last executing test programs:

5.437901402s ago: executing program 4 (id=353):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r1, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffa6}, 0x24044080)

5.153581267s ago: executing program 4 (id=355):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x20, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

1.994987852s ago: executing program 3 (id=397):
pipe(&(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
write$binfmt_register(r1, &(0x7f0000000180)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xcc, 0x3a, '', 0x3a, 'fd', 0x3a, './file1', 0x3a, [0x46, 0x46, 0x43, 0x0, 0x4f, 0x50]}, 0x2f)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2f}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x2)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket(0x10, 0x2, 0x0)
r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
pwritev2(r6, &(0x7f0000000400)=[{&(0x7f0000000040)='U', 0x1}], 0x1, 0x3, 0xe89a, 0x12)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000010000000f00000008003200ff07000005003500ab00000005002f000000000005002e0000000000060028000400000005002f0001000000080032008000000008003900fdffffff08000300", @ANYRES32=r10], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0xfffffe2b, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r7], 0x40}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0)
sendto$packet(r4, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r7, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
fchdir(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x1, 'gretap0\x00', {}, 0xe7f})
chdir(&(0x7f0000000080)='./file1\x00')
r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r11, 0x0)
r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0)
preadv(r12, &(0x7f0000000040)=[{&(0x7f00000010c0)=""/4105, 0x1009}], 0x1, 0x3b, 0x0)
setpgid(0x0, r11)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0))

1.917578185s ago: executing program 4 (id=400):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
mlockall(0x7)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r2, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}], 0x4}}], 0x2, 0x4000000)
setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

1.811647151s ago: executing program 3 (id=402):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c562d06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800005008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

1.793014512s ago: executing program 3 (id=403):
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setscheduler(0x0, 0x1, 0x0)
unshare(0x60000600)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = io_uring_setup(0x7a5c, &(0x7f0000001240)={0x0, 0xc95e, 0x1, 0x3, 0x2cb})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket(0x2, 0x80805, 0x0)
open(0x0, 0x64842, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, &(0x7f0000000280))
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

1.745365844s ago: executing program 1 (id=405):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x18000000, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

1.744865214s ago: executing program 1 (id=406):
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x230400, 0x120, 0x76}, 0x18)
r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x200, 0x8)
utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}})
r2 = getuid()
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, <r4=>0x0}, &(0x7f0000000340)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private1}}, &(0x7f0000000480)=0xe8)
statx(r1, &(0x7f00000004c0)='./file0\x00', 0x800, 0x400, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
stat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x3}, [{0x2, 0x1, r2}, {0x2, 0x2, r3}, {0x2, 0x2, r4}, {0x2, 0x0, r5}, {0x2, 0x1, r6}], {0x4, 0x5}, [{0x8, 0x7, 0xee01}, {0x8, 0x6, 0xee01}, {0x8, 0x2, r7}, {0x8, 0x5, r8}], {0x10, 0x2}, {0x20, 0x1}}, 0x6c, 0x2)
r9 = socket$unix(0x1, 0x2, 0x0)
chroot(&(0x7f0000000800)='./file0\x00')
getsockname$inet6(r1, &(0x7f0000000840)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000880)=0x1c)
syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), r1)
setxattr$trusted_overlay_upper(&(0x7f0000000900)='./file0/file0\x00', &(0x7f0000000940), &(0x7f0000000980)={0x0, 0xfb, 0xda, 0x4, 0xff, "bfd90f6ac3f15298b484c34279f43d2a", "83caea83caedb8b7987ceab90f0069d635899ff05f451668f3977b18c4ecf8466e1b92b3ca13a99dd8dab9bb3bdef4a5b07a71a55f15d37385dd439b18387a0f5e1c35d0c425ef288372b1209dcadee382855147eb332276ee5cb5fe6d7ec6338820177a922620fcb0d21a554f726a49fd69d4a53f6e0f5d27192381db2978cb0e2b5a9a50dd1d5f59097f81a4a29d68263425c7a7dc8e53cf4f56e3d9685e169a1cdbff295e44c632f3e456e878544ac3ef670e56de80a8ac4d15eb23aaec19ca0d314a49"}, 0xda, 0x6)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@fallback=<r10=>r1, 0x1d, 0x1, 0xae, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0], <r11=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000bc0)={@fallback=r9, r1, 0x0, 0x10, 0x0, @void, @value=r1, @void, @void, r11}, 0x20)
bind$bt_sco(r10, &(0x7f0000000c00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
recvfrom$inet_nvme(r1, &(0x7f0000000c40)=""/136, 0x88, 0x2040, &(0x7f0000000d00)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neonbs-sync\x00'}, 0x80)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x4004004)
r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0)
fstat(r12, &(0x7f0000000ec0))
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000f40)={0x0, 0x0, 0x8, 0x0, '\x00', [{0xfffffffa, 0x5f, 0x3, 0xfffffffffffffffb, 0xfffffffffffffff9}, {0xd90, 0x4b6d, 0x6, 0xa707, 0x9, 0x7fffffff}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r13 = socket$kcm(0x29, 0x2, 0x0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000001280)=@urb_type_control={0x2, {0xd, 0x1}, 0x6, 0x61, &(0x7f0000001200)={0x0, 0x7, 0x9, 0x2}, 0x8, 0x0, 0xd, 0x0, 0x7ff, 0x6, &(0x7f0000001240)="e4b6cda5b3acab514cde23562c47ac81cdd95fc7c05c83647879a1a7f458398f0fdffd94bed10a0782634f8aafb048015c7554909aca20ae489d"})
close_range(r1, r1, 0x0)
creat(&(0x7f00000012c0)='./file0\x00', 0x10a)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{r1}, &(0x7f0000001300), &(0x7f0000001340)=r10}, 0x20)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, r13, 0xcf3c5000)

1.736027165s ago: executing program 3 (id=407):
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00')
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_open_dev$sg(&(0x7f0000000100), 0x7, 0x4800)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4c040)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4044}, 0x0)
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x103401)
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

1.723940635s ago: executing program 1 (id=408):
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

1.520001215s ago: executing program 3 (id=409):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200e}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x6}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0)
r5 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0xfa, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7ffb, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='\x00')
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffa)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
pread64(r3, &(0x7f0000000600)=""/16, 0x10, 0x9)
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01070000000800000000670000000c00990081000000400000000800c3"], 0x30}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000140)={{r0}, 0x2bac00000000000, 0x7fff, 0x8})
sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000010000030900010073797a300000e7ff13000000030a010100000000000000000100000094000000060a010400000000000000000100000008000b40000000000d000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000030000000007000000340001800c000100626974776973650024000280080002400000000f0800014000000014080003400000000404000480040005800900010073797a3000000000140000001100010000000000000000000300000ac006b6d6e68403eb702369f7f95cb879b1b90f613beacd21d1292820bbf7dce92383d241e461d8de"], 0xf0}}, 0x20008800)
unshare(0x6a040000)
r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_NET_GET(r7, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c01000014ca47d19d71908f0df26468c82d2b07cf28a05ef16a00b6bac0d6da57245cd7d47a6b523f1d8280438dbb3edcf66d698d15697efd57fe60741e2a514bf74e9dc7faf78005392256db0a887fc1b71d4d1ddbd26fd0a421d0e0026cdbb95f2e62d4bf0000000000080000000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040080)
setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f0000000040)=0x9, 0x4)
r10 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
capset(0x0, 0x0)
r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/mem_sleep', 0x141a82, 0x4)
sendfile(r7, r11, 0x0, 0x6)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
file_getattr(r10, 0x0, 0x0, 0x0, 0x100)

1.4244543s ago: executing program 3 (id=410):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x20, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

1.282504837s ago: executing program 4 (id=413):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0)
select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710})
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x20, 0x80, 0x0, 0x0, {{0x16, 0x4, 0x2, 0x2a, 0x58, 0x6a, 0x0, 0x0, 0x4, 0x0, @multicast1, @broadcast, {[@generic={0x7, 0x2}, @noop, @rr={0x7, 0x7, 0xf2, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @end, @ra={0x94, 0x4}, @lsrr={0x83, 0x27, 0x56, [@rand_addr=0x64010101, @loopback, @empty, @loopback, @multicast1, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x1d}, @empty]}, @cipso={0x86, 0xb, 0x3, [{0x0, 0x5, "f7922d"}]}]}}}}})
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0)
ppoll(&(0x7f0000000180)=[{r5, 0x100}], 0x1, &(0x7f0000000200), 0x0, 0x0)
unshare(0x6a044300)

923.792365ms ago: executing program 2 (id=418):
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8, 0x1b, 0x6000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

869.556857ms ago: executing program 2 (id=419):
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00')
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_open_dev$sg(&(0x7f0000000100), 0x7, 0x4800)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4c040)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4044}, 0x0)
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x103401)
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

860.935758ms ago: executing program 1 (id=420):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2c)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r2=>0x0})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt(r3, 0x1, 0x3, &(0x7f0000000140)=""/40, &(0x7f00000002c0)=0x28)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0xb}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x7, 0x4fff, 0xb709, 0x58c, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0xe, 0x9}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
lseek(r0, 0xfffffffffffffffc, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2, 0x4}, 0x1c)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_buf(r6, 0x0, 0x14d06c14866d85ee, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0)
pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3)
getpid()
write(r0, &(0x7f0000000040)="266a61d554062892e5f9483bc8792c28846f7a966c0503efc1751b5d9eaae981898af1d87e620262af540dc6d1fe117556741dc92ef4870290317c9e043a9783087e459f0be34739e9d45d073fda104202502014922aed147a8ad466abcf9aa418f0f5faca2285da17ce7bd370d8ddfdc37c", 0x72)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0xa4ff, 0x0, 0x600}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000399e1009111042966000000950000f4ffffff00"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getdents(r0, 0x0, 0x54)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r9 = perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x31, 0x0, 0x200, 0x88008, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x20000d4ee}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x3, r4, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

805.012721ms ago: executing program 2 (id=421):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
mlockall(0x7)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r2, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}], 0x4}}], 0x2, 0x4000000)
setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

665.503917ms ago: executing program 1 (id=424):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20010)
readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000940)=""/4128, 0x1020)
syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r3, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
recvmmsg(r3, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/150, 0xa3}], 0x1, &(0x7f00000003c0)=""/76, 0x4c}, 0x7b}], 0x9e, 0x20003, 0x0)

639.629279ms ago: executing program 0 (id=426):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0)

515.093405ms ago: executing program 4 (id=427):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r1, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c0}, 0x4008880)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee9, 0x8031, 0xffffffffffffffff, 0xffffc000)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
modify_ldt$write2(0x11, &(0x7f00000001c0)={0x4, 0xffffffffdfffefff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x8, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x5}, 0x2000, 0x10000, 0x0, 0x6, 0x10, 0x820005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r1, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x20000805)
setsockopt$inet_tcp_buf(r3, 0x6, 0x21, &(0x7f0000000080)="8b83cb7a09435580cfa976010b16c0caa78f77fd89d6b176822e5d3401a038dc3f0ff8e21b9a47aa7b42e7ad0386b8dc1002f959cf978c5409cb4ba2fa3b71770d820fdb7fab0ee5c968ad0a4592730c274120d89e21d8156d8a8262cb4ba185eeabfa3b7fa8fe92bf2b3171b3179c6649cc520264072be1758a4aa6d789ee5f722e27a226ded7f19763d360eb58eb594ea2eb4e58da8bebc7757d64eff194b72ad110f904fa32692e5f341f6e0290f0bfd173c35481dbbc08a5db", 0xbb)
fsetxattr$security_ima(r2, &(0x7f0000000000), &(0x7f0000000040)=@ng={0x4, 0x14, "1e49355a00fb62f415019a851f03059e61d520"}, 0x15, 0x7)
sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)

465.594307ms ago: executing program 0 (id=428):
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8)
write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000480)={0x2, 'batadv_slave_0\x00', {0x647}, 0x4})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x8a, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x6, 0x400007f, 0x4000006, 0x3, "42341f9b1000007e4f00"})
syz_open_pts(r2, 0x60300)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
dup3(r3, r2, 0x80000)
splice(r2, 0x0, r1, 0x0, 0x6fffe7fc, 0x5)

