last executing test programs: 9.212419847s ago: executing program 3 (id=2537): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) set_mempolicy(0x3, &(0x7f0000000080)=0x1, 0x4) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000740)={0x0, 0xef, "f0171212b13db6018eb40f1ccad097aff66eb6a3744113bc03b9d0471d6ee1cf74000f7beeacfa489d2e2bd881010e1778cf6b4374425a549ce3e59a4d9838ad573f30ba8a0dd0f751effc166c54c407bd03261965c65f9bfa5f7327dadd3d7a761872d33acaf75b90f5364bf507cc17ee2757060270a50348b1f24d04a0751fea7397b822cb56cd6e109d0be542343a1bad8b502d5dba3917cf55815adf42396a9b0e6eb765a682d7916e4b22061c30502558c409f5b96173c790e60d2040fda6d006356ae9a002e2d26b1005bbe34eafd6134ce4df9ff70a623f1be95b9c3b69ae77d78c27d595fa5ada8c7ee6c8"}, &(0x7f0000000100)=0xfe14) socket$kcm(0x10, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYRES16=r4, @ANYBLOB="01000087eeb95c3854b09e9b8371a65982e78544047d346cf5c1579110bb87ec1ce679fd755b03d40a266844d87d32d7bec770026bd4c0b0d6eb4cc2bb80425a828369913c1307f84a2cd2c190ec35e37546"], 0x14}, 0x1, 0x0, 0x0, 0x40888}, 0x20000810) sendfile(r3, r3, 0x0, 0xb) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x82d7) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0500000003"], 0x48}}, 0x0) close(0xffffffffffffffff) socket(0x10, 0x803, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x6b, 0x66, 0x66, 0x31, 0x65, 0x39, 0x30, 0x62, 0x33, 0x62, 0x62, 0x61, 0x3a, 0x38, 0x62]}, &(0x7f0000000280)={0x0, "02802b06cb753e36a42414a4cb9f432da0932a47c390b0d7d234f0af8770c83068309db4f2270a7db01b6653a5c3eaba703f8dc853de176b3c6837c8d8841c93", 0x40}, 0x48, 0xfffffffffffffffc) socket(0x10, 0x2, 0x0) fsopen(&(0x7f0000000000)='devpts\x00', 0x0) request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)='-&)(-.,\x00', r7) keyctl$restrict_keyring(0x3, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0x0) 8.895042217s ago: executing program 3 (id=2540): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_io_uring_setup(0xc6d, 0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(r5, 0x3516, 0xa00100, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000056f000/0x2000)=nil, 0x2000, 0x1000001, 0x100010, r6, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f, 0x5f]}}, 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000006009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 7.06707762s ago: executing program 4 (id=2568): io_submit(0x0, 0xacc19793906f1f9c, &(0x7f0000000340)) 7.06228376s ago: executing program 4 (id=2569): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x3003, 0x0, 0x2, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 5.643382128s ago: executing program 2 (id=2579): io_submit(0x0, 0xacc19793906f1f9c, &(0x7f0000000340)) 5.638990768s ago: executing program 2 (id=2580): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0xffffffffffffffe6}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cgroup.max.descendants\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x8, 0xa8, {}, 0x2000000000001005, 0x6}}}, 0xfc36) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) 5.136552695s ago: executing program 3 (id=2584): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}]) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4522f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) 4.677610181s ago: executing program 3 (id=2586): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$kcm(0x2, 0x200000000000001, 0x106) socket$rds(0x15, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1000000000000, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r2 = dup2(r0, r1) close_range(r2, 0xffffffffffffffff, 0x0) 4.531346546s ago: executing program 0 (id=2588): r0 = socket(0x10, 0x3, 0x9) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) 4.530745236s ago: executing program 0 (id=2589): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$eJzs3T9PA2UcB/DfldIWHdrByZB4iQxOBFhdSgwkRiZNB3VQI5AY2phAQuKfWJlcXRx9BSYmbr4JF9+BiauJmwwkZ653Rwu0hRoKGj+fAR6ee77P/e7yFErIPXy4Pjg5TOP44svfotVKotaNtbhMohO1qHwdN3S/DQDgv+wyy+LPrLBILomI1vLKAgCWaObP/5UZgZ+epCwAYIneefe9t3YPDvbeTtNW7A++Oe/lv9nnn4vju8fxSfTjKLaiHVcRWaX6+0CWZcN6mqZp1o4YDM97eXLwwS/l/Lt/RIzy29GOTpUo3m3kH/ffPNjbTguxcZ0f5nW8UJ6/m+d3oh0vTZx/Ir8zJR+9Rrz26kT9m9GOXz+OT6Mfh6MixvmvttP0jey7v754Py8vzyfD815zNG4sm/WOCAAAAAAAAAAAAAAAAAAAAAAAFrZZ7p3TjLQTG4O8q9x/Z+Uq/2I10krn5v48Rb5ZTXRrf6BhFt9X++tspWmaJcWwcb4eL9ej/jxXDQAAAAAAAAAAAAAAAAAAAP8uZ599fvJRv390+iiN8iH/68f6/+k83YmeV2L+4Ob4XLWyOWfmWKnGJBF5TzLrJuQX8Ui35b7G2qyaf/hx0Qlb949ZnXd/HqdRra789k4d04yqp1Utkp8nxzTigedqzDq0XpbwsHkaUw+1F772xoujxnDOmEjmvS5e/70ou+xJbr+IGqO7OjW+Wjbieo3fXhsLree73ysSu3UAAAAAAAAAAAAAAAAAAMBSjR/6vXOoHhdzo7WsucTCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAJjf///+xGPSJu9AzL8NxU0WjE6dkzXyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/A38HAAD//zY6VNc=") pipe2$watch_queue(0x0, 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf251e00000028002f80040002000202aaaaaa00aaaa18000380040003800800040001000000080001000000000008000300", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000084) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) close(r5) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r6, &(0x7f0000000900)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) write$sndseq(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x40, 0x8}, 0x0, 0x0, &(0x7f0000000000)) mbind(&(0x7f0000982000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x2) 4.189029948s ago: executing program 0 (id=2590): io_submit(0x0, 0xacc19793906f1f9c, &(0x7f0000000340)) 4.12016676s ago: executing program 0 (id=2591): r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='3', 0x1, 0x4fed0) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 3.690517354s ago: executing program 2 (id=2592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000002000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) 3.690059684s ago: executing program 3 (id=2593): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r1, 0x0, 0x0) (async) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466ccfff57a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRES16=r2, @ANYRES8=r0, @ANYRESHEX=r0], 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000000040)=@udp=r4}, 0x20) (async) socket$inet_mptcp(0x2, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711242000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x8) r6 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x0) (async) socket(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="060000000400", @ANYRESHEX=r8, @ANYRES16=r5], 0x48) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r9, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 3.639285426s ago: executing program 4 (id=2594): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x1, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c00400000000000000d0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000005007b9a00fe00000000b6090000002000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff750000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056000000a80000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.629971116s ago: executing program 3 (id=2595): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_io_uring_setup(0xc6d, 0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(r5, 0x3516, 0xa00100, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000056f000/0x2000)=nil, 0x2000, 0x1000001, 0x100010, r6, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f, 0x5f]}}, 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000009009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 3.617808077s ago: executing program 2 (id=2596): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000180)=0xc) r2 = socket(0x22, 0x2, 0x2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(r1, r3, 0x0) fchown(0xffffffffffffffff, r1, 0x0) 3.515249801s ago: executing program 2 (id=2597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0xffffe000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file1\x00', 0x1008090, &(0x7f0000000100)={[{@nodots}, {@dots}, {@fat=@nfs}, {@fat=@uid}, {@dots}, {@dots}]}, 0x1, 0x11c3, &(0x7f0000001240)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x0, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) bind$inet(r3, &(0x7f0000019080)={0x2, 0x4e22, @loopback}, 0x10) 3.430222073s ago: executing program 0 (id=2598): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x700, 0x40, 0xfffffffe, 0x40, {{0xb, 0x4, 0x1, 0x24, 0x2c, 0x65, 0x0, 0x1, 0x4, 0x0, @multicast1, @empty, {[@lsrr={0x83, 0x7, 0x61, [@local]}, @cipso={0x86, 0x11, 0x3, [{0x5, 0xb, "af3edb503f654a03ee"}]}]}}}}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x400}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040044}, 0x24040070) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="700000006d0000012dbd7000fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="0045040000010000080025000200000008002800f8ffffff08001f000100000008000ac261fb30643b8400", @ANYRES32=r4, @ANYBLOB="0a000100aaaaaaaaaaaa000008001d004002000008002c00020000001400140076657468315f746f5f62617461647600"], 0x70}}, 0x20000001) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x1000, 0x0) write$binfmt_misc(r8, &(0x7f00000000c0), 0xfdef) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0d030000000000000000130000000c000980080002000000c9"], 0x20}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r11, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000f40)=ANY=[@ANYBLOB="7400b04974af2188935775f587b18e226ce581fb891d405769ee6a23ce0496840200a1f5721596da45b92dc5516a6a691f55649a1c52f7e62eeb7fc1a1e371516510dc19cae0e6ae0c8a0ad43310d665e29343dfcdb80c7f91a9a0aa008ca0add6e08e1bb2ea8939c496791787b8094045b064805d8c8112b6abd9b8958f43518b71761b6115ee62fc3d1eec527dc187430bbc668a4347e2b0dc3d86fb05ac0c9cb03acaee913296432481ae96597dc5cf3867bb5764b6879c145e0a5b9b840a5a589fbfcb15904b10", @ANYRES16=r12, @ANYBLOB="000128bd7000fcdbdf25060000001c0003800800010004000000080001000300000008000200000000800c0007800800020008000000380001802400028008000200df0c00000800010017000000080001001f00000008000400000000000d0001007564703a73797a3200000000"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba000000f9ffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="80000200c988000008001b00"], 0x28}}, 0x800) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') readv(r13, &(0x7f0000000300)=[{&(0x7f0000000080)=""/146, 0x92}, {0x0}], 0x2) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2a, 0x1, 0x8, 0x0, 0x0, 0x4007, 0x80590, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ac60000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 3.23666298s ago: executing program 2 (id=2599): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000"], 0x0, 0x56, 0x0, 0x0, 0x400}, 0x28) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000840)={0x4, 0xf, 0x2, 0xfff2, 0x0, 0x3, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffffff, 0x0, 0x400, 0x404, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', r1, r2, 0x1000) setregid(0x0, r2) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd657ad6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r5 = syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x11, 0x1, 0x0, 0x40, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000001380), 0xc}, 0x18897, 0x10000, 0x8, 0x1, 0x80d, 0x2020005, 0xb, 0x0, 0x80000000, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) read$ptp(r5, &(0x7f0000000580)=""/215, 0xd7) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000011c0)=ANY=[@ANYBLOB="05000000000000006b113c00000000008510000002000000850000007600006095000000000000009500a5050000000087b2b5bcf2370eb92158180d0a3e3d63974a0f4636522e68e16a5bdb7e9f4b5b2db785edaa44176e1155aa453ac919b905e1460bfbeef46c71719b8351359dc409b77cf9c9c7a9fa8c3d1436d1349491a563857bdc84b792c9da39d018f44f1423dde63e6522690ec1b26ab6893ae4f24894d75189820b2703551d3402a783ce509ea4923830b5f773858e4e81d16563dd859bc342f1967bce71945b91d9e6fc"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_read_part_table(0x1056, &(0x7f0000000000)="$eJzsz82JAkEUBODqnd35WS+GoKHMWa+eTMIcjEVBEzMKUZRxxABEhO87dDd0UY8XPqoMV5V0yaXs/59/vyVV8xqvHo/FeVOnZDavt/1P0g5NfTdG17djWXLo65TpX9PeJ+S0GzsmWR3fuRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfItrAAAA//82awlP") socket$nl_netfilter(0x10, 0x3, 0xc) 3.027181657s ago: executing program 1 (id=2600): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x11, 0x0, 0xf, 0x0, 0x0, 0x0) shmget(0x3, 0x14000, 0x1000, &(0x7f0000371000/0x14000)=nil) (async) shmget(0x3, 0x14000, 0x1000, &(0x7f0000371000/0x14000)=nil) mmap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x3000001, 0x11, r1, 0x0) add_key$keyring(&(0x7f00000101c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) (async) add_key$keyring(&(0x7f00000101c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0x60}], 0x1, 0x2000, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000001180)=ANY=[], 0x1, 0xa08, &(0x7f0000008280)="$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") r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x4, 0x7ffc0001}]}) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r3, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.671631229s ago: executing program 4 (id=2601): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x4}, 0x11111a, 0x3, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x100001}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0xacc19793906f1f9c, &(0x7f0000000340)) 2.453636026s ago: executing program 4 (id=2602): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x7, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x18, 0x0, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x40004, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000006f40), 0x2002, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000e00)=@nat={'nat\x00', 0x1b, 0x5, 0x380, 0xb8, 0xb8, 0xffffffff, 0xb8, 0x0, 0x360, 0x360, 0xffffffff, 0x360, 0x360, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @local, 0x0, 0xff, 'gre0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x67, 0x3, 0xaa}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv4=@local, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @gre_key=0x400, @gre_key=0x10}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff, 0xffffff00, 'veth0_to_hsr\x00', 'pimreg0\x00', {}, {}, 0x6, 0x1, 0x40}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xc, @rand_addr=0x64010102, @empty, @icmp_id=0x68, @gre_key=0x10}}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff000000, 0xffffff00, 'veth1_virt_wifi\x00', 'ipvlan0\x00', {0xff}, {}, 0xff, 0x0, 0x40}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, 0x7, 0x9, [0x3d, 0x1c, 0x35, 0x1, 0x37, 0x40, 0x1, 0x3, 0x31, 0x3e, 0xf, 0x2c, 0x26, 0x2, 0x25, 0x1b], 0x1, 0x625, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@private1, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @gre_key=0x8, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 1.77519396s ago: executing program 4 (id=2603): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0xffffffffffffffe6}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cgroup.max.descendants\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x8, 0xa8, {}, 0x2000000000001005, 0x6}}}, 0xfc36) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) 1.398303222s ago: executing program 1 (id=2604): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x3003, 0x0, 0x2, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 