa2edcc82805e08138806c9d223c80de198a38b905f3eb28707f46ba52a2d8ac8e91868b0c4dfe50de484882c8cf628cb2e65fad4e79e167575db1812b81cd25e186723b6e2106bbd94afc8c50bced8b84295a0279d069aa4af1e440032f86193ff005773cac2ae299a4bf05f7d16307ef36d62cda56d6f6d8f2fba530cabfab80187dd0bd2136381797fcef1305647a81add813a3472684eea6fcdfd849a7e231227545d9dc834847065dc8f11852c4e9a8ceb", 0xf8, 0x8000, &(0x7f0000000340)=@generic={0xa, "a378836eaa8ce8c59fcaf45615bc44d25a5416c238fba86b3d4abffbcaab7f3bd986b946b94b6ed8a77349fc6fd1a628cd7b296fc34cb022ba9e74c0c13f223032f45bf52087604e7f8e5b07415369e2ea84d194d69489c847aa28ce0955b59f5e325e407563177f581b0170279c4f7004da8beec52b151f4a8d199f1694"}, 0x80) socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xae}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@fwd={0x7}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0x30, 0x0, 0x5f, 0x5f]}}, 0x0, 0x45}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x2000000000000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x78, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x6, 0x1f, {0x17, 0x4, 0x3, 0x0, 0x7ff, 0x68, 0x1c62, 0xd9, 0x2f, 0xe58, @empty, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x11, 0x3, [{0x7, 0x9, "a88088bea18f92"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x4c, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x5}, {@loopback, 0x20005}, {@loopback, 0x6345}, {@remote, 0x329}, {@rand_addr=0x64010102, 0x4}]}]}}}}}}}, 0x0) 530.204653ms ago: executing program 3 (id=379): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 496.652495ms ago: executing program 2 (id=380): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000029c0)=""/4114, 0x1012}], 0x1) (async) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000029c0)=""/4114, 0x1012}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11ce, &(0x7f0000002440)="$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") (async) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11ce, &(0x7f0000002440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14bb42, 0x0) rename(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000f40)='./file2\x00') r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x392) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000004c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000140)={0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r6, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r10}}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r8, &(0x7f0000000400)={0x11, 0x10, 0xfa00, {&(0x7f0000000200), r10}}, 0x18) socket(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x28, 0x6, 0xff, 0x0, 0xfa, 0xfa, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x8, 0x0, [0x6e, 0x7]}}) sendfile(r9, r8, 0x0, 0x7fffffff) (async) sendfile(r9, r8, 0x0, 0x7fffffff) 426.006587ms ago: executing program 3 (id=381): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x80009, 0x510, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x8001ff, 0x0, 0x8, 0x8, 0x23, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) write(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x4, &(0x7f0000000100), 0x21, 0x4b1, &(0x7f0000000980)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000004000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000180), 0xd11, 0x80000) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f0000000200)=0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r9, 0x25, 0x2, @void}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r10, r11}, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x45, 0x0, 0x1, 0xffffffd0}, {0x3d}, {0x16, 0x0, 0x3, 0x20000000}]}) 0s ago: executing program 0 (id=382): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000002c0)={0x0, 0x0, 0x10001, 0x80005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000002c0), 0x0) kernel console output (not intermixed with test programs): [ 19.531932][ T28] audit: type=1400 audit(1774939815.445:62): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.554168][ T28] audit: type=1400 audit(1774939815.445:63): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.576746][ T28] audit: type=1400 audit(1774939815.445:64): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.600017][ T28] audit: type=1400 audit(1774939815.445:65): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.623204][ T28] audit: type=1400 audit(1774939815.455:66): avc: denied { read open } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. [ 24.604769][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 24.604786][ T28] audit: type=1400 audit(1774939820.525:70): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.633913][ T28] audit: type=1400 audit(1774939820.555:71): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.634596][ T3295] cgroup: Unknown subsys name 'net' [ 24.661605][ T28] audit: type=1400 audit(1774939820.585:72): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.813410][ T3295] cgroup: Unknown subsys name 'cpuset' [ 24.819589][ T3295] cgroup: Unknown subsys name 'rlimit' [ 24.939558][ T28] audit: type=1400 audit(1774939820.855:73): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.963046][ T28] audit: type=1400 audit(1774939820.855:74): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.990044][ T28] audit: type=1400 audit(1774939820.855:75): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.010744][ T28] audit: type=1400 audit(1774939820.855:76): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.031306][ T28] audit: type=1400 audit(1774939820.885:77): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.037334][ T3300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.056350][ T28] audit: type=1400 audit(1774939820.885:78): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.088305][ T28] audit: type=1400 audit(1774939820.885:79): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.093069][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.111185][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 27.153480][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.206295][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 27.223405][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 27.261629][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.268815][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.276021][ T3319] bridge_slave_0: entered allmulticast mode [ 27.282332][ T3319] bridge_slave_0: entered promiscuous mode [ 27.300107][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 27.313950][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.321127][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.328433][ T3319] bridge_slave_1: entered allmulticast mode [ 27.334923][ T3319] bridge_slave_1: entered promiscuous mode [ 27.373991][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.381113][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.388566][ T3311] bridge_slave_0: entered allmulticast mode [ 27.395038][ T3311] bridge_slave_0: entered promiscuous mode [ 27.412948][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.425220][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.432313][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.439530][ T3311] bridge_slave_1: entered allmulticast mode [ 27.446088][ T3311] bridge_slave_1: entered promiscuous mode [ 27.455718][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.464900][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.472158][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.479310][ T3317] bridge_slave_0: entered allmulticast mode [ 27.485695][ T3317] bridge_slave_0: entered promiscuous mode [ 27.511384][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.518637][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.525935][ T3317] bridge_slave_1: entered allmulticast mode [ 27.532285][ T3317] bridge_slave_1: entered promiscuous mode [ 27.538542][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.545745][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.552973][ T3314] bridge_slave_0: entered allmulticast mode [ 27.559523][ T3314] bridge_slave_0: entered promiscuous mode [ 27.570333][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.577635][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.584936][ T3314] bridge_slave_1: entered allmulticast mode [ 27.591314][ T3314] bridge_slave_1: entered promiscuous mode [ 27.619443][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.633448][ T3319] team0: Port device team_slave_0 added [ 27.640264][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.655124][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.664540][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.671610][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.678879][ T3310] bridge_slave_0: entered allmulticast mode [ 27.685534][ T3310] bridge_slave_0: entered promiscuous mode [ 27.692432][ T3319] team0: Port device team_slave_1 added [ 27.703654][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.714018][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.728659][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.738057][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.745255][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.752352][ T3310] bridge_slave_1: entered allmulticast mode [ 27.758764][ T3310] bridge_slave_1: entered promiscuous mode [ 27.793848][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.800982][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.827182][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.842922][ T3311] team0: Port device team_slave_0 added [ 27.849581][ T3311] team0: Port device team_slave_1 added [ 27.856172][ T3314] team0: Port device team_slave_0 added [ 27.862492][ T3317] team0: Port device team_slave_0 added [ 27.868964][ T3317] team0: Port device team_slave_1 added [ 27.874843][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.881908][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.907980][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.922818][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.937249][ T3314] team0: Port device team_slave_1 added [ 27.951587][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.958710][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.984939][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.996707][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.019354][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.026450][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.052492][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.070908][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.078106][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.104492][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.119736][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.126859][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.153101][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.164057][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.170999][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.197000][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.212575][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.219760][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.245861][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.268320][ T3319] hsr_slave_0: entered promiscuous mode [ 28.274411][ T3319] hsr_slave_1: entered promiscuous mode [ 28.286287][ T3310] team0: Port device team_slave_0 added [ 28.293501][ T3310] team0: Port device team_slave_1 added [ 28.321372][ T3311] hsr_slave_0: entered promiscuous mode [ 28.327651][ T3311] hsr_slave_1: entered promiscuous mode [ 28.333609][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 28.339322][ T3311] Cannot create hsr debugfs directory [ 28.349786][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.356867][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.383156][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.405724][ T3317] hsr_slave_0: entered promiscuous mode [ 28.411839][ T3317] hsr_slave_1: entered promiscuous mode [ 28.417752][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 28.423504][ T3317] Cannot create hsr debugfs directory [ 28.437593][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.444823][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.471104][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.523241][ T3314] hsr_slave_0: entered promiscuous mode [ 28.529249][ T3314] hsr_slave_1: entered promiscuous mode [ 28.535184][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 28.541003][ T3314] Cannot create hsr debugfs directory [ 28.557223][ T3310] hsr_slave_0: entered promiscuous mode [ 28.563313][ T3310] hsr_slave_1: entered promiscuous mode [ 28.569246][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 28.575035][ T3310] Cannot create hsr debugfs directory [ 28.736558][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.747473][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.756108][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.766755][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.786398][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.798999][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.810908][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.819770][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.846911][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.855672][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.867108][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.876209][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.909458][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.918746][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.931666][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.943899][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.952401][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.989036][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.011286][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.020105][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.029251][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.038572][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.056276][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.063450][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.082533][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.089622][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.108979][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.120707][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.137915][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.154046][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.161210][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.178307][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.194399][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.201828][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.210863][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.218388][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.229360][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.236525][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.271024][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.286599][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.317133][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.324318][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.353810][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.364075][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.371215][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.396277][ T3319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.406893][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.430969][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.441683][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.456940][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.477098][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.484243][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.518639][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.530789][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.537960][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.575674][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.591478][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.609420][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.748570][ T3317] veth0_vlan: entered promiscuous mode [ 29.766276][ T3314] veth0_vlan: entered promiscuous mode [ 29.775349][ T3314] veth1_vlan: entered promiscuous mode [ 29.783905][ T3311] veth0_vlan: entered promiscuous mode [ 29.792324][ T3311] veth1_vlan: entered promiscuous mode [ 29.801064][ T3317] veth1_vlan: entered promiscuous mode [ 29.820916][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.834095][ T3319] veth0_vlan: entered promiscuous mode [ 29.845424][ T3314] veth0_macvtap: entered promiscuous mode [ 29.853100][ T3319] veth1_vlan: entered promiscuous mode [ 29.859341][ T3314] veth1_macvtap: entered promiscuous mode [ 29.885760][ T3317] veth0_macvtap: entered promiscuous mode [ 29.894553][ T3311] veth0_macvtap: entered promiscuous mode [ 29.902648][ T3311] veth1_macvtap: entered promiscuous mode [ 29.913409][ T3317] veth1_macvtap: entered promiscuous mode [ 29.920972][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.942311][ T3319] veth0_macvtap: entered promiscuous mode [ 29.950933][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.965983][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.976390][ T3319] veth1_macvtap: entered promiscuous mode [ 29.984641][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.993693][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.011617][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.021086][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.034120][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.044806][ T3310] veth0_vlan: entered promiscuous mode [ 30.051196][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.062632][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.077373][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 30.077387][ T28] audit: type=1400 audit(1774939825.995:90): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.kYd5XM/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.111049][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.120080][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.128438][ T28] audit: type=1400 audit(1774939825.995:91): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.151962][ T28] audit: type=1400 audit(1774939825.995:92): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.kYd5XM/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.152128][ T3310] veth1_vlan: entered promiscuous mode [ 30.177839][ T28] audit: type=1400 audit(1774939825.995:93): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.206703][ T28] audit: type=1400 audit(1774939825.995:94): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.kYd5XM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.207215][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.235162][ T28] audit: type=1400 audit(1774939825.995:95): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.kYd5XM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.256292][ T3310] veth0_macvtap: entered promiscuous mode [ 30.281294][ T28] audit: type=1400 audit(1774939825.995:96): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.301371][ T28] audit: type=1400 audit(1774939826.025:97): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.327579][ T3310] veth1_macvtap: entered promiscuous mode [ 30.332986][ T28] audit: type=1400 audit(1774939826.025:98): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=4547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 30.336790][ T881] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.371461][ T28] audit: type=1400 audit(1774939826.295:99): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.405049][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.412551][ T881] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.431510][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.447782][ T881] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.459958][ T881] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.476382][ T3479] Zero length message leads to an empty skb [ 30.490905][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.511949][ C0] hrtimer: interrupt took 31004 ns [ 30.517969][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.539954][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.557923][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.583603][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.602327][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.627080][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.642792][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.704424][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.752446][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.775502][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.800680][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.815541][ T3498] ======================================================= [ 30.815541][ T3498] WARNING: The mand mount option has been deprecated and [ 30.815541][ T3498] and is ignored by this kernel. Remove the mand [ 30.815541][ T3498] option from the mount to silence this warning. [ 30.815541][ T3498] ======================================================= [ 30.976159][ T3479] loop2: detected capacity change from 0 to 512 [ 31.035083][ T3479] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.085915][ T3518] loop1: detected capacity change from 0 to 1024 [ 31.092222][ T3479] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 31.121027][ T3518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.187999][ T3479] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 31.208033][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.218035][ T3479] EXT4-fs (loop2): 1 truncate cleaned up [ 31.237319][ T3479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.316830][ T3528] capability: warning: `syz.1.14' uses 32-bit capabilities (legacy support in use) [ 31.367316][ T3528] program syz.1.14 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 31.484343][ T3513] loop0: detected capacity change from 0 to 512 [ 31.485843][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.518537][ T3513] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 31.723420][ T3513] EXT4-fs (loop0): 1 truncate cleaned up [ 31.736928][ T3513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.896436][ T3530] loop1: detected capacity change from 0 to 512 [ 32.148556][ T3530] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.220949][ T3513] syz.0.11 (3513) used greatest stack depth: 9928 bytes left [ 32.473641][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.558418][ T3530] EXT4-fs (loop1): 1 truncate cleaned up [ 32.577050][ T3554] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21'. [ 32.616991][ T3556] netlink: 40 bytes leftover after parsing attributes in process `syz.0.20'. [ 32.695030][ T3530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.750483][ T3558] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3558 comm=syz.2.22 [ 33.146848][ T3564] loop4: detected capacity change from 0 to 256 [ 33.670591][ T3576] netlink: 48 bytes leftover after parsing attributes in process `syz.4.27'. [ 33.717695][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.779159][ T3578] loop1: detected capacity change from 0 to 128 [ 33.849487][ T3578] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.901915][ T3578] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.595149][ T3588] bond1: (slave bond_slave_1): Device is not our slave [ 34.606182][ T3568] loop2: detected capacity change from 0 to 512 [ 34.646650][ T3586] syz.1.28 (3586) used greatest stack depth: 9808 bytes left [ 