425.244899ms ago: executing program 0 (id=429):
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x10008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0x181580, 0xf)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, @perf_bp={0x0, 0x5}, 0x0, 0x10003, 0x3, 0x1, 0x8, 0x20005, 0xb900, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e3861121", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r3 = socket$unix(0x1, 0x1, 0x0)
close(r3)
socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xa0028010})
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000380), 0x3)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002300)=@filter={'filter\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x230, 0x230, 0x0, 0xffffffff, 0xffffffff, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x36}, [0xffffffff, 0x0, 0xffffffff], [0xff000000, 0xff, 0xffffff00, 0xff000000], 'ip6tnl0\x00', 'wlan0\x00', {0xff}, {}, 0x2, 0x7, 0x3, 0x10}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7fff}}, @common=@rt={{0x138}, {0x100, [0x7, 0x4], 0x96a, 0x4, 0x5, [@local, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast1, @private2, @private0, @dev={0xfe, 0x80, '\x00', 0x2a}, @private0, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @mcast2, @mcast2, @loopback], 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x230}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, [0xffffffff, 0xff000000, 0xff000000], [0xffffff00, 0xff000000, 0x0, 0xff000000], 'macvlan1\x00', 'dummy0\x00', {}, {}, 0x3c, 0xfe, 0x1, 0x20}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0xfc, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500)
socket(0xa, 0x80805, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3008046, &(0x7f00000003c0)={[{@dioread_nolock}, {@data_err_abort}, {@block_validity}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8H7nZO7k3O/ebe7+m5OTckgKE1kf1TiHg5Ir5JIg5GRJKvG4185cTadqv3r85mSxKNxqd/Jc3tsnrrtVrP259XXoqI376KOF7Y2G5teWWhVC6ni3l9sl65NFlbXjlxoVKaT+fTi9MzM6fenpl+7913+hbrG2f/+f6T2x+e+vro6ne/3D10M4nTcSBf1x7HE7jWXpmIifw9GYvTj2w41YfGdoJd+f/JgPeD7RnJ83wssj7gYIzkWQ/8/30ZEQ1gSCXyH4ZUaxzQurbv03Xwc+PeB2sXQBvjH137bCT2NK+N9q0mD10ZZde7431oP2vj1z9v3cyW6N/nEABbunY9Ik6Ojm7s/5K8/9u+kz1s82gb+j94dm5n4583O41/Cuvjn+gw/tnfIXe3Y+v8L9ztQzNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq59/JctWfutsWC+H3dHdz/8nLlSvfQkMbe7dz3ilY7j32T9+Ccdjn/2fpztsY0j6a3Xuq3bOv6nq/FTxOsdj/+DGa1k8/nJyeb5MNk6Kzb6+8aR37u1P+j4s+O/b/P4x5P2+dra47fx455/027rHoo/ej//dyWfNcut+ccrpXp9cSpiV/LxxsenHzy3VW9tn8V/7Ojm/V+n839vRHzeY/w3Dv/8ak/xD+j4zz3W8X/8wp2PvvihW/u99X9vNUvH8kd66f963cEnee8AAAAAAABgpylExIFICsX1cqFQLK7d33E49hXK1Vr9+Pnq0sW5aH5XdjzGCq2Z7oNt90NM5ffDturTj9RnIuJQRHw7srdZL85Wy3ODDh4AAAAAAAAAAAAAAAAAAAB2iP1dvv+f+WNk0HsHPHV+8huG15b5349fegJ2JH//YXjJfxhe8h+Gl/yH4SX/YXjJfxhe8h+Gl/wHAAAAAAAAAAAAAAAAAAAAAAAAAACAvjp75ky2NFbvX53N6nOXl5cWqpdPzKW1hWJlabY4W128VJyvVufLaXG2Wtnq9crV6qWp6Vi6MllPa/XJ2vLKuUp16WL93IVKaT49l449k6gAAAAAAAAAAAAAAAAAAADg+VJbXlkolcvpooLCtgqjO2M3FPpcGHTPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//xVY3tw==")
r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r5, r5, 0x0, 0x4)
umount2(&(0x7f0000000200)='./file1\x00', 0x1)

274.435057ms ago: executing program 1 (id=430):
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

189.641761ms ago: executing program 0 (id=431):
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_targets\x00')
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_open_dev$sg(&(0x7f0000000100), 0x7, 0x4800)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = dup(r1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4c040)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4044}, 0x0)
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x103401)
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

189.140741ms ago: executing program 2 (id=432):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x404, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x1, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, &(0x7f0000019680)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0xfd, 0x2cd, &(0x7f0000000080)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = dup(r2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x4}], 0x1c)
sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
r4 = dup(r2)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r5, 0x0)
syz_open_procfs(0x0, 0x0)
mq_open(&(0x7f0000000080)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\x1cP\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00B\f\xd9_\xa4\xd2\xdbq\xc4\xc1\xe1\xe7\xd8\x05i\x00\x00', 0x40, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7})
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
r7 = syz_pidfd_open(0x0, 0x0)
r8 = dup(r7)
fsetxattr$trusted_overlay_upper(r8, &(0x7f0000000000), 0x0, 0x0, 0x2)
write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="2b6d656d6f7279202b70696473202d626c6b696b202b637075736574202d6e6574202d6e65748a636c73202b637075736574202a626c202d726c696d697420"], 0x49)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200e}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='\x00')

125.533024ms ago: executing program 4 (id=433):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
mlockall(0x7)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r3, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xb}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

95.972135ms ago: executing program 2 (id=434):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback, 0xffffffffffffffff, 0x32, 0x2000}, 0x20)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0xc800)

88.634095ms ago: executing program 0 (id=435):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x9, 0x8, 0x8, 0x81}, 0x101, 0x0, 0x6, 0x20, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)

21.516829ms ago: executing program 2 (id=436):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
mlockall(0x7)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r3, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {0x0}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

0s ago: executing program 0 (id=437):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='attr/exec\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000200), 0x41001, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472616e733d66983e9266baaa3f64a3f1a7c451e99d6a7cea4ffe2b692afe15326afa39676462a38414cde21687360983c17e5b69b5c1c41cf6a42329854ec5d3324366b71c5acbde2e39fe8a1db8f9485f8c1ff2e4722f060027e5652df54c3d542783026b39970e59b6619c27fb3d9f39c113d49b4b78f88a928936cbb8cc7b6974c5a39903cb3d2e52ed2dee0951b6e2fed308c31152125d01393b4149b2a5ddb3927fa67c7f8f0ab32a043cdec48f3a4670273965de76134377c703f5747d7c4e245a5852fa61c7ee4d68faba59914661e91ec619f0b667433200"/238, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRESHEX=r1, @ANYBLOB=',\x00'])
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = gettid() (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) (async)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) (async)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) (async)
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) (async)
mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) (async)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) (async, rerun: 64)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (rerun: 64)
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) (async)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) (async, rerun: 64)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r4 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79ae, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=<r5=>0x0, &(0x7f0000000340)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_SYMLINKAT={0x26, 0x12, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, 0x1}) (async, rerun: 32)
io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) (rerun: 32)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r7 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000000000)) (async)
fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x2, r7}) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005e40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280080001400000000d050003000100000008000240000000010900010073797a30000000000900020073797a32"], 0x56f8}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x98)

kernel console output (not intermixed with test programs):

