last executing test programs: 5.399617463s ago: executing program 4 (id=451): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r1, 0x0, 0xfffa, 0xc4, 0x5a3, 0xfffffffc}, 0x14) 4.462873818s ago: executing program 4 (id=470): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r0, 0x0, 0xc1b) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x78ae43d9a4c16c5b}, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x400300, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x17fed9aa0b4f95a0, r1, {r2}}, './file0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) (async) getdents(r5, &(0x7f0000000180)=""/171, 0xab) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r8, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) r9 = open(&(0x7f0000000040)='./file0\x00', 0x4142, 0x0) (async) r10 = inotify_init() inotify_add_watch(r10, &(0x7f0000000140)='./file0\x00', 0xd0000ee9) (async) preadv(r9, 0x0, 0x0, 0xa26, 0x6) (async) r11 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r12, 0x107, 0x16, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) (async) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r11, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="20000000101401"], 0x20}}, 0x40c0) 4.400668712s ago: executing program 4 (id=472): unshare(0x400) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x2000000, 0xffffffffffffffff, 0x0) 4.359656624s ago: executing program 0 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000280)={0x394e}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) 4.292373138s ago: executing program 4 (id=476): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xdc, 0x1, 0x3, 0xfffffffffffffff9, 0x3, 0x3e, 0x1001, 0x101, 0x40, 0x2001df, 0x0, 0x3b, 0x38, 0x1, 0x27, 0x5, 0xff}, [{0x3, 0x0, 0x7fffffffffffffff, 0x2, 0x6, 0xffc, 0x80059b4, 0x8}]}, 0x78) r2 = syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x183043) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x12, 0x8, 0xd, "fee8a2ab78fc179fcff8a0e91ddaaca7bd6447a4b4e00d9683dda1afb94c1956b7fb0a018c060000000000000300000000000000000000000000e0ffffff00", "2809e8dbe10859892d0000b420a9c81f40f05f819e0117020000f20020000000e903001000", "90be8b1c5512406c5f00", [0x4, 0x5]}}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x810, r3, 0x65eed000) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xabe33e5d, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0xff37) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2, {[@timestamp={0x44, 0x18, 0x8a, 0x0, 0x1, [0x39d, 0xfffffffc, 0x9, 0xaf8, 0xa]}, @lsrr={0x83, 0x3, 0x19}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0xf4, 0x1, 0x3, [{@private=0xa010102, 0x2}, {@dev, 0xf9}, {@multicast2}, {@remote, 0x2}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0xde, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x5}, {@private=0xa010101, 0x1}, {@rand_addr=0x64010101, 0x54aadfa6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x1}, {@private=0xa010100, 0x9}]}]}}}}}) 2.859158692s ago: executing program 4 (id=481): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0xfffa, 0xc4, 0x5a3, 0xfffffffc}, 0x14) 2.840815573s ago: executing program 2 (id=482): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xabe33e5d, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0xff37) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 2.772916818s ago: executing program 4 (id=483): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioperm(0x0, 0x2, 0x7e) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000900), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf05030000002900070073797374656d5f753a6f626a6563745f723a7573626d6f6e5f6465766963650300d2ff8500000000"], 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x4000090) 2.770764378s ago: executing program 0 (id=484): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="660a00000000df006111ba0000000000850000005400000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb72, &(0x7f00000017c0)="$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") 2.328625173s ago: executing program 0 (id=486): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x2010, r4, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r4, 0x10000000) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, 0x0, &(0x7f0000000740)) bind$inet(r4, &(0x7f0000000a80)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.305605255s ago: executing program 1 (id=487): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xdc, 0x1, 0x3, 0xfffffffffffffff9, 0x3, 0x3e, 0x1001, 0x101, 0x40, 0x2001df, 0x0, 0x3b, 0x38, 0x1, 0x27, 0x5, 0xff}, [{0x3, 0x0, 0x7fffffffffffffff, 0x2, 0x6, 0xffc, 0x80059b4, 0x8}]}, 0x78) r2 = syz_open_dev$loop(&(0x7f0000000000), 0xf, 0x183043) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x12, 0x8, 0xd, "fee8a2ab78fc179fcff8a0e91ddaaca7bd6447a4b4e00d9683dda1afb94c1956b7fb0a018c060000000000000300000000000000000000000000e0ffffff00", "2809e8dbe10859892d0000b420a9c81f40f05f819e0117020000f20020000000e903001000", "90be8b1c5512406c5f00", [0x4, 0x5]}}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x810, r3, 0x65eed000) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xabe33e5d, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0xff37) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2, {[@timestamp={0x44, 0x18, 0x8a, 0x0, 0x1, [0x39d, 0xfffffffc, 0x9, 0xaf8, 0xa]}, @lsrr={0x83, 0x3, 0x19}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0xf4, 0x1, 0x3, [{@private=0xa010102, 0x2}, {@dev, 0xf9}, {@multicast2}, {@remote, 0x2}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0xde, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x5}, {@private=0xa010101, 0x1}, {@rand_addr=0x64010101, 0x54aadfa6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x1}, {@private=0xa010100, 0x9}]}]}}}}}) 2.160987403s ago: executing program 1 (id=488): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xabe33e5d, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0xff37) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 2.057497339s ago: executing program 0 (id=490): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xabe33e5d, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0xff37) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 1.690177561s ago: executing program 1 (id=491): unshare(0x400) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0x10) close_range(r0, r1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x0) unshare(0x42040000) sendto(r2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000000)=0xc) 1.689318651s ago: executing program 2 (id=492): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) epoll_create(0x1) dup(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.587726417s ago: executing program 2 (id=493): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map, 0xffffffffffffffff, 0x3e, 0x32}, 0x20) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback, 0xffffffffffffffff, 0x20, 0x2004, 0x0, @value=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900)}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x48}}, 0x0) 1.53215049s ago: executing program 1 (id=494): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4d0fb, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x1, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x85c, &(0x7f0000000300)={0x0, 0x3052, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)={[], [], 0x22}, 0x0, 0x47c, &(0x7f0000000440)="$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") syz_pidfd_open(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000640)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d4e9f3570a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b"], 0x6, 0x2c1, &(0x7f0000001880)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x119) setresuid(0xee00, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000000c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) dup(r2) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206030000000000000000000000000005000100070000000900020073797a32000000000c00078005001500080000000500050002000000050004000000683a69702c706f72742c69"], 0x58}}, 0x0) mlockall(0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='.-}\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x30) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8}, 0xc) getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) 1.381950059s ago: executing program 3 (id=495): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4d0fb, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x1, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x85c, &(0x7f0000000300)={0x0, 0x3052, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)={[], [], 0x22}, 0x0, 0x47c, &(0x7f0000000440)="$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") syz_pidfd_open(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x119) setresuid(0xee00, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000000c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) dup(r2) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206030000000000000000000000000005000100070000000900020073797a32000000000c00078005001500080000000500050002000000050004000000683a69702c706f72742c69"], 0x58}}, 0x0) mlockall(0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='.-}\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x30) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8}, 0xc) getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) 1.19321158s ago: executing program 3 (id=496): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/3, 0x3}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000003c0)=""/54, 0x36}, {&(0x7f0000000400)=""/1, 0x1}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000880)=""/237, 0xed}], 0x9, &(0x7f0000001340)=""/4096, 0x1000}, 0x7}], 0x1, 0x2263, &(0x7f0000003700)={0x77359400}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) recvmsg$unix(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x62) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20620, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYRES32=r4], &(0x7f0000000280)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0xa}, 0x94) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) fsetxattr$security_selinux(r9, &(0x7f0000000200), &(0x7f00000002c0)='system_u:object_r:ppp_device_t:s0\x00', 0x22, 0x3) readlinkat(r3, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 1.076485647s ago: executing program 1 (id=497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000280)={0x394e}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0) 718.301668ms ago: executing program 0 (id=498): r0 = syz_io_uring_setup(0xbd7, &(0x7f0000000040)={0x0, 0xe14f, 0x8, 0x1, 0x4000032f}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r3 = syz_io_uring_setup(0x10e6, &(0x7f0000000b40)={0x0, 0xbdee, 0x10, 0x400005, 0x1ef}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r6}}) io_uring_enter(r3, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, 'gre0\x00'}}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) unshare(0x22020600) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x6, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) shutdown(r7, 0x1) socket$inet6(0xa, 0x6, 0xffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000140)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r9, 0x27, 0xe, 0x0, &(0x7f0000000440)="f8ad48bc02cb29dcc8007e4b86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 589.396265ms ago: executing program 2 (id=499): syz_io_uring_setup(0x85c, &(0x7f0000000300)={0x0, 0x3052, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000000), 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r2) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x701, 0x4, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd9, 0xd9, 0x6, [@struct={0x3, 0x1, 0x0, 0x4, 0x1, 