34.684292][ T3588] bond1: option active_slave: invalid value (bond_slave_1) [ 34.748292][ T3568] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.860677][ T3568] EXT4-fs (loop2): 1 truncate cleaned up [ 34.920337][ T3588] bond1 (unregistering): Released all slaves [ 34.930797][ T3568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.294531][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 35.294551][ T28] audit: type=1400 audit(1774939831.215:166): avc: denied { create } for pid=3600 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.405033][ T3605] loop4: detected capacity change from 0 to 512 [ 35.460682][ T3607] syz.3.35 uses obsolete (PF_INET,SOCK_PACKET) [ 35.468731][ T3605] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.36: iget: bad i_size value: 38620345925642 [ 35.521032][ T3605] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.521248][ T3605] EXT4-fs (loop4): Remounting filesystem read-only [ 35.530518][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 35.530538][ C1] EXT4-fs (loop4): initial error at time 1774939831: ext4_orphan_get:1397: inode 15 [ 35.530589][ C1] EXT4-fs (loop4): last error at time 1774939831: ext4_orphan_get:1397: inode 15 [ 35.622035][ T28] audit: type=1400 audit(1774939831.535:167): avc: denied { ioctl } for pid=3600 comm="syz.3.35" path="socket:[5349]" dev="sockfs" ino=5349 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.678259][ T3605] EXT4-fs (loop4): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.701075][ T28] audit: type=1400 audit(1774939831.565:168): avc: denied { bind } for pid=3600 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.733141][ T3310] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.777911][ T28] audit: type=1400 audit(1774939831.565:169): avc: denied { name_bind } for pid=3600 comm="syz.3.35" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 35.803862][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 35.804378][ T28] audit: type=1400 audit(1774939831.565:170): avc: denied { node_bind } for pid=3600 comm="syz.3.35" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 35.851623][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.866003][ T28] audit: type=1400 audit(1774939831.645:171): avc: denied { write } for pid=3600 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 35.953726][ T28] audit: type=1400 audit(1774939831.715:172): avc: denied { create } for pid=3609 comm="syz.1.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.997950][ T3627] netlink: 88 bytes leftover after parsing attributes in process `syz.3.43'. [ 36.020480][ T28] audit: type=1400 audit(1774939831.715:173): avc: denied { ioctl } for pid=3609 comm="syz.1.37" path="socket:[4744]" dev="sockfs" ino=4744 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.053350][ T3629] random: crng reseeded on system resumption [ 36.076599][ T28] audit: type=1400 audit(1774939831.975:174): avc: denied { write } for pid=3624 comm="syz.2.42" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 36.120975][ T28] audit: type=1400 audit(1774939831.975:175): avc: denied { open } for pid=3624 comm="syz.2.42" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 36.121308][ T3629] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 36.206022][ T3629] pim6reg0: linktype set to 270 [ 36.225269][ T3632] bond_slave_0: entered promiscuous mode [ 36.231042][ T3632] bond_slave_1: entered promiscuous mode [ 36.270281][ T3632] vlan2: entered promiscuous mode [ 36.292786][ T3632] bond0: entered promiscuous mode [ 36.393817][ T3636] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 36.414278][ T3615] loop4: detected capacity change from 0 to 512 [ 36.504357][ T3615] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.535941][ T3636] bond1 (unregistering): Released all slaves [ 36.574547][ T3615] EXT4-fs (loop4): 1 truncate cleaned up [ 36.628773][ T3615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.755189][ T3651] FAULT_INJECTION: forcing a failure. [ 36.755189][ T3651] name failslab, interval 1, probability 0, space 0, times 1 [ 36.782764][ T3651] CPU: 0 UID: 0 PID: 3651 Comm: syz.3.48 Not tainted syzkaller #0 PREEMPT(full) [ 36.782927][ T3651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 36.782939][ T3651] Call Trace: [ 36.782946][ T3651] [ 36.782955][ T3651] __dump_stack+0x1d/0x30 [ 36.782987][ T3651] dump_stack_lvl+0x95/0xd0 [ 36.783022][ T3651] dump_stack+0x15/0x1b [ 36.783046][ T3651] should_fail_ex+0x263/0x280 [ 36.783077][ T3651] should_failslab+0x8c/0xb0 [ 36.783143][ T3651] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 36.783171][ T3651] ? __alloc_skb+0x2d6/0x690 [ 36.783258][ T3651] __alloc_skb+0x2d6/0x690 [ 36.783288][ T3651] ? __alloc_skb+0x200/0x690 [ 36.783317][ T3651] netlink_alloc_large_skb+0xbf/0xf0 [ 36.783415][ T3651] netlink_sendmsg+0x40c/0x6f0 [ 36.783440][ T3651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 36.783470][ T3651] ____sys_sendmsg+0x563/0x5b0 [ 36.783509][ T3651] ___sys_sendmsg+0x195/0x1e0 [ 36.783542][ T3651] __x64_sys_sendmsg+0xd4/0x160 [ 36.783571][ T3651] x64_sys_call+0x194c/0x3020 [ 36.783600][ T3651] do_syscall_64+0x12c/0x370 [ 36.783645][ T3651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.783667][ T3651] RIP: 0033:0x7fc458a8c819 [ 36.783687][ T3651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.783721][ T3651] RSP: 002b:00007fc4574e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.783743][ T3651] RAX: ffffffffffffffda RBX: 00007fc458d05fa0 RCX: 00007fc458a8c819 [ 36.783758][ T3651] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 36.783770][ T3651] RBP: 00007fc4574e7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.783784][ T3651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.783808][ T3651] R13: 00007fc458d06038 R14: 00007fc458d05fa0 R15: 00007ffd68fb26e8 [ 36.783908][ T3651] [ 37.119805][ T3660] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.289698][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.325452][ T3669] loop0: detected capacity change from 0 to 512 [ 37.374864][ T3669] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.434791][ T3669] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.53: invalid indirect mapped block 3120562176 (level 1) [ 37.488135][ T3676] Cannot find set identified by id 0 to match [ 37.533083][ T3669] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 37.542715][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 37.558584][ C1] EXT4-fs (loop0): initial error at time 1774939833: ext4_free_branches:1023: inode 11 [ 37.568420][ C1] EXT4-fs (loop0): last error at time 1774939833: ext4_free_branches:1023: inode 11 [ 37.575162][ T3678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65532 sclass=netlink_route_socket pid=3678 comm=syz.1.57 [ 37.578051][ T3669] EXT4-fs (loop0): Remounting filesystem read-only [ 37.665076][ T3669] EXT4-fs (loop0): 1 truncate cleaned up [ 37.671325][ T3669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.820978][ T3682] loop1: detected capacity change from 0 to 512 [ 37.862991][ T3682] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.58: iget: bad i_size value: 38620345925642 [ 37.901782][ T3682] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.901976][ T3682] EXT4-fs (loop1): Remounting filesystem read-only [ 37.911342][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 37.911366][ C1] EXT4-fs (loop1): initial error at time 1774939833: ext4_orphan_get:1397: inode 15 [ 37.911406][ C1] EXT4-fs (loop1): last error at time 1774939833: ext4_orphan_get:1397: inode 15 [ 37.955573][ T3682] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.068344][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 38.081647][ T3692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.63'. [ 38.098323][ T3694] netlink: 'syz.4.64': attribute type 1 has an invalid length. [ 38.108016][ T3695] netlink: 'syz.4.64': attribute type 1 has an invalid length. [ 38.121188][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.139704][ T3692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.63'. [ 38.207437][ T3701] loop1: detected capacity change from 0 to 256 [ 38.236720][ T3705] loop0: detected capacity change from 0 to 128 [ 38.259527][ T3708] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 38.276926][ T3708] loop2: detected capacity change from 0 to 512 [ 38.304055][ T3705] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.320114][ T3708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.342579][ T3712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 38.381960][ T3705] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.414193][ T3708] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.438985][ T3701] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.555339][ T3701] netlink: 'syz.1.62': attribute type 39 has an invalid length. [ 38.629790][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.726340][ T3722] process 'syz.0.65' launched './file1' with NULL argv: empty string added [ 38.727359][ T3722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 38.737486][ T3723] loop3: detected capacity change from 0 to 512 [ 38.739103][ T3723] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.745928][ T3723] EXT4-fs (loop3): 1 orphan inode deleted [ 38.745956][ T3723] EXT4-fs (loop3): 1 truncate cleaned up [ 38.746807][ T3723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.752636][ T3723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.991915][ T3730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.992302][ T3730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.163676][ T3728] FAT-fs (loop1): error, invalid FAT chain (i_pos 196, last_block 8200) [ 39.163705][ T3728] FAT-fs (loop1): Filesystem has been set read-only [ 39.251024][ T3735] loop4: detected capacity change from 0 to 128 [ 39.253627][ T3735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.73'. [ 39.267699][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.596894][ T3740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.74'. [ 39.635521][ T3750] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.656721][ T3753] netlink: 88 bytes leftover after parsing attributes in process `syz.0.78'. [ 39.702344][ T3757] loop4: detected capacity change from 0 to 128 [ 39.722252][ T3751] netlink: 112 bytes leftover after parsing attributes in process `syz.1.77'. [ 39.733705][ T3757] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.749665][ T3757] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.664341][ T3788] tipc: Started in network mode [ 40.669423][ T3788] tipc: Node identity 0000003a000000000000000000000001, cluster identity 4711 [ 40.678905][ T3788] tipc: Enabling of bearer rejected, failed to enable media [ 40.688727][ T3789] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 40.696455][ T28] kauditd_printk_skb: 159 callbacks suppressed [ 40.696468][ T28] audit: type=1400 audit(1774939836.545:335): avc: denied { getopt } for pid=3780 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.738831][ T28] audit: type=1400 audit(1774939836.545:336): avc: denied { ioctl } for pid=3782 comm="syz.3.88" path="socket:[6150]" dev="sockfs" ino=6150 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.879236][ T28] audit: type=1400 audit(1774939836.645:337): avc: denied { setopt } for pid=3782 comm="syz.3.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.608869][ T28] audit: type=1400 audit(1774939837.505:338): avc: denied { bpf } for pid=3790 comm="syz.1.90" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.649541][ T28] audit: type=1400 audit(1774939837.505:339): avc: denied { perfmon } for pid=3790 comm="syz.1.90" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.686684][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.707331][ T28] audit: type=1326 audit(1774939837.625:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3794 comm="syz.3.91" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc458a8c819 code=0x0 [ 41.821167][ T28] audit: type=1400 audit(1774939837.735:341): avc: denied { bind } for pid=3794 comm="syz.3.