  { siginh } for  pid=3268 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   24.622833][   T28] audit: type=1400 audit(1774086550.153:62): avc:  denied  { search } for  pid=3273 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   24.645952][   T28] audit: type=1400 audit(1774086550.153:63): avc:  denied  { search } for  pid=3273 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   24.668729][   T28] audit: type=1400 audit(1774086550.153:64): avc:  denied  { search } for  pid=3273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   24.691763][   T28] audit: type=1400 audit(1774086550.153:65): avc:  denied  { search } for  pid=3273 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   24.716148][   T28] audit: type=1400 audit(1774086550.153:66): avc:  denied  { read open } for  pid=3274 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts.
[   33.197905][   T28] kauditd_printk_skb: 3 callbacks suppressed
[   33.197922][   T28] audit: type=1400 audit(1774086558.813:70): avc:  denied  { mounton } for  pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   33.227080][   T28] audit: type=1400 audit(1774086558.843:71): avc:  denied  { mount } for  pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.229309][ T3300] cgroup: Unknown subsys name 'net'
[   33.254814][   T28] audit: type=1400 audit(1774086558.873:72): avc:  denied  { unmount } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   33.373684][ T3300] cgroup: Unknown subsys name 'cpuset'
[   33.379898][ T3300] cgroup: Unknown subsys name 'rlimit'
[   33.490888][   T28] audit: type=1400 audit(1774086559.103:73): avc:  denied  { setattr } for  pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   33.523577][   T28] audit: type=1400 audit(1774086559.103:74): avc:  denied  { create } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.544071][   T28] audit: type=1400 audit(1774086559.103:75): avc:  denied  { write } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.564671][   T28] audit: type=1400 audit(1774086559.103:76): avc:  denied  { read } for  pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   33.584950][   T28] audit: type=1400 audit(1774086559.103:77): avc:  denied  { mounton } for  pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   33.604588][ T3303] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   33.609782][   T28] audit: type=1400 audit(1774086559.103:78): avc:  denied  { mount } for  pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   33.641573][   T28] audit: type=1400 audit(1774086559.133:79): avc:  denied  { read } for  pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   33.699877][ T3300] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   34.846264][ T3313] chnl_net:caif_netlink_parms(): no params data found
[   34.912960][ T3319] chnl_net:caif_netlink_parms(): no params data found
[   34.946923][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.954171][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.961284][ T3313] bridge_slave_0: entered allmulticast mode
[   34.967928][ T3313] bridge_slave_0: entered promiscuous mode
[   34.978903][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.986044][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.993335][ T3313] bridge_slave_1: entered allmulticast mode
[   34.999989][ T3313] bridge_slave_1: entered promiscuous mode
[   35.034710][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.046874][ T3316] chnl_net:caif_netlink_parms(): no params data found
[   35.061091][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.099292][ T3313] team0: Port device team_slave_0 added
[   35.110390][ T3317] chnl_net:caif_netlink_parms(): no params data found
[   35.125666][ T3313] team0: Port device team_slave_1 added
[   35.163232][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.170380][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.177723][ T3319] bridge_slave_0: entered allmulticast mode
[   35.184133][ T3319] bridge_slave_0: entered promiscuous mode
[   35.195573][ T3312] chnl_net:caif_netlink_parms(): no params data found
[   35.204957][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.211925][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.237856][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.258153][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.265280][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.272494][ T3316] bridge_slave_0: entered allmulticast mode
[   35.278925][ T3316] bridge_slave_0: entered promiscuous mode
[   35.290606][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.297763][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.305036][ T3316] bridge_slave_1: entered allmulticast mode
[   35.311452][ T3316] bridge_slave_1: entered promiscuous mode
[   35.317955][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.325291][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.332465][ T3319] bridge_slave_1: entered allmulticast mode
[   35.339089][ T3319] bridge_slave_1: entered promiscuous mode
[   35.348861][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.355870][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.381890][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.429548][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.439946][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.450375][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.470932][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.510818][ T3316] team0: Port device team_slave_0 added
[   35.517323][ T3319] team0: Port device team_slave_0 added
[   35.525496][ T3313] hsr_slave_0: entered promiscuous mode
[   35.531477][ T3313] hsr_slave_1: entered promiscuous mode
[   35.545150][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.552359][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.559619][ T3317] bridge_slave_0: entered allmulticast mode
[   35.566226][ T3317] bridge_slave_0: entered promiscuous mode
[   35.573642][ T3316] team0: Port device team_slave_1 added
[   35.579255][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.586428][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.593565][ T3317] bridge_slave_1: entered allmulticast mode
[   35.600074][ T3317] bridge_slave_1: entered promiscuous mode
[   35.607352][ T3319] team0: Port device team_slave_1 added
[   35.655995][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.663009][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.689112][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.700269][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.707273][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.733310][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.748832][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.756002][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.763145][ T3312] bridge_slave_0: entered allmulticast mode
[   35.769715][ T3312] bridge_slave_0: entered promiscuous mode
[   35.777364][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   35.786739][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.793815][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.819745][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.830784][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.837793][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   35.863704][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.882304][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.889624][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.896838][ T3312] bridge_slave_1: entered allmulticast mode
[   35.903332][ T3312] bridge_slave_1: entered promiscuous mode
[   35.910623][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   35.932121][ T3317] team0: Port device team_slave_0 added
[   35.955754][ T3317] team0: Port device team_slave_1 added
[   35.976728][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   36.005430][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   36.022079][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.029299][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.055399][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.071348][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.078391][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.104382][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.117412][ T3319] hsr_slave_0: entered promiscuous mode
[   36.123605][ T3319] hsr_slave_1: entered promiscuous mode
[   36.129568][ T3319] debugfs: 'hsr0' already exists in 'hsr'
[   36.135339][ T3319] Cannot create hsr debugfs directory
[   36.150724][ T3312] team0: Port device team_slave_0 added
[   36.158581][ T3316] hsr_slave_0: entered promiscuous mode
[   36.164710][ T3316] hsr_slave_1: entered promiscuous mode
[   36.170605][ T3316] debugfs: 'hsr0' already exists in 'hsr'
[   36.176387][ T3316] Cannot create hsr debugfs directory
[   36.189644][ T3312] team0: Port device team_slave_1 added
[   36.205664][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0
[   36.212661][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.238602][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   36.272486][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1
[   36.279466][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   36.305403][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   36.345484][ T3317] hsr_slave_0: entered promiscuous mode
[   36.351809][ T3317] hsr_slave_1: entered promiscuous mode
[   36.357971][ T3317] debugfs: 'hsr0' already exists in 'hsr'
[   36.363761][ T3317] Cannot create hsr debugfs directory
[   36.425015][ T3312] hsr_slave_0: entered promiscuous mode
[   36.431161][ T3312] hsr_slave_1: entered promiscuous mode
[   36.437192][ T3312] debugfs: 'hsr0' already exists in 'hsr'
[   36.442983][ T3312] Cannot create hsr debugfs directory
[   36.520157][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   36.534196][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   36.543143][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   36.565669][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   36.608335][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   36.626114][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   36.635045][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   36.644728][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   36.672366][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   36.682503][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   36.691489][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   36.709100][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   36.737724][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   36.753611][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   36.770051][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.780916][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   36.794885][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   36.823350][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   36.838211][ T3313] 8021q: adding VLAN 0 to HW filter on device team0
[   36.846067][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   36.855124][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   36.867464][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.874619][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.884508][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   36.894904][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.915352][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.922491][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.940641][ T3316] 8021q: adding VLAN 0 to HW filter on device team0
[   36.961559][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.968630][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.989645][  T309] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.996729][  T309] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.021687][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.054591][ T3319] 8021q: adding VLAN 0 to HW filter on device team0
[   37.084594][  T309] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.091747][  T309] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.125419][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.135484][ T1961] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.142632][ T1961] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.169154][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0
[   37.200773][ T3317] 8021q: adding VLAN 0 to HW filter on device team0
[   37.210658][ T3312] 8021q: adding VLAN 0 to HW filter on device team0
[   37.221541][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.228768][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.242109][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.254136][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   37.261217][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   37.270924][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.277993][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.288129][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   37.295257][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   37.322102][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.451883][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.468323][ T3313] veth0_vlan: entered promiscuous mode
[   37.486557][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.505309][ T3313] veth1_vlan: entered promiscuous mode
[   37.528298][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0
[   37.541673][ T3316] veth0_vlan: entered promiscuous mode
[   37.566053][ T3316] veth1_vlan: entered promiscuous mode
[   37.572997][ T3313] veth0_macvtap: entered promiscuous mode
[   37.603293][ T3313] veth1_macvtap: entered promiscuous mode
[   37.629045][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.641676][ T3316] veth0_macvtap: entered promiscuous mode
[   37.650651][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.671761][ T3316] veth1_macvtap: entered promiscuous mode
[   37.693887][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.721599][ T3317] veth0_vlan: entered promiscuous mode
[   37.736176][  T309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.751764][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1
[   37.768181][ T3317] veth1_vlan: entered promiscuous mode
[   37.775326][  T309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.784622][  T309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.804138][  T309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.818311][  T309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.829581][ T3312] veth0_vlan: entered promiscuous mode
[   37.842155][  T309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.851095][  T309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.862273][ T3312] veth1_vlan: entered promiscuous mode
[   37.871002][  T309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.904950][ T3319] veth0_vlan: entered promiscuous mode
[   37.916454][ T3317] veth0_macvtap: entered promiscuous mode
[   37.926715][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   37.945826][ T3312] veth0_macvtap: entered promiscuous mode
[   37.953670][ T3317] veth1_macvtap: entered promiscuous mode
[   37.966263][ T3312] veth1_macvtap: entered promiscuous mode
[   37.974858][ T3319] veth1_vlan: entered promiscuous mode
[   37.990614][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.001684][    C0] hrtimer: interrupt took 57279 ns
[   38.016062][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0
[   38.037197][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.051998][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.081787][  T869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.102599][  T869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.126091][  T869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.144107][  T869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.154381][  T869] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.201325][ T3491] vlan2: entered promiscuous mode
