last executing test programs: 5.695702909s ago: executing program 2 (id=174): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) r7 = socket(0x1, 0x803, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd29, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x2c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c000200160000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x60}}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x7ea83}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x40000) 5.304677125s ago: executing program 2 (id=181): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@empty, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @remote, {[@lsrr={0x83, 0x3, 0xfe}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) exit(0x6) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140004"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x922, 0x12) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xa404e, &(0x7f00000004c0), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x440, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x102640, 0x400, 0x0, 0x1, 0xffffffff, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) 4.116133336s ago: executing program 4 (id=187): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000040), 0x4, r0}, 0x38) read$watch_queue(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) syz_open_procfs(0x0, &(0x7f0000000ec0)='mountstats\x00') socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 3.404852576s ago: executing program 4 (id=190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001100)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x100010, 0xffffffffffffffff, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80210, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x104b, &(0x7f0000000000)="$eJzsz82pAjEUBeDzMrPIAxH7sQW3s7IZ67EX67AKiSQjAxYgInzf4v6EQ+CGr/pLUv63tSR1DFMv9T2736aaXEYicy+30cp4OD568pCc+3ZqrdX1s5f7svZdpjnL9VN3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAveQYAAP//xSsI5Q==") 2.9072848s ago: executing program 4 (id=196): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000480)={[{@data_err_abort}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x56b, &(0x7f00000018c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) unshare(0x40400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) semop(0x0, 0x0, 0x0) setuid(0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) bind$tipc(r3, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x2}}, 0x10) sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x41, 0x4}, 0x1}}, 0x10, 0x0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newsa={0x194, 0x10, 0x1, 0x70bd2d, 0x0, {{@in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0xecdf, 0x0, 0x2200, 0x2, 0x0, 0x0, 0x73}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {0x7fffffff, 0x2}, {0x8, 0xb, 0x0, 0x400}, {0x0, 0x0, 0x2000}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x1c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad30397b1b667853b88000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0xc0}}]}, 0x194}}, 0x4050) r4 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r4, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) 2.595625023s ago: executing program 4 (id=199): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="020500000e00000000000000ffdbdf2505000600000000000a004e220000000920010000000000000000000000000000178000000000000002000100000004d5000104010000000005000500320000000a"], 0x70}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) lstat(&(0x7f0000000100)='./file1/file0\x00', &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[], 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x38, &(0x7f0000000200)={0x18, 0x3, 0x7f}) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu +pids '], 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@errors_remount}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) lseek(r6, 0x4, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.49754155s ago: executing program 2 (id=200): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @empty, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [], "8029335287b7a081"}}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x1410, 0x1, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x88, &(0x7f0000000140)}, 0x10) 2.242632547s ago: executing program 2 (id=203): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x8, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES16], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400e200001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001140000001100010000000000000000000000000a5d12ec80a8816f57c428ed19a2c5ba26548f7a69a328892b636b411aea87bb4b2d29b50e665b9ee5f2462882628c10e10f24fe472242f4a2"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000150a010680000000000000000200001e0900010073797a30"], 0x20}}, 0x2404c08a) r1 = socket$inet6(0xa, 0x1, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x42051, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xbe}, 0x102103, 0x0, 0x10000, 0x0, 0x9, 0x82000001, 0x0, 0x0, 0x734, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xf4f01da58f5a8a7) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000280)={'custom1\x00'}) r3 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="1c3d0000000000", @ANYRESHEX=r4, @ANYBLOB=',\x00']) write$P9_RSTATFS(r3, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffff7ffffd, 0x0, 0x0, 0x403, 0x0, 0x2, 0x0, 0x4}) ioctl$TCFLSH(r6, 0x400455c8, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) setuid(0x0) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.209238589s ago: executing program 0 (id=204): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x401, 0x20000, 0x400, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x4e310}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974"], 0x38}}, 0x0) 2.092713647s ago: executing program 0 (id=205): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.023198902s ago: executing program 1 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001100)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80210, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x104b, &(0x7f0000000000)="$eJzsz82pAjEUBeDzMrPIAxH7sQW3s7IZ67EX67AKiSQjAxYgInzf4v6EQ+CGr/pLUv63tSR1DFMv9T2736aaXEYicy+30cp4OD568pCc+3ZqrdX1s5f7svZdpjnL9VN3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAveQYAAP//xSsI5Q==") 1.943989707s ago: executing program 3 (id=209): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x28c}, 0x5a4, 0x6, 0x11000, 0x6, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xd, 0x7}, 0x4, 0xfffffffffffffffd, 0x10000, 0x0, 0x2, 0x80000001, 0x10, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x37, 0xffffffffffffffff, &(0x7f0000000180)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffc, 0x9, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x0, 0x800}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000a40)) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, 0x0) readv(r5, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0xcc04, &(0x7f0000000000)=ANY=[], 0x1, 0x209, &(0x7f0000000200)="$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") syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000140)='./bus\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000480)) rename(0x0, &(0x7f0000000a00)='./bus\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) 1.930554498s ago: executing program 0 (id=210): r0 = socket(0xf, 0x3, 0x0) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xffc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001700)={0x0, 0x64, &(0x7f0000001680)=[@in6={0xa, 0x4e24, 0x6, @mcast1, 0x2}, @in6={0xa, 0x4e23, 0xd16, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x101, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xfff}]}, &(0x7f0000001740)=0x10) sendmmsg$inet_sctp(r0, &(0x7f0000001840)=[{&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x3541}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000140)="b855e3602137a5ada12d651cb9a5c274455f71337912461ad8d52ea152f6eff6cdc19292f2dd69f923f1122a5cb8edace49b49f5e66110ac8e77dfe758b07a0cea9686b889f0be", 0x47}, {&(0x7f0000000640)="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", 0x1000}], 0x2, &(0x7f0000001780)=[@init={0x18, 0x84, 0x0, {0x6, 0xff, 0x2, 0x1}}, @init={0x18, 0x84, 0x0, {0xffff, 0x10, 0x2000, 0x5}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x8}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x8, 0x0, 0x3, r2}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x820c, 0x117, 0x9}}], 0xa8, 0x20040001}], 0x1, 0x804) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0xffeffffb}, 0x7fff}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @quote={{0x2, 0x2}, 0x7, &(0x7f00000000c0)={0x5, 0xd, 0x3, 0xd, @tick=0xf22, {0x8, 0x7f}, {0x1, 0x40}, @connect={{0x33, 0x7}, {0x4e, 0x8}}}}}], 0x1c) 1.89592014s ago: executing program 0 (id=211): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@empty, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @remote, {[@lsrr={0x83, 0x3, 0xfe}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) exit(0x6) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140004"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x922, 0x12) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xa404e, &(0x7f00000004c0), 0x3, 0x451, &(0x7f0000000f80)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x440, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x102640, 0x400, 0x0, 0x1, 0xffffffff, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) 1.280014962s ago: executing program 1 (id=212): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000001a00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ni={0xe9337eec1165e4ab, 0x0, 0x0, 0x6, 0x4, 0x7}}}}}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x44000, 0x0) 1.053601767s ago: executing program 1 (id=213): r0 = syz_clone3(&(0x7f00000008c0)={0x8000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x33}, &(0x7f0000000140)=""/92, 0x5c, &(0x7f00000007c0)=""/125, &(0x7f0000000880)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) prlimit64(r0, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000026c0)=0x3d) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7d, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r2 = io_uring_setup(0x7348, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x771d, 0x16, 0x0, 0xff36) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0xffffffef, 0xee0, 0x9, 0x7fffffff, 0x90, "9900010000000000001300"}) 987.848902ms ago: executing program 4 (id=214): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x2008814, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x5, 0x175, &(0x7f0000000240)="$eJzs27GKE0EYB/BvTS5Gba62WrCxCmplqcgJ4oKipNBOOG08CJhmtQo+ia2P4sMIkiqgMKIbEo0bxMhmc8nv1+SDP0O+mSQzTGC/ppROR+NXo8fT6GdZdO9EHrMsjuNCdKIyCQBgn8xSii8ppXRxEpc+REqp7Y4AgKY5/wHg8Pz1/L/dUmMAQGPc/wHg8Dx99vzh3aI4eZLn/YjPk3JYDqvXKr//oDi5kf90vBw1LcthZ5HfrPL89/woLs/zW7V5L65fq/If2b1HxUp+JU7/6PaoiSUAAACAvTfIF2rv94PBuryqfvl/YOX+3o2r3a1NAwD4B+O3716/ODt7+ea8FL2I2IE2Nig+7UYbDRe9+Rdri2/6LaW0wfD3H6tO216xRorsvz+C2u2iv72dCWja8kffdicAAAAAAAAAAAAAAMA6zT6N1Gl7egAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDrewAAAP//6LlMIA==") stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)="05", 0x1}], 0x1}, 0x88c1) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5411, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x808719, &(0x7f0000000440)={[{@nogrpid}, {@noblock_validity}, {@discard}, {@errors_remount}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@mblk_io_submit}, {@journal_checksum}, {@mblk_io_submit}, {@grpjquota_path={'grpjquota', 0x3d, './control'}}, {@minixdf}, {@nolazytime}, {@dax_inode}, {@prjquota}, {@nouid32}, {@data_writeback}, {@resgid}], [{@smackfshat={'smackfshat', 0x3d, '-@):.