last executing test programs: 1.259944673s ago: executing program 1 (id=501): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001740)=ANY=[@ANYRES32, @ANYRES32=r0], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x1020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf7, 0x5}, 0x4008, 0x0, 0x9, 0x0, 0x58c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) 1.051217129s ago: executing program 3 (id=512): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x220, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x2, 0x0, 0x80, 0x8, 0x0, 0x0, 0x5}, 0x0, 0x0, r3, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 1.016308444s ago: executing program 1 (id=514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x3) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) 854.195973ms ago: executing program 1 (id=520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 854.026313ms ago: executing program 3 (id=521): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) write$cgroup_devices(r0, 0x0, 0xfffffeff) 853.649983ms ago: executing program 4 (id=522): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 745.325157ms ago: executing program 1 (id=523): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) socket$kcm(0x2, 0xa, 0x2) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 745.113497ms ago: executing program 4 (id=524): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001740)=ANY=[@ANYRES32, @ANYRES32=r0], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x1020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf7, 0x5}, 0x4008, 0x0, 0x9, 0x0, 0x58c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) 745.035927ms ago: executing program 3 (id=525): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xd, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 634.503401ms ago: executing program 3 (id=528): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x33, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000001600)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'vcan0\x00'}}, 0x80, &(0x7f0000001580), 0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="a0000000000000000600000005000000539651f4f2721823ea30a96709cba535f4ac06c2af2eeb275928cf1903812ebfbd3bf64b80f7d6a0d337a12e7a3e041618aaefc8d001b1ccc701149c9a97a9c7dc3b0013928a6f0a4dbe6312e15615fb6d7592fd67a3b80e5f6f43acc9fc6fab154e859c870a2fca70650c515568190566d010665676a61e164f471d75f397234480ea4a2f999c8a6c00000000000000280000000000000015010000050000000ff3cc7f5fb82ff8a5594814693992dd22d60000000000005800000000000000984266f8000100003ac934ae3777dae39d8f67b0ca48ae5dac14a463957b9d407e44c8beff11ec7ce53720860185316cd5ad3f25fa1f4bab66db07457f321729380dac021a92e2bb9083d50000000000dd000000000000001100000007000000e80000000000000016010000400000005efdc954767bfe0e3aef6509f8509130dfb99480879548a605f70d20b83e135215f47dc7a98efceadab912636b05ae7ffa942c880e067c24a7b4732b97fa246bced6d3730c5566fd7c215626326af51fedaa7097bfeaf008d24ce101094d7ffbed7bd5bb0ef2a865ca973b3defd34c34d0489250ff4908bbe3b3d234c157ece7f185c2258e56ba9654b06743fd3e6d1adf5f9f6c7869ac6d6071ec54adf839f538cde84e247fd967b902de9192540287438e8646f070136587a267c985c52537662ef84d040e12fae0a8782d8652bd6962be016c9000000010100000000000000401000003000000ac144917d5b661ea13ed3e267adb5b82eeb46ed5c749d47fff630947a27f14a7f6b068b919118d9effd40c99e677da80612b01c12200b2158ba48d7f973234db5d298eff1b2d7f4f312dd0280902c14354f56934cf0d08048f2fae60f19ae3aa6a79d73714510ac6785cba5c50ded318e95cc7a3a65aefef397a1163145d28b84fa58b6cf1b3b80138085a321c98fe6ea9957949e9f3e5c26ddc1026747aaf0e4ca868aa39d08ce4659ffcc36b8981892e8902c956cd28df1f7190bca180fb35749bd9edfbaad50329fbb31c3be5bf343c9363730576efc332a802f86053ddaca78badc1817abcfd4885e0d40d42ac5ac51b9284f85c2a7a44039ac36ccd78a5cbc680168317171b42429549460c446658164edcf5f88c02dc9f5fc7680577ab6831ef370a75814b59e20099ae534a5d56545d7c5d7ca6083c40535161a576eb6cdd1039e1a9023746f8793bbfbd2d5326088f6a0661adb1675a65ded40b1d53260f85ec0a2a184e079b69d7a9a1bf6ab168ea4ff2169063d4143e2e32aedb9d6d5fd8c5b1e14a55f831caa294f317bd39d63ad412f7aac622f0476e84328d7c3653237634c4acf826d8e1bfa66f0fdb965bafe5cee1840010fc9a212e3a5f55fd3bdf69c7d3ee7f0652dc86db8f2a6bcc3485c9f6cef6b60433493318296195f04a860cd8d00d2a00217c4f2c319c6ffca7d5b57d642d8f320adcccbcffc86f8054714c1a4d0c91bd424107dd4b2c1711432f2c84e3880470ef3ace3f7eda2db47c952844aefb6a946ff3624fab93fdf259a2039d9118e815dea826d0158142ab5a626f773d241e36c39310bac4637857fd4e175d316ce4146045e026dd00d96870206521684cc19fa581e0b9308d0b0894e44c35dea918b110e20b56be48b61b1921046180b59037e1ad24a60c2f3cc86e21fbc563f6d5f986b162d4c8ce75e6c8d656019246dcf3f21850704675e1719f87f3833dc83c28d439d259891a7a556e92c436d8a8fd5cca58eaff015349b1c4de86c4b6c327fa17b5f0e404487a1158a1777dafd02ebf5f6565cb16980a2a6a9470ffbe927a061147f0cadc3fe91765510e850949932e2ecd48553d88f6f9821dc81a432c2c034efee288d881a1b2ea312bd659e7b200240c76b3feb216c018f09b9e33722d13966754b62c583a889f1b237d598f606df5b3b5697d6f475d3ddf5bcca1b86922d086ffdd32692f3ed813d12f754dae27a9a98bed6b4358efb64c155dad6a2860fe6de9e531dcf53cf7ccefc2b62a02fab2a9915ea11c9e0a78967e800789f1d08a320fc91df79c1ad8a703a4c79b3ccd73c17120011cf57e7632dcb8af44ae3659d0ed5b8e999cf1f78b921d9c8bcfd892abe37319f4cbe23fbe84dac73b7c119af98a99da9ec0a98a8990670e0bbb59c4b94ae4fbc181514c2cb36e2775f31e06cde9975992ce5e4de0c834acb7b852e7d1ed60dab8d644c74b20f00a09598fc950fb82b5928532d8ebe49c09c3327ee0d5d972b2434ed638b428f9cd10ebe54957249f1493a3614724c86bab5d734e8fe69486529b55e25d549887abe8c26a4ac26fb431ecef9bcf8afaa8d83375ab63d8634a0a4a7b726d0498b5b77abe9d6177e90ac798f8d585de90c45818ff975461bc95792ece4fdefb6980da9e3fe1a3d87aa6e0e3c8f96de80ebca526bfb4639aecd42d954f9968f0053411acaf9c1353e84e20db84659edb53450470e353b73a8a1ee999a230d643c171c6b53ce0bb9e02a1bbcf0fe504431f058f57735ebfbea097c817662fca854ff45de305420b278e12b270a84927a32e46b50469e537573e300d3b046ee6416406fce8e08d8cb92a777a550d44d78b81f898076624e8b34ffcd5fe4449105eaf9b5f30bd4934d0b9ddba2c54a677b031d7cafccf4b4aaf233a381fbd0df6b72487fe2564859680b170c53cb3bb346cdaa2d13f17f1379318ad3d28e572b997a53ed40437c4aa46603bccacfd66a498dbf19c697ae2a9d72be7bcde5910c5207cc336862b95fea917e8edb3b76e6a0279c3103b0c35955841f715274106d8c8b4b0740f48903b62781f3d5cd327ad3a207a82bfd358459f40539279cb3ab2b43801b02dd1e2c1a120bcfbdfd69afdc506779bc9afef8a4cfda3be5ada887c82c4268e8028fe90cf87bd8e65323fd7cd2a179099b178037d47902ea8ee1e7c045bdd8a633ac3b625b2cccaa92cfbf9785e0191ccc072396f2d436b46374c025c6549341519001e734d2a9b96a8cfd3a1c5bda61b8a82037eb5b59f3b7da1d22b1e594dbd1bd61834467ccd077e0bedbfebd03eb7784b5684e08b289c807a06545de4ac2bcee0413215ce40c25abd5d9d34ae010783179983b8137f1a82361acc92a902874fc339cd77407a5f3fa1358e8c2721a9d4ba7c922f6a84439615c3028925acd2a557f7040d72e405c31190d2718de4eabbac699ead8369b8cf412c45efd7f4405d35d02fa908ec8a4f501843789119afc426437d3799eaca2eb5956746e116dbab53c704f2dd87865347708b3f6a4d4e358c997da3b552defe9a30dc023bc43f35c5ccebcb686bb30e8df9d049604e6eb7f2fd41439c666cda023fbae925b6cead7b103c11e8137a2c3c902161f4a1a874d8bfbe0a164101c57254239522a1ac5d96a9919068264785a4440071d45db7a3522d576454b8d175644c52c5e8b91f44050580fb5be035e05705884df6eb124fb794902febcd840c6a1c0d3893dfbf51b7e853617340d4c0fae64ca45da5d1d29a725d08b060386d355859158a4d852e6b3a2d03f5a638feca819da55b64c3c3ddea0fb24b9ac9777ca8361046921bae65f2cada792f671e73da08378b416f22060cfb1666e6459a15719507ae174445c3cf5a66244da13898b70e2a561c221041ab08fc0805c88c2c10253bb47a95df70ee119de1112605acd4505784fa98987b640d3f5de136eec14132d1f98d1f5078931dfd3e7b3c06d7c8463285ef66bd38c80ddfd043ed03a8be5548f075c9a604a8477b987b73419c407e3b25bc53256113f022bf10146502a9a0defc37987a5a77e0232efde4cd6fdcaa5356b57a917e7432c467a11882e3b36bd1810c05136d2ae1baca827553e00be1cbdfae694154359d0800aebe75932505a6f21bc0a8ebceb9d9d6b7de435bf444295441c6d184ef1bb92b9127b2041edf82518633a4041000ddf20df487d519dde4124d153248e9abdd5994b29d39406db1391390325cd4833c91c625e6d0a4febc2858ecffc155ffc4eb68e3b7fb9b4134d628c27a0846b97be00ec8d91dff81b21f9f3641480f9c95079ae06732f2c3284bc457cd69aa0d152be831870604bac3eba8524593f6cbb6e809aaf29c3e0e2748609ab9843dbbeb675697347333fec0953fab553f824bfccd777a0e727942b9ff65f118f14dde588e731ea25fd2f2002c6aee8b779cbb7c8a9bd8e70d2ac6d00a2563f6a2ba861bd7e2cd5413051560732980ddd22b34f8fccc47e7a803a1046d8c0cffeae6c6052e483463b99397d904a9be13d542330d92a82d428fadba2de27486cbd705eb769961717fb88c6bd56e64d6ea39953fecaa771a5fa3e25270c3d19ecc1a9b4a1e1e2d55ac8386e5ca570be62aa5b9dd339cc9335b3f29ba880aae875739ee59f46b2366ad3999409c989aec9f6417f80416aa8544825410c8443a4d9b3413e916c46eb854423a294f6abbe75eda65c074fb718347f99c0b69db30ed1515ee5cf0048a4142a9ab6864446b71db658d39c3f030e3c345996fb33a2b1e1c44511f2c0df37c26e2c3d0c6b498fe6d7dfe8c3c3ac561e0e491a4eb8e4cba671f959afaf8c6a2afaf535d4bbf70e29bbeb09a565fc5e57613684d05d53dd084851aa7cd736f0ee427273ec6c0c0b16d13db08861543ae360c597293119d23198bb566620b76759c1f3a0110e35d06044009ca5217b2e35533235eede1737743151b4f0a6e20cafa6b85ae321f2d13f302b7a34bcddca3e8d2892dd7e518b3d1f95f93b3eb7a0c8e5084530fcad07f0c4754a7848592d66bcb181c9223cb3ef1b065f5ea120b315b5e5f3822155a6c9685dff143aa770bf295afec6362fbed43335ea1513a215753ebf75934c1c72faf6b14b34758e7413ddeebdf3f8d06"], 0x1228}, 0x20000800) r1 = socket$kcm(0x18, 0x0, 0x0) close(r1) 634.165961ms ago: executing program 4 (id=529): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x7f5a, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x33}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x6, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x24044441) fstat(r0, 0x0) write$cgroup_pid(r0, &(0x7f00000007c0), 0x12) 592.829356ms ago: executing program 3 (id=531): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x11, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x9015, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x40000000000000, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa8010000060a0b040000000000000000020000007c010480600101800a0001006d617463680000005001028008000240000000000b000100706f6c696379000038010300ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f500000018000180080001006669"], 0x1d0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x84, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_NAT_SRC={0x54, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}, @CTA_NAT_DST={0x1c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x841}, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8820, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 592.219996ms ago: executing program 0 (id=532): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x10}, 0xc) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) 547.596852ms ago: executing program 0 (id=533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) 480.22639ms ago: executing program 0 (id=534): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 479.57919ms ago: executing program 1 (id=535): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x9, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x33, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x400c004) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x900, &(0x7f0000000140)=[{&(0x7f0000000300)="d80000001e0081054e81f782db4cb904021d080006007c09e8fe08a10a000e800a00142603600e1208000fc00e000406a80016c008000e400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 407.483489ms ago: executing program 4 (id=537): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0xe, 0x0, &(0x7f0000000540)="ff188e99b95d02ff4284860188a8", 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 397.88939ms ago: executing program 0 (id=538): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xe3589, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x401, 0x0, 0x1, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b2388a84b83615bd95b4cab"], 0xffdd) 380.505062ms ago: executing program 4 (id=539): r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x18, 0x0, &(0x7f0000001940)=""/24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x94442, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x3, 0x80, 0x4, 0x3, 0x2, 0x6, 0x0, 0xd, 0x56248, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x3}, 0x4000, 0x1, 0x85b, 0x4, 0x5, 0x7, 0x1, 0x0, 0x5, 0x0, 0x5}, r5, 0xb, 0xffffffffffffffff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x40, 0x1}]}, &(0x7f0000000180)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 340.974457ms ago: executing program 2 (id=540): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}]}, 0xa4}}, 0x0) 271.464236ms ago: executing program 3 (id=541): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = getpid() r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x1, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), 0x0}, 0x20) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$unix(r6, &(0x7f00000004c0)={&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000480), 0x0, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r9, r7, r10, r2, r8]}}], 0x68, 0x90}, 0x4008000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) r11 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r11, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r12}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/88, 0x58}, {&(0x7f0000000100)=""/92, 0x5c}, {&(0x7f0000000180)=""/24, 0x18}, {&(0x7f00000001c0)}], 0x4, &(0x7f00000002c0)=""/197, 0xc5}, 0x40000100) 271.194216ms ago: executing program 2 (id=542): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x7, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x4000, 0x0, 0x0, 0x0, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7070000000100002070000000ffffffd40700002000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56bdfa0790406984c123e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f333516804d9f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x88c0}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) 271.021086ms ago: executing program 1 (id=543): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb0042, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x20080, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$isdn_base(0x22, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91f, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100, 0x8000000000000000}, 0x18404, 0x7, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x922000000001, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000000000010200000", @ANYRES32=r0, @ANYBLOB="da"], 0x50) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 219.149022ms ago: executing program 0 (id=544): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) 187.213496ms ago: executing program 0 (id=545): r0 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x83, 0x0, 0x8, 0x7fff, 0xfcc9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x6}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 144.288422ms ago: executing program 2 (id=546): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 47.699824ms ago: executing program 4 (id=547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x20000000) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x66) 47.535864ms ago: executing program 2 (id=548): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 40.832205ms ago: executing program 2 (id=549): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f00000005c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="3000000019007f089ea6690ca4dc04f11c672274119dd27d616f7efd9a0a2ff3b91a90dfc950244cfea8d0898789b61c", 0x30}], 0x1}, 0x4040004) 0s ago: executing program 2 (id=550): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000005000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8918, &(0x7f0000000000)={r1}) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 26.094683][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 26.094701][ T29] audit: type=1400 audit(1769519374.479:57): avc: denied { transition } for pid=3289 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.101585][ T29] audit: type=1400 audit(1769519374.479:58): avc: denied { noatsecure } for pid=3289 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.105742][ T29] audit: type=1400 audit(1769519374.479:59): avc: denied { write } for pid=3289 comm="sh" path="pipe:[952]" dev="pipefs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 26.109559][ T29] audit: type=1400 audit(1769519374.479:60): avc: denied { rlimitinh } for pid=3289 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 26.113899][ T29] audit: type=1400 audit(1769519374.479:61): avc: denied { siginh } for pid=3289 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.122' (ED25519) to the list of known hosts. [ 34.059325][ T29] audit: type=1400 audit(1769519382.449:62): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.082588][ T29] audit: type=1400 audit(1769519382.469:63): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.083313][ T3299] cgroup: Unknown subsys name 'net' [ 34.110965][ T29] audit: type=1400 audit(1769519382.499:64): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.228379][ T3299] cgroup: Unknown subsys name 'cpuset' [ 34.234783][ T3299] cgroup: Unknown subsys name 'rlimit' [ 34.424427][ T29] audit: type=1400 audit(1769519382.809:65): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.455274][ T29] audit: type=1400 audit(1769519382.809:66): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.476458][ T29] audit: type=1400 audit(1769519382.809:67): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.497714][ T29] audit: type=1400 audit(1769519382.809:68): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.518644][ T29] audit: type=1400 audit(1769519382.819:69): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.544635][ T29] audit: type=1400 audit(1769519382.819:70): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.568609][ T29] audit: type=1400 audit(1769519382.839:71): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.575851][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.620722][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.784178][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.860078][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.895865][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.921106][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 35.930080][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.937354][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.944564][ T3313] bridge_slave_0: entered allmulticast mode [ 35.951245][ T3313] bridge_slave_0: entered promiscuous mode [ 35.962889][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.970509][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.977753][ T3313] bridge_slave_1: entered allmulticast mode [ 35.984212][ T3313] bridge_slave_1: entered promiscuous mode [ 35.990723][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 36.043628][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.067512][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.079184][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.086449][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.093887][ T3310] bridge_slave_0: entered allmulticast mode [ 36.100689][ T3310] bridge_slave_0: entered promiscuous mode [ 36.110376][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.117473][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.124885][ T3310] bridge_slave_1: entered allmulticast mode [ 36.131579][ T3310] bridge_slave_1: entered promiscuous mode [ 36.171621][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.178708][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.185794][ T3314] bridge_slave_0: entered allmulticast mode [ 36.192485][ T3314] bridge_slave_0: entered promiscuous mode [ 36.206806][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.216185][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.223377][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.230927][ T3309] bridge_slave_0: entered allmulticast mode [ 36.237774][ T3309] bridge_slave_0: entered promiscuous mode [ 36.245870][ T3313] team0: Port device team_slave_0 added [ 36.252841][ T3313] team0: Port device team_slave_1 added [ 36.258557][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.265922][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.273300][ T3314] bridge_slave_1: entered allmulticast mode [ 36.279816][ T3314] bridge_slave_1: entered promiscuous mode [ 36.291453][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.306137][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.313257][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.320628][ T3309] bridge_slave_1: entered allmulticast mode [ 36.327110][ T3309] bridge_slave_1: entered promiscuous mode [ 36.347174][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.354554][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.362202][ T3317] bridge_slave_0: entered allmulticast mode [ 36.369052][ T3317] bridge_slave_0: entered promiscuous mode [ 36.393320][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.400492][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.432651][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.443748][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.450965][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.458486][ T3317] bridge_slave_1: entered allmulticast mode [ 36.464909][ T3317] bridge_slave_1: entered promiscuous mode [ 36.480751][ T3310] team0: Port device team_slave_0 added [ 36.487898][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.497560][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.504553][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.530952][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.543572][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.558294][ T3310] team0: Port device team_slave_1 added [ 36.564773][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.578105][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.588411][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.611229][ T3314] team0: Port device team_slave_0 added [ 36.621958][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.640895][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.647977][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.674351][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.685896][ T3314] team0: Port device team_slave_1 added [ 36.692485][ T3309] team0: Port device team_slave_0 added [ 36.711161][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.718435][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.745099][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.760937][ T3309] team0: Port device team_slave_1 added [ 36.772226][ T3317] team0: Port device team_slave_0 added [ 36.780284][ T3313] hsr_slave_0: entered promiscuous mode [ 36.786473][ T3313] hsr_slave_1: entered promiscuous mode [ 36.810013][ T3317] team0: Port device team_slave_1 added [ 36.817149][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.824394][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.850942][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.878829][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.885928][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.912917][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.924396][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.931465][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.957837][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.973555][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.980641][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.007693][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.025540][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.033015][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.060374][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.088769][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.095880][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.122603][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.141017][ T3310] hsr_slave_0: entered promiscuous mode [ 37.146975][ T3310] hsr_slave_1: entered promiscuous mode [ 37.152935][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 37.158873][ T3310] Cannot create hsr debugfs directory [ 37.198206][ T3317] hsr_slave_0: entered promiscuous mode [ 37.204644][ T3317] hsr_slave_1: entered promiscuous mode [ 37.211041][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 37.217283][ T3317] Cannot create hsr debugfs directory [ 37.232489][ T3309] hsr_slave_0: entered promiscuous mode [ 37.239000][ T3309] hsr_slave_1: entered promiscuous mode [ 37.245006][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 37.250797][ T3309] Cannot create hsr debugfs directory [ 37.281207][ T3314] hsr_slave_0: entered promiscuous mode [ 37.287264][ T3314] hsr_slave_1: entered promiscuous mode [ 37.293358][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 37.299550][ T3314] Cannot create hsr debugfs directory [ 37.466306][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.475372][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.484214][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.495754][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.529124][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.540510][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.549833][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.558639][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.587739][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.597021][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.606747][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.616755][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.645273][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.654971][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.663932][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.673079][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.696130][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.728789][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.743381][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.752009][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.761231][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.770315][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.791754][ T3336] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.799558][ T3336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.816415][ T3336] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.823765][ T3336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.855804][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.879860][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.903084][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.914790][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.923601][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.930877][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.950313][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.957708][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.979424][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.005277][ T3336] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.012497][ T3336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.021731][ T3336] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.028842][ T3336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.041982][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.056114][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.084615][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.097386][ T895] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.104652][ T895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.117702][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.125780][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.135221][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.142396][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.168371][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.175797][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.195318][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.226244][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.233504][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.279208][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.303072][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.342893][ T3313] veth0_vlan: entered promiscuous mode [ 38.363106][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.372568][ T3313] veth1_vlan: entered promiscuous mode [ 38.408644][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.430719][ T3313] veth0_macvtap: entered promiscuous mode [ 38.449365][ T3313] veth1_macvtap: entered promiscuous mode [ 