last executing test programs: 3m35.342592772s ago: executing program 3 (id=3383): pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f00000013c0), &(0x7f0000001440)='./file1\x00', 0x804880, &(0x7f0000001b00)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f0000001e40)="$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") rename(&(0x7f0000003180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') preadv(r0, 0x0, 0x0, 0x7, 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000001580)='ext3\x00', &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000001680)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001c00)='./proc\x00', &(0x7f0000001c40)='proc\x00', 0x4000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./proc/thread-self/fail-nth\x00', 0x2, 0x1ca) write(r2, &(0x7f0000001cc0)='10', 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) fallocate(r1, 0x0, 0x0, 0x8ffff) 3m33.715593364s ago: executing program 3 (id=3400): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0xa, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002400)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002440)={'veth1_macvtap\x00', 0x0}) sendto$packet(r1, &(0x7f0000002480)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f00000024c0)={0x11, 0x88a8, r2}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x401, 0x0, 0x0, {{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {@in=@local, 0x4d2, 0x32}, @in=@remote, {0x7fffffffffffffff, 0x7fefffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff}, {}, {0x0, 0xd5b}, 0x0, 0x34ff, 0x2, 0x4, 0x10}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) syz_emit_ethernet(0x30, &(0x7f0000000840)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0x0, 0x40, 0x32, 0x0, @remote, @local}, {0x4d2, 0x1}}}}}, 0x0) 3m33.4547426s ago: executing program 3 (id=3411): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055000100000000000000000007000000", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}}, 0x0) 3m33.407091254s ago: executing program 32 (id=3411): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055000100000000000000000007000000", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}}, 0x0) 2m59.624755517s ago: executing program 33 (id=3708): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000010c0)='./trace\x00', &(0x7f0000001100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./trace/set_event\x00', 0x2, 0x0) write(r3, &(0x7f0000001180)='!*:*', 0x4) 2m39.892780762s ago: executing program 34 (id=3918): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000004c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000580)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000005c0), 0x4) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000600)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='h', 0x1}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/256, 0x100}], 0x1, &(0x7f0000000880)=""/39, 0x27}, 0x40010101) close_range(r0, 0xffffffffffffffff, 0x0) 2m26.941860131s ago: executing program 35 (id=4109): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200008, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="a2ae434e9c948bc00fcfa9e08e7c79913c288cb464744b570332308f22073280003f8e1f9b23bd50e1ae680c391735aacc64126d003acbab889b2d9668230bbd6f6426d755dbf10afb0f92394a7b3f4b892140c91cef45d89c633b170b34f0e22a2ef64e1f642bd51ac4249aa05c0460672a691c15415f2a910449b5a61dac7e645cf434e6473e71e9cf10dd6c041d3a828553", @ANYRESDEC=r0], 0x1, 0x392, &(0x7f0000000400)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000b, 0x12, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp6\x00') lseek(r3, 0x1, 0x1) getdents64(r3, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000300)=0x2800, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x6, 0x5}, {0x12, 0x2, 0x0, 0x40, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x14, &(0x7f0000000a00)=[{&(0x7f0000000a40)=' ', 0xffffff1f}], 0x1}, 0x0) 2m17.860320015s ago: executing program 1 (id=4184): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xf, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x24, 0x0, 0x0) 2m16.993228401s ago: executing program 1 (id=4188): mknodat$md(0xffffffffffffff9c, &(0x7f0000000140)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000180)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x6, 0x5, 0x800, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10301, 0x10000}) ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000280)={0x7, {0x1, 0x0}, 0x0, 0x6}) 2m16.855675855s ago: executing program 1 (id=4192): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000200)="$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") openat$dm_control(0xffffffffffffff9c, 0x0, 0x880, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000020c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000002100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000002200), 0x318, 0x0) recvmmsg(r1, &(0x7f0000002240), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000002280)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000022c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000002380)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r3, &(0x7f0000002480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000024c0)='X', 0x34000, 0x0, &(0x7f0000002500)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) 2m15.716532199s ago: executing program 1 (id=4197): syz_mount_image$vfat(&(0x7f00000013c0), &(0x7f0000001440)='./file1\x00', 0x804880, &(0x7f0000001b00)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f0000001e40)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001c00)='./proc\x00', &(0x7f0000001c40)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./proc/thread-self/fail-nth\x00', 0x2, 0x1ca) write(r1, &(0x7f0000001cc0)='10', 0x2) fallocate(r0, 0x0, 0x0, 0x8ffff) 2m15.326429827s ago: executing program 1 (id=4203): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='fd\x00') fchdir(r0) exit(0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000680)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xb0) 2m14.461230354s ago: executing program 1 (id=4213): r0 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000700)=@usbdevfs_driver={0xffffffff, 0x5, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000800)=0x1) 2m14.437654936s ago: executing program 36 (id=4213): r0 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000700)=@usbdevfs_driver={0xffffffff, 0x5, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000800)=0x1) 2m12.829434446s ago: executing program 6 (id=4238): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) write(r0, &(0x7f0000000280)='10', 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) 2m12.217997847s ago: executing program 6 (id=4251): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0x10000007) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000640)={0x200000, 0x200000}) readv(r0, &(0x7f0000002b00)=[{0x0}], 0x1) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002c80)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 2m12.173671811s ago: executing program 6 (id=4253): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000022c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000002380)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r0, &(0x7f0000002480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000024c0)='X', 0x34000, 0x0, &(0x7f0000002500)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 2m12.000763119s ago: executing program 6 (id=4257): syz_mount_image$vfat(&(0x7f00000013c0), &(0x7f0000001440)='./file1\x00', 0x804880, &(0x7f0000001b00)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f0000001e40)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001c00)='./proc\x00', &(0x7f0000001c40)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./proc/thread-self/fail-nth\x00', 0x2, 0x1ca) write(r1, &(0x7f0000001cc0)='10', 0x2) fallocate(r0, 0x0, 0x0, 0x8ffff) 2m11.872682791s ago: executing program 6 (id=4258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f00000006c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r3, &(0x7f0000000300)="08021100000000021100cb5bdfff08", 0xf) 2m11.540057644s ago: executing program 6 (id=4265): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) write(r1, &(0x7f0000000140)='7', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000180)='proc\x00', &(0x7f00000001c0)='\\', 0x1) 2m11.450074264s ago: executing program 37 (id=4265): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x10b) write(r1, &(0x7f0000000140)='7', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000180)='proc\x00', &(0x7f00000001c0)='\\', 0x1) 2m7.629743194s ago: executing program 3 (id=4268): syz_mount_image$vfat(&(0x7f00000013c0), &(0x7f0000001440)='./file1\x00', 0x804880, &(0x7f0000001b00)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f0000001e40)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001c00)='./proc\x00', &(0x7f0000001c40)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./proc/thread-self/fail-nth\x00', 0x2, 0x1ca) write(r1, &(0x7f0000001cc0)='10', 0x2) fallocate(r0, 0x0, 0x0, 0x8ffff) 2m7.123988634s ago: executing program 3 (id=4311): r0 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000400)={'/sys/block/md', @num=0x0, '/md/', @array='array_state\x00'}, 0x1, 0x0) write$md_sysfs(r0, 0x0, 0x0) 2m4.618690954s ago: executing program 3 (id=4356): socket$nl_netfilter(0x10, 0x3, 0xc) fsmount(0xffffffffffffffff, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x400000000000041, 0x0) semop(0x0, &(0x7f0000000600)=[{0x2, 0x9, 0x800}], 0x1f4) 2m4.567935949s ago: executing program 38 (id=4356): socket$nl_netfilter(0x10, 0x3, 0xc) fsmount(0xffffffffffffffff, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x400000000000041, 0x0) semop(0x0, &(0x7f0000000600)=[{0x2, 0x9, 0x800}], 0x1f4) 1m48.040315814s ago: executing program 8 (id=4616): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000006c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000800), 0x4000087, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x14, 0x10, &(0x7f0000000980)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @exit, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000a80)=""/208, 0xd0, 0x8d35) 1m45.511055046s ago: executing program 8 (id=4629): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000280)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000300)={0x0, 0x0, 0x5000000d, 0x244, 0x9, '\x00=\x00'}) r1 = syz_open_pts(r0, 0x400) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) 1m44.377453859s ago: executing program 8 (id=4641): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x3, 0x87) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0xa, 0x80805, 0x0) socket$packet(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x86dd, 0x12, 0x0, &(0x7f0000000600)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m42.783727667s ago: executing program 8 (id=4652): syz_mount_image$vfat(&(0x7f00000013c0), &(0x7f0000001440)='./file1\x00', 0x804880, &(0x7f0000001b00)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f0000001e40)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001c00)='./proc\x00', &(0x7f0000001c40)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./proc/thread-self/fail-nth\x00', 0x2, 0x1ca) write(r1, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) 1m42.25705211s ago: executing program 8 (id=4664): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000004c0)='./bus\x00', 0x0, &(0x7f0000000540), 0x1, 0x498, &(0x7f0000000580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events.local\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r0) write$binfmt_script(r1, &(0x7f0000000b00)={'#! ', './file1'}, 0xb) 1m41.285501136s ago: executing program 8 (id=4667): unshare(0x2040400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a"], &(0x7f0000001200)='GPL\x00'}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001280)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000012c0)=r0) 1m41.285406687s ago: executing program 39 (id=4667): unshare(0x2040400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a"], &(0x7f0000001200)='GPL\x00'}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001280)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000012c0)=r0) 49.835899989s ago: executing program 9 (id=5290): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x4, r0}, 0x38) 49.797318462s ago: executing program 9 (id=5292): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x70}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @val={@val={0x88a8, 0x7, 0x0, 0x2}, {0x8100, 0x4, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2, @multicast1}, {0x0, 0x6558, 0x3a, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86, "29feadb8d2098ec34cab7cda970000000000008262cef7aa2546f89a45d14c54590e"}}}}}}}, 0x68) 49.72112029s ago: executing program 9 (id=5295): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) socket(0x2, 0x80805, 0x0) socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x3, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 49.72091326s ago: executing program 9 (id=5296): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2804800, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES32], 0x3, 0x1213, &(0x7f00000003c0)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") openat(0xffffffffffffff9c, &(0x7f0000002740)='./file1\x00', 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002780)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000004a80)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000004ac0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000004b00), 