556.257381ms ago: executing program 1 (id=2605): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$kcm(0x2, 0x200000000000001, 0x106) socket$rds(0x15, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000000, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r2 = dup2(r0, r1) close_range(r2, 0xffffffffffffffff, 0x0) 419.148285ms ago: executing program 1 (id=2606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000002000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) 358.613587ms ago: executing program 1 (id=2607): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000180)) r2 = socket(0x22, 0x2, 0x2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r3, 0x0) fchown(r0, 0x0, 0x0) 303.54219ms ago: executing program 1 (id=2608): quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000000380)={0x228, 0x8000000000000001, 0x0, 0x7}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 0s ago: executing program 0 (id=2609): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0x230}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r2}) kernel console output (not intermixed with test programs): process `syz.2.1899'. [ 231.178230][T10013] netlink: 'syz.2.1899': attribute type 7 has an invalid length. [ 231.214683][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.227070][T10013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1899'. [ 231.246550][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'. [ 231.265670][T10013] netlink: 'syz.2.1899': attribute type 7 has an invalid length. [ 231.427235][T10003] loop4: detected capacity change from 0 to 1024 [ 232.611136][T10020] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1902'. [ 232.620239][T10020] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1902'. [ 232.629518][T10020] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1902'. [ 232.638529][T10020] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1902'. [ 232.663817][T10022] loop3: detected capacity change from 0 to 1024 [ 232.683943][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 232.683971][ T28] audit: type=1400 audit(2000000127.483:4530): avc: denied { mount } for pid=10017 comm="syz.2.1902" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 232.827293][T10022] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 233.044919][T10022] EXT4-fs (loop3): group descriptors corrupted! [ 233.056120][ T28] audit: type=1400 audit(2000000127.483:4531): avc: denied { read write } for pid=10017 comm="syz.2.1902" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 233.095584][ T28] audit: type=1400 audit(2000000127.483:4532): avc: denied { open } for pid=10017 comm="syz.2.1902" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 233.202322][T10003] netlink: 'syz.4.1897': attribute type 6 has an invalid length. [ 233.261914][ T28] audit: type=1400 audit(2000000127.923:4533): avc: denied { map_create } for pid=10028 comm="syz.0.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 233.363704][ T28] audit: type=1400 audit(2000000127.923:4534): avc: denied { map_read map_write } for pid=10028 comm="syz.0.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 233.448326][ T28] audit: type=1400 audit(2000000128.033:4535): avc: denied { write } for pid=9998 comm="syz.4.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 233.533643][ T28] audit: type=1400 audit(2000000128.073:4536): avc: denied { create } for pid=10031 comm="syz.0.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 233.611792][ T28] audit: type=1400 audit(2000000128.073:4537): avc: denied { setopt } for pid=10031 comm="syz.0.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 233.691425][ T28] audit: type=1400 audit(2000000128.073:4538): avc: denied { read } for pid=10031 comm="syz.0.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 233.783639][ T28] audit: type=1400 audit(2000000128.123:4539): avc: denied { write } for pid=10031 comm="syz.0.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 234.973095][T10052] loop0: detected capacity change from 0 to 256 [ 235.154543][T10052] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.363093][T10065] __nla_validate_parse: 27 callbacks suppressed [ 235.363124][T10065] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1916'. [ 236.063629][T10077] 9p: Bad value for 'source' [ 236.907802][T10113] bond0: entered promiscuous mode [ 237.002225][T10114] loop3: detected capacity change from 0 to 1024 [ 237.018103][T10114] EXT4-fs: inline encryption not supported [ 237.036385][T10114] EXT4-fs: Ignoring removed nobh option [ 237.070097][T10114] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 237.086729][T10114] System zones: 0-1, 3-12 [ 237.098112][T10114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.722020][T10112] bond0: left promiscuous mode [ 237.726912][ T28] kauditd_printk_skb: 108 callbacks suppressed [ 237.726950][ T28] audit: type=1326 audit(2000000132.553:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.3.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40845bc819 code=0x7ffc0000 [ 237.783400][ T28] audit: type=1326 audit(2000000132.593:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10112 comm="syz.3.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40845bc819 code=0x7ffc0000 [ 237.826938][ T28] audit: type=1400 audit(2000000132.663:4650): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 237.857519][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.905372][T10126] FAULT_INJECTION: forcing a failure. [ 237.905372][T10126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.918727][T10126] CPU: 0 UID: 0 PID: 10126 Comm: syz.3.1934 Tainted: G W syzkaller #0 PREEMPT(full) [ 237.918765][T10126] Tainted: [W]=WARN [ 237.918842][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 237.918856][T10126] Call Trace: [ 237.918863][T10126] [ 237.918871][T10126] __dump_stack+0x1d/0x30 [ 237.918980][T10126] dump_stack_lvl+0x95/0xd0 [ 237.919007][T10126] dump_stack+0x15/0x1b [ 237.919030][T10126] should_fail_ex+0x263/0x280 [ 237.919075][T10126] should_fail+0xb/0x20 [ 237.919172][T10126] should_fail_usercopy+0x1a/0x20 [ 237.919265][T10126] _copy_from_user+0x1c/0xb0 [ 237.919306][T10126] core_sys_select+0x1e6/0x730 [ 237.919346][T10126] ? set_user_sigmask+0x8b/0x140 [ 237.919385][T10126] __se_sys_pselect6+0x23c/0x2a0 [ 237.919509][T10126] __x64_sys_pselect6+0x78/0x90 [ 237.919537][T10126] x64_sys_call+0x8d5/0x3020 [ 237.919567][T10126] do_syscall_64+0x12c/0x370 [ 237.919594][T10126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.919619][T10126] RIP: 0033:0x7f40845bc819 [ 237.919685][T10126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.919706][T10126] RSP: 002b:00007f4083017028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 237.919731][T10126] RAX: ffffffffffffffda RBX: 00007f4084835fa0 RCX: 00007f40845bc819 [ 237.919749][T10126] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 237.919763][T10126] RBP: 00007f4083017090 R08: 0000000000000000 R09: 0000000000000000 [ 237.919779][T10126] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 237.919863][T10126] R13: 00007f4084836038 R14: 00007f4084835fa0 R15: 00007ffcd4787fc8 [ 237.919885][T10126] [ 238.160301][ T28] audit: type=1400 audit(2000000132.993:4651): avc: denied { connect } for pid=10129 comm="syz.3.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 238.216191][ T28] audit: type=1400 audit(2000000133.023:4652): avc: denied { create } for pid=10129 comm="syz.3.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 238.272210][ T28] audit: type=1400 audit(2000000133.103:4653): avc: denied { ioctl } for pid=10133 comm="syz.3.1938" path="socket:[26424]" dev="sockfs" ino=26424 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 238.323314][ T28] audit: type=1400 audit(2000000133.153:4654): avc: denied { append } for pid=10133 comm="syz.3.1938" name="tun" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 238.407520][ T28] audit: type=1400 audit(2000000133.153:4655): avc: denied { open } for pid=10133 comm="syz.3.1938" path="/dev/net/tun" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 238.658064][T10124] loop1: detected capacity change from 0 to 2048 [ 238.668621][ T28] audit: type=1400 audit(2000000133.153:4656): avc: denied { ioctl } for pid=10133 comm="syz.3.1938" path="/dev/net/tun" dev="devtmpfs" ino=139 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 238.764508][ T28] audit: type=1400 audit(2000000133.603:4657): avc: denied { read } for pid=10141 comm="syz.4.1941" dev="nsfs" ino=4026532536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 238.787807][T10124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.814824][T10124] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.849780][T10144] macsec1: entered allmulticast mode [ 238.865370][T10144] geneve1: entered allmulticast mode [ 239.039047][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.042201][T10149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.061057][T10149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.134403][T10154] macvlan0: left promiscuous mode [ 239.153837][ T2247] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.173301][ T2247] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.184580][ T2247] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.203327][ T2247] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.392338][T10157] FAULT_INJECTION: forcing a failure. [ 239.392338][T10157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.434556][T10157] CPU: 0 UID: 0 PID: 10157 Comm: syz.3.1946 Tainted: G W syzkaller #0 PREEMPT(full) [ 239.434603][T10157] Tainted: [W]=WARN [ 239.434612][T10157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.434625][T10157] Call Trace: [ 239.434633][T10157] [ 239.434642][T10157] __dump_stack+0x1d/0x30 [ 239.434676][T10157] dump_stack_lvl+0x95/0xd0 [ 239.434704][T10157] dump_stack+0x15/0x1b [ 239.434788][T10157] should_fail_ex+0x263/0x280 [ 239.434820][T10157] should_fail+0xb/0x20 [ 239.434847][T10157] should_fail_usercopy+0x1a/0x20 [ 239.434928][T10157] _copy_from_user+0x1c/0xb0 [ 239.434957][T10157] core_sys_select+0x323/0x730 [ 239.434996][T10157] ? set_user_sigmask+0x8b/0x140 [ 239.435169][T10157] __se_sys_pselect6+0x23c/0x2a0 [ 239.435200][T10157] __x64_sys_pselect6+0x78/0x90 [ 239.435260][T10157] x64_sys_call+0x8d5/0x3020 [ 239.435289][T10157] do_syscall_64+0x12c/0x370 [ 239.435405][T10157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.435430][T10157] RIP: 0033:0x7f40845bc819 [ 239.435451][T10157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.435474][T10157] RSP: 002b:00007f4083017028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 239.435497][T10157] RAX: ffffffffffffffda RBX: 00007f4084835fa0 RCX: 00007f40845bc819 [ 239.435511][T10157] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 239.435524][T10157] RBP: 00007f4083017090 R08: 0000000000000000 R09: 0000000000000000 [ 239.435539][T10157] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 239.435555][T10157] R13: 00007f4084836038 R14: 00007f4084835fa0 R15: 00007ffcd4787fc8 [ 239.435578][T10157] [ 239.910759][T10179] wireguard0: entered promiscuous mode [ 239.916597][T10179] wireguard0: entered allmulticast mode [ 240.021224][T10183] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1955'. [ 240.034757][T10186] netlink: 'syz.2.1956': attribute type 28 has an invalid length. [ 240.136441][T10191] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1957'. [ 240.198919][T10192] loop1: detected capacity change from 0 to 512 [ 240.792238][T10196] 9p: Bad value for 'source' [ 241.602503][T10198] FAULT_INJECTION: forcing a failure. [ 241.602503][T10198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.647900][T10198] CPU: 0 UID: 0 PID: 10198 Comm: syz.4.1959 Tainted: G W syzkaller #0 PREEMPT(full) [ 241.647942][T10198] Tainted: [W]=WARN [ 241.647960][T10198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.647972][T10198] Call Trace: [ 241.647979][T10198] [ 241.647987][T10198] __dump_stack+0x1d/0x30 [ 241.648017][T10198] dump_stack_lvl+0x95/0xd0 [ 241.648045][T10198] dump_stack+0x15/0x1b [ 241.648070][T10198] should_fail_ex+0x263/0x280 [ 241.648133][T10198] should_fail+0xb/0x20 [ 241.648160][T10198] should_fail_usercopy+0x1a/0x20 [ 241.648243][T10198] core_sys_select+0x4f2/0x730 [ 241.648358][T10198] ? set_user_sigmask+0x8b/0x140 [ 241.648397][T10198] __se_sys_pselect6+0x23c/0x2a0 [ 241.648425][T10198] __x64_sys_pselect6+0x78/0x90 [ 241.648447][T10198] x64_sys_call+0x8d5/0x3020 [ 241.648488][T10198] do_syscall_64+0x12c/0x370 [ 241.648539][T10198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.648606][T10198] RIP: 0033:0x7f5ccfe2c819 [ 241.648625][T10198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.648647][T10198] RSP: 002b:00007f5cce887028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 241.648672][T10198] RAX: ffffffffffffffda RBX: 00007f5cd00a5fa0 RCX: 00007f5ccfe2c819 [ 241.648722][T10198] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 241.648792][T10198] RBP: 00007f5cce887090 R08: 0000000000000000 R09: 0000000000000000 [ 241.648804][T10198] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 241.648816][T10198] R13: 00007f5cd00a6038 R14: 00007f5cd00a5fa0 R15: 00007ffc2eec70d8 [ 241.648834][T10198] [ 242.031981][T10208] netlink: 'syz.1.1964': attribute type 1 has an invalid length. [ 242.324255][T10218] loop0: detected capacity change from 0 to 256 [ 242.345888][T10218] FAT-fs (loop0): Directory bread(block 64) failed [ 242.352475][T10218] FAT-fs (loop0): Directory bread(block 65) failed [ 242.359189][T10218] FAT-fs (loop0): Directory bread(block 66) failed [ 242.365867][T10218] FAT-fs (loop0): Directory bread(block 67) failed [ 242.372402][T10218] FAT-fs (loop0): Directory bread(block 68) failed [ 242.379047][T10218] FAT-fs (loop0): Directory bread(block 69) failed [ 242.385901][T10218] FAT-fs (loop0): Directory bread(block 70) failed [ 242.392550][T10218] FAT-fs (loop0): Directory bread(block 71) failed [ 242.399269][T10218] FAT-fs (loop0): Directory bread(block 72) failed [ 242.405985][T10218] FAT-fs (loop0): Directory bread(block 73) failed [ 242.451266][T10218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1966'. [ 242.460311][T10218] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1966'. [ 242.469709][T10218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1966'. [ 242.478827][T10218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1966'. [ 242.488022][T10218] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1966'. [ 242.497281][T10218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1966'. [ 242.506302][T10218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1966'. [ 242.515397][T10218] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1966'. [ 242.525036][T10218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1966'. [ 242.534248][T10218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1966'. [ 243.249481][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 243.249507][ T28] audit: type=1400 audit(2000000138.083:4689): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.413474][T10226] loop4: detected capacity change from 0 to 512 [ 243.503086][T10226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 243.559430][ T28] audit: type=1400 audit(2000000138.123:4690): avc: denied { open } for pid=3309 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.594439][T10226] System zones: 1-12 [ 243.652178][T10226] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1968: bad orphan inode 13 [ 243.738865][T10226] loop4: lost filesystem error report for type 5 error -117 [ 243.739112][T10226] ext4_test_bit(bit=12, block=4) = 1 [ 243.746541][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 243.746559][ C1] EXT4-fs (loop4): initial error at time 2000000138: ext4_orphan_get:1417 [ 243.746591][ C1] EXT4-fs (loop4): last error at time 2000000138: ext4_orphan_get:1417 [ 243.823206][ T28] audit: type=1400 audit(2000000138.123:4691): avc: denied { ioctl } for pid=3309 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 243.855273][T10226] is_bad_inode(inode)=0 [ 243.933181][T10226] NEXT_ORPHAN(inode)=0 [ 243.937294][T10226] max_ino=32 [ 243.940508][T10226] i_nlink=1 [ 243.963534][T10226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.078893][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.173186][ T28] audit: type=1400 audit(2000000138.153:4692): avc: denied { read } for pid=10220 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 244.201522][ T28] audit: type=1400 audit(2000000138.183:4693): avc: denied { create } for pid=10220 comm="syz.4.