38.473311][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.488067][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.500031][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.521888][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.533203][ T3310] veth0_vlan: entered promiscuous mode [ 38.560306][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.581599][ T3310] veth1_vlan: entered promiscuous mode [ 38.588582][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.603777][ T3309] veth0_vlan: entered promiscuous mode [ 38.612886][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.641330][ T3317] veth0_vlan: entered promiscuous mode [ 38.649787][ T3310] veth0_macvtap: entered promiscuous mode [ 38.659334][ T3309] veth1_vlan: entered promiscuous mode [ 38.670642][ T3310] veth1_macvtap: entered promiscuous mode [ 38.683503][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.684231][ T3317] veth1_vlan: entered promiscuous mode [ 38.710953][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.729432][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.745821][ T3309] veth0_macvtap: entered promiscuous mode [ 38.773177][ T895] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.787967][ T895] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.802668][ T3309] veth1_macvtap: entered promiscuous mode [ 38.811697][ T3317] veth0_macvtap: entered promiscuous mode [ 38.826374][ T3431] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.835783][ T3314] veth0_vlan: entered promiscuous mode [ 38.843617][ T3317] veth1_macvtap: entered promiscuous mode [ 38.851367][ T3431] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.866333][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.879912][ T3314] veth1_vlan: entered promiscuous mode [ 38.893595][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.900447][ T3484] No such timeout policy "syz0" [ 38.905855][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.930508][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.941440][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.979126][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.989924][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.001036][ T3314] veth0_macvtap: entered promiscuous mode [ 39.009323][ T3314] veth1_macvtap: entered promiscuous mode [ 39.016340][ T3487] loop1: detected capacity change from 0 to 1024 [ 39.037908][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.053292][ T3487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.069985][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.079006][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 39.079022][ T29] audit: type=1400 audit(1769519387.459:97): avc: denied { open } for pid=3490 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.101814][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.104430][ T29] audit: type=1400 audit(1769519387.459:98): avc: denied { perfmon } for pid=3490 comm="syz.3.4" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.117579][ T895] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.133058][ T29] audit: type=1400 audit(1769519387.459:99): avc: denied { kernel } for pid=3490 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.144028][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.173021][ T3487] EXT4-fs (loop1): shut down requested (0) [ 39.174096][ T29] audit: type=1400 audit(1769519387.469:100): avc: denied { mount } for pid=3486 comm="syz.1.7" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.200896][ T29] audit: type=1400 audit(1769519387.559:101): avc: denied { add_name } for pid=3486 comm="syz.1.7" name="blkio.bfq.io_queued" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.223282][ T29] audit: type=1400 audit(1769519387.559:102): avc: denied { create } for pid=3486 comm="syz.1.7" name="blkio.bfq.io_queued" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.244825][ T29] audit: type=1400 audit(1769519387.559:103): avc: denied { prog_load } for pid=3490 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.263723][ T29] audit: type=1400 audit(1769519387.559:104): avc: denied { bpf } for pid=3490 comm="syz.3.4" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.284248][ T29] audit: type=1400 audit(1769519387.559:105): avc: denied { prog_run } for pid=3490 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.303020][ T29] audit: type=1400 audit(1769519387.559:106): avc: denied { read append open } for pid=3486 comm="syz.1.7" path="/2/bus/blkio.bfq.io_queued" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.335709][ T3431] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.390496][ T3431] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.419917][ T3500] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 39.422978][ T3431] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.441185][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.451490][ T3431] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.465224][ T3431] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.475526][ T3431] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.476085][ T3505] loop2: detected capacity change from 0 to 1024 [ 39.516962][ T3511] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8'. [ 39.556034][ T3511] mmap: syz.1.8 (3511) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.624045][ T3505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.652173][ T3515] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=3515 comm=syz.4.12 [ 39.673786][ T3515] syz.4.12 uses obsolete (PF_INET,SOCK_PACKET) [ 39.682721][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.695447][ T3515] syzkaller1: entered promiscuous mode [ 39.701095][ T3515] syzkaller1: entered allmulticast mode [ 39.785253][ T3527] netlink: 'syz.2.14': attribute type 4 has an invalid length. [ 39.837486][ T3525] loop1: detected capacity change from 0 to 1024 [ 39.837970][ T3531] loop2: detected capacity change from 0 to 1024 [ 39.852005][ T3531] ======================================================= [ 39.852005][ T3531] WARNING: The mand mount option has been deprecated and [ 39.852005][ T3531] and is ignored by this kernel. Remove the mand [ 39.852005][ T3531] option from the mount to silence this warning. [ 39.852005][ T3531] ======================================================= [ 39.889832][ T3531] EXT4-fs: Ignoring removed orlov option [ 39.908449][ T3533] 9p: Bad value for 'rfdno' [ 39.914504][ T3531] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c118, mo2=0102] [ 39.915683][ T3533] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16'. [ 39.924073][ T3525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.932504][ T3531] System zones: 0-1, 3-12 [ 39.949843][ T3531] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.972967][ T3531] Unsupported ieee802154 address type: 0 [ 39.990748][ T3538] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 40.004749][ T3531] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 40.035047][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 40.035246][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.064718][ T3516] udevd[3516]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 40.091665][ T3302] udevd[3302]: symlink '../../loop1' '/dev/disk/by-diskseq/41.tmp-b7:1' failed: Read-only file system [ 40.109667][ T3516] udevd[3516]: symlink '../../loop2' '/dev/disk/by-diskseq/40.tmp-b7:2' failed: Read-only file system [ 40.119220][ T3551] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 40.127700][ T3551] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 40.135714][ T3551] vhci_hcd vhci_hcd.0: Device attached [ 40.183346][ T3516] udevd[3516]: symlink '../../loop1' '/dev/disk/by-diskseq/41.tmp-b7:1' failed: Read-only file system [ 40.205210][ T3556] tmpfs: Bad value for 'mpol' [ 40.228667][ T3516] udevd[3516]: symlink '../../loop1' '/dev/disk/by-diskseq/41.tmp-b7:1' failed: Read-only file system [ 40.281553][ T3558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.292184][ T3558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.307779][ T3407] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 40.332373][ T3558] Zero length message leads to an empty skb [ 40.367464][ T3407] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 40.488030][ T3563] syzkaller1: entered promiscuous mode [ 40.493726][ T3563] syzkaller1: entered allmulticast mode [ 40.799629][ T3591] capability: warning: `syz.4.29' uses 32-bit capabilities (legacy support in use) [ 40.835129][ T3587] loop0: detected capacity change from 0 to 1024 [ 40.859202][ T3516] udevd[3516]: symlink '../../loop0' '/dev/disk/by-diskseq/42.tmp-b7:0' failed: Read-only file system [ 40.876308][ T3516] udevd[3516]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 40.895967][ T3587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.896293][ T3302] udevd[3302]: symlink '../../loop1' '/dev/disk/by-diskseq/41.tmp-b7:1' failed: Read-only file system [ 40.918112][ T3552] vhci_hcd: connection reset by peer [ 40.946849][ T3321] vhci_hcd vhci_hcd.2: stop threads [ 40.952267][ T3321] vhci_hcd vhci_hcd.2: release socket [ 40.957978][ T3321] vhci_hcd vhci_hcd.2: disconnect device [ 40.983264][ T3516] udevd[3516]: symlink '../../loop1' '/dev/disk/by-diskseq/41.tmp-b7:1' failed: Read-only file system [ 41.109399][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.139774][ T3516] udevd[3516]: symlink '../../loop0' '/dev/disk/by-diskseq/42.tmp-b7:0' failed: Read-only file system [ 41.202293][ T3608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.33'. [ 41.301210][ C0] hrtimer: interrupt took 26530 ns [ 41.353054][ T3617] loop1: detected capacity change from 0 