#})#'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@fsname={'fsname', 0x3d, 'errors=remount-ro'}}], 0x2c}, 0x2, 0x4fc, &(0x7f0000000e40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) r3 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) chown(&(0x7f0000000000)='./file1\x00', r0, r1) 874.83263ms ago: executing program 3 (id=215): r0 = socket(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x42, 0x0, 0x500}, 0xc) 725.038821ms ago: executing program 3 (id=216): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x989046, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x2000000) 724.450371ms ago: executing program 3 (id=217): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@abort}]}, 0x5, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000000c0)=""/79, &(0x7f0000000140)=0x4f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40142, 0x0) 723.985981ms ago: executing program 1 (id=218): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r6) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x70bd29, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x2c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c000200160000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x60}}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x7ea83}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x40000) 694.864103ms ago: executing program 1 (id=219): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETS(r0, 0x89f2, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee000000594000"}) 671.265394ms ago: executing program 1 (id=220): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xfff2}, {0xb, 0x1}, {0x0, 0x9}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7, 0x200, 0x80000a, 0x1, 0xf, 0x400}}, {0x4}}]}]}, 0x48}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r2, 0xf2ff96e223395e37, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r3 = perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x80, 0xf8, 0x5, 0x2, 0x3, 0x0, 0x8ad4, 0x48, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe, 0x2, @perf_bp={&(0x7f00000001c0), 0x5}, 0x940, 0xfffffffffffffffe, 0xd, 0x5, 0x6, 0x5, 0x9, 0x0, 0x37, 0x0, 0xfffffffffffffff8}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0x1, 0x5, 0x1c, 0x0, 0x7, 0x8080, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f00000000c0), 0x6}, 0x10002, 0xfff, 0x2, 0x4, 0x3, 0x8001, 0xa, 0x0, 0x7, 0x0, 0x6}, 0xffffffffffffffff, 0xc, r3, 0x3) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f00000002c0)={0x7, 0x0, 0x2, 0x5, 0x4, 0x0, [{0x8, 0x4, 0x8001, '\x00', 0x1100}, {0x3, 0x2, 0x0, '\x00', 0x5}, {0xd, 0x6, 0x1, '\x00', 0x1001}, {0x3, 0xe, 0x6, '\x00', 0x1001}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') getdents64(r5, &(0x7f0000000040)=""/41, 0x66) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2, 0x6, 0x84, 0x2}, {0x9, 0x8, 0x9, 0xfffffffd}]}) pause() 521.748495ms ago: executing program 3 (id=221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/39, 0x27}], 0x1) write$ppp(r1, &(0x7f0000000200)="bc72", 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) (async) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4000, r2}, 0x18) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, 0x80646}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, 0x80646}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 275.804622ms ago: executing program 0 (id=222): syz_emit_ethernet(0x86, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa01000000000086dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08029078000000006000c3ffdb604adb07e53d5100000000110100000000000000000000000000000000fc020000000000000000000000dbbc3a000100"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/pid_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40000) perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000440006803c00040067636d000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB='\'\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000000000000014100000020001700000000000000006574683a76657468305f6d616376746170000000"], 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x4, 0x51d, &(0x7f0000000680)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x7f4, 0x8, 0x2d, 0x3ff}, {0xa1f, 0x80, 0x7, 0x8001}, {0x2, 0x4, 0xed, 0xb4}, {0x1, 0x1, 0x4, 0x2}, {0x2, 0xf8, 0xc7, 0x4}, {0x7ff, 0x5, 0x0, 0x80000000}, {0x5, 0x4, 0x0, 0x3797}, {0x742, 0x5, 0x4, 0x4}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) 172.363098ms ago: executing program 3 (id=223): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x0, 0xbf, 0x43a1bd78, 0x7, 0x9, 0x6, 0xff, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) rt_sigprocmask(0x2, &(0x7f00000000c0)={[0xfffffefffffffffe]}, 0x0, 0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0xf) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8001) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffffffffffe3e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x804) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x82002, 0x105) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) write$cgroup_devices(r4, &(0x7f0000000340)=ANY=[], 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 161.452969ms ago: executing program 2 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 83.977125ms ago: executing program 2 (id=225): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) r7 = socket(0x1, 0x803, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x2c, r8, 0x1, 0x70bd29, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x2c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c000200160000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x60}}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x7ea83}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x40000) 354.04µs ago: executing program 4 (id=226): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = socket(0x200000000000011, 0x2, 0x1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000440)={r1, 0x421, 0x30, 0x7f, 0x1}, &(0x7f0000000480)=0x18) bind$packet(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r2, 0x8955, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0xfffffffe, 0x2, {{0xb, 0x4, 0x0, 0x22, 0x2c, 0x64, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@lsrr={0x83, 0x7, 0x29, [@remote]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x71, [@loopback, @rand_addr=0x64010102]}]}}}}}) lstat(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)=@polexpire={0x2b0, 0x1b, 0x300, 0x70bd2d, 0x25dfdbfe, {{{@in6=@empty, @in=@multicast2, 0x4e21, 0x0, 0x4e22, 0x0, 0x0, 0x80, 0x20, 0x11, r4, r5}, {0x10, 0xb1d, 0x100000001, 0x54e2, 0x762, 0x100, 0x4, 0xc3e9}, {0x8, 0xc, 0x8, 0x6}, 0x0, 0x6e6bb0, 0x1, 0x1, 0x3, 0x2}, 0x3}, [@algo_crypt={0xe0, 0x2, {{'ecb-camellia-aesni\x00'}, 0x4c0, "6de351503b3c6e60c177ab2c46ffbcb6dd4bc44bc4aab40814a9d6e963b482bc541375ea59acf1c2c17dccd753cde5064dd05ae88793060026e44347433e6d0e50cccdcebb520171ffe99f0ec0d6fdc275fff324cf007c9e2275bbee4abd35ee890644e135c47957f084d9e55c85857aae98da2dc5bd9f2a65f04d39a1f5ac2ac00d6a600172c62057b039c089a26f467801578a8307c0c4"}}, @algo_auth_trunc={0x110, 0x14, {{'md5\x00'}, 0x620, 0x80, "1dbac18980698ca0253b12b25a931a55a2b1824b57efb9679da36f08e8349dd28228f809c9a742508970b1ece77185ac5a25b87c65e177d235484a8ae62b5c97a777e54b4403fca91fa5d69a60929699d3a53a57fc168880944823f07943ec9b75534134f5e9d02393b115d821473d7cdab305c45221d9aab6e4343c8711d70be6dc9806abdf168b56d53c6b2d5e34ee2f3d0017758f9b4e331fb28e76bd2a67b124567418e0d46f521b94060aa0b63acd05e043461b5926aa436679533c5d312b9a7863"}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x6}, 0x4000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x92) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8936, 0x0) semop(0x0, &(0x7f0000000080)=[{0x1, 0xe, 0x1000}, {0x1, 0x5b7a}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)) 0s ago: executing program 0 (id=227): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000016c0)={0x4, &(0x7f0000000180)=[{0x61, 0x0, 0x0, 0x800}, {0x16, 0xf}, {0x6, 0x1, 0xd4, 0x16}, {0x2, 0x7, 0x3, 0x4}]}) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x6, 0x4, 0x80}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, [0x11fffffffffff, 0x10001, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x2, 0x4492]}, &(0x7f0000000440)=0x100) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mq_open(0x0, 0xc2, 0x100, &(0x7f0000000340)={0x4, 0x6, 0x9, 0xd3b}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x5f, 0x20000000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r6, @ANYRES32=r5, @ANYRES64, @ANYRES32=0x0], 0x50) r7 = syz_open_procfs(r5, &(0x7f0000000140)='limits\x00') fchdir(r7) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000040)={0x0, 0x0, 0x3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006a008313000000000000354f1b0800000000000008000e"], 0x20}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x6, 0x8, 0x8}, 0x10) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) fremovexattr(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="747275737465642e5d0100000000000000"]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. [ 32.015544][ T28] audit: type=1400 audit(1775479506.449:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.038522][ T28] audit: type=1400 audit(1775479506.479:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.039194][ T3301] cgroup: Unknown subsys name 'net' [ 32.066198][ T28] audit: type=1400 audit(1775479506.509:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.237932][ T3301] cgroup: Unknown subsys name 'cpuset' [ 32.244057][ T3301] cgroup: Unknown subsys name 'rlimit' [ 32.363935][ T28] audit: type=1400 audit(1775479506.799:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.388122][ T28] audit: type=1400 audit(1775479506.799:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.408964][ T28] audit: type=1400 audit(1775479506.799:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.410799][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.429472][ T28] audit: type=1400 audit(1775479506.799:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.458452][ T28] audit: type=1400 audit(1775479506.799:69): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.483291][ T28] audit: type=1400 