[   38.211215][ T3491] bridge0: entered promiscuous mode
[   38.218058][  T869] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.227338][  T869] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.239466][   T28] kauditd_printk_skb: 43 callbacks suppressed
[   38.239480][   T28] audit: type=1400 audit(1774086563.853:123): avc:  denied  { ioctl } for  pid=3490 comm="syz.0.7" path="socket:[4861]" dev="sockfs" ino=4861 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   38.299089][  T869] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.446087][   T28] audit: type=1400 audit(1774086563.893:124): avc:  denied  { create } for  pid=3490 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   38.466254][   T28] audit: type=1400 audit(1774086563.893:125): avc:  denied  { write } for  pid=3490 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   38.486354][   T28] audit: type=1400 audit(1774086563.893:126): avc:  denied  { nlmsg_write } for  pid=3490 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   38.506770][   T28] audit: type=1400 audit(1774086563.903:127): avc:  denied  { mounton } for  pid=3317 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   38.525910][ T3319] veth0_macvtap: entered promiscuous mode
[   38.531472][   T28] audit: type=1400 audit(1774086563.973:128): avc:  denied  { create } for  pid=3495 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   38.555942][   T28] audit: type=1400 audit(1774086564.053:129): avc:  denied  { create } for  pid=3495 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   38.575656][   T28] audit: type=1400 audit(1774086564.163:130): avc:  denied  { create } for  pid=3495 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   38.595479][   T28] audit: type=1400 audit(1774086564.173:131): avc:  denied  { bind } for  pid=3495 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   38.614799][   T28] audit: type=1400 audit(1774086564.193:132): avc:  denied  { setopt } for  pid=3495 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   38.656879][ T3505] loop0: detected capacity change from 0 to 512
[   38.759259][ T3505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   38.854853][ T3508] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'.
[   39.451389][ T3512] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   39.493436][ T3515] loop3: detected capacity change from 0 to 128
[   39.503202][ T3512] 9p: Bad value for 'rfdno'
[   39.518809][ T3515] =======================================================
[   39.518809][ T3515] WARNING: The mand mount option has been deprecated and
[   39.518809][ T3515]          and is ignored by this kernel. Remove the mand
[   39.518809][ T3515]          option from the mount to silence this warning.
[   39.518809][ T3515] =======================================================
[   39.555615][ T3319] veth1_macvtap: entered promiscuous mode
[   39.574093][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.623023][ T3513] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9'.
[   39.646750][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.693075][  T309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.711778][  T309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.899235][  T309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.416774][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.480806][  T309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.840161][ T3529] loop1: detected capacity change from 0 to 128
[   41.315984][ T3529] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   41.327298][ T3531] syz.0.13 (3531) used greatest stack depth: 10312 bytes left
[   41.426238][ T3524] syz.3.10 (3524) used greatest stack depth: 9928 bytes left
[   41.524023][ T3529] FAT-fs (loop1): Filesystem has been set read-only
[   41.530672][ T3529] syz.1.14: attempt to access beyond end of device
[   41.530672][ T3529] loop1: rw=8912896, sector=2065, nr_sectors = 8 limit=128
[   41.544697][ T3529] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   41.656584][ T3529] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   41.989844][ T3529] syz.1.14: attempt to access beyond end of device
[   41.989844][ T3529] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[   42.149959][ T3529] syz.1.14: attempt to access beyond end of device
[   42.149959][ T3529] loop1: rw=8388608, sector=2065, nr_sectors = 8 limit=128
[   42.378112][ T3546] syz.1.14: attempt to access beyond end of device
[   42.378112][ T3546] loop1: rw=8388608, sector=2065, nr_sectors = 1 limit=128
[   42.413959][ T3546] Buffer I/O error on dev loop1, logical block 2065, async page read
[   42.422103][ T3546] syz.1.14: attempt to access beyond end of device
[   42.422103][ T3546] loop1: rw=8388608, sector=2066, nr_sectors = 1 limit=128
[   42.436111][ T3546] Buffer I/O error on dev loop1, logical block 2066, async page read
[   42.457701][ T3546] syz.1.14: attempt to access beyond end of device
[   42.457701][ T3546] loop1: rw=8388608, sector=2067, nr_sectors = 1 limit=128
[   42.482692][ T3546] Buffer I/O error on dev loop1, logical block 2067, async page read
[   42.502623][ T3546] syz.1.14: attempt to access beyond end of device
[   42.502623][ T3546] loop1: rw=8388608, sector=2068, nr_sectors = 1 limit=128
[   42.543878][ T3546] Buffer I/O error on dev loop1, logical block 2068, async page read
[   42.572600][ T3546] syz.1.14: attempt to access beyond end of device
[   42.572600][ T3546] loop1: rw=8388608, sector=2069, nr_sectors = 1 limit=128
[   42.605467][ T3546] Buffer I/O error on dev loop1, logical block 2069, async page read
[   42.613868][ T3546] syz.1.14: attempt to access beyond end of device
[   42.613868][ T3546] loop1: rw=8388608, sector=2070, nr_sectors = 1 limit=128
[   42.627853][ T3546] Buffer I/O error on dev loop1, logical block 2070, async page read
[   42.636224][ T3546] syz.1.14: attempt to access beyond end of device
[   42.636224][ T3546] loop1: rw=8388608, sector=2071, nr_sectors = 1 limit=128
[   42.650101][ T3546] Buffer I/O error on dev loop1, logical block 2071, async page read
[   42.679370][ T3546] Buffer I/O error on dev loop1, logical block 2072, async page read
[   42.705644][ T3546] Buffer I/O error on dev loop1, logical block 2065, async page read
[   42.730508][ T3546] Buffer I/O error on dev loop1, logical block 2066, async page read
[   42.984725][ T3565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=3565 comm=syz.1.19
[   43.033918][ T3562] tc_dump_action: action bad kind
[   43.190993][ T3562] loop1: detected capacity change from 0 to 8192
[   43.263108][ T3562]  loop1: p1 p2 p4[EZD]
[   43.273103][   T28] kauditd_printk_skb: 30 callbacks suppressed
[   43.273128][   T28] audit: type=1400 audit(1774086568.873:163): avc:  denied  { read } for  pid=3566 comm="syz.0.21" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   43.332398][ T3565] ./file0: Can't lookup blockdev
[   43.372369][ T3562] loop1: p4 start 201326592 is beyond EOD, truncated
[   44.002308][ T3578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'.
[   44.289134][ T3579] loop0: detected capacity change from 0 to 8192
[   44.426478][ T3586] SELinux: security_context_str_to_sid (u) failed with errno=-22
[   44.843032][ T3593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.27'.
[   45.072674][ T3594] loop3: detected capacity change from 0 to 8192
[   45.477587][ T3577] syz.0.23 (3577) used greatest stack depth: 7256 bytes left
[   45.796473][   T28] audit: type=1400 audit(1774086571.413:164): avc:  denied  { read } for  pid=3605 comm="syz.4.31" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   45.858847][ T3608] loop0: detected capacity change from 0 to 1024
[   45.878375][ T3608] EXT4-fs: Ignoring removed nomblk_io_submit option
[   45.892581][   T28] audit: type=1400 audit(1774086571.483:165): avc:  denied  { open } for  pid=3605 comm="syz.4.31" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   46.072859][ T3608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.110330][   T28] audit: type=1400 audit(1774086571.713:166): avc:  denied  { read write } for  pid=3605 comm="syz.4.31" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   46.249749][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.645055][   T28] audit: type=1400 audit(1774086571.713:167): avc:  denied  { open } for  pid=3605 comm="syz.4.31" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   46.694999][   T28] audit: type=1400 audit(1774086571.713:168): avc:  denied  { ioctl } for  pid=3605 comm="syz.4.31" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   46.909425][   T28] audit: type=1400 audit(1774086571.773:169): avc:  denied  { add_name } for  pid=3607 comm="syz.0.30" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   47.037335][   T28] audit: type=1400 audit(1774086571.783:170): avc:  denied  { create } for  pid=3607 comm="syz.0.30" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   47.143468][ T3628] loop2: detected capacity change from 0 to 512
[   47.229755][ T3628] EXT4-fs: Ignoring removed nomblk_io_submit option
[   47.353988][ T3626] loop4: detected capacity change from 0 to 128
[   47.361158][ T3628] EXT4-fs (loop2): 1 truncate cleaned up
[   47.372392][   T28] audit: type=1400 audit(1774086571.783:171): avc:  denied  { read write } for  pid=3607 comm="syz.0.30" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   47.406427][ T3628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.433053][   T28] audit: type=1400 audit(1774086571.783:172): avc:  denied  { open } for  pid=3607 comm="syz.0.30" path="/8/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   47.512686][ T3592] syz.3.27 (3592) used greatest stack depth: 6896 bytes left
[   47.583739][ T3635] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz.2.35: invalid fast symlink length 39
[   47.627533][ T3635] EXT4-fs (loop2): Remounting filesystem read-only
[   47.803619][ T3648] FAULT_INJECTION: forcing a failure.
[   47.803619][ T3648] name failslab, interval 1, probability 0, space 0, times 1
[   47.876138][ T3648] CPU: 1 UID: 0 PID: 3648 Comm: syz.3.39 Not tainted syzkaller #0 PREEMPT(full) 
[   47.876243][ T3648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   47.876267][ T3648] Call Trace:
[   47.876274][ T3648]  <TASK>
[   47.876283][ T3648]  __dump_stack+0x1d/0x30
[   47.876316][ T3648]  dump_stack_lvl+0x95/0xd0
[   47.876347][ T3648]  dump_stack+0x15/0x1b
[   47.876372][ T3648]  should_fail_ex+0x263/0x280
[   47.876453][ T3648]  should_failslab+0x8c/0xb0
[   47.876481][ T3648]  kmem_cache_alloc_node_noprof+0x6d/0x460
[   47.876590][ T3648]  ? __alloc_skb+0x2d6/0x690
[   47.876675][ T3648]  __alloc_skb+0x2d6/0x690
[   47.876708][ T3648]  ? kmem_cache_alloc_noprof+0x18c/0x400
[   47.876735][ T3648]  ? __alloc_skb+0x200/0x690
[   47.876790][ T3648]  audit_log_start+0x3aa/0x730
[   47.876818][ T3648]  ? kstrtouint_from_user+0xa8/0xf0
[   47.876851][ T3648]  audit_seccomp+0x47/0x100
[   47.876904][ T3648]  ? __seccomp_filter+0x8db/0x1350
[   47.876946][ T3648]  __seccomp_filter+0x8ec/0x1350
[   47.876993][ T3648]  ? __rcu_read_unlock+0x4e/0x70
[   47.877021][ T3648]  ? __fget_files+0x184/0x1c0
[   47.877050][ T3648]  ? mutex_lock+0x57/0x90
[   47.877158][ T3648]  ? mutex_unlock+0x4e/0x90
[   47.877201][ T3648]  __secure_computing+0x81/0x150
[   47.877237][ T3648]  do_syscall_64+0xd3/0x370
[   47.877312][ T3648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   47.877341][ T3648] RIP: 0033:0x7fa81032c799
[   47.877402][ T3648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   47.877425][ T3648] RSP: 002b:00007fa80ed7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000008f
[   47.877445][ T3648] RAX: ffffffffffffffda RBX: 00007fa8105a5fa0 RCX: 00007fa81032c799
[   47.877458][ T3648] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000015
[   47.877473][ T3648] RBP: 00007fa80ed7f090 R08: 0000000000000000 R09: 0000000000000000
[   47.877531][ T3648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   47.877547][ T3648] R13: 00007fa8105a6038 R14: 00007fa8105a5fa0 R15: 00007ffdad4ce2a8
[   47.877571][ T3648]  </TASK>
[   48.112982][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.165434][ T3655] loop3: detected capacity change from 0 to 512
[   48.170504][ T3656] netlink: 14 bytes leftover after parsing attributes in process `syz.2.42'.
[   48.187421][ T3655] EXT4-fs: Ignoring removed mblk_io_submit option
[   48.195247][ T3656] hsr_slave_0: left promiscuous mode
[   48.212169][ T3655] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[   48.220990][ T3655] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.43: iget: bad i_size value: 12154757448730
[   48.238098][ T3656] hsr_slave_1: left promiscuous mode
[   48.253987][ T3658] Zero length message leads to an empty skb
[   48.262099][ T3655] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   48.262433][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   48.278023][    C1] EXT4-fs (loop3): initial error at time 1774086573: ext4_orphan_get:1391: inode 13
[   48.287443][    C1] EXT4-fs (loop3): last error at time 1774086573: ext4_orphan_get:1391: inode 13
[   48.329063][ T3655] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.43: couldn't read orphan inode 13 (err -117)
[   48.341010][ T3655] loop3: lost filesystem error report for type 5 error -117
[   48.341921][ T3655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.363127][ T3655] EXT4-fs warning (device loop3): ext4_lookup:1797: Inconsistent encryption contexts: 2/12
[   48.374445][ T3659] EXT4-fs warning (device loop3): ext4_lookup:1797: Inconsistent encryption contexts: 2/12
[   48.384997][   T28] kauditd_printk_skb: 37 callbacks suppressed
[   48.385010][   T28] audit: type=1326 audit(1774086574.003:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec964bc799 code=0x7ffc0000
[   48.437801][ T3661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'.
[   48.459868][ T3655] EXT4-fs warning (device loop3): ext4_lookup:1797: Inconsistent encryption contexts: 2/12
[   48.472474][   T28] audit: type=1326 audit(1774086574.003:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec964bc799 code=0x7ffc0000
[   48.611974][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.823881][   T28] audit: type=1400 audit(1774086574.443:210): avc:  denied  { shutdown } for  pid=3667 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   49.644128][   T28] audit: type=1400 audit(1774086575.243:211): avc:  denied  { getopt } for  pid=3667 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   49.663807][   T28] audit: type=1400 audit(1774086575.243:212): avc:  denied  { name_connect } for  pid=3667 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1
[   49.717354][   T28] audit: type=1400 audit(1774086575.323:213): avc:  denied  { create } for  pid=3667 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   49.782454][   T28] audit: type=1400 audit(1774086575.363:214): avc:  denied  { mounton } for  pid=3674 comm="syz.0.48" path="/12/file0" dev="tmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   49.805537][ T3678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.49'.
[   49.806849][ T3677] loop0: detected capacity change from 0 to 512
[   49.862058][ T3677] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 17. Delete some EAs or run e2fsck.
[   49.938815][ T3677] EXT4-fs (loop0): 1 truncate cleaned up
[   49.987937][ T3677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.014939][ T3683] loop3: detected capacity change from 0 to 1024
[   50.027948][ T3681] loop2: detected capacity change from 0 to 8192
[   50.036787][ T3683] ext4: Unknown parameter 'noacl'