to 256 [ 41.708450][ T3626] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.848489][ T3620] Set syz1 is full, maxelem 65536 reached [ 41.934786][ T3632] loop1: detected capacity change from 0 to 1024 [ 41.966767][ T3632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.004475][ T3636] netlink: 'syz.2.42': attribute type 13 has an invalid length. [ 42.048447][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.193539][ T3644] loop4: detected capacity change from 0 to 1024 [ 42.199353][ T3645] loop1: detected capacity change from 0 to 1024 [ 42.236570][ T3645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.246057][ T3644] EXT4-fs: Ignoring removed nobh option [ 42.266597][ T3651] loop2: detected capacity change from 0 to 1024 [ 42.299158][ T3651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.314938][ T3644] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.334580][ T3659] capability: warning: `syz.3.50' uses deprecated v2 capabilities in a way that may be insecure [ 42.353748][ T3644] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 42.363775][ T3644] EXT4-fs (loop4): filesystem has both journal inode and journal device! [ 42.439653][ T3665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'. [ 42.482555][ T3667] ext4: Unknown parameter 'fsuuid' [ 42.501285][ T3665] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 42.530879][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.626800][ T3681] netlink: 'syz.4.58': attribute type 13 has an invalid length. [ 42.929524][ T3696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.941475][ T3696] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 42.950094][ T3696] System zones: 0-1, 3-36 [ 43.011197][ T3696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.280874][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.429636][ T3708] bond1: option min_links: invalid value (18446744073709551601) [ 43.437506][ T3708] bond1: option min_links: allowed values 0 - 2147483647 [ 43.481919][ T3715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.518639][ T3716] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 43.520099][ T3715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.525201][ T3716] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 43.541193][ T3716] vhci_hcd vhci_hcd.0: Device attached [ 43.547753][ T3708] bond1 (unregistering): Released all slaves [ 43.628662][ T3729] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 43.722040][ T3722] vhci_hcd: connection closed [ 43.728202][ T3336] vhci_hcd vhci_hcd.4: stop threads [ 43.738531][ T3336] vhci_hcd vhci_hcd.4: release socket [ 43.744161][ T3336] vhci_hcd vhci_hcd.4: disconnect device [ 43.762270][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.797466][ T10] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 43.805417][ T10] usb 9-1: enqueue for inactive port 0 [ 43.828188][ T10] usb 9-1: enqueue for inactive port 0 [ 43.834939][ T10] usb 9-1: enqueue for inactive port 0 [ 43.908052][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 44.159978][ T3733] Set syz1 is full, maxelem 65536 reached [ 44.245671][ T3737] set_capacity_and_notify: 6 callbacks suppressed [ 44.245722][ T3737] loop0: detected capacity change from 0 to 512 [ 44.323026][ T3743] netlink: 'syz.2.79': attribute type 13 has an invalid length. [ 44.403171][ T3745] team0: No ports can be present during mode change [ 44.441858][ T3745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.80'. [ 44.451270][ T3745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.80'. [ 44.476807][ T3739] loop1: detected capacity change from 0 to 256 [ 44.493843][ T3745] geneve2: entered promiscuous mode [ 44.499330][ T3745] geneve2: entered allmulticast mode [ 44.548661][ T3756] loop4: detected capacity change from 0 to 512 [ 44.567277][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 44.567294][ T29] audit: type=1400 audit(1769519392.949:311): avc: denied { mounton } for pid=3755 comm="syz.4.83" path="/13/file0" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.620503][ T3756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.667453][ T3756] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.691158][ T3756] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.716145][ T3739] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 44.728649][ T3739] FAT-fs (loop1): Filesystem has been set read-only [ 44.741546][ T3763] loop2: detected capacity change from 0 to 512 [ 44.750554][ T3763] EXT4-fs: Ignoring removed oldalloc option [ 44.761886][ T3763] EXT4-fs: dax option not supported [ 44.776199][ T29] audit: type=1400 audit(1769519393.159:312): avc: denied { append } for pid=3762 comm="syz.2.85" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 44.802924][ T3763] loop5: detected capacity change from 0 to 7 [ 44.858152][ T3763] loop5: detected capacity change from 7 to 3 [ 44.887161][ T3767] loop2: detected capacity change from 0 to 1024 [ 44.898912][ T3767] EXT4-fs: dax option not supported [ 44.952058][ T3768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.77'. [ 44.961173][ T3768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.77'. [ 44.970195][ T3768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'. [ 45.062571][ T3774] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 45.070965][ T3516] udevd[3516]: symlink '../../loop2' '/dev/disk/by-diskseq/74.tmp-b7:2' failed: Read-only file system [ 45.087521][ T3516] udevd[3516]: symlink '../../loop2' '/dev/disk/by-diskseq/75.tmp-b7:2' failed: Read-only file system [ 45.099349][ T3772] bond0: Caught tx_queue_len zero misconfig [ 45.176094][ T3516] udevd[3516]: symlink '../../loop4' '/dev/disk/by-diskseq/71.tmp-b7:4' failed: Read-only file system [ 45.224746][ T3516] udevd[3516]: symlink '../../loop2' '/dev/disk/by-diskseq/75.tmp-b7:2' failed: Read-only file system [ 45.249720][ T3781] bond0: Caught tx_queue_len zero misconfig [ 45.299567][ T3516] udevd[3516]: symlink '../../loop3' '/dev/disk/by-diskseq/64.tmp-b7:3' failed: Read-only file system [ 45.304708][ T29] audit: type=1400 audit(1769519393.679:313): avc: denied { create } for pid=3785 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.315811][ T3787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.95'. [ 45.331547][ T29] audit: type=1400 audit(1769519393.679:314): avc: denied { bind } for pid=3785 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.345268][ T3302] udevd[3302]: symlink '../../loop0' '/dev/disk/by-diskseq/67.tmp-b7:0' failed: Read-only file system [ 45.360048][ T29] audit: type=1400 audit(1769519393.679:315): avc: denied { write } for pid=3785 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.395393][ T3300] udevd[3300]: symlink '../../loop4' '/dev/disk/by-diskseq/71.tmp-b7:4' failed: Read-only file system [ 45.417076][ T3787] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 45.423729][ T3787] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 45.431410][ T3787] vhci_hcd vhci_hcd.0: Device attached [ 45.438385][ T3407] usb 5-1: enqueue for inactive port 0 [ 45.449463][ T29] audit: type=1400 audit(1769519393.839:316): avc: denied { create } for pid=3782 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.455110][ T3790] vhci_hcd: connection closed [ 45.470824][ T3783] 9pnet_fd: p9_fd_create_unix (3783): problem connecting socket: ./file1: -1 [ 45.472915][ T3407] usb 5-1: enqueue for inactive port 0 [ 45.476269][ T3783] Set syz1 is full, maxelem 14 reached [ 45.487518][ T29] audit: type=1400 audit(1769519393.869:317): avc: denied { bind } for pid=3782 comm="syz.0.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.495753][ T3783] loop0: detected capacity change from 0 to 256 [ 45.514827][ T29] audit: type=1400 audit(1769519393.869:318): avc: denied { name_bind } for pid=3782 comm="syz.0.94" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 45.521717][ T3336] vhci_hcd vhci_hcd.4: stop threads [ 45.541778][ T29] audit: type=1400 audit(1769519393.869:319): avc: denied { node_bind } for pid=3782 comm="syz.0.94" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 45.547180][ T3336] vhci_hcd vhci_hcd.4: release socket [ 45.570665][ T3407] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 45.572806][ T3336] vhci_hcd vhci_hcd.4: disconnect device [ 45.605683][ T3302] udevd[3302]: symlink '../../loop1' '/dev/disk/by-diskseq/68.tmp-b7:1' failed: Read-only file system [ 45.622557][ T3516] udevd[3516]: symlink '../../loop0' '/dev/disk/by-diskseq/76.tmp-b7:0' failed: Read-only file system [ 45.639596][ T3783] FAT-fs (loop0): Directory bread(block 64) failed [ 45.642525][ T3302] udevd[3302]: symlink '../../loop1' '/dev/disk/by-diskseq/68.tmp-b7:1' failed: Read-only file system [ 45.646254][ T3783] FAT-fs (loop0): Directory bread(block 65) failed [ 45.657599][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 45.672419][ T3783] FAT-fs (loop0): Directory bread(block 66) failed [ 45.679267][ T3783] FAT-fs (loop0): Directory bread(block 67) failed [ 45.686402][ T3783] FAT-fs (loop0): Directory bread(block 68) failed [ 45.693372][ T3783] FAT-fs (loop0): Directory bread(block 69) failed [ 45.700167][ T3783] FAT-fs (loop0): Directory bread(block 70) failed [ 45.706906][ T3783] FAT-fs (loop0): Directory bread(block 71) failed [ 45.713921][ T3783] FAT-fs (loop0): Directory bread(block 72) failed [ 45.720486][ T3783] FAT-fs (loop0): Directory bread(block 73) failed [ 45.762280][ T3805] ip6gre1: entered promiscuous mode [ 45.820958][ T3809] loop1: detected capacity change from 0 to 512 [ 45.840185][ T3809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.853046][ T29] audit: type=1400 audit(1769519394.239:320): avc: denied { setopt } for pid=3806 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.884166][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.916875][ T3817] loop1: detected capacity change from 0 to 512 [ 45.924963][ T3817] ext4: Unknown parameter 'subj_user' [ 46.587066][ T3831] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 46.600913][ T3831] FAT-fs (loop3): Filesystem has been set read-only [ 46.887221][ T3840] xt_CT: You must specify a L4 protocol and not use inversions on it [ 46.916363][ T3840] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 46.917074][ T3834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.108'. [ 46.930041][ T3840] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.939494][ T3834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.108'. [ 46.960338][ T3834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 46.978720][ T3840] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (19288!