audit(1775479506.799:70): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.506701][ T28] audit: type=1400 audit(1775479506.799:71): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.509417][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.422907][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 34.457614][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 34.502668][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 34.511488][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 34.542528][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.549717][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.556880][ T3311] bridge_slave_0: entered allmulticast mode [ 34.563369][ T3311] bridge_slave_0: entered promiscuous mode [ 34.584517][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.591672][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.598829][ T3311] bridge_slave_1: entered allmulticast mode [ 34.605335][ T3311] bridge_slave_1: entered promiscuous mode [ 34.634417][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.646328][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 34.660610][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.676932][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.684192][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.691338][ T3312] bridge_slave_0: entered allmulticast mode [ 34.697722][ T3312] bridge_slave_0: entered promiscuous mode [ 34.723065][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.730241][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.737456][ T3312] bridge_slave_1: entered allmulticast mode [ 34.743962][ T3312] bridge_slave_1: entered promiscuous mode [ 34.768513][ T3311] team0: Port device team_slave_0 added [ 34.782593][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.789776][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.796862][ T3319] bridge_slave_0: entered allmulticast mode [ 34.803305][ T3319] bridge_slave_0: entered promiscuous mode [ 34.812329][ T3311] team0: Port device team_slave_1 added [ 34.823260][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.837626][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.846764][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.853931][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.861117][ T3319] bridge_slave_1: entered allmulticast mode [ 34.867488][ T3319] bridge_slave_1: entered promiscuous mode [ 34.880243][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.887322][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.894545][ T3318] bridge_slave_0: entered allmulticast mode [ 34.900976][ T3318] bridge_slave_0: entered promiscuous mode [ 34.911301][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.918531][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.925662][ T3318] bridge_slave_1: entered allmulticast mode [ 34.931991][ T3318] bridge_slave_1: entered promiscuous mode [ 34.951210][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.958328][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.984328][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.004153][ T3312] team0: Port device team_slave_0 added [ 35.018768][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.025764][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.051831][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.063684][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.073393][ T3312] team0: Port device team_slave_1 added [ 35.080340][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.090689][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.099832][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.106986][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.114130][ T3315] bridge_slave_0: entered allmulticast mode [ 35.120520][ T3315] bridge_slave_0: entered promiscuous mode [ 35.129654][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.136739][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.143903][ T3315] bridge_slave_1: entered allmulticast mode [ 35.150152][ T3315] bridge_slave_1: entered promiscuous mode [ 35.157399][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.180174][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.187226][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.213355][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.242910][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.253531][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.262855][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.269929][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.295950][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.311500][ T3318] team0: Port device team_slave_0 added [ 35.317775][ T3319] team0: Port device team_slave_0 added [ 35.335474][ T3319] team0: Port device team_slave_1 added [ 35.341624][ T3318] team0: Port device team_slave_1 added [ 35.369482][ T3311] hsr_slave_0: entered promiscuous mode [ 35.375411][ T3311] hsr_slave_1: entered promiscuous mode [ 35.381766][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.388777][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.414821][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.426181][ T3315] team0: Port device team_slave_0 added [ 35.432796][ T3315] team0: Port device team_slave_1 added [ 35.448426][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.455375][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.481281][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.503303][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.512621][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.538740][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.554177][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.561192][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.587155][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.622537][ T3312] hsr_slave_0: entered promiscuous mode [ 35.628500][ T3312] hsr_slave_1: entered promiscuous mode [ 35.634207][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 35.639968][ T3312] Cannot create hsr debugfs directory [ 35.658381][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.665325][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.691256][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.702410][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.709409][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.735417][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.752714][ T3318] hsr_slave_0: entered promiscuous mode [ 35.758804][ T3318] hsr_slave_1: entered promiscuous mode [ 35.764683][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 35.770460][ T3318] Cannot create hsr debugfs directory [ 35.778537][ T3319] hsr_slave_0: entered promiscuous mode [ 35.784456][ T3319] hsr_slave_1: entered promiscuous mode [ 35.790639][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 35.796381][ T3319] Cannot create hsr debugfs directory [ 35.866303][ T3315] hsr_slave_0: entered promiscuous mode [ 35.872297][ T3315] hsr_slave_1: entered promiscuous mode [ 35.878157][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 35.883891][ T3315] Cannot create hsr debugfs directory [ 36.028414][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.037218][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.050715][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.059255][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.080760][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.091953][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.103745][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.112757][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.152699][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.161959][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.173139][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.182281][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.215045][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.224283][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.238799][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.247805][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.260355][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.278401][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.297648][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.306549][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.315350][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.327427][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.350413][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.357658][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.375613][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.382729][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.394256][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.420996][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.431823][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.449960][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.457049][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.474084][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.481179][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.496490][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.520885][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.528005][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.537074][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.544221][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.561044][ T3319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.577805][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.590920][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.611933][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.627962][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.644828][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.660873][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.674916][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.682071][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.693392][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.708234][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.715316][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.741346][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.748456][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.758409][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.765494][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.778207][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.819850][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.931459][ T3319] veth0_vlan: entered promiscuous mode [ 36.949165][ T3319] veth1_vlan: entered promiscuous mode [ 36.962805][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.971505][ T3311] veth0_vlan: entered promiscuous mode [ 37.001940][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.019237][ T3311] veth1_vlan: entered promiscuous mode [ 37.057926][ T3319] veth0_macvtap: entered promiscuous mode [ 37.069558][ T3311] veth0_macvtap: entered promiscuous mode [ 37.077008][ T3311] veth1_macvtap: entered promiscuous mode [ 37.085441][ T3319] veth1_macvtap: entered promiscuous mode [ 37.092392][ T3318] veth0_vlan: entered promiscuous mode [ 37.100812][ T3318] veth1_vlan: entered promiscuous mode [ 37.123910][ T3318] veth0_macvtap: entered promiscuous mode [ 37.140620][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.149232][ T3318] veth1_macvtap: entered promiscuous mode [ 37.158905][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.194808][ T3312] veth0_vlan: entered promiscuous mode [ 37.202266][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.213018][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.231640][ T118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.240585][ T118] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.253246][ T3315] veth0_vlan: entered promiscuous mode [ 37.261578][ T3312] veth1_vlan: entered promiscuous mode [ 37.269556][ T118] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.278341][ T118] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.291103][ T118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.300146][ T118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.313443][ T118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.322413][ T118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.332223][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.340269][ T3315] veth1_vlan: entered promiscuous mode [ 37.356776][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.356970][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 37.356984][ T28] audit: type=1400 audit(1775479511.789:85): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.XMyHEi/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 37.395161][ T28] audit: type=1400 audit(1775479511.809:86): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.423466][ T118] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.444056][ T28] audit: type=1400 audit(1775479511.809:87): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.XMyHEi/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.469457][ T28] audit: type=1400 audit(1775479511.809:88): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 37.493590][ T313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.494870][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.503264][ T313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.526825][ T28] audit: type=1400 audit(1775479511.809:89): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.XMyHEi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 37.539257][ T3312] veth0_macvtap: entered promiscuous mode [ 37.559221][ T28] audit: type=1400 audit(1775479511.819:90): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/root/syzkaller.XMyHEi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 37.564307][ T3315] veth0_macvtap: entered promiscuous mode [ 37.592895][ T28] audit: type=1400 audit(1775479511.819:91): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.613169][ T28] audit: type=1400 audit(1775479511.879:92): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 37.620010][ T313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.636413][ T28] audit: type=1400 audit(1775479511.879:93): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 37.648840][ T3312] veth1_macvtap: entered promiscuous mode [ 37.673450][ T28] audit: type=1400 audit(1775479511.879:94): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="gadgetfs" ino=4585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 37.698277][ T3315] veth1_macvtap: entered promiscuous mode [ 37.727495][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.742968][ T3481] loop3: detected capacity change from 0 to 512 [ 37.749689][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.759028][ T3481] EXT4-fs warning (device loop3): read_mmp_block:111: Error -74 while reading MMP block 7 [ 37.784468][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.807383][ T3483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 37.823879][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.834445][ T3481] loop3: detected capacity change from 0 to 512 [ 37.836186][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.852395][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.886170][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.886984][ T3481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.911594][ T3481] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.911711][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.941459][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.963232][ T3483] veth3: entered allmulticast mode [ 38.013744][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.046928][ C0] hrtimer: interrupt took 44143 ns [ 38.091180][ T2113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.107958][ C1] sd 0:0:1:0: [sda] tag#8051 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 38.118432][ C1] sd 0:0:1:0: [sda] tag#8051 CDB: Read(6) 08 00 00 00 00 00 [ 38.123473][ T2113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.436804][ T3508] netlink: 'syz.2.6': attribute type 10 has an invalid length. [ 38.594288][ T3506] hub 8-0:1.0: USB hub found [ 38.599134][ T3506] hub 8-0:1.0: 8 ports detected [ 39.226905][ T3508] macvlan1: entered allmulticast mode [ 39.278659][ T3508] veth1_vlan: entered allmulticast mode [ 39.286435][ T3508] team0: Port device macvlan1 added [ 39.594013][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.885498][ T3493] loop1: detected capacity change from 0 to 1024 [ 39.922342][ T3493] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.947952][ T3493] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 40.031503][ T3493] EXT4-fs error (device loop1): ext4_get_journal_inode:5888: comm syz.1.2: inode #1: comm syz.1.2: iget: illegal inode # [ 40.075376][ T3527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 40.092517][ T3493] loop1: lost filesystem error report for type 5 error -117 [ 40.095231][ T3493] EXT4-fs (loop1): no journal found [ 40.103493][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 40.103546][ C1] EXT4-fs (loop1): initial error at time 1775479514: ext4_get_journal_inode:5888 [ 40.103674][ C1] EXT4-fs (loop1): last error at time 1775479514: ext4_get_journal_inode:5888 [ 40.246201][ T3542] hub 8-0:1.0: USB hub found [ 40.250986][ T3542] hub 8-0:1.0: 8 ports detected [ 40.266967][ T3542] netlink: 'syz.3.7': attribute type 10 has an invalid length. [ 40.287739][ T3543] loop2: detected capacity change from 0 to 1024 [ 40.355647][ T3543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.432625][ T3493] EXT4-fs (loop1): can't get journal size [ 40.460163][ T3549] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.491787][ T3493] EXT4-fs (loop1): failed to initialize system zone (-22) [ 40.532639][ T3493] EXT4-fs (loop1): mount failed [ 40.591157][ T3542] macvlan1: entered allmulticast mode [ 40.598806][ T3542] veth1_vlan: entered allmulticast mode [ 40.606194][ T3542] team0: Port device macvlan1 added [ 40.612557][ T3551] ======================================================= [ 40.612557][ T3551] WARNING: The mand mount option has been deprecated and [ 40.612557][ T3551] and is ignored by this kernel. Remove the mand [ 40.612557][ T3551] option from the mount to silence this warning. [ 40.612557][ T3551] ======================================================= [ 40.677506][ T3551] 9p: Bad value for 'wfdno' [ 40.756605][ T3556] syz.1.11 uses obsolete (PF_INET,SOCK_PACKET) [ 40.833230][ T3560] loop0: detected capacity change from 0 to 512 [ 40.841110][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.891719][ T3560] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.12: bad orphan inode 15 [ 40.902536][ T3560] loop0: lost filesystem error report for type 5 error -117 [ 40.902761][ T3560] ext4_test_bit(bit=14, block=18) = 1 [ 40.910091][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 40.910129][ C1] EXT4-fs (loop0): initial error at time 1775479515: ext4_orphan_get:1423 [ 40.910157][ C1] EXT4-fs (loop0): last error at time 1775479515: ext4_orphan_get:1423 [ 40.940474][ T3542] syz.3.7 (3542) used greatest stack depth: 10384 bytes left [ 40.952830][ T3560] is_bad_inode(inode)=0 [ 40.957059][ T3560] NEXT_ORPHAN(inode)=1023 [ 40.961720][ T3560] max_ino=32 [ 40.965297][ T3560] i_nlink=0 [ 40.969678][ T3560] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2970: inode #15: comm syz.0.12: corrupted xattr block 19: invalid header [ 40.983679][ T3560] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.983862][ T3560] EXT4-fs warning (device loop0): ext4_evict_inode:285: xattr delete (err -117) [ 41.023112][ T3560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 41.038226][ T3560] ext4 filesystem being mounted at /3/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 41.220369][ T3560] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.12: bg 0: block 449: padding at end of block bitmap is not set [ 41.279650][ T3573] loop4: detected capacity change from 0 to 256 [ 41.410945][ T3573] FAT-fs (loop4): Directory bread(block 64) failed [ 41.417694][ T3573] FAT-fs (loop4): Directory bread(block 65) failed [ 41.424270][ T3573] FAT-fs (loop4): Directory bread(block 66) failed [ 41.430943][ T3573] FAT-fs (loop4): Directory bread(block 67) failed [ 41.437707][ T3573] FAT-fs (loop4): Directory bread(block 68) failed [ 41.444253][ T3573] FAT-fs (loop4): Directory bread(block 69) failed [ 41.450822][ T3573] FAT-fs (loop4): Directory bread(block 70) failed [ 41.457461][ T3573] FAT-fs (loop4): Directory bread(block 71) failed [ 41.464169][ T3573] FAT-fs (loop4): Directory bread(block 72) failed [ 41.470835][ T3573] FAT-fs (loop4): Directory bread(block 73) failed [ 41.585833][ T3575] loop2: detected capacity change from 0 to 512 [ 42.094587][ T3575] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.125464][ T3575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.241037][ T3575] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.311497][ T3560] syz.0.12 (3560) used greatest stack depth: 10296 bytes left [ 42.350078][ T3581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'. [ 42.407323][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 42.407343][ T28] audit: type=1326 audit(1775479516.829:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3574 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be7b0c819 code=0x7ffc0000 [ 42.477804][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 42.511064][ T28] audit: type=1326 audit(1775479516.829:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3574 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2be7b0c819 code=0x7ffc0000 [ 42.617032][ T28] audit: type=1326 audit(1775479516.829:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3574 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be7b0c819 code=0x7ffc0000 [ 42.695325][ T28] audit: type=1326 