0x0, 0x0) read$msr(r1, &(0x7f0000004b40)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f000001db40)={0x18, {"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", 0x1000}}, 0x1006) 49.253588846s ago: executing program 9 (id=5299): bind$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x1}, 0x2a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000800), 0x1003, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880), 0x0, 0x2, r0}, 0x38) 48.679957933s ago: executing program 9 (id=5306): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000040)) 48.666801915s ago: executing program 40 (id=5306): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000040)) 5.579493984s ago: executing program 7 (id=5742): clock_adjtime(0x0, &(0x7f00000003c0)={0x66b7, 0x6, 0xfffffffffffeffff, 0x7, 0x4000000000000000, 0xfffffffffffffffd, 0x20000000000077, 0xffdffffffffffffb, 0x0, 0x8000000, 0x9, 0x248e, 0x4, 0x1, 0x20, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x80000000003, 0x5, 0x7ff, 0xf439, 0x5c98c07e}) 5.41827493s ago: executing program 7 (id=5744): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x86, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x4ff5, r2}, 0x38) 4.763370985s ago: executing program 7 (id=5758): prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000340), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000, 0x3}}, 0xe8) sendmmsg(r2, &(0x7f00000005c0), 0x800001d, 0x0) 4.479388214s ago: executing program 0 (id=5705): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x161) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100', 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) mlock(&(0x7f000009f000/0xc00000)=nil, 0xc00000) 4.183263163s ago: executing program 0 (id=5762): mount(0x0, &(0x7f0000000180)='.\x00', &(0x7f00000001c0)='devpts\x00', 0x22008d0, 0x0) 3.974185584s ago: executing program 0 (id=5763): r0 = fsopen(&(0x7f0000005280)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) symlinkat(&(0x7f00000052c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000005300)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000005380)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000053c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000054c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x124) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.910388641s ago: executing program 0 (id=5766): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e28, 0x3, @loopback, 0x7}, 0x1c) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=',', 0xffdf}], 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_BROADCAST={0xa, 0x2, @link_local}, @IFLA_CARRIER={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040090}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000940)=@can={0x1d, r2}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000a40)="b7db65e94320e950c5b17daf4384f93fded45e1a8d10ff1f27a2522fc3e2be91edcaf6115d25b75acef2e7ecfed25097f6344a36427f57112fb5066cbbe6d9028284911fc568db4af08aa84f5f317f075e5c25d6ba1d9ac1d363fb759de962b786160b22cd1f6c4afb56be9f8e76483f8fde04a2c4ee55b1591f14bd16fad78a37c0e4bbccae3411b16fd8d4311d599b2d7bf1df0e68bfd27623e695857e646acf710945658d8abf49ffe5a0a83f7360519d1eaf687e3bd202e6a9b1400f53f6e486ac371c44320ceac43e0b264065b1", 0xd0}, {&(0x7f0000000b40)}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000b80)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f0000000bc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c00)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c40)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x80}}, 0x20044080) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0x58, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f80)={'bond_slave_1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000001080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="3c00000010000500000200"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a5f74756e00000000000000000008000a00", @ANYRES32=r13], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001340)={&(0x7f0000001180)={0x19c, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x54}, 0x4000080) 3.897858011s ago: executing program 5 (id=5768): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000a00)='100', 0x3) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000b80)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000bc0), 0x2000011a) 3.728529319s ago: executing program 0 (id=5770): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x80800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000540)=0x19) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) 3.637319948s ago: executing program 0 (id=5772): syz_usb_connect$uac3(0x0, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0xa, 0xf0, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x24, 0x30, 0xed}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xf, 0x8000}, [@selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x1, 0x9, 0x10, {0xa, 0x25, 0x25, 0x200005, 0x50, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe2, 0x1, {0xa, 0x25, 0x25, 0x2, 0x0, 0xffff}}}}}}}}]}}, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x800010, &(0x7f0000000840), 0x1, 0x4b9, &(0x7f0000000880)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040080}, 0x4020000) prlimit64(0x0, 0xe, &(0x7f0000000e00)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e40)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000e80)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000ec0)=0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000f00)=@generic={0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000f80)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001040), 0x4000087, 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0xe, 0x4, &(0x7f0000001640)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000001780)='GPL\x00', 0x4, 0xfd90, &(0x7f00000017c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000018c0), 0x366, 0x10, &(0x7f0000001900), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000019c0)={r7, &(0x7f0000001a00), &(0x7f0000001a40)=@udp=r6}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000001a80)=""/62, 0x3e, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) keyctl$link(0x8, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) 3.637082257s ago: executing program 5 (id=5773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', @multicast}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={&(0x7f00000001c0)=@xdp={0x2c, 0x2, 0x0, 0x42}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280)="27030200dc0f14000e0007000024c1", 0xf}], 0x1}, 0x4005) 3.351080726s ago: executing