[   50.094564][   T28] audit: type=1400 audit(1774086575.713:215): avc:  denied  { create } for  pid=3676 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   50.140232][   T28] audit: type=1400 audit(1774086575.733:216): avc:  denied  { write } for  pid=3676 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   50.230376][ T3696] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.50: bg 0: block 7: invalid block bitmap
[   50.243480][ T3695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.53'.
[   50.339630][ T3696] SET target dimension over the limit!
[   50.495362][ T3699] loop1: detected capacity change from 0 to 8192
[   51.263052][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.502644][ T3779] loop4: detected capacity change from 0 to 128
[   51.523789][   T28] audit: type=1400 audit(1774086577.133:217): avc:  denied  { read } for  pid=3773 comm="syz.4.58" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[   51.546920][ T3782] loop0: detected capacity change from 0 to 512
[   51.848144][ T3782] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   51.876877][ T3782] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   51.894150][ T3782] EXT4-fs (loop0): 1 truncate cleaned up
[   51.906593][ T3782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.971795][ T3673] syz.2.49 (3673) used greatest stack depth: 6752 bytes left
[   52.182857][ T3782] bond1: entered allmulticast mode
[   52.225884][ T3782] 8021q: adding VLAN 0 to HW filter on device bond1
[   52.817352][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.087182][ T3814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.66'.
[   54.282852][ T3816] loop4: detected capacity change from 0 to 8192
[   54.362481][   T28] kauditd_printk_skb: 3 callbacks suppressed
[   54.362504][   T28] audit: type=1400 audit(1774086579.923:221): avc:  denied  { setopt } for  pid=3817 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   54.392291][ T3820] syz.3.69 uses obsolete (PF_INET,SOCK_PACKET)
[   54.431852][   T28] audit: type=1400 audit(1774086580.043:222): avc:  denied  { listen } for  pid=3817 comm="syz.2.68" lport=51273 faddr=::ffff:172.30.0.3 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   54.494447][   T28] audit: type=1400 audit(1774086580.043:223): avc:  denied  { accept } for  pid=3817 comm="syz.2.68" lport=51273 faddr=::ffff:172.30.0.3 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   54.518301][   T28] audit: type=1400 audit(1774086580.043:224): avc:  denied  { setopt } for  pid=3817 comm="syz.2.68" lport=51273 faddr=::ffff:172.30.0.3 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[   54.601999][   T28] audit: type=1400 audit(1774086580.043:225): avc:  denied  { write } for  pid=3817 comm="syz.2.68" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   54.654139][   T28] audit: type=1400 audit(1774086580.093:226): avc:  denied  { ioctl } for  pid=3819 comm="syz.3.69" path="socket:[6249]" dev="sockfs" ino=6249 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   54.805330][   T28] audit: type=1400 audit(1774086580.323:227): avc:  denied  { setopt } for  pid=3832 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   54.846259][   T28] audit: type=1400 audit(1774086580.323:228): avc:  denied  { read append } for  pid=3832 comm="syz.1.70" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   54.912684][   T28] audit: type=1400 audit(1774086580.323:229): avc:  denied  { open } for  pid=3832 comm="syz.1.70" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   54.962470][   T28] audit: type=1400 audit(1774086580.323:230): avc:  denied  { ioctl } for  pid=3832 comm="syz.1.70" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   55.205027][ T3841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.73'.
[   55.313141][ T3847] loop2: detected capacity change from 0 to 8192
[   55.493057][ T3854] netlink: 'syz.3.76': attribute type 1 has an invalid length.
[   55.650791][ T3859] loop1: detected capacity change from 0 to 128
[   56.630450][ T3868] netlink: 'syz.4.80': attribute type 1 has an invalid length.
[   56.681046][ T3868] netlink: 44 bytes leftover after parsing attributes in process `syz.4.80'.
[   56.979031][ T3886] netlink: 20 bytes leftover after parsing attributes in process `syz.2.84'.
[   57.078981][ T3886] loop2: detected capacity change from 0 to 512
[   57.123608][ T3886] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   57.197536][ T3886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.253776][ T3886] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   57.743970][ T3903] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.834258][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.876097][ T3910] netlink: 132 bytes leftover after parsing attributes in process `syz.1.90'.
[   58.122550][ T3921] netlink: 'syz.0.92': attribute type 3 has an invalid length.
[   58.134789][ T3919] Cannot find add_set index 0 as target
[   58.140546][ T3921] netlink: 132 bytes leftover after parsing attributes in process `syz.0.92'.
[   58.153515][ T3921] netlink: 'syz.0.92': attribute type 3 has an invalid length.
[   58.171035][ T3921] netlink: 132 bytes leftover after parsing attributes in process `syz.0.92'.
[   58.180339][ T3921] netlink: 'syz.0.92': attribute type 3 has an invalid length.
[   58.188360][ T3921] netlink: 132 bytes leftover after parsing attributes in process `syz.0.92'.
[   58.197666][ T3921] netlink: 'syz.0.92': attribute type 3 has an invalid length.
[   58.205410][ T3921] netlink: 132 bytes leftover after parsing attributes in process `syz.0.92'.
[   58.214596][ T3921] netlink: 'syz.0.92': attribute type 3 has an invalid length.
[   58.222206][ T3921] netlink: 132 bytes leftover after parsing attributes in process `syz.0.92'.
[   58.231403][ T3921] netlink: 'syz.0.92': attribute type 3 has an invalid length.
[   58.239089][ T3921] netlink: 132 bytes leftover after parsing attributes in process `syz.0.92'.
[   58.328049][ T3928] loop4: detected capacity change from 0 to 128
[   58.345169][ T3921] netlink: 'syz.0.92': attribute type 3 has an invalid length.
[   58.379103][ T3921] netlink: 'syz.0.92': attribute type 3 has an invalid length.
[   58.972554][ T3938] loop3: detected capacity change from 0 to 8192
[   59.591526][ T3953] loop0: detected capacity change from 0 to 8192
[   60.087571][ T3964] capability: warning: `syz.3.103' uses deprecated v2 capabilities in a way that may be insecure
[   60.197542][   T28] kauditd_printk_skb: 41 callbacks suppressed
[   60.197577][   T28] audit: type=1400 audit(1774086585.813:272): avc:  denied  { name_bind } for  pid=3963 comm="syz.3.103" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[   60.283296][ T3964] loop3: detected capacity change from 0 to 512
[   60.633258][ T3980] loop2: detected capacity change from 0 to 736
[   60.718772][   T28] audit: type=1400 audit(1774086586.333:273): avc:  denied  { create } for  pid=3979 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   60.789086][   T28] audit: type=1400 audit(1774086586.403:274): avc:  denied  { setopt } for  pid=3979 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   60.900948][   T28] audit: type=1400 audit(1774086586.513:275): avc:  denied  { kexec_image_load } for  pid=3988 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[   60.973502][ T3997] IPVS: sync thread started: state = MASTER, mcast_ifn = ip_vti0, syncid = 4, id = 0
[   61.107191][ T4000] __nla_validate_parse: 30 callbacks suppressed
[   61.107212][ T4000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.113'.
[   61.246071][ T4001] loop3: detected capacity change from 0 to 8192
[   61.429829][ T3945] syz.0.98 (3945) used greatest stack depth: 5880 bytes left
[   61.674774][   T28] audit: type=1400 audit(1774086587.173:276): avc:  denied  { perfmon } for  pid=4002 comm="syz.2.114" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   62.864055][   T28] audit: type=1400 audit(1774086588.473:277): avc:  denied  { bpf } for  pid=4011 comm="syz.0.116" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   63.030190][ T3989] kexec: Could not allocate control_code_buffer
[   63.662671][   T28] audit: type=1400 audit(1774086589.273:278): avc:  denied  { ioctl } for  pid=4025 comm="syz.3.120" path="socket:[5669]" dev="sockfs" ino=5669 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   63.988893][ T4032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'.
[   64.006125][ T4032] loop0: detected capacity change from 0 to 512
[   64.031879][ T4032] EXT4-fs (loop0): first meta block group too large: 2 (group descriptor block count 1)
[   64.121147][ T4034] loop2: detected capacity change from 0 to 512
[   64.142859][ T4034] EXT4-fs: Ignoring removed bh option
[   64.168479][ T4034] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   64.183264][ T4034] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal
[   64.194329][   T28] audit: type=1400 audit(1774086589.813:279): avc:  denied  { read } for  pid=4033 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   64.318167][   T28] audit: type=1400 audit(1774086589.933:280): avc:  denied  { write } for  pid=4041 comm="syz.4.125" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[   65.100041][   T28] audit: type=1400 audit(1774086590.713:281): avc:  denied  { module_request } for  pid=4062 comm="syz.0.132" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[   65.276918][   T28] audit: type=1400 audit(1774086590.803:282): avc:  denied  { mount } for  pid=4062 comm="syz.0.132" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[   65.673797][ T4075] batman_adv: batadv0: Adding interface: dummy0
[   65.692488][ T4075] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.720912][ T4077] loop0: detected capacity change from 0 to 512
[   65.730900][ T4077] EXT4-fs: Ignoring removed nobh option
[   65.754265][ T4075] batman_adv: batadv0: Interface activated: dummy0
[   65.760849][   T28] audit: type=1400 audit(1774086591.373:283): avc:  denied  { ioctl } for  pid=4074 comm="syz.1.134" path="socket:[5761]" dev="sockfs" ino=5761 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   65.785921][ T4077] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   65.795013][ T4078] batadv0: mtu less than device minimum
[   65.801461][ T4078] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   65.812539][ T4078] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   65.823408][ T4078] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   65.834483][ T4078] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   65.845822][ T4078] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   65.856679][ T4078] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   65.867547][ T4078] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   65.878523][ T4078] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   65.889541][ T4078] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   65.908527][ T4077] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.135: iget: bad i_size value: 38620345925642
[   65.926581][   T28] audit: type=1400 audit(1774086591.543:284): avc:  denied  { create } for  pid=4074 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   65.947875][   T28] audit: type=1400 audit(1774086591.543:285): avc:  denied  { write } for  pid=4074 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   66.116239][ T4077] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   66.116903][ T4077] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.135: couldn't read orphan inode 15 (err -117)
[   66.126231][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   66.126251][    C0] EXT4-fs (loop0): initial error at time 1774086591: ext4_orphan_get:1391: inode 15
[   66.126274][    C0] EXT4-fs (loop0): last error at time 1774086591: ext4_orphan_get:1391: inode 15
[   66.312974][   T28] audit: type=1400 audit(1774086591.543:286): avc:  denied  { read } for  pid=4074 comm="syz.1.134" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   66.703790][ T4077] loop0: lost filesystem error report for type 5 error -117
[   66.709141][ T4077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.850881][ T4092] loop2: detected capacity change from 0 to 1764
[   66.938492][ T4077] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.135: bg 0: block 5: invalid block bitmap
[   66.967743][   T28] audit: type=1400 audit(1774086592.543:287): avc:  denied  { create } for  pid=4076 comm="syz.0.135" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   67.010105][   T28] audit: type=1400 audit(1774086592.543:288): avc:  denied  { write } for  pid=4076 comm="syz.0.135" path="/31/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   67.054490][   T28] audit: type=1400 audit(1774086592.553:289): avc:  denied  { mount } for  pid=4085 comm="syz.2.137" name="/" dev="loop2" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1
[   67.080404][   T28] audit: type=1400 audit(1774086592.703:290): avc:  denied  { connect } for  pid=4076 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   67.183949][   T28] audit: type=1400 audit(1774086592.783:291): avc:  denied  { shutdown } for  pid=4076 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   67.221936][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.552900][ T4110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'.
[   67.587963][ T4110] loop3: detected capacity change from 0 to 512
[   67.635350][ T4110] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[   67.645994][ T4112] loop4: detected capacity change from 0 to 4096
[   67.658723][ T4112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.670394][ T4110] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1024: comm syz.3.145: invalid block
[   67.703027][ T4112] EXT4-fs (loop4): shut down requested (1)
[   67.854768][ T4110] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   67.858430][ T4112] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=12
[   67.867719][    C0] EXT4-fs (loop3): error count since last fsck: 1
[   67.867735][    C0] EXT4-fs (loop3): initial error at time 1774086593: ext4_get_branch:178: inode 13: block 1024
[   67.867772][    C0] EXT4-fs (loop3): last error at time 1774086593: ext4_get_branch:178: inode 13: block 1024
[   67.968214][ T4110] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.145: invalid indirect mapped block 1024 (level 0)
[   68.092647][ T4110] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   68.093239][ T4110] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.145: bg 0: block 35: padding at end of block bitmap is not set
[   68.166460][ T4112] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=12
[   68.166601][ T4124] SELinux: inode_doinit_use_xattr:  getxattr returned 5 for dev=loop4 ino=12
[   68.184506][ T4110] loop3: lost filesystem error report for type 5 error -117
[   68.203239][ T4110] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem
[   69.103414][ T4110] loop3: lost filesystem error report for type 5 error -117
[   69.117105][ T4110] EXT4-fs (loop3): 1 truncate cleaned up
[   69.131118][ T4110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.315851][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.811704][ T4130] loop0: detected capacity change from 0 to 1764
[   69.818468][ T4130] iso9660: Unknown parameter 'fowner<00000000000000000000'
[   69.846271][ T4123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.148'.
[   70.013835][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.190614][ T4139] Driver unsupported XDP return value 0 on prog  (id 22) dev N/A, expect packet loss!
[   71.491963][ T4147] loop2: detected capacity change from 0 to 512
[   71.518731][ T4137] loop0: detected capacity change from 0 to 512
[   71.550004][ T4147] EXT4-fs: Ignoring removed nobh option
[   71.582490][ T4144] loop1: detected capacity change from 0 to 8192
[   71.722299][ T4147] EXT4-fs (loop2): orphan cleanup on readonly fs
[   72.732534][   T28] kauditd_printk_skb: 12 callbacks suppressed