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 244.225053][ T28] audit: type=1400 audit(2000000138.183:4695): avc: denied { create } for pid=10220 comm="syz.4.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 244.225103][ T28] audit: type=1400 audit(2000000138.183:4694): avc: denied { prog_load } for pid=10220 comm="syz.4.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 244.225206][ T28] audit: type=1400 audit(2000000138.183:4696): avc: denied { bpf } for pid=10220 comm="syz.4.1967" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 244.225227][ T28] audit: type=1400 audit(2000000138.303:4697): avc: denied { mounton } for pid=10225 comm="syz.4.1968" path="/399/bus" dev="tmpfs" ino=2169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 244.225263][ T28] audit: type=1400 audit(2000000138.483:4698): avc: denied { module_request } for pid=10229 comm="syz.1.1969" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 244.284966][T10245] vhci_hcd vhci_hcd.0: invalid port number 236 [ 244.400572][T10245] vhci_hcd vhci_hcd.0: invalid port number 236 [ 244.433027][T10253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.445184][T10253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.519546][T10256] loop0: detected capacity change from 0 to 512 [ 244.538934][T10258] geneve1: left allmulticast mode [ 244.563160][T10258] macsec1: left allmulticast mode [ 244.577408][T10256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.618410][T10256] ext4 filesystem being mounted at /375/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.681338][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.745936][ T70] Bluetooth: hci0: Frame reassembly failed (-84) [ 245.043152][ T7472] IPVS: starting estimator thread 0... [ 245.133142][T10267] IPVS: using max 2688 ests per chain, 134400 per kthread [ 245.736938][T10297] 9p: Bad value for 'source' [ 246.822915][ T5841] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 247.080044][T10306] vlan0: entered promiscuous mode [ 247.095011][T10306] bridge2: entered promiscuous mode [ 247.107703][T10306] vlan0: entered allmulticast mode [ 247.123887][T10306] bridge2: entered allmulticast mode [ 247.615197][T10324] __nla_validate_parse: 26 callbacks suppressed [ 247.615217][T10324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2001'. [ 247.712282][T10327] syzkaller0: entered promiscuous mode [ 247.718332][T10327] syzkaller0: entered allmulticast mode [ 247.735384][T10327] loop4: detected capacity change from 0 to 512 [ 247.749735][T10327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.791119][T10327] ext4 filesystem being mounted at /404/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 247.891103][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.948770][T10342] loop4: detected capacity change from 0 to 1024 [ 247.994125][T10342] EXT4-fs: Ignoring removed orlov option [ 248.011809][T10342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.050786][T10346] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2007'. [ 248.080070][T10352] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2008'. [ 248.144086][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.175279][T10361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.204502][T10361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.290245][T10368] netlink: 'syz.0.2012': attribute type 3 has an invalid length. [ 248.313820][T10368] netlink: 772 bytes leftover after parsing attributes in process `syz.0.2012'. [ 248.337268][T10368] netlink: 'syz.0.2012': attribute type 3 has an invalid length. [ 248.358251][T10368] netlink: 772 bytes leftover after parsing attributes in process `syz.0.2012'. [ 248.422621][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 248.422639][ T28] audit: type=1400 audit(2000000143.254:4793): avc: denied { sqpoll } for pid=10376 comm="syz.2.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 248.450630][T10377] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2015'. [ 248.464188][ T28] audit: type=1400 audit(2000000143.284:4794): avc: denied { read } for pid=10376 comm="syz.2.2015" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 248.502372][ T28] audit: type=1400 audit(2000000143.284:4795): avc: denied { open } for pid=10376 comm="syz.2.2015" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 248.529979][ T28] audit: type=1400 audit(2000000143.324:4796): avc: denied { mount } for pid=10372 comm="syz.1.2013" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 248.560809][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'. [ 248.562344][ T28] audit: type=1400 audit(2000000143.394:4797): avc: denied { cpu } for pid=10382 comm="syz.1.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 248.570293][T10381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=10381 comm=syz.2.2016 [ 248.619583][T10383] can: request_module (can-proto-3) failed. [ 248.626937][ T28] audit: type=1400 audit(2000000143.464:4798): avc: denied { bind } for pid=10382 comm="syz.1.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 248.653852][ T28] audit: type=1400 audit(2000000143.464:4799): avc: denied { name_bind } for pid=10382 comm="syz.1.2017" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 248.675217][ T28] audit: type=1400 audit(2000000143.464:4800): avc: denied { node_bind } for pid=10382 comm="syz.1.2017" saddr=172.30.1.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 248.697773][ T28] audit: type=1400 audit(2000000143.504:4801): avc: denied { write } for pid=10380 comm="syz.2.2016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 248.699741][T10388] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2019'. [ 248.734034][T10383] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 248.769238][ T28] audit: type=1400 audit(2000000143.604:4802): avc: denied { read } for pid=10393 comm="syz.3.2021" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 248.771012][T10383] bond3: (slave lo): Enslaving as an active interface with an up link [ 248.798569][T10383] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 248.857003][T10406] bridge0: entered promiscuous mode [ 248.862978][T10406] macvtap1: entered promiscuous mode [ 248.868562][T10406] macvtap1: entered allmulticast mode [ 248.874307][T10406] bridge0: entered allmulticast mode [ 248.880124][T10406] bridge0: port 3(macvtap1) entered blocking state [ 248.886963][T10406] bridge0: port 3(macvtap1) entered disabled state [ 248.895409][T10406] bridge0: left allmulticast mode [ 248.900684][T10406] bridge0: left promiscuous mode [ 249.013925][T10410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10410 comm=syz.2.2024 [ 249.047626][T10410] netlink: 'syz.2.2024': attribute type 1 has an invalid length. [ 249.070314][T10410] bond2: entered promiscuous mode [ 249.075753][T10410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.088538][T10410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.095699][T10410] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 249.106110][T10410] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 249.135115][T10410] bond2: (slave ip6gre1): making interface the new active one [ 249.142748][T10410] ip6gre1: entered promiscuous mode [ 249.149749][T10410] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 249.187702][T10413] 9p: Bad value for 'source' [ 249.304221][T10418] SET target dimension over the limit! [ 249.853207][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2029'. [ 249.927761][T10433] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2031'. [ 250.811797][T10440] syz.3.2034 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 250.828365][T10440] CPU: 1 UID: 0 PID: 10440 Comm: syz.3.2034 Tainted: G W syzkaller #0 PREEMPT(full) [ 250.828400][T10440] Tainted: [W]=WARN [ 250.828408][T10440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 250.828422][T10440] Call Trace: [ 250.828431][T10440] [ 250.828441][T10440] __dump_stack+0x1d/0x30 [ 250.828616][T10440] dump_stack_lvl+0x95/0xd0 [ 250.828655][T10440] dump_stack+0x15/0x1b [ 250.828688][T10440] dump_header+0x80/0x240 [ 250.828720][T10440] oom_kill_process+0x295/0x350 [ 250.828743][T10440] out_of_memory+0x97d/0xb80 [ 250.828802][T10440] try_charge_memcg+0x62e/0xa10 [ 250.828849][T10440] obj_cgroup_charge_pages+0x23/0xc0 [ 250.828896][T10440] __memcg_kmem_charge_page+0x9e/0x170 [ 250.829008][T10440] __alloc_frozen_pages_noprof+0x18a/0x360 [ 250.829045][T10440] alloc_pages_mpol+0xb3/0x260 [ 250.829081][T10440] alloc_pages_noprof+0x8f/0x130 [ 250.829116][T10440] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 250.829180][T10440] __kvmalloc_node_noprof+0x3d4/0x650 [ 250.829211][T10440] ? futex_hash_allocate+0x190/0x9d0 [ 250.829298][T10440] ? futex_hash_allocate+0x190/0x9d0 [ 250.829333][T10440] futex_hash_allocate+0x190/0x9d0 [ 250.829365][T10440] ? cap_task_prctl+0x13f/0x6e0 [ 250.829486][T10440] futex_hash_prctl+0xd8/0xf0 [ 250.829517][T10440] __se_sys_prctl+0xa3d/0x13f0 [ 250.829544][T10440] __x64_sys_prctl+0x67/0x80 [ 250.829570][T10440] x64_sys_call+0x2533/0x3020 [ 250.829622][T10440] do_syscall_64+0x12c/0x370 [ 250.829655][T10440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.829681][T10440] RIP: 0033:0x7f40845bc819 [ 250.829717][T10440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.829738][T10440] RSP: 002b:00007f4083017028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 250.829764][T10440] RAX: ffffffffffffffda RBX: 00007f4084835fa0 RCX: 00007f40845bc819 [ 250.829781][T10440] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 250.829795][T10440] RBP: 00007f4084652c91 R08: 0000000000000000 R09: 0000000000000000 [ 250.829808][T10440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.829840][T10440] R13: 00007f4084836038 R14: 00007f4084835fa0 R15: 00007ffcd4787fc8 [ 250.829861][T10440] [ 251.059308][T10440] memory: usage 307192kB, limit 307200kB, failcnt 400 [ 251.076256][T10440] memory+swap: usage 312640kB, limit 9007199254740988kB, failcnt 0 [ 251.093667][T10440] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 251.111313][T10440] Memory cgroup stats for /syz3: [ 251.111501][T10440] cache 28672 [ 251.119844][T10440] rss 4096 [ 251.128432][T10440] shmem 0 [ 251.134623][T10440] mapped_file 28672 [ 251.150436][T10440] dirty 0 [ 251.159962][T10440] writeback 0 [ 251.183206][T10446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.205481][T10440] workingset_refault_anon 118 [ 251.210935][T10446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.229041][T10440] workingset_refault_file 2358 [ 251.242724][T10440] swap 5566464 [ 251.262684][T10440] swapcached 9154560 [ 251.266646][T10440] pgpgin 333915 [ 251.270131][T10440] pgpgout 333902 [ 251.285483][T10449] lo speed is unknown, defaulting to 1000 [ 251.291248][T10449] lo speed is unknown, defaulting to 1000 [ 251.322646][T10440] pgfault 270680 [ 251.332637][T10440] pgmajfault 890 [ 251.336862][T10449] lo speed is unknown, defaulting to 1000 [ 251.352588][T10440] inactive_anon 0 [ 251.366435][T10440] active_anon 4096 [ 251.370204][T10440] inactive_file 0 [ 251.383273][T10449] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 251.410720][T10440] active_file 45056 [ 251.417595][T10449] lo speed is unknown, defaulting to 1000 [ 251.432610][T10440] unevictable 0 [ 251.436151][T10440] hierarchical_memory_limit 314572800 [ 251.441520][T10440] hierarchical_memsw_limit 9223372036854771712 [ 251.452991][T10449] lo speed is unknown, defaulting to 1000 [ 251.459228][T10449] lo speed is unknown, defaulting to 1000 [ 251.470308][T10449] lo speed is unknown, defaulting to 1000 [ 251.491654][T10449] lo speed is unknown, defaulting to 1000 [ 251.502607][T10440] total_cache 28672 [ 251.506437][T10440] total_rss 4096 [ 251.509997][T10440] total_shmem 0 [ 251.532617][T10440] total_mapped_file 28672 [ 251.536982][T10440] total_dirty 0 [ 251.540446][T10440] total_writeback 0 [ 251.562578][T10440] total_workingset_refault_anon 118 [ 251.567897][T10440] total_workingset_refault_file 2358 [ 251.583341][T10440] total_swap 5566464 [ 251.587262][T10440] total_swapcached 9154560 [ 251.591686][T10440] total_pgpgin 333915 [ 251.615953][T10440] total_pgpgout 333902 [ 251.620058][T10440] total_pgfault 270680 [ 251.643349][T10440] total_pgmajfault 890 [ 251.655153][T10440] total_inactive_anon 0 [ 251.668047][T10440] total_active_anon 4096 [ 251.682195][T10440] total_inactive_file 0 [ 251.708814][T10440] total_active_file 45056 [ 251.726429][T10440] total_unevictable 0 [ 251.739194][T10440] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1983,pid=10278,uid=0 [ 251.788835][T10440] Memory cgroup out of memory: Killed process 10278 (syz.3.1983) total-vm:94164kB, anon-rss:1224kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 251.853579][T10439] syz.3.2034 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 251.980152][T10439] CPU: 1 UID: 0 PID: 10439 Comm: syz.3.2034 Tainted: G W syzkaller #0 PREEMPT(full) [ 251.980256][T10439] Tainted: [W]=WARN [ 251.980265][T10439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 251.980325][T10439] Call Trace: [ 251.980333][T10439] [ 251.980342][T10439] __dump_stack+0x1d/0x30 [ 251.980373][T10439] dump_stack_lvl+0x95/0xd0 [ 251.980398][T10439] dump_stack+0x15/0x1b [ 251.980421][T10439] dump_header+0x80/0x240 [ 251.980490][T10439] oom_kill_process+0x295/0x350 [ 251.980513][T10439] out_of_memory+0x97d/0xb80 [ 251.980614][T10439] try_charge_memcg+0x62e/0xa10 [ 251.980660][T10439] obj_cgroup_charge_pages+0x23/0xc0 [ 251.980690][T10439] obj_cgroup_charge_account+0x73/0x1a0 [ 251.980758][T10439] ? update_cfs_rq_load_avg+0x1e3/0x200 [ 251.980792][T10439] __memcg_slab_post_alloc_hook+0x392/0x540 [ 251.980833][T10439] kmem_cache_alloc_noprof+0x1e2/0x400 [ 251.980854][T10439] ? alloc_buffer_head+0x35/0x1f0 [ 251.980938][T10439] alloc_buffer_head+0x35/0x1f0 [ 251.980999][T10439] folio_alloc_buffers+0x149/0x310 [ 251.981053][T10439] create_empty_buffers+0x2c/0x200 [ 251.981085][T10439] __block_write_begin_int+0x1d4/0xf90 [ 251.981126][T10439] ? add_timer_global+0x51/0x70 [ 251.981155][T10439] ? __queue_delayed_work+0x165/0x1e0 [ 251.981260][T10439] ? queue_delayed_work_on+0xd7/0x150 [ 251.981278][T10439] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 251.981315][T10439] ? _raw_spin_unlock_irq+0x9/0x30 [ 