0x8, [{0xc, 0x0, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x2e5}}, @ptr={0x2, 0x0, 0x0, 0x2, 0x1}, @enum64={0x10, 0x2, 0x0, 0x13, 0x1, 0xd, [{0x10000, 0x2, 0x1abd}, {0xd, 0x59e, 0xe3a}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x4}, @enum64={0x6, 0x2, 0x0, 0x13, 0x0, 0x3, [{0x9, 0x1, 0x1}, {0x4, 0x0, 0x3}]}, @fwd={0xd}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x9}}, @datasec={0xa, 0x2, 0x0, 0xf, 0x1, [{0x1, 0x0, 0x80}, {0x1, 0x8001, 0xb}], "fa"}]}, {0x0, [0x30, 0x0, 0x61, 0x5f]}}, &(0x7f0000000040)=""/35, 0xfa, 0x23, 0x0, 0x6}, 0x28) 529.938469ms ago: executing program 2 (id=500): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@map, 0xffffffffffffffff, 0x3e, 0x32}, 0x20) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@fallback, 0xffffffffffffffff, 0x20, 0x2004, 0x0, @value=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000900)}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 503.99634ms ago: executing program 3 (id=501): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x2010, r4, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r4, 0x10000000) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, 0x0, &(0x7f0000000740)) bind$inet(r4, &(0x7f0000000a80)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 392.922957ms ago: executing program 3 (id=502): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{0x0}, {0x0}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000004100000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 337.999201ms ago: executing program 3 (id=503): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000340)={[{@init_itable_val}, {@jqfmt_vfsold}, {@sysvgroups}, {@jqfmt_vfsold}, {@dax_inode}, {@quota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x100000001}}]}, 0x3, 0x442, &(0x7f0000001180)="$eJzs3M1vG0UbAPBn7aR9+5m8VfloWiBQEBEfSZOW0gMXEEgcQEKCQzmGJK1C3QY1RqJVBAGhckSVuCOOSPwFnOCCgBMSV7ijShXKpYWT0drexHbsNHGdLNS/n7TtzO44M493x57ZySaAvjWa/pNE7I+I3yJiqJZtLjBa++/2ytLMXytLM0lUKm/+mVTL3VpZmsmKZq/bl2UGIgqfJnG0Tb2LV65emC6V5i7X8xPli+9NLF65+uz8xenzc+fnLk2dOXPq5OTzp6ee60mcaVy3Rj5cOHbk1bevvz5z9vo7P32TZPG3xNEjoxsdfKJS6XF1+TrQkE4GcmwIW1KsddMYrPb/oSjG2skbilc+aShaPphLC4HtUqlUKvd3PrxcAe5hSeTdAiAf2Rd9Ov/Ntogo7NDwI3c3X6xNgNK4b9e32pGB1TdhsGV+20ujEXF2+e8v0y225z4EAECT79LxzzPrxn/VIWDjfaGD9TWU4Yj4f0QciojTEXE4Iu6LqJZ9ICIe3GL9rYsk68c/hRtdBbZJ6fjvhfraVvP4b3UIPFys5w5U4x9Mzs2X5k7U35OxGNyd5ic3qOP7l3/9vNOxxvFfuqX1Z2PBejtuDOxufs3sdHn6bmJudPPjiJGBdvEnqysBSUQciYiRLuuYf+rrY52O3Tn+DfRgnanyVcSTtfO/HC3xZ5KN1ycn/heluRMT2VWx3s+/XHujU/13FX8PpOd/b9vrfzX+4aRxvXZx63Vc+/2zjnOabq//XclbTfs+mC6XL09G7EpeqzW6cf9US7mptfJp/GPH2/f/Q7H2ThyNiPQifigiHo6IR+ptfzQiHouI4xvE/+NLj7/bffzbK41/dkvnfy2xK1r3tE8UL/zwbVOlw1uJPz3/p6qpsfqezXz+baZd3V3NAAAA8N9TiIj9kRTGV9OFwvh47Xf4D8feQmlhsfz0uYX3L83WnhEYjsFCdqdrqOF+6GR9Wp/lp1ryJ+v3jb8o7qnmx2cWSrN5Bw99bl+H/p/6o5h364Bt53kt6F/6P/Qv/R/6l/4P/atN/9+TRzuAndfu+/+jHNoB7LyW/m/ZD/qI+T/0r276f9/8hSC4x/n+h760uCfu/JC8hMS6RBT+Fc2QSBPZcLyHPznvTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDe+CcAAP//Fmvj5w==") 256.675225ms ago: executing program 1 (id=504): r0 = socket$netlink(0x10, 0x3, 0x8000000004) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x102260, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000040)=0x2c) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000100), 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r6, &(0x7f0000000bc0)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) sendfile(r6, r4, 0x0, 0x40001) sendfile(r6, r5, 0x0, 0x7ffff000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000300)={r7, 0x5}, 0x8) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) 243.380076ms ago: executing program 3 (id=505): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="9800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a64001280110001006272696467655f736c617665000001004c0005800500130001000000050005000000000005001c00000000000500060001000000060002000100000005001e0000000000050009000100000006001f00060000000500090000000000140003006272696467655f736c6176655f30"], 0x98}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x2010, r4, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r4, 0x10000000) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000700)=@assoc_value={0x0, 0x80}, &(0x7f0000000740)=0x8) bind$inet(r4, &(0x7f0000000a80)={0x2, 0x4e23, @local}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x6666, 0x8804, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0xf1, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0xe, {0x9, 0x21, 0x5, 0x6b, 0x1, {0x22, 0xd6e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x10, 0x8}}}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x110, 0xc, 0x5, 0x6, 0x8, 0x2}, 0x35, &(0x7f0000000b40)={0x5, 0xf, 0x35, 0x3, [@generic={0x11, 0x10, 0x3, "25a9c16e07dcde2074cdd5f667c7"}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x80, 0xf, 0x3, [0x60c0, 0xc000, 0x3fc0]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x0, 0x5}]}, 0x3, [{0x9f, &(0x7f0000000b80)=@string={0x9f, 0x3, "b9b369f62ae894398e8c4df2a8da64cf9429d51422064fa1a624f5560d071b707073472cd2c1b325830fa6aaad9a925b83c5126fa2de19b6d1eaa32be24ab9284ec55489444b26901345b216e61877c9dda0762fbdfe4355e82bc2e655b7757bb5d88e2baf3a5d8591b416f83ee052c4945b27f46fd321ed6ff3776b9d4b3c5edd70b0d275668e93eba8c0c6b8b87984c37a7d28cd769141e6942e38aa"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x409}}, {0x36, &(0x7f0000000c80)=@string={0x36, 0x3, "5e97fa58b462b9c5d8590eed73d221494a0826547f2e28d418648ebaf96e7979392a6c2f43a6d50bf230aba35b522e69143f4dd2"}}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 176.41827ms ago: executing program 2 (id=506): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000800)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000200)=0xffffffffffffff4e) r5 = socket$unix(0x1, 0x1, 0x0) io_setup(0x85, &(0x7f0000001040)=0x0) io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x300}]) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r9 = eventfd(0x0) io_submit(r8, 0x2, &(0x7f0000001640)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r9, 0x0, 0x0, 0x7, 0x0, 0x0, r9}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x8, r9, &(0x7f00000001c0), 0x0, 0x58, 0x0, 0x3, r9}]) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 0s ago: executing program 0 (id=507): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xabe33e5d, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0xff37) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 17.180464][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 17.180479][ T28] audit: type=1400 audit(1771256488.679:57): avc: denied { transition } for pid=3187 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.184402][ T28] audit: type=1400 audit(1771256488.679:58): avc: denied { noatsecure } for pid=3187 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.187095][ T28] audit: type=1400 audit(1771256488.679:59): avc: denied { write } for pid=3187 comm="sh" path="pipe:[1604]" dev="pipefs" ino=1604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 17.190082][ T28] audit: type=1400 audit(1771256488.679:60): avc: denied { rlimitinh } for pid=3187 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.192621][ T28] audit: type=1400 audit(1771256488.679:61): avc: denied { siginh } for pid=3187 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.914225][ T28] audit: type=1400 audit(1771256490.409:62): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.937386][ T28] audit: type=1400 audit(1771256490.409:63): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.960141][ T28] audit: type=1400 audit(1771256490.409:64): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.983123][ T28] audit: type=1400 audit(1771256490.409:65): avc: denied { search } for pid=3192 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.006210][ T28] audit: type=1400 audit(1771256490.409:66): avc: denied { read open } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. [ 24.526099][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 24.526121][ T28] audit: type=1400 audit(1771256496.019:70): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.527024][ T3298] cgroup: Unknown subsys name 'net' [ 24.532296][ T28] audit: type=1400 audit(1771256496.019:71): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.582157][ T28] audit: type=1400 audit(1771256496.049:72): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.720250][ T3298] cgroup: Unknown subsys name 'cpuset' [ 24.726347][ T3298] cgroup: Unknown subsys name 'rlimit' [ 24.855425][ T28] audit: type=1400 audit(1771256496.349:73): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.879667][ T28] audit: type=1400 audit(1771256496.349:74): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.908838][ T28] audit: type=1400 audit(1771256496.349:75): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.914447][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.929494][ T28] audit: type=1400 audit(1771256496.349:76): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.958091][ T28] audit: type=1400 audit(1771256496.359:77): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.970137][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.983185][ T28] audit: type=1400 audit(1771256496.359:78): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.014907][ T28] audit: type=1400 audit(1771256496.399:79): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 26.092080][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 26.134541][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 26.181175][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 26.204006][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.211175][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.218271][ T3312] bridge_slave_0: entered allmulticast mode [ 26.224695][ T3312] bridge_slave_0: entered promiscuous mode [ 26.244859][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.252009][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.259116][ T3312] bridge_slave_1: entered allmulticast mode [ 26.265500][ T3312] bridge_slave_1: entered promiscuous mode [ 26.285936][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.293049][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.300242][ T3314] bridge_slave_0: entered allmulticast mode [ 26.306612][ T3314] bridge_slave_0: entered promiscuous mode [ 26.326610][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.335737][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.343079][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.350247][ T3314] bridge_slave_1: entered allmulticast mode [ 26.356559][ T3314] bridge_slave_1: entered promiscuous mode [ 26.371136][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 26.381330][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.409779][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.425231][ T3312] team0: Port device team_slave_0 added [ 26.440418][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.449744][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 26.459771][ T3312] team0: Port device team_slave_1 added [ 26.496670][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.503687][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.529682][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.549208][ T3314] team0: Port device team_slave_0 added [ 26.554874][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.562175][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.569249][ T3310] bridge_slave_0: entered allmulticast mode [ 26.575703][ T3310] bridge_slave_0: entered promiscuous mode [ 26.584694][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.591742][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.618080][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.636656][ T3314] team0: Port device team_slave_1 