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.870009][ T3802] loop4: detected capacity change from 0 to 164 [ 41.878295][ T28] audit: type=1400 audit(1774939837.735:342): avc: denied { write } for pid=3794 comm="syz.3.91" path="socket:[6189]" dev="sockfs" ino=6189 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.909691][ T28] audit: type=1400 audit(1774939837.805:343): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.930402][ T28] audit: type=1400 audit(1774939837.835:344): avc: denied { create } for pid=3803 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 42.028117][ T3807] loop0: detected capacity change from 0 to 2048 [ 42.067823][ T3807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.127179][ T3807] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.080713][ T3840] netlink: 32 bytes leftover after parsing attributes in process `syz.1.104'. [ 43.400204][ T3849] loop4: detected capacity change from 0 to 512 [ 43.452288][ T3837] loop3: detected capacity change from 0 to 512 [ 43.509888][ T3837] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.678985][ T3864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 43.695412][ T3837] EXT4-fs (loop3): 1 truncate cleaned up [ 43.710362][ T3867] netlink: 88 bytes leftover after parsing attributes in process `syz.2.113'. [ 43.753166][ T3837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.917489][ T3878] loop2: detected capacity change from 0 to 764 [ 43.936723][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.952992][ T3878] iso9660: Unknown parameter '»°.„Õp„;Æ/ëêÌë@€ž`GztTSÂdX«¢Ëx' [ 43.975432][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.053270][ T3884] tipc: Started in network mode [ 44.066403][ T3884] tipc: Node identity 0000005f000000000000000000000001, cluster identity 4711 [ 44.083658][ T3884] tipc: Enabling of bearer rejected, failed to enable media [ 44.105250][ T3888] loop3: detected capacity change from 0 to 128 [ 44.190268][ T3888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.118'. [ 44.315209][ T3900] loop2: detected capacity change from 0 to 128 [ 44.362569][ T3900] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.401541][ T3900] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.632093][ T3909] netlink: 32 bytes leftover after parsing attributes in process `syz.3.126'. [ 44.986202][ T3916] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-xor(2) [ 45.513696][ T3916] bond1 (unregistering): Released all slaves [ 45.543215][ T3920] syz.0.129: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 45.642838][ T3920] CPU: 1 UID: 0 PID: 3920 Comm: syz.0.129 Not tainted syzkaller #0 PREEMPT(full) [ 45.642953][ T3920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 45.642969][ T3920] Call Trace: [ 45.642978][ T3920] [ 45.643031][ T3920] __dump_stack+0x1d/0x30 [ 45.643073][ T3920] dump_stack_lvl+0x95/0xd0 [ 45.643126][ T3920] dump_stack+0x15/0x1b [ 45.643154][ T3920] warn_alloc+0x145/0x1c0 [ 45.643238][ T3920] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 45.643280][ T3920] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 45.643343][ T3920] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 45.643427][ T3920] ? slow_avc_audit+0x14c/0x190 [ 45.643456][ T3920] ? should_fail_ex+0x30/0x280 [ 45.643480][ T3920] ? xskq_create+0x36/0xe0 [ 45.643538][ T3920] vmalloc_user_noprof+0x7d/0xb0 [ 45.643570][ T3920] ? xskq_create+0x80/0xe0 [ 45.643600][ T3920] xskq_create+0x80/0xe0 [ 45.643713][ T3920] xsk_init_queue+0x70/0xb0 [ 45.643742][ T3920] xsk_setsockopt+0x3f5/0x640 [ 45.643827][ T3920] ? __pfx_xsk_setsockopt+0x10/0x10 [ 45.643856][ T3920] __sys_setsockopt+0x184/0x200 [ 45.643949][ T3920] __x64_sys_setsockopt+0x64/0x80 [ 45.643978][ T3920] x64_sys_call+0x2327/0x3020 [ 45.644002][ T3920] do_syscall_64+0x12c/0x370 [ 45.644035][ T3920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.644062][ T3920] RIP: 0033:0x7f381033c819 [ 45.644082][ T3920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.644156][ T3920] RSP: 002b:00007f380ed6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 45.644183][ T3920] RAX: ffffffffffffffda RBX: 00007f38105b6090 RCX: 00007f381033c819 [ 45.644200][ T3920] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 45.644216][ T3920] RBP: 00007f38103d2c91 R08: 0000000000000004 R09: 0000000000000000 [ 45.644250][ T3920] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.644265][ T3920] R13: 00007f38105b6128 R14: 00007f38105b6090 R15: 00007ffe574c0d48 [ 45.644286][ T3920] [ 45.644794][ T3920] Mem-Info: [ 46.535099][ T3929] loop1: detected capacity change from 0 to 512 [ 46.542395][ T3920] active_anon:22638 inactive_anon:0 isolated_anon:0 [ 46.542395][ T3920] active_file:22167 inactive_file:2303 isolated_file:0 [ 46.542395][ T3920] unevictable:0 dirty:1663 writeback:0 [ 46.542395][ T3920] slab_reclaimable:3281 slab_unreclaimable:15348 [ 46.542395][ T3920] mapped:45372 shmem:13914 pagetables:3189 [ 46.542395][ T3920] sec_pagetables:0 bounce:0 [ 46.542395][ T3920] kernel_misc_reclaimable:0 [ 46.542395][ T3920] free:1856246 free_pcp:15159 free_cma:0 [ 47.128887][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 47.128904][ T28] audit: type=1400 audit(1774939842.515:364): avc: denied { connect } for pid=3923 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.131359][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.168684][ T3929] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.224192][ T28] audit: type=1326 audit(1774939843.135:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef92ccc819 code=0x7ffc0000 [ 47.225522][ T3920] Node 0 active_anon:80324kB inactive_anon:0kB active_file:88668kB inactive_file:9212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:161772kB dirty:6652kB writeback:0kB shmem:44756kB kernel_stack:3440kB pagetables:12608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 47.247914][ T28] audit: type=1326 audit(1774939843.135:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef92ccc819 code=0x7ffc0000 [ 47.278447][ T3920] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 47.329043][ T3920] lowmem_reserve[]: 0 2879 7857 7857 [ 47.334723][ T3934] loop5: detected capacity change from 0 to 7 [ 47.358747][ T3939] loop2: detected capacity change from 0 to 2048 [ 47.365437][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 47.375065][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.405677][ T3920] Node 0 DMA32 free:2944512kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948140kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 47.415050][ T28] audit: type=1326 audit(1774939843.135:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fef92ccc819 code=0x7ffc0000 [ 47.438530][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 47.461258][ T28] audit: type=1326 audit(1774939843.135:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef92ccc819 code=0x7ffc0000 [ 47.470389][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.470754][ T3934] loop5: unable to read partition table [ 47.494509][ T28] audit: type=1326 audit(1774939843.135:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef92ccc819 code=0x7ffc0000 [ 47.536964][ T3304] Alternate GPT is invalid, using primary GPT. [ 47.543739][ T3304] loop2: p2 p3 p7 [ 47.556301][ T28] audit: type=1326 audit(1774939843.135:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fef92ccc819 code=0x7ffc0000 [ 47.565329][ T3920] lowmem_reserve[]: [ 47.579799][ T28] audit: type=1326 audit(1774939843.135:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef92ccc819 code=0x7ffc0000 [ 47.611488][ T28] audit: type=1326 audit(1774939843.135:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef92ccc819 code=0x7ffc0000 [ 47.624852][ T3920] 0 [ 47.636143][ T3929] EXT4-fs (loop1): 1 truncate cleaned up [ 47.646948][ T3939] Alternate GPT is invalid, using primary GPT. [ 47.653654][ T3939] loop2: p2 p3 p7 [ 47.656837][ T3920] 0 4978 4978 [ 47.661119][ T3920] Node 0 Normal free:4481396kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:91228kB inactive_anon:0kB active_file:88668kB inactive_file:9328kB unevictable:0kB writepending:2128kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:39784kB local_pcp:28532kB free_cma:0kB [ 47.661941][ T28] audit: type=1326 audit(1774939843.135:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fef92ccc819 code=0x7ffc0000 [ 47.702843][ T3929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.731995][ T3934] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 47.745061][ T3000] Alternate GPT is invalid, using primary GPT. [ 47.751438][ T3000] loop2: p2 p3 p7 [ 47.756648][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 47.766253][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.775186][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 47.784886][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.794400][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 47.794744][ T3920] lowmem_reserve[]: [ 47.804103][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.804518][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 47.817327][ T3920] 0 [ 47.825590][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.826112][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 47.845750][ T3920] 0 0 0 [ 47.845890][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.852618][ T3920] Node 0 [ 47.884071][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 47.884665][ T3920] DMA: [ 47.888926][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 47.897252][ T3920] 0*4kB [ 47.901451][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 47.909563][ T3920] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 47.967172][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 47.967270][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 47.987344][ T3920] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 1*16kB (M) 3*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944512kB [ 47.988593][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 48.030067][ T3920] Node 0 Normal: 42*4kB (UME) 18*8kB (UE) 26*16kB (UME) 65*32kB (UME) 46*64kB (UME) 37*128kB (UME) 34*256kB (UM) 21*512kB (UM) 14*1024kB (UM) 15*2048kB (UME) 1075*4096kB (UM) = 4478200kB [ 48.043970][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 48.050365][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 48.064545][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 48.104984][ T3920] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 48.123805][ T3920] 40670 total pagecache pages [ 48.128584][ T3920] 0 pages in swap cache [ 48.135200][ T3920] Free swap = 124996kB [ 48.156240][ T3920] Total swap = 124996kB [ 48.164030][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.186176][ T3920] 2097051 pages RAM [ 48.198152][ T3920] 0 pages HighMem/MovableOnly [ 48.211981][ T3920] 81616 pages reserved [ 48.347387][ T3963] loop4: detected capacity change from 0 to 512 [ 48.650887][ T3985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.150'. [ 48.736559][ T3988] netlink: 40 bytes leftover after parsing attributes in process `syz.3.151'. [ 48.925600][ T4002] loop2: detected capacity change from 0 to 512 [ 48.927491][ T4001] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 48.945295][ T4002] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.157: iget: bad i_size value: 38620345925642 [ 48.971298][ T3977] loop0: detected capacity change from 0 to 512 [ 49.025301][ T3977] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.036937][ T4002] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.037186][ T4002] EXT4-fs (loop2): Remounting filesystem read-only [ 49.046458][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 49.046480][ C0] EXT4-fs (loop2): initial error at time 1774939844: ext4_orphan_get:1397: inode 15 [ 49.046513][ C0] EXT4-fs (loop2): last error at time 1774939844: ext4_orphan_get:1397: inode 15 [ 49.108252][ T4002] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.126407][ T3977] EXT4-fs (loop0): 1 truncate