251.981348][T10439] ? wb_wakeup_delayed+0x9b/0xb0 [ 251.981443][T10439] ? __mark_inode_dirty+0x49d/0x7d0 [ 251.981541][T10439] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 251.981579][T10439] block_page_mkwrite+0x1a8/0x3c0 [ 251.981607][T10439] ext4_page_mkwrite+0x859/0xb90 [ 251.981711][T10439] ? folio_unlock+0xfe/0x150 [ 251.981796][T10439] handle_mm_fault+0x1904/0x3020 [ 251.981828][T10439] ? vma_start_read+0x1c7/0x2c0 [ 251.981960][T10439] do_user_addr_fault+0x62f/0x1050 [ 251.982075][T10439] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 251.982160][T10439] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 251.982185][T10439] ? trace_page_fault_user+0x1f/0xe0 [ 251.982213][T10439] exc_page_fault+0x62/0xa0 [ 251.982232][T10439] asm_exc_page_fault+0x26/0x30 [ 251.982319][T10439] RIP: 0033:0x7f4084490f40 [ 251.982404][T10439] Code: 83 e6 07 0f 85 19 01 00 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 e1 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 <48> 89 58 f8 49 83 c5 01 45 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f [ 251.982426][T10439] RSP: 002b:00007ffcd4788060 EFLAGS: 00010216 [ 251.982447][T10439] RAX: 0000001b33b23ea8 RBX: ffffffff81df5125 RCX: 0000001b33b23ea0 [ 251.982461][T10439] RDX: 0000001b33724220 RSI: 0000000000000008 RDI: 00007f4085365720 [ 251.982474][T10439] RBP: 0000000000000007 R08: 00007f4084820000 R09: 00007f4084822000 [ 251.982487][T10439] R10: 0000000081df5129 R11: 000000000000000f R12: 00007f4084836038 [ 251.982548][T10439] R13: 0000000000000006 R14: ffffffff81df55be R15: 00007f4085365720 [ 251.982566][T10439] ? security_task_prctl+0xbe/0x160 [ 251.982623][T10439] ? security_task_setioprio+0x25/0x70 [ 251.982696][T10439] [ 252.312551][T10439] memory: usage 307200kB, limit 307200kB, failcnt 564 [ 252.319546][T10439] memory+swap: usage 312464kB, limit 9007199254740988kB, failcnt 0 [ 252.327601][T10439] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 252.340758][T10439] Memory cgroup stats for /syz3: [ 252.341007][T10439] cache 4096 [ 252.361626][T10439] rss 0 [ 252.368949][T10439] shmem 0 [ 252.391117][T10439] mapped_file 0 [ 252.405630][T10439] dirty 0 [ 252.414966][T10439] writeback 0 [ 252.423797][T10439] workingset_refault_anon 148 [ 252.437215][T10439] workingset_refault_file 2372 [ 252.455759][T10439] swap 5390336 [ 252.466764][T10439] swapcached 9154560 [ 252.477249][T10439] pgpgin 333959 [ 252.485422][T10439] pgpgout 333954 [ 252.495292][T10439] pgfault 270730 [ 252.505924][T10439] pgmajfault 923 [ 252.514905][T10439] inactive_anon 0 [ 252.525119][T10439] active_anon 0 [ 252.535332][T10439] inactive_file 0 [ 252.546631][T10439] active_file 20480 [ 252.557072][T10439] unevictable 0 [ 252.572574][T10439] hierarchical_memory_limit 314572800 [ 252.588309][T10439] hierarchical_memsw_limit 9223372036854771712 [ 252.598391][T10439] total_cache 4096 [ 252.602199][T10439] total_rss 0 [ 252.612639][T10439] total_shmem 0 [ 252.618583][T10439] total_mapped_file 0 [ 252.642656][T10439] total_dirty 0 [ 252.646156][T10439] total_writeback 0 [ 252.660157][T10439] total_workingset_refault_anon 148 [ 252.670257][T10439] total_workingset_refault_file 2372 [ 252.680376][T10439] total_swap 5390336 [ 252.685648][T10439] total_swapcached 9154560 [ 252.710679][T10439] total_pgpgin 333959 [ 252.715280][T10439] total_pgpgout 333954 [ 252.729389][T10439] total_pgfault 270730 [ 252.742488][T10439] total_pgmajfault 923 [ 252.746755][T10439] total_inactive_anon 0 [ 252.750919][T10439] total_active_anon 0 [ 252.762776][T10439] total_inactive_file 0 [ 252.772480][T10439] total_active_file 20480 [ 252.776963][T10439] total_unevictable 0 [ 252.788616][T10439] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2034,pid=10439,uid=0 [ 252.823010][T10439] Memory cgroup out of memory: Killed process 10439 (syz.3.2034) total-vm:94032kB, anon-rss:1224kB, file-rss:22424kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 252.891277][T10469] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2043'. [ 253.244814][T10486] loop1: detected capacity change from 0 to 128 [ 253.314230][T10488] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 253.334533][T10488] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2052'. [ 253.352413][T10488] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2052'. [ 253.369036][T10495] loop4: detected capacity change from 0 to 512 [ 253.411481][T10495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.493946][T10501] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2056'. [ 253.588214][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 253.588282][ T28] audit: type=1400 audit(2000000148.424:4832): avc: denied { read } for pid=10493 comm="syz.3.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 253.706878][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2059'. [ 253.720962][T10504] lo speed is unknown, defaulting to 1000 [ 253.732479][T10508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2059'. [ 254.270801][T10520] 9p: Bad value for 'source' [ 254.733428][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.783805][T10537] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2067'. [ 254.855969][T10545] loop4: detected capacity change from 0 to 512 [ 254.860472][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2069'. [ 254.895763][ T28] audit: type=1400 audit(2000000149.734:4833): avc: denied { remount } for pid=10547 comm="syz.3.2071" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 254.921264][T10545] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 254.945035][T10545] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 254.953498][T10545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.991700][T10545] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz.4.2070: Directory hole found for htree leaf block 0 [ 255.012620][T10555] batadv_slave_0: left promiscuous mode [ 255.029269][ T28] audit: type=1400 audit(2000000149.744:4834): avc: denied { bind } for pid=10548 comm="syz.1.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 255.033185][T10555] batadv_slave_0: left allmulticast mode [ 255.100090][ T28] audit: type=1326 audit(2000000149.934:4835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10544 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccfe2c819 code=0x7ffc0000 [ 255.135483][ T28] audit: type=1326 audit(2000000149.964:4836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10544 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccfe2c819 code=0x7ffc0000 [ 255.172174][ T28] audit: type=1326 audit(2000000149.964:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10544 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f5ccfe2c819 code=0x7ffc0000 [ 255.203963][ T28] audit: type=1326 audit(2000000149.964:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10544 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccfe2c819 code=0x7ffc0000 [ 255.227698][T10555] vlan0: left promiscuous mode [ 255.242563][T10555] bridge2: left promiscuous mode [ 255.245626][ T28] audit: type=1326 audit(2000000149.964:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10544 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccfe2c819 code=0x7ffc0000 [ 255.271340][T10555] vlan0: left allmulticast mode [ 255.284264][ T28] audit: type=1326 audit(2000000149.964:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10544 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ccfe2c819 code=0x7ffc0000 [ 255.316867][ T28] audit: type=1326 audit(2000000149.964:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10544 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ccfe2c819 code=0x7ffc0000 [ 255.340724][T10555] bridge2: left allmulticast mode [ 255.346419][T10545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2070'. [ 255.438660][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.447935][ T2247] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.457037][ T2247] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.492411][ T2247] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.502378][ T2247] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.622739][T10569] netlink: 'syz.1.2076': attribute type 58 has an invalid length. [ 255.630731][T10569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2076'. [ 256.051010][T10587] 9p: Bad value for 'source' [ 256.138440][T10589] loop1: detected capacity change from 0 to 1024 [ 256.175219][T10589] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 256.192350][T10589] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 256.242334][T10589] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3937!=20869) [ 256.282324][T10589] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.2084: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 256.332295][T10589] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 256.332628][T10589] EXT4-fs (loop1): no journal found [ 256.347035][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 256.347075][ C0] EXT4-fs (loop1): initial error at time 2000000151: ext4_ext_check_inode:521: inode 2 [ 256.347121][ C0] EXT4-fs (loop1): last error at time 2000000151: ext4_ext_check_inode:521: inode 2 [ 256.401708][T10591] loop4: detected capacity change from 0 to 1024 [ 256.469719][T10591] ext2: Unknown parameter 'uid' [ 256.609674][T10591] loop4: detected capacity change from 0 to 4096 [ 256.637817][T10591] EXT4-fs: Ignoring removed bh option [ 256.677551][T10591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.960804][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.433546][T10611] bridge4: entered allmulticast mode [ 257.461747][T10611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10611 comm=syz.1.2090 [ 258.304491][T10645] lo speed is unknown, defaulting to 1000 [ 258.626141][T10648] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 258.653319][T10650] __nla_validate_parse: 3 callbacks suppressed [ 258.653337][T10650] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2104'. [ 258.734325][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 258.734342][ T28] audit: type=1400 audit(2000008345.570:4904): avc: denied { listen } for pid=10655 comm="syz.2.2106" path=2F3432362FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 258.992521][T10676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2115'. [ 259.569893][T10688] 9p: Bad value for 'source' [ 259.765090][T10691] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2119'. [ 259.908774][ T40] Bluetooth: hci0: Frame reassembly failed (-84) [ 259.936579][T10696] loop0: detected capacity change from 0 to 512 [ 260.393626][T10715] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 260.713361][ T28] audit: type=1400 audit(2000008347.550:4905): avc: denied { mounton } for pid=10722 comm="syz.3.2130" path="/440/file0" dev="tmpfs" ino=2386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 261.061238][T10726] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2131'. [ 261.142385][T10728] loop0: detected capacity change from 0 to 1024 [ 261.171812][T10728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.261271][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.287101][T10733] xt_hashlimit: size too large, truncated to 1048576 [ 261.709844][T10743] lo speed is unknown, defaulting to 1000 [ 261.715786][T10743] lo speed is unknown, defaulting to 1000 [ 261.721908][T10743] lo speed is unknown, defaulting to 1000 [ 261.729233][T10743] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 261.741921][T10743] lo speed is unknown, defaulting to 1000 [ 261.748404][T10743] lo speed is unknown, defaulting to 1000 [ 261.754992][T10743] lo speed is unknown, defaulting to 1000 [ 261.761304][T10743] lo speed is unknown, defaulting to 1000 [ 261.767734][T10743] lo speed is unknown, defaulting to 1000 [ 261.803227][T10743] lo speed is unknown, defaulting to 1000 [ 261.809873][T10743] lo speed is unknown, defaulting to 1000 [ 261.943849][ T5841] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 262.418019][T10760] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2142'. [ 262.506077][T10768] xt_hashlimit: size too large, truncated to 1048576 [ 262.682258][ T28] audit: type=1400 audit(2000008349.490:4906): avc: denied { shutdown } for pid=10766 comm="syz.3.2146" lport=56346 faddr=fc00::80 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 262.725594][T10770] loop1: detected capacity change from 0 to 512 [ 262.752178][T10770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 262.834873][T10770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.002716][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2149'. [ 263.013231][ T28] audit: type=1400 audit(2000008349.830:4907): avc: denied { read write } for pid=10780 comm="syz.4.2148" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 263.043691][ T28] audit: type=1400 audit(2000008349.830:4908): avc: denied { open } for pid=10780 comm="syz.4.2148" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 263.080101][ T28] audit: type=1400 audit(2000008349.830:4909): avc: denied { ioctl } for pid=10780 comm="syz.4.2148" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 263.154506][T10789] syzkaller1: entered promiscuous mode [ 263.160071][T10789] syzkaller1: entered allmulticast mode [ 263.642556][ T28] audit: type=1400 audit(2000008350.470:4910): avc: denied { write } for pid=10808 comm="syz.2.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 263.855219][ T28] audit: type=1400 audit(2000008350.540:4911): avc: denied { create } for pid=10808 comm="syz.2.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 264.522370][T10809] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 264.703894][T10822] loop1: detected capacity change from 0 to 256 [ 264.850592][ T28] audit: type=1400 audit(2000008350.540:4912): avc: denied { bind } for pid=10808 comm="syz.2.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 265.104304][T10822] FAT-fs (loop1): Directory bread(block 64) failed [ 265.110967][T10822] FAT-fs (loop1): Directory bread(block 65) failed [ 265.117571][T10822] FAT-fs (loop1): Directory bread(block 66) failed [ 265.124260][T10822] FAT-fs (loop1): Directory bread(block 67) failed [ 265.130871][T10822] FAT-fs (loop1): Directory bread(block 68) failed [ 265.137541][T10822] FAT-fs (loop1): Directory bread(block 69) failed [ 265.144256][T10822] FAT-fs (loop1): Directory bread(block 70) failed [ 265.150871][T10822] FAT-fs (loop1): Directory bread(block 71) failed [ 265.157593][T10822] FAT-fs (loop1): Directory bread(block 72) failed [ 265.164219][T10822] FAT-fs (loop1): Directory bread(block 73) failed [ 265.209087][T10822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2159'. [ 265.218215][T10822] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2159'. [ 265.227588][T10822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2159'. [ 265.236893][T10822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2159'. [ 265.245912][T10822] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2159'. [ 265.255198][T10822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2159'. [ 265.264505][T10822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2159'. [ 265.273836][T10822] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2159'. [ 265.283267][T10822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2159'. [ 265.292417][T10822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2159'. [ 265.408999][ T28] audit: type=1400 audit(2000008352.240:4913): avc: denied { map_create } for pid=10831 comm="syz.0.