added [ 26.647339][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.654512][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.661681][ T3310] bridge_slave_1: entered allmulticast mode [ 26.668075][ T3310] bridge_slave_1: entered promiscuous mode [ 26.700175][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.711968][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.718944][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.744981][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.755736][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.762820][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.769937][ T3318] bridge_slave_0: entered allmulticast mode [ 26.776288][ T3318] bridge_slave_0: entered promiscuous mode [ 26.786572][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.793645][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.800756][ T3318] bridge_slave_1: entered allmulticast mode [ 26.807188][ T3318] bridge_slave_1: entered promiscuous mode [ 26.814333][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.826164][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.833637][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.859570][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.894853][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.905917][ T3312] hsr_slave_0: entered promiscuous mode [ 26.912190][ T3312] hsr_slave_1: entered promiscuous mode [ 26.923854][ T3310] team0: Port device team_slave_0 added [ 26.935065][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.944982][ T3310] team0: Port device team_slave_1 added [ 26.954427][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.961591][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.968698][ T3322] bridge_slave_0: entered allmulticast mode [ 26.975256][ T3322] bridge_slave_0: entered promiscuous mode [ 26.986235][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.993357][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.000540][ T3322] bridge_slave_1: entered allmulticast mode [ 27.006895][ T3322] bridge_slave_1: entered promiscuous mode [ 27.027995][ T3314] hsr_slave_0: entered promiscuous mode [ 27.034098][ T3314] hsr_slave_1: entered promiscuous mode [ 27.039979][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 27.045694][ T3314] Cannot create hsr debugfs directory [ 27.069403][ T3318] team0: Port device team_slave_0 added [ 27.076100][ T3318] team0: Port device team_slave_1 added [ 27.082928][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.092274][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.099294][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.125283][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.147247][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.162620][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.169689][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.195667][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.235083][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.242058][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.268071][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.281715][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.288654][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.314544][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.327779][ T3322] team0: Port device team_slave_0 added [ 27.341548][ T3322] team0: Port device team_slave_1 added [ 27.383019][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.390027][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.415953][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.445798][ T3310] hsr_slave_0: entered promiscuous mode [ 27.451970][ T3310] hsr_slave_1: entered promiscuous mode [ 27.457862][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 27.463589][ T3310] Cannot create hsr debugfs directory [ 27.469205][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.476357][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.502317][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.519017][ T3318] hsr_slave_0: entered promiscuous mode [ 27.525103][ T3318] hsr_slave_1: entered promiscuous mode [ 27.530804][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 27.536508][ T3318] Cannot create hsr debugfs directory [ 27.588962][ T3322] hsr_slave_0: entered promiscuous mode [ 27.594951][ T3322] hsr_slave_1: entered promiscuous mode [ 27.600894][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 27.606604][ T3322] Cannot create hsr debugfs directory [ 27.697872][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.706601][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.720654][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.733654][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.771485][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.781117][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.789539][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.799191][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.833726][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.843674][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.853899][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.864848][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.876844][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.886688][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.900253][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.917573][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.934742][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.956385][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.965558][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.983226][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.992993][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.006290][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.022618][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.037405][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.044489][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.059372][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.075755][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.082892][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.093404][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.106087][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.115654][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.122722][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.150159][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.157231][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.166762][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.173839][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.194315][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.201444][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.224776][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.243896][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.289275][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.319092][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.330126][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.342023][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.362707][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.369791][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.379454][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.386537][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.395131][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.402205][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.410530][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.417580][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.442780][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.479977][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.528478][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.555304][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.639876][ T3314] veth0_vlan: entered promiscuous mode [ 28.656482][ T3310] veth0_vlan: entered promiscuous mode [ 28.667889][ T3314] veth1_vlan: entered promiscuous mode [ 28.675941][ T3310] veth1_vlan: entered promiscuous mode [ 28.685054][ T3312] veth0_vlan: entered promiscuous mode [ 28.704163][ T3312] veth1_vlan: entered promiscuous mode [ 28.753315][ T3310] veth0_macvtap: entered promiscuous mode [ 28.761413][ T3318] veth0_vlan: entered promiscuous mode [ 28.767176][ T3314] veth0_macvtap: entered promiscuous mode [ 28.777646][ T3310] veth1_macvtap: entered promiscuous mode [ 28.790991][ T3312] veth0_macvtap: entered promiscuous mode [ 28.801574][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.812156][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.820240][ T3318] veth1_vlan: entered promiscuous mode [ 28.828621][ T3314] veth1_macvtap: entered promiscuous mode [ 28.843390][ T3312] veth1_macvtap: entered promiscuous mode [ 28.851725][ T107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.861009][ T107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.878555][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.887420][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.901211][ T3322] veth0_vlan: entered promiscuous mode [ 28.912028][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.925034][ T3322] veth1_vlan: entered promiscuous mode [ 28.933463][ T3318] veth0_macvtap: entered promiscuous mode [ 28.942802][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.954255][ T3318] veth1_macvtap: entered promiscuous mode [ 28.955051][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.961463][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.985533][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.996948][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.024095][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.033368][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.049404][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.064389][ T107] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.073729][ T107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.091303][ C0] hrtimer: interrupt took 30351 ns [ 29.101840][ T107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.119927][ T107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.146193][ T107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.155776][ T107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.160162][ T3480] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 29.175149][ T3322] veth0_macvtap: entered promiscuous mode [ 29.182390][ T3322] veth1_macvtap: entered promiscuous mode [ 29.209684][ T107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.218493][ T107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.229876][ T107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.238696][ T107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.261041][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.269591][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.293584][ T3490] support for cryptoloop has been removed. Use dm-crypt instead. [ 29.305006][ T3490] process 'syz.3.4' launched './file0' with NULL argv: empty string added [ 29.333912][ T418] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.349958][ T418] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.389454][ T418] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.401733][ T418] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.468320][ T3498] ip6gretap0: entered promiscuous mode [ 29.479529][ T3498] macsec1: entered promiscuous mode [ 29.552370][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 29.552383][ T28] audit: type=1400 audit(1771256501.049:136): avc: denied { create } for pid=3506 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.578180][ T3505] netlink: 'syz.2.9': attribute type 3 has an invalid length. [ 29.598171][ T3505] netlink: 'syz.2.9': attribute type 1 has an invalid length. [ 29.613380][ T28] audit: type=1400 audit(1771256501.109:137): avc: denied { tracepoint } for pid=3506 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.646610][ T3505] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.9'. [ 29.668396][ T28] audit: type=1400 audit(1771256501.109:138): avc: denied { write } for pid=3506 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.732658][ T3512] support for cryptoloop has been removed. Use dm-crypt instead. [ 29.824568][ T28] audit: type=1400 audit(1771256501.309:139): avc: denied { shutdown } for pid=3510 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.899799][ T28] audit: type=1400 audit(1771256501.309:140): avc: denied { getopt } for pid=3510 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.931271][ T3521] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 29.953987][ T3518] 9p: Bad value for 'wfdno' [ 29.959076][ T28] audit: type=1400 audit(1771256501.309:141): avc: denied { name_connect } for pid=3510 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 29.983754][ T3525] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 30.005299][ T28] audit: type=1400 audit(1771256501.419:142): avc: denied { create } for pid=3517 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.028705][ T28] audit: type=1400 audit(1771256501.419:143): avc: denied { setopt } for pid=3517 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.079189][ T28] audit: type=1400 audit(1771256501.439:144): avc: denied { bind } for pid=3517 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.100845][ T28] audit: type=1400 audit(1771256501.449:145): avc: denied { mounton } for pid=3517 comm="syz.4.13" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.257273][ T3537] netlink: 'syz.2.21': attribute type 2 has an invalid length. [ 30.271336][ T3537] netlink: 'syz.2.21': attribute type 8 has an invalid length. [ 30.305483][ T3537] netlink: 132 bytes leftover after parsing attributes in process `syz.2.21'. [ 30.317865][ T3539] loop2: detected capacity change from 0 to 512 [ 30.504886][ T3539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.565231][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.687558][ T3417] IPVS: starting estimator thread 0... [ 30.780038][ T3556] IPVS: using max 2496 ests per chain, 124800 per kthread [ 30.793114][ T3561] support for cryptoloop has been removed. Use dm-crypt instead. [ 30.812543][ T3563] loop1: detected capacity change from 0 to 128 [ 30.869143][ T3563] syz.1.31: attempt to access beyond end of device [ 30.869143][ T3563] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 30.900301][ T3563] syz.1.31: attempt to access beyond end of device [ 30.900301][ T3563] loop1: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 30.933011][ T3563] Buffer I/O error on dev loop1, logical block 79, lost async page write [ 30.967896][ T3563] syz.1.31: attempt to access beyond end of device [ 30.967896][ T3563] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 31.005072][ T3540] syz.4.22 (3540) used greatest stack depth: 10440 bytes left [ 31.017838][ T3563] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 31.047171][ T3563] syz.1.31: attempt to access beyond end of device [ 31.047171][ T3563] loop1: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 31.084260][ T3570] loop4: detected capacity change from 0 to 512 [ 31.097995][ T3563] syz.1.31: attempt to access beyond end of device [ 31.097995][ T3563] loop1: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 31.100426][ T3570] ext3: Unknown parameter '" pQV' [ 31.128511][ T3563] Buffer I/O error on dev loop1, logical block 83, lost async page write [ 31.176229][ T3563] syz.1.31: attempt to access beyond end of device [ 31.176229][ T3563] loop1: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 31.176681][ T3570] loop4: detected capacity change from 0 to 256 [ 31.200795][ T3574] loop3: detected capacity change from 0 to 128 [ 31.210001][ T3563] Buffer I/O error on dev loop1, logical block 84, lost async page write [ 31.227946][ T3576] support for cryptoloop has been removed. Use dm-crypt instead. [ 31.243064][ T3574] syz.3.34: attempt to access beyond end of device [ 31.243064][ T3574] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 31.252029][ T3563] syz.1.31: attempt to access beyond end of device [ 31.252029][ T3563] loop1: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 31.274495][ T3574] syz.3.34: attempt to access beyond end of device [ 31.274495][ T3574] loop3: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 31.297061][ T3563] syz.1.31: attempt to access beyond end of device [ 31.297061][ T3563] loop1: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 31.309055][ T3574] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 31.333566][ T3563] Buffer I/O error on dev loop1, logical block 95, lost async page write [ 31.342390][ T3563] Buffer I/O error on dev loop1, logical block 96, lost async page write [ 31.342912][ T3574] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 31.370340][ T3563] Buffer I/O error on dev loop1, logical block 99, lost async page write [ 31.386765][ T3563] Buffer I/O error on dev loop1, logical block 100, lost async page write [ 31.718660][ T3417] IPVS: starting estimator thread 0... [ 31.733214][ T3604] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 31.753076][ T3608] netlink: 'syz.3.45': attribute type 2 has an invalid length. [ 31.771520][ T3608] netlink: 'syz.3.45': attribute type 8 has an invalid length. [ 31.779210][ T3608] netlink: 132 bytes leftover after parsing attributes in process `syz.3.45'. [ 31.793058][ T3608] loop3: detected capacity change from 0 to 512 [ 31.809445][ T3608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.819954][ T3603] IPVS: using max 2448 ests per chain, 122400 per kthread [ 31.845488][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.915154][ T3612] loop3: detected capacity change from 0 to 1768 [ 31.992248][ T3616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.015938][ T3616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.068575][ T3626] loop0: detected capacity change from 0 to 512 [ 32.113518][ T3626] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.129021][ T3626] EXT4-fs error (device loop0): ext4_add_entry:2415: inode #2: comm syz.0.55: Directory hole found for htree leaf block 0 [ 32.148366][ T3626] EXT4-fs error (device loop0): ext4_add_entry:2415: inode #2: comm syz.0.55: Directory hole found for htree leaf block 0 [ 32.227379][ T3639] loop4: detected capacity change from 0 to 512 [ 32.260892][ T3639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.274563][ T3639] ext4 filesystem being mounted at /10/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.302550][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.348863][ T3645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 32.407822][ T3650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 32.417577][ T3650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.426386][ T3650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.434834][ T3650] netlink: 'syz.2.62': attribute type 16 has an invalid length. [ 32.442543][ T3650] netlink: 'syz.2.62': attribute type 17 has an invalid length. [ 32.477097][ T3650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 32.504756][ T3653] loop3: detected capacity change from 0 to 512 [ 32.511469][ T3653] ext3: Unknown parameter '" £N' [ 32.562557][ T3655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.575248][ T3655] ext4 filesystem being mounted at /19/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.598171][ T3655] FAULT_INJECTION: forcing a failure. [ 32.598171][ T3655] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.611886][ T3655] CPU: 1 UID: 0 PID: 3655 Comm: syz.3.64 Not tainted syzkaller #0 PREEMPT(full) [ 32.611915][ T3655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 32.611934][ T3655] Call Trace: [ 32.611940][ T3655] [ 32.611946][ T3655] __dump_stack+0x1d/0x30 [ 32.611965][ T3655] dump_stack_lvl+0x95/0xd0 [ 32.611983][ T3655] dump_stack+0x15/0x1b [ 32.611995][ T3655] should_fail_ex+0x263/0x280 [ 32.612009][ T3655] should_fail+0xb/0x20 [ 32.612096][ T3655] should_fail_usercopy+0x1a/0x20 [ 32.612111][ T3655] _copy_to_user+0x20/0xa0 [ 32.612129][ T3655] simple_read_from_buffer+0xb5/0x130 [ 32.612148][ T3655] proc_fail_nth_read+0x10e/0x150 [ 32.612163][ T3655] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 32.612216][ T3655] vfs_read+0x1ab/0x7f0 [ 32.612310][ T3655] ? __rcu_read_unlock+0x4e/0x70 [ 32.612322][ T3655] ? __fget_files+0x184/0x1c0 [ 32.612334][ T3655] ? mutex_lock+0x57/0x90 [ 32.612348][ T3655] ksys_read+0xdc/0x1a0 [ 32.612432][ T3655] __x64_sys_read+0x40/0x50 [ 32.612448][ T3655] x64_sys_call+0x2886/0x3020 [ 32.612488][ T3655] do_syscall_64+0x12c/0x370 [ 32.612506][ T3655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.612519][ T3655] RIP: 0033:0x7f144ffdc84e [ 32.612595][ T3655] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 32.612605][ T3655] RSP: 002b:00007f144ea76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 32.612617][ T3655] RAX: ffffffffffffffda RBX: 00007f144ea776c0 RCX: 00007f144ffdc84e [ 32.612625][ T3655] RDX: 000000000000000f RSI: 00007f144ea770a0 RDI: 0000000000000006 [ 32.612638][ T3655] RBP: 00007f144ea77090 R08: 0000000000000000 R09: 0000000000000000 [ 32.612645][ T3655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.612652][ T3655] R13: 00007f1450296038 R14: 00007f1450295fa0 R15: 00007fffca43b908 [ 32.612738][ T3655] [ 32.620176][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.856079][ T3664] 9p: Bad value for 'rfdno' [ 32.905891][ T3310] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 32.947912][ T3668] can: request_module (can-proto-0) failed. [ 32.961363][ T3668] bridge0: port 3(gretap0) entered blocking state [ 32.968196][ T3668] bridge0: port 3(gretap0) entered disabled state [ 32.977945][ T3668] gretap0: entered allmulticast mode [ 32.988192][ T3668] gretap0: entered promiscuous mode [ 32.995002][ T3668] bridge0: port 3(gretap0) entered blocking state [ 33.001672][ T3668] bridge0: port 3(gretap0) entered forwarding state [ 33.099158][ T3677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.72'. [ 33.134172][ T3677] IPv6: NLM_F_CREATE should be specified when creating new route [ 33.145431][ T3680] support for cryptoloop has been removed. Use dm-crypt instead. [ 33.192404][ T3682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 33.202780][ T3670] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ' [ 33.343196][ T3693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.78'. [ 33.483467][ T3698] 9p: Bad value for 'rfdno' [ 33.506076][ T3698] netlink: 'syz.3.80': attribute type 1 has an invalid length. [ 33.665042][ T3711] support for cryptoloop has been removed. Use dm-crypt instead. [ 33.789704][ T3713] syz.2.87 (3713) used greatest stack depth: 9800 bytes left [ 33.824113][ T3718] ======================================================= [ 33.824113][ T3718] WARNING: The mand mount option has been deprecated and [ 33.824113][ T3718] and is ignored by this kernel. Remove the mand [ 33.824113][ T3718] option from the mount to silence this warning. [ 33.824113][ T3718] ======================================================= [ 33.949864][ T3299] loop4: p1 < > p2 p3 p4 [ 33.964687][ T3299] loop4: partition table partially beyond EOD, truncated [ 33.989957][ T3299] loop4: p1 start 4096 is beyond EOD, truncated [ 34.003460][ T3299] loop4: p2 start 4294508544 is beyond EOD, truncated [ 34.014997][ T3299] loop4: p3 size 134217728 extends beyond EOD, truncated [ 34.036820][ T3723] loop_reread_partitions: partition scan of loop4 () failed (rc=-16) [ 34.064200][ T3723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 34.102605][ T3732] tmpfs: Bad value for 'mpol' [ 34.148649][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 34.161246][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 34.323790][ T3747] ext4: Unknown parameter 'smackfsfloor' [ 34.456307][ T3749] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.496922][ T3751] rock: directory entry would overflow storage [ 34.496933][ T3751] rock: sig=0x4f50, size=4, remaining=3 [ 34.496952][ T3751] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 34.647712][ T3763] support for cryptoloop has been removed. Use dm-crypt instead. [ 34.691508][ T3768] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 34.829184][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 34.829199][ T28] audit: type=1400 audit(1771256762.316:240): avc: denied { ioctl } for pid=3773 comm="syz.4.108" path="socket:[6406]" dev="sockfs" ino=6406 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.952367][ T3783] support for cryptoloop has been removed. Use dm-crypt instead. [ 34.971139][ T3781] support for cryptoloop has been removed. Use dm-crypt instead. [ 35.160689][ T3790] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.183224][ T3790] EXT4-fs error (device loop4): ext4_add_entry:2415: inode #2: comm syz.4.114: Directory hole found for htree leaf block 0 [ 35.200171][ T3790] EXT4-fs error (device loop4): ext4_add_entry:2415: inode #2: comm syz.4.114: Directory hole found for htree leaf block 0 [ 35.281059][ T28] audit: type=1326 audit(1771256762.776:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3788 comm="syz.4.114" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5652cfbf79 code=0x0 [ 35.335067][ T3801] ip6gretap0: entered promiscuous mode [ 35.342436][ T3801] macsec1: entered promiscuous mode [ 35.584398][ T3809] set_capacity_and_notify: 9 callbacks suppressed [ 35.584414][ T3809] loop3: detected capacity change from 0 to 8192 [ 35.607606][ T28] audit: type=1400 audit(1771257019.102:242): avc: denied { remount } for pid=3808 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.629723][ T3816] netlink: 'syz.0.123': attribute type 2 has an invalid length. [ 35.637376][ T3816] netlink: 'syz.0.123': attribute type 8 has an invalid length. [ 35.652764][ T3816] netlink: 132 bytes leftover after parsing attributes in process `syz.0.123'. [ 35.669095][ T3809] syz_tun: entered allmulticast mode [ 35.678098][ T3816] loop0: detected capacity change from 0 to 512 [ 35.720778][ T3816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.816259][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.860330][ T28] audit: type=1400 audit(1771257019.362:243): avc: denied { create } for pid=3823 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 35.912714][ T28] audit: type=1400 audit(1771257019.382:244): avc: denied { write } for pid=3823 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 35.959168][ T28] audit: type=1400 audit(1771257019.452:245): avc: denied { create } for pid=3808 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 35.989806][ T3829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.120'. [ 36.022045][ T3322] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 36.031180][ T28] audit: type=1400 audit(1771257019.502:246): avc: denied { name_bind } for pid=3827 comm="syz.0.128" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 36.150448][ T28] audit: type=1400 audit(1771257019.512:247): avc: denied { firmware_load } for pid=3808 comm="syz.3.120" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 36.204387][ T3809] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.231813][ T28] audit: type=1400 audit(1771257019.722:248): avc: denied { getopt } for pid=3808 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.301997][ T28] audit: type=1400 audit(1771257019.722:249): avc: denied { create } for pid=3836 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 36.322205][ T3838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 36.353843][ T3849] netlink: 'syz.3.135': attribute type 2 has an invalid length. [ 36.368148][ T3847] loop2: detected capacity change from 0 to 1768 [ 36.370563][ T3849] netlink: 'syz.3.135': attribute type 8 has an invalid length. [ 36.389729][ T3849] netlink: 132 bytes leftover after parsing attributes in process `syz.3.135'. [ 36.413069][ T3849] loop3: detected capacity change from 0 to 512 [ 36.432652][ T3849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.623029][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.677556][ T3859] loop3: detected capacity change from 0 to 512 [ 36.722463][ T3859] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.763107][ T3859] EXT4-fs error (device loop3): ext4_add_entry:2415: inode #2: comm syz.3.139: Directory hole found for htree leaf block 0 [ 36.853660][ T3863] EXT4-fs error (device loop3): ext4_add_entry:2415: inode #2: comm syz.3.139: Directory hole found for htree leaf block 0 [ 36.908315][ T3867] loop2: detected capacity change from 0 to 512 [ 36.929059][ T3869] loop0: detected capacity change from 0 to 512 [ 36.934047][ T3863] ip6gretap0: entered promiscuous mode [ 36.942531][ T3869] ext3: Unknown parameter '" ÆÚ' [ 36.952583][ T3867] ext3: Unknown parameter '" òu&' [ 36.958800][ T3863] macsec1: entered promiscuous mode [ 36.976932][ T3867] loop2: detected capacity change from 0 to 256 [ 36.977311][ T3869] loop0: detected capacity change from 0 to 256 [ 36.990332][ T3873] loop4: detected capacity change from 0 to 512 [ 37.000078][ T3873] ext3: Unknown parameter '" pQV' [ 37.082387][ T3878] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 37.181930][ T3886] netlink: 'syz.0.149': attribute type 2 has an invalid length. [ 37.199543][ T3886] netlink: 'syz.0.149': attribute type 8 has an invalid length. [ 37.217642][ T3886] netlink: 132 bytes leftover after parsing attributes in process `syz.0.149'. [ 37.256339][ T3886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.356879][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.471925][ T3896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'. [ 37.602225][ T3312] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 37.797305][ T3909] ext3: Unknown parameter '" Oò' [ 37.904916][ T3911] syz.0.157 (3911) used greatest stack depth: 9344 bytes left [ 38.023790][ T3924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.053271][ T3924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.092131][ T3924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.104574][ T3924] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.117394][ T3924] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.355013][ T3934] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 38.484986][ T3942] ext3: Unknown parameter '" pQV' [ 38.612805][ T3949] support for cryptoloop has been removed. Use dm-crypt instead. [ 38.878835][ T3960] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 38.966984][ T3964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 38.989935][ T3964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.998377][ T3964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.013754][ T3964] netlink: 'syz.1.175': attribute type 16 has an invalid length. [ 39.029315][ T3964] netlink: 'syz.1.175': attribute type 17 has an invalid length. [ 39.139774][ T3964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 39.533709][ T3988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.565361][ T3988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.618676][ T3993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3993 comm=syz.3.186 [ 39.634854][ T3993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 39.644833][ T3995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 39.678195][ T3998] IPv6: NLM_F_CREATE should be specified when creating new route [ 39.680295][ T3999] support for cryptoloop has been removed. Use dm-crypt instead. [ 39.934035][ T4010] netlink: 32 bytes leftover after parsing attributes in process `syz.1.193'. [ 40.066973][ T4013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.090327][ T4013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.250668][ T4024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.268933][ T4026] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.281558][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 40.281639][ T28] audit: type=1400 audit(1771257279.761:272): avc: denied { read write open } for pid=4022 comm="syz.0.198" path="/42/file1/cgroup" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.331851][ T28] audit: type=1400 audit(1771257279.811:273): avc: denied { ioctl } for pid=4022 comm="syz.0.198" path="/42/file1/cgroup" dev="loop0" ino=18 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.334978][ T4026] EXT4-fs error (device loop3): ext4_add_entry:2415: inode #2: comm syz.3.199: Directory hole found for htree leaf block 0 [ 40.376184][ T4026] EXT4-fs error (device loop3): ext4_add_entry:2415: inode #2: comm syz.3.199: Directory hole found for htree leaf block 0 [ 40.406742][ T4031] ext3: Unknown parameter '" pQV' [ 40.454929][ T4034] netlink: 'syz.4.201': attribute type 2 has an invalid length. [ 40.462680][ T4034] netlink: 'syz.4.201': attribute type 8 has an invalid length. [ 40.477709][ T4034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.499086][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.625020][ T4042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.633779][ T4042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.667403][ T4042] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.677727][ T4042] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.694041][ T4044] netlink: 'syz.4.204': attribute type 16 has an invalid length. [ 40.702049][ T4044] netlink: 'syz.4.204': attribute type 17 has an invalid length. [ 40.752105][ T4044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.992276][ T4049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4049 comm=syz.1.206 [ 41.008719][ T4049] __nla_validate_parse: 3 callbacks suppressed [ 41.008735][ T4049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.206'. [ 41.030508][ T4051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.039299][ T4051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.053228][ T28] audit: type=1326 audit(1771257280.551:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f3adbf79 code=0x7ffc0000 [ 41.076598][ T28] audit: type=1326 audit(1771257280.551:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f3adbf79 code=0x7ffc0000 [ 41.109072][ T4053] set_capacity_and_notify: 12 callbacks suppressed [ 41.109089][ T4053] loop1: detected capacity change from 0 to 2048 [ 41.120125][ T28] audit: type=1326 audit(1771257280.551:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10f3adbf79 code=0x7ffc0000 [ 41.145373][ T28] audit: type=1326 audit(1771257280.551:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f3adbf79 code=0x7ffc0000 [ 41.146093][ T3312] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 41.146361][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.188078][ T28] audit: type=1326 audit(1771257280.551:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f10f3adbf79 code=0x7ffc0000 [ 41.211287][ T28] audit: type=1326 audit(1771257280.551:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f3adbf79 code=0x7ffc0000 [ 41.216127][ T4055] support for cryptoloop has been removed. Use dm-crypt instead. [ 41.234574][ T28] audit: type=1326 audit(1771257280.551:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f3adbf79 code=0x7ffc0000 [ 41.248264][ T3299] Alternate GPT is invalid, using primary GPT. [ 41.266500][ T28] audit: type=1326 audit(1771257280.551:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4052 comm="syz.1.