audit(1775479516.829:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3574 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f2be7b0c819 code=0x7ffc0000 [ 42.784155][ T28] audit: type=1326 audit(1775479516.829:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3574 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be7b0c819 code=0x7ffc0000 [ 42.891068][ T28] audit: type=1326 audit(1775479516.829:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3574 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2be7b0c819 code=0x7ffc0000 [ 43.012531][ T28] audit: type=1400 audit(1775479516.829:187): avc: denied { create } for pid=3574 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 43.049645][ T28] audit: type=1400 audit(1775479516.929:188): avc: denied { execute } for pid=3555 comm="syz.1.11" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=5221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 43.055807][ T3591] loop0: detected capacity change from 0 to 128 [ 43.163269][ T3593] loop4: detected capacity change from 0 to 512 [ 43.167362][ T28] audit: type=1326 audit(1775479516.979:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3574 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be7b0c819 code=0x7ffc0000 [ 43.227369][ T28] audit: type=1326 audit(1775479516.979:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3574 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be7b0c819 code=0x7ffc0000 [ 43.267486][ T3593] EXT4-fs warning (device loop4): read_mmp_block:111: Error -74 while reading MMP block 7 [ 43.404439][ T3593] loop4: detected capacity change from 0 to 512 [ 43.458264][ T3593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.503393][ T3593] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.537390][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.537390][ T12] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 43.562682][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.572261][ T3585] syz.2.17 (3585) used greatest stack depth: 5776 bytes left [ 43.587907][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.587907][ T12] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 43.631400][ T3618] netlink: 'syz.1.24': attribute type 34 has an invalid length. [ 43.639699][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.659516][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.659516][ T12] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 43.701483][ T3624] netlink: 180 bytes leftover after parsing attributes in process `syz.1.24'. [ 43.709723][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.709723][ T12] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 43.717340][ T3624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.24'. [ 43.776057][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.776057][ T12] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 43.817396][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.817396][ T12] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 43.866102][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.866102][ T12] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 43.890025][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.890025][ T12] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 43.919042][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.919042][ T12] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 43.952425][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.952425][ T12] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 44.096672][ T3642] hub 8-0:1.0: USB hub found [ 44.101775][ T3642] hub 8-0:1.0: 8 ports detected [ 45.301158][ T3676] loop1: detected capacity change from 0 to 512 [ 45.377846][ T3676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.390540][ T3676] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.403803][ T3676] FAULT_INJECTION: forcing a failure. [ 45.403803][ T3676] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 45.416899][ T3676] CPU: 1 UID: 0 PID: 3676 Comm: syz.1.34 Not tainted syzkaller #0 PREEMPT(full) [ 45.416943][ T3676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 45.416957][ T3676] Call Trace: [ 45.416965][ T3676] [ 45.416975][ T3676] __dump_stack+0x1d/0x30 [ 45.417072][ T3676] dump_stack_lvl+0x95/0xd0 [ 45.417154][ T3676] dump_stack+0x15/0x1b [ 45.417174][ T3676] should_fail_ex+0x263/0x280 [ 45.417266][ T3676] should_fail+0xb/0x20 [ 45.417311][ T3676] should_fail_usercopy+0x1a/0x20 [ 45.417337][ T3676] _copy_from_user+0x1c/0xb0 [ 45.417416][ T3676] do_ip6t_set_ctl+0x3b2/0x8f0 [ 45.417453][ T3676] ? kstrtoull+0x111/0x140 [ 45.417474][ T3676] ? __rcu_read_unlock+0x4e/0x70 [ 45.417498][ T3676] nf_setsockopt+0x199/0x1b0 [ 45.417563][ T3676] ipv6_setsockopt+0x11a/0x130 [ 45.417597][ T3676] tcp_setsockopt+0x98/0xb0 [ 45.417675][ T3676] sock_common_setsockopt+0x69/0x80 [ 45.417720][ T3676] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 45.417748][ T3676] __sys_setsockopt+0x184/0x200 [ 45.417781][ T3676] __x64_sys_setsockopt+0x64/0x80 [ 45.417856][ T3676] x64_sys_call+0x2327/0x3020 [ 45.417880][ T3676] do_syscall_64+0x12c/0x370 [ 45.417907][ T3676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.417940][ T3676] RIP: 0033:0x7fabc2d3c819 [ 45.417955][ T3676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.417973][ T3676] RSP: 002b:00007fabc1755028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 45.417994][ T3676] RAX: ffffffffffffffda RBX: 00007fabc2fb6180 RCX: 00007fabc2d3c819 [ 45.418014][ T3676] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008 [ 45.418044][ T3676] RBP: 00007fabc1755090 R08: 0000000000000368 R09: 0000000000000000 [ 45.418058][ T3676] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 45.418074][ T3676] R13: 00007fabc2fb6218 R14: 00007fabc2fb6180 R15: 00007ffe88f5a0c8 [ 45.418096][ T3676] [ 45.844132][ T3686] loop4: detected capacity change from 0 to 512 [ 45.864590][ T3686] EXT4-fs warning (device loop4): read_mmp_block:111: Error -74 while reading MMP block 7 [ 45.917855][ T3684] loop0: detected capacity change from 0 to 4096 [ 45.926624][ T3689] loop2: detected capacity change from 0 to 1024 [ 45.948006][ T3689] EXT4-fs: inline encryption not supported [ 45.955979][ T3689] EXT4-fs: Ignoring removed nobh option [ 45.962751][ T3689] EXT4-fs: Ignoring removed bh option [ 45.968938][ T3689] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 45.968938][ T3689] [ 45.983473][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.032926][ T3684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.300245][ T3709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.40'. [ 46.793464][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.926280][ T3720] loop2: detected capacity change from 0 to 512 [ 46.949912][ T3720] EXT4-fs warning (device loop2): read_mmp_block:111: Error -74 while reading MMP block 7 [ 47.020597][ T3723] netlink: 216 bytes leftover after parsing attributes in process `syz.3.46'. [ 47.076438][ T3721] loop1: detected capacity change from 0 to 8192 [ 47.099014][ T3730] loop0: detected capacity change from 0 to 164 [ 47.123558][ T3732] netlink: 212 bytes leftover after parsing attributes in process `syz.4.49'. [ 47.132623][ T3703] loop1: p1 p2 p4[EZD] [ 47.152334][ T3703] loop1: p4 start 201326592 is beyond EOD, truncated [ 47.168275][ T3732] syzkaller1: entered promiscuous mode [ 47.177193][ T3732] syzkaller1: entered allmulticast mode [ 47.184413][ T3721] loop1: p1 p2 p4[EZD] [ 47.198551][ T3721] loop1: p4 start 201326592 is beyond EOD, truncated [ 47.200732][ T3732] xt_hashlimit: size too large, truncated to 1048576 [ 47.326038][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 47.340575][ T3703] udevd[3703]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 47.383378][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 47.397726][ T3703] udevd[3703]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 47.603016][ T3740] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20001 [ 47.640854][ T28] kauditd_printk_skb: 470 callbacks suppressed [ 47.640873][ T28] audit: type=1400 audit(1775512296.268:661): avc: denied { connect } for pid=3735 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 47.813255][ T3746] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.831386][ T3754] EXT4-fs: inline encryption not supported [ 47.837668][ T3754] EXT4-fs: Ignoring removed nobh option [ 47.843400][ T3754] EXT4-fs: Ignoring removed bh option [ 47.850744][ T3754] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 47.850744][ T3754] [ 47.874312][ T28] audit: type=1326 audit(1775512296.499:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3753 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c064bc819 code=0x7ffc0000 [ 47.899089][ T28] audit: type=1326 audit(1775512296.499:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3753 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c064bc819 code=0x7ffc0000 [ 47.959673][ T3745] set_capacity_and_notify: 2 callbacks suppressed [ 47.959688][ T3745] loop3: detected capacity change from 0 to 32768 [ 47.991993][ T28] audit: type=1326 audit(1775512296.499:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3753 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c064bc819 code=0x7ffc0000 [ 48.009480][ T3746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.015775][ T28] audit: type=1326 audit(1775512296.499:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3753 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5c064bc819 code=0x7ffc0000 [ 48.015867][ T28] audit: type=1326 audit(1775512296.509:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3753 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c064bc819 code=0x7ffc0000 [ 48.015901][ T28] audit: type=1326 audit(1775512296.509:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3753 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c064bc819 code=0x7ffc0000 [ 48.015930][ T28] audit: type=1326 audit(1775512296.509:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3753 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c064bc819 code=0x7ffc0000 [ 48.015957][ T28] audit: type=1326 audit(1775512296.541:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3753 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c064bc819 code=0x7ffc0000 [ 48.016087][ T28] audit: type=1326 audit(1775512296.541:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3753 comm="syz.4.