cleaned up [ 49.140098][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 49.151008][ T3977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.188938][ T4007] loop3: detected capacity change from 0 to 128 [ 49.204376][ T4007] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.262483][ T4007] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.423779][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.117329][ T4018] netlink: 172 bytes leftover after parsing attributes in process `syz.3.159'. [ 51.127446][ T4018] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 52.073454][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.088624][ T4027] netlink: 48 bytes leftover after parsing attributes in process `syz.1.167'. [ 52.097810][ T4025] loop2: detected capacity change from 0 to 128 [ 52.118687][ T4029] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 52.133070][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 52.133087][ T28] audit: type=1326 audit(1774939848.055:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef92ccc819 code=0x7ffc0000 [ 52.163246][ T28] audit: type=1326 audit(1774939848.055:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef92ccc819 code=0x7ffc0000 [ 52.203674][ T28] audit: type=1326 audit(1774939848.055:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef92ccc819 code=0x7ffc0000 [ 52.241546][ T4033] loop1: detected capacity change from 0 to 2048 [ 52.248646][ T28] audit: type=1326 audit(1774939848.055:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fef92ccc819 code=0x7ffc0000 [ 52.320958][ T28] audit: type=1326 audit(1774939848.055:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef92ccc819 code=0x7ffc0000 [ 52.352565][ T4033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.370196][ T4033] audit: audit_backlog=65 > audit_backlog_limit=64 [ 52.377353][ T4033] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 52.377646][ T28] audit: type=1326 audit(1774939848.055:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef92ccc819 code=0x7ffc0000 [ 52.385128][ T4033] audit: backlog limit exceeded [ 52.413931][ T28] audit: type=1326 audit(1774939848.055:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4024 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef92ccc819 code=0x7ffc0000 [ 52.697912][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.058948][ T4057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 53.073007][ T4059] loop2: detected capacity change from 0 to 512 [ 53.097964][ T4059] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.173: iget: bad extra_isize 58 (inode size 256) [ 53.159004][ T4059] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 53.159181][ T4059] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.173: error while reading EA inode 11 err=-117 [ 53.168413][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 53.168430][ C1] EXT4-fs (loop2): initial error at time 1774939849: ext4_xattr_inode_iget:441: inode 11 [ 53.168463][ C1] EXT4-fs (loop2): last error at time 1774939849: ext4_xattr_inode_iget:441: inode 11 [ 53.265745][ T4059] loop2: lost filesystem error report for type 5 error -117 [ 53.265942][ T4059] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.173: iget: bad extra_isize 58 (inode size 256) [ 53.287547][ T4059] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 53.291448][ T4059] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.173: error while reading EA inode 11 err=-117 [ 53.312996][ T4059] loop2: lost filesystem error report for type 5 error -117 [ 53.324432][ T4059] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.173: iget: bad extra_isize 58 (inode size 256) [ 53.349851][ T4065] loop3: detected capacity change from 0 to 128 [ 53.356186][ T4059] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 53.356545][ T4059] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.173: error while reading EA inode 18 err=-117 [ 53.387967][ T4065] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.401409][ T4059] loop2: lost filesystem error report for type 5 error -117 [ 53.406350][ T4065] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 53.446702][ T4059] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.173: iget: bad extra_isize 58 (inode size 256) [ 53.469367][ T4059] loop2: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 53.485957][ T4063] loop4: detected capacity change from 0 to 512 [ 53.570370][ T4059] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.173: error while reading EA inode 18 err=-117 [ 53.589543][ T4063] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c018, mo2=0002] [ 53.598185][ T4063] ------------[ cut here ]------------ [ 53.603771][ T4063] EA inode 11 i_nlink=0 [ 53.603786][ T4063] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.4.175/4063 [ 53.604392][ T4059] loop2: lost filesystem error report for type 5 error -117 [ 53.608128][ T4063] Modules linked in: [ 53.630034][ T4063] CPU: 0 UID: 0 PID: 4063 Comm: syz.4.175 Not tainted syzkaller #0 PREEMPT(full) [ 53.639406][ T4063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 53.648119][ T4059] EXT4-fs (loop2): 1 orphan inode deleted [ 53.649513][ T4063] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 53.661955][ T4063] Code: 54 36 99 ff 4c 8d 2d 2d a2 5d 05 49 8d 7e 40 e8 d4 cd b5 ff 49 8b 6e 40 4c 89 e7 e8 08 c9 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 af c4 dd 03 66 66 66 66 66 66 2e [ 53.663133][ T4059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.681839][ T4063] RSP: 0018:ffffc90000e0f778 EFLAGS: 00010246 [ 53.681868][ T4063] RAX: ffff888101d5ac48 RBX: ffff88811b030ec8 RCX: ffffffff81c02ae8 [ 53.708479][ T4063] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871dcd00 [ 53.716525][ T4063] RBP: 000000000000000b R08: 000188811b030e7b R09: 0000000000000000 [ 53.724553][ T4063] R10: ffffc90000e0f6a8 R11: 0001c90000e0f6a8 R12: ffff88811b030e78 [ 53.732552][ T4063] R13: ffffffff871dcd00 R14: ffff88811b030e30 R15: 0000000000000001 [ 53.740675][ T4063] FS: 00007f1f2374e6c0(0000) GS:ffff8882ae8d8000(0000) knlGS:0000000000000000 [ 53.749857][ T4063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.756519][ T4063] CR2: 00007fa97aa74000 CR3: 000000011b5a0000 CR4: 00000000003506f0 [ 53.764637][ T4063] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.772637][ T4063] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 53.780681][ T4063] Call Trace: [ 53.784024][ T4063] [ 53.787057][ T4063] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 53.793158][ T4063] ? errseq_check+0x2c/0x50 [ 53.797787][ T4063] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 53.803336][ T4063] ext4_evict_inode+0xac1/0xe40 [ 53.808222][ T4063] ? __pfx_ext4_evict_inode+0x10/0x10 [ 53.813661][ T4063] evict+0x2af/0x510 [ 53.817693][ T4063] ? __ext4_msg+0x1aa/0x1c0 [ 53.822278][ T4063] iput+0x41a/0x580 [ 53.826214][ T4063] ext4_process_orphan+0x1a9/0x1c0 [ 53.831384][ T4063] ext4_orphan_cleanup+0x6a8/0xa00 [ 53.836661][ T4063] ext4_fill_super+0x3414/0x37c0 [ 53.841741][ T4063] ? set_blocksize+0x14c/0x270 [ 53.846589][ T4063] ? setup_bdev_super+0x30e/0x370 [ 53.851636][ T4063] ? __pfx_ext4_fill_super+0x10/0x10 [ 53.857075][ T4063] get_tree_bdev_flags+0x291/0x300 [ 53.862289][ T4063] ? __pfx_ext4_fill_super+0x10/0x10 [ 53.867764][ T4063] get_tree_bdev+0x1f/0x30 [ 53.872454][ T4063] ext4_get_tree+0x1c/0x30 [ 53.876948][ T4063] vfs_get_tree+0x57/0x1d0 [ 53.881392][ T4063] do_new_mount+0x288/0x8d0 [ 53.885981][ T4063] path_mount+0x4d0/0xbc0 [ 53.890342][ T4063] __se_sys_mount+0x28c/0x2e0 [ 53.895273][ T4063] __x64_sys_mount+0x67/0x80 [ 53.899897][ T4063] x64_sys_call+0x2d61/0x3020 [ 53.904643][ T4063] do_syscall_64+0x12c/0x370 [ 53.909464][ T4063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.915426][ T4063] RIP: 0033:0x7f1f24d1da8a [ 53.919960][ T4063] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.939904][ T4063] RSP: 002b:00007f1f2374de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 53.948399][ T4063] RAX: ffffffffffffffda RBX: 00007f1f2374dee0 RCX: 00007f1f24d1da8a [ 53.956447][ T4063] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f1f2374dea0 [ 53.964762][ T4063] RBP: 0000200000000180 R08: 00007f1f2374dee0 R09: 0000000000000004 [ 53.972803][ T4063] R10: 0000000000000004 R11: 0000000000000246 R12: 0000200000000000 [ 53.981054][ T4063] R13: 00007f1f2374dea0 R14: 000000000000047a R15: 0000200000000480 [ 53.989215][ T4063] [ 53.992320][ T4063] ---[ end trace 0000000000000000 ]--- [ 54.044960][ T4063] EXT4-fs (loop4): 1 orphan inode deleted [ 54.065870][ T4077] netlink: 172 bytes leftover after parsing attributes in process `syz.3.176'. [ 54.075901][ T4077] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 54.387325][ T4063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.408389][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.452206][ T4081] loop1: detected capacity change from 0 to 164 [ 54.486846][ T4081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.182'. [ 54.654611][ T4090] loop0: detected capacity change from 0 to 256 [ 54.668666][ T4090] SELinux: failed to load policy [ 54.684714][ T4090] 9pnet_fd: Insufficient options for proto=fd [ 55.257008][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.298235][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.415652][ T4102] loop4: detected capacity change from 0 to 128 [ 55.452914][ T4102] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.479694][ T4102] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.156597][ T50] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 56.272044][ T4114] loop1: detected capacity change from 0 to 512 [ 56.305950][ T4115] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 56.315417][ T4115] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 56.354481][ T4114] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 56.378170][ T4093] syz.2.180 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 56.432189][ T4093] CPU: 1 UID: 0 PID: 4093 Comm: syz.2.180 Tainted: G W syzkaller #0 PREEMPT(full) [ 56.432300][ T4093] Tainted: [W]=WARN [ 56.432308][ T4093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 56.432322][ T4093] Call Trace: [ 56.432338][ T4093] [ 56.432346][ T4093] __dump_stack+0x1d/0x30 [ 56.432389][ T4093] dump_stack_lvl+0x95/0xd0 [ 56.432412][ T4093] dump_stack+0x15/0x1b [ 56.432470][ T4093] dump_header+0x80/0x240 [ 56.432494][ T4093] oom_kill_process+0x295/0x350 [ 56.432573][ T4093] out_of_memory+0x97d/0xb80 [ 56.432595][ T4093] try_charge_memcg+0x62e/0xa10 [ 56.432634][ T4093] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 56.432758][ T4093] __swap_cache_prepare_and_add+0x67/0x460 [ 56.432791][ T4093] ? alloc_pages_mpol+0x217/0x260 [ 56.432824][ T4093] swap_cache_alloc_folio+0xa2/0x120 [ 56.432939][ T4093] swap_cluster_readahead+0x26e/0x3d0 [ 56.432979][ T4093] swapin_readahead+0xde/0x840 [ 56.433012][ T4093] ? _raw_spin_unlock+0x9/0x30 [ 56.433063][ T4093] ? swap_put_entries_cluster+0x385/0x3a0 [ 56.433172][ T4093] ? swap_put_entries_cluster+0x71/0x3a0 [ 56.433198][ T4093] ? __rcu_read_unlock+0x4e/0x70 [ 56.433271][ T4093] ? swap_cache_get_folio+0x26f/0x280 [ 56.433331][ T4093] do_swap_page+0x2fe/0x21e0 [ 56.433359][ T4093] ? css_rstat_updated+0xbb/0x280 [ 56.433382][ T4093] ? __rcu_read_lock+0x36/0x50 [ 56.433405][ T4093] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 56.433517][ T4093] handle_mm_fault+0xb46/0x3020 [ 56.433553][ T4093] ? vma_start_read+0x1c7/0x2c0 [ 56.433583][ T4093] do_user_addr_fault+0x62f/0x1050 [ 56.433624][ T4093] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 56.433647][ T4093] ? trace_page_fault_user+0x1f/0xe0 [ 56.433769][ T4093] exc_page_fault+0x62/0xa0 [ 56.433859][ T4093] asm_exc_page_fault+0x26/0x30 [ 56.433891][ T4093] RIP: 0033:0x7fef92b94f65 [ 56.433929][ T4093] Code: 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 80 3d 9b d0 3a 00 00 <89> 7c 24 18 48 89 74 24 28 0f 85 cd 09 00 00 80 3d 6a 07 ee 00 00 [ 56.433950][ T4093] RSP: 002b:00007ffc80ef8a50 EFLAGS: 00010246 [ 56.433970][ T4093] RAX: 00007fef92f45fa0 RBX: 00007fef92f45fa0 RCX: 0000000000000026 [ 56.433986][ T4093] RDX: 0000000000000001 RSI: 00007fef92f46038 RDI: 0000000000000004 [ 56.433998][ T4093] RBP: 00007fef92f47da0 R08: 0000000000000001 R09: 0000000000000001 [ 56.434068][ T4093] R10: 0000000000000026 R11: 0000000000000246 R12: 000000000000db02 [ 56.434083][ T4093] R13: 00007fef92f4618c R14: 000000000000d8c9 R15: 00007fef92f46180 [ 56.434105][ T4093] [ 56.828852][ T4093] memory: usage 660kB, limit 307200kB, failcnt 9854 [ 56.835871][ T4093] memory+swap: usage 844kB, limit 9007199254740988kB, failcnt 0 [ 56.844015][ T4093] kmem: usage 556kB, limit 9007199254740988kB, failcnt 0 [ 56.851389][ T4093] Memory cgroup stats for /syz2: [ 56.851673][ T4093] cache 4096 [ 56.860432][ T4093] rss 20480 [ 56.863792][ T4093] shmem 0 [ 56.866824][ T4093] mapped_file 4096 [ 56.870592][ T4093] dirty 0 [ 56.873884][ T4093] writeback 4096 [ 56.877775][ T4093] workingset_refault_anon 22 [ 56.883099][ T4093] workingset_refault_file 21 [ 56.887830][ T4093] swap 167936 [ 56.891119][ T4093] swapcached 311296 [ 56.895509][ T4093] pgpgin 49711 [ 56.898954][ T4093] pgpgout 49696 [ 56.902590][ T4093] pgfault 24382 [ 56.906315][ T4093] pgmajfault 66 [ 56.909836][ T4093] inactive_anon 24576 [ 56.914042][ T4093] active_anon 28672 [ 56.918059][ T4093] inactive_file 4096 [ 56.922052][ T4093] active_file 4096 [ 56.926044][ T4093] unevictable 0 [ 56.929597][ T4093] hierarchical_memory_limit 314572800 [ 56.937084][ T4093] hierarchical_memsw_limit 9223372036854771712 [ 56.943619][ T4093] total_cache 4096 [ 56.947502][ T4093] total_rss 20480 [ 56.951149][ T4093] total_shmem 0 [ 56.954932][ T4093] total_mapped_file 4096 [ 56.959326][ T4093] total_dirty 0 [ 56.963020][ T4093] total_writeback 4096 [ 56.967251][ T4093] total_workingset_refault_anon 22 [ 56.972525][ T4093] total_workingset_refault_file 21 [ 56.978060][ T4093] total_swap 167936 [ 56.981874][ T4093] total_swapcached 311296 [ 56.986533][ T4093] total_pgpgin 49711 [ 56.990490][ T4093] total_pgpgout 49696 [ 56.994736][ T4093] total_pgfault 24382 [ 56.998877][ T4093] total_pgmajfault 66 [ 57.003160][ T4093] total_inactive_anon 24576 [ 57.007663][ T4093] total_active_anon 28672 [ 57.012058][ T4093] total_inactive_file 4096 [ 57.016885][ T4093] total_active_file 4096 [ 57.021132][ T4093] total_unevictable 0 [ 57.025450][ T4093] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.180,pid=4093,uid=0 [ 57.040165][ T4093] Memory cgroup out of memory: Killed process 4093 (syz.2.180) total-vm:161880kB, anon-rss:1248kB, file-rss:22424kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 57.059383][ T4094] syz.2.180 (4094) used greatest stack depth: 8312 bytes left [ 57.223238][ T28] kauditd_printk_skb: 465 callbacks suppressed [ 57.223256][ T28] audit: type=1400 audit(1774939853.145:915): avc: denied { mounton } for pid=4122 comm="syz.2.195" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 57.248573][ T4129] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 57.262025][ T4128] xt_hashlimit: size too large, truncated to 1048576 [ 57.271873][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.284249][ T4129] loop3: detected capacity change from 0 to 512 [ 57.324988][ T28] audit: type=1400 audit(1774939853.235:916): avc: denied { write } for pid=4122 comm="syz.2.195" name="kcm" dev="proc" ino=4026532970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 57.356714][ T4125] netlink: 'syz.2.195': attribute type 5 has an invalid length. [ 57.380176][ T4125] ip6erspan0: entered promiscuous mode [ 57.386978][ T4129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.413188][ T28] audit: type=1400 audit(1774939853.255:917): avc: denied { connect } for pid=4132 comm="syz.4.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.437559][ T4129] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.451561][ T4150] loop1: detected capacity change from 0 to 1024 [ 57.455281][ T4149] netlink: 40 bytes leftover after parsing attributes in process `syz.4.203'. [ 57.536724][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.593350][ T4150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.599746][ T4145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.202'. [ 57.599767][ T4145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.202'. [ 57.620190][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.660605][ T28] audit: type=1400 audit(1774939853.575:918): avc: denied { read } for pid=4168 comm="syz.1.209" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.660636][ T28] audit: type=1400 audit(1774939853.575:919): avc: denied { open } for pid=4168 comm="syz.1.209" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.660712][ T28] audit: type=1400 audit(1774939853.575:920): avc: denied { ioctl } for pid=4168 comm="syz.1.209" path="/newroot/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 57.660826][ T28] audit: type=1400 audit(1774939853.575:921): avc: denied { write } for pid=4168 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.725180][ T4171] loop1: detected capacity change from 0 to 164 [ 57.744763][ T4175] bond1: (slave bond_slave_1): Device is not our slave [ 57.819996][ T4182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.215'. [ 57.843240][ T4175] bond1: option active_slave: invalid value (bond_slave_1) [ 57.854315][ T4175] bond1 (unregistering): Released all slaves [ 57.882828][ T4186] capability: warning: `syz.1.218' uses deprecated v2 capabilities in a way that may be insecure [ 57.936181][ T28] audit: type=1400 audit(1774939853.855:922): avc: denied { ioctl } for pid=4194 comm="syz.2.219" path="socket:[6856]" dev="sockfs" ino=6856 ioctlcmd=0x5864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.944730][ T4192] syzkaller0: entered promiscuous mode [ 57.966315][ T4192] syzkaller0: entered allmulticast mode [ 57.973159][ T4198] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.083103][ T4198] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.102410][ T28] audit: type=1400 audit(1774939853.855:923): avc: denied { shutdown } for pid=4194 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.130312][ T28] audit: type=1400 audit(1774939853.855:924): avc: denied { name_connect } for pid=4194 comm="syz.2.219" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 58.274004][ T4213] set_capacity_and_notify: 2 callbacks suppressed [ 58.274021][ T4213] loop2: detected capacity change from 0 to 512 [ 58.396417][ T4212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.967278][ T4213] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.223: iget: bad i_size value: 38620345925642 [ 59.030598][ T4213] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.032705][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 59.048579][ C0] EXT4-fs (loop2): initial error at time 1774939854: ext4_orphan_get:1397: inode 15 [ 59.058012][ C0] EXT4-fs (loop2): last error at time 1774939854: ext4_orphan_get:1397: inode 15 [ 59.067460][ T4213] EXT4-fs (loop2): Remounting filesystem read-only [ 59.090649][ T4213] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.182054][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 59.225981][ T4231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 59.271497][ T4231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 59.987195][ T4239] loop3: detected capacity change from 0 to 128 [ 59.994818][ T3310] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.031584][ T4239] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.072399][ T4239] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.170496][ T4246] loop2: detected capacity change from 0 to 128 [ 60.205792][ T4246] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.238454][ T4246] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 60.413915][ T4249] loop1: detected capacity change from 0 to 512 [ 60.694876][ T4249] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.236: inode has both inline data and extents flags [ 60.722555][ T4249] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 60.722731][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 60.738392][ C0] EXT4-fs (loop1): initial error at time 1774939856: ext4_orphan_get:1397: inode 15 [ 60.747827][ C0] EXT4-fs (loop1): last error at time 1774939856: ext4_orphan_get:1397: inode 15 [ 60.800485][ T4257] xt_hashlimit: size too large, truncated to 1048576 [ 60.834499][ T4249] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.236: couldn't read orphan inode 15 (err -117) [ 60.846675][ T4249] loop1: lost filesystem error report for type 5 error -117 [ 60.847276][ T4249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.944390][ T4260] netlink: 172 bytes leftover after parsing attributes in process `syz.3.237'. [ 60.954572][ T4260] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 61.255784][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.365014][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.529167][ T4269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'. [ 61.602515][ T4271] xt_TCPMSS: Only works on TCP SYN packets [ 61.679850][ T4275] tipc: Started in network mode [ 61.689530][ T4275] tipc: Node identity 00000000002200000000000000000001, cluster identity 4711 [ 61.718790][ T4275] tipc: Enabling of bearer rejected, failed to enable media [ 61.753745][ T4271] team0: entered allmulticast mode [ 61.824667][ T4271] team_slave_0: entered allmulticast mode [ 61.832186][ T4278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.248'. [ 61.887812][ T4278] loop4: detected capacity change from 0 to 128 [ 61.909397][ T4271] team_slave_1: entered allmulticast mode [ 61.919462][ T4278] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.945690][ T4279] loop2: detected capacity change from 0 to 1764 [ 61.967260][ T4278] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.034514][ T4278] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.248: No space for directory leaf checksum. Please run e2fsck -D. [ 62.113081][ T4278] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.248: checksumming directory block 0 [ 62.218512][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.645673][ T4295] netlink: 32 bytes leftover after parsing attributes in process `syz.1.253'. [ 62.687954][ T4285] loop0: detected capacity change from 0 to 512 [ 62.777119][ T4285] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.874441][ T4285] EXT4-fs (loop0): 1 truncate cleaned up [ 62.917306][ T4285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.312985][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.438565][ T4324] netlink: 48 bytes leftover after parsing attributes in process `syz.2.261'. [ 63.562766][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 63.562784][ T28] audit: type=1326 audit(1774939859.465:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e69ddc819 code=0x7ffc0000 [ 63.576415][ T4326] netlink: 44 bytes leftover after parsing attributes in process `syz.1.262'. [ 63.636517][ T28] audit: type=1326 audit(1774939859.465:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3e69ddc819 code=0x7ffc0000 [ 63.699991][ T4331] loop2: detected capacity change from 0 to 164 [ 63.712858][ T4331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.264'. [ 63.749302][ T28] audit: type=1326 audit(1774939859.465:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e69ddc819 code=0x7ffc0000 [ 63.793097][ T4333] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26 sclass=netlink_audit_socket pid=4333 comm=syz.2.265 [ 63.793944][ T28] audit: type=1326 audit(1774939859.465:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f3e69ddc819 code=0x7ffc0000 [ 63.829265][ T4333] loop2: detected capacity change from 0 to 512 [ 63.871224][ T28] audit: type=1326 audit(1774939859.465:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e69ddc819 code=0x7ffc0000 [ 63.904249][ T4334] ucma_write: process 151 (syz.2.265) changed security contexts after opening file descriptor, this is not allowed. [ 63.953450][ T4338] loop0: detected capacity change from 0 to 128 [ 63.969678][ T28] audit: type=1326 audit(1774939859.465:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e69ddc819 code=0x7ffc0000 [ 64.010884][ T4343] loop1: detected capacity change from 0 to 512 [ 64.035809][ T4338] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.040193][ T4343] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.267: inode has both inline data and extents flags [ 64.067909][ T4338] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 64.094499][ T28] audit: type=1326 audit(1774939859.465:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e69ddc819 code=0x7ffc0000 [ 64.112873][ T4343] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.117841][ T28] audit: type=1326 audit(1774939859.465:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e69ddc819 code=0x7ffc0000 [ 64.150241][ T28] audit: type=1326 audit(1774939859.465:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e69ddc819 code=0x7ffc0000 [ 64.173685][ T28] audit: type=1326 audit(1774939859.465:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4325 comm="syz.1.