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 265.770464][T10834] syzkaller0: entered promiscuous mode [ 265.844286][T10834] syzkaller0: entered allmulticast mode [ 265.922728][ T28] audit: type=1400 audit(2000008352.270:4914): avc: denied { map_read map_write } for pid=10831 comm="syz.0.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 265.952718][T10841] loop0: detected capacity change from 0 to 1024 [ 266.040273][T10841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.087862][T10845] loop4: detected capacity change from 0 to 1024 [ 266.155128][T10845] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 266.167375][ T28] audit: type=1400 audit(2000008352.280:4915): avc: denied { perfmon } for pid=10831 comm="syz.0.2164" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.228120][T10845] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 266.258266][T10845] EXT4-fs error (device loop4): ext4_get_journal_inode:5863: comm syz.4.2168: inode #4294967295: comm syz.4.2168: iget: illegal inode # [ 266.278527][ T28] audit: type=1400 audit(2000008352.280:4916): avc: denied { prog_load } for pid=10831 comm="syz.0.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 266.319286][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.330424][T10845] loop4: lost filesystem error report for type 5 error -117 [ 266.330760][T10845] EXT4-fs (loop4): no journal found [ 266.338097][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 266.338117][ C1] EXT4-fs (loop4): initial error at time 2000008353: ext4_get_journal_inode:5863 [ 266.338140][ C1] EXT4-fs (loop4): last error at time 2000008353: ext4_get_journal_inode:5863 [ 266.369935][ T28] audit: type=1400 audit(2000008352.280:4917): avc: denied { bpf } for pid=10831 comm="syz.0.2164" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.397664][ T28] audit: type=1400 audit(2000008352.300:4918): avc: denied { read } for pid=10833 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 266.426015][T10845] EXT4-fs (loop4): can't get journal size [ 266.433515][T10845] EXT4-fs (loop4): failed to initialize system zone (-22) [ 266.441008][T10845] EXT4-fs (loop4): mount failed [ 266.446326][ T28] audit: type=1400 audit(2000008352.520:4919): avc: denied { module_request } for pid=10823 comm="syz.3.2161" kmod="net-pf-2-proto-4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 266.469610][ T28] audit: type=1400 audit(2000008352.570:4920): avc: denied { create } for pid=10833 comm="syz.2.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 266.782798][T10863] loop1: detected capacity change from 0 to 8192 [ 266.790116][T10863] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 266.987283][T10875] loop4: detected capacity change from 0 to 512 [ 267.014424][T10875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.747598][T10884] lo speed is unknown, defaulting to 1000 [ 267.768290][T10884] lo speed is unknown, defaulting to 1000 [ 267.837868][T10875] syz.4.2175 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 267.882251][T10875] CPU: 1 UID: 0 PID: 10875 Comm: syz.4.2175 Tainted: G W syzkaller #0 PREEMPT(full) [ 267.882375][T10875] Tainted: [W]=WARN [ 267.882384][T10875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.882399][T10875] Call Trace: [ 267.882420][T10875] [ 267.882429][T10875] __dump_stack+0x1d/0x30 [ 267.882462][T10875] dump_stack_lvl+0x95/0xd0 [ 267.882579][T10875] dump_stack+0x15/0x1b [ 267.882647][T10875] dump_header+0x80/0x240 [ 267.882726][T10875] oom_kill_process+0x295/0x350 [ 267.882756][T10875] out_of_memory+0x97d/0xb80 [ 267.882800][T10875] try_charge_memcg+0x62e/0xa10 [ 267.882902][T10875] obj_cgroup_charge_pages+0x23/0xc0 [ 267.882933][T10875] __memcg_kmem_charge_page+0x9e/0x170 [ 267.883041][T10875] __alloc_frozen_pages_noprof+0x18a/0x360 [ 267.883073][T10875] alloc_pages_mpol+0xb3/0x260 [ 267.883102][T10875] alloc_pages_noprof+0x8f/0x130 [ 267.883219][T10875] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 267.883335][T10875] __kvmalloc_node_noprof+0x3d4/0x650 [ 267.883424][T10875] ? futex_hash_allocate+0x190/0x9d0 [ 267.883527][T10875] ? futex_hash_allocate+0x190/0x9d0 [ 267.883563][T10875] futex_hash_allocate+0x190/0x9d0 [ 267.883597][T10875] ? cap_task_prctl+0x13f/0x6e0 [ 267.883627][T10875] futex_hash_prctl+0xd8/0xf0 [ 267.883659][T10875] __se_sys_prctl+0xa3d/0x13f0 [ 267.883697][T10875] __x64_sys_prctl+0x67/0x80 [ 267.883743][T10875] x64_sys_call+0x2533/0x3020 [ 267.883768][T10875] do_syscall_64+0x12c/0x370 [ 267.883794][T10875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.883853][T10875] RIP: 0033:0x7f5ccfe2c819 [ 267.883873][T10875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.883896][T10875] RSP: 002b:00007f5cce887028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 267.883919][T10875] RAX: ffffffffffffffda RBX: 00007f5cd00a5fa0 RCX: 00007f5ccfe2c819 [ 267.883933][T10875] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 267.883947][T10875] RBP: 00007f5ccfec2c91 R08: 0000000000000000 R09: 0000000000000000 [ 267.884041][T10875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.884054][T10875] R13: 00007f5cd00a6038 R14: 00007f5cd00a5fa0 R15: 00007ffc2eec70d8 [ 267.884123][T10875] [ 267.884131][T10875] memory: usage 307200kB, limit 307200kB, failcnt 783 [ 268.125209][T10875] memory+swap: usage 307988kB, limit 9007199254740988kB, failcnt 0 [ 268.165473][T10875] kmem: usage 307084kB, limit 9007199254740988kB, failcnt 0 [ 268.194367][T10875] Memory cgroup stats for /syz4: [ 268.194709][T10875] cache 98304 [ 268.204306][T10875] rss 4096 [ 268.207440][T10875] shmem 0 [ 268.210441][T10875] mapped_file 81920 [ 268.218729][T10894] veth3: entered promiscuous mode [ 268.222271][T10875] dirty 0 [ 268.237146][T10875] writeback 0 [ 268.239559][T10894] veth3: entered allmulticast mode [ 268.247285][T10875] workingset_refault_anon 173 [ 268.258609][T10875] workingset_refault_file 1784 [ 268.279909][T10875] swap 819200 [ 268.283696][T10875] swapcached 5918720 [ 268.287693][T10875] pgpgin 290921 [ 268.291175][T10875] pgpgout 290892 [ 268.322426][T10875] pgfault 265484 [ 268.337098][T10875] pgmajfault 121 [ 268.359249][T10875] inactive_anon 0 [ 268.376058][T10875] active_anon 4096 [ 268.389646][T10875] inactive_file 45056 [ 268.406160][T10875] active_file 0 [ 268.419623][T10875] unevictable 65536 [ 268.435610][T10875] hierarchical_memory_limit 314572800 [ 268.447633][T10875] hierarchical_memsw_limit 9223372036854771712 [ 268.506955][T10875] total_cache 98304 [ 268.517408][T10875] total_rss 4096 [ 268.522251][T10875] total_shmem 0 [ 268.532263][T10875] total_mapped_file 81920 [ 268.536612][T10875] total_dirty 0 [ 268.540092][T10875] total_writeback 0 [ 268.550329][T10875] total_workingset_refault_anon 173 [ 268.564014][T10875] total_workingset_refault_file 1784 [ 268.580416][T10875] total_swap 819200 [ 268.593695][T10875] total_swapcached 5918720 [ 268.610664][T10900] loop0: detected capacity change from 0 to 256 [ 268.741412][T10900] FAT-fs (loop0): Directory bread(block 64) failed [ 268.748216][T10900] FAT-fs (loop0): Directory bread(block 65) failed [ 268.755044][T10900] FAT-fs (loop0): Directory bread(block 66) failed [ 268.761588][T10900] FAT-fs (loop0): Directory bread(block 67) failed [ 268.768223][T10900] FAT-fs (loop0): Directory bread(block 68) failed [ 268.774904][T10900] FAT-fs (loop0): Directory bread(block 69) failed [ 268.781509][T10900] FAT-fs (loop0): Directory bread(block 70) failed [ 268.788203][T10900] FAT-fs (loop0): Directory bread(block 71) failed [ 268.794907][T10900] FAT-fs (loop0): Directory bread(block 72) failed [ 268.801559][T10900] FAT-fs (loop0): Directory bread(block 73) failed [ 268.892376][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 268.892403][ T28] audit: type=1400 audit(2000008355.720:4973): avc: denied { mount } for pid=10897 comm="syz.0.2184" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 268.990429][T10875] total_pgpgin 290921 [ 269.042671][T10875] total_pgpgout 290892 [ 269.080981][T10875] total_pgfault 265484 [ 269.109375][T10875] total_pgmajfault 121 [ 269.134408][T10875] total_inactive_anon 0 [ 269.151220][ T28] audit: type=1400 audit(2000008355.720:4974): avc: denied { read write } for pid=10897 comm="syz.0.2184" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 269.394472][T10875] total_active_anon 4096 [ 269.432349][T10875] total_inactive_file 45056 [ 269.471138][T10875] total_active_file 0 [ 269.511518][T10875] total_unevictable 65536 [ 269.538873][T10875] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2175,pid=10874,uid=0 [ 269.575799][ T28] audit: type=1400 audit(2000008355.720:4975): avc: denied { open } for pid=10897 comm="syz.0.2184" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 269.654021][T10875] Memory cgroup out of memory: Killed process 10874 (syz.4.2175) total-vm:96084kB, anon-rss:1228kB, file-rss:22644kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 269.747198][ T28] audit: type=1400 audit(2000008355.790:4976): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 269.959242][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.008866][ T28] audit: type=1400 audit(2000008355.790:4977): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.229054][ T28] audit: type=1400 audit(2000008355.790:4978): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 270.478329][ T28] audit: type=1400 audit(2000008355.870:4979): avc: denied { read } for pid=10901 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 270.566319][ T28] audit: type=1400 audit(2000008355.890:4980): avc: denied { create } for pid=10901 comm="syz.1.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 270.716665][ T28] audit: type=1400 audit(2000008355.910:4981): avc: denied { open } for pid=10901 comm="syz.1.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 270.736258][ T28] audit: type=1400 audit(2000008355.910:4982): avc: denied { perfmon } for pid=10901 comm="syz.1.2185" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 270.875605][T10916] loop0: detected capacity change from 0 to 256 [ 270.991478][T10916] FAT-fs (loop0): Directory bread(block 64) failed [ 270.998189][T10916] FAT-fs (loop0): Directory bread(block 65) failed [ 271.004846][T10916] FAT-fs (loop0): Directory bread(block 66) failed [ 271.011394][T10916] FAT-fs (loop0): Directory bread(block 67) failed [ 271.018055][T10916] FAT-fs (loop0): Directory bread(block 68) failed [ 271.024927][T10916] FAT-fs (loop0): Directory bread(block 69) failed [ 271.031566][T10916] FAT-fs (loop0): Directory bread(block 70) failed [ 271.038288][T10916] FAT-fs (loop0): Directory bread(block 71) failed [ 271.044907][T10916] FAT-fs (loop0): Directory bread(block 72) failed [ 271.051597][T10916] FAT-fs (loop0): Directory bread(block 73) failed [ 271.097477][T10916] __nla_validate_parse: 51 callbacks suppressed [ 271.097495][T10916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2188'. [ 271.112975][T10916] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2188'. [ 271.122393][T10916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2188'. [ 271.131376][T10916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2188'. [ 271.140385][T10916] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2188'. [ 271.149838][T10916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2188'. [ 271.159328][T10916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2188'. [ 271.168363][T10916] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2188'. [ 271.177888][T10916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2188'. [ 271.186951][T10916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2188'. [ 271.974895][T10930] loop0: detected capacity change from 0 to 512 [ 272.023157][T10930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.049456][T10930] ext4 filesystem being mounted at /427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.346880][T10941] veth5: entered promiscuous mode [ 272.351966][T10941] veth5: entered allmulticast mode [ 272.496259][T10947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.546787][T10947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.693546][T10950] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 272.808842][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.830852][T10951] bond2: left promiscuous mode [ 272.844448][T10953] xt_CT: No such helper "snmp_trap" [ 272.867768][T10951] ip6gre1: left promiscuous mode [ 274.661085][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 274.661102][ T28] audit: type=1400 audit(2000008361.490:5062): avc: denied { read } for pid=10972 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 275.008027][ T28] audit: type=1400 audit(2000008361.490:5063): avc: denied { mounton } for pid=10972 comm="syz.1.2203" path="/435/file0" dev="tmpfs" ino=2353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 275.031617][ T28] audit: type=1400 audit(2000008361.490:5064): avc: denied { write } for pid=10972 comm="syz.1.2203" path="/net/tun" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 275.130085][ T28] audit: type=1400 audit(2000008361.620:5065): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 275.212166][ T28] audit: type=1400 audit(2000008361.620:5066): avc: denied { open } for pid=3309 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 275.296635][ T28] audit: type=1400 audit(2000008361.620:5067): avc: denied { ioctl } for pid=3309 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 275.388467][ T28] audit: type=1400 audit(2000008361.680:5068): avc: denied { create } for pid=10976 comm="syz.4.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 275.433145][ T28] audit: type=1400 audit(2000008361.690:5069): avc: denied { write } for pid=10976 comm="syz.4.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 275.453923][ T28] audit: type=1400 audit(2000008361.730:5070): avc: denied { execmem } for pid=10978 comm="syz.1.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 275.473452][ T28] audit: type=1400 audit(2000008361.910:5071): avc: denied { create } for pid=10980 comm="syz.4.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 275.518795][T10987] syzkaller1: entered promiscuous mode [ 275.524562][T10987] syzkaller1: entered allmulticast mode [ 276.872938][T11021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.881668][T11021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.951765][T11022] bridge4: left allmulticast mode [ 277.525046][T11031] __nla_validate_parse: 57 callbacks suppressed [ 277.525184][T11031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2221'. [ 277.540458][T11031] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2221'. [ 277.549928][T11031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2221'. [ 277.559260][T11031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2221'. [ 277.568342][T11031] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2221'. [ 277.577853][T11031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2221'. [ 277.587350][T11031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2221'. [ 277.596470][T11031] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2221'. [ 277.606187][T11031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2221'. [ 277.619281][T11031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2221'. [ 279.447674][T11056] 9p: Bad value for 'source' [ 279.860616][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 279.860794][ T28] audit: type=1400 audit(2000008366.690:5177): avc: denied { create } for pid=11057 comm="syz.0.