[   72.732552][   T28] audit: type=1400 audit(1774086597.953:304): avc:  denied  { create } for  pid=4148 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   72.777031][ T4147] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.156: EA inode hash validation failed
[   73.770226][ T4137] EXT4-fs: error -4 creating inode table initialization thread
[   74.550058][ T4147] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   74.564199][ T4137] EXT4-fs (loop0): mount failed
[   74.575295][   T28] audit: type=1400 audit(1774086598.053:305): avc:  denied  { setopt } for  pid=4148 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   74.607551][ T4147] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.156: corrupted inode contents
[   74.663459][ T4147] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   74.663660][ T4147] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.156: mark_inode_dirty error
[   74.672911][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   74.672952][    C0] EXT4-fs (loop2): initial error at time 1774086600: ext4_do_update_inode:5569: inode 15
[   74.672980][    C0] EXT4-fs (loop2): last error at time 1774086600: ext4_do_update_inode:5569: inode 15
[   74.731975][   T28] audit: type=1400 audit(1774086598.443:306): avc:  denied  { write } for  pid=4148 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   74.812836][   T28] audit: type=1400 audit(1774086598.643:307): avc:  denied  { read } for  pid=4148 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   74.858970][ T4147] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   74.859193][ T4147] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.156: corrupted inode contents
[   74.882469][ T4147] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   74.889578][ T4147] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.156: mark_inode_dirty error
[   74.892563][   T28] audit: type=1400 audit(1774086600.503:308): avc:  denied  { bind } for  pid=4179 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   74.899156][ T4147] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   74.927326][   T28] audit: type=1400 audit(1774086600.503:309): avc:  denied  { connect } for  pid=4179 comm="syz.4.163" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   74.960597][ T4147] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.156: mark inode dirty (error -117)
[   74.978779][ T4147] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   74.979885][ T4147] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117)
[   75.002646][ T4147] EXT4-fs (loop2): 1 orphan inode deleted
[   75.009338][ T4147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   75.030741][   T28] audit: type=1400 audit(1774086600.643:310): avc:  denied  { append } for  pid=4184 comm="syz.3.164" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   75.384302][   T28] audit: type=1400 audit(1774086600.833:311): avc:  denied  { ioctl } for  pid=4184 comm="syz.3.164" path="socket:[6633]" dev="sockfs" ino=6633 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   76.772024][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.824032][ T4185] Process accounting resumed
[   76.954953][ T4229] loop4: detected capacity change from 0 to 128
[   77.096622][ T4229] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   77.136501][ T4236] loop0: detected capacity change from 0 to 128
[   77.258511][ T4229] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.475088][   T28] audit: type=1400 audit(1774086603.083:312): avc:  denied  { mount } for  pid=4228 comm="syz.4.171" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   77.542657][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.716077][   T28] audit: type=1400 audit(1774086603.323:313): avc:  denied  { read write } for  pid=4257 comm="syz.4.176" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   77.782468][   T28] audit: type=1400 audit(1774086603.333:314): avc:  denied  { open } for  pid=4257 comm="syz.4.176" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   77.829429][ T4275] loop4: detected capacity change from 0 to 1024
[   77.851593][ T4262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.866033][ T4262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.879625][ T4275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.910524][ T4275] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.976059][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   78.014966][ T4293] tmpfs: Bad value for 'mpol'
[   78.028700][   T28] audit: type=1400 audit(1774086603.643:315): avc:  denied  { ioctl } for  pid=4291 comm="syz.4.181" path="socket:[6754]" dev="sockfs" ino=6754 ioctlcmd=0x2272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   78.056699][ T4293] loop4: detected capacity change from 0 to 128
[   78.076934][ T4293] msdos: Unknown parameter 'nodo'
[   78.406605][ T4293] loop4: detected capacity change from 0 to 1024
[   78.510252][ T4293] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[   78.656006][ T4293] System zones: 0-1, 3-36
[   78.804857][ T4293] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.181: bad orphan inode 134217728
[   78.884492][ T4285] cgroup: Unknown subsys name 'net'
[   78.940072][ T4293] loop4: lost filesystem error report for type 5 error -117
[   79.500189][ T4293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.718165][ T4335] loop3: detected capacity change from 0 to 1764
[   79.953315][ T4285] loop0: detected capacity change from 0 to 128
[   79.981993][   T28] audit: type=1400 audit(1774086605.593:316): avc:  denied  { add_name } for  pid=4291 comm="syz.4.181" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   81.008336][   T28] audit: type=1400 audit(1774086606.623:317): avc:  denied  { setopt } for  pid=4291 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   81.980976][   T28] audit: type=1400 audit(1774086606.863:318): avc:  denied  { firmware_load } for  pid=4330 comm="syz.3.184" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[   82.198214][ T4355] loop2: detected capacity change from 0 to 1024
[   82.213023][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.266758][ T4355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.311647][ T4355] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   82.334134][   T28] audit: type=1400 audit(1774086607.923:319): avc:  denied  { ioctl } for  pid=4353 comm="syz.2.187" path="/37/file1/file1" dev="loop2" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   82.496511][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.520244][   T28] audit: type=1400 audit(1774086608.133:320): avc:  denied  { load_policy } for  pid=4364 comm="syz.4.186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[   82.541456][ T4365] SELinux: failed to load policy
[   82.555846][ T4368] SELinux:  policydb version -2051603702 does not match my version range 15-35
[   82.581530][ T4368] SELinux: failed to load policy
[   82.638421][   T28] audit: type=1400 audit(1774086608.253:321): avc:  denied  { connect } for  pid=4373 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[   82.863954][   T28] audit: type=1400 audit(1774086608.483:322): avc:  denied  { read } for  pid=4383 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   84.026995][   T28] audit: type=1400 audit(1774086609.643:323): avc:  denied  { bind } for  pid=4402 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   84.049464][ T4407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'.
[   84.058571][   T28] audit: type=1400 audit(1774086609.663:324): avc:  denied  { create } for  pid=4402 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   84.099326][   T28] audit: type=1400 audit(1774086609.663:325): avc:  denied  { ioctl } for  pid=4402 comm="syz.3.199" path="socket:[7257]" dev="sockfs" ino=7257 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[   84.330415][   T28] audit: type=1400 audit(1774086609.943:326): avc:  denied  { accept } for  pid=4409 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   84.350741][   T28] audit: type=1400 audit(1774086609.943:327): avc:  denied  { ioctl } for  pid=4409 comm="syz.3.202" path="socket:[6906]" dev="sockfs" ino=6906 ioctlcmd=0x942a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   84.375427][ T4423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'.
[   84.387574][   T28] audit: type=1400 audit(1774086609.953:328): avc:  denied  { bind } for  pid=4409 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   84.390984][ T4423] loop1: detected capacity change from 0 to 512
[   84.408448][   T28] audit: type=1400 audit(1774086609.953:329): avc:  denied  { name_bind } for  pid=4409 comm="syz.3.202" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1
[   84.434097][   T28] audit: type=1400 audit(1774086609.953:330): avc:  denied  { node_bind } for  pid=4409 comm="syz.3.202" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1
[   84.459849][ T4423] EXT4-fs (loop1): first meta block group too large: 2 (group descriptor block count 1)
[   84.473496][ T4424] validate_nla: 27 callbacks suppressed
[   84.473511][ T4424] netlink: 'syz.0.201': attribute type 16 has an invalid length.
[   84.487104][ T4424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'.
[   84.563199][   T28] audit: type=1400 audit(1774086609.953:331): avc:  denied  { ioctl } for  pid=4409 comm="syz.3.202" path="socket:[6911]" dev="sockfs" ino=6911 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   85.128008][ T4428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'.
[   85.540135][ T4438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.207'.
[   86.143457][ T4449] loop4: detected capacity change from 0 to 512
[   86.209002][ T4449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.306579][ T4449] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   86.442827][ T4449] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.210: corrupted inode contents
[   86.472760][ T4449] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #2: comm syz.4.210: mark_inode_dirty error
[   86.492820][ T4449] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #2: comm syz.4.210: corrupted inode contents
[   86.510808][ T4441] loop0: detected capacity change from 0 to 8192
[   86.517672][ T4449] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.210: mark_inode_dirty error
[   86.571534][ T4449] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.210: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18]
[   86.571534][ T4449] 
[   86.667054][ T4458] loop2: detected capacity change from 0 to 512
[   86.763586][ T4458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   86.812599][ T4458] ext4 filesystem being mounted at /43/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.840456][ T4469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.215'.
[   87.033270][ T4458] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.213: Failed to acquire dquot type 0
[   87.285310][ T4472] loop1: detected capacity change from 0 to 8192
[   87.337512][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   87.524794][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.764837][ T4484] loop2: detected capacity change from 0 to 1024
[   87.771944][ T4484] EXT4-fs: inline encryption not supported
[   87.843073][ T4484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   87.883859][ T4482] team_slave_0: entered promiscuous mode
[   87.889631][ T4482] team_slave_1: entered promiscuous mode
[   87.911386][ T4484] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.928040][ T4482] macvtap1: entered promiscuous mode
[   87.952498][ T4482] team0: entered promiscuous mode
[   87.986456][ T4484] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 3: comm syz.2.218: lblock 3 mapped to illegal pblock 3 (length 3)
[   88.032681][ T4484] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   88.045138][ T4482] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   88.062647][ T4482] team0: Device macvtap1 is already an upper device of the team interface
[   88.071288][ T4484] EXT4-fs (loop2): This should not happen!! Data will be lost
[   88.071288][ T4484] 
[   88.093173][   T28] kauditd_printk_skb: 8 callbacks suppressed
[   88.093268][   T28] audit: type=1400 audit(1774086613.713:338): avc:  denied  { accept } for  pid=4483 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[   88.148622][   T28] audit: type=1400 audit(1774086613.713:339): avc:  denied  { name_bind } for  pid=4483 comm="syz.2.218" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   88.180721][   T58] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 7: comm kworker/u8:4: lblock 7 mapped to illegal pblock 7 (length 9)
[   88.195716][ T4482] team0: left promiscuous mode
[   88.200861][ T4482] team_slave_0: left promiscuous mode
[   88.206292][ T4482] team_slave_1: left promiscuous mode
[   88.222083][   T58] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117
[   88.242441][   T58] EXT4-fs (loop2): This should not happen!! Data will be lost
[   88.242441][   T58] 
[   88.265040][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   88.839349][ T4500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'.
[   88.948317][ T4505] loop1: detected capacity change from 0 to 512
[   89.010837][ T4505] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   89.016504][   T28] audit: type=1400 audit(1774086614.623:340): avc:  denied  { block_suspend } for  pid=4499 comm="syz.4.223" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   89.044145][ T4500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.223'.
[   89.071648][ T4504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=4504 comm=syz.3.224
[   89.101947][ T4500] loop4: detected capacity change from 0 to 512
[   89.110525][ T4505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.250300][ T4517] xt_nat: multiple ranges no longer supported
[   89.269651][ T4505] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.299811][ T4521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4521 comm=syz.2.226
[   89.303932][ T4500] EXT4-fs: Ignoring removed mblk_io_submit option
[   89.328817][   T28] audit: type=1400 audit(1774086614.913:341): avc:  denied  { cpu } for  pid=4503 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   89.384141][ T4500] EXT4-fs: inline encryption not supported
[   89.392981][ T4505] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   89.401201][ T4500] EXT4-fs: test_dummy_encryption option not supported
[   89.410665][   T28] audit: type=1400 audit(1774086614.993:342): avc:  denied  { remount } for  pid=4501 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   89.451227][ T4505] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   89.493498][ T4500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.223'.
[   89.505516][ T4500] netlink: 132 bytes leftover after parsing attributes in process `syz.4.223'.
[   89.515993][   T28] audit: type=1400 audit(1774086615.123:343): avc:  denied  { ioctl } for  pid=4499 comm="syz.4.223" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7398 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   89.573561][ T4530] loop2: detected capacity change from 0 to 128
[   89.761546][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.127300][ T4537] vlan2: entered promiscuous mode
[   90.139688][ T4537] bridge0: entered promiscuous mode
[   90.757926][   T28] audit: type=1400 audit(1774086616.373:344): avc:  denied  { mount } for  pid=4546 comm="syz.2.232" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   90.812077][   T28] audit: type=1400 audit(1774086616.373:345): avc:  denied  { read write } for  pid=4546 comm="syz.2.232" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   90.851616][ T4504] loop3: detected capacity change from 0 to 4096
[   90.871630][   T28] audit: type=1400 audit(1774086616.373:346): avc:  denied  { open } for  pid=4546 comm="syz.2.232" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1