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f10f3adbf79 code=0x7ffc0000 [ 41.273117][ T3299] loop1: p2 p3 p7 [ 41.323947][ T4053] Alternate GPT is invalid, using primary GPT. [ 41.330406][ T4053] loop1: p2 p3 p7 [ 41.359554][ T2999] Alternate GPT is invalid, using primary GPT. [ 41.378616][ T4064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 41.379289][ T2999] loop1: p2 p3 p7 [ 41.415015][ T4064] netlink: 32 bytes leftover after parsing attributes in process `syz.4.212'. [ 41.440811][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 41.453199][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 41.467784][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 41.484458][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 41.495495][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 41.506526][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 41.522664][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 41.533807][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 41.552597][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 41.713603][ T4073] loop3: detected capacity change from 0 to 512 [ 41.745106][ T4080] ip6gretap0: entered promiscuous mode [ 41.762380][ T4080] macsec1: entered promiscuous mode [ 41.851198][ T4086] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 41.912987][ T4090] sch_fq: defrate 4294967295 ignored. [ 42.318585][ T4113] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 42.342056][ T4113] futex_wake_op: syz.2.229 tries to shift op by -3; fix this program [ 42.731921][ T4122] bridge0: entered promiscuous mode [ 42.747107][ T4122] bridge0: port 3(macsec1) entered blocking state [ 42.753842][ T4122] bridge0: port 3(macsec1) entered disabled state [ 42.763348][ T4122] macsec1: entered allmulticast mode [ 42.768823][ T4122] bridge0: entered allmulticast mode [ 42.774720][ T4122] macsec1: left allmulticast mode [ 42.779875][ T4122] bridge0: left allmulticast mode [ 42.789292][ T4122] bridge0: left promiscuous mode [ 42.815622][ T4126] loop0: detected capacity change from 0 to 512 [ 42.826411][ T4126] ext3: Unknown parameter '" ÆÚ' [ 42.835729][ T4129] FAULT_INJECTION: forcing a failure. [ 42.835729][ T4129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.849508][ T4129] CPU: 1 UID: 0 PID: 4129 Comm: syz.4.237 Not tainted syzkaller #0 PREEMPT(full) [ 42.849570][ T4129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 42.849581][ T4129] Call Trace: [ 42.849651][ T4129] [ 42.849658][ T4129] __dump_stack+0x1d/0x30 [ 42.849739][ T4129] dump_stack_lvl+0x95/0xd0 [ 42.849764][ T4129] dump_stack+0x15/0x1b [ 42.849786][ T4129] should_fail_ex+0x263/0x280 [ 42.849886][ T4129] should_fail+0xb/0x20 [ 42.849954][ T4129] should_fail_usercopy+0x1a/0x20 [ 42.849976][ T4129] strncpy_from_user+0x27/0x250 [ 42.850004][ T4129] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 42.850108][ T4129] do_getname+0x59/0x1c0 [ 42.850129][ T4129] user_path_at+0x28/0x100 [ 42.850198][ T4129] __se_sys_mount+0x25b/0x2e0 [ 42.850218][ T4129] __x64_sys_mount+0x67/0x80 [ 42.850249][ T4129] x64_sys_call+0x2d61/0x3020 [ 42.850292][ T4129] do_syscall_64+0x12c/0x370 [ 42.850394][ T4129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.850417][ T4129] RIP: 0033:0x7f5652cfbf79 [ 42.850434][ T4129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.850452][ T4129] RSP: 002b:00007f565174f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.850472][ T4129] RAX: ffffffffffffffda RBX: 00007f5652f75fa0 RCX: 00007f5652cfbf79 [ 42.850502][ T4129] RDX: 0000200000000040 RSI: 0000200000000d40 RDI: 0000000000000000 [ 42.850515][ T4129] RBP: 00007f565174f090 R08: 0000000000000000 R09: 0000000000000000 [ 42.850527][ T4129] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 42.850540][ T4129] R13: 00007f5652f76038 R14: 00007f5652f75fa0 R15: 00007ffd0742bbd8 [ 42.850568][ T4129] [ 43.124630][ T4141] loop1: detected capacity change from 0 to 512 [ 43.131455][ T4141] ext3: Unknown parameter '" Oò' [ 43.202452][ T4148] xt_TCPMSS: Only works on TCP SYN packets [ 43.224622][ T4152] loop1: detected capacity change from 0 to 512 [ 43.252624][ T4152] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.280518][ T4159] loop3: detected capacity change from 0 to 2048 [ 43.296331][ T4152] EXT4-fs error (device loop1): ext4_add_entry:2415: inode #2: comm syz.1.247: Directory hole found for htree leaf block 0 [ 43.310018][ T4152] EXT4-fs error (device loop1): ext4_add_entry:2415: inode #2: comm syz.1.247: Directory hole found for htree leaf block 0 [ 43.326948][ T3299] Alternate GPT is invalid, using primary GPT. [ 43.333478][ T3299] loop3: p2 p3 p7 [ 43.348585][ T4159] Alternate GPT is invalid, using primary GPT. [ 43.362129][ T4159] loop3: p2 p3 p7 [ 43.422545][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 43.432287][ T4173] ip6gretap0: entered promiscuous mode [ 43.433973][ T4174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.253'. [ 43.442390][ T4173] macsec1: entered promiscuous mode [ 43.551975][ T4181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.561078][ T4181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.943950][ T4260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.258'. [ 44.067251][ T3318] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 44.093816][ T4284] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 44.108332][ T4287] loop1: detected capacity change from 0 to 128 [ 44.154855][ T4287] FAULT_INJECTION: forcing a failure. [ 44.154855][ T4287] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 44.172657][ T4287] CPU: 1 UID: 0 PID: 4287 Comm: syz.1.263 Not tainted syzkaller #0 PREEMPT(full) [ 44.172685][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 44.172696][ T4287] Call Trace: [ 44.172702][ T4287] [ 44.172708][ T4287] __dump_stack+0x1d/0x30 [ 44.172733][ T4287] dump_stack_lvl+0x95/0xd0 [ 44.172833][ T4287] dump_stack+0x15/0x1b [ 44.172912][ T4287] should_fail_ex+0x263/0x280 [ 44.172935][ T4287] should_fail_alloc_page+0xf2/0x100 [ 44.172975][ T4287] __alloc_frozen_pages_noprof+0x108/0x360 [ 44.173042][ T4287] alloc_pages_mpol+0xb3/0x260 [ 44.173065][ T4287] ? anon_pipe_write+0x91/0xb30 [ 44.173099][ T4287] alloc_pages_noprof+0x8f/0x130 [ 44.173130][ T4287] anon_pipe_write+0x69f/0xb30 [ 44.173156][ T4287] ? anon_pipe_write+0x91/0xb30 [ 44.173324][ T4287] ? __pfx_anon_pipe_write+0x10/0x10 [ 44.173351][ T4287] vfs_write+0x5a6/0x9f0 [ 44.173379][ T4287] ksys_write+0xdc/0x1a0 [ 44.173413][ T4287] __x64_sys_write+0x40/0x50 [ 44.173452][ T4287] x64_sys_call+0x27e1/0x3020 [ 44.173477][ T4287] do_syscall_64+0x12c/0x370 [ 44.173552][ T4287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.173570][ T4287] RIP: 0033:0x7f10f3a9c84e [ 44.173586][ T4287] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 44.173604][ T4287] RSP: 002b:00007f10f2536ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 44.173630][ T4287] RAX: ffffffffffffffda RBX: 00007f10f25376c0 RCX: 00007f10f3a9c84e [ 44.173653][ T4287] RDX: 0000000000000029 RSI: 00007f10f2536e90 RDI: 0000000000000002 [ 44.173668][ T4287] RBP: 00007f10f2536e90 R08: 0000000000000000 R09: 0000000000000000 [ 44.173682][ T4287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 44.173696][ T4287] R13: 00007f10f3d2a640 R14: 00007f10f3d214a0 R15: 0000000000000001 [ 44.173788][ T4287] [ 44.421833][ T35] IPVS: starting estimator thread 0... [ 44.507614][ T4335] support for cryptoloop has been removed. Use dm-crypt instead. [ 44.529906][ T4320] IPVS: using max 2448 ests per chain, 122400 per kthread [ 44.540206][ T4338] support for cryptoloop has been removed. Use dm-crypt instead. [ 44.732677][ T4353] loop1: detected capacity change from 0 to 512 [ 44.775683][ T4353] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.811848][ T4353] EXT4-fs error (device loop1): ext4_add_entry:2415: inode #2: comm syz.1.276: Directory hole found for htree leaf block 0 [ 44.836356][ T4353] EXT4-fs error (device loop1): ext4_add_entry:2415: inode #2: comm syz.1.276: Directory hole found for htree leaf block 0 [ 44.858627][ T4365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.280'. [ 44.867882][ T4365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.280'. [ 45.469379][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 45.469394][ T28] audit: type=1400 audit(1771257796.955:326): avc: denied { create } for pid=4381 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 45.505897][ T28] audit: type=1400 audit(1771257796.985:327): avc: denied { sys_admin } for pid=4381 comm="syz.2.284" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 45.549008][ T28] audit: type=1400 audit(1771257797.035:328): avc: denied { create } for pid=4385 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.568942][ T4386] netlink: 'syz.3.285': attribute type 1 has an invalid length. [ 45.577839][ T28] audit: type=1400 audit(1771257797.055:329): avc: denied { connect } for pid=4385 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.600057][ T3318] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 45.614634][ T4386] bond1: entered promiscuous mode [ 45.622673][ T4386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.643079][ T28] audit: type=1400 audit(1771257797.135:330): avc: denied { create } for pid=4385 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 45.652030][ T4386] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 45.663499][ T28] audit: type=1400 audit(1771257797.135:331): avc: denied { write } for pid=4385 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 45.704111][ T4386] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 45.714587][ T4386] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 45.740463][ T4393] FAULT_INJECTION: forcing a failure. [ 45.740463][ T4393] name failslab, interval 1, probability 0, space 0, times 1 [ 45.764470][ T4393] CPU: 0 UID: 0 PID: 4393 Comm: syz.1.287 Not tainted syzkaller #0 PREEMPT(full) [ 45.764520][ T4393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 45.764544][ T4393] Call Trace: [ 45.764552][ T4393] [ 45.764561][ T4393] __dump_stack+0x1d/0x30 [ 45.764587][ T4393] dump_stack_lvl+0x95/0xd0 [ 45.764608][ T4393] dump_stack+0x15/0x1b [ 45.764625][ T4393] should_fail_ex+0x263/0x280 [ 45.764694][ T4393] should_failslab+0x8c/0xb0 [ 45.764725][ T4393] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 45.764821][ T4393] ? __alloc_skb+0x2d6/0x690 [ 45.764844][ T4393] __alloc_skb+0x2d6/0x690 [ 45.764870][ T4393] ? __alloc_skb+0x200/0x690 [ 45.764950][ T4393] netlink_alloc_large_skb+0xbf/0xf0 [ 45.764972][ T4393] netlink_sendmsg+0x40c/0x6f0 [ 45.764996][ T4393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.765024][ T4393] ____sys_sendmsg+0x5af/0x600 [ 45.765072][ T4393] ___sys_sendmsg+0x195/0x1e0 [ 45.765109][ T4393] __x64_sys_sendmsg+0xd4/0x160 [ 45.765160][ T4393] x64_sys_call+0x194c/0x3020 [ 45.765182][ T4393] do_syscall_64+0x12c/0x370 [ 45.765211][ T4393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.765264][ T4393] RIP: 0033:0x7f10f3adbf79 [ 45.765286][ T4393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.765371][ T4393] RSP: 002b:00007f10f2537028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.765393][ T4393] RAX: ffffffffffffffda RBX: 00007f10f3d55fa0 RCX: 00007f10f3adbf79 [ 45.765405][ T4393] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 45.765426][ T4393] RBP: 00007f10f2537090 R08: 0000000000000000 R09: 0000000000000000 [ 45.765437][ T4393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.765449][ T4393] R13: 00007f10f3d56038 R14: 00007f10f3d55fa0 R15: 00007ffce8bef598 [ 45.765469][ T4393] [ 46.013748][ T28] audit: type=1400 audit(1771257797.465:332): avc: denied { bind } for pid=4399 comm="syz.2.