program 5 (id=5779): syz_mount_image$ext4(&(0x7f0000000b40)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x280440e, &(0x7f0000000bc0)={[{@data_err_ignore}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000000c80)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x208e24b) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x7, 0x1, 0x10, 0x8}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) 2.449305916s ago: executing program 4 (id=5785): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000b00)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000b40)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000b80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x40, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000bc0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) 2.236343877s ago: executing program 4 (id=5786): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x400}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002280)=0xac, 0x4) write$binfmt_script(r0, &(0x7f00000022c0), 0x28) 2.131368787s ago: executing program 5 (id=5788): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000540), 0x0, 0x2404c081, &(0x7f0000000580)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) 2.052164575s ago: executing program 4 (id=5789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', @multicast}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={&(0x7f00000001c0)=@xdp={0x2c, 0x2, 0x0, 0x42}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280)="27030200dc0f14000e0007000024c1", 0xf}], 0x1}, 0x4005) 1.965366794s ago: executing program 2 (id=5790): socket(0x2, 0xa, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='100', 0x3) io_uring_setup(0x2bd2, &(0x7f0000000240)={0x0, 0x661f, 0x0, 0x1, 0x194}) epoll_create(0x7) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x20000840) 1.626511878s ago: executing program 7 (id=5791): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8) mkdir(&(0x7f0000000440)='./control\x00', 0x111) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0x2b) inotify_add_watch(r0, &(0x7f0000000480)='./control\x00', 0x40000c17) rt_sigprocmask(0x0, &(0x7f00000004c0)={[0xfffffffffffffffd]}, 0x0, 0x8) rmdir(&(0x7f0000000500)='./control\x00') 1.272603323s ago: executing program 4 (id=5792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="001c86dd0700700000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 1.185484901s ago: executing program 2 (id=5793): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000074000000060a01040000000000000000020000000900010073797a30000000000900020073797a300000000048000480440001800a0001006d61746368000000340002800d00010064657667726f7570000000000800024000000000180003000e000000000000000000000000000000000000001400000011000100"], 0xfc}}, 0x0) 1.164475014s ago: executing program 2 (id=5794): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000180)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_mr_cache\x00') pread64(r2, &(0x7f0000000240)=""/253, 0xfd, 0xf000) 1.086247212s ago: executing program 2 (id=5795): mkdir(&(0x7f0000001040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001080)='./config\x00', &(0x7f00000010c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write$P9_RLERROR(r0, &(0x7f0000000040)={0x12, 0x7, 0x1, {0x9, 'configfs\x00'}}, 0x12) 1.052679725s ago: executing program 5 (id=5796): timer_create(0x0, 0x0, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) getpid() syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000000c0)={0x40, 0xa456, 0x3, 0x4, 0x6, "5de3b3d5c0d64bca54849f8ad51ca2d8100071", 0x0, 0x10000}) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x0, 0x4, 0x13, 0x80000001, 0x2e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, 0x20, 0x40, 0xfffffe01, 0x1}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(0xffffffffffffffff, 0x0, 0x0) 953.493255ms ago: executing program 2 (id=5797): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000440)=0x1d9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000004c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000500)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="02017d"], 0xdd12}], 0x1}, 0x20000400) 929.824457ms ago: executing program 7 (id=5798): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x580f, 0x0, 0xe6, 0x9}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x6c0000, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000400)={0x1}) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000440)='./bus\x00', 0x2000812, &(0x7f0000000800)=ANY=[@ANYBLOB='time_offset=0x00000000000004f8,nocase,nodots,flush,allow_utime=00000000000000000077777,dots,dots,dots,quiet,dots,allow_utime=00000000000000000000011,check=strict,errors=remount-ro,fmask=00000000000000000120000,usefree,tz=UTC,uid=', @ANYRES64=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',func=FILE_CHECK,dont_measure,uid=', @ANYBLOB="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", @ANYBLOB=',euid<', @ANYRESDEC=0x0, @ANYBLOB="2c02"], 0x1, 0x23d, &(0x7f0000001980)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001bc0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001c40)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000001c80)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x0) bind$inet6(r4, &(0x7f00000004c0)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000500)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x6, &(0x7f0000001d40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000fe27008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f00000006c0)='GPL\x00', 0x8b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(r0, 0x0, 0x0) getresuid(&(0x7f0000000340), &(0x7f0000000780), &(0x7f00000007c0)) 920.229628ms ago: executing program 2 (id=5799): syz_mount_image$ext4(&(0x7f0000000b40)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x280440e, &(0x7f0000000bc0)={[{@data_err_ignore}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000000c80)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x208e24b) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x7, 0x1, 0x10, 0x8}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) 811.784119ms ago: executing program 4 (id=5800): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000f00)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x6) 613.348579ms ago: executing program 4 (id=5801): prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000340), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000440)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000, 0x3}}, 0xe8) sendmmsg(r2, &(0x7f00000005c0), 0x800001d, 0x0) 69.702993ms ago: executing program 5 (id=5802): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', @multicast}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, 