[   90.997412][ T4504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.290082][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.478712][   T28] audit: type=1400 audit(1774086617.093:347): avc:  denied  { mount } for  pid=4560 comm="syz.2.237" name="/" dev="configfs" ino=1114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   91.568079][ T4569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'.
[   91.577475][ T4569] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.585603][ T4569] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.594615][ T4569] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.602103][ T4569] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.629189][ T4574] netlink: 96 bytes leftover after parsing attributes in process `syz.3.238'.
[   91.641094][ T4573] loop1: detected capacity change from 0 to 512
[   91.655976][ T4573] EXT4-fs: dax option not supported
[   91.738872][ T4579] loop4: detected capacity change from 0 to 128
[   91.751279][ T4579] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   91.772718][ T4582] loop1: detected capacity change from 0 to 128
[   91.796737][ T4571] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.804114][ T4571] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.833047][ T4579] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   91.851074][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.861049][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.899434][ T3748] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.912860][ T3748] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.922078][ T3748] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.931642][ T3748] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.985629][ T4589] loop1: detected capacity change from 0 to 1024
[   92.015141][ T4589] EXT4-fs: inline encryption not supported
[   92.022619][ T4589] EXT4-fs: Ignoring removed nobh option
[   92.033420][ T4589] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002]
[   92.052245][ T4589] System zones: 0-1, 3-12
[   92.057319][ T4589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.085440][ T4589] netlink: 'syz.1.243': attribute type 13 has an invalid length.
[   92.218415][ T4589] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.225782][ T4589] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.254352][ T4589] batman_adv: batadv0: Interface deactivated: dummy0
[   92.319882][ T4589] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.331479][ T4589] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.349903][ T4598] netlink: 36 bytes leftover after parsing attributes in process `syz.3.246'.
[   92.441978][  T309] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.483042][  T309] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.522725][  T309] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.523741][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.552528][  T309] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.744828][ T4609] loop1: detected capacity change from 0 to 512
[   92.788698][ T4609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.917144][ T4609] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   92.946829][ T4609] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.250: corrupted inode contents
[   92.960101][ T4617] mmap: syz.3.253 (4617): VmData 29196288 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   93.117356][ T4609] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.250: mark_inode_dirty error
[   93.140182][ T4609] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.250: corrupted inode contents
[   93.271135][ T4609] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.250: mark_inode_dirty error
[   93.416338][ T4627] loop3: detected capacity change from 0 to 512
[   93.468845][ T4627] EXT4-fs: Ignoring removed nobh option
[   93.491601][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.511972][ T4627] ------------[ cut here ]------------
[   93.517617][ T4627] EA inode 11 i_nlink=1026
[   93.517687][ T4627] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.3.255/4627
[   93.533007][ T4627] Modules linked in:
[   93.536950][ T4627] CPU: 0 UID: 0 PID: 4627 Comm: syz.3.255 Not tainted syzkaller #0 PREEMPT(full) 
[   93.546336][ T4627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   93.556538][ T4627] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350
[   93.563435][ T4627] Code: 74 46 99 ff 4c 8d 2d 9d ad 5d 05 49 8d 7e 40 e8 14 e0 b5 ff 49 8b 6e 40 4c 89 e7 e8 48 db b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 1f 97 dd 03 66 66 66 66 66 66 2e
[   93.583203][ T4627] RSP: 0000:ffffc900011935a8 EFLAGS: 00010246
[   93.589314][ T4627] RAX: ffff88810521cdc8 RBX: ffff888108204608 RCX: ffffffff81c01878
[   93.597548][ T4627] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871dc600
[   93.605595][ T4627] RBP: 000000000000000b R08: 00018881082045bb R09: 0000000000000000
[   93.613629][ T4627] R10: 000000000008cf68 R11: 0001c900011934d8 R12: ffff8881082045b8
[   93.621721][ T4627] R13: ffffffff871dc600 R14: ffff888108204570 R15: 0000000000000001
[   93.629834][ T4627] FS:  00007fa80ed5e6c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000
[   93.638974][ T4627] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   93.645677][ T4627] CR2: 00007f23b74af000 CR3: 00000001355e8000 CR4: 00000000003506f0
[   93.653710][ T4627] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000
[   93.661716][ T4627] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[   93.669746][ T4627] Call Trace:
[   93.673070][ T4627]  <TASK>
[   93.676032][ T4627]  ext4_xattr_set_entry+0x77c/0x1010
[   93.681449][ T4627]  ext4_xattr_ibody_set+0x184/0x3c0
[   93.686739][ T4627]  ext4_expand_extra_isize_ea+0xd7b/0x11a0
[   93.692696][ T4627]  __ext4_expand_extra_isize+0x246/0x280
[   93.698371][ T4627]  __ext4_mark_inode_dirty+0x29b/0x400
[   93.703918][ T4627]  ext4_evict_inode+0x7c3/0xd60
[   93.708870][ T4627]  ? __pfx_ext4_evict_inode+0x10/0x10
[   93.714371][ T4627]  evict+0x2af/0x510
[   93.718322][ T4627]  ? __dquot_initialize+0x146/0x7c0
[   93.723628][ T4627]  iput+0x41a/0x580
[   93.727469][ T4627]  ext4_process_orphan+0x1a9/0x1c0
[   93.732654][ T4627]  ext4_orphan_cleanup+0x6a8/0xa00
[   93.737805][ T4627]  ext4_fill_super+0x3408/0x37c0
[   93.742823][ T4627]  ? set_blocksize+0x14c/0x270
[   93.747694][ T4627]  ? setup_bdev_super+0x30e/0x370
[   93.752881][ T4627]  ? __pfx_ext4_fill_super+0x10/0x10
[   93.758212][ T4627]  get_tree_bdev_flags+0x291/0x300
[   93.763419][ T4627]  ? __pfx_ext4_fill_super+0x10/0x10
[   93.768778][ T4627]  get_tree_bdev+0x1f/0x30
[   93.773311][ T4627]  ext4_get_tree+0x1c/0x30
[   93.777769][ T4627]  vfs_get_tree+0x57/0x1d0
[   93.782229][ T4627]  do_new_mount+0x288/0x8d0
[   93.786788][ T4627]  path_mount+0x4d0/0xbc0
[   93.791160][ T4627]  __se_sys_mount+0x28c/0x2e0
[   93.796040][ T4627]  __x64_sys_mount+0x67/0x80
[   93.800680][ T4627]  x64_sys_call+0x2d61/0x3020
[   93.805502][ T4627]  do_syscall_64+0x12c/0x370
[   93.810142][ T4627]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.816122][ T4627] RIP: 0033:0x7fa81032da0a
[   93.820566][ T4627] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   93.840250][ T4627] RSP: 002b:00007fa80ed5de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   93.848725][ T4627] RAX: ffffffffffffffda RBX: 00007fa80ed5dee0 RCX: 00007fa81032da0a
[   93.856743][ T4627] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007fa80ed5dea0
[   93.864824][ T4627] RBP: 0000200000000180 R08: 00007fa80ed5dee0 R09: 0000000000000740
[   93.872926][ T4627] R10: 0000000000000740 R11: 0000000000000246 R12: 0000200000000140
[   93.880968][ T4627] R13: 00007fa80ed5dea0 R14: 00000000000004a3 R15: 00002000000003c0
[   93.889024][ T4627]  </TASK>
[   93.892096][ T4627] ---[ end trace 0000000000000000 ]---
[   93.898848][ T4627] EXT4-fs (loop3): 1 orphan inode deleted
[   93.905174][ T4627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.948373][ T4630] xt_hashlimit: size too large, truncated to 1048576
[   94.065188][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.083443][ T4634] netlink: 20 bytes leftover after parsing attributes in process `syz.2.257'.
[   94.148205][ T4636] netlink: 36 bytes leftover after parsing attributes in process `syz.3.258'.
[   94.591474][ T4637] loop2: detected capacity change from 0 to 8192
[   95.218781][ T4630] all: renamed from bridge0
[   95.488739][   T28] kauditd_printk_skb: 10 callbacks suppressed
[   95.488758][   T28] audit: type=1400 audit(1774086621.103:358): avc:  denied  { getopt } for  pid=4652 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   95.560547][ T4659] loop1: detected capacity change from 0 to 512
[   95.581903][ T4659] EXT4-fs: Ignoring removed mblk_io_submit option
[   95.614510][ T4659] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.264: corrupted in-inode xattr: e_value size too large
[   95.649442][ T4659] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   95.649654][ T4659] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.264: couldn't read orphan inode 15 (err -117)
[   95.658845][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   95.658867][    C0] EXT4-fs (loop1): initial error at time 1774086621: ext4_iget_extra_inode:5025: inode 15
[   95.658899][    C0] EXT4-fs (loop1): last error at time 1774086621: ext4_iget_extra_inode:5025: inode 15
[   95.696775][ T4659] loop1: lost filesystem error report for type 5 error -117
[   95.697380][ T4659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.720185][ T4659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'.
[   95.729516][ T4659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.264'.
[   95.748147][   T28] audit: type=1400 audit(1774086621.363:359): avc:  denied  { remove_name } for  pid=4658 comm="syz.1.264" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   95.772579][   T28] audit: type=1400 audit(1774086621.363:360): avc:  denied  { rename } for  pid=4658 comm="syz.1.264" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   95.818211][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.955148][ T4667] loop1: detected capacity change from 0 to 512
[   96.114254][ T4667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.151477][ T4667] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   96.224997][ T4672] netlink: 'syz.0.268': attribute type 1 has an invalid length.
[   96.235890][ T4667] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.266: corrupted inode contents
[   96.283869][ T4667] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #2: comm syz.1.266: mark_inode_dirty error
[   96.419908][ T4667] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.266: corrupted inode contents
[   96.489791][ T4667] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.266: mark_inode_dirty error
[   96.538638][ T4673] bond2: (slave ip6gretap0): Enslaving as a backup interface with an up link
[   96.585858][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.707598][ T4686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'.
[   96.930787][ T4698] loop0: detected capacity change from 0 to 2048
[   96.945755][ T4698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.982461][ T4698] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.158564][ T4698] netlink: 40 bytes leftover after parsing attributes in process `syz.0.278'.
[   98.668615][   T28] audit: type=1400 audit(1774086624.283:361): avc:  denied  { getopt } for  pid=4712 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   99.137581][ T3748] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:15: bg 0: block 345: padding at end of block bitmap is not set
[   99.173736][ T3748] EXT4-fs (loop0): Remounting filesystem read-only
[   99.219330][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.418507][   T28] audit: type=1400 audit(1774086625.033:362): avc:  denied  { mount } for  pid=4740 comm="syz.1.292" name="/" dev="ramfs" ino=7713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   99.454906][ T4741] loop0: detected capacity change from 0 to 1024
[   99.472859][ T4741] EXT4-fs: Ignoring removed nobh option
[   99.485458][ T4741] EXT4-fs: Ignoring removed orlov option
[   99.495197][   T28] audit: type=1400 audit(1774086625.113:363): avc:  denied  { create } for  pid=4745 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   99.517533][   T28] audit: type=1326 audit(1774086625.133:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.3.293" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa81032c799 code=0x0
[   99.540521][ T4741] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[   99.593264][ T4741] loop0: detected capacity change from 0 to 736
[   99.605967][ T4741] iso9660: Unknown parameter 'íâå…â\éb)ÿ¯´
[   99.605967][ T4741] '
[   99.629697][   T28] audit: type=1400 audit(1774086625.243:365): avc:  denied  { write } for  pid=4745 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[   99.731987][   T28] audit: type=1400 audit(1774086625.273:366): avc:  denied  { connect } for  pid=4739 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   99.768719][   T28] audit: type=1400 audit(1774086625.273:367): avc:  denied  { read } for  pid=4739 comm="syz.0.291" path="socket:[8480]" dev="sockfs" ino=8480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   99.812123][ T4752] netlink: 'syz.0.294': attribute type 16 has an invalid length.
[   99.829036][ T4752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'.
[   99.998340][ T4755] Process accounting resumed
[  100.115607][ T4769] loop4: detected capacity change from 0 to 1764
[  100.505599][   T28] kauditd_printk_skb: 72 callbacks suppressed
[  100.505613][   T28] audit: type=1400 audit(1774086626.123:440): avc:  denied  { setopt } for  pid=4774 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  100.694927][ T4775] loop3: detected capacity change from 0 to 512
[  100.787338][   T28] audit: type=1400 audit(1774086626.283:441): avc:  denied  { create } for  pid=4774 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  100.839619][ T4775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  100.872571][   T28] audit: type=1400 audit(1774086626.283:442): avc:  denied  { ioctl } for  pid=4774 comm="syz.3.302" path="socket:[7805]" dev="sockfs" ino=7805 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  100.902704][ T4764] delete_channel: no stack
[  100.922508][ T4775] ext4 filesystem being mounted at /60/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.934816][ T4783] 9p: Bad value for 'wfdno'
[  101.009564][   T28] audit: type=1400 audit(1774086626.283:443): avc:  denied  { ioctl } for  pid=4774 comm="syz.3.302" path="socket:[7801]" dev="sockfs" ino=7801 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  101.070836][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  101.096844][   T28] audit: type=1400 audit(1774086626.483:444): avc:  denied  { read } for  pid=4780 comm="syz.0.303" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  101.150257][   T28] audit: type=1400 audit(1774086626.483:445): avc:  denied  { open } for  pid=4780 comm="syz.0.303" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  101.317231][   T28] audit: type=1400 audit(1774086626.553:446): avc:  denied  { accept } for  pid=4780 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  101.339519][ T4800] loop0: detected capacity change from 0 to 512
[  101.393154][ T4800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.432522][   T28] audit: type=1400 audit(1774086626.583:447): avc:  denied  { append } for  pid=4774 comm="syz.3.302" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  101.462591][ T4800] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  101.504165][ T4800] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.309: corrupted inode contents