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c064bc819 code=0x7ffc0000 [ 48.150516][ T3770] sctp: [Deprecated]: syz.0.57 (pid 3770) Use of struct sctp_assoc_value in delayed_ack socket option. [ 48.150516][ T3770] Use struct sctp_sack_info instead [ 48.168238][ T3746] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.214392][ T3745] loop3: p1 p3 < > [ 48.371234][ T3000] loop3: p1 p3 < > [ 48.405750][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 48.416854][ T3703] udevd[3703]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 48.428879][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 48.501334][ T3785] syzkaller0: entered promiscuous mode [ 48.507664][ T3785] syzkaller0: entered allmulticast mode [ 48.578003][ T3789] loop1: detected capacity change from 0 to 1024 [ 48.596118][ T3789] EXT4-fs: inline encryption not supported [ 48.615832][ T3789] EXT4-fs: Ignoring removed nobh option [ 48.621737][ T3789] EXT4-fs: Ignoring removed bh option [ 48.712127][ T3789] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 48.712127][ T3789] [ 49.012363][ T3802] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.055612][ T3802] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.271593][ T3808] loop0: detected capacity change from 0 to 512 [ 49.311275][ T3808] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.359370][ T3808] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.72: bg 0: block 376: padding at end of block bitmap is not set [ 49.416715][ T3808] loop0: lost filesystem error report for type 5 error -117 [ 49.425362][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 49.439176][ C1] EXT4-fs (loop0): initial error at time 1775512298: ext4_validate_block_bitmap:441 [ 49.448598][ C1] EXT4-fs (loop0): last error at time 1775512298: ext4_validate_block_bitmap:441 [ 49.472159][ T3808] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 49.485535][ T3816] loop3: detected capacity change from 0 to 128 [ 49.511094][ T3816] FAT-fs (loop3): bogus sectors per cluster 7 [ 49.533386][ T3816] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 49.555424][ T3808] loop0: lost filesystem error report for type 5 error -117 [ 49.555783][ T3808] EXT4-fs (loop0): 1 orphan inode deleted [ 49.558952][ T3816] FAT-fs (loop3): Can't find a valid FAT filesystem [ 49.570173][ T2113] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:8: Failed to release dquot type 1 [ 49.597666][ T3808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.616178][ T2113] loop0: lost filesystem error report for type 5 error -117 [ 49.627531][ T3808] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.894404][ T3816] loop3: detected capacity change from 0 to 1024 [ 49.940345][ T3816] EXT4-fs: Ignoring removed orlov option [ 49.946543][ T3823] loop4: detected capacity change from 0 to 512 [ 49.971930][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.984880][ T3816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.014976][ T30] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:1: Failed to release dquot type 1 [ 50.036257][ T3823] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.061881][ T30] loop0: lost filesystem error report for type 5 error -117 [ 50.224872][ T3823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.277068][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.330652][ T3823] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.439437][ T3823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'. [ 50.477281][ T3838] hub 8-0:1.0: USB hub found [ 50.482177][ T3838] hub 8-0:1.0: 8 ports detected [ 50.499929][ T3838] netlink: 'syz.0.78': attribute type 10 has an invalid length. [ 50.512065][ T3838] macvlan1: entered allmulticast mode [ 50.521860][ T3838] veth1_vlan: entered allmulticast mode [ 50.532021][ T3838] team0: Port device macvlan1 added [ 51.232040][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.290297][ T3839] loop1: detected capacity change from 0 to 512 [ 51.474510][ T3863] xt_CT: You must specify a L4 protocol and not use inversions on it [ 51.515578][ T3839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.610338][ T3867] loop4: detected capacity change from 0 to 512 [ 51.690393][ T3867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.060998][ T3871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.89'. [ 52.069850][ T3871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'. [ 52.120561][ T3874] capability: warning: `syz.2.90' uses 32-bit capabilities (legacy support in use) [ 52.213247][ T3880] netlink: 320 bytes leftover after parsing attributes in process `syz.2.92'. [ 52.264267][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.678472][ T3890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 52.802118][ T3889] loop2: detected capacity change from 0 to 4096 [ 52.813639][ T3889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.622623][ T3895] loop3: detected capacity change from 0 to 2048 [ 53.633701][ T3895] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 53.674680][ T3895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.698758][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.712617][ T28] kauditd_printk_skb: 424 callbacks suppressed [ 53.712632][ T28] audit: type=1400 audit(1775545076.644:1093): avc: denied { map } for pid=3894 comm="syz.3.98" path="/15/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.763673][ T28] audit: type=1400 audit(1775545076.644:1094): avc: denied { execute } for pid=3894 comm="syz.3.98" path="/15/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.922763][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.046273][ T28] audit: type=1400 audit(1775545076.959:1095): avc: denied { create } for pid=3898 comm="syz.2.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 54.146690][ T3912] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 54.323201][ T28] audit: type=1400 audit(1775545077.243:1096): avc: denied { read } for pid=3904 comm="syz.3.99" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.359834][ T28] audit: type=1400 audit(1775545077.243:1097): avc: denied { open } for pid=3904 comm="syz.3.99" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.387049][ T28] audit: type=1400 audit(1775545077.274:1098): avc: denied { ioctl } for pid=3904 comm="syz.3.99" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.759032][ T3918] netlink: 'syz.4.101': attribute type 10 has an invalid length. [ 54.841396][ T3918] macvlan1: entered allmulticast mode [ 54.906260][ T3918] veth1_vlan: entered allmulticast mode [ 54.980422][ T3918] team0: Port device macvlan1 added [ 55.973466][ T28] audit: type=1400 audit(1775545079.017:1099): avc: denied { read write } for pid=3934 comm="syz.3.106" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.314769][ T28] audit: type=1400 audit(1775545079.017:1100): avc: denied { open } for pid=3934 comm="syz.3.106" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.370654][ T28] audit: type=1400 audit(1775545079.017:1101): avc: denied { ioctl } for pid=3934 comm="syz.3.106" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 56.415915][ T3931] loop2: detected capacity change from 0 to 8192 [ 56.416725][ T28] audit: type=1400 audit(1775545079.059:1102): avc: denied { read } for pid=3934 comm="syz.3.106" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 56.562641][ T3931] loop2: p1 p2 p4[EZD] [ 56.579424][ T3931] loop2: p4 start 201326592 is beyond EOD, truncated [ 56.845717][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.047768][ T3947] loop0: detected capacity change from 0 to 512 [ 57.185013][ T3947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.854714][ T3952] loop3: detected capacity change from 0 to 1024 [ 57.873051][ T3952] EXT4-fs: inline encryption not supported [ 57.884773][ T3952] EXT4-fs: Ignoring removed nobh option [ 57.890567][ T3952] EXT4-fs: Ignoring removed bh option [ 58.057693][ T3959] hub 8-0:1.0: USB hub found [ 58.062530][ T3959] hub 8-0:1.0: 8 ports detected [ 58.069941][ T3959] netlink: 'syz.1.111': attribute type 10 has an invalid length. [ 58.078293][ T3959] macvlan1: entered allmulticast mode [ 58.085799][ T3959] veth1_vlan: entered allmulticast mode [ 58.093650][ T3959] team0: Port device macvlan1 added [ 58.150941][ T3952] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 58.150941][ T3952] [ 58.384123][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.435431][ T3966] bond1: entered promiscuous mode [ 59.192642][ T3983] FAULT_INJECTION: forcing a failure. [ 59.192642][ T3983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.206033][ T3980] loop2: detected capacity change from 0 to 8192 [ 59.214765][ T3983] CPU: 0 UID: 0 PID: 3983 Comm: syz.1.120 Not tainted syzkaller #0 PREEMPT(full) [ 59.214795][ T3983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 59.214808][ T3983] Call Trace: [ 59.214816][ T3983] [ 59.214825][ T3983] __dump_stack+0x1d/0x30 [ 59.214900][ T3983] dump_stack_lvl+0x95/0xd0 [ 59.214922][ T3983] dump_stack+0x15/0x1b [ 59.214947][ T3983] should_fail_ex+0x263/0x280 [ 59.215126][ T3983] should_fail+0xb/0x20 [ 59.215241][ T3983] should_fail_usercopy+0x1a/0x20 [ 59.215275][ T3983] _copy_from_iter+0xcf/0xea0 [ 59.215309][ T3983] ? rep_movs_alternative+0x4a/0x90 [ 59.215372][ T3983] ? _copy_from_iter+0x13e/0xea0 [ 59.215405][ T3983] copy_page_from_iter+0x178/0x2a0 [ 59.215441][ T3983] skb_copy_datagram_from_iter+0x22d/0x480 [ 59.215497][ T3983] unix_dgram_sendmsg+0x40f/0x1060 [ 59.215527][ T3983] ? selinux_socket_sendmsg+0x192/0x1c0 [ 59.215580][ T3983] unix_seqpacket_sendmsg+0xd1/0x110 [ 59.215607][ T3983] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 59.215647][ T3983] ____sys_sendmsg+0x563/0x5b0 [ 59.215711][ T3983] ___sys_sendmsg+0x195/0x1e0 [ 59.215728][ T3983] ? path_openat+0x1b01/0x2050 [ 59.215764][ T3983] __sys_sendmmsg+0x185/0x320 [ 59.215790][ T3983] __x64_sys_sendmmsg+0x57/0x70 [ 59.215835][ T3983] x64_sys_call+0x27aa/0x3020 [ 59.215867][ T3983] do_syscall_64+0x12c/0x370 [ 59.216016][ T3983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.216049][ T3983] RIP: 0033:0x7fabc2d3c819 [ 59.216065][ T3983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.216082][ T3983] RSP: 002b:00007fabc1797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 59.216104][ T3983] RAX: ffffffffffffffda RBX: 00007fabc2fb5fa0 RCX: 00007fabc2d3c819 [ 59.216183][ T3983] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 59.216196][ T3983] RBP: 00007fabc1797090 R08: 0000000000000000 R09: 0000000000000000 [ 59.216221][ T3983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.216234][ T3983] R13: 00007fabc2fb6038 R14: 00007fabc2fb5fa0 R15: 00007ffe88f5a0c8 [ 59.216256][ T3983] [ 59.474340][ T3980] loop2: p1 p2 p4[EZD] [ 59.479569][ T3980] loop2: p4 start 201326592 is beyond EOD, truncated [ 59.532158][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 59.532174][ T28] audit: type=1400 audit(1775545082.745:1200): avc: denied { write } for pid=3984 comm="syz.1.121" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 59.739276][ T28] audit: type=1400 audit(1775545082.787:1201): avc: denied { accept } for pid=3987 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.805493][ T3997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 59.820801][ T28] audit: type=1400 audit(1775545083.028:1202): avc: denied { create } for pid=3996 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 59.889328][ T3999] Zero length message leads to an empty skb [ 59.946686][ T3999] loop3: detected capacity change from 0 to 128 [ 59.971491][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 59.991003][ T4000] blktrace: Concurrent blktraces are not allowed on loop6 [ 60.098826][ T3703] udevd[3703]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 60.221695][ T4002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4002 comm=syz.2.125 [ 60.249003][ T28] audit: type=1400 audit(1775545083.028:1203): avc: denied { ioctl } for pid=3996 comm="syz.1.126" path="socket:[5890]" dev="sockfs" ino=5890 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 60.296212][ T4004] loop4: detected capacity change from 0 to 512 [ 60.341220][ T3976] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 60.341837][ T28] audit: type=1400 audit(1775545083.606:1204): avc: denied { firmware_load } for pid=3968 comm="syz.0.115" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 60.375598][ T3976] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 60.486221][ T4012] loop2: detected capacity change from 0 to 1024 [ 60.493479][ T4012] EXT4-fs: inline encryption not supported [ 60.499651][ T4012] EXT4-fs: Ignoring removed nobh option [ 60.505790][ T4012] EXT4-fs: Ignoring removed bh option [ 60.519728][ T4005] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.527033][ T4005] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.541311][ T4012] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 60.541311][ T4012] [ 60.590551][ T28] audit: type=1326 audit(1775545083.858:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be7b0c819 code=0x7ffc0000 [ 60.640514][ T28] audit: type=1326 audit(1775545083.858:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be7b0c819 code=0x7ffc0000 [ 60.664484][ T28] audit: type=1326 audit(1775545083.858:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2be7b0c819 code=0x7ffc0000 [ 60.713078][ T4030] audit: audit_backlog=66 > audit_backlog_limit=64 [ 60.719768][ T4030] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 60.734009][ T4005] bridge_slave_0: left allmulticast mode [ 60.740483][ T4005] bridge_slave_0: left promiscuous mode [ 60.747076][ T4005] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.765316][ T4005] bridge_slave_1: left allmulticast mode [ 60.771073][ T4005] bridge_slave_1: left promiscuous mode [ 60.776804][ T4005] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.794311][ T4005] bond0: (slave bond_slave_0): Releasing backup interface [ 60.859518][ T4005] bond0: (slave bond_slave_1): Releasing backup interface [ 60.892943][ T4005] team0: Port device team_slave_0 removed [ 60.904671][ T4005] team0: Port device team_slave_1 removed [ 60.912337][ T4005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.922208][ T4005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.962244][ T4005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.990570][ T4005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.007867][ T4005] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 61.098999][ T4018] bond1: entered promiscuous mode [ 61.125102][ T4051] netlink: 'syz.3.133': attribute type 10 has an invalid length. [ 61.154686][ T4046] hub 8-0:1.0: USB hub found [ 61.159420][ T4046] hub 8-0:1.0: 8 ports detected [ 61.179895][ T4030] netlink: 10 bytes leftover after parsing attributes in process `syz.1.132'. [ 61.205186][ T4051] veth1_vlan: left allmulticast mode [ 61.578049][ T4063] loop2: detected capacity change from 0 to 512 [ 61.638821][ T4063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.780831][ T4068] bond1: entered promiscuous mode [ 62.990576][ T4073] loop0: detected capacity change from 0 to 256 [ 63.585843][ T4073] FAT-fs (loop0): Directory bread(block 64) failed [ 63.592579][ T4073] FAT-fs (loop0): Directory bread(block 65) failed [ 63.599208][ T4073] FAT-fs (loop0): Directory bread(block 66) failed [ 63.605734][ T4073] FAT-fs (loop0): Directory bread(block 67) failed [ 63.612310][ T4073] FAT-fs (loop0): Directory bread(block 68) failed [ 63.618952][ T4073] FAT-fs (loop0): Directory bread(block 69) failed [ 63.625560][ T4073] FAT-fs (loop0): Directory bread(block 70) failed [ 63.632181][ T4073] FAT-fs (loop0): Directory bread(block 71) failed [ 63.639109][ T4073] FAT-fs (loop0): Directory bread(block 72) failed [ 63.645842][ T4073] FAT-fs (loop0): Directory bread(block 73) failed [ 64.303206][ T4073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.140'. [ 64.312381][ T4073] netlink: 2 bytes leftover after parsing attributes in process `syz.0.140'. [ 64.321481][ T4073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.140'. [ 64.330537][ T4073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.140'. [ 64.339440][ T4073] netlink: 2 bytes leftover after parsing attributes in process `syz.0.140'. [ 64.341138][ T4085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4085 comm=syz.4.144 [ 64.348496][ T4073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.140'. [ 64.369895][ T4073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.140'. [ 64.378784][ T4073] netlink: 2 bytes leftover after parsing attributes in process `syz.0.140'. [ 65.741054][ T4073] ucma_write: process 101 (syz.0.140) changed security contexts after opening file descriptor, this is not allowed. [ 65.782537][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 65.782629][ T28] audit: type=1400 audit(1775545089.307:1306): avc: denied { ioctl } for pid=4079 comm="syz.1.143" path="socket:[6003]" dev="sockfs" ino=6003 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 66.506542][ T4090] dummy0: entered allmulticast mode [ 66.522241][ T4089] dummy0: left allmulticast mode [ 66.530701][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.585116][ T4094] FAULT_INJECTION: forcing a failure. [ 66.585116][ T4094] name failslab, interval 1, probability 0, space 0, times 1 [ 66.616501][ T4094] CPU: 0 UID: 0 PID: 4094 Comm: syz.3.149 Not tainted syzkaller #0 PREEMPT(full) [ 66.616532][ T4094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 66.616547][ T4094] Call Trace: [ 66.616554][ T4094] [ 66.616563][ T4094] __dump_stack+0x1d/0x30 [ 66.616635][ T4094] dump_stack_lvl+0x95/0xd0 [ 66.616679][ T4094] dump_stack+0x15/0x1b [ 66.616705][ T4094] should_fail_ex+0x263/0x280 [ 66.616737][ T4094] should_failslab+0x8c/0xb0 [ 66.616832][ T4094] kmem_cache_alloc_noprof+0x66/0x400 [ 66.616859][ T4094] ? alloc_empty_file+0x76/0x200 [ 66.616892][ T4094] alloc_empty_file+0x76/0x200 [ 66.616964][ T4094] alloc_file_pseudo+0xf6/0x190 [ 66.617000][ T4094] __shmem_file_setup+0x1dd/0x210 [ 66.617026][ T4094] shmem_file_setup+0x3b/0x50 [ 66.617068][ T4094] memfd_alloc_file+0x4e/0x300 [ 66.617098][ T4094] __se_sys_memfd_create+0x2e1/0x3b0 [ 66.617154][ T4094] __x64_sys_memfd_create+0x31/0x40 [ 66.617197][ T4094] x64_sys_call+0x1f22/0x3020 [ 66.617222][ T4094] do_syscall_64+0x12c/0x370 [ 66.617288][ T4094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.617310][ T4094] RIP: 0033:0x7f482ac4c819 [ 66.617326][ T4094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.617343][ T4094] RSP: 002b:00007f482969ee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 66.617368][ T4094] RAX: ffffffffffffffda RBX: 0000000000000180 RCX: 00007f482ac4c819 [ 66.617457][ T4094] RDX: 00007f482969eee0 RSI: 0000000000000000 RDI: 00007f482ace2e71 [ 66.617473][ T4094] RBP: 0000200000000300 R08: 00000000ffffffff R09: 0000000000000000 [ 66.617489][ T4094] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000001080 [ 66.617504][ T4094] R13: 00007f482969eee0 R14: 00007f482969eea0 R15: 00002000000001c0 [ 66.617525][ T4094] [ 67.644729][ T4120] loop1: detected capacity change from 0 to 512 [ 67.794913][ T28] audit: type=1400 audit(1775545091.312:1307): avc: denied { mounton } for pid=4118 comm="syz.1.155" path="/syzcgroup/unified/syz1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 68.014920][ T4130] loop4: detected capacity change from 0 to 1024 [ 68.160691][ T4130] EXT4-fs: inline encryption not supported [ 68.166956][ T4130] EXT4-fs: Ignoring removed nobh option [ 68.283841][ T4136] hub 8-0:1.0: USB hub found [ 68.288765][ T4136] hub 8-0:1.0: 8 ports detected [ 68.301708][ T4136] netlink: 'syz.1.161': attribute type 10 has an invalid length. [ 68.310131][ T4136] veth1_vlan: left allmulticast mode [ 68.428502][ T4130] EXT4-fs: Ignoring removed bh option [ 68.451181][ T4138] __nla_validate_parse: 22 callbacks suppressed [ 68.451198][ T4138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 68.532637][ T4130] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 68.532637][ T4130] [ 68.550794][ T4138] tipc: Enabling of bearer rejected, failed to enable media [ 68.620366][ T4139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 68.830866][ T28] audit: type=1326 audit(1775545092.509:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c064bc819 code=0x7ffc0000 [ 68.898732][ T4126] audit: audit_backlog=65 > audit_backlog_limit=64 [ 68.929689][ T4126] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 68.930146][ T28] audit: type=1326 audit(1775545092.541:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c064bc819 code=0x7ffc0000 [ 68.961914][ T28] audit: type=1326 audit(1775545092.541:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c064bc819 code=0x7ffc0000 [ 69.012045][ T28] audit: type=1326 audit(1775545092.541:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c064bc819 code=0x7ffc0000 [ 69.051996][ T4126] audit: backlog limit exceeded [ 69.125315][ T28] audit: type=1326 audit(1775545092.541:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4129 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5c064bc819 code=0x7ffc0000 [ 69.415159][ T4152] loop1: detected capacity change from 0 to 256 [ 69.689761][ T4152] FAT-fs (loop1): Directory bread(block 64) failed [ 69.696473][ T4152] FAT-fs (loop1): Directory bread(block 65) failed [ 69.703271][ T4152] FAT-fs (loop1): Directory bread(block 66) failed [ 69.709862][ T4152] FAT-fs (loop1): Directory bread(block 67) failed [ 69.716752][ T4152] FAT-fs (loop1): Directory bread(block 68) failed [ 69.723576][ T4152] FAT-fs (loop1): Directory bread(block 69) failed [ 69.730233][ T4152] FAT-fs (loop1): Directory bread(block 70) failed [ 69.736854][ T4152] FAT-fs (loop1): Directory bread(block 71) failed [ 69.743541][ T4152] FAT-fs (loop1): Directory bread(block 72) failed [ 69.750081][ T4152] FAT-fs (loop1): Directory bread(block 73) failed [ 69.776122][ T4151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.164'. [ 69.785121][ T4151] netlink: 2 bytes leftover after parsing attributes in process `syz.1.164'. [ 69.794538][ T4151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.164'. [ 69.803476][ T4151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.164'. [ 69.812462][ T4151] netlink: 2 bytes leftover after parsing attributes in process `syz.1.164'. [ 69.821539][ T4151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.164'. [ 69.830565][ T4151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.164'. [ 69.839494][ T4151] netlink: 2 bytes leftover after parsing attributes in process `syz.1.164'. [ 70.241563][ T4158] Illegal XDP return value 4294967294 on prog (id 51) dev N/A, expect packet loss! [ 70.960450][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 70.960477][ T28] audit: type=1400 audit(1775545094.756:1393): avc: denied { wake_alarm } for pid=4172 comm="syz.1.171" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.317540][ T28] audit: type=1400 audit(1775545094.934:1394): avc: denied { name_bind } for pid=4172 comm="syz.1.171" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 71.508554][ T4180] bond2: entered promiscuous mode [ 71.606720][ T4186] loop4: detected capacity change from 0 to 8192 [ 71.657409][ T4186] loop4: p1 p2 p4[EZD] [ 71.672210][ T4186] loop4: p4 start 201326592 is beyond EOD, truncated [ 71.911714][ T4202] loop2: detected capacity change from 0 to 512 [ 71.920184][ T4205] xt_TPROXY: Can be used only with -p tcp or -p udp [ 71.940917][ T4205] loop3: detected capacity change from 0 to 1024 [ 71.948516][ T4205] EXT4-fs: Ignoring removed bh option [ 71.973780][ T4203] loop4: detected capacity change from 0 to 512 [ 72.024116][ T4205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.057391][ T28] audit: type=1326 audit(1775545095.900:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4194 comm="syz.3.178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f482ac4c819 code=0x0 [ 72.161551][ T4203] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.211919][ T4202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.301231][ T4203] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.348832][ T4202] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.529023][ T28] audit: type=1400 audit(1775545096.394:1396): avc: denied { remount } for pid=4200 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 72.548759][ T4203] EXT4-fs: Cannot change journaled quota options when quota turned on [ 72.563557][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.589967][ T4221] bond1: entered promiscuous mode [ 72.615875][ T28] audit: type=1400 audit(1775545096.478:1397): avc: denied { add_name } for pid=4200 comm="syz.4.179" name=1D scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.750997][ T28] audit: type=1400 audit(1775545096.625:1398): avc: denied { write } for pid=4200 comm="syz.4.179" path=2F34302F66696C65312F1D dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.782509][ T4227] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 72.792738][ T4227] block device autoloading is deprecated and will be removed. [ 72.849217][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.188150][ T4240] hub 8-0:1.0: USB hub found [ 73.193229][ T4240] hub 8-0:1.0: 8 ports detected [ 73.214905][ T4240] netlink: 'syz.0.186': attribute type 10 has an invalid length. [ 73.223130][ T4240] veth1_vlan: left allmulticast mode [ 73.787616][ T4242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52752 sclass=netlink_route_socket pid=4242 comm=syz.1.188 [ 74.040116][ T4260] loop0: detected capacity change from 0 to 512 [ 74.048792][ T4249] loop4: detected capacity change from 0 to 8192 [ 74.064440][ T4260] msdos: Bad value for 'tz' [ 74.102602][ T3703] loop4: p1 p2 p4[EZD] [ 74.123458][ T3703] loop4: p4 start 201326592 is beyond EOD, truncated [ 74.170383][ T4249] loop4: p1 p2 p4[EZD] [ 74.176686][ T4249] loop4: p4 start 201326592 is beyond EOD, truncated [ 74.188803][ T28] audit: type=1326 audit(1775577872.136:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4271 comm="syz.0.194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8fc09ac819 code=0x0 [ 74.310598][ T4285] loop4: detected capacity change from 0 to 1024 [ 74.319900][ T4289] __nla_validate_parse: 24 callbacks suppressed [ 74.319919][ T4289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.198'. [ 74.335866][ T4285] EXT4-fs: inline encryption not supported [ 74.348879][ T4285] EXT4-fs: Ignoring removed nobh option [ 74.361721][ T3703] udevd[3703]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 74.363775][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 74.379606][ T4285] EXT4-fs: Ignoring removed bh option [ 74.386745][ T28] audit: type=1400 audit(1775577872.336:1400): avc: denied { create } for pid=4288 comm="syz.1.198" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.409802][ T4285] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 74.409802][ T4285] [ 74.436392][ T3703] udevd[3703]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 74.449430][ T28] audit: type=1400 audit(1775577872.336:1401): avc: denied { write } for pid=4288 comm="syz.1.198" name="file0" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.491424][ T3703] udevd[3703]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 74.501731][ T28] audit: type=1400 audit(1775577872.336:1402): avc: denied { open } for pid=4288 comm="syz.1.198" path="/38/file0" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.636793][ T4313] loop4: detected capacity change from 0 to 512 [ 74.756852][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.777736][ T4313] EXT4-fs (loop4): 1 orphan inode deleted [ 74.789779][ T4339] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:13: Failed to release dquot type 1 [ 74.806120][ T4313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.819382][ T4339] loop4: lost filesystem error report for type 5 error -117 [ 74.825008][ T4313] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.845807][ T4363] loop3: detected capacity change from 0 to 512 [ 74.910963][ T4313] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.199: iget: bad i_size value: 360287970189639690 [ 74.933263][ T4363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.986447][ T4363] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.016980][ T4369] 9p: Bad value for 'rfdno' [ 75.025713][ T4374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'. [ 75.041658][ T4343] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.053984][ T4363] EXT4-fs: Cannot change journaled quota options when quota turned on [ 75.077270][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.228227][ T4383] loop1: detected capacity change from 0 to 8192 [ 75.274997][ T3703] loop1: p1 p2 p4[EZD] [ 75.285020][ T3703] loop1: p4 start 201326592 is beyond EOD, truncated [ 75.305652][ T4383] loop1: p1 p2 p4[EZD] [ 75.317759][ T4393] loop0: detected capacity change from 0 to 512 [ 75.322307][ T4383] loop1: p4 start 201326592 is beyond EOD, truncated [ 75.343545][ T4393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.360883][ T4393] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.664873][ T4400] loop3: detected capacity change from 0 to 256 [ 76.143590][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 76.143607][ T28] audit: type=1326 audit(1775577874.131:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.3.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482ac4c819 code=0x7fc00000 [ 76.185848][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.235958][ T3703] udevd[3703]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 76.247624][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 76.323790][ T4411] loop4: detected capacity change from 0 to 128 [ 76.373621][ T4409] pim6reg: entered allmulticast mode [ 76.422132][ T28] audit: type=1400 audit(1775577874.478:1489): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 76.499585][ T4421] loop3: detected capacity change from 0 to 512 [ 76.510894][ T4423] netlink: 'syz.1.220': attribute type 1 has an invalid length. [ 76.524764][ T4423] netlink: 'syz.1.220': attribute type 1 has an invalid length. [ 76.532561][ T4423] netlink: 'syz.1.220': attribute type 2 has an invalid length. [ 76.540787][ T4421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.557599][ T28] audit: type=1326 audit(1775577874.625:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc2d3c819 code=0x7ffc0000 [ 76.581799][ T4421] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.593811][ T28] audit: type=1326 audit(1775577874.625:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fabc2d3c819 code=0x7ffc0000 [ 76.624798][ T4421] EXT4-fs: Cannot change journaled quota options when quota turned on [ 76.644525][ T28] audit: type=1326 audit(1775577874.625:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc2d3c819 code=0x7ffc0000 [ 76.668284][ T28] audit: type=1326 audit(1775577874.625:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fabc2d3e087 code=0x7ffc0000 [ 76.693787][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.704715][ T28] audit: type=1326 audit(1775577874.625:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fabc2cfd04e code=0x7ffc0000 [ 76.730045][ T28] audit: type=1326 audit(1775577874.625:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fabc2cfd04e code=0x7ffc0000 [ 76.758665][ T28] audit: type=1326 audit(1775577874.625:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fabc2cfd04e code=0x7ffc0000 [ 76.782515][ T28] audit: type=1326 audit(1775577874.625:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fabc2cfd04e code=0x7ffc0000 [ 76.871970][ T4428] ip6tnl1: entered allmulticast mode [ 76.891354][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.967162][ T4431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 76.979468][ T3544] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.075535][ T4431] EXT4-fs (loop0): inodes count not valid: 18 vs 32 [ 77.119639][ T4439] bond3: entered promiscuous mode [ 77.169996][ T4343] ================================================================== [ 77.178116][ T4343] BUG: KCSAN: data-race in copy_process / free_pid [ 77.184640][ T4343] [ 77.186969][ T4343] read-write to 0xffffffff86c5ff68 of 4 bytes by task 4433 on cpu 1: [ 77.195033][ T4343] free_pid+0xbc/0x1e0 [ 77.199119][ T4343] free_pids+0x7a/0xb0 [ 77.203200][ T4343] release_task+0x9a7/0xb60 [ 77.207712][ T4343] wait_consider_task+0x1160/0x1670 [ 77.212924][ T4343] __do_wait+0x348/0x510 [ 77.217180][ T4343] do_wait+0xb6/0x260 [ 77.221176][ T4343] kernel_wait4+0x19f/0x210 [ 77.225699][ T4343] __x64_sys_wait4+0x91/0x120 [ 77.230392][ T4343] x64_sys_call+0x2aee/0x3020 [ 77.235082][ T4343] do_syscall_64+0x12c/0x370 [ 77.239690][ T4343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.245623][ T4343] [ 77.247955][ T4343] read to 0xffffffff86c5ff68 of 4 bytes by task 4343 on cpu 0: [ 77.255508][ T4343] copy_process+0x187f/0x20b0 [ 77.260190][ T4343] kernel_clone+0x16b/0x5d0 [ 77.264874][ T4343] user_mode_thread+0x9c/0xd0 [ 77.269645][ T4343] call_usermodehelper_exec_work+0x7a/0x160 [ 77.275558][ T4343] process_scheduled_works+0x513/0xa10 [ 77.281029][ T4343] worker_thread+0x58a/0x780 [ 77.285629][ T4343] kthread+0x22a/0x280 [ 77.289715][ T4343] ret_from_fork+0x150/0x360 [ 77.294322][ T4343] ret_from_fork_asm+0x1a/0x30 [ 77.299098][ T4343] [ 77.301419][ T4343] value changed: 0x80000108 -> 0x80000107 [ 77.307135][ T4343] [ 77.309477][ T4343] Reported by Kernel Concurrency Sanitizer on: [ 77.315632][ T4343] CPU: 0 UID: 0 PID: 4343 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 77.325194][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 77.335253][ T4343] Workqueue: events_unbound call_usermodehelper_exec_work [ 77.342408][ T4343] ==================================================================