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.912118][ T28] audit: type=1400 audit(2000008366.720:5178): avc: denied { mount } for pid=11057 comm="syz.0.2230" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 279.961543][ T28] audit: type=1400 audit(2000008366.790:5179): avc: denied { read } for pid=11060 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 280.037920][ T28] audit: type=1400 audit(2000008366.800:5180): avc: denied { prog_load } for pid=11062 comm="syz.1.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 280.058143][ T28] audit: type=1400 audit(2000008366.820:5181): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.083074][ T28] audit: type=1400 audit(2000008366.820:5182): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.107913][ T28] audit: type=1400 audit(2000008366.820:5183): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.162151][ T28] audit: type=1400 audit(2000008366.840:5184): avc: denied { write } for pid=11065 comm="syz.1.2233" name="tun" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 280.241264][ T28] audit: type=1400 audit(2000008366.840:5185): avc: denied { open } for pid=11065 comm="syz.1.2233" path="/dev/net/tun" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 280.297417][ T28] audit: type=1400 audit(2000008366.840:5186): avc: denied { ioctl } for pid=11065 comm="syz.1.2233" path="/dev/net/tun" dev="devtmpfs" ino=139 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 282.420797][T11151] usb usb7: usbfs: process 11151 (syz.0.2263) did not claim interface 0 before use [ 282.981840][T11168] loop0: detected capacity change from 0 to 512 [ 283.072472][T11168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.108022][T11175] __nla_validate_parse: 26 callbacks suppressed [ 283.108038][T11175] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2271'. [ 283.254634][T11182] FAULT_INJECTION: forcing a failure. [ 283.254634][T11182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.269752][T11182] CPU: 1 UID: 0 PID: 11182 Comm: syz.2.2274 Tainted: G W syzkaller #0 PREEMPT(full) [ 283.269790][T11182] Tainted: [W]=WARN [ 283.269798][T11182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.269883][T11182] Call Trace: [ 283.269889][T11182] [ 283.269897][T11182] __dump_stack+0x1d/0x30 [ 283.269937][T11182] dump_stack_lvl+0x95/0xd0 [ 283.269964][T11182] dump_stack+0x15/0x1b [ 283.270025][T11182] should_fail_ex+0x263/0x280 [ 283.270057][T11182] should_fail+0xb/0x20 [ 283.270083][T11182] should_fail_usercopy+0x1a/0x20 [ 283.270115][T11182] copy_fpstate_to_sigframe+0x650/0x7f0 [ 283.270164][T11182] ? copy_fpstate_to_sigframe+0xe5/0x7f0 [ 283.270288][T11182] ? x86_task_fpu+0x36/0x60 [ 283.270314][T11182] get_sigframe+0x34c/0x470 [ 283.270346][T11182] ? get_signal+0xdc3/0xf60 [ 283.270458][T11182] x64_setup_rt_frame+0xa7/0x4e0 [ 283.270565][T11182] arch_do_signal_or_restart+0x24b/0x450 [ 283.270625][T11182] exit_to_user_mode_loop+0x6a/0x6f0 [ 283.270651][T11182] do_syscall_64+0x249/0x370 [ 283.270680][T11182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.270724][T11182] RIP: 0033:0x7f3dac20c817 [ 283.270742][T11182] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 283.270765][T11182] RSP: 002b:00007f3daac3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 283.270789][T11182] RAX: 0000000000000013 RBX: 00007f3dac486090 RCX: 00007f3dac20c819 [ 283.270804][T11182] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003 [ 283.270818][T11182] RBP: 00007f3daac3e090 R08: 0000000000000000 R09: 0000000000000000 [ 283.270832][T11182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.270846][T11182] R13: 00007f3dac486128 R14: 00007f3dac486090 R15: 00007fff1e5f8418 [ 283.270866][T11182] [ 283.632486][T11184] loop1: detected capacity change from 0 to 512 [ 283.640386][T11184] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 283.648931][T11184] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 283.659802][T11184] EXT4-fs (loop1): group descriptors corrupted! [ 284.153781][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.196795][T11200] loop1: detected capacity change from 0 to 1024 [ 284.228996][T11200] EXT4-fs: inline encryption not supported [ 284.242302][T11200] EXT4-fs: Ignoring removed nobh option [ 284.261728][T11208] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2283'. [ 284.294033][T11200] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 284.389833][T11200] System zones: 0-1, 3-12 [ 284.491452][T11200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.599884][T11220] loop4: detected capacity change from 0 to 256 [ 284.628267][T11220] FAT-fs (loop4): Directory bread(block 64) failed [ 284.634893][T11220] FAT-fs (loop4): Directory bread(block 65) failed [ 284.641511][T11220] FAT-fs (loop4): Directory bread(block 66) failed [ 284.648117][T11220] FAT-fs (loop4): Directory bread(block 67) failed [ 284.654676][T11220] FAT-fs (loop4): Directory bread(block 68) failed [ 284.661387][T11220] FAT-fs (loop4): Directory bread(block 69) failed [ 284.668039][T11220] FAT-fs (loop4): Directory bread(block 70) failed [ 284.674854][T11220] FAT-fs (loop4): Directory bread(block 71) failed [ 284.681431][T11220] FAT-fs (loop4): Directory bread(block 72) failed [ 284.688027][T11220] FAT-fs (loop4): Directory bread(block 73) failed [ 284.865026][ T28] kauditd_printk_skb: 239 callbacks suppressed [ 284.865059][ T28] audit: type=1400 audit(2000008371.540:5426): avc: denied { mount } for pid=11211 comm="syz.4.2284" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 285.110167][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.307422][T11224] lo speed is unknown, defaulting to 1000 [ 285.333664][T11224] lo speed is unknown, defaulting to 1000 [ 285.360997][ T28] audit: type=1400 audit(2000008372.190:5427): avc: denied { connect } for pid=11223 comm="syz.2.2288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 285.405680][T11225] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 286.066972][T11236] loop0: detected capacity change from 0 to 512 [ 286.207308][T11236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.260708][ T28] audit: type=1400 audit(2000008373.070:5428): avc: denied { create } for pid=11240 comm="syz.2.2292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 286.492374][T11255] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2295'. [ 286.546513][ T28] audit: type=1400 audit(2000008373.370:5429): avc: denied { create } for pid=11256 comm="syz.2.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 286.649788][ T28] audit: type=1400 audit(2000008373.410:5430): avc: denied { write } for pid=11229 comm="syz.1.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 286.669237][ T28] audit: type=1400 audit(2000008373.470:5431): avc: denied { mount } for pid=11256 comm="syz.2.2296" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 286.701964][ T28] audit: type=1400 audit(2000008373.470:5432): avc: denied { remount } for pid=11256 comm="syz.2.2296" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 286.770070][ T28] audit: type=1400 audit(2000008373.600:5433): avc: denied { setopt } for pid=11263 comm="syz.3.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 286.820506][ T28] audit: type=1400 audit(2000008373.600:5434): avc: denied { create } for pid=11263 comm="syz.3.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 286.865831][ T28] audit: type=1400 audit(2000008373.600:5435): avc: denied { write } for pid=11263 comm="syz.3.2298" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 286.994622][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.435780][T11276] xt_TPROXY: Can be used only with -p tcp or -p udp [ 287.536916][T11292] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2307'. [ 287.955711][T11306] syzkaller0: entered promiscuous mode [ 287.961218][T11306] syzkaller0: entered allmulticast mode [ 288.263857][T11314] loop0: detected capacity change from 0 to 1024 [ 288.300013][T11314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.316997][T11314] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2316'. [ 288.329780][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.582405][T11340] loop0: detected capacity change from 0 to 256 [ 288.615295][T11342] netlink: 'syz.3.2325': attribute type 1 has an invalid length. [ 288.740322][T11340] FAT-fs (loop0): Directory bread(block 64) failed [ 288.747133][T11340] FAT-fs (loop0): Directory bread(block 65) failed [ 288.753860][T11340] FAT-fs (loop0): Directory bread(block 66) failed [ 288.760510][T11340] FAT-fs (loop0): Directory bread(block 67) failed [ 288.767175][T11340] FAT-fs (loop0): Directory bread(block 68) failed [ 288.773778][T11340] FAT-fs (loop0): Directory bread(block 69) failed [ 288.780409][T11340] FAT-fs (loop0): Directory bread(block 70) failed [ 288.786999][T11340] FAT-fs (loop0): Directory bread(block 71) failed [ 288.793872][T11340] FAT-fs (loop0): Directory bread(block 72) failed [ 288.800441][T11340] FAT-fs (loop0): Directory bread(block 73) failed [ 288.826868][T11340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2318'. [ 288.836059][T11340] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2318'. [ 288.845298][T11340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2318'. [ 288.854355][T11340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2318'. [ 288.863369][T11340] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2318'. [ 288.872864][T11340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2318'. [ 288.881863][T11340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2318'. [ 288.890965][T11340] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2318'. [ 288.900778][T11340] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2318'. [ 289.519744][T11362] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 290.220946][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 290.220972][ T28] audit: type=1400 audit(2000008377.001:5483): avc: denied { create } for pid=11373 comm="syz.3.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 290.572875][ T28] audit: type=1400 audit(2000008377.081:5484): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 290.824102][ T28] audit: type=1400 audit(2000008377.651:5485): avc: denied { create } for pid=11380 comm="syz.0.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 290.941761][ T28] audit: type=1400 audit(2000008377.661:5486): avc: denied { connect } for pid=11380 comm="syz.0.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 290.974385][ T28] audit: type=1400 audit(2000008377.751:5487): avc: denied { write } for pid=11383 comm="syz.2.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 290.998272][ T28] audit: type=1400 audit(2000008377.761:5488): avc: denied { ioctl } for pid=11380 comm="syz.0.2336" path="socket:[30376]" dev="sockfs" ino=30376 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 291.029365][ T28] audit: type=1400 audit(2000008377.761:5489): avc: denied { write } for pid=11380 comm="syz.0.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 291.222248][ T28] audit: type=1400 audit(2000008378.041:5490): avc: denied { create } for pid=11385 comm="syz.0.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 291.263235][ T28] audit: type=1400 audit(2000008378.091:5491): avc: denied { mounton } for pid=11385 comm="syz.0.2338" path="/454/file0" dev="tmpfs" ino=2488 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 291.293973][ T28] audit: type=1400 audit(2000008378.101:5492): avc: denied { mount } for pid=11385 comm="syz.0.2338" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 294.553366][T11408] __nla_validate_parse: 53 callbacks suppressed [ 294.553384][T11408] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2346'. [ 295.372321][T11433] loop1: detected capacity change from 0 to 256 [ 295.413249][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 295.413277][ T28] audit: type=1400 audit(2000008382.211:5535): avc: denied { mounton } for pid=11428 comm="syz.1.2353" path="/462/file1" dev="tmpfs" ino=2494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 296.361782][T11435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2354'. [ 296.370960][T11435] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2354'. [ 296.380320][T11435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2354'. [ 296.389951][T11435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2354'. [ 296.398957][T11435] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2354'. [ 296.408441][T11435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2354'. [ 296.417672][T11435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2354'. [ 296.426812][T11435] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2354'. [ 296.436149][T11435] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2354'. [ 297.426341][ T28] audit: type=1400 audit(2000008384.251:5536): avc: denied { write } for pid=11436 comm="syz.2.2356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 298.498244][T11433] FAT-fs (loop1): Directory bread(block 64) failed [ 298.504827][T11433] FAT-fs (loop1): Directory bread(block 65) failed [ 298.511354][T11433] FAT-fs (loop1): Directory bread(block 66) failed [ 298.518011][T11433] FAT-fs (loop1): Directory bread(block 67) failed [ 298.524592][T11433] FAT-fs (loop1): Directory bread(block 68) failed [ 298.531104][T11433] FAT-fs (loop1): Directory bread(block 69) failed [ 298.537719][T11433] FAT-fs (loop1): Directory bread(block 70) failed [ 298.544332][T11433] FAT-fs (loop1): Directory bread(block 71) failed [ 298.550898][T11433] FAT-fs (loop1): Directory bread(block 72) failed [ 298.557457][T11433] FAT-fs (loop1): Directory bread(block 73) failed [ 298.741504][ T28] audit: type=1400 audit(2000008385.401:5537): avc: denied { mount } for pid=11428 comm="syz.1.2353" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 298.890532][T11452] loop0: detected capacity change from 0 to 256 [ 298.971322][T11452] FAT-fs (loop0): Directory bread(block 64) failed [ 298.978076][T11452] FAT-fs (loop0): Directory bread(block 65) failed [ 298.984674][T11452] FAT-fs (loop0): Directory bread(block 66) failed [ 298.991367][T11452] FAT-fs (loop0): Directory bread(block 67) failed [ 298.997960][T11452] FAT-fs (loop0): Directory bread(block 68) failed [ 299.004525][T11452] FAT-fs (loop0): Directory bread(block 69) failed [ 299.011083][T11452] FAT-fs (loop0): Directory bread(block 70) failed [ 299.017678][T11452] FAT-fs (loop0): Directory bread(block 71) failed [ 299.024274][T11452] FAT-fs (loop0): Directory bread(block 72) failed [ 299.030878][T11452] FAT-fs (loop0): Directory bread(block 73) failed [ 299.102077][ T28] audit: type=1400 audit(2000008385.701:5538): avc: denied { create } for pid=11450 comm="syz.3.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 299.704335][ T28] audit: type=1400 audit(2000008386.541:5539): avc: denied { prog_load } for pid=11450 comm="syz.3.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 299.762893][ T28] audit: type=1400 audit(2000008386.541:5540): avc: denied { bpf } for pid=11450 comm="syz.3.2359" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 299.825496][ T28] audit: type=1400 audit(2000008386.541:5541): avc: denied { perfmon } for pid=11450 comm="syz.3.2359" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 299.890004][ T28] audit: type=1400 audit(2000008386.541:5542): avc: denied { prog_run } for pid=11450 comm="syz.3.