last executing test programs: 1.530731956s ago: executing program 3 (id=297): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) syz_io_uring_setup(0x368c, 0x0, 0x0, &(0x7f0000000240)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) 1.502097899s ago: executing program 3 (id=300): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0xa04254, &(0x7f0000000080)=ANY=[], 0x5, 0x31f, &(0x7f0000000100)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0xff, 0xc0, 0x0, 0x8, @local, @mcast2, 0x40, 0x700, 0x1}}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000340)={{{@in=@rand_addr=0x64010102, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4e24, 0x0, 0x4e20, 0x9, 0x2, 0x0, 0xa0, 0x2, r6, r7}, {0x0, 0x7a, 0x6, 0x6, 0x0, 0x8, 0x2, 0x8000000000000001}, {0xc, 0x6b6c, 0x0, 0xfff}, 0x0, 0x6e69b4, 0x1, 0x1, 0x0, 0x2}, {{@in=@local, 0x4d6, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3502, 0x3, 0x3, 0x1, 0x0, 0xa6, 0x1}}, 0xe8) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r8 = openat$cgroup_devices(r1, &(0x7f00000004c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000500)={'b', ' *:* ', 'm\x00'}, 0x8) 1.431767955s ago: executing program 2 (id=304): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)={0xd84, 0x800000, 0x4, 0x2d011882, 0xffff}) fcntl$addseals(r0, 0x409, 0x5) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, 0x0, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x0, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") unlink(&(0x7f0000001480)='./file2\x00') ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) write$cgroup_int(r0, &(0x7f0000000e80)=0x9, 0x12) 1.282925866s ago: executing program 3 (id=310): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) syz_io_uring_setup(0x368c, 0x0, 0x0, &(0x7f0000000240)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) 1.224655421s ago: executing program 2 (id=312): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) 1.223988791s ago: executing program 3 (id=314): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) openat$ppp(0xffffffffffffff9c, 0x0, 0x200000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000ffc000/0x1000)=nil, 0x3) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x2, 0x0, @loopback}, 0x1c) 1.105236081s ago: executing program 2 (id=316): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000240)=ANY=[], 0x9, 0x2a8, &(0x7f0000000f00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = dup2(r0, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000140)=ANY=[], 0x2c) syz_clone3(&(0x7f0000000540)={0x20a04800, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000380)=0x0, {0x6}, &(0x7f00000003c0)=""/138, 0x8a, &(0x7f0000000480)=""/106, &(0x7f0000000500)=[0x0], 0x1}, 0x58) perf_event_open$cgroup(&(0x7f0000000700)={0x3, 0x80, 0x9, 0x2, 0xb1, 0x3, 0x0, 0x80000000, 0x81020, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7c08, 0x4, @perf_config_ext={0xfff, 0x245f}, 0x401, 0xb2, 0x10, 0x2, 0x6, 0x0, 0xc, 0x0, 0xd0, 0x0, 0x7}, r1, 0x10, r3, 0x4) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x27, 0x1, 0xff, 0x0, 0x0, 0x2, 0x2008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x10200, 0x40009, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x4}, r4, 0x5, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = mq_open(&(0x7f0000000000)='eth0\x00#\x13\xaeu\xe0\xfb\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\xd7\x8a\x8cn\x8c\xbeF\xdb.\x15\xdar,\xf0\x92\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'J\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00'/577, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2c, &(0x7f0000000240)={[{@noload}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@auto_da_alloc}, {@block_validity}, {@quota}]}, 0x3, 0x434, &(0x7f00000002c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401) ioctl$USBDEVFS_BULK(r7, 0x80045503, &(0x7f00000002c0)={{}, 0x0, 0x0, 0x0}) fcntl$setlease(r6, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') listen(r5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) r9 = syz_open_pts(r8, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x13) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = syz_io_uring_setup(0x0, &(0x7f00000035c0)={0x0, 0x0, 0x10544, 0x0, 0x119}, &(0x7f0000000100), 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_enter(r10, 0x291c, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) pidfd_send_signal(0xffffffffffffffff, 0x8, 0x0, 0x4) 963.003512ms ago: executing program 2 (id=319): r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x168, 0x9, 0x140, 0xb, 0x228, 0x250, 0x250, 0x228, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff], [0x0, 0x0, 0x300], 'veth0_to_bridge\x00', 'wlan1\x00'}, 0x6000000, 0xf8, 0x140, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'team0\x00'}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xff, 0xffffff00], [0xffffff00, 0x0, 0xff000000], 'veth0_to_team\x00', 'team_slave_1\x00', {0xff}, {}, 0x3b, 0x4, 0x6, 0x32}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x100]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 925.330745ms ago: executing program 2 (id=320): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8004, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp, 0x0, 0x1, 0x8, 0x0, 0x7, 0x8, 0x0, 0x0, 0x100, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000a40)) shutdown(0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000200)={0x0, 0x9, 0xffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000540)={0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r5, 0x0, r6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000280)={r5}) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$sock_attach_bpf(r6, 0x1, 0x10, &(0x7f0000000300)=r4, 0x4) write$cgroup_subtree(r7, &(0x7f0000000900)=ANY=[], 0xffbf) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x554}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)='bridge0\x00') 857.396301ms ago: executing program 0 (id=322): shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000ff0f00000000000000000000000a20000000000a01020000000000000002010000000900010073797a300004000058000000160a01000000000000000000010000000900010073797b30000000000900020073797a30000000002c000380080001400000000008000240000000001800038014000100766574000000006f5f68737200000000480000"], 0xe8}}, 0x0) 817.606864ms ago: executing program 0 (id=325): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x85, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x4}}, 0x74}, 0x1, 0x0, 0xf00}, 0x0) 765.586898ms ago: executing program 0 (id=327): r0 = getpgrp(0x0) (async) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) r2 = socket$inet6(0xa, 0x0, 0x2f) (async) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r4, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009b40)=[{{&(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000"], 0x18}}], 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x50, 0x0, 0x0, 0x0, r4}, {}, {}, 0x0, 0xfffffffc, 0x1}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, 0xe8) (async) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0x20, 0x0, &(0x7f0000000600)="7c533121ba56b5b10006000081001a7c7f9660697679f3894445968faec11f2a", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$sock_attach_bpf(r5, 0x107, 0x8, &(0x7f0000000000), 0x4) (async) keyctl$set_reqkey_keyring(0x5, 0x0) request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='-\x00', 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000500), 0x1, 0x486, &(0x7f0000000540)="$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") r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x1, 0x0, {0x2, 0x2, 0x1, 0x3, 0x8000}, 0x2}) (async) keyctl$set_reqkey_keyring(0xe, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0x1, 0x8000c61) r9 = syz_pidfd_open(r0, 0x0) process_madvise(r9, 0x0, 0x0, 0x14, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078005001500030000000800124000100000050005000a000000050001000600000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) 765.202428ms ago: executing program 4 (id=328): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) (async) syz_io_uring_setup(0x4f66, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x1, 0x368}, 0x0, 0x0) (async) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000400)) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x800ff}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={'\x00', 0x7, 0x1e26, 0x81, 0xc6, 0x4c2, r0}) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) socket$packet(0x11, 0x0, 0x300) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) (async) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x1}, 0x90) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000000c0)={0x2b2}) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1b, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRES8], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x49, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10}, 0x90) (async) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000100)={{}, {0xe}}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000000), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="6d93000000000000000001000000080001000183"], 0x1c}}, 0x0) 707.673223ms ago: executing program 0 (id=330): r0 = syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2a6, &(0x7f0000000440)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000a40)=ANY=[@ANYRESOCT, @ANYBLOB="83d9f402aaa940a9a8c0bcd01e8ab426f5c2422d46fca6623182ee830b8d5a337eb1324df3ebf0aa220a2bff25a6d2f0a59948d192a81122935787bfff50deee4765bb881b9ca40655299b5b0e7fa2e8d442da04cc9c3a1b9e58662fdd96c46272db49a2d4c55e813ab0a131313a777a1c108006cc07ba819a94e1f509ed931953d77c9488551c5c095c3cbc914b3815c63a710d7ba5487431b983dbce927cf7dac41797270e88fd2e0d42169081aea2c205318dbe64c290caf8178628736106ce52c759be512f975fda9f9203d9bb75bb8ad002a998e7e6", @ANYRESOCT=r0, @ANYRESHEX, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRES16=r0], 0x118) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r2}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') pread64(r5, &(0x7f0000002040)=""/81, 0x51, 0x7ffb) timerfd_gettime(r5, &(0x7f0000000380)) connect$inet6(r4, &(0x7f0000000500)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/85, 0x55, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000340)=0x40) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x20200, 0x0) sendfile(r5, r7, &(0x7f0000000400)=0x1ff, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='rxrpc_rx_icmp\x00', r7}, 0x10) r8 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r9 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r8, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r10, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x0, 0x0, r8, 0x0}]) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000440), 0x1000a) sendfile(r4, r3, &(0x7f0000000000)=0xfffffffffffffffe, 0x1001) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) getsockopt$packet_int(r12, 0x107, 0x15, 0x0, &(0x7f0000000200)) mkdir(0x0, 0xfffffffffffffffe) 683.451935ms ago: executing program 4 (id=333): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000101d01257017eb5c6fd6b4bccc952db4", @ANYRES32=0x0, @ANYBLOB="04000000000000001c002b8008000880", @ANYRES32, @ANYBLOB="08000300190000a464000800", @ANYRES32, @ANYBLOB="26c489f7587d"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 677.664336ms ago: executing program 1 (id=334): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r3], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000ec0)=""/4096, &(0x7f0000000300)=0x1000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000010003704000000000000000000180000", @ANYRES32=r3, @ANYBLOB="0002"], 0x20}}, 0x0) 611.960761ms ago: executing program 4 (id=335): socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000120000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a010200000000000000000100000009000300739c7a320000000014000480080002400000000008000140000000050900010073797a310000000044000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000180004"], 0xcc}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 559.921375ms ago: executing program 1 (id=336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fc70000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x7dca, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) r2 = io_uring_setup(0x1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, r1}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0xfa) sendmsg$nl_route(r4, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)=@ipv4_delroute={0x24, 0x19, 0x510, 0x70bd28, 0x25dfdbfd, {0x2, 0x0, 0x14, 0x2, 0x0, 0x1, 0xfe}, [@RTA_DST={0x8, 0x1, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x6}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000600)={@private, @local, 0x0}, &(0x7f0000000640)=0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r8, 0x84, 0x7d, &(0x7f0000000500)=""/4062, &(0x7f00000004c0)=0xfde) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x18, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x7f, 0x14, &(0x7f00000002c0)=""/20, 0x40f00, 0x7d, '\x00', r6, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x2, 0x10, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[r7, r7], &(0x7f0000001500)=[{0x0, 0x5, 0x5, 0x3}, {0x0, 0x3, 0x10}], 0x10, 0x8d5f}, 0x90) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x17, 0x20000000, r3) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x7b, 0xa, 0xff00}, [@call={0x1d, 0xa}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @generic]}, &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x1e}, 0x2d) 536.831737ms ago: executing program 4 (id=337): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, r0}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x7, &(0x7f0000000a80)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 471.947982ms ago: executing program 1 (id=338): socket$key(0xf, 0x3, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0xa8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x7}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}]}}]}, 0xa8}}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) socketpair(0x2, 0x4, 0x5, &(0x7f00000000c0)) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x800, @ipv4={'\x00', '\xff\xff', @remote}, 0x9, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x7) syz_open_procfs(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) munmap(&(0x7f0000741000/0x4000)=nil, 0x4000) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="01"], 0x0) 471.806542ms ago: executing program 4 (id=339): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000000c40)="$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") 411.347507ms ago: executing program 1 (id=340): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d00", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16, @ANYRES32=r3], 0x44}}, 0x0) 406.086858ms ago: executing program 4 (id=341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setpriority(0x0, 0x0, 0xf17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000000580)=@newtaction={0x44, 0x31, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x3}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x4040) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8e8, 0xe8, &(0x7f0000000040)=0x1) 369.25696ms ago: executing program 1 (id=342): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="020072d300060005efb3170d"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000240)=""/203, 0xcb) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0x5, 0x0, {0xff}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0xc04c5349, &(0x7f0000000400)) tkill(r0, 0x7) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001c0073fc000000000000000007000003", @ANYRES32=r5, @ANYBLOB="020000e209000200bbbbb3bbbbbb00e60c000e80050001001f000000"], 0x34}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x400}, 0x10) modify_ldt$read(0x0, &(0x7f0000001880)=""/4096, 0x1000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004006, &(0x7f0000000340)={[{@quota}, {@abort}, {@jqfmt_vfsv1}, {@bsdgroups}, {@abort}, {@grpjquota, 0x22}], [], 0x2}, 0x3, 0x484, &(0x7f0000001140)="$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") statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x2, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r7}, 0x20) fstat(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x10010, &(0x7f0000000500)=ANY=[@ANYBLOB='mode=00000000000000000000004,mode=00000000000000000002536,mpol=local,huge=within_size,ro,fowner<', @ANYRESDEC=r6, @ANYBLOB=',sync,seclaAel,uid>', @ANYRESDEC=r8, @ANYBLOB=',\x00']) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='cpu\t&0a\t\t\xb65\t\x00\x00\x7f\xff\xff\xff\x9f\x14\xd3\x8bl\x92:\xf2\xff\x1c\x1d\xa8\xc5Qa\xd0\xf6\x14\x98\x04\xaa\f\xf9\xeapI\x15\xf2L\x93\t\x86\xe8\xd8\x04\x14\xd8L\xaa\xcfM\x9e\xc8\b\xbd\x9d\x99\xc9\x02P\x99Ow\xdb0\xa1utw\xae\x99\x1e\x91\xd7\x83\x18\xa6\xbfp\xe5\x9f\xc9\xe4[{\xff\x90\xde\x1c\t\xbc[\x89\x16\xa5\x12\x14\xce\xaf!\x06\x13\'\x9a\x1eH\xfc\x93\xde\x83\xfb\xc9\xf5x\xefc\xf0\x87E\xca\xa6BRi\xb0U\xc1&W(N\xe06rT\xe0\xe2\xe9\xb9\xaf@\x11-c(2a\xb7B9B\x1f\x12\xf9,/\x8f\x92\x00\x11}\xbc:D\xdb\x92\x80=mel\xea\xdd\xa0\xe9d\t\xa6\x19\x84.hWe\x9at\xbc\xc3\xceA\xb4\xca8\xed\xb9^e\xf2`\xa4\xf7E\xc9\x01\xf7\x00\xf3\xadnn\x9b\x17\x98\xe4Q\x17<\x92\xb2\xa9%\xe7\x83\xf7\xef\xc9\f8R\xa0\x00C\xa0x\x91~XAs*{\xda\xb0BC\xad\xf6\xca\xe72\xb32h\xe1\xb0\xf3-\xd0W\x04\xf6\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\bq\a\x00\x00\x00h\x1dMD\x99#\xe2\x98{\xeb\x88\r`t6\xdd\xc1\xa1\xf7\xaa\xe7\xf2\t\x13~\xf28\xd2\x0ey\xa4\xd9\x1ds\xa6\xaa\xfa\xd1T\xf3\xda\x85\x18n?\xb1\xf21G\x12\x17\xe6\xa9\x8f\x16\x7f\x00\x00\x00\x04&]K\xef@n_\xb5@\x94\x90\x84\xdf\x97d`9\xe3[\x97\xcd\xcbQ8\xbd|v\x8c') mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 179.983616ms ago: executing program 0 (id=343): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x609, &(0x7f0000000d40)="$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") creat(0x0, 0x0) r0 = open(0x0, 0x101482, 0x0) fallocate(r0, 0x3, 0x0, 0x2000) 112.517931ms ago: executing program 3 (id=344): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001500)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x601, 0x0, 0x0, {0x3, 0x0, 0x9}}, @NFT_MSG_NEWSETELEM={0x5dc, 0xc, 0xa, 0x3, 0x0, 0x0, {0x8, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x59c, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffffe00}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x800}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7ff}]}]}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xf4, 0x6, 0x1, 0x0, "cea06dfcdc4adf802a99498ede3e3574f08c7d913726c2595c6cd8408e51ce597d03ed3daaa30f199f5268e89c7c198df6aeaf651e2c6970fd2a1ce43ec927dd6c5cdbe12f06185b8e622f2364701b383f8b489817973973790e442634c6402d08100e989c58c4291e8ca7a48ead64e6bb16f2411ac2402594f4b3ac7a8a35e6c1d94d42efbd8263ec9691336b8c953df38bfc5201be48dd4783325199d297b2d5f9c5225e10a1ea98201697768c584c5df19fbb800b569b371a61437a6f42647f14c5d4d79691dd561d1343dae4b4a149972d55c33736ad0846feb8c0490a2b9a5c736115d27f596fb35ff5dabca5cb"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}]}, {0x160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x15c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "18f25489ca66bbffbffb3eb7f4e2b19da988d204b1e0"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x100}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9b}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x522}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFTA_DATA_VALUE={0x29, 0x1, "fd1c1725045448e251203afb0d0046eebf35ca107609eeb62cdb9ba0678a721659d6eaee29"}, @NFTA_DATA_VALUE={0x53, 0x1, "6e088074b5a729220baae125c369acddf6174820f05c429750f8d122203e9e1d5c03a81b7eea856f8d8473b2e514de89fc54ad00edd3be8f54b3ffeb9017a3bcc7c3b180d0db184988836c48665ad8"}]}]}, {0x140, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x87, 0x6, 0x1, 0x0, "8ea43a04a4e34cc0256ddd83ef0cf19ff534ac511a8fc3efaab51b694005d188e9b2a8596fe0de2044ab364d0fbf8fcb07b9fc620fdb86690214cdc7cc9a1301f2f70185a0c42437ddecef29888ccb51de44844e25506728e9c0a2cbefdeb2cdb260ab93d2b6d7c187364bb2c7e0512cf2cc6e4644bdbd10af3bfd5e697f7f474272ef"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x70, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x144, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x124, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xcb, 0x1, "7e605d2fe846c5e0e5750c86e1ee6f9ed1daeb181af67b628a71838cc60b37faa6747acded6381c1a55c194961c838e4a10bb9c626166c42ea27d978b5ad025c5d8da265f0933d6bc9a085514e2c2777e2abcda5886563015c6698f06b7598b158d849697e75c93d1aeb4673919cc6d77b0bec2bb79a1cf16eac66decba48919cfc86afa20d6a62414fa01e465376c7ed5b52bab6f35ecece57fbe32728c513d6037b4eeeb642b149fc7ab189b516752717a9cb97964efea37775911075bb4725772423595d144"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffe}]}]}]}, @NFT_MSG_DELTABLE={0x74, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}}, @NFT_MSG_DELRULE={0x120, 0x8, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xeb, 0x7, 0x1, 0x0, "0d56cc733473449e39ac61422ee8f8bcc2480d87e99402975db0f8767903faab64a949d745259f55130279b528e45e006e652bcb613251766d6cc514ea83bfa320002c73a67ebea0992a2cfd5f0f5265f223df18e1338376b44bd98ce4cba640cbd52d8a9100a82fc568a559e3ad90ade074c3d2da82855df290cc1f74bc17ada52e240ea9d6fa0992329836ae37dff884976e7ffcfe0861316cb9cf24bc13f5380d06e2e9b9ad6eddd616f422eb3307ea527f6406ef68d5c7cadf05e98843d7d2ac717dd5679dfd4541145dd7336f335ba80526e5a56eacc2ec05c3c84a3c53f071a5f981ef14"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x18, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x4}]}, @NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x687, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x818}, 0x1, 0x0, 0x0, 0x880}, 0x0) 101.786852ms ago: executing program 0 (id=345): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x80089203, 0x200000000000000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000c00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, '.\x02\x00'}) lsetxattr$security_capability(&(0x7f00000009c0)='\x00', &(0x7f0000000a00), &(0x7f0000000c40)=@v3={0x3000000, [{0x3000, 0x4}, {0x3, 0xfffffffa}], r2}, 0x18, 0x0) (async) r3 = syz_open_dev$hiddev(&(0x7f00000008c0), 0x0, 0x44000) read$hiddev(r3, &(0x7f0000000900)=""/81, 0x51) (async) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000040)='.\x02\x00', 0x21000e, &(0x7f0000000dc0)={[], [{@pcr={'pcr', 0x3d, 0x18}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}, 0x0, 0x54d, &(0x7f0000000300)="$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") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], &(0x7f0000000200)=""/247, 0x4a, 0xf7, 0x1}, 0x20) (rerun: 64) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = syz_open_dev$sg(&(0x7f0000000980), 0x8001, 0x1a1000) ioctl$SCSI_IOCTL_PROBE_HOST(r10, 0x5385, &(0x7f0000000b00)={0xf8, ""/248}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r8, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r6, @ANYRES16=r7], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x20898) (async, rerun: 32) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r11}, 0x10) (async) r12 = openat$cgroup_ro(r5, &(0x7f0000000d40)='cpuacct.usage_percpu_user\x00', 0x100002, 0x0) (async, rerun: 64) msgget$private(0x0, 0x6ca) (rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="1400000010000100000000000000000000000082c8c91418f4c7f104000000000000000002000000100004800c00018007000100637400000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000aea76293c9f1f93afc02610a4cf40d67b0c7e7b06c606824b50d13bcd109966fea984d64de8668afc60e62b7500e81223dc312ad27f503d0420083725949ce76e56f886399687f7c9ac84cdaf44f8"], 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) msgsnd(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01"], 0x401, 0x0) 87.163593ms ago: executing program 3 (id=346): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x85, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x4}}, 0x74}, 0x1, 0x0, 0x2200}, 0x0) 45.006327ms ago: executing program 2 (id=347): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000035000100000000000000000002003800040000800c0001"], 0x24}}, 0x0) 0s ago: executing program 1 (id=348): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000200), 0x1, 0x5ec, &(0x7f0000002080)="$eJzs3c9vVNUeAPDvnU5LS3mvhby893AhTYyBqFBawBDjAraGNPgjbtxYoUWkQENrtGhCSXBjYtwYY+LKhfhfKIEtK125cOPKkBA1LE0cc6f3Qqe909Jfcxvu55MMPfecuZxzO/3OuffMOXcCqKyh9J9axN6ImE4iBpL5h2X1yAqHFp734M+Pz6SPJBqN139PIsny8ucn2c/+bOfeiPjxdhJ7upbXOzN39cL41NTElWx7ePbi9PDM3NWD5y+On5s4N3Fp9MXR48eOHjs+cnhdx3WtIO/Ujfc+GPh07K1vv/4rGfnul7EkTsQr2RMXH8dmGYqh5u8kWV7Uf3yzKytJV/Z3svglTuolNog1yV+/7oj4XwxEVzx68Qbik1dLbRywpRpJRAOoqET8Q0Xl5wH5tf3S6+BaKWclQCfcP7kwANCM+5Zgry+MDUZvc2xg54MkFg/rJBGxvpG5Vrsi4u6dsRuTd8ZuxBaNwwHF5q9HxP+L+v+kGf+D0RuDzfivtcR/+lZxOvuZ5r+2zvqXDhWLf+ichfjvXTH+o038v70o/t9ZZ/1Dj5Lv9rXEf996DwkAAAAAAAAq69bJiHih6PP/2sP5P1Ew/6c/Ik5sQv1DS7aXf/5fu7cJ1QAF7p+MeLlw/m8tn/072JWl/tWcD9CdTJ6fmjgcEf+OiAPRvSPdHlmhjoOf7fmqXdlQNv8vf6T1383mAmbtuFff0brP2fHZ8Y0eNxBx/3rEU/X28//S/j8p6P/T94Ppx6xjz7M3T7crWz3+ga3S+CZif2H//+iuFcnK9+cYbp4PDOdnBcs9/dHn37erf73x7xYTsHFp/79z5fgfTBbfr2dm7XUcmas32pWt9/y/J3mjecuZnizvw/HZ2SsjET3Jqa40tyV/NNt47nZ9cu3NhydGHg95vKTxf+CZlcf/is7/+yJifsn/nfzRuqY499+/+39t1x7n/1CeNP7Prqn/X3ti9ObgD+3qf7z+/2izrz+Q5Rj/gwVf5mHa05pfEI71oqJOtxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAngS1iNgVSe3Qw3StduhQRH9E/Cd21qYuz8w+P3n5/Utn07Lm9//X8m/6HVjYTvLv/x9ctD26ZPtIROyOiC+6+pLJ8zvKPmwAAAAAAAAAAAAAAAAAAADYVvrbrP9P/dZVduuALVcvuwFAaQri/6cy2gF0nv4fqkv8Q3WJf6gu8Q/VJf6husQ/VJf4h+oqjP+k8+0AAAAAAAA2xe59t35OImL+pb7mI9WTlXWX2jJgq9XKbgBQGrf4geoy9Q+qyzU+sNps3962O21knvD0mQ3sDAAAAAAAAAAAAACVs3+v9f9QVdb/Q3VZ/w/Vla//31dyO4DOc40PxCor+QvX/6+6FwAAAAAAAAAAAACwmWbmrl4Yn5qauCLx5vZoRicTjUbjWvpX0KFKG9lq021x7FuQyKfCb5f2LEnka/0eb6+S3pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl/gkAAP//Uj8bkQ==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) syz_io_uring_setup(0x368c, 0x0, 0x0, &(0x7f0000000240)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) kernel console output (not intermixed with test programs): [ 18.276660][ T29] audit: type=1400 audit(1723911328.129:81): avc: denied { read } for pid=2942 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. [ 21.174382][ T29] audit: type=1400 audit(1723911331.019:82): avc: denied { mounton } for pid=3244 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.174958][ T3244] cgroup: Unknown subsys name 'net' [ 21.197081][ T29] audit: type=1400 audit(1723911331.029:83): avc: denied { mount } for pid=3244 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.224831][ T29] audit: type=1400 audit(1723911331.079:84): avc: denied { unmount } for pid=3244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.335846][ T3244] cgroup: Unknown subsys name 'rlimit' [ 21.457797][ T29] audit: type=1400 audit(1723911331.309:85): avc: denied { setattr } for pid=3244 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.481105][ T29] audit: type=1400 audit(1723911331.309:86): avc: denied { create } for pid=3244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.495480][ T3249] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.501516][ T29] audit: type=1400 audit(1723911331.309:87): avc: denied { write } for pid=3244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.530426][ T29] audit: type=1400 audit(1723911331.309:88): avc: denied { read } for pid=3244 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.531881][ T3244] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.550786][ T29] audit: type=1400 audit(1723911331.309:89): avc: denied { mounton } for pid=3244 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.584062][ T29] audit: type=1400 audit(1723911331.309:90): avc: denied { mount } for pid=3244 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.607378][ T29] audit: type=1400 audit(1723911331.359:91): avc: denied { relabelto } for pid=3249 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.505254][ T3257] chnl_net:caif_netlink_parms(): no params data found [ 22.593612][ T3257] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.600711][ T3257] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.607884][ T3257] bridge_slave_0: entered allmulticast mode [ 22.614267][ T3257] bridge_slave_0: entered promiscuous mode [ 22.622598][ T3257] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.629816][ T3257] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.636970][ T3257] bridge_slave_1: entered allmulticast mode [ 22.643264][ T3257] bridge_slave_1: entered promiscuous mode [ 22.677172][ T3257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.688297][ T3257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.707078][ T3257] team0: Port device team_slave_0 added [ 22.713355][ T3257] team0: Port device team_slave_1 added [ 22.743800][ T3257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.750837][ T3257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.776778][ T3257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.811909][ T3257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.818912][ T3257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.844895][ T3257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.885458][ T3267] chnl_net:caif_netlink_parms(): no params data found [ 22.894548][ T3263] chnl_net:caif_netlink_parms(): no params data found [ 22.922232][ T3259] chnl_net:caif_netlink_parms(): no params data found [ 22.941138][ T3257] hsr_slave_0: entered promiscuous mode [ 22.947133][ T3257] hsr_slave_1: entered promiscuous mode [ 22.953226][ T3261] chnl_net:caif_netlink_parms(): no params data found [ 23.035007][ T3263] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.042150][ T3263] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.049349][ T3263] bridge_slave_0: entered allmulticast mode [ 23.055775][ T3263] bridge_slave_0: entered promiscuous mode [ 23.071242][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.078351][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.085560][ T3267] bridge_slave_0: entered allmulticast mode [ 23.091843][ T3267] bridge_slave_0: entered promiscuous mode [ 23.098166][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.105285][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.112378][ T3259] bridge_slave_0: entered allmulticast mode [ 23.118718][ T3259] bridge_slave_0: entered promiscuous mode [ 23.125170][ T3263] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.132355][ T3263] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.139532][ T3263] bridge_slave_1: entered allmulticast mode [ 23.145880][ T3263] bridge_slave_1: entered promiscuous mode [ 23.151926][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.159076][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.166252][ T3261] bridge_slave_0: entered allmulticast mode [ 23.172499][ T3261] bridge_slave_0: entered promiscuous mode [ 23.180987][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.188072][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.195341][ T3261] bridge_slave_1: entered allmulticast mode [ 23.201758][ T3261] bridge_slave_1: entered promiscuous mode [ 23.208027][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.215089][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.222223][ T3267] bridge_slave_1: entered allmulticast mode [ 23.228523][ T3267] bridge_slave_1: entered promiscuous mode [ 23.234900][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.241942][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.249216][ T3259] bridge_slave_1: entered allmulticast mode [ 23.255482][ T3259] bridge_slave_1: entered promiscuous mode [ 23.297408][ T3259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.307425][ T3263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.317422][ T3263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.327425][ T3261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.337431][ T3261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.352843][ T3259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.379829][ T3267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.398301][ T3263] team0: Port device team_slave_0 added [ 23.408762][ T3261] team0: Port device team_slave_0 added [ 23.415254][ T3267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.429222][ T3263] team0: Port device team_slave_1 added [ 23.438220][ T3261] team0: Port device team_slave_1 added [ 23.452121][ T3259] team0: Port device team_slave_0 added [ 23.458488][ T3267] team0: Port device team_slave_0 added [ 23.479528][ T3259] team0: Port device team_slave_1 added [ 23.485921][ T3267] team0: Port device team_slave_1 added [ 23.502152][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.509248][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.535181][ T3261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.546396][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.553326][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.579358][ T3261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.606441][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.613439][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.639367][ T3263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.650455][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.657409][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.683294][ T3263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.701208][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.708263][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.734190][ T3259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.745550][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.752484][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.778419][ T3259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.789269][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.796329][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.822231][ T3267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.847864][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.854974][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.880971][ T3267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.901618][ T3263] hsr_slave_0: entered promiscuous mode [ 23.907555][ T3263] hsr_slave_1: entered promiscuous mode [ 23.913260][ T3263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.920858][ T3263] Cannot create hsr debugfs directory [ 23.957815][ T3267] hsr_slave_0: entered promiscuous mode [ 23.963869][ T3267] hsr_slave_1: entered promiscuous mode [ 23.969758][ T3267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.977341][ T3267] Cannot create hsr debugfs directory [ 23.987061][ T3257] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 23.997506][ T3259] hsr_slave_0: entered promiscuous mode [ 24.003519][ T3259] hsr_slave_1: entered promiscuous mode [ 24.009573][ T3259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.017148][ T3259] Cannot create hsr debugfs directory [ 24.028664][ T3261] hsr_slave_0: entered promiscuous mode [ 24.034770][ T3261] hsr_slave_1: entered promiscuous mode [ 24.040688][ T3261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.048245][ T3261] Cannot create hsr debugfs directory [ 24.053731][ T3257] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.076825][ T3257] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.085293][ T3257] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.240365][ T3263] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.251223][ T3263] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.260329][ T3263] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.271279][ T3263] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.302889][ T3261] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.314787][ T3261] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.330109][ T3261] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.338360][ T3261] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.352262][ T3257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.368414][ T3259] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.380322][ T3259] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.398154][ T3259] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.406699][ T3259] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.425440][ T3267] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.439576][ T3257] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.450615][ T3267] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.461308][ T3267] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.469836][ T3267] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.498698][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.505885][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.514430][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.521672][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.538188][ T3263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.559069][ T3261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.577309][ T3263] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.606446][ T3275] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.613571][ T3275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.623457][ T3275] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.630582][ T3275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.665740][ T3261] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.687829][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.702663][ T3257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.711982][ T3267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.721946][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.729034][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.737485][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.744585][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.753811][ T3259] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.778605][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.785728][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.802485][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.809601][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.825834][ T3267] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.840819][ T3261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.851243][ T3261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.872502][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.879594][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.897055][ T3263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.913827][ T3267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.924392][ T3267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.942864][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.949952][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.968939][ T3259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.979443][ T3259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.024624][ T3257] veth0_vlan: entered promiscuous mode [ 25.042904][ T3257] veth1_vlan: entered promiscuous mode [ 25.059216][ T3267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.071907][ T3261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.095106][ T3257] veth0_macvtap: entered promiscuous mode [ 25.120887][ T3257] veth1_macvtap: entered promiscuous mode [ 25.133999][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.164468][ T3257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.175931][ T3257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.186365][ T3263] veth0_vlan: entered promiscuous mode [ 25.197718][ T3263] veth1_vlan: entered promiscuous mode [ 25.215268][ T3257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.224020][ T3257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.233052][ T3257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.241858][ T3257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.266735][ T3267] veth0_vlan: entered promiscuous mode [ 25.288276][ T3261] veth0_vlan: entered promiscuous mode [ 25.298808][ T3261] veth1_vlan: entered promiscuous mode [ 25.306284][ T3263] veth0_macvtap: entered promiscuous mode [ 25.316835][ T3267] veth1_vlan: entered promiscuous mode [ 25.331349][ T3263] veth1_macvtap: entered promiscuous mode [ 25.342918][ T3261] veth0_macvtap: entered promiscuous mode [ 25.352865][ T3261] veth1_macvtap: entered promiscuous mode [ 25.369156][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.379663][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.391751][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.393519][ T3393] loop0: detected capacity change from 0 to 512 [ 25.409578][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.420044][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.429922][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.440390][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.453208][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.461959][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.472458][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.483136][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.495496][ T3393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 25.501882][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.518450][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.528292][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.538798][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.549297][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.555459][ T3393] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.564332][ T3267] veth0_macvtap: entered promiscuous mode [ 25.574099][ T3267] veth1_macvtap: entered promiscuous mode [ 25.585906][ T3261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.594767][ T3261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.603455][ T3261] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.612403][ T3261] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.624800][ T3263] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.633535][ T3263] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.642245][ T3263] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.646039][ T3393] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 25.650950][ T3263] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.688560][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.699051][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.708979][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.719508][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.729359][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.739770][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.750553][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.756461][ T3393] syz.0.1 (3393) used greatest stack depth: 11448 bytes left [ 25.768266][ T3257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.781346][ T3259] veth0_vlan: entered promiscuous mode [ 25.790589][ T3259] veth1_vlan: entered promiscuous mode [ 25.806532][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.817006][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.826880][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.837431][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.847276][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.857838][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.868628][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.884934][ T3259] veth0_macvtap: entered promiscuous mode [ 25.901561][ T3267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.910468][ T3267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.919339][ T3267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.928144][ T3267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.951050][ T3409] loop1: detected capacity change from 0 to 128 [ 25.958124][ T3259] veth1_macvtap: entered promiscuous mode [ 25.958930][ T3409] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 26.002409][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.012966][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.022908][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.033617][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.043467][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.054018][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.063870][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.074333][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.095524][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.103800][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.114348][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.124182][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.134633][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.144560][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.145604][ T3416] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 26.154963][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.154975][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.154988][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.194992][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 26.195004][ T29] audit: type=1400 audit(1723911336.049:150): avc: denied { prog_run } for pid=3414 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.195221][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.258755][ T3421] loop2: detected capacity change from 0 to 512 [ 26.259830][ T3409] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.278993][ T29] audit: type=1400 audit(1723911336.109:151): avc: denied { ioctl } for pid=3408 comm="syz.1.2" path="socket:[2694]" dev="sockfs" ino=2694 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 26.282860][ T3259] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.312282][ T3259] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.321078][ T3259] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.323356][ T3419] loop3: detected capacity change from 0 to 256 [ 26.329800][ T3259] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.350099][ T3421] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.363276][ T3421] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 26.381580][ T29] audit: type=1400 audit(1723911336.229:152): avc: denied { create } for pid=3422 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 26.382420][ T3419] vfat: Unknown parameter '¾¶âÑ¥òwS~"}2†>!Ž9Ÿ»TÜEÎJŒbxÂ&õaû6°×ÝpRÜJ/ W' [ 26.405112][ T3421] EXT4-fs (loop2): 1 truncate cleaned up [ 26.418911][ T3421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.428054][ T29] audit: type=1400 audit(1723911336.269:153): avc: denied { read } for pid=3418 comm="syz.3.8" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.451778][ T29] audit: type=1400 audit(1723911336.269:154): avc: denied { open } for pid=3418 comm="syz.3.8" path="mnt:[4026532384]" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.474735][ T29] audit: type=1400 audit(1723911336.269:155): avc: denied { create } for pid=3418 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 26.496438][ T29] audit: type=1400 audit(1723911336.299:156): avc: denied { append } for pid=3420 comm="syz.2.3" path="/0/file1/blkio.bfq.avg_queue_size" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.520527][ T29] audit: type=1400 audit(1723911336.299:157): avc: denied { getopt } for pid=3420 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 26.539758][ T29] audit: type=1400 audit(1723911336.299:158): avc: denied { connect } for pid=3420 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 26.559234][ T29] audit: type=1400 audit(1723911336.299:159): avc: denied { name_connect } for pid=3420 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 26.562359][ T3427] EXT4-fs error (device loop2): swap_inode_boot_loader:384: inode #5: comm syz.2.3: iget: bad extra_isize 46 (inode size 256) [ 26.582688][ T3428] loop3: detected capacity change from 0 to 128 [ 26.593482][ T3425] netlink: 576 bytes leftover after parsing attributes in process `syz.0.9'. [ 26.638509][ T3428] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 26.673473][ T3434] loop1: detected capacity change from 0 to 512 [ 26.680163][ T3434] ext4: Bad value for 'journal_dev' [ 26.685761][ T3428] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 26.780930][ T3441] netlink: 172 bytes leftover after parsing attributes in process `syz.0.13'. [ 27.558769][ T3447] loop4: detected capacity change from 0 to 4096 [ 27.565937][ T3447] EXT4-fs: Ignoring removed nobh option [ 27.634271][ T3261] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 27.644071][ T3447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.653932][ T3445] loop0: detected capacity change from 0 to 1024 [ 27.665101][ T3447] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.5: Failed to acquire dquot type 1 [ 27.666738][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.687535][ T3451] dccp_invalid_packet: P.Data Offset(0) too small [ 27.693675][ T3445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.728742][ T3455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.746912][ T3456] loop3: detected capacity change from 0 to 1024 [ 27.748102][ T3451] loop1: detected capacity change from 0 to 128 [ 27.760675][ T3451] ======================================================= [ 27.760675][ T3451] WARNING: The mand mount option has been deprecated and [ 27.760675][ T3451] and is ignored by this kernel. Remove the mand [ 27.760675][ T3451] option from the mount to silence this warning. [ 27.760675][ T3451] ======================================================= [ 27.765685][ T3455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.846714][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.848636][ T3456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.892624][ T3451] syz.1.16 (3451) used greatest stack depth: 10496 bytes left [ 27.899189][ T3462] netlink: 'syz.4.18': attribute type 2 has an invalid length. [ 27.907736][ T3462] netlink: 'syz.4.18': attribute type 8 has an invalid length. [ 27.915308][ T3462] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18'. [ 27.974003][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.034657][ T3472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.056042][ T3472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.080545][ T3475] netlink: 'syz.1.24': attribute type 2 has an invalid length. [ 28.088299][ T3475] netlink: 'syz.1.24': attribute type 8 has an invalid length. [ 28.096032][ T3475] netlink: 132 bytes leftover after parsing attributes in process `syz.1.24'. [ 28.119280][ T3257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.149527][ T3482] netlink: 36 bytes leftover after parsing attributes in process `syz.0.26'. [ 28.168106][ T3482] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 28.259285][ T3489] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.355965][ T3491] loop0: detected capacity change from 0 to 512 [ 28.379828][ T3491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.383495][ T3495] netlink: 'syz.1.31': attribute type 2 has an invalid length. [ 28.399973][ T3495] netlink: 'syz.1.31': attribute type 8 has an invalid length. [ 28.407550][ T3495] netlink: 132 bytes leftover after parsing attributes in process `syz.1.31'. [ 28.425759][ T3491] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.468185][ T3257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.526834][ T3504] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 28.678677][ T3519] loop3: detected capacity change from 0 to 1024 [ 28.703627][ T3519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.716160][ T3523] bridge_slave_0: left allmulticast mode [ 28.716181][ T3523] bridge_slave_0: left promiscuous mode [ 28.716351][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.744590][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.749395][ T3523] bridge_slave_1: left allmulticast mode [ 28.759268][ T3523] bridge_slave_1: left promiscuous mode [ 28.764946][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.784672][ T3523] bond0: (slave bond_slave_0): Releasing backup interface [ 28.802508][ T3523] bond0: (slave bond_slave_1): Releasing backup interface [ 28.824579][ T3523] team0: Port device team_slave_0 removed [ 28.846195][ T3523] team0: Port device team_slave_1 removed [ 28.856118][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 28.863692][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 28.873097][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 28.880733][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 28.904215][ T3526] netlink: 'syz.1.42': attribute type 2 has an invalid length. [ 28.911807][ T3526] netlink: 'syz.1.42': attribute type 8 has an invalid length. [ 28.919487][ T3526] netlink: 132 bytes leftover after parsing attributes in process `syz.1.42'. [ 28.936673][ T3529] netlink: 'syz.3.44': attribute type 2 has an invalid length. [ 28.944331][ T3529] netlink: 'syz.3.44': attribute type 8 has an invalid length. [ 28.944341][ T3529] netlink: 132 bytes leftover after parsing attributes in process `syz.3.44'. [ 29.009439][ T3536] netlink: 20 bytes leftover after parsing attributes in process `syz.3.48'. [ 29.047774][ T3537] loop4: detected capacity change from 0 to 1024 [ 29.062979][ T3537] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 29.074158][ T3537] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 29.085300][ T3537] EXT4-fs (loop4): invalid journal inode [ 29.091035][ T3543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 29.113821][ T3537] EXT4-fs (loop4): can't get journal size [ 29.122281][ T3537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 29.176302][ T3550] loop0: detected capacity change from 0 to 1024 [ 29.233052][ T3537] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 37: comm syz.4.47: path /4/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 29.254083][ T3537] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.47: path /4/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 29.265295][ T3550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.307753][ T3257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.322275][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.336066][ T3568] batadv_slave_0: entered allmulticast mode [ 29.438861][ T3577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3577 comm=syz.4.60 [ 