0x0, 0x4005) 0s ago: executing program 7 (id=5803): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_emit_ethernet(0x6a, &(0x7f00000006c0)={@link_local, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x807]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "e9ad"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 171][T25231] __dump_stack+0x1d/0x30 [ 727.361239][T25231] dump_stack_lvl+0x95/0xd0 [ 727.361263][T25231] dump_stack+0x15/0x1b [ 727.361289][T25231] should_fail_ex+0x259/0x270 [ 727.361381][T25231] ? keyctl_pkey_e_d_s+0x136/0x260 [ 727.361422][T25231] should_failslab+0x8c/0xb0 [ 727.361455][T25231] __kmalloc_noprof+0xb6/0x4b0 [ 727.361534][T25231] ? keyctl_pkey_e_d_s+0x136/0x260 [ 727.361567][T25231] ? _copy_from_user+0x89/0xb0 [ 727.361643][T25231] keyctl_pkey_e_d_s+0x136/0x260 [ 727.361689][T25231] __se_sys_keyctl+0x5fb/0xb70 [ 727.361781][T25231] ? __se_sys_futex+0x2f6/0x370 [ 727.361893][T25231] ? xfd_validate_state+0x45/0xf0 [ 727.361932][T25231] ? restore_fpregs_from_fpstate+0x61/0x110 [ 727.361981][T25231] __x64_sys_keyctl+0x67/0x80 [ 727.362070][T25231] x64_sys_call+0x1fe0/0x2550 [ 727.362098][T25231] do_syscall_64+0x112/0x360 [ 727.362123][T25231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.362194][T25231] RIP: 0033:0x7f6cdf46fb19 [ 727.362213][T25231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.362237][T25231] RSP: 002b:00007f6cddebf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 727.362326][T25231] RAX: ffffffffffffffda RBX: 00007f6cdf6f5fa0 RCX: 00007f6cdf46fb19 [ 727.362346][T25231] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000019 [ 727.362417][T25231] RBP: 00007f6cdf507b70 R08: 0000000000000000 R09: 0000000000000000 [ 727.362432][T25231] R10: 0000200000008540 R11: 0000000000000246 R12: 0000000000000000 [ 727.362445][T25231] R13: 00007f6cdf6f6038 R14: 00007f6cdf6f5fa0 R15: 00007ffdf9c30368 [ 727.362466][T25231] [ 727.714463][ T30] audit: type=1400 audit(1794140690.422:9967): avc: denied { name_bind } for pid=25246 comm="syz.2.4794" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 727.767789][T25249] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 727.813232][T25253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4797'. [ 727.985083][T25270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4804'. [ 728.094742][T25280] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4807'. [ 728.151246][ T30] audit: type=1400 audit(1794140690.862:9968): avc: denied { create } for pid=25282 comm="syz.2.4808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 728.270348][ T30] audit: type=1400 audit(1794140690.982:9969): avc: denied { create } for pid=25297 comm="syz.0.4814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 728.295868][T25300] loop7: detected capacity change from 0 to 512 [ 728.296315][T25300] EXT4-fs: inline encryption not supported [ 728.327227][T25300] EXT4-fs (loop7): 1 truncate cleaned up [ 728.327759][T25300] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.363564][T25307] loop5: detected capacity change from 0 to 4096 [ 728.364207][T25307] EXT4-fs: test_dummy_encryption option not supported [ 728.412169][T25321] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4820'. [ 728.604306][T25323] tipc: Enabled bearer , priority 0 [ 728.624310][T25322] tipc: Disabling bearer [ 729.465095][T19581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.788877][T25357] syz_tun: entered allmulticast mode [ 729.842277][T25359] loop2: detected capacity change from 0 to 512 [ 729.862230][T25362] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4831'. [ 729.912485][T25369] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4834'. [ 729.953576][T25373] ip_tables: iptables: counters copy to user failed while replacing table [ 729.975119][T25367] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.013608][T25379] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4837'. [ 730.082798][T25391] syz_tun: entered allmulticast mode [ 730.112535][ T30] audit: type=1400 audit(1794140692.822:9970): avc: denied { bind } for pid=25393 comm="syz.7.4841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 730.132725][ T30] audit: type=1400 audit(1794140692.822:9971): avc: denied { listen } for pid=25393 comm="syz.7.4841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 730.153332][ T30] audit: type=1400 audit(1794140692.862:9972): avc: denied { accept } for pid=25393 comm="syz.7.4841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 730.187188][T25399] random: crng reseeded on system resumption [ 730.198471][T25397] loop9: detected capacity change from 0 to 2048 [ 730.243218][T25397] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.261763][T25397] EXT4-fs error (device loop9): ext4_find_extent:939: inode #2: comm syz.9.4842: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 730.262325][T25397] EXT4-fs (loop9): Remounting filesystem read-only [ 730.306818][T21423] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.488994][T25428] ip_tables: iptables: counters copy to user failed while replacing table [ 730.528921][T25428] bond0: (slave bond_slave_1): Releasing backup interface [ 730.543964][T25430] bridge0: port 3(macvlan2) entered blocking state [ 730.544022][T25430] bridge0: port 3(macvlan2) entered disabled state [ 730.544142][T25430] macvlan2: entered allmulticast mode [ 730.544163][T25430] ip6gretap0: entered allmulticast mode [ 730.544907][T25430] macvlan2: entered promiscuous mode [ 730.545193][T25430] bridge0: port 3(macvlan2) entered blocking state [ 730.545226][T25430] bridge0: port 3(macvlan2) entered forwarding state [ 731.195040][T25508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.197544][T25508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.352426][T25530] loop2: detected capacity change from 0 to 512 [ 731.403905][T25530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.404066][T25530] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 731.408409][T25538] __nla_validate_parse: 9 callbacks suppressed [ 731.408459][T25538] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4866'. [ 731.458763][T24274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.612094][T25551] netlink: 'syz.9.4869': attribute type 21 has an invalid length. [ 731.612164][T25551] netlink: 164 bytes leftover after parsing attributes in process `syz.9.4869'. [ 731.654043][T25557] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 731.813475][T25561] loop5: detected capacity change from 0 to 2048 [ 731.874090][T25561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.086730][T22630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.196192][T25574] FAULT_INJECTION: forcing a failure. [ 732.196192][T25574] name failslab, interval 1, probability 0, space 0, times 