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 299.950307][ T28] audit: type=1400 audit(2000008386.561:5543): avc: denied { open } for pid=11450 comm="syz.3.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 300.006847][ T28] audit: type=1400 audit(2000008386.561:5544): avc: denied { kernel } for pid=11450 comm="syz.3.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 300.415747][T11459] loop1: detected capacity change from 0 to 512 [ 300.431634][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 300.431652][ T28] audit: type=1400 audit(2000008387.271:5556): avc: denied { map_create } for pid=11460 comm="syz.2.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 300.473066][T11459] EXT4-fs: Ignoring removed nobh option [ 300.497890][ T28] audit: type=1400 audit(2000008387.271:5557): avc: denied { map_read map_write } for pid=11460 comm="syz.2.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 300.518374][ T28] audit: type=1400 audit(2000008387.311:5558): avc: denied { mounton } for pid=11457 comm="syz.1.2360" path="/463/file1" dev="tmpfs" ino=2500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 300.576829][T11459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 300.602581][ T28] audit: type=1400 audit(2000008387.381:5559): avc: denied { read } for pid=11462 comm="syz.2.2362" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 300.626025][ T28] audit: type=1400 audit(2000008387.381:5560): avc: denied { open } for pid=11462 comm="syz.2.2362" path="net:[4026532393]" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 300.650031][ T28] audit: type=1400 audit(2000008387.381:5561): avc: denied { create } for pid=11462 comm="syz.2.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 300.670211][T11459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.683231][T11459] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.693954][ T28] audit: type=1400 audit(2000008387.381:5562): avc: denied { ioctl } for pid=11462 comm="syz.2.2362" path="socket:[30540]" dev="sockfs" ino=30540 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 300.721628][ T28] audit: type=1400 audit(2000008387.401:5563): avc: denied { getopt } for pid=11462 comm="syz.2.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 300.741876][ T28] audit: type=1400 audit(2000008387.431:5564): avc: denied { create } for pid=11464 comm="syz.0.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.762948][ T28] audit: type=1400 audit(2000008387.441:5565): avc: denied { write } for pid=11464 comm="syz.0.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.811759][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.900711][T11485] loop1: detected capacity change from 0 to 512 [ 301.052034][T11485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.085055][T11485] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.154646][T11495] loop4: detected capacity change from 0 to 256 [ 301.188958][T11495] FAT-fs (loop4): Directory bread(block 64) failed [ 301.195735][T11495] FAT-fs (loop4): Directory bread(block 65) failed [ 301.202331][T11495] FAT-fs (loop4): Directory bread(block 66) failed [ 301.208989][T11495] FAT-fs (loop4): Directory bread(block 67) failed [ 301.215677][T11495] FAT-fs (loop4): Directory bread(block 68) failed [ 301.222320][T11495] FAT-fs (loop4): Directory bread(block 69) failed [ 301.228915][T11495] FAT-fs (loop4): Directory bread(block 70) failed [ 301.235467][T11495] FAT-fs (loop4): Directory bread(block 71) failed [ 301.242156][T11495] FAT-fs (loop4): Directory bread(block 72) failed [ 301.248731][T11495] FAT-fs (loop4): Directory bread(block 73) failed [ 301.272913][T11495] __nla_validate_parse: 55 callbacks suppressed [ 301.272951][T11495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2369'. [ 301.288329][T11495] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2369'. [ 301.297679][T11495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2369'. [ 301.306750][T11495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2369'. [ 301.315740][T11495] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2369'. [ 301.325157][T11495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2369'. [ 301.334302][T11495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2369'. [ 301.343494][T11495] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2369'. [ 301.352950][T11495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2369'. [ 301.362179][T11495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2369'. [ 301.633675][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.738584][T11499] syzkaller1: entered promiscuous mode [ 301.821466][T11499] syzkaller1: entered allmulticast mode [ 302.035591][T11507] lo speed is unknown, defaulting to 1000 [ 302.169822][T11507] lo speed is unknown, defaulting to 1000 [ 303.026526][T11539] loop4: detected capacity change from 0 to 2048 [ 303.083017][T11539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.166961][T11539] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 303.281754][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.368647][T11547] loop0: detected capacity change from 0 to 2048 [ 303.414251][T11547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.581727][T11547] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2395: bg 0: block 234: padding at end of block bitmap is not set [ 303.629462][T11559] loop4: detected capacity change from 0 to 1024 [ 303.637154][T11547] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 494 with error 28 [ 303.651624][T11559] ext4: Unknown parameter 'fsmagic' [ 303.671414][T11547] EXT4-fs (loop0): This should not happen!! Data will be lost [ 303.671414][T11547] [ 303.709971][T11547] EXT4-fs (loop0): Total free blocks count 0 [ 303.731297][T11547] EXT4-fs (loop0): Free/Dirty block details [ 303.746618][T11568] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 303.781275][T11547] EXT4-fs (loop0): free_blocks=0 [ 303.791668][T11547] EXT4-fs (loop0): dirty_blocks=496 [ 303.796905][T11547] EXT4-fs (loop0): Block reservation details [ 303.826792][T11547] EXT4-fs (loop0): i_reserved_data_blocks=31 [ 303.857090][T11576] loop1: detected capacity change from 0 to 1024 [ 303.882537][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.925233][T11576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.968434][T11580] loop0: detected capacity change from 0 to 512 [ 304.017216][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.046486][T11580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 304.063981][T11580] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 304.091711][T11580] EXT4-fs error (device loop0): __ext4_fill_super:5563: inode #2: comm syz.0.2399: iget: special inode unallocated [ 304.116626][T11580] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 304.121151][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 304.131199][T11580] EXT4-fs (loop0): Remounting filesystem read-only [ 304.136783][ C1] EXT4-fs (loop0): initial error at time 2000008390: __ext4_fill_super:5563: inode 2 [ 304.152908][ C1] EXT4-fs (loop0): last error at time 2000008390: __ext4_fill_super:5563: inode 2 [ 304.191221][T11580] EXT4-fs (loop0): get root inode failed [ 304.201391][T11580] EXT4-fs (loop0): mount failed [ 304.235785][T11580] netlink: 'syz.0.2399': attribute type 4 has an invalid length. [ 304.312761][T11587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.341320][T11587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.376338][T11593] loop0: detected capacity change from 0 to 1024 [ 304.383179][T11593] EXT4-fs: inline encryption not supported [ 304.389059][T11593] EXT4-fs: Ignoring removed nomblk_io_submit option [ 304.403588][T11593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.434442][T11593] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.2404: Allocating blocks 465-513 which overlap fs metadata [ 304.449254][T11593] EXT4-fs (loop0): Remounting filesystem read-only [ 305.342601][T11592] EXT4-fs (loop0): pa ffff8881081e32a0: logic 256, phys. 369, len 9 [ 305.401984][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.748400][ T28] kauditd_printk_skb: 131 callbacks suppressed [ 305.748420][ T28] audit: type=1400 audit(2000008392.582:5697): avc: denied { bind } for pid=11636 comm="syz.0.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 305.824309][T11645] netlink: 'syz.0.2418': attribute type 5 has an invalid length. [ 305.954752][ T28] audit: type=1400 audit(2000008392.792:5698): avc: denied { ioctl } for pid=11651 comm="syz.1.2423" path="socket:[31760]" dev="sockfs" ino=31760 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 306.023407][T11656] lo speed is unknown, defaulting to 1000 [ 306.038827][T11656] lo speed is unknown, defaulting to 1000 [ 306.589474][T11665] loop1: detected capacity change from 0 to 1024 [ 306.623198][T11665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.638719][T11638] loop0: detected capacity change from 0 to 512 [ 306.659539][T11638] EXT4-fs: Ignoring removed nobh option [ 306.704901][ T28] audit: type=1400 audit(2000008393.542:5699): avc: denied { write } for pid=11664 comm="syz.1.2424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 306.734864][T11638] EXT4-fs (loop0): orphan cleanup on readonly fs [ 306.757211][ T28] audit: type=1400 audit(2000008393.592:5700): avc: denied { create } for pid=11676 comm="syz.3.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 306.791343][T11638] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.2418: EA inode hash validation failed [ 306.794858][ T28] audit: type=1400 audit(2000008393.592:5701): avc: denied { connect } for pid=11676 comm="syz.3.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 306.824500][ T28] audit: type=1400 audit(2000008393.592:5702): avc: denied { ioctl } for pid=11676 comm="syz.3.2427" path="socket:[31804]" dev="sockfs" ino=31804 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 306.825471][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.852270][T11638] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 306.874901][T11638] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.2418: corrupted inode contents [ 306.890890][T11638] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 306.894114][T11638] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.2418: mark_inode_dirty error [ 306.904311][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 306.904445][ C0] EXT4-fs (loop0): initial error at time 2000008393: ext4_do_update_inode:5569: inode 15 [ 306.904985][ C0] EXT4-fs (loop0): last error at time 2000008393: ext4_do_update_inode:5569: inode 15 [ 306.953510][T11638] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 306.960126][T11638] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.2418: corrupted inode contents [ 306.995505][T11638] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 306.998440][T11638] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.2418: mark_inode_dirty error [ 307.023330][T11638] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 307.025520][T11638] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.2418: mark inode dirty (error -117) [ 307.081814][T11638] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 307.086950][T11638] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 307.132625][T11638] EXT4-fs (loop0): 1 orphan inode deleted [ 307.149477][T11638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 307.198885][T11638] __nla_validate_parse: 38 callbacks suppressed [ 307.199077][T11638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2418'. [ 307.297155][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.365959][ T28] audit: type=1400 audit(2000008394.202:5703): avc: denied { bind } for pid=11683 comm="syz.0.2430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 307.842453][ T28] audit: type=1400 audit(2000008394.642:5704): avc: denied { connect } for pid=11688 comm="syz.0.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 307.930824][T11701] tipc: Started in network mode [ 307.946215][T11701] tipc: Node identity 124b6b5a42, cluster identity 4711 [ 307.961049][T11701] tipc: Enabled bearer , priority 0 [ 308.090016][ T28] audit: type=1400 audit(2000008394.922:5705): avc: denied { setopt } for pid=11698 comm="syz.1.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 308.130215][ T28] audit: type=1400 audit(2000008394.932:5706): avc: denied { write } for pid=11698 comm="syz.1.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 308.757445][T11700] tipc: Disabling bearer [ 310.805647][ T28] kauditd_printk_skb: 173 callbacks suppressed [ 310.805664][ T28] audit: type=1400 audit(2000008397.642:5880): avc: denied { bind } for pid=11739 comm="syz.0.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 310.867072][T11744] loop0: detected capacity change from 0 to 1024 [ 310.873633][ T28] audit: type=1400 audit(2000008397.682:5881): avc: denied { execute_no_trans } for pid=11739 comm="syz.0.2447" path="/478/file0" dev="tmpfs" ino=2618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 310.914087][ T28] audit: type=1400 audit(2000008397.742:5882): avc: denied { remount } for pid=11743 comm="syz.0.2448" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 311.289279][T11751] loop0: detected capacity change from 0 to 512 [ 311.379770][T11751] EXT4-fs (loop0): 1 orphan inode deleted [ 311.393349][T11751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.397789][ T28] audit: type=1400 audit(2000008398.232:5883): avc: denied { create } for pid=11778 comm="syz.2.2460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 311.426671][ T30] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 311.429664][T11751] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.439563][ T30] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1 [ 311.472246][ T28] audit: type=1400 audit(2000008398.272:5884): avc: denied { setopt } for pid=11778 comm="syz.2.2460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 311.510487][ T28] audit: type=1400 audit(2000008398.302:5885): avc: denied { read write } for pid=11743 comm="syz.0.2448" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 311.534760][ T28] audit: type=1400 audit(2000008398.302:5886): avc: denied { open } for pid=11743 comm="syz.0.2448" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 311.628516][ T28] audit: type=1400 audit(2000008398.402:5887): avc: denied { write } for pid=11743 comm="syz.0.2448" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 311.730129][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2464'. [ 311.912358][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.927170][ T28] audit: type=1400 audit(2000008398.762:5888): avc: denied { bind } for pid=11807 comm="syz.4.2470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 312.019165][T11818] loop0: detected capacity change from 0 to 1024 [ 312.049989][T11818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.103496][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.957166][T11832] loop0: detected capacity change from 0 to 256 [ 313.041841][T11832] FAT-fs (loop0): Directory bread(block 64) failed [ 313.083749][T11832] FAT-fs (loop0): Directory bread(block 65) failed [ 313.124030][T11832] FAT-fs (loop0): Directory bread(block 66) failed [ 313.166706][T11832] FAT-fs (loop0): Directory bread(block 67) failed [ 313.210537][T11832] FAT-fs (loop0): Directory bread(block 68) failed [ 313.257796][T11832] FAT-fs (loop0): Directory bread(block 69) failed [ 313.284038][T11832] FAT-fs (loop0): Directory bread(block 70) failed [ 313.292390][T11832] FAT-fs (loop0): Directory bread(block 71) failed [ 313.299035][T11832] FAT-fs (loop0): Directory bread(block 72) failed [ 313.305701][T11832] FAT-fs (loop0): Directory bread(block 73) failed [ 313.323215][T11832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2478'. [ 313.339180][T11832] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2478'. [ 313.348371][T11832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2478'. [ 313.369465][T11832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2478'. [ 313.378676][T11832] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2478'. [ 313.390815][T11832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2478'. [ 313.401847][T11832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2478'. [ 313.435268][T11832] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2478'. [ 313.458385][T11832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2478'. [ 313.481279][T11832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2478'. [ 314.956552][T11880] loop1: detected capacity change from 0 to 1024 [ 314.992150][T11882] veth7: entered promiscuous mode [ 315.012525][T11880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.030335][T11882] veth7: entered allmulticast mode [ 315.145556][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.235267][T11895] loop1: detected capacity change from 0 to 1024 [ 315.269610][T11895] EXT4-fs: Ignoring removed mblk_io_submit option [ 315.316488][T11897] blktrace: Concurrent blktraces are not allowed on sg0 [ 315.340875][T11895] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 315.365777][T11897] lo speed is unknown, defaulting to 1000 [ 315.371967][T11897] lo speed is unknown, defaulting to 1000 [ 315.424590][T11895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.467016][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.778878][T11905] lo speed is unknown, defaulting to 1000 [ 315.785348][T11905] lo speed is unknown, defaulting to 1000 [ 315.857329][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 315.857426][ T28] audit: type=1400 audit(2000008402.672:5937): avc: denied { write } for pid=11902 comm="syz.1.2505" path="/net/tun" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0" [ 316.092456][ T28] audit: type=1400 audit(2000008402.672:5938): avc: denied { create } for pid=11902 comm="syz.1.2505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 316.173711][T11908] 9p: Bad value for 'source' [ 316.215453][ T28] audit: type=1400 audit(2000008402.672:5939): avc: denied { getopt } for pid=11902 comm="syz.1.2505" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 316.236159][ T28] audit: type=1400 audit(2000008402.752:5940): avc: denied { connect } for pid=11902 comm="syz.1.2505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 316.478762][T11911] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.496907][T11911] batman_adv: batadv0: Interface activated: dummy0 [ 316.529600][ T28] audit: type=1400 audit(2000008402.812:5941): avc: denied { open } for pid=11888 comm="syz.4.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 316.579502][ T28] audit: type=1400 audit(2000008402.822:5942): avc: denied { kernel } for pid=11888 comm="syz.4.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 316.630908][T11911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.691199][ T28] audit: type=1400 audit(2000008402.842:5943): avc: denied { write } for pid=11888 comm="syz.4.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 316.783126][ T28] audit: type=1400 audit(2000008403.012:5944): avc: denied { mounton } for pid=11888 comm="syz.4.2501" path="/481/bus" dev="tmpfs" ino=2609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 316.871496][ T28] audit: type=1400 audit(2000008403.072:5945): avc: denied { write } for pid=11888 comm="syz.4.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 316.930642][ T28] audit: type=1400 audit(2000008403.092:5946): avc: denied { nlmsg_write } for pid=11888 comm="syz.4.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 317.036960][T11924] veth5: entered promiscuous mode [ 317.042226][T11924] veth5: entered allmulticast mode [ 317.327959][T11930] tipc: Invalid UDP bearer configuration [ 317.327978][T11930] tipc: Enabling of bearer rejected, failed to enable media [ 318.380628][T11943] loop0: detected capacity change from 0 to 128 [ 318.396430][T11943] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 318.926113][T11958] loop0: detected capacity change from 0 to 1024 [ 319.011443][T11958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.112188][T11967] __nla_validate_parse: 53 callbacks suppressed [ 319.112206][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2526'. [ 319.141029][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.354937][T11967] veth3: entered promiscuous mode [ 319.360010][T11967] veth3: entered allmulticast mode [ 320.701050][T11975] FAULT_INJECTION: forcing a failure. [ 320.701050][T11975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.824509][T11975] CPU: 0 UID: 0 PID: 11975 Comm: syz.2.2529 Tainted: G W syzkaller #0 PREEMPT(full) [ 320.824548][T11975] Tainted: [W]=WARN [ 320.824556][T11975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 320.824567][T11975] Call Trace: [ 320.824573][T11975] [ 320.824601][T11975] __dump_stack+0x1d/0x30 [ 320.824631][T11975] dump_stack_lvl+0x95/0xd0 [ 320.824658][T11975] dump_stack+0x15/0x1b [ 320.824680][T11975] should_fail_ex+0x263/0x280 [ 320.824759][T11975] should_fail+0xb/0x20 [ 320.824780][T11975] should_fail_usercopy+0x1a/0x20 [ 320.824811][T11975] _copy_to_user+0x20/0xa0 [ 320.824889][T11975] dgram_getsockopt+0x21a/0x280 [ 320.824925][T11975] sock_common_getsockopt+0x60/0x70 [ 320.825028][T11975] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 320.825061][T11975] do_sock_getsockopt+0x1c4/0x210 [ 320.825096][T11975] __x64_sys_getsockopt+0x11d/0x1a0 [ 320.825133][T11975] x64_sys_call+0x2dcf/0x3020 [ 320.825164][T11975] do_syscall_64+0x12c/0x370 [ 320.825218][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.825246][T11975] RIP: 0033:0x7f3dac20c819 [ 320.825261][T11975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.825279][T11975] RSP: 002b:00007f3daac5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 320.825325][T11975] RAX: ffffffffffffffda RBX: 00007f3dac485fa0 RCX: 00007f3dac20c819 [ 320.825339][T11975] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000004 [ 320.825351][T11975] RBP: 00007f3daac5f090 R08: 0000200000000140 R09: 0000000000000000 [ 320.825386][T11975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.825401][T11975] R13: 00007f3dac486038 R14: 00007f3dac485fa0 R15: 00007fff1e5f8418 [ 320.825423][T11975] [ 321.279438][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 321.279505][ T28] audit: type=1400 audit(2000008408.112:5971): avc: denied { bind } for pid=11978 comm="syz.3.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 321.307151][ T28] audit: type=1400 audit(2000008408.112:5972): avc: denied { node_bind } for pid=11978 comm="syz.3.2532" saddr=224.0.0.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 321.489702][ T28] audit: type=1400 audit(2000008408.312:5973): avc: denied { create } for pid=11986 comm="syz.3.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 321.580959][ T28] audit: type=1400 audit(2000008408.312:5974): avc: denied { getopt } for pid=11986 comm="syz.3.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 321.690197][ T28] audit: type=1400 audit(2000008408.312:5975): avc: denied { write } for pid=11986 comm="syz.3.2533" path="socket:[32774]" dev="sockfs" ino=32774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 321.795644][ T28] audit: type=1400 audit(2000008408.462:5976): avc: denied { create } for pid=11994 comm="syz.3.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 321.870182][T12004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2539'. [ 321.896087][ T28] audit: type=1400 audit(2000008408.462:5977): avc: denied { connect } for pid=11994 comm="syz.3.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 321.970177][ T28] audit: type=1400 audit(2000008408.462:5978): avc: denied { write } for pid=11994 comm="syz.3.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 322.041872][ T28] audit: type=1400 audit(2000008408.572:5979): avc: denied { write } for pid=11994 comm="syz.3.2537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 322.106764][ T28] audit: type=1400 audit(2000008408.582:5980): avc: denied { create } for pid=11994 comm="syz.3.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 322.148585][T12017] loop0: detected capacity change from 0 to 512 [ 322.179247][T12017] EXT4-fs (loop0): mounted filesystem 0000ff07-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.220378][T12017] ext4 filesystem being mounted at /497/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.284603][T12020] 9p: Bad value for 'source' [ 322.345759][ T3311] EXT4-fs (loop0): unmounting filesystem 0000ff07-0000-0000-0000-000000000000. [ 322.439503][T12022] loop4: detected capacity change from 0 to 1024 [ 322.461642][T12022] ext4: Invalid gid '0x00000000ffffffff' [ 322.677899][T12034] loop4: detected capacity change from 0 to 512 [ 322.800728][T12034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.844392][T12034] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.903866][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.017093][T12046] 9pnet_fd: Insufficient options for proto=fd [ 323.347974][T12054] bridge3: entered promiscuous mode [ 323.371989][T12054] bridge3: entered allmulticast mode [ 323.409122][T12061] loop1: detected capacity change from 0 to 1024 [ 323.461886][T12061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.530807][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.650206][T12074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2565'. [ 323.896701][T12087] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2562'. [ 324.661077][T12100] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2574'. [ 324.775119][T12101] loop1: detected capacity change from 0 to 512 [ 324.790560][T12101] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 325.451268][T12119] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2582'. [ 325.805473][T12124] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 325.925242][T12124] bond1 (unregistering): Released all slaves [ 326.268232][T12138] loop0: detected capacity change from 0 to 256 [ 326.290259][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 326.290277][ T28] audit: type=1400 audit(2000008413.133:6025): avc: denied { mounton } for pid=12137 comm="syz.0.2589" path="/513/bus" dev="tmpfs" ino=2801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 326.354690][ T28] audit: type=1400 audit(2000008413.183:6026): avc: denied { mount } for pid=12137 comm="syz.0.2589" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 326.395184][T12138] netlink: 'syz.0.2589': attribute type 2 has an invalid length. [ 326.398800][ T28] audit: type=1400 audit(2000008413.233:6027): avc: denied { read } for pid=12137 comm="syz.0.2589" dev="nsfs" ino=4026532510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 326.454606][ T28] audit: type=1400 audit(2000008413.233:6028): avc: denied { open } for pid=12137 comm="syz.0.2589" path="net:[4026532510]" dev="nsfs" ino=4026532510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 326.518472][ T28] audit: type=1400 audit(2000008413.233:6029): avc: denied { ioctl } for pid=12137 comm="syz.0.2589" path="socket:[33226]" dev="sockfs" ino=33226 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.570031][ T28] audit: type=1400 audit(2000008413.243:6030): avc: denied { open } for pid=12137 comm="syz.0.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 326.600007][ T28] audit: type=1400 audit(2000008413.243:6031): avc: denied { kernel } for pid=12137 comm="syz.0.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 326.636119][ T28] audit: type=1400 audit(2000008413.283:6032): avc: denied { write } for pid=12137 comm="syz.0.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 326.682428][ T28] audit: type=1400 audit(2000008413.343:6033): avc: denied { create } for pid=12137 comm="syz.0.2589" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 326.727300][ T28] audit: type=1400 audit(2000008413.433:6034): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 327.603767][T12167] 9p: Bad value for 'source' [ 328.496767][T12181] veth0_to_team: entered promiscuous mode [ 328.571043][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2602'. [ 328.695993][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2602'. [ 330.036045][T12191] xt_policy: output policy not valid in PREROUTING and INPUT [ 330.756143][T12191] batman_adv: batadv0: Interface deactivated: dummy0 [ 330.954622][T12205] ================================================================== [ 330.962762][T12205] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 330.970079][T12205] [ 330.972408][T12205] read-write to 0xffffc90010037e28 of 8 bytes by task 12206 on cpu 0: [ 330.980646][T12205] shmem_writeout+0x2f1/0x920 [ 330.985330][T12205] shrink_folio_list+0x1f1f/0x2820 [ 330.990457][T12205] evict_folios+0x2a60/0x35c0 [ 330.995145][T12205] try_to_shrink_lruvec+0x81b/0xbf0 [ 331.000359][T12205] shrink_lruvec+0x255/0x1c60 [ 331.005058][T12205] shrink_node+0x67a/0x2130 [ 331.009565][T12205] do_try_to_free_pages+0x408/0xc80 [ 331.014772][T12205] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 331.020678][T12205] try_charge_memcg+0x37e/0xa10 [ 331.025540][T12205] obj_cgroup_charge_pages+0x23/0xc0 [ 331.030838][T12205] __memcg_kmem_charge_page+0x9e/0x170 [ 331.036318][T12205] __alloc_frozen_pages_noprof+0x18a/0x360 [ 331.042164][T12205] alloc_pages_mpol+0xb3/0x260 [ 331.046962][T12205] alloc_pages_noprof+0x8f/0x130 [ 331.052005][T12205] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 331.057946][T12205] __kvmalloc_node_noprof+0x3d4/0x650 [ 331.063326][T12205] futex_hash_allocate+0x190/0x9d0 [ 331.068449][T12205] futex_hash_prctl+0xd8/0xf0 [ 331.073141][T12205] __se_sys_prctl+0xa3d/0x13f0 [ 331.077915][T12205] __x64_sys_prctl+0x67/0x80 [ 331.082555][T12205] x64_sys_call+0x2533/0x3020 [ 331.087244][T12205] do_syscall_64+0x12c/0x370 [ 331.091854][T12205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.097751][T12205] [ 331.100075][T12205] read to 0xffffc90010037e28 of 8 bytes by task 12205 on cpu 1: [ 331.107703][T12205] shmem_fallocate+0x5c0/0x920 [ 331.112479][T12205] vfs_fallocate+0x3b6/0x450 [ 331.117074][T12205] __x64_sys_fallocate+0x7a/0xd0 [ 331.122017][T12205] x64_sys_call+0x298e/0x3020 [ 331.126706][T12205] do_syscall_64+0x12c/0x370 [ 331.131307][T12205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.137295][T12205] [ 331.139617][T12205] value changed: 0x0000000000001456 -> 0x0000000000001468 [ 331.146723][T12205] [ 331.149043][T12205] Reported by Kernel Concurrency Sanitizer on: [ 331.155194][T12205] CPU: 1 UID: 0 PID: 12205 Comm: syz.1.2608 Tainted: G W syzkaller #0 PREEMPT(full) [ 331.166133][T12205] Tainted: [W]=WARN [ 331.169934][T12205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.180012][T12205] ==================================================================