=33349) [ 46.988577][ T3840] EXT4-fs (loop4): group descriptors corrupted! [ 47.072989][ T3843] bridge_slave_0: left allmulticast mode [ 47.078995][ T3843] bridge_slave_0: left promiscuous mode [ 47.084968][ T3843] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.109408][ T3843] bridge_slave_1: left allmulticast mode [ 47.115114][ T3843] bridge_slave_1: left promiscuous mode [ 47.120944][ T3843] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.140885][ T3843] bond0: (slave bond_slave_0): Releasing backup interface [ 47.190587][ T3843] bond0: (slave bond_slave_1): Releasing backup interface [ 47.224990][ T3843] team0: Port device team_slave_0 removed [ 47.234143][ T3843] team0: Port device team_slave_1 removed [ 47.241453][ T3843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.249373][ T3843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.284608][ T3843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.292348][ T3843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.312008][ T3843] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 47.354496][ T3855] C: renamed from team_slave_0 (while UP) [ 47.389614][ T3855] netlink: 'syz.2.118': attribute type 2 has an invalid length. [ 47.397669][ T3855] netlink: 108 bytes leftover after parsing attributes in process `syz.2.118'. [ 47.406907][ T3855] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 47.447998][ T3860] syzkaller0: entered promiscuous mode [ 47.453520][ T3860] syzkaller0: entered allmulticast mode [ 47.463962][ T3855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.503983][ T3860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.120'. [ 47.628091][ T3860] syz.4.120 (3860) used greatest stack depth: 9424 bytes left [ 47.750696][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.789066][ T3880] netlink: 68 bytes leftover after parsing attributes in process `syz.2.128'. [ 47.816538][ T3882] netlink: 'syz.3.127': attribute type 21 has an invalid length. [ 47.875509][ T3887] ext4: Unknown parameter 'nouser_xattr' [ 47.932960][ T3880] IPVS: set_ctl: invalid protocol: 136 172.30.1.3:20003 [ 47.983442][ T3892] xt_hashlimit: size too large, truncated to 1048576 [ 48.020125][ T3895] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 48.030218][ T3895] System zones: 1-3, 19-19, 35-36 [ 48.036180][ T3895] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.049891][ T3895] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.495012][ T3910] vhci_hcd vhci_hcd.4: invalid port number 254 [ 48.713098][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.933357][ T3926] ip6tnl0: Caught tx_queue_len zero misconfig [ 48.948954][ T3926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.965255][ T3908] Set syz1 is full, maxelem 65536 reached [ 48.980809][ T3926] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 48.994029][ T3926] System zones: 0-1, 3-36 [ 49.022785][ T3926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.072014][ T3930] netlink: 'syz.2.143': attribute type 21 has an invalid length. [ 49.079950][ T3930] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 49.168641][ T3932] netlink: 'syz.1.144': attribute type 13 has an invalid length. [ 49.268206][ T3930] set_capacity_and_notify: 9 callbacks suppressed [ 49.268261][ T3930] loop2: detected capacity change from 0 to 1024 [ 49.319142][ T3930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.493743][ T3938] loop0: detected capacity change from 0 to 512 [ 49.612573][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.625412][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.638472][ T3942] loop3: detected capacity change from 0 to 512 [ 49.647719][ T3942] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 49.674038][ T3946] FAULT_INJECTION: forcing a failure. [ 49.674038][ T3946] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 49.687597][ T3946] CPU: 1 UID: 0 PID: 3946 Comm: syz.4.147 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.687696][ T3946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.687710][ T3946] Call Trace: [ 49.687719][ T3946] [ 49.687727][ T3946] __dump_stack+0x1d/0x30 [ 49.687753][ T3946] dump_stack_lvl+0x95/0xd0 [ 49.687774][ T3946] dump_stack+0x15/0x1b [ 49.687824][ T3946] should_fail_ex+0x263/0x280 [ 49.687944][ T3946] should_fail+0xb/0x20 [ 49.687973][ T3946] should_fail_usercopy+0x1a/0x20 [ 49.688066][ T3946] _copy_from_iter+0xcf/0xea0 [ 49.688098][ T3946] ? __alloc_skb+0x397/0x4b0 [ 49.688191][ T3946] ? __alloc_skb+0x219/0x4b0 [ 49.688225][ T3946] netlink_sendmsg+0x4ae/0x6f0 [ 49.688253][ T3946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 49.688278][ T3946] ____sys_sendmsg+0x5af/0x600 [ 49.688305][ T3946] ___sys_sendmsg+0x195/0x1e0 [ 49.688396][ T3946] __x64_sys_sendmsg+0xd4/0x160 [ 49.688425][ T3946] x64_sys_call+0x17ba/0x3000 [ 49.688454][ T3946] do_syscall_64+0xc0/0x2a0 [ 49.688483][ T3946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.688620][ T3946] RIP: 0033:0x7fbfd1f7aeb9 [ 49.688640][ T3946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.688659][ T3946] RSP: 002b:00007fbfd09d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.688686][ T3946] RAX: ffffffffffffffda RBX: 00007fbfd21f5fa0 RCX: 00007fbfd1f7aeb9 [ 49.688714][ T3946] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 49.688730][ T3946] RBP: 00007fbfd09d7090 R08: 0000000000000000 R09: 0000000000000000 [ 49.688746][ T3946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.688794][ T3946] R13: 00007fbfd21f6038 R14: 00007fbfd21f5fa0 R15: 00007ffd59c90bb8 [ 49.688851][ T3946] [ 49.951554][ T3951] ip6gre0: Caught tx_queue_len zero misconfig [ 49.958791][ T3951] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 50.003913][ T3957] loop0: detected capacity change from 0 to 1024 [ 50.011140][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 50.011157][ T29] audit: type=1326 audit(1769519399.396:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd1f7aeb9 code=0x7ffc0000 [ 50.018016][ T3957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.041100][ T29] audit: type=1326 audit(1769519399.396:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd1f7aeb9 code=0x7ffc0000 [ 50.071952][ T29] audit: type=1326 audit(1769519399.396:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbfd1f7aeb9 code=0x7ffc0000 [ 50.095509][ T29] audit: type=1326 audit(1769519399.396:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd1f7aeb9 code=0x7ffc0000 [ 50.118940][ T29] audit: type=1326 audit(1769519399.396:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd1f7aeb9 code=0x7ffc0000 [ 50.142492][ T29] audit: type=1326 audit(1769519399.396:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbfd1f7aeb9 code=0x7ffc0000 [ 50.165737][ T29] audit: type=1326 audit(1769519399.396:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd1f7aeb9 code=0x7ffc0000 [ 50.189362][ T29] audit: type=1326 audit(1769519399.396:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfd1f7aeb9 code=0x7ffc0000 [ 50.213392][ T29] audit: type=1326 audit(1769519399.396:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd1f7aeb9 code=0x7ffc0000 [ 50.232762][ T3516] udevd[3516]: symlink '../../loop0' '/dev/disk/by-diskseq/107.tmp-b7:0' failed: Read-only file system [ 50.237035][ T29] audit: type=1326 audit(1769519399.396:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3954 comm="syz.4.