0 [ 732.196219][T25574] CPU: 1 UID: 0 PID: 25574 Comm: syz.0.4876 Not tainted syzkaller #0 PREEMPT(lazy) [ 732.196333][T25574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 732.196419][T25574] Call Trace: [ 732.196485][T25574] [ 732.196494][T25574] __dump_stack+0x1d/0x30 [ 732.196569][T25574] dump_stack_lvl+0x95/0xd0 [ 732.196604][T25574] dump_stack+0x15/0x1b [ 732.196634][T25574] should_fail_ex+0x259/0x270 [ 732.196674][T25574] ? sidtab_sid2str_get+0xa0/0x130 [ 732.196698][T25574] should_failslab+0x8c/0xb0 [ 732.196816][T25574] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 732.196860][T25574] ? vsnprintf+0x857/0x8c0 [ 732.196947][T25574] ? sidtab_sid2str_get+0xa0/0x130 [ 732.196973][T25574] kmemdup_noprof+0x2b/0x70 [ 732.196996][T25574] sidtab_sid2str_get+0xa0/0x130 [ 732.197022][T25574] security_sid_to_context_core+0x179/0x2d0 [ 732.197107][T25574] security_sid_to_context+0x27/0x40 [ 732.197130][T25574] avc_audit_post_callback+0x9d/0x520 [ 732.197200][T25574] ? audit_log_lsm_data+0xb89/0xbf0 [ 732.197224][T25574] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 732.197261][T25574] common_lsm_audit+0x1ba/0x230 [ 732.197292][T25574] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 732.197330][T25574] ? avc_denied+0xe4/0x100 [ 732.197362][T25574] slow_avc_audit+0x14c/0x190 [ 732.197452][T25574] avc_has_perm+0x144/0x190 [ 732.197555][T25574] selinux_socket_setsockopt+0x1b7/0x220 [ 732.197598][T25574] security_socket_setsockopt+0x42/0x80 [ 732.197655][T25574] __sys_setsockopt+0x98/0x200 [ 732.197684][T25574] __x64_sys_setsockopt+0x64/0x80 [ 732.197706][T25574] x64_sys_call+0x248f/0x2550 [ 732.197782][T25574] do_syscall_64+0x112/0x360 [ 732.197811][T25574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.197839][T25574] RIP: 0033:0x7fe323a5fb19 [ 732.197855][T25574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.197912][T25574] RSP: 002b:00007fe3224af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 732.197940][T25574] RAX: ffffffffffffffda RBX: 00007fe323ce5fa0 RCX: 00007fe323a5fb19 [ 732.198010][T25574] RDX: 0000000000000001 RSI: 000000000000010e RDI: 0000000000000004 [ 732.198023][T25574] RBP: 00007fe323af7b70 R08: 0000000000000004 R09: 0000000000000000 [ 732.198037][T25574] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000000 [ 732.198105][T25574] R13: 00007fe323ce6038 R14: 00007fe323ce5fa0 R15: 00007fff76e00a38 [ 732.198132][T25574] [ 732.663960][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 732.663976][ T30] audit: type=1400 audit(1794140694.902:9976): avc: denied { setopt } for pid=25573 comm="syz.0.4876" ssid=137 tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 732.877623][T25588] sctp: [Deprecated]: syz.9.4881 (pid 25588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 732.877623][T25588] Use struct sctp_sack_info instead [ 732.916496][T25590] loop9: detected capacity change from 0 to 256 [ 732.962778][T25590] FAT-fs (loop9): codepage cp855 not found [ 733.142757][T25580] ip_tables: iptables: counters copy to user failed while replacing table [ 733.674716][T25580] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4878'. [ 734.105278][T25619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.105476][T25619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.266791][T25627] FAULT_INJECTION: forcing a failure. [ 734.266791][T25627] name failslab, interval 1, probability 0, space 0, times 0 [ 734.266829][T25627] CPU: 0 UID: 0 PID: 25627 Comm: syz.5.4892 Not tainted syzkaller #0 PREEMPT(lazy) [ 734.266857][T25627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 734.266871][T25627] Call Trace: [ 734.266879][T25627] [ 734.266888][T25627] __dump_stack+0x1d/0x30 [ 734.266942][T25627] dump_stack_lvl+0x95/0xd0 [ 734.266975][T25627] dump_stack+0x15/0x1b [ 734.267001][T25627] should_fail_ex+0x259/0x270 [ 734.267057][T25627] ? prepare_creds+0x38/0x550 [ 734.267178][T25627] should_failslab+0x8c/0xb0 [ 734.267224][T25627] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 734.267348][T25627] ? prepare_creds+0x38/0x550 [ 734.267437][T25627] prepare_creds+0x38/0x550 [ 734.267477][T25627] lookup_user_key+0x137/0xf10 [ 734.267516][T25627] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 734.267564][T25627] __se_sys_add_key+0x272/0x360 [ 734.267600][T25627] __x64_sys_add_key+0x67/0x80 [ 734.267628][T25627] x64_sys_call+0x1fa9/0x2550 [ 734.267703][T25627] do_syscall_64+0x112/0x360 [ 734.267735][T25627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.267791][T25627] RIP: 0033:0x7f31c9d4fb19 [ 734.267810][T25627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.267889][T25627] RSP: 002b:00007f31c87a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 734.267931][T25627] RAX: ffffffffffffffda RBX: 00007f31c9fd5fa0 RCX: 00007f31c9d4fb19 [ 734.267955][T25627] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 734.267976][T25627] RBP: 00007f31c9de7b70 R08: ffffffffffffffff R09: 0000000000000000 [ 734.268039][T25627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.268094][T25627] R13: 00007f31c9fd6038 R14: 00007f31c9fd5fa0 R15: 00007ffe1d77fcd8 [ 734.268116][T25627] [ 734.471740][T25634] ip_tables: iptables: counters copy to user failed while replacing table [ 734.496293][ T30] audit: type=1400 audit(1794140697.202:9977): avc: denied { create } for pid=25638 comm="syz.0.4897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 734.522405][T25634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4895'. [ 734.636394][T25650] loop7: detected capacity change from 0 to 164 [ 734.726279][ T30] audit: type=1400 audit(1794140697.362:9978): avc: denied { bind } for pid=25641 comm="syz.0.4898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 734.726421][ T30] audit: type=1400 audit(1794140697.362:9979): avc: denied { setopt } for pid=25641 comm="syz.0.4898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 735.124805][T25669] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 735.357084][T25675] ip_tables: iptables: counters copy to user failed while replacing table [ 735.361907][T25677] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4908'. [ 735.362000][T25677] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4908'. [ 735.397846][T25675] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4909'. [ 735.494940][ T3944] asus 0005:0B05:8502.0184: hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 735.565881][T25720] loop2: detected capacity change from 0 to 512 [ 735.574464][T25720] EXT4-fs (loop2): unable to read superblock [ 735.585703][T25709] fido_id[25709]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 735.632791][T25732] loop5: detected capacity change from 0 to 512 [ 735.647258][T25693] netlink: 'syz.0.4913': attribute type 17 has an invalid length. [ 735.647341][T25693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4913'. [ 735.672707][T25732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 735.672792][T25732] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 735.713192][T25743] loop9: detected capacity change from 0 to 512 [ 735.713763][ T30] audit: type=1400 audit(1794140698.422:9980): avc: denied { write } for pid=25731 comm="syz.5.4923" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 735.718466][T25741] ip_tables: iptables: counters copy to user failed while replacing table [ 735.758961][T25741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 735.785751][T25741] bond0: (slave bond_slave_1): Releasing backup interface [ 735.797508][T22630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.813314][T25759] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4927'. [ 736.441022][T25839] ip_tables: iptables: counters copy to user failed while replacing table [ 736.498704][T25842] __nla_validate_parse: 1 callbacks suppressed [ 736.505613][T25842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4942'. [ 736.686196][T25859] loop2: detected capacity change from 0 to 2048 [ 736.698052][T25861] netlink: 'syz.7.4950': attribute type 39 has an invalid length. [ 736.715097][T25859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.740589][T24274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.920625][T25891] loop7: detected capacity change from 0 to 164 [ 737.046480][T25905] loop9: detected capacity change from 0 to 2048 [ 737.144680][T25909] loop2: detected capacity change from 0 to 512 [ 738.291184][T25905] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 738.902858][T21423] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.939022][T25941] loop5: detected capacity change from 0 to 164 [ 739.070678][T13498] hid-generic 0000:0000:0000.0185: unknown main item tag 0x0 [ 739.074783][T13498] hid-generic 0000:0000:0000.0185: hidraw0: HID v0.00 Device [syz1] on syz0 [ 739.119282][T25965] fido_id[25965]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 739.225822][T25973] loop2: detected capacity change from 0 to 2048 [ 739.279573][T25973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.591917][T25993] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4986'. [ 739.594661][T25993] bridge_slave_1: left promiscuous mode [ 739.595288][T25993] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.600586][T25993] bridge_slave_0: left allmulticast mode [ 739.600611][T25993] bridge_slave_0: left promiscuous mode [ 739.601380][T25993] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.809447][T24274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.833828][T26006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.833854][T26006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.835680][T26006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.835703][T26006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.921033][T26020] IPv6: NLM_F_REPLACE set, but no existing node found! [ 739.922749][T26011] bridge0: port 3(macvlan2) entered disabled state [ 739.922893][T26011] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.998408][T26011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.008739][T26011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.060729][T26011] ip6gretap0: left allmulticast mode [ 740.069307][T26035] usb usb5: usbfs: process 26035 (syz.0.5000) did not claim interface 0 before use [ 740.121468][ T170] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.121615][ T170] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.121653][ T170] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.121732][ T170] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.168501][T26042] loop9: detected capacity change from 0 to 164 [ 740.330062][T26071] loop5: detected capacity change from 0 to 128 [ 740.340667][T26071] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 740.361839][T26071] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 740.387540][ T30] audit: type=1400 audit(1794140703.092:9981): avc: denied { write } for pid=26069 comm="syz.5.5012" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 740.482341][T22630] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 740.486195][T26082] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5017'. [ 740.486697][T26082] macvlan2: left allmulticast mode [ 740.486722][T26082] macvlan2: left promiscuous mode [ 740.486926][T26082] bridge0: port 3(macvlan2) entered disabled state [ 740.530241][T26082] bridge_slave_1: left promiscuous mode [ 740.530669][T26082] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.535886][T26082] bridge_slave_0: left allmulticast mode [ 740.538133][T26082] bridge_slave_0: left promiscuous mode [ 740.546348][T26082] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.655235][T26093] loop9: detected capacity change from 0 to 164 [ 741.536020][T26107] loop9: detected capacity change from 0 to 4096 [ 741.857150][ T30] audit: type=1400 audit(1794140704.562:9982): avc: denied { read } for pid=26114 comm="syz.9.5024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 742.312730][T26137] tipc: Enabled bearer , priority 0 [ 742.313115][T26137] syzkaller0: entered promiscuous mode [ 742.313141][T26137] syzkaller0: entered allmulticast mode [ 742.346390][T26137] tipc: Resetting bearer [ 742.367175][T26134] tipc: Resetting bearer [ 742.376319][T26134] tipc: Disabling bearer [ 742.568199][T26153] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 742.607111][T26172] loop7: detected capacity change from 0 to 512 [ 742.651915][ T1047] hid-generic 0000:0000:0000.0186: unknown main item tag 0x0 [ 742.699469][ T1047] hid-generic 0000:0000:0000.0186: hidraw0: HID v0.00 Device [syz1] on syz0 [ 742.850743][T26172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.850890][T26172] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.908700][ T30] audit: type=1400 audit(1794140705.612:9983): avc: denied { write } for pid=26171 comm="syz.7.5042" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 743.695566][T26179] fido_id[26179]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 743.716994][T26195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5046'. [ 743.717044][T26195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5046'. [ 743.741288][ T30] audit: type=1400 audit(1794140706.452:9984): avc: denied { create } for pid=26183 comm="syz.0.5046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 743.763851][ T30] audit: type=1400 audit(1794140706.452:9985): avc: denied { write } for pid=26183 comm="syz.0.5046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 743.785969][T26195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5046'. [ 