29.474954][ T3582] loop0: detected capacity change from 0 to 4096 [ 29.490272][ T3582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.513038][ T3257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.580078][ T3602] loop0: detected capacity change from 0 to 512 [ 29.596892][ T3602] FAT-fs (loop0): bogus logical sector size 0 [ 29.602994][ T3602] FAT-fs (loop0): Can't find a valid FAT filesystem [ 29.696228][ T3614] hsr0: entered promiscuous mode [ 29.707268][ T3614] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 29.719414][ T3614] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 29.734497][ T3614] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 29.746967][ T3614] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 29.755901][ T3615] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 30.049364][ T3634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 30.058688][ T3634] batadv_slave_0: entered allmulticast mode [ 30.194197][ T3655] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 30.213706][ T3655] bridge0: port 2(–eth0_vlan) entered disabled state [ 30.220611][ T3655] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.242623][ T3655] bridge0: port 2(–eth0_vlan) entered blocking state [ 30.249521][ T3655] bridge0: port 2(–eth0_vlan) entered forwarding state [ 30.256671][ T3655] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.263768][ T3655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.273858][ T3655] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 30.288905][ T3665] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 30.304058][ T3652] bridge_slave_0: left allmulticast mode [ 30.309821][ T3652] bridge_slave_0: left promiscuous mode [ 30.316382][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.341149][ T3652] bridge_slave_1: left allmulticast mode [ 30.346885][ T3652] bridge_slave_1: left promiscuous mode [ 30.352513][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.386736][ T3652] bond0: (slave bond_slave_0): Releasing backup interface [ 30.398705][ T3652] bond0: (slave bond_slave_1): Releasing backup interface [ 30.415407][ T3652] team0: Port device team_slave_0 removed [ 30.425069][ T3652] team0: Port device team_slave_1 removed [ 30.432249][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 30.440503][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 30.447950][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 30.579499][ T3690] openvswitch: netlink: Message has 8 unknown bytes. [ 30.697402][ T3711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.711895][ T3711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.801979][ T3728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 30.811883][ T3728] batadv_slave_0: entered allmulticast mode [ 30.897308][ T3740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.908562][ T3740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.960705][ T3748] Zero length message leads to an empty skb [ 30.987185][ T3752] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 31.013572][ T3757] FAULT_INJECTION: forcing a failure. [ 31.013572][ T3757] name failslab, interval 1, probability 0, space 0, times 0 [ 31.026309][ T3757] CPU: 1 UID: 0 PID: 3757 Comm: syz.2.127 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 31.036895][ T3757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 31.046958][ T3757] Call Trace: [ 31.050248][ T3757] [ 31.053179][ T3757] dump_stack_lvl+0xf2/0x150 [ 31.057827][ T3757] dump_stack+0x15/0x20 [ 31.062101][ T3757] should_fail_ex+0x229/0x230 [ 31.066859][ T3757] ? nla_strdup+0x7a/0xc0 [ 31.071198][ T3757] should_failslab+0x8f/0xb0 [ 31.075809][ T3757] __kmalloc_noprof+0xa5/0x370 [ 31.080677][ T3757] nla_strdup+0x7a/0xc0 [ 31.084837][ T3757] nf_tables_newtable+0x3e7/0xec0 [ 31.089903][ T3757] nfnetlink_rcv+0xb37/0x15e0 [ 31.094654][ T3757] netlink_unicast+0x599/0x670 [ 31.099496][ T3757] netlink_sendmsg+0x5cc/0x6e0 [ 31.104280][ T3757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 31.109595][ T3757] __sock_sendmsg+0x140/0x180 [ 31.114282][ T3757] ____sys_sendmsg+0x312/0x410 [ 31.119107][ T3757] __sys_sendmsg+0x1e9/0x280 [ 31.123798][ T3757] __x64_sys_sendmsg+0x46/0x50 [ 31.128604][ T3757] x64_sys_call+0x2689/0x2d60 [ 31.133340][ T3757] do_syscall_64+0xc9/0x1c0 [ 31.137851][ T3757] ? clear_bhb_loop+0x55/0xb0 [ 31.142536][ T3757] ? clear_bhb_loop+0x55/0xb0 [ 31.147310][ T3757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.153239][ T3757] RIP: 0033:0x7fd7132d9e79 [ 31.157685][ T3757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.177293][ T3757] RSP: 002b:00007fd711f57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 31.185785][ T3757] RAX: ffffffffffffffda RBX: 00007fd713475f80 RCX: 00007fd7132d9e79 [ 31.193754][ T3757] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 31.201730][ T3757] RBP: 00007fd711f57090 R08: 0000000000000000 R09: 0000000000000000 [ 31.209700][ T3757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.217671][ T3757] R13: 0000000000000000 R14: 00007fd713475f80 R15: 00007ffe9a7bd888 [ 31.225680][ T3757] [ 31.315891][ T3763] loop4: detected capacity change from 0 to 256 [ 31.323301][ T3763] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.334358][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 31.334370][ T29] audit: type=1400 audit(1723911341.189:286): avc: denied { mount } for pid=3762 comm="syz.4.130" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 31.403642][ T29] audit: type=1400 audit(1723911341.249:287): avc: denied { create } for pid=3760 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 31.427792][ T29] audit: type=1400 audit(1723911341.249:288): avc: denied { create } for pid=3760 comm="syz.2.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 31.479317][ T29] audit: type=1400 audit(1723911341.329:289): avc: denied { create } for pid=3773 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 31.512905][ T29] audit: type=1326 audit(1723911341.349:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3773 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7132d9e79 code=0x7ffc0000 [ 31.536630][ T29] audit: type=1326 audit(1723911341.349:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3773 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7132d9e79 code=0x7ffc0000 [ 31.560109][ T29] audit: type=1326 audit(1723911341.349:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3773 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd7132d9e79 code=0x7ffc0000 [ 31.583280][ T29] audit: type=1400 audit(1723911341.349:293): avc: denied { getopt } for pid=3773 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 31.602592][ T29] audit: type=1326 audit(1723911341.349:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3773 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7132d9e79 code=0x7ffc0000 [ 31.605468][ T3772] __nla_validate_parse: 11 callbacks suppressed [ 31.605485][ T3772] netlink: 132 bytes leftover after parsing attributes in process `syz.0.134'. [ 31.626199][ T29] audit: type=1326 audit(1723911341.349:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3773 comm="syz.2.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7132d9e79 code=0x7ffc0000 [ 31.700025][ T3783] netlink: 132 bytes leftover after parsing attributes in process `syz.0.137'. [ 31.707670][ T3787] loop2: detected capacity change from 0 to 512 [ 31.716562][ T3787] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 31.731020][ T3787] EXT4-fs (loop2): invalid journal inode [ 31.740001][ T3787] EXT4-fs (loop2): can't get journal size [ 31.749828][ T3787] EXT4-fs (loop2): 1 truncate cleaned up [ 31.757975][ T3787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.787463][ T3787] No source specified [ 31.921207][ T3818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.150'. [ 31.924384][ T3816] process 'syz.4.145' launched './file0' with NULL argv: empty string added [ 31.933829][ T3820] loop3: detected capacity change from 0 to 512 [ 31.939627][ T3821] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3821 comm=syz.2.138 [ 31.977978][ T3820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.990589][ T3820] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.007254][ T3825] loop0: detected capacity change from 0 to 128 [ 32.017413][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.033351][ T3825] syz.0.152: attempt to access beyond end of device [ 32.033351][ T3825] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 32.044785][ T3827] FAULT_INJECTION: forcing a failure. [ 32.044785][ T3827] name failslab, interval 1, probability 0, space 0, times 0 [ 32.053748][ T3825] syz.0.152: attempt to access beyond end of device [ 32.053748][ T3825] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 32.059578][ T3827] CPU: 0 UID: 0 PID: 3827 Comm: syz.3.153 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 32.059603][ T3827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 32.059612][ T3827] Call Trace: [ 32.059619][ T3827] [ 32.059625][ T3827] dump_stack_lvl+0xf2/0x150 [ 32.073527][ T3825] syz.0.152: attempt to access beyond end of device [ 32.073527][ T3825] loop0: rw=0, sector=169, nr_sectors = 8 limit=128 [ 32.083828][ T3827] dump_stack+0x15/0x20 [ 32.094614][ T3825] syz.0.152: attempt to access beyond end of device [ 32.094614][ T3825] loop0: rw=0, sector=169, nr_sectors = 8 limit=128 [ 32.097150][ T3827] should_fail_ex+0x229/0x230 [ 32.100195][ T3825] syz.0.152: attempt to access beyond end of device [ 32.100195][ T3825] loop0: rw=0, sector=169, nr_sectors = 8 limit=128 [ 32.104640][ T3827] ? nla_strdup+0x7a/0xc0 [ 32.104659][ T3827] should_failslab+0x8f/0xb0 [ 32.120306][ T3825] syz.0.152: attempt to access beyond end of device [ 32.120306][ T3825] loop0: rw=0, sector=169, nr_sectors = 8 limit=128 [ 32.121824][ T3827] __kmalloc_noprof+0xa5/0x370 [ 32.179199][ T3827] nla_strdup+0x7a/0xc0 [ 32.183347][ T3827] nf_tables_newtable+0x3e7/0xec0 [ 32.188383][ T3827] nfnetlink_rcv+0xb37/0x15e0 [ 32.193066][ T3827] netlink_unicast+0x599/0x670 [ 32.197906][ T3827] netlink_sendmsg+0x5cc/0x6e0 [ 32.202659][ T3827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 32.207940][ T3827] __sock_sendmsg+0x140/0x180 [ 32.212641][ T3827] ____sys_sendmsg+0x312/0x410 [ 32.217408][ T3827] __sys_sendmsg+0x1e9/0x280 [ 32.222043][ T3827] __x64_sys_sendmsg+0x46/0x50 [ 32.226875][ T3827] x64_sys_call+0x2689/0x2d60 [ 32.231578][ T3827] do_syscall_64+0xc9/0x1c0 [ 32.236122][ T3827] ? clear_bhb_loop+0x55/0xb0 [ 32.240973][ T3827] ? clear_bhb_loop+0x55/0xb0 [ 32.245642][ T3827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.251525][ T3827] RIP: 0033:0x7effd4289e79 [ 32.255987][ T3827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.275582][ T3827] RSP: 002b:00007effd2f01038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 32.284014][ T3827] RAX: ffffffffffffffda RBX: 00007effd4425f80 RCX: 00007effd4289e79 [ 32.292029][ T3827] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 32.299985][ T3827] RBP: 00007effd2f01090 R08: 0000000000000000 R09: 0000000000000000 [ 32.308026][ T3827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.316008][ T3827] R13: 0000000000000000 R14: 00007effd4425f80 R15: 00007ffc7562a808 [ 32.323966][ T3827] [ 32.376602][ T3835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 32.383819][ T3835] IPv6: NLM_F_CREATE should be set when creating new route [ 32.391102][ T3835] IPv6: NLM_F_CREATE should be set when creating new route [ 32.443864][ T3843] loop3: detected capacity change from 0 to 1024 [ 32.454038][ T3843] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 32.466897][ T3849] openvswitch: netlink: Message has 8 unknown bytes. [ 32.477147][ T3843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.503708][ T3853] loop0: detected capacity change from 0 to 1024 [ 32.549862][ T3853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.573824][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.593786][ T3257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.660647][ T3863] loop2: detected capacity change from 0 to 256 [ 32.726447][ T3872] loop0: detected capacity change from 0 to 2048 [ 32.769743][ T3872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.799054][ T3257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.812154][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.812232][ T3882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.173'. [ 32.859472][ T3892] loop0: detected capacity change from 0 to 512 [ 32.879048][ T3894] loop2: detected capacity change from 0 to 1024 [ 32.886589][ T3892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.907333][ T3891] loop3: detected capacity change from 0 to 4096 [ 32.912940][ T3892] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.914800][ T3900] loop4: detected capacity change from 0 to 512 [ 32.931485][ T3900] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 32.941336][ T3894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.947011][ T3900] EXT4-fs (loop4): invalid journal inode [ 32.963346][ T3891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.969845][ T3900] EXT4-fs (loop4): can't get journal size [ 32.982490][ T3257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.991743][ T3900] EXT4-fs (loop4): 1 truncate cleaned up [ 32.993035][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.997919][ T3900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.029120][ T3900] No source specified [ 33.037429][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.067149][ T3907] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 33.089743][ T3915] FAULT_INJECTION: forcing a failure. [ 33.089743][ T3915] name failslab, interval 1, probability 0, space 0, times 0 [ 33.102424][ T3915] CPU: 0 UID: 0 PID: 3915 Comm: syz.2.184 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 33.113089][ T3915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 33.123125][ T3915] Call Trace: [ 33.126384][ T3915] [ 33.129299][ T3915] dump_stack_lvl+0xf2/0x150 [ 33.134033][ T3915] dump_stack+0x15/0x20 [ 33.138245][ T3915] should_fail_ex+0x229/0x230 [ 33.142907][ T3915] ? nft_trans_table_add+0x38/0x1a0 [ 33.148174][ T3915] should_failslab+0x8f/0xb0 [ 33.152750][ T3915] __kmalloc_cache_noprof+0x4b/0x2a0 [ 33.158053][ T3915] nft_trans_table_add+0x38/0x1a0 [ 33.159672][ T3913] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3913 comm=syz.4.180 [ 33.163134][ T3915] nf_tables_newtable+0x985/0xec0 [ 33.180639][ T3915] nfnetlink_rcv+0xb37/0x15e0 [ 33.185326][ T3915] netlink_unicast+0x599/0x670 [ 33.190107][ T3915] netlink_sendmsg+0x5cc/0x6e0 [ 33.194856][ T3915] ? __pfx_netlink_sendmsg+0x10/0x10 [ 33.200231][ T3915] __sock_sendmsg+0x140/0x180 [ 33.204892][ T3915] ____sys_sendmsg+0x312/0x410 [ 33.209641][ T3915] __sys_sendmsg+0x1e9/0x280 [ 33.214227][ T3915] __x64_sys_sendmsg+0x46/0x50 [ 33.219054][ T3915] x64_sys_call+0x2689/0x2d60 [ 33.223712][ T3915] do_syscall_64+0xc9/0x1c0 [ 33.228206][ T3915] ? clear_bhb_loop+0x55/0xb0 [ 33.232877][ T3915] ? clear_bhb_loop+0x55/0xb0 [ 33.237553][ T3915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.243505][ T3915] RIP: 0033:0x7fd7132d9e79 [ 33.247897][ T3915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.267624][ T3915] RSP: 002b:00007fd711f57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.276059][ T3915] RAX: ffffffffffffffda RBX: 00007fd713475f80 RCX: 00007fd7132d9e79 [ 33.284022][ T3915] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 33.291973][ T3915] RBP: 00007fd711f57090 R08: 0000000000000000 R09: 0000000000000000 [ 33.299960][ T3915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 33.307909][ T3915] R13: 0000000000000000 R14: 00007fd713475f80 R15: 00007ffe9a7bd888 [ 33.315933][ T3915] [ 33.510254][ T3945] vlan2: entered promiscuous mode [ 33.515386][ T3945] macvtap0: entered promiscuous mode [ 33.520801][ T3945] vlan2: entered allmulticast mode [ 33.525985][ T3945] macvtap0: entered allmulticast mode [ 33.531481][ T3945] veth0_macvtap: entered allmulticast mode [ 33.539294][ T3945] macvtap0: left allmulticast mode [ 33.544498][ T3945] veth0_macvtap: left allmulticast mode [ 33.550150][ T3945] macvtap0: left promiscuous mode [ 33.761004][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.802775][ T3958] loop4: detected capacity change from 0 to 1024 [ 33.818742][ T3958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.849336][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.932055][ T3967] loop4: detected capacity change from 0 to 512 [ 33.951935][ T3967] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.969629][ T3971] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 33.999048][ T3967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.014256][ T3967] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.054457][ T3975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 34.107751][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.141174][ T3982] FAULT_INJECTION: forcing a failure. [ 34.141174][ T3982] name failslab, interval 1, probability 0, space 0, times 0 [ 34.154054][ T3982] CPU: 0 UID: 0 PID: 3982 Comm: syz.4.211 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 34.164651][ T3982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 34.164664][ T3982] Call Trace: [ 34.164671][ T3982] [ 34.164677][ T3982] dump_stack_lvl+0xf2/0x150 [ 34.164708][ T3982] dump_stack+0x15/0x20 [ 34.164793][ T3982] should_fail_ex+0x229/0x230 [ 34.164864][ T3982] ? nft_trans_table_add+0x38/0x1a0 [ 34.164892][ T3982] should_failslab+0x8f/0xb0 [ 34.164920][ T3982] __kmalloc_cache_noprof+0x4b/0x2a0 [ 34.165000][ T3982] nft_trans_table_add+0x38/0x1a0 [ 34.165026][ T3982] nf_tables_newtable+0x985/0xec0 [ 34.165062][ T3982] nfnetlink_rcv+0xb37/0x15e0 [ 34.165099][ T3982] netlink_unicast+0x599/0x670 [ 34.165118][ T3982] netlink_sendmsg+0x5cc/0x6e0 [ 34.165144][ T3982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 34.165165][ T3982] __sock_sendmsg+0x140/0x180 [ 34.165263][ T3982] ____sys_sendmsg+0x312/0x410 [ 34.165289][ T3982] __sys_sendmsg+0x1e9/0x280 [ 34.165322][ T3982] __x64_sys_sendmsg+0x46/0x50 [ 34.165347][ T3982] x64_sys_call+0x2689/0x2d60 [ 34.165437][ T3982] do_syscall_64+0xc9/0x1c0 [ 34.165510][ T3982] ? clear_bhb_loop+0x55/0xb0 [ 34.165534][ T3982] ? clear_bhb_loop+0x55/0xb0 [ 34.165555][ T3982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.283164][ T3982] RIP: 0033:0x7f3b9e7c9e79 [ 34.283184][ T3982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.283203][ T3982] RSP: 002b:00007f3b9d447038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.283286][ T3982] RAX: ffffffffffffffda RBX: 00007f3b9e965f80 RCX: 00007f3b9e7c9e79 [ 34.283297][ T3982] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 34.283309][ T3982] RBP: 00007f3b9d447090 R08: 0000000000000000 R09: 0000000000000000 [ 34.283320][ T3982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 34.283332][ T3982] R13: 0000000000000000 R14: 00007f3b9e965f80 R15: 00007fffbd7d4a78 [ 34.355688][ T3982] [ 34.376147][ T3988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.384674][ T3988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.413225][ T3995] openvswitch: netlink: Message has 8 unknown bytes. [ 34.489279][ T4010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 34.499326][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 34.502298][ T4013] netlink: 20 bytes leftover after parsing attributes in process `syz.4.225'. [ 34.582262][ T4018] loop0: detected capacity change from 0 to 4096 [ 34.679346][ T4027] loop2: detected capacity change from 0 to 128 [ 34.745419][ T4018] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 34.758106][ T4027] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.772031][ T4027] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.907562][ T3267] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.965086][ T4031] loop2: detected capacity change from 0 to 128 [ 35.134629][ T4041] FAULT_INJECTION: forcing a failure. [ 35.134629][ T4041] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 35.147941][ T4041] CPU: 0 UID: 0 PID: 4041 Comm: syz.2.235 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 35.158528][ T4041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 35.168599][ T4041] Call Trace: [ 35.171952][ T4041] [ 35.174883][ T4041] dump_stack_lvl+0xf2/0x150 [ 35.179487][ T4041] dump_stack+0x15/0x20 [ 35.183654][ T4041] should_fail_ex+0x229/0x230 [ 35.188336][ T4041] should_fail_alloc_page+0xfd/0x110 [ 35.193681][ T4041] __alloc_pages_noprof+0x109/0x360 [ 35.198915][ T4041] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 35.204300][ T4041] alloc_pages_noprof+0xe1/0x100 [ 35.209243][ T4041] get_free_pages_noprof+0xc/0x30 [ 35.214284][ T4041] vcs_write+0x7f/0xbb0 [ 35.218442][ T4041] ? kstrtouint_from_user+0xb0/0xe0 [ 35.223640][ T4041] ? avc_policy_seqno+0x15/0x20 [ 35.228563][ T4041] ? selinux_file_permission+0x22c/0x360 [ 35.234201][ T4041] ? __pfx_vcs_write+0x10/0x10 [ 35.239029][ T4041] vfs_write+0x28b/0x900 [ 35.243279][ T4041] ? __fget_files+0x1da/0x210 [ 35.247955][ T4041] ksys_write+0xeb/0x1b0 [ 35.252225][ T4041] __x64_sys_write+0x42/0x50 [ 35.256821][ T4041] x64_sys_call+0x27dd/0x2d60 [ 35.261578][ T4041] do_syscall_64+0xc9/0x1c0 [ 35.266107][ T4041] ? clear_bhb_loop+0x55/0xb0 [ 35.270789][ T4041] ? clear_bhb_loop+0x55/0xb0 [ 35.275471][ T4041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.281366][ T4041] RIP: 0033:0x7fd7132d9e79 [ 35.285918][ T4041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.305668][ T4041] RSP: 002b:00007fd711f57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 35.314128][ T4041] RAX: ffffffffffffffda RBX: 00007fd713475f80 RCX: 00007fd7132d9e79 [ 35.322084][ T4041] RDX: 0000000000000012 RSI: 0000000020000e80 RDI: 0000000000000003 [ 35.330046][ T4041] RBP: 00007fd711f57090 R08: 0000000000000000 R09: 