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fbfd1f7aeb9 code=0x7ffc0000 [ 50.249740][ T3957] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 50.278377][ T3516] udevd[3516]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 50.281387][ T3960] loop7: detected capacity change from 0 to 16384 [ 50.299204][ T3957] System zones: 0-1, 3-36 [ 50.308937][ T3957] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.314825][ T3516] udevd[3516]: symlink '../../loop7' '/dev/disk/by-diskseq/108.tmp-b7:7' failed: Read-only file system [ 50.370257][ T3516] udevd[3516]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 50.380289][ T3964] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 50.399959][ T3302] udevd[3302]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 50.421754][ T3516] udevd[3516]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 50.427848][ T3969] __nla_validate_parse: 8 callbacks suppressed [ 50.427866][ T3969] netlink: 48 bytes leftover after parsing attributes in process `syz.3.158'. [ 50.463939][ T3971] netlink: 'syz.1.157': attribute type 13 has an invalid length. [ 50.486005][ T3971] gretap0: refused to change device tx_queue_len [ 50.493199][ T3971] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 50.499762][ T3516] udevd[3516]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 50.531040][ T3966] loop7: detected capacity change from 16384 to 0 [ 50.541080][ C0] I/O error, dev loop7, sector 8992 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 50.554960][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.571651][ T3302] udevd[3302]: symlink '../../loop0' '/dev/disk/by-diskseq/107.tmp-b7:0' failed: Read-only file system [ 50.577421][ T3516] udevd[3516]: symlink '../../loop7' '/dev/disk/by-diskseq/108.tmp-b7:7' failed: Read-only file system [ 50.596706][ T3300] udevd[3300]: symlink '../../loop2' '/dev/disk/by-diskseq/105.tmp-b7:2' failed: Read-only file system [ 50.819686][ T3987] loop0: detected capacity change from 0 to 128 [ 50.832056][ T3987] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.846348][ T3987] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.891514][ T3987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 50.901355][ T3987] EXT4-fs warning (device loop0): __ext4_ioctl:1555: Setting inode version is not supported with metadata_csum enabled. [ 50.926209][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.020074][ T3997] loop0: detected capacity change from 0 to 512 [ 51.098803][ T3999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 51.110292][ T3999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 51.122742][ T3997] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 51.131416][ T3997] EXT4-fs (loop0): orphan cleanup on readonly fs [ 51.138945][ T3997] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.167: Failed to acquire dquot type 1 [ 51.151475][ T3997] EXT4-fs (loop0): Remounting filesystem read-only [ 51.158606][ T3997] EXT4-fs (loop0): 1 truncate cleaned up [ 51.165091][ T3997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.220645][ T3997] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=3997 comm=syz.0.167 [ 51.235522][ T4003] loop4: detected capacity change from 0 to 512 [ 51.288040][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.336669][ T4007] loop2: detected capacity change from 0 to 128 [ 51.406915][ T4009] SELinux: failed to load policy [ 51.434856][ T4009] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.453531][ T4009] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.490529][ T3321] kworker/u8:5: attempt to access beyond end of device [ 51.490529][ T3321] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 51.516075][ T3321] kworker/u8:5: attempt to access beyond end of device [ 51.516075][ T3321] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 51.553636][ T3321] kworker/u8:5: attempt to access beyond end of device [ 51.553636][ T3321] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 51.568975][ T4025] EXT4-fs error (device loop0): __ext4_iget:5426: inode #15: block 1803188595: comm syz.0.178: invalid block [ 51.582221][ T3321] kworker/u8:5: attempt to access beyond end of device [ 51.582221][ T3321] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 51.596079][ T4025] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.178: couldn't read orphan inode 15 (err -117) [ 51.608523][ T3321] kworker/u8:5: attempt to access beyond end of device [ 51.608523][ T3321] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 51.608993][ T4025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.622228][ T3321] kworker/u8:5: attempt to access beyond end of device [ 51.622228][ T3321] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 51.622274][ T3321] kworker/u8:5: attempt to access beyond end of device [ 51.622274][ T3321] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 51.665638][ T3321] kworker/u8:5: attempt to access beyond end of device [ 51.665638][ T3321] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 51.679554][ T3321] kworker/u8:5: attempt to access beyond end of device [ 51.679554][ T3321] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 51.697373][ T3321] kworker/u8:5: attempt to access beyond end of device [ 51.697373][ T3321] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 51.713948][ T4033] Driver unsupported XDP return value 0 on prog (id 44) dev N/A, expect packet loss! [ 51.754719][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.833341][ T4035] vfat: Unknown parameter '' [ 51.930585][ T4053] lo: entered allmulticast mode [ 51.993909][ T4051] syzkaller0: entered promiscuous mode [ 51.999665][ T4051] syzkaller0: entered allmulticast mode [ 53.067591][ T4093] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 53.089585][ T4093] pim6reg1: linktype set to 0 [ 54.754994][ T4191] veth0_vlan: entered allmulticast mode [ 54.847351][ T4191] veth0_vlan: left promiscuous mode [ 54.926401][ T4191] veth0_vlan: entered promiscuous mode [ 55.186476][ T4200] syzkaller0: entered promiscuous mode [ 55.192041][ T4200] syzkaller0: entered allmulticast mode [ 55.222151][ T3516] udevd[3516]: symlink '../../loop2' '/dev/disk/by-diskseq/123.tmp-b7:2' failed: Read-only file system [ 55.298620][ T3302] udevd[3302]: symlink '../../loop0' '/dev/disk/by-diskseq/121.tmp-b7:0' failed: Read-only file system [ 55.299162][ T3516] udevd[3516]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 55.342260][ T3516] udevd[3516]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 55.369052][ T3516] udevd[3516]: symlink '../../loop0' '/dev/disk/by-diskseq/121.tmp-b7:0' failed: Read-only file system [ 55.400512][ T3516] udevd[3516]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 55.454866][ T3516] udevd[3516]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 55.504670][ T3302] udevd[3302]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 55.509176][ T3300] udevd[3300]: symlink '../../loop2' '/dev/disk/by-diskseq/123.tmp-b7:2' failed: Read-only file system [ 55.519592][ T3516] udevd[3516]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 55.674116][ T4239] pim6reg1: entered promiscuous mode [ 55.679592][ T4239] pim6reg1: entered allmulticast mode [ 55.705652][ T4239] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 55.711481][ T4239] pim6reg1: Linktype set failed because interface is up [ 56.316345][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.323652][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.352425][ T4266] bridge0: entered allmulticast mode [ 56.421163][ T4265] bridge_slave_1: left allmulticast mode [ 56.427603][ T4265] bridge_slave_1: left promiscuous mode [ 56.434821][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.519005][ T4265] bridge_slave_0: left allmulticast mode [ 56.525568][ T4265] bridge_slave_0: left promiscuous mode [ 56.534089][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.658907][ T4282] veth0_vlan: entered allmulticast mode [ 56.704534][ T4282] veth0_vlan: left promiscuous mode [ 56.727697][ T4282] veth0_vlan: entered promiscuous mode [ 58.555915][ T4369] veth1_to_bond: entered promiscuous mode [ 58.562004][ T4369] veth1_to_bond: entered allmulticast mode [ 59.389307][ T4410] ------------[ cut here ]------------ [ 59.396647][ T4410] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xf00008a0, 0xd7fffe90] s64=[0xf00008a0, 0xd7fffe90] u32=[0xf00008a0, 0xd7fffe90] s32=[0xf00008a0, 0xffffffe0] var_off=(0xc0000020, 0x3fffffc0) [ 59.425300][ T4410] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.4.320/4410 [ 59.438201][ T4410] Modules linked in: [ 59.442907][ T4410] CPU: 1 UID: 0 PID: 4410 Comm: syz.4.320 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.454066][ T4410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.466396][ T4410] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 59.474207][ T4410] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 59.496117][ T4410] RSP: 0018:ffffc90003067388 EFLAGS: 00010246 [ 59.503607][ T4410] RAX: ffff88811b855d10 RBX: 00000000ffffffe0 RCX: 00000000f00008a0 [ 59.513247][ T4410] RDX: ffffffff867f0650 RSI: ffffffff866bb3e5 RDI: ffffffff86fb96f0 [ 59.522925][ T4410] RBP: ffff8881414b6190 R08: 00000000d7fffe90 R09: 00000000f00008a0 [ 59.536626][ T4410] R10: 0000000000000020 R11: 00000000ffffffc0 R12: ffff8881414b6150 [ 59.545518][ T4410] R13: 00000000c0000020 R14: ffff8881414b619c R15: ffff8881414b6188 [ 59.554476][ T4410] FS: 00007fbfd09d76c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 59.564625][ T4410] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.575410][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 59.575428][ T29] audit: type=1400 audit(1769519408.966:471): avc: denied { create } for pid=4416 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 59.611572][ T4410] CR2: 00007fbfd1fc8600 CR3: 0000000121a8e000 CR4: 00000000003506f0 [ 59.623641][ T4410] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.632676][ T4410] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 59.642171][ T4410] Call Trace: [ 59.646286][ T4410] [ 59.651246][ T4410] reg_set_min_max+0x1c8/0x260 [ 59.656907][ T4410] check_cond_jmp_op+0x13bd/0x1a80 [ 59.664286][ T4410] do_check+0x440c/0x9060 [ 59.671276][ T4410] do_check_common+0xd0f/0x1630 [ 59.676586][ T4410] bpf_check+0x2f6d/0xc7e0 [ 59.682544][ T4410] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 59.689677][ T4410] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 59.696247][ T4410] ? css_rstat_updated+0xbb/0x280 [ 59.702357][ T4410] ? mod_memcg_state+0x182/0x260 [ 59.708666][ T4410] ? __rcu_read_unlock+0x4e/0x70 [ 59.714761][ T4410] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 59.721728][ T4410] ? should_fail_ex+0x30/0x280 [ 59.728077][ T4410] ? __kmalloc_noprof+0x2a3/0x580 [ 59.734027][ T4410] ? security_bpf_prog_load+0x60/0x140 [ 59.741776][ T4410] ? selinux_bpf_prog_load+0xac/0xd0 [ 59.748426][ T4410] ? security_bpf_prog_load+0x9e/0x140 [ 59.755193][ T4410] bpf_prog_load+0xf76/0x1140 [ 59.771567][ T4410] ? security_bpf+0x2b/0x90 [ 59.776778][ T4410] __sys_bpf+0x469/0x7b0 [ 59.783355][ T4410] __x64_sys_bpf+0x41/0x50 [ 59.789297][ T4410] x64_sys_call+0x28e1/0x3000 [ 59.795006][ T4410] do_syscall_64+0xc0/0x2a0 [ 59.800467][ T4410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.807906][ T4410] RIP: 0033:0x7fbfd1f7aeb9 [ 59.813417][ T4410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.835437][ T4410] RSP: 002b:00007fbfd09d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.845647][ T4410] RAX: ffffffffffffffda RBX: 00007fbfd21f5fa0 RCX: 00007fbfd1f7aeb9 [ 59.855142][ T4410] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 59.864317][ T4410] RBP: 00007fbfd1fe8c1f R08: 0000000000000000 R09: 0000000000000000 [ 59.873198][ T4410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.882857][ T4410] R13: 00007fbfd21f6038 R14: 00007fbfd21f5fa0 R15: 00007ffd59c90bb8 [ 59.892968][ T4410] [ 59.896806][ T4410] ---[ end trace 0000000000000000 ]--- [ 59.907059][ T4421] netlink: 'syz.3.325': attribute type 12 has an invalid length. [ 59.914996][ T4421] netlink: 132 bytes leftover after parsing attributes in process `syz.3.325'. [ 60.196546][ T29] audit: type=1400 audit(1769519409.586:472): avc: denied { create } for pid=4444 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.228212][ T3516] udevd[3516]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 60.256913][ T3302] udevd[3302]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 60.370254][ T3516] udevd[3516]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 60.384118][ T3302] udevd[3302]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 60.435132][ T29] audit: type=1400 audit(1769519409.826:473): avc: denied { read } for pid=4459 comm="syz.1.338" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.463852][ T3516] udevd[3516]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 60.522599][ T3516] udevd[3516]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 60.599117][ T3516] udevd[3516]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 60.625951][ T3302] udevd[3302]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 60.741716][ T3516] udevd[3516]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 60.782402][ T3302] udevd[3302]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 60.946803][ T4486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.348'. [ 61.134262][ T4495] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.291058][ T4504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 61.307645][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 61.530824][ T4524] netlink: 16 bytes leftover after parsing attributes in process `syz.2.366'. [ 61.916401][ T4541] netlink: 32 bytes leftover after parsing attributes in process `syz.2.372'. [ 61.957497][ T4543] netlink: 60 bytes leftover after parsing attributes in process `syz.1.373'. [ 62.014657][ T4547] netlink: 60 bytes leftover after parsing attributes in process `syz.1.373'. [ 62.025119][ T4547] netlink: 60 bytes leftover after parsing attributes in process `syz.1.373'. [ 62.035321][ T4546] netlink: 13676 bytes leftover after parsing attributes in process `syz.2.374'. [ 62.190356][ T4560] tap0: tun_chr_ioctl cmd 1074025677 [ 62.206169][ T4560] tap0: linktype set to 774 [ 62.358984][ T29] audit: type=1400 audit(1769519411.756:474): avc: denied { read } for pid=4579 comm="syz.3.390" lport=48243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.584164][ T4604] netlink: 'syz.2.401': attribute type 10 has an invalid length. [ 62.613696][ T4604] batman_adv: batadv0: Adding interface: veth1_vlan [ 62.620589][ T4604] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.658304][ T4604] batman_adv: batadv0: Interface activated: veth1_vlan [ 63.025415][ T4651] lo speed is unknown, defaulting to 1000 [ 63.026919][ T29] audit: type=1400 audit(1769519412.416:475): avc: denied { write } for pid=4650 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.051183][ T4651] lo speed is unknown, defaulting to 1000 [ 63.061691][ T4651] lo speed is unknown, defaulting to 1000 [ 63.074155][ T4651] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 63.085341][ T4651] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 63.098676][ T4651] lo speed is unknown, defaulting to 1000 [ 63.105110][ T4651] lo speed is unknown, defaulting to 1000 [ 63.111481][ T4651] lo speed is unknown, defaulting to 1000 [ 63.118606][ T4651] lo speed is unknown, defaulting to 1000 [ 63.125056][ T4651] lo speed is unknown, defaulting to 1000 [ 63.174058][ T29] audit: type=1400 audit(1769519412.566:476): avc: denied { setopt } for pid=4654 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.301339][ T4680] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 63.382586][ T29] audit: type=1400 audit(1769519412.776:477): avc: denied { create } for pid=4685 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.403063][ T29] audit: type=1400 audit(1769519412.776:478): avc: denied { read } for pid=4685 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 63.503111][ T29] audit: type=1400 audit(1769519412.896:479): avc: denied { setopt } for pid=4705 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.786467][ T29] audit: type=1400 audit(1769519413.176:480): avc: denied { write } for pid=4728 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 64.156680][ T4766] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 65.060912][ T4856] __nla_validate_parse: 9 callbacks suppressed [ 65.061002][ T4856] netlink: 132 bytes leftover after parsing attributes in process `syz.3.509'. [ 65.222428][ T4861] netdevsim netdevsim3: Direct firmware load for ß failed with error -2 [ 65.238337][ T3516] udevd[3516]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 65.284451][ T4875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 65.293545][ T4875] openvswitch: netlink: Flow key attr not present in new flow. [ 65.326033][ T3516] udevd[3516]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 65.341991][ T3302] udevd[3302]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 65.358989][ T3300] udevd[3300]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 65.401086][ T3516] udevd[3516]: symlink '../../loop1' '/dev/disk/by-diskseq/82.tmp-b7:1' failed: Read-only file system [ 65.423249][ T3300] udevd[3300]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 65.522595][ T3302] udevd[3302]: symlink '../../loop4' '/dev/disk/by-diskseq/114.tmp-b7:4' failed: Read-only file system [ 65.526050][ T3300] udevd[3300]: symlink '../../loop2' '/dev/disk/by-diskseq/123.tmp-b7:2' failed: Read-only file system [ 65.536005][ T3982] udevd[3982]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 65.592199][ T3516] udevd[3516]: symlink '../../loop3' '/dev/disk/by-diskseq/106.tmp-b7:3' failed: Read-only file system [ 65.612004][ T4907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 65.621254][ T4907] netlink: 24 bytes leftover after parsing attributes in process `syz.3.531'. [ 65.741942][ T4915] netlink: 52 bytes leftover after parsing attributes in process `syz.2.536'. [ 65.750946][ T4915] netlink: 52 bytes leftover after parsing attributes in process `syz.2.536'. [ 65.759892][ T4915] netlink: 52 bytes leftover after parsing attributes in process `syz.2.536'. [ 66.001766][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 66.001785][ T29] audit: type=1400 audit(1769519415.396:483): avc: denied { write } for pid=4928 comm="syz.2.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 66.157939][ T4958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.549'. [ 66.248022][ T52] ================================================================== [ 66.256171][ T52] BUG: KCSAN: data-race in copy_process / free_pid [ 66.262810][ T52] [ 66.265237][ T52] read-write to 0xffffffff86a60018 of 4 bytes by task 4961 on cpu 0: [ 66.273311][ T52] free_pid+0xb9/0x1d0 [ 66.277475][ T52] free_pids+0x7a/0xb0 [ 66.281552][ T52] release_task+0x9a7/0xb60 [ 66.286334][ T52] do_exit+0xd56/0x1590 [ 66.290496][ T52] kthread_exit+0x93/0x190 [ 66.295092][ T52] __module_put_and_kthread_exit+0x15/0x20 [ 66.301075][ T52] cryptomgr_probe+0x15c/0x170 [ 66.305859][ T52] kthread+0x488/0x510 [ 66.309941][ T52] ret_from_fork+0x148/0x280 [ 66.314555][ T52] ret_from_fork_asm+0x1a/0x30 [ 66.319330][ T52] [ 66.321854][ T52] read to 0xffffffff86a60018 of 4 bytes by task 52 on cpu 1: [ 66.329226][ T52] copy_process+0x16e4/0x1f10 [ 66.334006][ T52] kernel_clone+0x16b/0x5b0 [ 66.338698][ T52] user_mode_thread+0x9c/0xd0 [ 66.343944][ T52] call_usermodehelper_exec_work+0x7a/0x160 [ 66.350048][ T52] process_scheduled_works+0x4cd/0x9d0 [ 66.355511][ T52] worker_thread+0x6bc/0x8b0 [ 66.360109][ T52] kthread+0x488/0x510 [ 66.364188][ T52] ret_from_fork+0x148/0x280 [ 66.368790][ T52] ret_from_fork_asm+0x1a/0x30 [ 66.373566][ T52] [ 66.375899][ T52] value changed: 0x800000de -> 0x800000dd [ 66.381615][ T52] [ 66.383941][ T52] Reported by Kernel Concurrency Sanitizer on: [ 66.390192][ T52] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 66.401488][ T52] Tainted: [W]=WARN [ 66.405333][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.415494][ T52] Workqueue: events_unbound call_usermodehelper_exec_work [ 66.422623][ T52] ================================================================== [ 66.485311][ T4970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.552'. [ 70.217613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog