last executing test programs: 14.500980735s ago: executing program 2 (id=321): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0xa}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x9}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@x, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.659162764s ago: executing program 2 (id=326): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b34, 0x3bf) rt_sigprocmask(0x0, &(0x7f0000000380)={[0xfffff7feffff7fff]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x12) io_setup(0x401, &(0x7f00000001c0)=0x0) io_pgetevents(r2, 0x4, 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0)={[0x1]}, 0x8}) 13.50227892s ago: executing program 2 (id=330): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 13.264476208s ago: executing program 2 (id=333): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x30084, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0xfffffffc, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018, 0xffffffffffffffff}, './file0\x00'}) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000c00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, 0x7, 0x6, 0x100, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x552}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4040840) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@noauto_da_alloc}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000000440)="$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") r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000902048018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000007b703000000080000850000000c000000bf092000000000003609010000000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) syz_emit_ethernet(0x86, &(0x7f0000003bc0)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r5, @ANYBLOB="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", @ANYRES16=0x0, @ANYRES8=r5], 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x48, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4040891) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000003c0)={0xe0002000}) epoll_pwait2(r7, &(0x7f0000005780)=[{}], 0x1, 0x0, 0x0, 0x0) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x0, 0x0) 12.595478371s ago: executing program 2 (id=340): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b34, 0x3bf) rt_sigprocmask(0x0, &(0x7f0000000380)={[0xfffff7feffff7fff]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x12) io_setup(0x401, &(0x7f00000001c0)=0x0) io_pgetevents(r2, 0x4, 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0)={[0x1]}, 0x8}) 11.880274866s ago: executing program 2 (id=342): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfb, 0x7fff0000}]}) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xb, 0x6}, 0x0, 0x0, 0x800000, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x8, 0x8, 0x0, 0xfffffffe}]}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b003a05142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x44000) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x64e, 0x2, 0x10000, 0x8, 0x2}) 11.845817387s ago: executing program 32 (id=342): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfb, 0x7fff0000}]}) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xb, 0x6}, 0x0, 0x0, 0x800000, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x8, 0x8, 0x0, 0xfffffffe}]}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b003a05142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x44000) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x64e, 0x2, 0x10000, 0x8, 0x2}) 4.723427185s ago: executing program 3 (id=378): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000ff000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) socket$kcm(0x21, 0x2, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.339427059s ago: executing program 4 (id=381): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2c040480) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x5, 0x1800}], 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x8, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x8000000) unshare(0x2000000) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = syz_open_procfs(0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200000}, {0xa, 0x4e23, 0x7, @mcast2}, 0xffffffffffffffff, 0xffffffff}}, 0x48) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f00000001c0)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000050000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = fcntl$dupfd(r0, 0x0, r0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYRES8=r6, @ANYBLOB="7451a8bb4aa7ad868d173a16ba724b2ab55d7182452143086599f9848486e9f2e69342899d7e3457725571209c3e6ff9a548b07e7063d5", @ANYRESHEX=r6, @ANYRES64=r5], 0x20}}, 0x840) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98, 0x1, 0x0}, &(0x7f0000000180)=0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000100003040000000000dcdf2500007400", @ANYRES32=0x0, @ANYBLOB="000000000000001c0012800b0001006d616373656300000c000280050003f70d09000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x24008804) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind:7-N:', @ANYRESOCT]) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "1d0119fb2459af4f", "0593bb394fa2a038d3eb7caf38fcec0d", "39b0ea05", "885945710e3288ef"}, 0x28) 4.236272672s ago: executing program 3 (id=382): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) 4.140198226s ago: executing program 4 (id=385): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0xa}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x9}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@x, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.348108383s ago: executing program 3 (id=388): r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x100, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4a046) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, r0, 0xed240000) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000003c0)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000030c0)=""/4098, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x78) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000214000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80be77d8a9ddb7824b00000000000000020000085400"], 0xa8}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x4000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1006, &(0x7f0000002500)=""/4102, 0x0, 0xc}, 0x94) 3.220147337s ago: executing program 3 (id=389): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x808082, &(0x7f0000000040)={[{@block_validity}]}, 0xfe, 0x4a3, &(0x7f00000005c0)="$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") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3ff, 0x400300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x6bf1c2d5adba8c32}) creat(&(0x7f0000000140)='./file0\x00', 0x54) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000000)=""/108) keyctl$negate(0xd, r4, 0x80000001, r4) io_uring_enter(r2, 0x4aa0, 0xaf4, 0x25, &(0x7f0000000080)={[0x6b80000000000]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) rename(0x0, &(0x7f0000000080)='./file0\x00') ioctl$VT_ACTIVATE(r2, 0x5606, 0x100000000) sendmsg$nl_route(r2, 0x0, 0x0) 3.130739501s ago: executing program 5 (id=390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002b40)=""/174, 0xae}, {&(0x7f0000000500)=""/230, 0xe6}, {&(0x7f0000001b40)=""/4040, 0xfc8}, {&(0x7f0000000b00)=""/4109, 0x100d}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000100)=""/27, 0x1b}], 0x6}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000040a030000000000000000000a0000010900010073797a3100000000090003"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = io_uring_setup(0x115c, &(0x7f0000000200)={0x0, 0x8270, 0x40, 0x1003, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000001cc0)={0x6, 0x0, &(0x7f0000001c00)=[{0x0}, {&(0x7f00000006c0)=""/182, 0xb6}], 0x0, 0x2}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x7, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/239, 0xef}], &(0x7f0000000380)=[0x5], 0x1}, 0x20) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x60, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3.128242861s ago: executing program 4 (id=391): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x277) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000002180)='.\x00', 0x101000, 0x8a) fcntl$notify(r3, 0x402, 0x4) sendmsg$AUDIT_SET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x200, 0x70bd25, 0x25dfdbfe, {0x40, 0x1, 0x1, r0, 0x9, 0x5, 0x3, 0x9, 0x0, 0x276, 0xad3a7d6}, ["", ""]}, 0x3c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x9) syz_clone3(&(0x7f0000000300)={0x101080, &(0x7f0000000140), 0x0, 0x0, {0x40}, 0x0, 0x0, &(0x7f00000006c0)=""/251, 0x0}, 0x58) prlimit64(0x0, 0x4, &(0x7f0000000280)={0x6, 0xb}, &(0x7f00000003c0)) 1.979471121s ago: executing program 5 (id=394): socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0xa) sched_setscheduler(0x0, 0x1, 0x0) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x9, 0x8}, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000100"/24], 0x18) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000002b00), 0x1c3582, 0x0) write$cgroup_pid(r5, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x2, &(0x7f000043a000/0x3000)=nil) keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x5, 0x100000001}, 0x0, 0x0, 0x0) 1.978966741s ago: executing program 0 (id=395): perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) gettid() r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) mount(0x0, 0x0, 0x0, 0x5000, 0x0) eventfd2(0xffffffff, 0x80800) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x801, @loopback}}, 0x1e) mknod$loop(0x0, 0x40, 0x0) iopl(0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) writev(r1, &(0x7f00000001c0)=[{0x0}], 0x1) 1.942592482s ago: executing program 4 (id=396): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0xf7fb, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8000, 0x9, 0x8, 0x0, 0x0, 0x20000000000000}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, [@tmpl={0x84, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4d4, 0x32}, 0xa, @in6=@local, 0x800000, 0x3}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (fail_nth: 5) 1.70591596s ago: executing program 3 (id=397): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) (fail_nth: 5) 1.70573983s ago: executing program 4 (id=398): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) 1.520547896s ago: executing program 0 (id=399): r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x100, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4a046) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, r0, 0xed240000) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000003c0)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000030c0)=""/4098, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x78) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000214000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80be77d8a9ddb7824b00000000000000020000085400"], 0xa8}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x4000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1006, &(0x7f0000002500)=""/4102, 0x0, 0xc}, 0x94) 1.447701499s ago: executing program 3 (id=400): socket$packet(0x11, 0x3, 0x300) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, 0xffffffffffffffff, 0xffb0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x21, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0xba, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r8) ioctl$EVIOCRMFF(r8, 0x40095505, 0x0) rt_sigqueueinfo(0x0, 0x9, &(0x7f00000007c0)={0x0, 0x0, 0xffffffc0}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a78000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b34001280200001800a00010071756f7461000000100002800c000140ed00000000dc4880100001800a00010071756f746100000008000340000001"], 0xa0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) stat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="93288dce793b95ca0d40a6a1b29a5e63dd6f53fa58e00936d559ed"], 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 1.364985802s ago: executing program 0 (id=401): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1.12786332s ago: executing program 1 (id=403): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000ff000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) socket$kcm(0x21, 0x2, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, 0x0, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.12752316s ago: executing program 0 (id=404): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) msgget$private(0x0, 0x7ac) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x20000000000001f5, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SDREQ(r5, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents64(r7, &(0x7f0000000040)=""/41, 0x66) getdents64(r7, &(0x7f0000001600)=""/4105, 0x1009) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r9, 0x26, 0x0) 1.1250117s ago: executing program 1 (id=405): prctl$PR_SET_MM_EXE_FILE(0x2a, 0xd, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000240)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x78, 0x1, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x1a}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_LABELS={0x14, 0x7, "eab5bec820322c10d8a4cbd8637e90e2"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = dup(r4) bind$inet(r5, &(0x7f0000002700)={0x2, 0x4e21, @private=0xa010101}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x67f4, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x50, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}]}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r8, 0x0, 0x8, 0x0, &(0x7f0000000040)) openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) 989.508095ms ago: executing program 1 (id=406): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000540)=0x80000003, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de00"/120, 0x78) 882.650709ms ago: executing program 0 (id=407): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x808082, &(0x7f0000000040)={[{@block_validity}]}, 0xfe, 0x4a3, &(0x7f00000005c0)="$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") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3ff, 0x400300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x6bf1c2d5adba8c32}) creat(&(0x7f0000000140)='./file0\x00', 0x54) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000000)=""/108) keyctl$negate(0xd, r4, 0x80000001, r4) io_uring_enter(r2, 0x4aa0, 0xaf4, 0x25, &(0x7f0000000080)={[0x6b80000000000]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) rename(0x0, &(0x7f0000000080)='./file0\x00') ioctl$VT_ACTIVATE(r2, 0x5606, 0x100000000) sendmsg$nl_route(r2, 0x0, 0x0) 861.17656ms ago: executing program 1 (id=408): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x30102, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x8d, 0x0, &(0x7f0000000180)="e3ef7f675fa6140000ec67837e000000000000954556fcde030000000000000000000000000002000000000033a42c9550f50ac311e0f0544b00aab05450dc23d998e6f578af3a439e1432fa0022c17cd725a18028246f6b998f11b0f472aeeb58d909c57270d30b5b85617ac09a44f8843aebab606f206d8f50bb61094427c01ba5269ce868437a02fb11f73d", 0x0, 0x8c0, 0x0, 0xfffffffffffffc89, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6}, 0x50) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0xa, 0x20002) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x7ffffffe) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) 787.871592ms ago: executing program 5 (id=409): perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) gettid() r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) mount(0x0, 0x0, 0x0, 0x5000, 0x0) eventfd2(0xffffffff, 0x80800) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x801, @loopback}}, 0x1e) mknod$loop(0x0, 0x40, 0x0) iopl(0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) writev(r1, &(0x7f00000001c0)=[{0x0}], 0x1) 747.763014ms ago: executing program 1 (id=410): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000100)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0xa9a2, 0x4) close(0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2, 0x50843}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 747.372174ms ago: executing program 5 (id=411): r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x100, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4a046) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, r0, 0xed240000) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000003c0)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000030c0)=""/4098, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x78) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000214000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80be77d8a9ddb7824b00000000000000020000085400"], 0xa8}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x4000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1006, &(0x7f0000002500)=""/4102, 0x0, 0xc}, 0x94) 721.499765ms ago: executing program 4 (id=412): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9}, 0x0, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) rename(&(0x7f0000001c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x7fffffff, 0x2}) unshare(0x22020400) poll(0x0, 0x0, 0x9) syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80080, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0x1) ioctl$TIOCSSOFTCAR(r3, 0x89f2, &(0x7f0000000080)=0x59b) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x17, &(0x7f0000000040)=0x100000001, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x28}, 0xfc40) 535.052201ms ago: executing program 5 (id=413): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000ff000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 441.088034ms ago: executing program 0 (id=414): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 127.869195ms ago: executing program 5 (id=415): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000ff000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) socket$kcm(0x21, 0x2, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 1 (id=416): set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400000000000000", @ANYRES32=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4840}, 0x20000000) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket(0x28, 0x800, 0x9) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, 0x0, 0x10) r4 = semget$private(0x0, 0x1, 0x87) semctl$GETALL(r4, 0x0, 0xd, 0xfffffffffffffffe) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x4, 0x9}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) fchdir(r6) syz_clone3(&(0x7f00000001c0)={0x42323080, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r8 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r8, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r7, 0x2000) kernel console output (not intermixed with test programs): [ 19.585799][ T28] audit: type=1400 audit(1775073496.801:62): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.609286][ T28] audit: type=1400 audit(1775073496.801:63): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.632543][ T28] audit: type=1400 audit(1775073496.801:64): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.656413][ T28] audit: type=1400 audit(1775073496.801:65): avc: denied { search } for pid=3193 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.679528][ T28] audit: type=1400 audit(1775073496.801:66): avc: denied { read open } for pid=3194 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts. [ 25.559463][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 25.559480][ T28] audit: type=1400 audit(1775073502.771:70): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.590772][ T28] audit: type=1400 audit(1775073502.801:71): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.591483][ T3299] cgroup: Unknown subsys name 'net' [ 25.620764][ T28] audit: type=1400 audit(1775073502.841:72): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.755639][ T3299] cgroup: Unknown subsys name 'cpuset' [ 25.762162][ T3299] cgroup: Unknown subsys name 'rlimit' [ 25.891440][ T28] audit: type=1400 audit(1775073503.101:73): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.919935][ T28] audit: type=1400 audit(1775073503.101:74): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.922733][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.941404][ T28] audit: type=1400 audit(1775073503.101:75): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.970678][ T28] audit: type=1400 audit(1775073503.101:76): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.986551][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.992147][ T28] audit: type=1400 audit(1775073503.111:77): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.026295][ T28] audit: type=1400 audit(1775073503.111:78): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.051674][ T28] audit: type=1400 audit(1775073503.131:79): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 27.155183][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 27.187207][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.217592][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 27.272285][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 27.299269][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 27.319086][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.326278][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.333416][ T3313] bridge_slave_0: entered allmulticast mode [ 27.339988][ T3313] bridge_slave_0: entered promiscuous mode [ 27.351278][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.358537][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.366056][ T3313] bridge_slave_1: entered allmulticast mode [ 27.372807][ T3313] bridge_slave_1: entered promiscuous mode [ 27.393992][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.401263][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.408582][ T3311] bridge_slave_0: entered allmulticast mode [ 27.415099][ T3311] bridge_slave_0: entered promiscuous mode [ 27.442820][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.450013][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.457353][ T3311] bridge_slave_1: entered allmulticast mode [ 27.463718][ T3311] bridge_slave_1: entered promiscuous mode [ 27.479469][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.490394][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.506498][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.513574][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.520737][ T3317] bridge_slave_0: entered allmulticast mode [ 27.527143][ T3317] bridge_slave_0: entered promiscuous mode [ 27.549799][ T3313] team0: Port device team_slave_0 added [ 27.555567][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.562807][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.570414][ T3317] bridge_slave_1: entered allmulticast mode [ 27.576930][ T3317] bridge_slave_1: entered promiscuous mode [ 27.586997][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.602104][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.612822][ T3313] team0: Port device team_slave_1 added [ 27.630942][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.638199][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.664941][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.678046][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.685362][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.693235][ T3319] bridge_slave_0: entered allmulticast mode [ 27.700004][ T3319] bridge_slave_0: entered promiscuous mode [ 27.711562][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.718678][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.726002][ T3319] bridge_slave_1: entered allmulticast mode [ 27.732675][ T3319] bridge_slave_1: entered promiscuous mode [ 27.748374][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.755617][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.781859][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.807437][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.821886][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.834720][ T3311] team0: Port device team_slave_0 added [ 27.841427][ T3311] team0: Port device team_slave_1 added [ 27.847330][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.854556][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.862230][ T3316] bridge_slave_0: entered allmulticast mode [ 27.868701][ T3316] bridge_slave_0: entered promiscuous mode [ 27.876456][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.887261][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.906364][ T3317] team0: Port device team_slave_0 added [ 27.921666][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.928899][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.936228][ T3316] bridge_slave_1: entered allmulticast mode [ 27.942491][ T3316] bridge_slave_1: entered promiscuous mode [ 27.958641][ T3317] team0: Port device team_slave_1 added [ 27.968878][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.975895][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.002467][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.022664][ T3319] team0: Port device team_slave_0 added [ 28.037176][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.044320][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.072172][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.084498][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.094822][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.105046][ T3319] team0: Port device team_slave_1 added [ 28.117494][ T3313] hsr_slave_0: entered promiscuous mode [ 28.123665][ T3313] hsr_slave_1: entered promiscuous mode [ 28.145903][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.152865][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.179061][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.190437][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.197455][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.223903][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.241133][ T3316] team0: Port device team_slave_0 added [ 28.267846][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.275068][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.302055][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.314084][ T3316] team0: Port device team_slave_1 added [ 28.349798][ T3311] hsr_slave_0: entered promiscuous mode [ 28.356368][ T3311] hsr_slave_1: entered promiscuous mode [ 28.362461][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 28.368417][ T3311] Cannot create hsr debugfs directory [ 28.374263][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.381508][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.407914][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.419050][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.426217][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.452682][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.464487][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.471523][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.498114][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.511107][ T3317] hsr_slave_0: entered promiscuous mode [ 28.517188][ T3317] hsr_slave_1: entered promiscuous mode [ 28.523068][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 28.529000][ T3317] Cannot create hsr debugfs directory [ 28.639744][ T3319] hsr_slave_0: entered promiscuous mode [ 28.645923][ T3319] hsr_slave_1: entered promiscuous mode [ 28.651842][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 28.657706][ T3319] Cannot create hsr debugfs directory [ 28.668067][ T3316] hsr_slave_0: entered promiscuous mode [ 28.674195][ T3316] hsr_slave_1: entered promiscuous mode [ 28.680082][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 28.685875][ T3316] Cannot create hsr debugfs directory [ 28.809415][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.821211][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.838560][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.852522][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.878505][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.890366][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.903103][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.914660][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.941122][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.950278][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.960408][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.976482][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.015824][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.028099][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.039575][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.048600][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.060590][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.079391][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.096352][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.103469][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.114303][ T2023] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.121484][ T2023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.149883][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.159805][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.170256][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.180286][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.216890][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.229375][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.250509][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.266049][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.279097][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.286735][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.312994][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.320556][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.330447][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.338052][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.360170][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.367502][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.395570][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.417879][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.427675][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.448521][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.467098][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.474437][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.487895][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.499504][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.506804][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.547271][ T809] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.554472][ T809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.577599][ T809] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.584808][ T809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.618974][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.643845][ T3313] veth0_vlan: entered promiscuous mode [ 29.659731][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.686540][ T3313] veth1_vlan: entered promiscuous mode [ 29.707173][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.721446][ T3313] veth0_macvtap: entered promiscuous mode [ 29.757521][ T3313] veth1_macvtap: entered promiscuous mode [ 29.788526][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.805879][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.832313][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.849242][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.868651][ T3317] veth0_vlan: entered promiscuous mode [ 29.877782][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.886742][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.900633][ T3317] veth1_vlan: entered promiscuous mode [ 29.910223][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.931048][ T3311] veth0_vlan: entered promiscuous mode [ 29.948878][ T3317] veth0_macvtap: entered promiscuous mode [ 29.963038][ T3311] veth1_vlan: entered promiscuous mode [ 29.978296][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.009229][ T3311] veth0_macvtap: entered promiscuous mode [ 30.038084][ T3317] veth1_macvtap: entered promiscuous mode [ 30.044632][ T3475] loop3: detected capacity change from 0 to 512 [ 30.052839][ T3311] veth1_macvtap: entered promiscuous mode [ 30.068460][ T3475] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 30.076878][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.099649][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.109501][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.118669][ T3475] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.4: casefold flag without casefold feature [ 30.132614][ T3475] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 30.132823][ T3475] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 30.142361][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 30.142388][ C1] EXT4-fs (loop3): initial error at time 1775073507: ext4_orphan_get:1397: inode 15 [ 30.142414][ C1] EXT4-fs (loop3): last error at time 1775073507: ext4_orphan_get:1397: inode 15 [ 30.142953][ T3319] veth0_vlan: entered promiscuous mode [ 30.185126][ T3475] loop3: lost filesystem error report for type 5 error -117 [ 30.186642][ T3316] veth0_vlan: entered promiscuous mode [ 30.200247][ T3475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.211213][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.232841][ T3475] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #2: block 4: comm syz.3.4: lblock 0 mapped to illegal pblock 4 (length 1) [ 30.235410][ T3319] veth1_vlan: entered promiscuous mode [ 30.257625][ T3316] veth1_vlan: entered promiscuous mode [ 30.268158][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.275001][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.286752][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.361674][ T3319] veth0_macvtap: entered promiscuous mode [ 30.375590][ T3319] veth1_macvtap: entered promiscuous mode [ 30.390378][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.411598][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.424953][ T69] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.447463][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.458446][ T3316] veth0_macvtap: entered promiscuous mode [ 30.468090][ T69] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.478177][ T69] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.621058][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 30.651851][ C1] hrtimer: interrupt took 45832 ns [ 30.660522][ T28] audit: type=1400 audit(1775073507.831:110): avc: denied { open } for pid=3482 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.434713][ T28] audit: type=1400 audit(1775073507.831:111): avc: denied { kernel } for pid=3482 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.454557][ T28] audit: type=1400 audit(1775073508.041:112): avc: denied { create } for pid=3482 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 31.562697][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.611761][ T28] audit: type=1400 audit(1775073508.061:113): avc: denied { setopt } for pid=3482 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 31.637457][ T3316] veth1_macvtap: entered promiscuous mode [ 31.887908][ T28] audit: type=1400 audit(1775073508.081:114): avc: denied { create } for pid=3482 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 31.946238][ T28] audit: type=1400 audit(1775073508.091:115): avc: denied { setopt } for pid=3482 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 31.976483][ T69] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.002406][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.046314][ T69] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.052179][ T3502] Zero length message leads to an empty skb [ 32.055375][ T69] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.065168][ T28] audit: type=1400 audit(1775073508.851:116): avc: denied { name_bind } for pid=3496 comm="syz.3.7" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.091762][ T3500] loop1: detected capacity change from 0 to 512 [ 32.098767][ T3500] ======================================================= [ 32.098767][ T3500] WARNING: The mand mount option has been deprecated and [ 32.098767][ T3500] and is ignored by this kernel. Remove the mand [ 32.098767][ T3500] option from the mount to silence this warning. [ 32.098767][ T3500] ======================================================= [ 32.106686][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.141878][ T28] audit: type=1400 audit(1775073508.851:117): avc: denied { node_bind } for pid=3496 comm="syz.3.7" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.166292][ T3500] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.174426][ T28] audit: type=1400 audit(1775073509.231:118): avc: denied { create } for pid=3499 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.179771][ T69] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.203346][ T28] audit: type=1400 audit(1775073509.231:119): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.243008][ T3500] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.254357][ T3500] EXT4-fs (loop1): 1 truncate cleaned up [ 32.261176][ T3500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.282424][ T69] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.291894][ T69] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.303492][ T69] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.314751][ T69] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.337772][ T69] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.528768][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.548800][ T3509] loop2: detected capacity change from 0 to 2048 [ 32.627118][ T3304] Alternate GPT is invalid, using primary GPT. [ 32.665357][ T3304] loop2: p1 p2 p3 [ 32.732709][ T3509] Alternate GPT is invalid, using primary GPT. [ 32.742915][ T3509] loop2: p1 p2 p3 [ 32.754069][ T3519] loop1: detected capacity change from 0 to 512 [ 32.975116][ T3519] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 33.048285][ T3519] EXT4-fs error (device loop1): ext4_iget_extra_inode:5040: inode #15: comm syz.1.12: corrupted in-inode xattr: e_value size too large [ 33.236658][ T3519] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 33.244887][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 33.260552][ C1] EXT4-fs (loop1): initial error at time 1775073510: ext4_iget_extra_inode:5040: inode 15 [ 33.270711][ C1] EXT4-fs (loop1): last error at time 1775073510: ext4_iget_extra_inode:5040: inode 15 [ 33.309442][ T3519] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.12: couldn't read orphan inode 15 (err -117) [ 33.439177][ T3519] loop1: lost filesystem error report for type 5 error -117 [ 33.447959][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 33.470704][ T3519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.492550][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 33.505684][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 33.705430][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 33.775668][ T3533] EXT4-fs error (device loop1): ext4_iget_extra_inode:5040: inode #15: comm syz.1.12: corrupted in-inode xattr: e_value size too large [ 33.791586][ T3533] EXT4-fs warning (device loop1): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 34.346262][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.668974][ T3551] loop4: detected capacity change from 0 to 512 [ 34.675731][ T3548] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3548 comm=syz.1.16 [ 34.719329][ T3551] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 34.761696][ T3551] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.18: casefold flag without casefold feature [ 34.781222][ T3551] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.789144][ T3551] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.18: couldn't read orphan inode 15 (err -117) [ 34.798532][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 34.798552][ C0] EXT4-fs (loop4): initial error at time 1775073512: ext4_orphan_get:1397: inode 15 [ 34.798604][ C0] EXT4-fs (loop4): last error at time 1775073512: ext4_orphan_get:1397: inode 15 [ 35.253471][ T3551] loop4: lost filesystem error report for type 5 error -117 [ 35.293375][ T3551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.340147][ T3502] Set syz1 is full, maxelem 65536 reached [ 35.348012][ T3551] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #2: block 4: comm syz.4.18: lblock 0 mapped to illegal pblock 4 (length 1) [ 35.394812][ T3502] syz.0.8 (3502) used greatest stack depth: 9544 bytes left [ 35.419812][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.925128][ T3574] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3574 comm=syz.2.22 [ 35.985816][ T3562] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3562 comm=syz.1.19 [ 37.409218][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 37.409234][ T28] audit: type=1400 audit(1775073514.621:136): avc: denied { tracepoint } for pid=3598 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.529116][ T3603] SELinux: failed to load policy [ 37.914712][ T28] audit: type=1400 audit(1775073514.641:137): avc: denied { create } for pid=3583 comm="syz.3.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 37.935450][ T28] audit: type=1400 audit(1775073514.741:138): avc: denied { load_policy } for pid=3598 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 37.955691][ T28] audit: type=1400 audit(1775073514.821:139): avc: denied { read write } for pid=3598 comm="syz.0.29" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 37.980216][ T28] audit: type=1400 audit(1775073514.821:140): avc: denied { open } for pid=3598 comm="syz.0.29" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 38.039995][ T28] audit: type=1400 audit(1775073514.841:141): avc: denied { allowed } for pid=3598 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 39.441915][ T28] audit: type=1400 audit(1775073516.651:142): avc: denied { read } for pid=3618 comm="syz.3.33" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.584928][ T28] audit: type=1400 audit(1775073516.681:143): avc: denied { open } for pid=3618 comm="syz.3.33" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.654393][ T28] audit: type=1400 audit(1775073516.681:144): avc: denied { ioctl } for pid=3618 comm="syz.3.33" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.739979][ T3625] netlink: 'syz.3.33': attribute type 27 has an invalid length. [ 39.748680][ T3625] netlink: 164 bytes leftover after parsing attributes in process `syz.3.33'. [ 40.400557][ T3632] loop3: detected capacity change from 0 to 512 [ 40.415554][ T3632] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.475242][ T3632] EXT4-fs (loop3): 1 truncate cleaned up [ 40.481908][ T3632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.735758][ T3621] Set syz1 is full, maxelem 65536 reached [ 41.733448][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.742812][ T3646] SELinux: failed to load policy [ 41.769631][ T28] audit: type=1400 audit(1775073518.491:145): avc: denied { write } for pid=3637 comm="syz.0.38" name="ptype" dev="proc" ino=4026532422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 42.192187][ T3658] SELinux: failed to load policy [ 42.321411][ T3665] loop0: detected capacity change from 0 to 512 [ 42.329259][ T3665] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 42.353736][ T3665] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.46: casefold flag without casefold feature [ 42.366770][ T3665] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.367120][ T3665] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.46: couldn't read orphan inode 15 (err -117) [ 42.376528][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 42.376547][ C1] EXT4-fs (loop0): initial error at time 1775073519: ext4_orphan_get:1397: inode 15 [ 42.376574][ C1] EXT4-fs (loop0): last error at time 1775073519: ext4_orphan_get:1397: inode 15 [ 42.414264][ T3665] loop0: lost filesystem error report for type 5 error -117 [ 42.458180][ T3665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.491247][ T3665] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #2: block 4: comm syz.0.46: lblock 0 mapped to illegal pblock 4 (length 1) [ 42.536767][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.535234][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 43.535275][ T28] audit: type=1400 audit(1775073520.741:147): avc: denied { create } for pid=3682 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.243145][ T3699] netlink: 'syz.3.57': attribute type 27 has an invalid length. [ 44.256814][ T3699] netlink: 164 bytes leftover after parsing attributes in process `syz.3.57'. [ 44.282441][ T3693] SELinux: failed to load policy [ 44.442461][ T3702] SELinux: failed to load policy [ 44.645040][ T28] audit: type=1400 audit(1775073521.851:148): avc: denied { create } for pid=3705 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.737914][ T28] audit: type=1400 audit(1775073521.851:149): avc: denied { bind } for pid=3705 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.763821][ T28] audit: type=1400 audit(1775073521.851:150): avc: denied { connect } for pid=3705 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.767304][ T3712] loop0: detected capacity change from 0 to 512 [ 44.784528][ T28] audit: type=1400 audit(1775073521.851:151): avc: denied { read append } for pid=3705 comm="syz.0.60" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.858093][ T3712] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.892192][ T3712] EXT4-fs (loop0): 1 truncate cleaned up [ 44.972536][ T3712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.457599][ T28] audit: type=1400 audit(1775073521.851:152): avc: denied { open } for pid=3705 comm="syz.0.60" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.481847][ T28] audit: type=1400 audit(1775073521.851:153): avc: denied { ioctl } for pid=3705 comm="syz.0.60" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.507612][ T28] audit: type=1400 audit(1775073521.971:154): avc: denied { create } for pid=3707 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.527501][ T28] audit: type=1400 audit(1775073521.971:155): avc: denied { lock } for pid=3707 comm="syz.2.59" path="socket:[6239]" dev="sockfs" ino=6239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.650015][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.702007][ T3733] loop0: detected capacity change from 0 to 512 [ 45.710330][ T3733] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 45.732671][ T3733] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.68: casefold flag without casefold feature [ 45.752468][ T3733] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.775185][ T3733] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.68: couldn't read orphan inode 15 (err -117) [ 45.796365][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 45.796392][ C0] EXT4-fs (loop0): initial error at time 1775073522: ext4_orphan_get:1397: inode 15 [ 45.796419][ C0] EXT4-fs (loop0): last error at time 1775073522: ext4_orphan_get:1397: inode 15 [ 45.851320][ T3733] loop0: lost filesystem error report for type 5 error -117 [ 45.892107][ T3733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.927532][ T3737] SELinux: failed to load policy [ 45.939345][ T3733] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #2: block 4: comm syz.0.68: lblock 0 mapped to illegal pblock 4 (length 1) [ 45.973781][ T3735] netlink: 'syz.4.69': attribute type 27 has an invalid length. [ 45.983461][ T3735] netlink: 164 bytes leftover after parsing attributes in process `syz.4.69'. [ 46.012694][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.717203][ T28] audit: type=1400 audit(1775073523.931:156): avc: denied { module_load } for pid=3751 comm="syz.4.74" path="/sys/kernel/oops_count" dev="sysfs" ino=27014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 47.831775][ T3708] Set syz1 is full, maxelem 65536 reached [ 47.927814][ T3773] FAULT_INJECTION: forcing a failure. [ 47.927814][ T3773] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 47.941357][ T3773] CPU: 1 UID: 0 PID: 3773 Comm: syz.2.79 Not tainted syzkaller #0 PREEMPT(full) [ 47.941408][ T3773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 47.941422][ T3773] Call Trace: [ 47.941430][ T3773] [ 47.941439][ T3773] __dump_stack+0x1d/0x30 [ 47.941469][ T3773] dump_stack_lvl+0x95/0xd0 [ 47.941568][ T3773] dump_stack+0x15/0x1b [ 47.941623][ T3773] should_fail_ex+0x263/0x280 [ 47.941654][ T3773] should_fail+0xb/0x20 [ 47.941680][ T3773] should_fail_usercopy+0x1a/0x20 [ 47.941753][ T3773] _copy_from_user+0x1c/0xb0 [ 47.941792][ T3773] memdup_user_nul+0x5f/0xe0 [ 47.941811][ T3773] sel_commit_bools_write+0xd2/0x270 [ 47.941909][ T3773] vfs_writev+0x42b/0x900 [ 47.941931][ T3773] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 47.941970][ T3773] do_writev+0xe9/0x210 [ 47.942004][ T3773] __x64_sys_writev+0x45/0x50 [ 47.942106][ T3773] x64_sys_call+0x1c0c/0x3020 [ 47.942131][ T3773] do_syscall_64+0x12c/0x370 [ 47.942158][ T3773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.942180][ T3773] RIP: 0033:0x7f54fa8fc819 [ 47.942198][ T3773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.942251][ T3773] RSP: 002b:00007f54f934f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 47.942275][ T3773] RAX: ffffffffffffffda RBX: 00007f54fab75fa0 RCX: 00007f54fa8fc819 [ 47.942291][ T3773] RDX: 0000000000000002 RSI: 00002000000025c0 RDI: 0000000000000006 [ 47.942306][ T3773] RBP: 00007f54f934f090 R08: 0000000000000000 R09: 0000000000000000 [ 47.942321][ T3773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.942392][ T3773] R13: 00007f54fab76038 R14: 00007f54fab75fa0 R15: 00007ffd25139fe8 [ 47.942411][ T3773] [ 48.565000][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 48.565021][ T28] audit: type=1400 audit(1775073525.771:209): avc: denied { remove_name } for pid=3790 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=1048 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.612228][ T3802] loop3: detected capacity change from 0 to 512 [ 48.615075][ T28] audit: type=1400 audit(1775073525.771:210): avc: denied { unlink } for pid=3790 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=1048 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.642172][ T28] audit: type=1400 audit(1775073525.821:211): avc: denied { read } for pid=3040 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.814891][ T3802] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.966608][ T28] audit: type=1400 audit(1775073525.861:212): avc: denied { mounton } for pid=3801 comm="syz.3.86" path="/15/file1" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.117636][ T3802] EXT4-fs (loop3): 1 truncate cleaned up [ 49.195102][ T28] audit: type=1400 audit(1775073525.961:213): avc: denied { write } for pid=3795 comm="syz.0.84" name="ptype" dev="proc" ino=4026532422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 49.218338][ T28] audit: type=1400 audit(1775073526.131:214): avc: denied { create } for pid=3810 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.245732][ T3818] SELinux: failed to load policy [ 49.265194][ T3802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.279624][ T28] audit: type=1400 audit(1775073526.131:215): avc: denied { write } for pid=3810 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 49.373207][ T28] audit: type=1400 audit(1775073526.151:216): avc: denied { allowed } for pid=3810 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 49.452443][ T28] audit: type=1400 audit(1775073526.171:217): avc: denied { create } for pid=3810 comm="syz.2.87" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.474041][ T28] audit: type=1400 audit(1775073526.181:218): avc: denied { create } for pid=3810 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.781502][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.906855][ T3842] netlink: 'syz.0.90': attribute type 27 has an invalid length. [ 49.915743][ T3842] netlink: 164 bytes leftover after parsing attributes in process `syz.0.90'. [ 49.971932][ T3844] netlink: 'syz.4.92': attribute type 27 has an invalid length. [ 49.981023][ T3844] netlink: 164 bytes leftover after parsing attributes in process `syz.4.92'. [ 50.458981][ T3856] 9p: Bad value for 'wfdno' [ 51.857417][ T3909] FAULT_INJECTION: forcing a failure. [ 51.857417][ T3909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.902930][ T3909] CPU: 0 UID: 0 PID: 3909 Comm: syz.1.116 Not tainted syzkaller #0 PREEMPT(full) [ 51.902959][ T3909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 51.902981][ T3909] Call Trace: [ 51.902988][ T3909] [ 51.903064][ T3909] __dump_stack+0x1d/0x30 [ 51.903090][ T3909] dump_stack_lvl+0x95/0xd0 [ 51.903114][ T3909] dump_stack+0x15/0x1b [ 51.903139][ T3909] should_fail_ex+0x263/0x280 [ 51.903202][ T3909] should_fail+0xb/0x20 [ 51.903224][ T3909] should_fail_usercopy+0x1a/0x20 [ 51.903249][ T3909] _copy_from_user+0x1c/0xb0 [ 51.903310][ T3909] ucma_connect+0xb6/0x540 [ 51.903348][ T3909] ? __pfx_ucma_connect+0x10/0x10 [ 51.903452][ T3909] ucma_write+0x1c9/0x260 [ 51.903477][ T3909] ? __pfx_ucma_write+0x10/0x10 [ 51.903501][ T3909] vfs_write+0x269/0x9f0 [ 51.903520][ T3909] ? __rcu_read_unlock+0x4e/0x70 [ 51.903585][ T3909] ? __fget_files+0x184/0x1c0 [ 51.903741][ T3909] ksys_write+0xdc/0x1a0 [ 51.903798][ T3909] __x64_sys_write+0x40/0x50 [ 51.903853][ T3909] x64_sys_call+0x27e1/0x3020 [ 51.903882][ T3909] do_syscall_64+0x12c/0x370 [ 51.903911][ T3909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.903934][ T3909] RIP: 0033:0x7f75dbfdc819 [ 51.904032][ T3909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.904051][ T3909] RSP: 002b:00007f75daa2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.904074][ T3909] RAX: ffffffffffffffda RBX: 00007f75dc255fa0 RCX: 00007f75dbfdc819 [ 51.904089][ T3909] RDX: 0000000000000120 RSI: 0000200000000340 RDI: 0000000000000003 [ 51.904103][ T3909] RBP: 00007f75daa2f090 R08: 0000000000000000 R09: 0000000000000000 [ 51.904116][ T3909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.904208][ T3909] R13: 00007f75dc256038 R14: 00007f75dc255fa0 R15: 00007ffdb25bc5f8 [ 51.904272][ T3909] [ 52.212185][ T3847] Set syz1 is full, maxelem 65536 reached [ 52.467637][ T3926] loop1: detected capacity change from 0 to 512 [ 52.477561][ T3932] netlink: 16 bytes leftover after parsing attributes in process `syz.4.126'. [ 53.501974][ T3926] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #3: comm syz.1.122: corrupted inode contents [ 53.640954][ T3926] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 53.642915][ T3926] EXT4-fs error (device loop1): ext4_dirty_inode:6495: inode #3: comm syz.1.122: mark_inode_dirty error [ 53.652153][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 53.652180][ C1] EXT4-fs (loop1): initial error at time 1775073530: ext4_do_update_inode:5602: inode 3 [ 53.652213][ C1] EXT4-fs (loop1): last error at time 1775073530: ext4_do_update_inode:5602: inode 3 [ 53.845093][ T3926] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 53.858641][ T3926] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #3: comm syz.1.122: corrupted inode contents [ 53.917021][ T3926] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 53.922016][ T3926] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #3: comm syz.1.122: mark_inode_dirty error [ 54.125501][ T3926] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 54.125900][ T3926] __quota_error: 23 callbacks suppressed [ 54.125926][ T3926] Quota error (device loop1): write_blk: dquota write failed [ 54.150033][ T3926] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 54.160905][ T3926] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.122: Failed to acquire dquot type 0 [ 55.024782][ T3926] loop1: lost filesystem error report for type 5 error -117 [ 55.063404][ T3926] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #16: comm syz.1.122: corrupted inode contents [ 55.083299][ T3926] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.083779][ T3926] EXT4-fs error (device loop1): ext4_dirty_inode:6495: inode #16: comm syz.1.122: mark_inode_dirty error [ 55.222452][ T3926] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.255333][ T3926] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #16: comm syz.1.122: corrupted inode contents [ 55.279056][ T3926] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.317193][ T3926] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.122: mark_inode_dirty error [ 55.349130][ T3926] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.352986][ T3926] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #16: comm syz.1.122: corrupted inode contents [ 55.383482][ T3984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.137'. [ 55.410609][ T3926] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.410784][ T3926] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 55.441669][ T3926] loop1: lost filesystem error report for type 5 error -117 [ 55.441947][ T3926] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #16: comm syz.1.122: corrupted inode contents [ 55.467981][ T28] audit: type=1400 audit(1775073532.681:242): avc: denied { create } for pid=3992 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.504947][ T3926] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 55.505189][ T3926] EXT4-fs error (device loop1): ext4_truncate:4602: inode #16: comm syz.1.122: mark_inode_dirty error [ 55.537420][ T3926] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 55.672117][ T3926] loop1: lost filesystem error report for type 5 error -117 [ 55.672551][ T28] audit: type=1400 audit(1775073532.681:243): avc: denied { setopt } for pid=3992 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.702949][ T3926] EXT4-fs (loop1): 1 truncate cleaned up [ 55.712884][ T28] audit: type=1400 audit(1775073532.681:244): avc: denied { ioctl } for pid=3992 comm="syz.0.141" path="socket:[5750]" dev="sockfs" ino=5750 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.968508][ T3926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.128249][ T28] audit: type=1400 audit(1775073532.681:245): avc: denied { bind } for pid=3992 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.188340][ T3926] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.207582][ T28] audit: type=1400 audit(1775073533.101:246): avc: denied { setopt } for pid=3997 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.227296][ T28] audit: type=1400 audit(1775073533.211:247): avc: denied { name_bind } for pid=4013 comm="syz.4.144" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 56.250438][ T3926] syz.1.122 (3926) used greatest stack depth: 9400 bytes left [ 56.258427][ T28] audit: type=1400 audit(1775073533.231:248): avc: denied { node_bind } for pid=4013 comm="syz.4.144" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 56.259386][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.517271][ T4030] loop3: detected capacity change from 0 to 1024 [ 56.534747][ T4030] ext4: Unknown parameter 'dont_measure' [ 56.763563][ T28] audit: type=1400 audit(1775073533.971:249): avc: denied { remount } for pid=4026 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.227290][ T4046] SELinux: failed to load policy [ 57.338084][ T4050] loop3: detected capacity change from 0 to 512 [ 57.357882][ T4050] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 57.475668][ T4050] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.155: casefold flag without casefold feature [ 57.489145][ T4050] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.155: couldn't read orphan inode 15 (err -117) [ 57.501464][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 57.501488][ C1] EXT4-fs (loop3): initial error at time 1775073534: ext4_orphan_get:1397: inode 15 [ 57.501521][ C1] EXT4-fs (loop3): last error at time 1775073534: ext4_orphan_get:1397: inode 15 [ 57.527537][ T4050] loop3: lost filesystem error report for type 5 error -117 [ 57.528031][ T4050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.566068][ T4050] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #2: block 4: comm syz.3.155: lblock 0 mapped to illegal pblock 4 (length 1) [ 57.627471][ T4042] loop4: detected capacity change from 0 to 32768 [ 57.650212][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.686157][ T4042] loop4: p1 p3 < > [ 57.770092][ T4061] syzkaller0: entered promiscuous mode [ 57.776043][ T4061] syzkaller0: entered allmulticast mode [ 57.866616][ T3822] udevd[3822]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 57.875044][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 57.940986][ T4072] netlink: 'syz.2.161': attribute type 27 has an invalid length. [ 57.949942][ T4072] netlink: 164 bytes leftover after parsing attributes in process `syz.2.161'. [ 58.000375][ T4077] SELinux: failed to load policy [ 58.744622][ T4028] Set syz1 is full, maxelem 65536 reached [ 58.906182][ T4104] lo speed is unknown, defaulting to 1000 [ 58.912040][ T4104] lo speed is unknown, defaulting to 1000 [ 58.918292][ T4104] lo speed is unknown, defaulting to 1000 [ 58.924756][ T4104] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 58.933053][ T4104] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 58.982607][ T4104] lo speed is unknown, defaulting to 1000 [ 58.989813][ T4104] lo speed is unknown, defaulting to 1000 [ 58.996280][ T4104] lo speed is unknown, defaulting to 1000 [ 59.002902][ T4104] lo speed is unknown, defaulting to 1000 [ 59.009866][ T4104] lo speed is unknown, defaulting to 1000 [ 59.016795][ T4104] lo speed is unknown, defaulting to 1000 [ 59.302160][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 59.302177][ T28] audit: type=1400 audit(1775073536.511:259): avc: denied { ioctl } for pid=4116 comm="syz.3.174" path="socket:[6883]" dev="sockfs" ino=6883 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.338160][ T4118] netlink: 64 bytes leftover after parsing attributes in process `syz.1.173'. [ 59.444701][ T4131] FAULT_INJECTION: forcing a failure. [ 59.444701][ T4131] name failslab, interval 1, probability 0, space 0, times 1 [ 59.524936][ T4131] CPU: 0 UID: 0 PID: 4131 Comm: syz.3.176 Not tainted syzkaller #0 PREEMPT(full) [ 59.524968][ T4131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 59.524981][ T4131] Call Trace: [ 59.524989][ T4131] [ 59.525006][ T4131] __dump_stack+0x1d/0x30 [ 59.525036][ T4131] dump_stack_lvl+0x95/0xd0 [ 59.525075][ T4131] dump_stack+0x15/0x1b [ 59.525150][ T4131] should_fail_ex+0x263/0x280 [ 59.525180][ T4131] should_failslab+0x8c/0xb0 [ 59.525204][ T4131] kmem_cache_alloc_noprof+0x66/0x400 [ 59.525271][ T4131] ? skb_clone+0x151/0x1f0 [ 59.525375][ T4131] skb_clone+0x151/0x1f0 [ 59.525396][ T4131] __netlink_deliver_tap+0x2c9/0x500 [ 59.525486][ T4131] netlink_unicast+0x66b/0x690 [ 59.525597][ T4131] netlink_sendmsg+0x5c8/0x6f0 [ 59.525623][ T4131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.525680][ T4131] ____sys_sendmsg+0x563/0x5b0 [ 59.525719][ T4131] ___sys_sendmsg+0x195/0x1e0 [ 59.525778][ T4131] __x64_sys_sendmsg+0xd4/0x160 [ 59.525800][ T4131] x64_sys_call+0x194c/0x3020 [ 59.525827][ T4131] do_syscall_64+0x12c/0x370 [ 59.525856][ T4131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.525943][ T4131] RIP: 0033:0x7f3d4b54c819 [ 59.525961][ T4131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.525981][ T4131] RSP: 002b:00007f3d49f9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.526073][ T4131] RAX: ffffffffffffffda RBX: 00007f3d4b7c5fa0 RCX: 00007f3d4b54c819 [ 59.526115][ T4131] RDX: 0000000020004000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 59.526130][ T4131] RBP: 00007f3d49f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.526144][ T4131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.526158][ T4131] R13: 00007f3d4b7c6038 R14: 00007f3d4b7c5fa0 R15: 00007fff6f3f4e88 [ 59.526192][ T4131] [ 59.774076][ T4143] SELinux: failed to load policy [ 60.195919][ T4152] netlink: 'syz.1.182': attribute type 27 has an invalid length. [ 60.215964][ T4152] netlink: 164 bytes leftover after parsing attributes in process `syz.1.182'. [ 61.564080][ T4173] netlink: 'syz.3.187': attribute type 3 has an invalid length. [ 61.666438][ T28] audit: type=1400 audit(1775073538.871:260): avc: denied { create } for pid=4182 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 61.767705][ T4200] SELinux: failed to load policy [ 61.784935][ T28] audit: type=1400 audit(1775073538.951:261): avc: denied { create } for pid=4187 comm="syz.3.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.827081][ T28] audit: type=1400 audit(1775073538.951:262): avc: denied { setopt } for pid=4187 comm="syz.3.190" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.877744][ T28] audit: type=1400 audit(1775073538.981:263): avc: denied { module_request } for pid=4187 comm="syz.3.190" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 61.901445][ T28] audit: type=1400 audit(1775073539.001:264): avc: denied { connect } for pid=4187 comm="syz.3.190" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.923348][ T28] audit: type=1400 audit(1775073539.001:265): avc: denied { write } for pid=4187 comm="syz.3.190" laddr=fe80::13 lport=60 faddr=fe80::d fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.027902][ T4222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.197'. [ 62.038165][ T28] audit: type=1400 audit(1775073539.241:266): avc: denied { read } for pid=4218 comm="syz.0.197" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.075305][ T4222] loop0: detected capacity change from 0 to 256 [ 62.090875][ T28] audit: type=1400 audit(1775073539.241:267): avc: denied { open } for pid=4218 comm="syz.0.197" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.126105][ T4225] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=26 sclass=netlink_audit_socket pid=4225 comm=syz.1.200 [ 62.149179][ T28] audit: type=1400 audit(1775073539.361:268): avc: denied { nlmsg_read } for pid=4224 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 62.417911][ T4222] FAT-fs (loop0): Directory bread(block 64) failed [ 62.428129][ T4222] FAT-fs (loop0): Directory bread(block 65) failed [ 62.502534][ T4222] FAT-fs (loop0): Directory bread(block 66) failed [ 62.725266][ T4222] FAT-fs (loop0): Directory bread(block 67) failed [ 62.732241][ T4222] FAT-fs (loop0): Directory bread(block 68) failed [ 63.198487][ T4222] FAT-fs (loop0): Directory bread(block 69) failed [ 63.322949][ T4222] FAT-fs (loop0): Directory bread(block 70) failed [ 63.355606][ T4222] FAT-fs (loop0): Directory bread(block 71) failed [ 63.375759][ T4222] FAT-fs (loop0): Directory bread(block 72) failed [ 63.455006][ T4222] FAT-fs (loop0): Directory bread(block 73) failed [ 63.575582][ T4273] FAULT_INJECTION: forcing a failure. [ 63.575582][ T4273] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 63.630551][ T4273] CPU: 1 UID: 0 PID: 4273 Comm: syz.4.212 Not tainted syzkaller #0 PREEMPT(full) [ 63.630581][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 63.630592][ T4273] Call Trace: [ 63.630599][ T4273] [ 63.630672][ T4273] __dump_stack+0x1d/0x30 [ 63.630698][ T4273] dump_stack_lvl+0x95/0xd0 [ 63.630726][ T4273] dump_stack+0x15/0x1b [ 63.630751][ T4273] should_fail_ex+0x263/0x280 [ 63.630800][ T4273] should_fail_alloc_page+0xf2/0x100 [ 63.630828][ T4273] __alloc_frozen_pages_noprof+0x108/0x360 [ 63.630890][ T4273] alloc_pages_mpol+0xb3/0x260 [ 63.630922][ T4273] alloc_frozen_pages_noprof+0x8f/0x110 [ 63.630977][ T4273] ___kmalloc_large_node+0x3f/0xe0 [ 63.631005][ T4273] __kmalloc_large_node_noprof+0x18/0xb0 [ 63.631103][ T4273] __kmalloc_node_noprof+0x123/0x560 [ 63.631125][ T4273] ? __nla_validate_parse+0x1650/0x1cf0 [ 63.631210][ T4273] ? qdisc_alloc+0x65/0x410 [ 63.631240][ T4273] qdisc_alloc+0x65/0x410 [ 63.631289][ T4273] ? nla_strcmp+0xc3/0xe0 [ 63.631323][ T4273] qdisc_create+0xf5/0x9d0 [ 63.631347][ T4273] tc_modify_qdisc+0xffc/0x14f0 [ 63.631374][ T4273] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 63.631433][ T4273] rtnetlink_rcv_msg+0x6a7/0x720 [ 63.631457][ T4273] netlink_rcv_skb+0x123/0x220 [ 63.631499][ T4273] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 63.631529][ T4273] rtnetlink_rcv+0x1c/0x30 [ 63.631551][ T4273] netlink_unicast+0x5c0/0x690 [ 63.631584][ T4273] netlink_sendmsg+0x5c8/0x6f0 [ 63.631644][ T4273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.631665][ T4273] ____sys_sendmsg+0x563/0x5b0 [ 63.631781][ T4273] ___sys_sendmsg+0x195/0x1e0 [ 63.631816][ T4273] __x64_sys_sendmsg+0xd4/0x160 [ 63.631842][ T4273] x64_sys_call+0x194c/0x3020 [ 63.631893][ T4273] do_syscall_64+0x12c/0x370 [ 63.631923][ T4273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.632013][ T4273] RIP: 0033:0x7fcbaa6bc819 [ 63.632030][ T4273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.632048][ T4273] RSP: 002b:00007fcba9117028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.632068][ T4273] RAX: ffffffffffffffda RBX: 00007fcbaa935fa0 RCX: 00007fcbaa6bc819 [ 63.632115][ T4273] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 63.632130][ T4273] RBP: 00007fcba9117090 R08: 0000000000000000 R09: 0000000000000000 [ 63.632145][ T4273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.632159][ T4273] R13: 00007fcbaa936038 R14: 00007fcbaa935fa0 R15: 00007fff868a7b38 [ 63.632180][ T4273] [ 63.952858][ T4290] netlink: 277 bytes leftover after parsing attributes in process `syz.2.215'. [ 65.125711][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 65.125728][ T28] audit: type=1400 audit(1775073542.341:281): avc: denied { execute } for pid=4308 comm="syz.2.220" dev="tmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.125830][ T4309] process 'syz.2.220' launched '/dev/fd/7' with NULL argv: empty string added [ 65.268142][ T4315] loop3: detected capacity change from 0 to 512 [ 65.275277][ T4315] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 65.303950][ T28] audit: type=1400 audit(1775073542.491:282): avc: denied { nosuid_transition } for pid=4308 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 65.304261][ T4315] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.219: casefold flag without casefold feature [ 65.338913][ T28] audit: type=1400 audit(1775073542.511:283): avc: denied { transition } for pid=4308 comm="syz.2.220" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 65.339035][ T4315] fserror_report: 2 callbacks suppressed [ 65.339049][ T4315] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.430469][ T28] audit: type=1400 audit(1775073542.511:284): avc: denied { entrypoint } for pid=4308 comm="syz.2.220" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1067 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.494539][ T28] audit: type=1400 audit(1775073542.621:285): avc: denied { noatsecure } for pid=4308 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 65.497965][ T4315] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.219: couldn't read orphan inode 15 (err -117) [ 65.516169][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 65.516192][ C1] EXT4-fs (loop3): initial error at time 1775073542: ext4_orphan_get:1397: inode 15 [ 65.516220][ C1] EXT4-fs (loop3): last error at time 1775073542: ext4_orphan_get:1397: inode 15 [ 65.577959][ T4315] loop3: lost filesystem error report for type 5 error -117 [ 65.586455][ T4315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.713494][ T4341] FAULT_INJECTION: forcing a failure. [ 65.713494][ T4341] name failslab, interval 1, probability 0, space 0, times 0 [ 65.732087][ T4342] FAULT_INJECTION: forcing a failure. [ 65.732087][ T4342] name failslab, interval 1, probability 0, space 0, times 0 [ 65.747676][ T4341] CPU: 0 UID: 0 PID: 4341 Comm: syz.0.229 Not tainted syzkaller #0 PREEMPT(full) [ 65.747706][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 65.747718][ T4341] Call Trace: [ 65.747723][ T4341] [ 65.747731][ T4341] __dump_stack+0x1d/0x30 [ 65.747784][ T4341] dump_stack_lvl+0x95/0xd0 [ 65.747811][ T4341] dump_stack+0x15/0x1b [ 65.747832][ T4341] should_fail_ex+0x263/0x280 [ 65.747911][ T4341] should_failslab+0x8c/0xb0 [ 65.747932][ T4341] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 65.748136][ T4341] ? __alloc_skb+0x2d6/0x690 [ 65.748235][ T4341] __alloc_skb+0x2d6/0x690 [ 65.748267][ T4341] ? __alloc_skb+0x200/0x690 [ 65.748349][ T4341] netlink_alloc_large_skb+0xbf/0xf0 [ 65.748380][ T4341] netlink_sendmsg+0x40c/0x6f0 [ 65.748409][ T4341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.748544][ T4341] ____sys_sendmsg+0x563/0x5b0 [ 65.748584][ T4341] ___sys_sendmsg+0x195/0x1e0 [ 65.748610][ T4341] __x64_sys_sendmsg+0xd4/0x160 [ 65.748633][ T4341] x64_sys_call+0x194c/0x3020 [ 65.748670][ T4341] do_syscall_64+0x12c/0x370 [ 65.748695][ T4341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.748784][ T4341] RIP: 0033:0x7f4947dcc819 [ 65.748803][ T4341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.748854][ T4341] RSP: 002b:00007f494681f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.748880][ T4341] RAX: ffffffffffffffda RBX: 00007f4948045fa0 RCX: 00007f4947dcc819 [ 65.748907][ T4341] RDX: 0000000004040880 RSI: 0000200000000000 RDI: 0000000000000003 [ 65.748964][ T4341] RBP: 00007f494681f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.748987][ T4341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.749002][ T4341] R13: 00007f4948046038 R14: 00007f4948045fa0 R15: 00007ffcc8e86bb8 [ 65.749034][ T4341] [ 65.792966][ T4342] CPU: 1 UID: 0 PID: 4342 Comm: syz.2.228 Not tainted syzkaller #0 PREEMPT(full) [ 65.792996][ T4342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 65.793008][ T4342] Call Trace: [ 65.793083][ T4342] [ 65.793091][ T4342] __dump_stack+0x1d/0x30 [ 65.793117][ T4342] dump_stack_lvl+0x95/0xd0 [ 65.793140][ T4342] dump_stack+0x15/0x1b [ 65.793161][ T4342] should_fail_ex+0x263/0x280 [ 65.793261][ T4342] should_failslab+0x8c/0xb0 [ 65.793282][ T4342] kmem_cache_alloc_noprof+0x66/0x400 [ 65.793305][ T4342] ? skb_clone+0x151/0x1f0 [ 65.793346][ T4342] skb_clone+0x151/0x1f0 [ 65.793364][ T4342] __netlink_deliver_tap+0x2c9/0x500 [ 65.793398][ T4342] netlink_unicast+0x66b/0x690 [ 65.793487][ T4342] netlink_sendmsg+0x5c8/0x6f0 [ 65.793508][ T4342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.793545][ T4342] ____sys_sendmsg+0x563/0x5b0 [ 65.793579][ T4342] ___sys_sendmsg+0x195/0x1e0 [ 65.793645][ T4342] __x64_sys_sendmsg+0xd4/0x160 [ 65.793675][ T4342] x64_sys_call+0x194c/0x3020 [ 65.793768][ T4342] do_syscall_64+0x12c/0x370 [ 65.793793][ T4342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.793815][ T4342] RIP: 0033:0x7f54fa8fc819 [ 65.793832][ T4342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.793970][ T4342] RSP: 002b:00007f54f934f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.793991][ T4342] RAX: ffffffffffffffda RBX: 00007f54fab75fa0 RCX: 00007f54fa8fc819 [ 65.794006][ T4342] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 65.794019][ T4342] RBP: 00007f54f934f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.794038][ T4342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.794119][ T4342] R13: 00007f54fab76038 R14: 00007f54fab75fa0 R15: 00007ffd25139fe8 [ 65.794198][ T4342] [ 65.795222][ T4342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 65.928465][ T4353] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #2: block 4: comm syz.3.219: lblock 0 mapped to illegal pblock 4 (length 1) [ 65.977080][ T4334] lo speed is unknown, defaulting to 1000 [ 66.135835][ T4361] netlink: 165 bytes leftover after parsing attributes in process `syz.2.233'. [ 66.169098][ T4354] lo speed is unknown, defaulting to 1000 [ 66.179813][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.209312][ T28] audit: type=1400 audit(1775073543.431:286): avc: denied { write } for pid=4360 comm="syz.2.233" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 66.380985][ T4370] loop1: detected capacity change from 0 to 4096 [ 66.887649][ T4370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.973719][ T28] audit: type=1400 audit(1775073544.181:287): avc: denied { setattr } for pid=4369 comm="syz.1.237" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.005494][ T4381] Dead loop on virtual device ip6_vti0, fix it urgently! [ 67.032246][ T28] audit: type=1400 audit(1775073544.241:288): avc: denied { lock } for pid=4380 comm="syz.0.239" path="socket:[8307]" dev="sockfs" ino=8307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 67.062882][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.076927][ T28] audit: type=1400 audit(1775073544.271:289): avc: denied { write } for pid=4380 comm="syz.0.239" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.324495][ T4400] lo: entered promiscuous mode [ 67.353013][ T4400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 67.518709][ T4414] loop3: detected capacity change from 0 to 512 [ 67.531927][ T4414] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 67.546709][ T4414] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.249: casefold flag without casefold feature [ 67.637162][ T4425] loop1: detected capacity change from 0 to 1764 [ 67.660246][ T4425] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 67.671727][ T28] audit: type=1400 audit(1775073544.861:290): avc: denied { mount } for pid=4405 comm="syz.1.241" name="/" dev="loop1" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 67.710336][ T4414] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.714862][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 67.730576][ C1] EXT4-fs (loop3): initial error at time 1775073544: ext4_orphan_get:1397: inode 15 [ 67.740178][ C1] EXT4-fs (loop3): last error at time 1775073544: ext4_orphan_get:1397: inode 15 [ 67.752477][ T4414] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.249: couldn't read orphan inode 15 (err -117) [ 67.907721][ T4414] loop3: lost filesystem error report for type 5 error -117 [ 67.916797][ T4414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.036223][ T4414] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #2: block 4: comm syz.3.249: lblock 0 mapped to illegal pblock 4 (length 1) [ 68.185867][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.507549][ T4432] loop4: detected capacity change from 0 to 512 [ 68.647083][ T4432] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 68.689644][ T4432] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.253: casefold flag without casefold feature [ 69.039205][ T4432] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.043815][ T4432] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.253: couldn't read orphan inode 15 (err -117) [ 69.053425][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 69.053454][ C1] EXT4-fs (loop4): initial error at time 1775073546: ext4_orphan_get:1397: inode 15 [ 69.053516][ C1] EXT4-fs (loop4): last error at time 1775073546: ext4_orphan_get:1397: inode 15 [ 69.553240][ T4432] loop4: lost filesystem error report for type 5 error -117 [ 69.555282][ T4432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.647371][ T4447] SELinux: failed to load policy [ 69.663682][ T4432] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #2: block 4: comm syz.4.253: lblock 0 mapped to illegal pblock 4 (length 1) [ 69.746415][ T4458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.772146][ T4460] loop2: detected capacity change from 0 to 128 [ 69.790788][ T3399] lo speed is unknown, defaulting to 1000 [ 69.796931][ T3399] syz0: Port: 1 Link DOWN [ 69.804766][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.827170][ T4467] loop1: detected capacity change from 0 to 512 [ 69.860828][ T4467] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 69.898847][ T4467] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.264: casefold flag without casefold feature [ 69.925031][ T4467] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.925262][ T4467] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.264: couldn't read orphan inode 15 (err -117) [ 69.935165][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 69.935212][ C0] EXT4-fs (loop1): initial error at time 1775073547: ext4_orphan_get:1397: inode 15 [ 69.935249][ C0] EXT4-fs (loop1): last error at time 1775073547: ext4_orphan_get:1397: inode 15 [ 69.993644][ T4467] loop1: lost filesystem error report for type 5 error -117 [ 69.994313][ T4467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.025703][ T4467] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #2: block 4: comm syz.1.264: lblock 0 mapped to illegal pblock 4 (length 1) [ 70.122361][ T4484] loop2: detected capacity change from 0 to 1024 [ 70.712554][ T4484] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.753013][ T4484] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 70.761525][ T4484] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.769313][ T4484] EXT4-fs error (device loop2): __ext4_get_inode_loc:4797: comm syz.2.265: Invalid inode table block 0 in block_group 0 [ 70.782520][ T4484] loop2: lost filesystem error report for type 5 error -117 [ 70.782864][ T4484] EXT4-fs (loop2): Remounting filesystem read-only [ 70.784859][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 70.790270][ T4484] __quota_error: 7 callbacks suppressed [ 70.790284][ T4484] Quota error (device loop2): write_blk: dquota write failed [ 70.796810][ C0] EXT4-fs (loop2): initial error at time 1775073548: __ext4_get_inode_loc:4797 [ 70.796837][ C0] EXT4-fs (loop2): last error at time 1775073548: __ext4_get_inode_loc:4797 [ 70.836634][ T4484] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 70.846770][ T4484] EXT4-fs (loop2): 1 truncate cleaned up [ 71.012379][ T4484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.046432][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.071444][ T4484] hub 8-0:1.0: USB hub found [ 71.076180][ T4484] hub 8-0:1.0: 8 ports detected [ 71.267915][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.420166][ T4508] netlink: 'syz.2.270': attribute type 27 has an invalid length. [ 71.428961][ T4508] netlink: 164 bytes leftover after parsing attributes in process `syz.2.270'. [ 71.701483][ T4511] SELinux: failed to load policy [ 72.104963][ T4524] loop0: detected capacity change from 0 to 512 [ 72.122555][ T4524] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 72.140258][ T28] audit: type=1400 audit(1775073549.351:298): avc: denied { create } for pid=4526 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.163625][ T28] audit: type=1400 audit(1775073549.371:299): avc: denied { setopt } for pid=4526 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.178888][ T4524] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.278: casefold flag without casefold feature [ 72.208784][ T4524] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.214867][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 72.230871][ C1] EXT4-fs (loop0): initial error at time 1775073549: ext4_orphan_get:1397: inode 15 [ 72.240780][ C1] EXT4-fs (loop0): last error at time 1775073549: ext4_orphan_get:1397: inode 15 [ 72.275282][ T4524] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.278: couldn't read orphan inode 15 (err -117) [ 72.305836][ T4524] loop0: lost filesystem error report for type 5 error -117 [ 72.307155][ T4524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.351350][ T4524] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #2: block 4: comm syz.0.278: lblock 0 mapped to illegal pblock 4 (length 1) [ 72.480462][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.530633][ T4565] SELinux: failed to load policy [ 72.583051][ T4569] siw: device registration error -23 [ 72.615410][ T4569] lo speed is unknown, defaulting to 1000 [ 73.642836][ T4575] lo speed is unknown, defaulting to 1000 [ 73.838007][ T4604] netlink: 165 bytes leftover after parsing attributes in process `syz.2.295'. [ 73.876854][ T4610] loop0: detected capacity change from 0 to 512 [ 73.883812][ T4604] hub 8-0:1.0: USB hub found [ 73.888613][ T4604] hub 8-0:1.0: 8 ports detected [ 73.903509][ T4610] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 73.923444][ T4613] netlink: 'syz.1.294': attribute type 27 has an invalid length. [ 73.933486][ T4613] netlink: 164 bytes leftover after parsing attributes in process `syz.1.294'. [ 73.954106][ T4610] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.296: casefold flag without casefold feature [ 74.032100][ T4610] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.032358][ T4610] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.296: couldn't read orphan inode 15 (err -117) [ 74.041837][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 74.041861][ C0] EXT4-fs (loop0): initial error at time 1775073551: ext4_orphan_get:1397: inode 15 [ 74.041893][ C0] EXT4-fs (loop0): last error at time 1775073551: ext4_orphan_get:1397: inode 15 [ 74.129824][ T4625] SELinux: failed to load policy [ 74.153008][ T4610] loop0: lost filesystem error report for type 5 error -117 [ 74.156576][ T4610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.185957][ T4610] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #2: block 4: comm syz.0.296: lblock 0 mapped to illegal pblock 4 (length 1) [ 74.245352][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.415359][ T28] audit: type=1400 audit(1775073552.621:300): avc: denied { mount } for pid=4662 comm="syz.3.308" name="/" dev="ramfs" ino=8689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 75.453228][ T4670] SELinux: failed to load policy [ 75.470339][ T4672] loop1: detected capacity change from 0 to 512 [ 75.480773][ T4672] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 75.589583][ T4672] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.312: casefold flag without casefold feature [ 75.615896][ T4672] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.624875][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 75.640773][ C0] EXT4-fs (loop1): initial error at time 1775073552: ext4_orphan_get:1397: inode 15 [ 75.650250][ C0] EXT4-fs (loop1): last error at time 1775073552: ext4_orphan_get:1397: inode 15 [ 75.664182][ T4672] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.312: couldn't read orphan inode 15 (err -117) [ 75.676855][ T4672] loop1: lost filesystem error report for type 5 error -117 [ 75.678205][ T4672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.887802][ T4672] EXT4-fs error (device loop1): ext4_map_blocks:786: inode #2: block 4: comm syz.1.312: lblock 0 mapped to illegal pblock 4 (length 1) [ 76.333957][ T28] audit: type=1400 audit(1775073553.531:301): avc: denied { write } for pid=4691 comm="syz.0.316" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.361947][ T4692] capability: warning: `syz.0.316' uses 32-bit capabilities (legacy support in use) [ 76.397133][ T4692] mmap: syz.0.316 (4692) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.426308][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.444947][ T28] audit: type=1400 audit(1775073553.541:302): avc: denied { ioctl } for pid=4691 comm="syz.0.316" path="socket:[7863]" dev="sockfs" ino=7863 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.651517][ T4719] SELinux: failed to load policy [ 76.695516][ T4715] xt_hashlimit: size too large, truncated to 1048576 [ 76.764363][ T4721] loop4: detected capacity change from 0 to 512 [ 76.828587][ T4721] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.322: iget: bad extra_isize 90 (inode size 256) [ 76.856736][ T4721] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.857827][ T4721] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.322: error while reading EA inode 11 err=-117 [ 76.867436][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 76.867460][ C1] EXT4-fs (loop4): initial error at time 1775073554: ext4_xattr_inode_iget:441: inode 11 [ 76.867511][ C1] EXT4-fs (loop4): last error at time 1775073554: ext4_xattr_inode_iget:441: inode 11 [ 76.978780][ T4728] netlink: 'syz.3.324': attribute type 27 has an invalid length. [ 76.992154][ T4721] loop4: lost filesystem error report for type 5 error -117 [ 76.992481][ T4721] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 77.013621][ T4728] netlink: 164 bytes leftover after parsing attributes in process `syz.3.324'. [ 77.031281][ T4721] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.322: iget: bad extra_isize 90 (inode size 256) [ 77.046979][ T4721] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 77.047230][ T4721] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.322: error while reading EA inode 11 err=-117 [ 77.069949][ T4721] loop4: lost filesystem error report for type 5 error -117 [ 77.070120][ T4721] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.322: iget: bad extra_isize 90 (inode size 256) [ 77.091355][ T4721] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 77.091555][ T4721] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.322: error while reading EA inode 18 err=-117 [ 77.113903][ T4721] loop4: lost filesystem error report for type 5 error -117 [ 77.114145][ T4721] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.322: iget: bad extra_isize 90 (inode size 256) [ 77.137367][ T4721] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 77.137574][ T4721] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.322: error while reading EA inode 18 err=-117 [ 77.159606][ T4721] loop4: lost filesystem error report for type 5 error -117 [ 77.159955][ T4721] EXT4-fs (loop4): 1 orphan inode deleted [ 77.174230][ T4721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.196970][ T4715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.322'. [ 77.279639][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.582148][ T4754] loop0: detected capacity change from 0 to 512 [ 77.592071][ T4754] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 77.661021][ T4754] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.328: casefold flag without casefold feature [ 77.702956][ T4754] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.703201][ T4754] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.328: couldn't read orphan inode 15 (err -117) [ 77.704115][ T4763] FAULT_INJECTION: forcing a failure. [ 77.704115][ T4763] name failslab, interval 1, probability 0, space 0, times 0 [ 77.714864][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 77.726862][ T4763] CPU: 0 UID: 0 PID: 4763 Comm: syz.3.331 Not tainted syzkaller #0 PREEMPT(full) [ 77.726890][ T4763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 77.726901][ T4763] Call Trace: [ 77.726909][ T4763] [ 77.726918][ T4763] __dump_stack+0x1d/0x30 [ 77.727015][ T4763] dump_stack_lvl+0x95/0xd0 [ 77.727038][ T4763] dump_stack+0x15/0x1b [ 77.727060][ T4763] should_fail_ex+0x263/0x280 [ 77.727146][ T4763] should_failslab+0x8c/0xb0 [ 77.727233][ T4763] __kmalloc_noprof+0xb8/0x4e0 [ 77.727256][ T4763] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 77.727324][ T4763] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 77.727353][ T4763] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 77.727439][ T4763] ? selinux_capable+0x31/0x40 [ 77.727470][ T4763] ? security_capable+0x7b/0x90 [ 77.727572][ T4763] ? ns_capable+0x7c/0xb0 [ 77.727591][ T4763] genl_rcv_msg+0x432/0x470 [ 77.727615][ T4763] ? __pfx_smc_pnet_add+0x10/0x10 [ 77.727704][ T4763] netlink_rcv_skb+0x123/0x220 [ 77.727877][ T4763] ? __pfx_genl_rcv_msg+0x10/0x10 [ 77.727904][ T4763] genl_rcv+0x28/0x40 [ 77.727926][ T4763] netlink_unicast+0x5c0/0x690 [ 77.727956][ T4763] netlink_sendmsg+0x5c8/0x6f0 [ 77.727977][ T4763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.728046][ T4763] ____sys_sendmsg+0x563/0x5b0 [ 77.728103][ T4763] ___sys_sendmsg+0x195/0x1e0 [ 77.728131][ T4763] __x64_sys_sendmsg+0xd4/0x160 [ 77.728153][ T4763] x64_sys_call+0x194c/0x3020 [ 77.728239][ T4763] do_syscall_64+0x12c/0x370 [ 77.728265][ T4763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.728287][ T4763] RIP: 0033:0x7f3d4b54c819 [ 77.728305][ T4763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.728322][ T4763] RSP: 002b:00007f3d49f9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.728347][ T4763] RAX: ffffffffffffffda RBX: 00007f3d4b7c5fa0 RCX: 00007f3d4b54c819 [ 77.728361][ T4763] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000004 [ 77.728374][ T4763] RBP: 00007f3d49f9f090 R08: 0000000000000000 R09: 0000000000000000 [ 77.728387][ T4763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.728400][ T4763] R13: 00007f3d4b7c6038 R14: 00007f3d4b7c5fa0 R15: 00007fff6f3f4e88 [ 77.728418][ T4763] [ 77.758917][ T4754] loop0: lost filesystem error report for type 5 error -117 [ 77.764387][ C1] EXT4-fs (loop0): initial error at time 1775073554: ext4_orphan_get:1397 [ 77.780449][ T4754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.783811][ C1] : inode 15 [ 77.824717][ T4754] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #2: block 4: comm syz.0.328: lblock 0 mapped to illegal pblock 4 (length 1) [ 77.826303][ C1] [ 77.826311][ C1] EXT4-fs (loop0): last error at time 1775073554: ext4_orphan_get:1402 [ 77.862127][ T28] audit: type=1400 audit(1775073555.071:303): avc: denied { read } for pid=4766 comm="syz.2.333" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 77.864499][ C1] : inode 2 [ 77.880393][ T4769] loop2: detected capacity change from 0 to 512 [ 77.884865][ C1] : block 4 [ 77.889727][ T28] audit: type=1400 audit(1775073555.071:304): avc: denied { open } for pid=4766 comm="syz.2.333" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 77.894264][ C1] [ 77.955675][ T4773] lo speed is unknown, defaulting to 1000 [ 78.015933][ T4769] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.333: iget: bad extra_isize 58 (inode size 256) [ 78.084064][ T4780] loop3: detected capacity change from 0 to 512 [ 78.123977][ T4769] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.124212][ T4769] EXT4-fs (loop2): Remounting filesystem read-only [ 78.133557][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 78.133575][ C1] EXT4-fs (loop2): initial error at time 1775073555: ext4_xattr_inode_iget:441: inode 11 [ 78.133601][ C1] EXT4-fs (loop2): last error at time 1775073555: ext4_xattr_inode_iget:441: inode 11 [ 78.133767][ T4780] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 78.140650][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.155730][ T4780] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.335: casefold flag without casefold feature [ 78.172243][ T4769] EXT4-fs warning (device loop2): ext4_evict_inode:268: couldn't mark inode dirty (err -30) [ 78.181717][ T4780] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.197862][ T4769] EXT4-fs (loop2): 1 orphan inode deleted [ 78.209363][ T4780] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.335: couldn't read orphan inode 15 (err -117) [ 78.215984][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 78.216028][ C0] EXT4-fs (loop3): initial error at time 1775073555: ext4_orphan_get:1397: inode 15 [ 78.216059][ C0] EXT4-fs (loop3): last error at time 1775073555: ext4_orphan_get:1397: inode 15 [ 78.223655][ T4769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.234933][ T4780] loop3: lost filesystem error report for type 5 error -117 [ 78.274543][ T4780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.342734][ T4780] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #2: block 4: comm syz.3.335: lblock 0 mapped to illegal pblock 4 (length 1) [ 78.387973][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.393242][ T28] audit: type=1400 audit(1775073555.601:305): avc: denied { ioctl } for pid=4766 comm="syz.2.333" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 78.521665][ T4809] SELinux: failed to load policy [ 78.746020][ T4799] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.768924][ T30] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.829236][ T30] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.907520][ T30] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.968073][ T30] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.067800][ T30] bridge_slave_1: left allmulticast mode [ 79.073850][ T30] bridge_slave_1: left promiscuous mode [ 79.079996][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.090120][ T30] bridge_slave_0: left allmulticast mode [ 79.096000][ T30] bridge_slave_0: left promiscuous mode [ 79.102043][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.207588][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.218153][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.232122][ T30] bond0 (unregistering): Released all slaves [ 79.326482][ T30] hsr_slave_0: left promiscuous mode [ 79.334346][ T4866] loop3: detected capacity change from 0 to 128 [ 79.378778][ T30] hsr_slave_1: left promiscuous mode [ 79.378815][ T28] audit: type=1400 audit(1775073556.581:306): avc: denied { mounton } for pid=4871 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 79.384565][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.428045][ T4866] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.430651][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.447646][ T28] audit: type=1400 audit(1775073556.631:307): avc: denied { write } for pid=4874 comm="syz.4.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.472845][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.480906][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.490169][ T4866] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.503234][ T28] audit: type=1400 audit(1775073556.711:308): avc: denied { read } for pid=4874 comm="syz.4.346" lport=35401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.530135][ T30] veth1_macvtap: left promiscuous mode [ 79.536184][ T30] veth0_macvtap: left promiscuous mode [ 79.542492][ T30] veth1_vlan: left promiscuous mode [ 79.548330][ T30] veth0_vlan: left promiscuous mode [ 79.577869][ T28] audit: type=1400 audit(1775073556.791:309): avc: denied { create } for pid=4865 comm="syz.3.345" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 79.602614][ T4866] capability: warning: `syz.3.345' uses deprecated v2 capabilities in a way that may be insecure [ 79.614218][ T28] audit: type=1400 audit(1775073556.821:310): avc: denied { setattr } for pid=4865 comm="syz.3.345" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 79.888420][ T4899] hub 8-0:1.0: USB hub found [ 79.893256][ T4899] hub 8-0:1.0: 8 ports detected [ 80.366320][ T4901] loop1: detected capacity change from 0 to 128 [ 80.459920][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.480943][ T4901] FAT-fs (loop1): Filesystem has been set read-only [ 80.493318][ T30] team0 (unregistering): Port device team_slave_1 removed [ 80.504363][ T4905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 80.554274][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.583597][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.593038][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.601988][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.606679][ T30] team0 (unregistering): Port device team_slave_0 removed [ 80.627522][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.652691][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.662332][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.671754][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.681685][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.690583][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.700667][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.710040][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.719534][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.733979][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.743615][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.752904][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.768396][ T4916] hub 8-0:1.0: USB hub found [ 80.773349][ T4916] hub 8-0:1.0: 8 ports detected [ 80.792513][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.806162][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.851495][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.860788][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.869846][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.879524][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.889720][ T4901] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 80.989597][ T4898] lo speed is unknown, defaulting to 1000 [ 81.287800][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.356379][ T4937] SELinux: failed to load policy [ 81.471117][ T4871] lo speed is unknown, defaulting to 1000 [ 81.670221][ T4954] loop4: detected capacity change from 0 to 1024 [ 81.686588][ T4954] EXT4-fs: Ignoring removed bh option [ 81.703366][ T4954] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.862830][ T4871] chnl_net:caif_netlink_parms(): no params data found [ 83.412984][ T4954] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #3: block 2: comm syz.4.357: lblock 2 mapped to illegal pblock 2 (length 1) [ 83.463055][ T4954] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 83.464873][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 83.480591][ C1] EXT4-fs (loop4): initial error at time 1775073560: ext4_map_blocks:786: inode 3: block 2 [ 83.490721][ C1] EXT4-fs (loop4): last error at time 1775073560: ext4_map_blocks:786: inode 3: block 2 [ 83.504545][ T4871] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.504888][ T4954] __quota_error: 2 callbacks suppressed [ 83.504901][ T4954] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 83.520751][ T4871] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.540904][ T4871] bridge_slave_0: entered allmulticast mode [ 83.551919][ T4985] loop1: detected capacity change from 0 to 512 [ 83.578934][ T4871] bridge_slave_0: entered promiscuous mode [ 83.585953][ T4871] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.595581][ T4985] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.602851][ T4871] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.613311][ T4871] bridge_slave_1: entered allmulticast mode [ 83.619766][ T4954] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #3: block 48: comm syz.4.357: lblock 0 mapped to illegal pblock 48 (length 1) [ 83.620129][ T4871] bridge_slave_1: entered promiscuous mode [ 83.644671][ T4954] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 83.655242][ T4954] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 83.673689][ T4954] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.357: Failed to acquire dquot type 0 [ 83.684957][ T28] audit: type=1400 audit(1775073560.891:313): avc: denied { create } for pid=4991 comm="syz.3.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.693790][ T4871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.714598][ T4954] loop4: lost filesystem error report for type 5 error -117 [ 83.717121][ T4954] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 83.720516][ T4871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.726121][ T4985] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.360: invalid indirect mapped block 9 (level 0) [ 83.767856][ T4871] team0: Port device team_slave_0 added [ 83.774953][ T4871] team0: Port device team_slave_1 added [ 83.784930][ T4954] loop4: lost filesystem error report for type 5 error -117 [ 83.789155][ T4985] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 83.797152][ T4985] EXT4-fs (loop1): 1 truncate cleaned up [ 83.797263][ T4954] EXT4-fs error (device loop4): ext4_evict_inode:265: inode #11: comm syz.4.357: mark_inode_dirty error [ 83.806406][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 83.806428][ C0] EXT4-fs (loop1): initial error at time 1775073561: ext4_free_branches:1023 [ 83.827919][ T4871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.829781][ C0] : inode 11 [ 83.848746][ C0] EXT4-fs (loop1): last error at time 1775073561: ext4_free_branches:1023: inode 11 [ 83.859136][ T4985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.871637][ T4954] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 83.873550][ T4954] EXT4-fs warning (device loop4): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 83.883113][ T4871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.919874][ T4871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.925382][ T4996] loop0: detected capacity change from 0 to 764 [ 83.931472][ T4871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.944262][ T4871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.946152][ T4954] EXT4-fs (loop4): 1 orphan inode deleted [ 83.972496][ T36] EXT4-fs error (device loop4): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.979053][ T28] audit: type=1400 audit(1775073561.191:314): avc: denied { setattr } for pid=4984 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 83.992213][ T36] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 84.011809][ T36] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 84.037959][ T4871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.049088][ T36] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:2: Failed to release dquot type 0 [ 84.060837][ T36] loop4: lost filesystem error report for type 5 error -117 [ 84.061240][ T4996] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 84.092074][ T4985] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.140762][ T4954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.186856][ T4871] hsr_slave_0: entered promiscuous mode [ 84.199344][ T4871] hsr_slave_1: entered promiscuous mode [ 84.205956][ T4871] debugfs: 'hsr0' already exists in 'hsr' [ 84.265127][ T5006] FAULT_INJECTION: forcing a failure. [ 84.265127][ T5006] name failslab, interval 1, probability 0, space 0, times 0 [ 84.277995][ T5006] CPU: 1 UID: 0 PID: 5006 Comm: syz.1.366 Not tainted syzkaller #0 PREEMPT(full) [ 84.278061][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.278073][ T5006] Call Trace: [ 84.278080][ T5006] [ 84.278088][ T5006] __dump_stack+0x1d/0x30 [ 84.278119][ T5006] dump_stack_lvl+0x95/0xd0 [ 84.278151][ T5006] dump_stack+0x15/0x1b [ 84.278171][ T5006] should_fail_ex+0x263/0x280 [ 84.278200][ T5006] should_failslab+0x8c/0xb0 [ 84.278225][ T5006] kmem_cache_alloc_noprof+0x66/0x400 [ 84.278282][ T5006] ? alloc_empty_file+0x76/0x200 [ 84.278314][ T5006] alloc_empty_file+0x76/0x200 [ 84.278342][ T5006] path_openat+0x65/0x2050 [ 84.278378][ T5006] ? __rcu_read_unlock+0x33/0x70 [ 84.278412][ T5006] ? filemap_map_pages+0xc98/0xf10 [ 84.278437][ T5006] ? _raw_spin_unlock+0x9/0x30 [ 84.278463][ T5006] ? finish_task_switch+0x7d/0x280 [ 84.278481][ T5006] ? css_rstat_updated+0xbb/0x280 [ 84.278550][ T5006] do_file_open+0x16c/0x290 [ 84.278585][ T5006] do_sys_openat2+0x94/0x130 [ 84.278617][ T5006] __x64_sys_openat+0xf2/0x120 [ 84.278642][ T5006] x64_sys_call+0x1e39/0x3020 [ 84.278665][ T5006] do_syscall_64+0x12c/0x370 [ 84.278688][ T5006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.278752][ T5006] RIP: 0033:0x7f75dbf9d04e [ 84.278767][ T5006] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 84.278783][ T5006] RSP: 002b:00007f75da9ecb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 84.278802][ T5006] RAX: ffffffffffffffda RBX: 00007f75da9ed6c0 RCX: 00007f75dbf9d04e [ 84.278815][ T5006] RDX: 0000000000160301 RSI: 00007f75da9ecc00 RDI: ffffffffffffff9c [ 84.278827][ T5006] RBP: 00007f75da9ecc00 R08: 0000000000000000 R09: 0000000000000000 [ 84.278841][ T5006] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 84.278878][ T5006] R13: 00007f75dc256218 R14: 00007f75dc256180 R15: 00007ffdb25bc5f8 [ 84.278895][ T5006] [ 84.490662][ T4954] EXT4-fs error (device loop4): __ext4_get_inode_loc:4797: comm syz.4.357: Invalid inode table block 1 in block_group 0 [ 84.503576][ T28] audit: type=1400 audit(1775073561.701:315): avc: denied { setattr } for pid=4953 comm="syz.4.357" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.532751][ T4954] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 84.554666][ T4954] EXT4-fs error (device loop4): ext4_dirty_inode:6495: inode #2: comm syz.4.357: mark_inode_dirty error [ 84.597796][ T28] audit: type=1400 audit(1775073561.811:316): avc: denied { mounton } for pid=4953 comm="syz.4.357" path="/74/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.740041][ T28] audit: type=1400 audit(1775073561.891:317): avc: denied { map } for pid=4953 comm="syz.4.357" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.794742][ T5010] SELinux: failed to load policy [ 84.876307][ T30] EXT4-fs error (device loop4): __ext4_get_inode_loc:4797: comm kworker/u8:1: Invalid inode table block 1 in block_group 0 [ 84.884900][ T4871] Cannot create hsr debugfs directory [ 84.898067][ T28] audit: type=1400 audit(1775073561.891:318): avc: denied { read write } for pid=4953 comm="syz.4.357" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.903060][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.942194][ T3316] EXT4-fs error (device loop4): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 84.963723][ T3316] loop4: lost filesystem error report for type 5 error -117 [ 84.984280][ T3316] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 85.001383][ T3316] loop4: lost filesystem error report for type 5 error -117 [ 85.037014][ T4871] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.063840][ T4871] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.081608][ T3316] EXT4-fs error (device loop4): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 85.096807][ T4871] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.104213][ T3316] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 85.106422][ T4871] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.271116][ T4871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.282490][ T4871] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.405433][ T4871] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.498752][ T4871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.568587][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.576330][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.641254][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.648404][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.816483][ T5044] lo speed is unknown, defaulting to 1000 [ 85.909767][ T4871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.710158][ T5080] lo speed is unknown, defaulting to 1000 [ 86.868722][ T5099] netlink: 28 bytes leftover after parsing attributes in process `syz.4.381'. [ 86.923623][ T5108] tmpfs: Bad value for 'mpol' [ 86.932046][ T28] audit: type=1400 audit(1775073564.131:319): avc: denied { mounton } for pid=5097 comm="syz.4.381" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 87.018172][ T4871] veth0_vlan: entered promiscuous mode [ 87.049658][ T4871] veth1_vlan: entered promiscuous mode [ 87.074794][ T4871] veth0_macvtap: entered promiscuous mode [ 87.091278][ T4871] veth1_macvtap: entered promiscuous mode [ 87.121434][ T4871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.139391][ T4871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.239607][ T108] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.254084][ T108] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.278124][ T108] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.288549][ T108] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.389551][ T5133] lo speed is unknown, defaulting to 1000 [ 87.913627][ T5143] loop3: detected capacity change from 0 to 512 [ 87.962392][ T5145] netlink: 60 bytes leftover after parsing attributes in process `syz.5.390'. [ 87.978457][ T5145] netlink: 60 bytes leftover after parsing attributes in process `syz.5.390'. [ 88.400619][ T5143] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 88.882081][ T5143] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.389: casefold flag without casefold feature [ 88.969295][ T5143] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.969656][ T5143] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.389: couldn't read orphan inode 15 (err -117) [ 88.979074][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 88.979098][ C0] EXT4-fs (loop3): initial error at time 1775073566: ext4_orphan_get:1397: inode 15 [ 88.979130][ C0] EXT4-fs (loop3): last error at time 1775073566: ext4_orphan_get:1397: inode 15 [ 89.071001][ T5143] loop3: lost filesystem error report for type 5 error -117 [ 89.107740][ T5143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.186313][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 89.186328][ T28] audit: type=1400 audit(1775073566.401:326): avc: denied { read write } for pid=5165 comm="syz.5.394" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 89.219045][ T5143] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #2: block 4: comm syz.3.389: lblock 0 mapped to illegal pblock 4 (length 1) [ 89.220753][ T28] audit: type=1400 audit(1775073566.401:327): avc: denied { open } for pid=5165 comm="syz.5.394" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 89.234224][ T5169] FAULT_INJECTION: forcing a failure. [ 89.234224][ T5169] name failslab, interval 1, probability 0, space 0, times 0 [ 89.260234][ T28] audit: type=1400 audit(1775073566.401:328): avc: denied { setopt } for pid=5165 comm="syz.5.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.270619][ T5169] CPU: 1 UID: 0 PID: 5169 Comm: syz.4.396 Not tainted syzkaller #0 PREEMPT(full) [ 89.270645][ T5169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.270657][ T5169] Call Trace: [ 89.270665][ T5169] [ 89.270676][ T5169] __dump_stack+0x1d/0x30 [ 89.270703][ T5169] dump_stack_lvl+0x95/0xd0 [ 89.270806][ T5169] dump_stack+0x15/0x1b [ 89.270827][ T5169] should_fail_ex+0x263/0x280 [ 89.270853][ T5169] ? xfrm_policy_alloc+0x62/0x1b0 [ 89.270956][ T5169] should_failslab+0x8c/0xb0 [ 89.270978][ T5169] __kmalloc_cache_noprof+0x5f/0x410 [ 89.271033][ T5169] xfrm_policy_alloc+0x62/0x1b0 [ 89.271099][ T5169] xfrm_policy_construct+0x2f/0x320 [ 89.271153][ T5169] xfrm_add_policy+0x156/0x470 [ 89.271249][ T5169] xfrm_user_rcv_msg+0x576/0x670 [ 89.271275][ T5169] ? __kfree_skb+0x109/0x150 [ 89.271310][ T5169] ? nlmon_xmit+0x4f/0x60 [ 89.271384][ T5169] ? consume_skb+0x4b/0x160 [ 89.271421][ T5169] netlink_rcv_skb+0x123/0x220 [ 89.271453][ T5169] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 89.271531][ T5169] xfrm_netlink_rcv+0x48/0x60 [ 89.271554][ T5169] netlink_unicast+0x5c0/0x690 [ 89.271583][ T5169] netlink_sendmsg+0x5c8/0x6f0 [ 89.271673][ T5169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.271766][ T5169] ____sys_sendmsg+0x563/0x5b0 [ 89.271854][ T5169] ___sys_sendmsg+0x195/0x1e0 [ 89.271882][ T5169] __x64_sys_sendmsg+0xd4/0x160 [ 89.271941][ T5169] x64_sys_call+0x194c/0x3020 [ 89.271966][ T5169] do_syscall_64+0x12c/0x370 [ 89.271993][ T5169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.272014][ T5169] RIP: 0033:0x7fcbaa6bc819 [ 89.272098][ T5169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.272115][ T5169] RSP: 002b:00007fcba9117028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.272201][ T5169] RAX: ffffffffffffffda RBX: 00007fcbaa935fa0 RCX: 00007fcbaa6bc819 [ 89.272215][ T5169] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 89.272228][ T5169] RBP: 00007fcba9117090 R08: 0000000000000000 R09: 0000000000000000 [ 89.272241][ T5169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.272253][ T5169] R13: 00007fcbaa936038 R14: 00007fcbaa935fa0 R15: 00007fff868a7b38 [ 89.272308][ T5169] [ 89.522441][ T28] audit: type=1400 audit(1775073566.401:329): avc: denied { connect } for pid=5165 comm="syz.5.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.522779][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.555122][ T28] audit: type=1400 audit(1775073566.761:330): avc: denied { setcheckreqprot } for pid=5165 comm="syz.5.394" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 89.768283][ T5185] loop1: detected capacity change from 0 to 128 [ 89.776903][ T5185] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.794125][ T5185] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.815837][ T28] audit: type=1400 audit(1775073567.021:331): avc: denied { read write open } for pid=5183 comm="syz.1.402" path="/73/mnt/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 89.914538][ T28] audit: type=1400 audit(1775073567.021:332): avc: denied { ioctl } for pid=5183 comm="syz.1.402" path="/73/mnt/file1" dev="loop1" ino=12 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 89.968499][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.017037][ T28] audit: type=1400 audit(1775073567.221:333): avc: denied { create } for pid=5193 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.071215][ T28] audit: type=1400 audit(1775073567.261:334): avc: denied { bind } for pid=5193 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.112491][ T28] audit: type=1400 audit(1775073567.281:335): avc: denied { bind } for pid=5193 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.220299][ T5198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.254922][ T5198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.278959][ T5200] loop0: detected capacity change from 0 to 512 [ 90.302174][ T5202] program syz.1.408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.302231][ T5200] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 90.355317][ T5200] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.407: casefold flag without casefold feature [ 90.374207][ T5200] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 90.374860][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 90.391433][ C0] EXT4-fs (loop0): initial error at time 1775073567: ext4_orphan_get:1397: inode 15 [ 90.400965][ C0] EXT4-fs (loop0): last error at time 1775073567: ext4_orphan_get:1397: inode 15 [ 90.562534][ T5200] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.407: couldn't read orphan inode 15 (err -117) [ 90.596339][ T5200] loop0: lost filesystem error report for type 5 error -117 [ 90.596928][ T5200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.633901][ T5200] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #2: block 4: comm syz.0.407: lblock 0 mapped to illegal pblock 4 (length 1) [ 91.097038][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.135889][ T5224] ================================================================== [ 91.144099][ T5224] BUG: KCSAN: data-race in alloc_pid / copy_process [ 91.150808][ T5224] [ 91.153143][ T5224] read-write to 0xffffffff86c5ffa8 of 4 bytes by task 5226 on cpu 0: [ 91.161478][ T5224] alloc_pid+0x651/0x940 [ 91.165785][ T5224] copy_process+0xf37/0x20b0 [ 91.170516][ T5224] kernel_clone+0x16b/0x5d0 [ 91.175033][ T5224] __se_sys_clone3+0x1f5/0x230 [ 91.179893][ T5224] __x64_sys_clone3+0x31/0x40 [ 91.185098][ T5224] x64_sys_call+0x580/0x3020 [ 91.189784][ T5224] do_syscall_64+0x12c/0x370 [ 91.194395][ T5224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.200482][ T5224] [ 91.202842][ T5224] read to 0xffffffff86c5ffa8 of 4 bytes by task 5224 on cpu 1: [ 91.210712][ T5224] copy_process+0x187f/0x20b0 [ 91.215764][ T5224] kernel_clone+0x16b/0x5d0 [ 91.220386][ T5224] __x64_sys_clone+0x143/0x180 [ 91.225264][ T5224] x64_sys_call+0x1222/0x3020 [ 91.230012][ T5224] do_syscall_64+0x12c/0x370 [ 91.234707][ T5224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.240713][ T5224] [ 91.243127][ T5224] value changed: 0x800000e5 -> 0x800000e6 [ 91.249022][ T5224] [ 91.251565][ T5224] Reported by Kernel Concurrency Sanitizer on: [ 91.257714][ T5224] CPU: 1 UID: 0 PID: 5224 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 91.267836][ T5224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.278179][ T5224] ================================================================== [ 91.397448][ T5241] netlink: 60 bytes leftover after parsing attributes in process `syz.1.416'. [ 91.423322][ T5241] lo speed is unknown, defaulting to 1000