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f3e69ddc819 code=0x7ffc0000 [ 64.220634][ T4343] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.267: couldn't read orphan inode 15 (err -117) [ 64.232499][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 64.232522][ C0] EXT4-fs (loop1): initial error at time 1774939860: ext4_orphan_get:1397: inode 15 [ 64.232541][ C0] EXT4-fs (loop1): last error at time 1774939860: ext4_orphan_get:1397: inode 15 [ 64.303881][ T4343] loop1: lost filesystem error report for type 5 error -117 [ 64.316893][ T4348] loop4: detected capacity change from 0 to 512 [ 64.371970][ T4343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.407966][ T4348] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.481900][ T4348] EXT4-fs (loop4): 1 truncate cleaned up [ 64.523651][ T4348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.609884][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.737647][ T4360] netlink: 32 bytes leftover after parsing attributes in process `syz.1.272'. [ 64.840016][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.948445][ T4368] loop0: detected capacity change from 0 to 164 [ 64.972596][ T4369] xt_l2tp: wrong L2TP version: 0 [ 65.106570][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.142810][ T4371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.273'. [ 65.185425][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.195116][ T4373] netlink: 40 bytes leftover after parsing attributes in process `syz.4.277'. [ 65.331082][ T4382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 65.340829][ T4382] netlink: 24 bytes leftover after parsing attributes in process `syz.1.280'. [ 65.422187][ T4378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.279'. [ 65.721419][ T4390] loop2: detected capacity change from 0 to 1024 [ 65.755107][ T4390] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 65.755107][ T4390] [ 66.187035][ T4396] loop0: detected capacity change from 0 to 128 [ 66.218321][ T4396] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 66.295004][ T4396] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.352329][ T4399] loop1: detected capacity change from 0 to 512 [ 67.165520][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.288339][ T4404] loop4: detected capacity change from 0 to 128 [ 67.358049][ T4404] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.358168][ T4404] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.376401][ T4407] syzkaller0: entered promiscuous mode [ 67.376424][ T4407] syzkaller0: entered allmulticast mode [ 67.532231][ T4410] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.583359][ T3304] Alternate GPT is invalid, using primary GPT. [ 67.603359][ T3304] loop1: p1 p2 p3 [ 67.657963][ T4416] team_slave_0: entered promiscuous mode [ 67.663719][ T4416] team_slave_1: entered promiscuous mode [ 67.680485][ T4410] EXT4-fs (loop0): 1 truncate cleaned up [ 67.702185][ T4416] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 67.718456][ T4410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.786602][ T4413] Alternate GPT is invalid, using primary GPT. [ 67.798357][ T4413] loop1: p1 p2 p3 [ 67.828276][ T4419] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 67.889243][ T4419] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c119, mo2=0002] [ 67.895305][ T4424] netlink: 172 bytes leftover after parsing attributes in process `syz.4.288'. [ 67.923896][ T4424] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 67.945776][ T4429] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 67.957261][ T4419] System zones: 1-12 [ 67.970901][ T4419] EXT4-fs error (device loop3): ext4_iget_extra_inode:5040: inode #15: comm syz.3.292: corrupted in-inode xattr: e_value size too large [ 67.996188][ T4423] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 68.003413][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 68.007124][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 68.015807][ T4423] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 68.045526][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 68.060262][ T4419] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.060536][ T4419] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.292: couldn't read orphan inode 15 (err -117) [ 68.072683][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 68.088100][ C1] EXT4-fs (loop3): initial error at time 1774939863: ext4_iget_extra_inode:5040: inode 15 [ 68.093378][ T4423] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 68.098055][ C1] EXT4-fs (loop3): last error at time 1774939863: ext4_iget_extra_inode:5040: inode 15 [ 68.182734][ T4419] loop3: lost filesystem error report for type 5 error -117 [ 68.184696][ T4419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.242212][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.298839][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.354495][ T4440] netlink: 'syz.3.298': attribute type 1 has an invalid length. [ 68.376972][ T4440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.448141][ T4444] bond1: (slave gretap1): making interface the new active one [ 68.511415][ T4448] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.525181][ T4444] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 68.549477][ T4448] EXT4-fs (loop2): 1 truncate cleaned up [ 68.578294][ T4448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.777952][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 68.778043][ T28] audit: type=1400 audit(1774939864.695:996): avc: denied { append } for pid=4450 comm="syz.3.301" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.878767][ T28] audit: type=1400 audit(1774939864.795:997): avc: denied { remove_name } for pid=3310 comm="syz-executor" name="file0" dev="tmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 68.928189][ T3838] IPVS: starting estimator thread 0... [ 68.948528][ T28] audit: type=1400 audit(1774939864.795:998): avc: denied { rmdir } for pid=3310 comm="syz-executor" name="65" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 69.054012][ T4459] set_capacity_and_notify: 5 callbacks suppressed [ 69.054031][ T4459] loop1: detected capacity change from 0 to 2048 [ 69.070380][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.140920][ T3304] Alternate GPT is invalid, using primary GPT. [ 69.147247][ T3304] loop1: p1 p2 p3 [ 69.152577][ T4457] IPVS: using max 2544 ests per chain, 127200 per kthread [ 69.159956][ T28] audit: type=1400 audit(1774939865.065:999): avc: denied { map } for pid=4453 comm="syz.3.303" path="/proc/174/numa_maps" dev="proc" ino=7499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 69.221205][ T28] audit: type=1400 audit(1774939865.135:1000): avc: denied { setopt } for pid=4461 comm="syz.2.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.228491][ T4459] Alternate GPT is invalid, using primary GPT. [ 69.282896][ T4459] loop1: p1 p2 p3 [ 69.416952][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 69.436722][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 69.448384][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 69.492263][ T4479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 69.536844][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 69.563901][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 69.578792][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 69.587517][ T4482] loop0: detected capacity change from 0 to 512 [ 69.637498][ T4482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.651516][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 69.706404][ T4482] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.844990][ T4470] loop1: detected capacity change from 0 to 512 [ 69.917771][ T4470] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.940739][ T4493] loop3: detected capacity change from 0 to 512 [ 69.954243][ T4492] loop2: detected capacity change from 0 to 512 [ 69.967435][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.970348][ T4470] EXT4-fs (loop1): 1 truncate cleaned up [ 70.003386][ T4493] EXT4-fs warning (device loop3): read_mmp_block:111: Error -74 while reading MMP block 34 [ 70.028983][ T4470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.084126][ T4493] loop3: detected capacity change from 0 to 1024 [ 70.091005][ T4493] EXT4-fs: inline encryption not supported [ 70.130888][ T4497] loop0: detected capacity change from 0 to 1024 [ 70.148631][ T4497] EXT4-fs: inline encryption not supported [ 70.188561][ T4497] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.199890][ T4493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 70.233073][ T4493] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.244957][ T4493] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.312: bg 0: block 112: padding at end of block bitmap is not set [ 70.254031][ T4497] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #3: block 2: comm syz.0.314: lblock 2 mapped to illegal pblock 2 (length 1) [ 70.285031][ T4497] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 70.285153][ T4497] EXT4-fs (loop0): Remounting filesystem read-only [ 70.294442][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 70.294486][ C1] EXT4-fs (loop0): initial error at time 1774939866: ext4_map_blocks:786: inode 3: block 2 [ 70.294523][ C1] EXT4-fs (loop0): last error at time 1774939866: ext4_map_blocks:786: inode 3: block 2 [ 70.328937][ T4493] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 3 with error 28 [ 70.357750][ T4493] EXT4-fs (loop3): This should not happen!! Data will be lost [ 70.357750][ T4493] [ 70.371814][ T4497] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 70.380175][ T4493] EXT4-fs (loop3): Total free blocks count 0 [ 70.381878][ T28] audit: type=1400 audit(1774939866.295:1001): avc: denied { bind } for pid=4509 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.412569][ T4493] EXT4-fs (loop3): Free/Dirty block details [ 70.425522][ T4493] EXT4-fs (loop3): free_blocks=0 [ 70.426047][ T4497] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 70.436478][ T4493] EXT4-fs (loop3): dirty_blocks=16 [ 70.455318][ T4493] EXT4-fs (loop3): Block reservation details [ 70.457208][ T28] audit: type=1400 audit(1774939866.295:1002): avc: denied { read } for pid=4489 comm="syz.3.