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 46.092186][ T4410] loop4: detected capacity change from 0 to 128 [ 46.113220][ T4410] bio_check_eod: 74 callbacks suppressed [ 46.113236][ T4410] syz.4.296: attempt to access beyond end of device [ 46.113236][ T4410] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 46.113464][ T4410] syz.4.296: attempt to access beyond end of device [ 46.113464][ T4410] loop4: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 46.113489][ T4410] buffer_io_error: 46 callbacks suppressed [ 46.113499][ T4410] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 46.113515][ T4410] syz.4.296: attempt to access beyond end of device [ 46.113515][ T4410] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 46.113556][ T4410] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 46.113748][ T4410] syz.4.296: attempt to access beyond end of device [ 46.113748][ T4410] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 46.114062][ T4410] syz.4.296: attempt to access beyond end of device [ 46.114062][ T4410] loop4: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 46.114144][ T4410] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 46.114162][ T4410] syz.4.296: attempt to access beyond end of device [ 46.114162][ T4410] loop4: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 46.114254][ T4410] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 46.114674][ T4410] syz.4.296: attempt to access beyond end of device [ 46.114674][ T4410] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 46.114980][ T4410] syz.4.296: attempt to access beyond end of device [ 46.114980][ T4410] loop4: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 46.115012][ T4410] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 46.115029][ T4410] syz.4.296: attempt to access beyond end of device [ 46.115029][ T4410] loop4: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 46.115051][ T4410] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 46.115238][ T4410] syz.4.296: attempt to access beyond end of device [ 46.115238][ T4410] loop4: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 46.115477][ T4410] Buffer I/O error on dev loop4, logical block 99, lost async page write [ 46.115497][ T4410] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 46.116025][ T4410] Buffer I/O error on dev loop4, logical block 111, lost async page write [ 46.116075][ T4410] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 46.184129][ T4412] loop3: detected capacity change from 0 to 8192 [ 46.404486][ T4422] pimreg3: entered allmulticast mode [ 46.420308][ T28] audit: type=1400 audit(1771257797.905:333): avc: denied { execute } for pid=4411 comm="syz.3.297" path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dev="hugetlbfs" ino=8323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 46.492715][ T28] audit: type=1400 audit(1771257797.905:334): avc: denied { setopt } for pid=4411 comm="syz.3.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.539554][ T4428] netlink: 'syz.1.301': attribute type 2 has an invalid length. [ 46.558027][ T4428] netlink: 'syz.1.301': attribute type 8 has an invalid length. [ 46.572408][ T4428] netlink: 132 bytes leftover after parsing attributes in process `syz.1.301'. [ 46.642930][ T4428] loop1: detected capacity change from 0 to 512 [ 46.663443][ T4443] support for cryptoloop has been removed. Use dm-crypt instead. [ 46.688532][ T4426] loop0: detected capacity change from 0 to 512 [ 46.698593][ T4428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.760562][ T4450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.769039][ T4450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.820042][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.131649][ T4471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.319'. [ 47.149650][ T28] audit: type=1326 audit(1771257798.635:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4470 comm="syz.3.318" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f145001bf79 code=0x0 [ 47.292143][ T4477] support for cryptoloop has been removed. Use dm-crypt instead. [ 47.304993][ T4479] support for cryptoloop has been removed. Use dm-crypt instead. [ 47.406631][ T4487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.324'. [ 47.500493][ T4483] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 47.623692][ T4492] loop4: detected capacity change from 0 to 256 [ 47.794129][ T4496] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 47.804320][ T4498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.327'. [ 48.017512][ T4502] netlink: 'syz.3.329': attribute type 1 has an invalid length. [ 48.052455][ T3420] IPVS: starting estimator thread 0... [ 48.172396][ T4508] loop4: detected capacity change from 0 to 512 [ 48.179434][ T4508] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.199906][ T4503] IPVS: using max 2400 ests per chain, 120000 per kthread [ 48.216620][ T4508] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.241658][ T4508] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 48.274834][ T4508] EXT4-fs (loop4): 1 truncate cleaned up [ 48.290126][ T4508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.371581][ T4515] support for cryptoloop has been removed. Use dm-crypt instead. [ 48.379581][ T4513] loop1: detected capacity change from 0 to 8192 [ 48.415707][ T4513] netlink: 32 bytes leftover after parsing attributes in process `syz.1.331'. [ 48.434271][ T4513] netlink: 32 bytes leftover after parsing attributes in process `syz.1.331'. [ 48.480279][ T4513] loop1: detected capacity change from 0 to 512 [ 48.498360][ T4513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.498473][ T4513] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.545134][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.601297][ T4528] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 48.872697][ T4541] loop2: detected capacity change from 0 to 512 [ 48.880818][ T4541] ext3: Unknown parameter '" òu&' [ 49.171031][ T4551] loop1: detected capacity change from 0 to 128 [ 49.574883][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.629056][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 49.691421][ T35] IPVS: starting estimator thread 0... [ 49.727754][ T4569] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 49.829669][ T4566] IPVS: using max 2784 ests per chain, 139200 per kthread [ 49.859995][ T4575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4575 comm=syz.2.354 [ 49.873733][ T4573] netlink: 'syz.4.353': attribute type 7 has an invalid length. [ 49.873751][ T4573] netlink: 148 bytes leftover after parsing attributes in process `syz.4.353'. [ 49.903115][ T4575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'. [ 49.925233][ T4577] loop1: detected capacity change from 0 to 512 [ 49.931915][ T4577] ext3: Unknown parameter '" Oò' [ 50.161294][ T4583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'. [ 50.196358][ T4583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.241782][ T4583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.302965][ T4583] netlink: 'syz.2.358': attribute type 16 has an invalid length. [ 50.363477][ T4583] netlink: 'syz.2.358': attribute type 17 has an invalid length. [ 50.478402][ T4583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.549186][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 50.549226][ T28] audit: type=1400 audit(1771258058.034:361): avc: denied { mount } for pid=4599 comm="syz.3.362" name="/" dev="autofs" ino=8677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 50.640557][ T28] audit: type=1400 audit(1771258058.134:362): avc: denied { read write } for pid=4605 comm="syz.3.365" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 50.676387][ T28] audit: type=1400 audit(1771258058.134:363): avc: denied { open } for pid=4605 comm="syz.3.365" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 50.828852][ T4615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4615 comm=syz.4.368 [ 50.938514][ T4621] syz.3.370 uses obsolete (PF_INET,SOCK_PACKET) [ 50.953098][ T28] audit: type=1400 audit(1771258058.444:364): avc: denied { ioctl } for pid=4620 comm="syz.3.370" path="socket:[8726]" dev="sockfs" ino=8726 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.083236][ T3299] Alternate GPT is invalid, using primary GPT. [ 51.089798][ T3299] loop0: p2 p3 p7 [ 51.106100][ T4624] Alternate GPT is invalid, using primary GPT. [ 51.112675][ T4624] loop0: p2 p3 p7 [ 51.202894][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 51.203353][ T4634] veth3: entered promiscuous mode [ 51.215748][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 51.218834][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 51.237270][ T4634] veth3: entered allmulticast mode [ 51.243540][ T28] audit: type=1400 audit(1771258058.744:365): avc: denied { mount } for pid=4637 comm="syz.3.376" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 51.257035][ T4634] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 51.274270][ T4634] SELinux: failed to load policy [ 51.275542][ T28] audit: type=1400 audit(1771258058.744:366): avc: denied { load_policy } for pid=4630 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 51.322343][ T28] audit: type=1400 audit(1771258058.814:367): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 51.552462][ T4650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4650 comm=syz.3.380 [ 51.595362][ T4650] __nla_validate_parse: 3 callbacks suppressed [ 51.595378][ T4650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 51.682222][ T4652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 51.692436][ T4652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.700993][ T4652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.799219][ T4657] set_capacity_and_notify: 1 callbacks suppressed [ 51.799237][ T4657] loop1: detected capacity change from 0 to 512 [ 51.820452][ T4657] ext3: Unknown parameter '" Oò' [ 51.829461][ T4657] loop1: detected capacity change from 0 to 256 [ 51.942615][ T4661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 51.954399][ T4663] loop1: detected capacity change from 0 to 512 [ 52.040949][ T4667] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 52.183347][ T4673] Zero length message leads to an empty skb [ 52.304998][ T28] audit: type=1326 audit(1771258059.794:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145001bf79 code=0x7ffc0000 [ 52.354795][ T28] audit: type=1326 audit(1771258059.794:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f145001bf79 code=0x7ffc0000 [ 52.378608][ T28] audit: type=1326 audit(1771258059.794:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4681 comm="syz.3.