0000000000000000 [ 35.338002][ T4041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.346005][ T4041] R13: 0000000000000000 R14: 00007fd713475f80 R15: 00007ffe9a7bd888 [ 35.353965][ T4041] [ 35.385196][ T4043] loop2: detected capacity change from 0 to 128 [ 35.465505][ T4036] loop0: detected capacity change from 0 to 2048 [ 35.501780][ T4051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4051 comm=syz.2.239 [ 35.878411][ T4073] loop4: detected capacity change from 0 to 1024 [ 35.891674][ T4073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.926116][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.946850][ T4083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4083 comm=syz.2.250 [ 35.977772][ T4085] IPv6: NLM_F_CREATE should be specified when creating new route [ 36.015966][ T4087] loop4: detected capacity change from 0 to 2048 [ 36.047896][ T4093] loop2: detected capacity change from 0 to 2048 [ 36.054691][ T4087] loop4: p2 < > [ 36.076633][ T4093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.114091][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 36.191669][ T4101] EXT4-fs (loop2): shut down requested (0) [ 36.328980][ T4104] loop4: detected capacity change from 0 to 8192 [ 36.370071][ T4109] openvswitch: netlink: Message has 8 unknown bytes. [ 36.409935][ T4093] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.254: bg 0: block 234: padding at end of block bitmap is not set [ 36.428838][ T4093] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 36.441505][ T4093] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.441505][ T4093] [ 36.451261][ T4093] EXT4-fs (loop2): Total free blocks count 0 [ 36.457282][ T4093] EXT4-fs (loop2): Free/Dirty block details [ 36.463219][ T4093] EXT4-fs (loop2): free_blocks=0 [ 36.468231][ T4093] EXT4-fs (loop2): dirty_blocks=8192 [ 36.473523][ T4093] EXT4-fs (loop2): Block reservation details [ 36.479619][ T4093] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 36.523787][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 36.523793][ T4111] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 36.523801][ T29] audit: type=1400 audit(1723911346.369:348): avc: denied { load_policy } for pid=4110 comm="syz.1.258" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 36.572237][ T29] audit: type=1326 audit(1723911346.419:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe29619e79 code=0x7ffc0000 [ 36.577455][ T4111] SELinux: failed to load policy [ 36.618800][ T29] audit: type=1326 audit(1723911346.449:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe29619e79 code=0x7ffc0000 [ 36.643783][ T4105] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 36.677247][ T4093] syz.2.254 (4093) used greatest stack depth: 10192 bytes left [ 36.725754][ T4133] loop0: detected capacity change from 0 to 4096 [ 36.751079][ T29] audit: type=1400 audit(1723911346.599:351): avc: denied { mount } for pid=4137 comm="syz.4.270" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.776499][ T4138] loop4: detected capacity change from 0 to 512 [ 36.789100][ T29] audit: type=1400 audit(1723911346.639:352): avc: denied { write } for pid=4137 comm="syz.4.270" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.810881][ T29] audit: type=1400 audit(1723911346.639:353): avc: denied { add_name } for pid=4137 comm="syz.4.270" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.834170][ T4133] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 36.852702][ T29] audit: type=1400 audit(1723911346.639:354): avc: denied { associate } for pid=4137 comm="syz.4.270" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.903703][ T29] audit: type=1400 audit(1723911346.649:355): avc: denied { setopt } for pid=4137 comm="syz.4.270" lport=47297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 36.924159][ T29] audit: type=1400 audit(1723911346.659:356): avc: denied { unmount } for pid=3259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.949020][ T4145] loop2: detected capacity change from 0 to 512 [ 36.975546][ T4145] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.985536][ T29] audit: type=1400 audit(1723911346.839:357): avc: denied { accept } for pid=4149 comm="syz.0.274" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.015839][ T4145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.030058][ T4145] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.088279][ T4145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'. [ 37.099711][ T4145] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.108496][ T4145] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.117268][ T4145] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.126036][ T4145] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.134815][ T4145] vxlan0: entered allmulticast mode [ 37.166756][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.260144][ T4174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.280'. [ 37.273680][ T4174] validate_nla: 18 callbacks suppressed [ 37.273749][ T4174] netlink: 'syz.2.280': attribute type 10 has an invalid length. [ 37.288553][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.295832][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.312594][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.319734][ T4174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.327133][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.334200][ T4174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.354523][ T4174] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 37.406529][ T4185] netlink: 576 bytes leftover after parsing attributes in process `syz.3.284'. [ 37.419359][ T4187] loop2: detected capacity change from 0 to 1024 [ 37.449098][ T4187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.476490][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.552767][ T4204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.562642][ T4204] batadv_slave_0: entered allmulticast mode [ 37.680034][ T4218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.292'. [ 37.693843][ T4216] loop2: detected capacity change from 0 to 2048 [ 37.734677][ T4216] loop2: p2 < > [ 37.784293][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 37.807847][ T4157] xt_TCPMSS: Only works on TCP SYN packets [ 37.819738][ T4228] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 37.862815][ T4232] loop3: detected capacity change from 0 to 128 [ 37.904248][ T4232] vfat: Unknown parameter 'gre0' [ 37.908434][ T4242] loop2: detected capacity change from 0 to 512 [ 37.928163][ T4242] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.951713][ T4242] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.304: bg 0: block 248: padding at end of block bitmap is not set [ 37.993537][ T4242] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.304: Failed to acquire dquot type 1 [ 38.008768][ T4242] EXT4-fs (loop2): 1 truncate cleaned up [ 38.020460][ T4242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.033319][ T4242] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.057271][ T4242] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.304: Failed to acquire dquot type 1 [ 38.081765][ T4242] syz.2.304 (4242) used greatest stack depth: 9408 bytes left [ 38.095409][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.107111][ T11] EXT4-fs error (device loop2): ext4_release_dquot:6871: comm kworker/u8:0: Failed to release dquot type 1 [ 38.117050][ T4269] loop0: detected capacity change from 0 to 512 [ 38.147102][ T4269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.163966][ T4269] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.205654][ T4276] loop2: detected capacity change from 0 to 128 [ 38.273400][ T4280] loop4: detected capacity change from 0 to 2048 [ 38.303736][ T3257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.332771][ T4283] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 38.365014][ T4280] loop4: p2 < > [ 38.365890][ T4285] loop0: detected capacity change from 0 to 1024 [ 38.381836][ T2960] loop4: p2 < > [ 38.409421][ T4285] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0. [ 38.462926][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 38.507078][ T3250] udevd[3250]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 38.587219][ T4324] openvswitch: netlink: Message has 8 unknown bytes. [ 38.589355][ T4326] loop0: detected capacity change from 0 to 256 [ 38.656998][ T4332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7440 sclass=netlink_route_socket pid=4332 comm=syz.4.333 [ 38.687894][ T4334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.698648][ T4334] batadv_slave_0: entered allmulticast mode [ 38.723980][ T4336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.335'. [ 38.879453][ T4345] loop4: detected capacity change from 0 to 4096 [ 38.890720][ T4345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.926262][ T3259] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.937302][ T4351] netlink: 36 bytes leftover after parsing attributes in process `syz.1.340'. [ 39.150328][ T4360] loop0: detected capacity change from 0 to 2048 [ 39.204419][ T4360] loop0: p2 < > [ 39.257954][ T4369] loop0: detected capacity change from 0 to 512 [ 39.271924][ T4369] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 39.293003][ T2960] ================================================================== [ 39.301099][ T2960] BUG: KCSAN: data-race in __fsnotify_parent / fsnotify_put_mark [ 39.308823][ T2960] [ 39.311139][ T2960] write to 0xffff8881001d1720 of 4 bytes by task 4292 on cpu 0: [ 39.318767][ T2960] fsnotify_put_mark+0x2db/0x5d0 [ 39.323710][ T2960] __se_sys_inotify_rm_watch+0x105/0x180 [ 39.329349][ T2960] __x64_sys_inotify_rm_watch+0x31/0x40 [ 39.334899][ T2960] x64_sys_call+0x1ae0/0x2d60 [ 39.339583][ T2960] do_syscall_64+0xc9/0x1c0 [ 39.344101][ T2960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.350002][ T2960] [ 39.352319][ T2960] read to 0xffff8881001d1720 of 4 bytes by task 2960 on cpu 1: [ 39.359858][ T2960] __fsnotify_parent+0xd4/0x380 [ 39.364737][ T2960] vfs_open+0x1be/0x1f0 [ 39.368903][ T2960] path_openat+0x1a26/0x1f10 [ 39.373496][ T2960] do_filp_open+0xf7/0x200 [ 39.377919][ T2960] do_sys_openat2+0xab/0x120 [ 39.382516][ T2960] __x64_sys_openat+0xf3/0x120 [ 39.387290][ T2960] x64_sys_call+0x1025/0x2d60 [ 39.391973][ T2960] do_syscall_64+0xc9/0x1c0 [ 39.396489][ T2960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.402391][ T2960] [ 39.404728][ T2960] value changed: 0x00002008 -> 0x00000000 [ 39.410439][ T2960] [ 39.412753][ T2960] Reported by Kernel Concurrency Sanitizer on: [ 39.418894][ T2960] CPU: 1 UID: 0 PID: 2960 Comm: udevd Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 39.429140][ T2960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 39.439199][ T2960] ================================================================== [ 39.452367][ T4375] openvswitch: netlink: Message has 8 unknown bytes.