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.484292][ T4497] EXT4-fs (loop0): 1 orphan inode deleted [ 70.490428][ T4497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.506507][ T4493] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 70.513676][ T4497] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.519958][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.543204][ T4497] loop0: detected capacity change from 0 to 128 [ 70.715623][ T3311] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 70.733148][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 70.835025][ T4523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 70.858575][ T28] audit: type=1400 audit(1774939866.775:1003): avc: denied { create } for pid=4524 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 70.946060][ T4529] bond1: (slave bond_slave_1): Device is not our slave [ 70.953077][ T4529] bond1: option active_slave: invalid value (bond_slave_1) [ 70.970357][ T4529] bond1 (unregistering): Released all slaves [ 71.131959][ T4535] loop3: detected capacity change from 0 to 164 [ 71.531355][ T4541] loop3: detected capacity change from 0 to 512 [ 71.619475][ T4541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.766133][ T4541] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.887345][ T4547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.329'. [ 71.966948][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.078678][ T4551] netlink: 32 bytes leftover after parsing attributes in process `syz.2.332'. [ 72.166437][ T4556] netlink: 40 bytes leftover after parsing attributes in process `syz.2.333'. [ 72.208061][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.298801][ T4562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.334'. [ 72.555996][ T4560] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 74.371441][ T4580] set_capacity_and_notify: 2 callbacks suppressed [ 74.371469][ T4580] loop1: detected capacity change from 0 to 512 [ 74.389903][ T4585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.342'. [ 74.409151][ T4580] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.340: inode has both inline data and extents flags [ 74.535423][ T4580] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.535919][ T4580] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.340: couldn't read orphan inode 15 (err -117) [ 74.537850][ T4591] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 74.545219][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 74.574424][ C0] EXT4-fs (loop1): initial error at time 1774939870: ext4_orphan_get:1397: inode 15 [ 74.583982][ C0] EXT4-fs (loop1): last error at time 1774939870: ext4_orphan_get:1397: inode 15 [ 74.590574][ T4595] loop2: detected capacity change from 0 to 512 [ 74.609357][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 74.609406][ T28] audit: type=1400 audit(1774939870.525:1053): avc: denied { create } for pid=4593 comm="syz.4.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 74.633552][ T4599] netlink: 32 bytes leftover after parsing attributes in process `syz.0.347'. [ 74.649283][ T4580] loop1: lost filesystem error report for type 5 error -117 [ 74.649824][ T4580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.673709][ T4560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 74.684544][ T4595] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.708636][ T4595] EXT4-fs (loop2): 1 truncate cleaned up [ 74.715318][ T4595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.875593][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.887690][ T28] audit: type=1326 audit(1774939870.815:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.340" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e69ddc819 code=0x0 [ 74.991393][ T4589] netlink: 52 bytes leftover after parsing attributes in process `syz.3.330'. [ 75.055332][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 75.120189][ T28] audit: type=1400 audit(1774939871.035:1055): avc: denied { read write } for pid=4611 comm="syz.2.351" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.144676][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.147093][ T28] audit: type=1400 audit(1774939871.035:1056): avc: denied { open } for pid=4611 comm="syz.2.351" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 75.235052][ T28] audit: type=1400 audit(1774939871.155:1057): avc: denied { create } for pid=4626 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.258061][ T28] audit: type=1400 audit(1774939871.155:1058): avc: denied { connect } for pid=4626 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.430973][ T4640] xfrm0 speed is unknown, defaulting to 1000 [ 75.490766][ T4640] xfrm0 speed is unknown, defaulting to 1000 [ 75.523687][ T4640] xfrm0 speed is unknown, defaulting to 1000 [ 75.577376][ T4647] loop4: detected capacity change from 0 to 512 [ 75.584521][ T4647] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 75.601377][ T4647] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 75.612247][ T4647] EXT4-fs (loop4): group descriptors corrupted! [ 75.615568][ T4655] loop3: detected capacity change from 0 to 512 [ 75.625431][ T28] audit: type=1400 audit(1774939871.535:1059): avc: denied { read } for pid=4639 comm="syz.1.360" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 75.654039][ T28] audit: type=1400 audit(1774939871.575:1060): avc: denied { open } for pid=4639 comm="syz.1.360" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 75.732600][ T4662] netlink: 'syz.0.369': attribute type 1 has an invalid length. [ 75.749033][ T4655] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.796602][ T4655] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 75.800762][ T4662] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.812938][ T4655] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 75.842382][ T4667] loop2: detected capacity change from 0 to 512 [ 75.850828][ T4671] __nla_validate_parse: 3 callbacks suppressed [ 75.850842][ T4671] netlink: 47 bytes leftover after parsing attributes in process `syz.4.372'. [ 75.870359][ T4674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.369'. [ 75.884681][ T4655] xt_CT: No such helper "snmp_trap" [ 75.885104][ T4667] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.371: iget: bad i_size value: 38620345925642 [ 75.890787][ T4655] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 75.913707][ T4674] bond1: entered promiscuous mode [ 75.917576][ T4667] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.922317][ T4655] netlink: 'syz.3.366': attribute type 46 has an invalid length. [ 75.922764][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 75.934904][ T4674] bond1: entered allmulticast mode [ 75.940884][ C0] EXT4-fs (loop2): initial error at time 1774939871: ext4_orphan_get:1397 [ 75.952915][ T4655] netlink: 55 bytes leftover after parsing attributes in process `syz.3.366'. [ 75.953455][ C0] : inode 15 [ 75.970833][ T4667] EXT4-fs (loop2): Remounting filesystem read-only [ 75.971846][ C0] [ 75.982837][ T4662] bond1: (slave dummy0): making interface the new active one [ 75.985046][ C0] EXT4-fs (loop2): last error at time 1774939871: ext4_orphan_get:1397: inode 15 [ 76.000752][ T4667] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.018554][ T4662] dummy0: entered promiscuous mode [ 76.019113][ T4674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'. [ 76.033421][ T4677] xt_time: unknown flags 0xc [ 76.043613][ T4662] dummy0: entered allmulticast mode [ 76.058443][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 76.068739][ T4662] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 76.128500][ T4682] loop0: detected capacity change from 0 to 512 [ 76.164990][ T4682] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.219440][ T4682] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 76.272443][ T4693] loop4: detected capacity change from 0 to 512 [ 76.307482][ T4693] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 76.332702][ T28] audit: type=1400 audit(1774939872.245:1061): avc: denied { relabelfrom } for pid=4695 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 76.332741][ T4682] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.375: bg 0: block 248: padding at end of block bitmap is not set [ 76.368510][ T4693] EXT4-fs (loop4): 1 truncate cleaned up [ 76.380613][ T4682] loop0: lost filesystem error report for type 5 error -117 [ 76.384468][ T4702] loop3: detected capacity change from 0 to 512 [ 76.404405][ T28] audit: type=1400 audit(1774939872.245:1062): avc: denied { relabelto } for pid=4695 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 76.408770][ T4693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.439740][ T4640] infiniband syz1: set active [ 76.442694][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 76.444527][ T3420] xfrm0 speed is unknown, defaulting to 1000 [ 76.450897][ C0] EXT4-fs (loop0): last error at time 1774939872: ext4_validate_block_bitmap:441 [ 76.458336][ T4640] infiniband syz1: added xfrm0 [ 76.469330][ T4682] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.375: Failed to acquire dquot type 1 [ 76.472372][ T4640] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 76.482959][ T4640] infiniband syz1: Couldn't open port 1 [ 76.497335][ T4702] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.381: inode has both inline data and extents flags [ 76.507326][ T4682] loop0: lost filesystem error report for type 5 error -28 [ 76.519294][ T4640] RDS/IB: syz1: added [ 76.530661][ T4640] smc: adding ib device syz1 with port count 1 [ 76.536900][ T4701] loop2: detected capacity change from 0 to 8192 [ 76.537278][ T4640] smc: ib device syz1 port 1 has no pnetid [ 76.549789][ T3420] xfrm0 speed is unknown, defaulting to 1000 [ 76.555988][ T4702] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.556034][ T4640] xfrm0 speed is unknown, defaulting to 1000 [ 76.571471][ T4702] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.381: couldn't read orphan inode 15 (err -117) [ 76.571682][ T4682] EXT4-fs (loop0): 1 truncate cleaned up [ 76.583280][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 76.583300][ C1] EXT4-fs (loop3): initial error at time 1774939872: ext4_orphan_get:1397: inode 15 [ 76.604997][ C1] EXT4-fs (loop3): last error at time 1774939872: ext4_orphan_get:1397: inode 15 [ 76.627820][ T4682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 76.673199][ T4702] loop3: lost filesystem error report for type 5 error -117 [ 76.673695][ T4702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.686437][ T4640] xfrm0 speed is unknown, defaulting to 1000 [ 76.799018][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 76.998230][ T4698] ================================================================== [ 77.006356][ T4698] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 77.014537][ T4698] [ 77.016919][ T4698] write to 0xffff8881016262e8 of 8 bytes by task 4696 on cpu 0: [ 77.024562][ T4698] filemap_splice_read+0x523/0x780 [ 77.029692][ T4698] splice_direct_to_actor+0x26e/0x670 [ 77.035076][ T4698] do_splice_direct+0x119/0x1a0 [ 77.039945][ T4698] do_sendfile+0x382/0x650 [ 77.044476][ T4698] __x64_sys_sendfile64+0x105/0x150 [ 77.049750][ T4698] x64_sys_call+0x2dc4/0x3020 [ 77.054552][ T4698] do_syscall_64+0x12c/0x370 [ 77.059167][ T4698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.065090][ T4698] [ 77.067449][ T4698] write to 0xffff8881016262e8 of 8 bytes by task 4698 on cpu 1: [ 77.075366][ T4698] filemap_splice_read+0x523/0x780 [ 77.080516][ T4698] splice_direct_to_actor+0x26e/0x670 [ 77.085920][ T4698] do_splice_direct+0x119/0x1a0 [ 77.090790][ T4698] do_sendfile+0x382/0x650 [ 77.095230][ T4698] __x64_sys_sendfile64+0x105/0x150 [ 77.100457][ T4698] x64_sys_call+0x2dc4/0x3020 [ 77.105332][ T4698] do_syscall_64+0x12c/0x370 [ 77.109938][ T4698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.115936][ T4698] [ 77.118273][ T4698] value changed: 0x0000000000001913 -> 0x0000000000001914 [ 77.125385][ T4698] [ 77.127723][ T4698] Reported by Kernel Concurrency Sanitizer on: [ 77.133888][ T4698] CPU: 1 UID: 0 PID: 4698 Comm: syz.2.380 Tainted: G W syzkaller #0 PREEMPT(full) [ 77.144780][ T4698] Tainted: [W]=WARN [ 77.148591][ T4698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.158656][ T4698] ================================================================== [ 78.685213][ T4640] xfrm0 speed is unknown, defaulting to 1000 [ 78.693730][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.707727][ T4640] xfrm0 speed is unknown, defaulting to 1000 [ 79.715050][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.763404][ T4640] xfrm0 speed is unknown, defaulting to 1000