[  101.522440][   T28] audit: type=1400 audit(1774086626.593:448): avc:  denied  { bind } for  pid=4774 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  101.555106][ T4800] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #2: comm syz.0.309: mark_inode_dirty error
[  101.598084][ T4800] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #2: comm syz.0.309: corrupted inode contents
[  101.610101][   T28] audit: type=1400 audit(1774086626.603:449): avc:  denied  { write } for  pid=4774 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  101.659407][ T4800] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.309: mark_inode_dirty error
[  101.696593][ T4800] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #2: comm syz.0.309: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18]
[  101.696593][ T4800] 
[  101.814604][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.890695][ T4812] loop3: detected capacity change from 0 to 1024
[  101.900877][ T4812] EXT4-fs: Ignoring removed orlov option
[  101.932048][ T4815] vlan3: entered promiscuous mode
[  101.937416][ T4815] vlan3: entered allmulticast mode
[  101.943080][ T4815] hsr_slave_1: entered allmulticast mode
[  101.986009][ T4812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.033263][ T4819] loop0: detected capacity change from 0 to 128
[  102.060704][ T4820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.312'.
[  102.480713][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.525545][ T4823] vlan2: entered promiscuous mode
[  102.530711][ T4823] bridge0: entered promiscuous mode
[  102.658791][ T4833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'.
[  102.673121][ T4833] bridge_slave_1: left allmulticast mode
[  102.680242][ T4833] bridge_slave_1: left promiscuous mode
[  102.686258][ T4833] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.694399][ T4833] bridge_slave_0: left allmulticast mode
[  102.700133][ T4833] bridge_slave_0: left promiscuous mode
[  102.707083][ T4833] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.789269][ T4839] loop0: detected capacity change from 0 to 1024
[  102.849622][ T4841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.320'.
[  102.883826][ T4839] EXT4-fs: Ignoring removed nobh option
[  102.919605][ T4839] EXT4-fs: Ignoring removed orlov option
[  102.934118][ T4839] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[  102.975870][ T4839] loop0: detected capacity change from 0 to 736
[  103.015066][ T4839] iso9660: Unknown parameter 'íâå…â\éb)ÿ¯´
[  103.015066][ T4839] '
[  103.172588][ T4837] loop2: detected capacity change from 0 to 8192
[  104.323860][ T4869] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  104.426053][ T4872] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  104.449786][   T23] hid-generic 0009:0004:FFFFFFFE.0001: unknown main item tag 0x0
[  104.489836][ T4868] syz.0.331 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  104.500802][   T23] hid-generic 0009:0004:FFFFFFFE.0001: unknown main item tag 0x0
[  104.508605][   T23] hid-generic 0009:0004:FFFFFFFE.0001: unknown main item tag 0x0
[  104.516417][ T4868] CPU: 1 UID: 0 PID: 4868 Comm: syz.0.331 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  104.516463][ T4868] Tainted: [W]=WARN
[  104.516470][ T4868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  104.516482][ T4868] Call Trace:
[  104.516488][ T4868]  <TASK>
[  104.516503][ T4868]  __dump_stack+0x1d/0x30
[  104.516577][ T4868]  dump_stack_lvl+0x95/0xd0
[  104.516612][ T4868]  dump_stack+0x15/0x1b
[  104.516641][ T4868]  dump_header+0x80/0x240
[  104.516680][ T4868]  oom_kill_process+0x295/0x350
[  104.516703][ T4868]  out_of_memory+0x97d/0xb80
[  104.516725][ T4868]  try_charge_memcg+0x62e/0xa10
[  104.516777][ T4868]  mem_cgroup_swapin_charge_folio+0x103/0x1f0
[  104.516884][ T4868]  __swap_cache_prepare_and_add+0x386/0x530
[  104.516930][ T4868]  swap_cache_alloc_folio+0xa2/0x120
[  104.517017][ T4868]  swap_cluster_readahead+0x26e/0x3d0
[  104.517062][ T4868]  swapin_readahead+0xde/0x840
[  104.517127][ T4868]  ? _raw_spin_unlock+0x9/0x30
[  104.517160][ T4868]  ? swap_put_entries_cluster+0x385/0x3a0
[  104.517267][ T4868]  ? swap_put_entries_cluster+0x131/0x3a0
[  104.517297][ T4868]  ? __rcu_read_unlock+0x4e/0x70
[  104.517317][ T4868]  ? swap_cache_get_folio+0x26f/0x280
[  104.517392][ T4868]  do_swap_page+0x30d/0x2220
[  104.517431][ T4868]  ? css_rstat_updated+0xbb/0x280
[  104.517480][ T4868]  ? __rcu_read_lock+0x36/0x50
[  104.517499][ T4868]  ? pte_offset_map_rw_nolock+0x19e/0x200
[  104.517529][ T4868]  handle_mm_fault+0xb46/0x3020
[  104.517569][ T4868]  ? vma_start_read+0x1c7/0x2c0
[  104.517612][ T4868]  do_user_addr_fault+0x62f/0x1050
[  104.517729][ T4868]  ? fpregs_assert_state_consistent+0xb3/0xe0
[  104.517766][ T4868]  ? arch_exit_to_user_mode_prepare+0x26/0x80
[  104.517836][ T4868]  ? trace_page_fault_user+0x1f/0xe0
[  104.517878][ T4868]  exc_page_fault+0x62/0xa0
[  104.517918][ T4868]  asm_exc_page_fault+0x26/0x30
[  104.518017][ T4868] RIP: 0033:0x7fb08a45d2b6
[  104.518061][ T4868] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b
[  104.518084][ T4868] RSP: 002b:00007ffea65dcbc0 EFLAGS: 00010246
[  104.518104][ T4868] RAX: 0000000000019807 RBX: 00007fb08a6d5fa0 RCX: 0000000000019640
[  104.518121][ T4868] RDX: 00000000000001c7 RSI: 0000000000000000 RDI: 00000000000003e8
[  104.518138][ T4868] RBP: 00007fb08a6d7da0 R08: 000000001b2481c4 R09: 7fffffffffffffff
[  104.518154][ T4868] R10: 3fffffffffffffff R11: 0000000000000246 R12: 0000000000019aa4
[  104.518168][ T4868] R13: 00007fb08a6d609c R14: 00000000000197e8 R15: 00007fb08a6d6090
[  104.518235][ T4868]  </TASK>
[  104.518242][ T4868] memory: usage 307200kB, limit 307200kB, failcnt 1231
[  104.778071][   T23] hid-generic 0009:0004:FFFFFFFE.0001: unknown main item tag 0x0
[  104.786063][   T23] hid-generic 0009:0004:FFFFFFFE.0001: unknown main item tag 0x0
[  104.794143][   T23] hid-generic 0009:0004:FFFFFFFE.0001: unknown main item tag 0x0
[  104.801910][   T23] hid-generic 0009:0004:FFFFFFFE.0001: unknown main item tag 0x0
[  104.809717][   T23] hid-generic 0009:0004:FFFFFFFE.0001: unknown main item tag 0x0
[  104.817522][   T23] hid-generic 0009:0004:FFFFFFFE.0001: unknown main item tag 0x0
[  104.825315][   T23] hid-generic 0009:0004:FFFFFFFE.0001: unknown main item tag 0x0
[  104.843195][   T23] hid-generic 0009:0004:FFFFFFFE.0001: hidraw0: <UNKNOWN> HID v0.0a Device [syz1] on syz0
[  104.854031][ T4868] memory+swap: usage 266964kB, limit 9007199254740988kB, failcnt 0
[  104.861955][ T4868] kmem: usage 265644kB, limit 9007199254740988kB, failcnt 0
[  104.899527][ T4868] Memory cgroup stats for /syz0:
[  104.899803][ T4868] cache 524288
[  104.932735][ T4868] rss 4096
[  104.935808][ T4868] shmem 0
[  104.938799][ T4868] mapped_file 65536
[  104.952922][ T4881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.334'.
[  104.965863][ T4868] dirty 0
[  104.972494][ T4868] writeback 4096
[  104.981374][ T4868] workingset_refault_anon 768
[  104.996369][ T4868] workingset_refault_file 3084
[  105.027851][ T4868] swap 589824
[  105.052457][ T4868] swapcached 8757248
[  105.066619][ T4868] pgpgin 57037
[  105.070035][ T4868] pgpgout 56904
[  105.086778][ T4887] set_capacity_and_notify: 1 callbacks suppressed
[  105.086795][ T4887] loop4: detected capacity change from 0 to 512
[  105.120664][ T4886] loop3: detected capacity change from 0 to 8192
[  105.130190][ T4890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'.
[  105.132531][ T4868] pgfault 65930
[  105.152878][ T4868] pgmajfault 176
[  105.156464][ T4868] inactive_anon 4096
[  105.160383][ T4868] active_anon 12288
[  105.172442][ T4868] inactive_file 0
[  105.176157][ T4868] active_file 528384
[  105.180125][ T4868] unevictable 0
[  105.184150][ T4887] EXT4-fs (loop4): 1 orphan inode deleted
[  105.190200][ T4887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.253935][ T4868] hierarchical_memory_limit 314572800
[  105.259366][ T4868] hierarchical_memsw_limit 9223372036854771712
[  105.330054][ T4868] total_cache 524288
[  105.337073][ T4883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.336'.
[  105.356461][ T4868] total_rss 4096
[  105.360039][ T4868] total_shmem 0
[  105.379480][ T4883] syzkaller1: entered promiscuous mode
[  105.389575][ T4868] total_mapped_file 65536
[  105.394521][ T4883] syzkaller1: entered allmulticast mode
[  105.404483][ T4868] total_dirty 0
[  105.418117][ T4868] total_writeback 4096
[  105.423565][ T4868] total_workingset_refault_anon 768
[  105.475278][ T4868] total_workingset_refault_file 3084
[  105.480860][ T4868] total_swap 589824
[  105.506333][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.522605][ T4868] total_swapcached 8757248
[  105.527407][ T4868] total_pgpgin 57037
[  105.531362][ T4868] total_pgpgout 56904
[  105.579667][ T4897] netlink: 'syz.4.341': attribute type 1 has an invalid length.
[  105.584210][ T4868] total_pgfault 65930
[  105.604691][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  105.604707][   T28] audit: type=1400 audit(1774086631.223:453): avc:  denied  { create } for  pid=4898 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1
[  105.632626][ T4868] total_pgmajfault 176
[  105.650681][ T4868] total_inactive_anon 4096
[  105.694397][ T4868] total_active_anon 12288
[  105.702915][ T4868] total_inactive_file 0
[  105.707109][ T4868] total_active_file 528384
[  105.771510][ T4868] total_unevictable 0
[  105.785934][ T4868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.331,pid=4868,uid=0
[  105.829070][ T4868] Memory cgroup out of memory: Killed process 4868 (syz.0.331) total-vm:94164kB, anon-rss:1232kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000
[  107.086623][   T28] audit: type=1400 audit(1774086632.703:454): avc:  denied  { read } for  pid=4929 comm="syz.2.354" name="file0" dev="tmpfs" ino=435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  107.265961][   T28] audit: type=1400 audit(1774086632.733:455): avc:  denied  { open } for  pid=4929 comm="syz.2.354" path="/78/file0" dev="tmpfs" ino=435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  107.396224][   T28] audit: type=1400 audit(1774086632.733:456): avc:  denied  { map } for  pid=4929 comm="syz.2.354" path="/78/file0" dev="tmpfs" ino=435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  107.418729][   T28] audit: type=1400 audit(1774086632.883:457): avc:  denied  { connect } for  pid=4936 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  107.438616][   T28] audit: type=1400 audit(1774086632.883:458): avc:  denied  { connect } for  pid=4936 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  107.458340][   T28] audit: type=1404 audit(1774086632.883:459): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  107.473389][   T28] audit: type=1400 audit(1774086632.953:460): avc:  denied  { read write } for  pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  107.497568][   T28] audit: type=1400 audit(1774086632.983:461): avc:  denied  { prog_load } for  pid=4936 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0
[  107.546718][   T28] audit: type=1400 audit(1774086632.983:462): avc:  denied  { create } for  pid=4936 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=0
[  109.182145][   T58] syzkaller0: tun_net_xmit 76
[  109.195943][   T58] syzkaller0: tun_net_xmit 48
[  109.202630][ T3415] syzkaller0: tun_net_xmit 76
[  109.270559][ T4995] ip6erspan0: entered promiscuous mode
[  109.292578][ T3408] syzkaller0: tun_net_xmit 76
[  109.598701][ T5008] Cannot find add_set index 0 as target
[  109.612676][ T3415] syzkaller0: tun_net_xmit 76
[  110.167754][ T5035] netlink: 'syz.0.393': attribute type 1 has an invalid length.
[  110.233023][ T5035] 8021q: adding VLAN 0 to HW filter on device bond3
[  110.334181][ T5042] bridge: RTM_NEWNEIGH with invalid state 0x0
[  110.613303][   T28] kauditd_printk_skb: 293 callbacks suppressed
[  110.613321][   T28] audit: type=1400 audit(1774086636.233:756): avc:  denied  { write } for  pid=5067 comm="syz.3.407" name="ip_tables_targets" dev="proc" ino=4026532933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0
[  110.647703][   T28] audit: type=1400 audit(1774086636.233:757): avc:  denied  { read write } for  pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0
[  110.672352][   T28] audit: type=1400 audit(1774086636.233:758): avc:  denied  { open } for  pid=5069 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[  110.693499][   T28] audit: type=1400 audit(1774086636.233:759): avc:  denied  { open } for  pid=5069 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0
[  110.712761][   T28] audit: type=1400 audit(1774086636.233:760): avc:  denied  { create } for  pid=5069 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  110.733330][   T28] audit: type=1400 audit(1774086636.233:761): avc:  denied  { read write } for  pid=5069 comm="syz.1.408" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0
[  110.757400][   T28] audit: type=1400 audit(1774086636.263:762): avc:  denied  { create } for  pid=5067 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0
[  110.777887][   T28] audit: type=1400 audit(1774086636.263:763): avc:  denied  { create } for  pid=5067 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0
[  110.799669][   T28] audit: type=1400 audit(1774086636.263:764): avc:  denied  { read } for  pid=5067 comm="syz.3.407" dev="nsfs" ino=4026532838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0
[  110.822328][   T28] audit: type=1400 audit(1774086636.263:765): avc:  denied  { create } for  pid=5067 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0
[  111.171550][ T5091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'.
[  111.545229][ T5102] net_ratelimit: 10 callbacks suppressed
[  111.545247][ T5102] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  112.102708][ T5121] x_tables: duplicate underflow at hook 2
[  112.349609][ T5141] ==================================================================
[  112.357739][ T5141] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace
[  112.365057][ T5141] 
[  112.367396][ T5141] write to 0xffff88810481f600 of 8 bytes by task 5142 on cpu 0:
[  112.375049][ T5141]  mas_wmb_replace+0x919/0x1610
[  112.379944][ T5141]  mas_wr_store_entry+0x16b6/0x2ed0
[  112.385171][ T5141]  mas_store_prealloc+0x72e/0xa70
[  112.390228][ T5141]  vma_complete+0x3c7/0x850
[  112.394774][ T5141]  __split_vma+0x593/0x640
[  112.399213][ T5141]  vms_gather_munmap_vmas+0x184/0x850
[  112.404635][ T5141]  do_vmi_align_munmap+0x1e1/0x400
[  112.409791][ T5141]  do_vmi_munmap+0x1da/0x220
[  112.414427][ T5141]  do_munmap+0x8d/0xc0
[  112.418538][ T5141]  mremap_to+0x1a3/0x440
[  112.422797][ T5141]  __se_sys_mremap+0x667/0xb50
[  112.427596][ T5141]  __x64_sys_mremap+0x67/0x80
[  112.432304][ T5141]  x64_sys_call+0x29db/0x3020
[  112.437024][ T5141]  do_syscall_64+0x12c/0x370
[  112.441641][ T5141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.447568][ T5141] 
[  112.449908][ T5141] read to 0xffff88810481f600 of 8 bytes by task 5141 on cpu 1:
[  112.457472][ T5141]  mas_state_walk+0x485/0x650
[  112.462183][ T5141]  mas_walk+0x60/0x150
[  112.466281][ T5141]  lock_vma_under_rcu+0xc9/0x210
[  112.471250][ T5141]  do_user_addr_fault+0x232/0x1050
[  112.476496][ T5141]  exc_page_fault+0x62/0xa0
[  112.481166][ T5141]  asm_exc_page_fault+0x26/0x30
[  112.486135][ T5141] 
[  112.488480][ T5141] value changed: 0xffff88810481fb16 -> 0xffff888104e20716
[  112.495623][ T5141] 
[  112.498053][ T5141] Reported by Kernel Concurrency Sanitizer on:
[  112.504316][ T5141] CPU: 1 UID: 0 PID: 5141 Comm: syz.0.437 Tainted: G        W           syzkaller #0 PREEMPT(full) 
[  112.515110][ T5141] Tainted: [W]=WARN
[  112.518950][ T5141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  112.529204][ T5141] ==================================================================