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f145001bf79 code=0x7ffc0000 [ 52.400136][ T4691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'. [ 52.419960][ T4695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 52.512740][ T4706] support for cryptoloop has been removed. Use dm-crypt instead. [ 52.558887][ T4707] loop2: detected capacity change from 0 to 1024 [ 52.609060][ T4707] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.674910][ T4707] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 52.731829][ T4707] System zones: 0-1, 3-36 [ 52.769543][ T4707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.810019][ T4716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'. [ 52.830719][ T4716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.853986][ T4716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.893495][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.145001][ T4732] FAULT_INJECTION: forcing a failure. [ 53.145001][ T4732] name failslab, interval 1, probability 0, space 0, times 0 [ 53.178285][ T4732] CPU: 1 UID: 0 PID: 4732 Comm: syz.2.409 Not tainted syzkaller #0 PREEMPT(full) [ 53.178313][ T4732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 53.178324][ T4732] Call Trace: [ 53.178330][ T4732] [ 53.178338][ T4732] __dump_stack+0x1d/0x30 [ 53.178363][ T4732] dump_stack_lvl+0x95/0xd0 [ 53.178389][ T4732] dump_stack+0x15/0x1b [ 53.178412][ T4732] should_fail_ex+0x263/0x280 [ 53.178508][ T4732] should_failslab+0x8c/0xb0 [ 53.178570][ T4732] __kmalloc_noprof+0xb8/0x4e0 [ 53.178588][ T4732] ? bpf_test_init+0x86/0x130 [ 53.178634][ T4732] bpf_test_init+0x86/0x130 [ 53.178656][ T4732] bpf_prog_test_run_xdp+0x306/0xa10 [ 53.178680][ T4732] ? __rcu_read_unlock+0x4e/0x70 [ 53.178764][ T4732] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 53.178790][ T4732] bpf_prog_test_run+0x204/0x340 [ 53.178809][ T4732] __sys_bpf+0x52e/0x7e0 [ 53.178883][ T4732] __x64_sys_bpf+0x41/0x50 [ 53.178909][ T4732] x64_sys_call+0x10cb/0x3020 [ 53.178933][ T4732] do_syscall_64+0x12c/0x370 [ 53.179041][ T4732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.179062][ T4732] RIP: 0033:0x7f267751bf79 [ 53.179078][ T4732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.179094][ T4732] RSP: 002b:00007f2675f6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.179113][ T4732] RAX: ffffffffffffffda RBX: 00007f2677795fa0 RCX: 00007f267751bf79 [ 53.179196][ T4732] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 53.179209][ T4732] RBP: 00007f2675f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.179234][ T4732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.179245][ T4732] R13: 00007f2677796038 R14: 00007f2677795fa0 R15: 00007ffc5855f218 [ 53.179307][ T4732] [ 53.421268][ T4740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.412'. [ 53.701972][ T4755] support for cryptoloop has been removed. Use dm-crypt instead. [ 53.722749][ T4757] loop2: detected capacity change from 0 to 4096 [ 53.984290][ T4770] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967286. macoff=82 [ 54.107022][ T4773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'. [ 54.423382][ T4787] support for cryptoloop has been removed. Use dm-crypt instead. [ 54.461194][ T4791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4791 comm=syz.0.432 [ 54.493438][ T4791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'. [ 54.602582][ T4797] netlink: 36 bytes leftover after parsing attributes in process `syz.3.435'. [ 54.681387][ T4805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4805 comm=syz.1.439 [ 54.748773][ T4809] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 54.756479][ T4809] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 55.428224][ T4843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.462979][ T4843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.478555][ T4845] tipc: Can't bind to reserved service type 2 [ 55.527878][ T4840] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.535135][ T4843] netlink: 'syz.0.452': attribute type 16 has an invalid length. [ 55.539901][ T4840] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.562596][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 55.562611][ T28] audit: type=1400 audit(1771258063.054:409): avc: denied { accept } for pid=4850 comm="syz.3.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 55.588736][ T4851] netlink: 'syz.3.456': attribute type 21 has an invalid length. [ 55.602198][ T4843] netlink: 'syz.0.452': attribute type 17 has an invalid length. [ 55.687578][ T4843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 55.882624][ T28] audit: type=1400 audit(1771258063.374:410): avc: denied { watch watch_reads } for pid=4868 comm="syz.1.462" path="/proc/240/task" dev="proc" ino=9349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 55.963878][ T4873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.973100][ T4873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.976043][ T4869] loop1: detected capacity change from 0 to 8192 [ 56.000184][ T3299] loop1: p1 < > p2 p4 < p5 > [ 56.004870][ T3299] loop1: partition table partially beyond EOD, truncated [ 56.021002][ T3299] loop1: p1 start 134217728 is beyond EOD, truncated [ 56.027724][ T3299] loop1: p2 size 591360 extends beyond EOD, truncated [ 56.037636][ T3299] loop1: p5 size 591360 extends beyond EOD, truncated [ 56.047172][ T4869] loop1: p1 < > p2 p4 < p5 > [ 56.053375][ T4869] loop1: partition table partially beyond EOD, truncated [ 56.062444][ T4869] loop1: p1 start 134217728 is beyond EOD, truncated [ 56.069427][ T4869] loop1: p2 size 591360 extends beyond EOD, truncated [ 56.077631][ T4880] IPv6: NLM_F_CREATE should be specified when creating new route [ 56.085266][ T4869] loop1: p5 size 591360 extends beyond EOD, truncated [ 56.106349][ T4869] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 56.198866][ T28] audit: type=1400 audit(1771258063.684:411): avc: denied { read } for pid=4886 comm="syz.4.470" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 56.230884][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 56.239046][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 56.241937][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 56.264007][ T28] audit: type=1400 audit(1771258063.684:412): avc: denied { open } for pid=4886 comm="syz.4.470" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 56.310433][ T4898] support for cryptoloop has been removed. Use dm-crypt instead. [ 56.349398][ T4903] support for cryptoloop has been removed. Use dm-crypt instead. [ 57.874905][ T4926] IPv6: NLM_F_CREATE should be specified when creating new route [ 57.956631][ T4928] loop0: detected capacity change from 0 to 4096 [ 57.975295][ T4931] __nla_validate_parse: 9 callbacks suppressed [ 57.975310][ T4931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'. [ 58.051745][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.061759][ T4934] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 58.071914][ T28] audit: type=1400 audit(1771258065.534:413): avc: denied { read write } for pid=4930 comm="syz.1.485" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 58.131421][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.146198][ T4928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.156274][ T28] audit: type=1400 audit(1771258065.534:414): avc: denied { open } for pid=4930 comm="syz.1.485" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 58.163714][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.189435][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.196936][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.204939][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.212608][ T4934] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 58.214766][ T28] audit: type=1400 audit(1771258065.634:415): avc: denied { ioctl } for pid=4930 comm="syz.1.485" path="socket:[10302]" dev="sockfs" ino=10302 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 58.219701][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.251910][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.259301][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 58.266747][ T3386] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 58.278048][ T3386] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 58.297662][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.378175][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'. [ 58.417463][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'. [ 58.460299][ T4942] support for cryptoloop has been removed. Use dm-crypt instead. [ 58.622768][ T4949] support for cryptoloop has been removed. Use dm-crypt instead. [ 59.164180][ T28] audit: type=1400 audit(1771258066.654:416): avc: denied { create } for pid=4967 comm="syz.1.494" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.197790][ T4968] loop1: detected capacity change from 0 to 512 [ 59.222500][ T28] audit: type=1400 audit(1771258066.654:417): avc: denied { map } for pid=4967 comm="syz.1.494" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.258275][ T4968] ext3: Unknown parameter '" Oò' [ 59.305842][ T28] audit: type=1400 audit(1771258066.654:418): avc: denied { read write } for pid=4967 comm="syz.1.494" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.415857][ T4968] loop1: detected capacity change from 0 to 256 [ 59.528334][ T4972] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 60.182604][ T4988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 60.223299][ T4988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 60.416087][ T4994] loop1: detected capacity change from 0 to 1024 [ 60.445045][ T4996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 60.450432][ T4994] EXT4-fs: Ignoring removed oldalloc option [ 60.460733][ T4996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.474723][ T4996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.480028][ T4994] EXT4-fs: Ignoring removed bh option [ 60.512485][ T4994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.593129][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 60.593142][ T28] audit: type=1400 audit(1771258068.084:421): avc: denied { add_name } for pid=4993 comm="syz.1.504" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.804538][ T4994] ================================================================== [ 60.812658][ T4994] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 60.819809][ T4994] [ 60.822126][ T4994] write to 0xffff88811a871ccc of 4 bytes by task 5002 on cpu 1: [ 60.829747][ T4994] xas_set_mark+0x12b/0x140 [ 60.834262][ T4994] tag_pages_for_writeback+0xe3/0x2e0 [ 60.839641][ T4994] ext4_do_writepages+0x6b9/0x2840 [ 60.844769][ T4994] ext4_writepages+0x18f/0x320 [ 60.849531][ T4994] do_writepages+0x1c6/0x310 [ 60.854127][ T4994] file_write_and_wait_range+0x178/0x2f0 [ 60.859766][ T4994] generic_buffers_fsync_noflush+0x45/0x130 [ 60.865653][ T4994] ext4_sync_file+0x1aa/0x6b0 [ 60.870337][ T4994] vfs_fsync_range+0xc5/0xe0 [ 60.874925][ T4994] ext4_buffered_write_iter+0x34f/0x3c0 [ 60.880473][ T4994] ext4_file_write_iter+0x380/0xfa0 [ 60.885672][ T4994] iter_file_splice_write+0x6bc/0xa80 [ 60.891046][ T4994] direct_splice_actor+0x156/0x2a0 [ 60.896156][ T4994] splice_direct_to_actor+0x311/0x670 [ 60.901529][ T4994] do_splice_direct+0x119/0x1a0 [ 60.906380][ T4994] do_sendfile+0x382/0x650 [ 60.910785][ T4994] __x64_sys_sendfile64+0x105/0x150 [ 60.915974][ T4994] x64_sys_call+0x2dc4/0x3020 [ 60.920648][ T4994] do_syscall_64+0x12c/0x370 [ 60.925241][ T4994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.931126][ T4994] [ 60.933438][ T4994] read to 0xffff88811a871ccc of 4 bytes by task 4994 on cpu 0: [ 60.940968][ T4994] xas_find_marked+0x5d7/0x620 [ 60.945734][ T4994] filemap_get_folios_tag+0xfa/0x510 [ 60.951007][ T4994] file_write_and_wait_range+0x20c/0x2f0 [ 60.956641][ T4994] generic_buffers_fsync_noflush+0x45/0x130 [ 60.962527][ T4994] ext4_sync_file+0x1aa/0x6b0 [ 60.967215][ T4994] vfs_fsync_range+0xc5/0xe0 [ 60.971795][ T4994] ext4_buffered_write_iter+0x34f/0x3c0 [ 60.977338][ T4994] ext4_file_write_iter+0x380/0xfa0 [ 60.982532][ T4994] iter_file_splice_write+0x6bc/0xa80 [ 60.987906][ T4994] direct_splice_actor+0x156/0x2a0 [ 60.993016][ T4994] splice_direct_to_actor+0x311/0x670 [ 60.998390][ T4994] do_splice_direct+0x119/0x1a0 [ 61.003246][ T4994] do_sendfile+0x382/0x650 [ 61.007653][ T4994] __x64_sys_sendfile64+0x105/0x150 [ 61.012843][ T4994] x64_sys_call+0x2dc4/0x3020 [ 61.017517][ T4994] do_syscall_64+0x12c/0x370 [ 61.022106][ T4994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.027989][ T4994] [ 61.030297][ T4994] value changed: 0x06000021 -> 0x0a000021 [ 61.035994][ T4994] [ 61.038301][ T4994] Reported by Kernel Concurrency Sanitizer on: [ 61.044447][ T4994] CPU: 0 UID: 0 PID: 4994 Comm: syz.1.504 Not tainted syzkaller #0 PREEMPT(full) [ 61.055369][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 61.065410][ T4994] ================================================================== [ 61.401637][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.