743.894833][T19581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.065431][T26238] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5059'. [ 744.065475][T26238] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5059'. [ 744.092872][T26242] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5060'. [ 744.092912][T26242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5060'. [ 744.135452][T26248] syzkaller0: entered promiscuous mode [ 744.135489][T26248] syzkaller0: entered allmulticast mode [ 744.138206][ T30] audit: type=1400 audit(1794140706.842:9986): avc: denied { execute } for pid=26245 comm="syz.0.5061" path=2F6D656D66643A59FFFF202864656C6574656429 dev="hugetlbfs" ino=85167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 744.196224][T26252] loop2: detected capacity change from 0 to 164 [ 744.710888][T26272] loop5: detected capacity change from 0 to 2048 [ 744.755452][T26272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.905230][T22630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.611264][T26296] team0: Device xfrm0 is of different type [ 745.812107][ T30] audit: type=1400 audit(1794140708.522:9987): avc: denied { write } for pid=26301 comm="syz.5.5076" path="socket:[86243]" dev="sockfs" ino=86243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 746.109418][ T30] audit: type=1400 audit(1794140708.802:9988): avc: denied { mount } for pid=26303 comm="syz.7.5077" name="/" dev="ramfs" ino=85237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 746.290588][T26307] loop9: detected capacity change from 0 to 128 [ 746.317015][T26307] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 746.317425][T26307] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 746.323994][ T30] audit: type=1400 audit(1794140709.032:9989): avc: denied { write } for pid=26299 comm="syz.9.5075" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 746.381773][ T30] audit: type=1400 audit(1794140709.092:9990): avc: denied { lock } for pid=26299 comm="syz.9.5075" path="socket:[86226]" dev="sockfs" ino=86226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 746.776760][ T30] audit: type=1400 audit(1794140709.482:9991): avc: denied { map } for pid=26324 comm="syz.2.5082" path="socket:[85289]" dev="sockfs" ino=85289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 746.963025][T26317] tipc: Started in network mode [ 746.963044][T26317] tipc: Node identity 4, cluster identity 4711 [ 746.963061][T26317] tipc: Node number set to 4 [ 747.801511][T21423] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 748.544589][ T30] audit: type=1400 audit(1794140711.252:9992): avc: denied { read write } for pid=26359 comm="syz.0.5093" name="control" dev="configfs" ino=86282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 748.544924][ T30] audit: type=1400 audit(1794140711.252:9993): avc: denied { open } for pid=26359 comm="syz.0.5093" path="/444/config/target/core/rd_mcp_0/dev0/control" dev="configfs" ino=86282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 748.641111][ T30] audit: type=1400 audit(1794140711.352:9994): avc: denied { connect } for pid=26365 comm="syz.2.5096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 748.641144][ T30] audit: type=1400 audit(1794140711.352:9995): avc: denied { read } for pid=26365 comm="syz.2.5096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 748.724888][T26370] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 748.763225][T26364] Illegal XDP return value 4294967274 on prog (id 327) dev N/A, expect packet loss! [ 749.309436][ T30] audit: type=1400 audit(1794140711.932:9996): avc: denied { append } for pid=26397 comm="syz.2.5108" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 751.269316][ T30] audit: type=1400 audit(1794140713.852:9997): avc: denied { bind } for pid=26531 comm="syz.7.5124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 751.269866][ T30] audit: type=1400 audit(1794140713.872:9998): avc: denied { create } for pid=26536 comm="syz.5.5126" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 754.500628][T26602] loop5: detected capacity change from 0 to 2048 [ 754.885284][T26602] loop5: p1 < > p4 [ 754.886233][T26602] loop5: p4 size 722688 extends beyond EOD, truncated [ 755.180529][T26618] loop2: detected capacity change from 0 to 512 [ 755.221883][T26618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 755.328246][T24274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.393621][T26664] loop2: detected capacity change from 0 to 256 [ 756.411494][T26664] FAT-fs (loop2): data area starts beyond volume (274 > 64) [ 756.411528][T26664] FAT-fs (loop2): Can't find a valid FAT filesystem [ 756.685865][T26673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5163'. [ 756.823696][ T30] audit: type=1400 audit(1794140719.522:9999): avc: denied { accept } for pid=26670 comm="syz.2.5162" path="socket:[86654]" dev="sockfs" ino=86654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 756.910981][T26689] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5168'. [ 756.911071][T26689] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5168'. [ 757.515625][T26707] loop9: detected capacity change from 0 to 512 [ 757.516638][T26707] ext3: Unknown parameter 'euid' [ 759.506232][T26741] loop9: detected capacity change from 0 to 256 [ 759.520557][T26741] FAT-fs (loop9): data area starts beyond volume (274 > 64) [ 759.520595][T26741] FAT-fs (loop9): Can't find a valid FAT filesystem [ 761.299299][T26766] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5190'. [ 761.805859][T26779] loop2: detected capacity change from 0 to 512 [ 761.823966][T26779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 761.824095][T26779] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 761.861176][T26785] xt_hashlimit: size too large, truncated to 1048576 [ 761.869544][ T30] audit: type=1400 audit(1794140724.532:10000): avc: denied { write } for pid=26778 comm="syz.2.5194" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 761.902698][ T30] audit: type=1400 audit(1794140724.612:10001): avc: denied { write } for pid=26778 comm="syz.2.5194" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 761.902731][ T30] audit: type=1400 audit(1794140724.612:10002): avc: denied { append } for pid=26778 comm="syz.2.5194" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 761.986738][T26768] loop5: detected capacity change from 0 to 8192 [ 762.003514][T26768] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 762.003540][T26768] FAT-fs (loop5): Filesystem has been set read-only [ 762.114098][T24274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.996260][T26813] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1116 [ 763.245642][T26850] loop2: detected capacity change from 0 to 1024 [ 763.266902][T26850] EXT4-fs: Ignoring removed oldalloc option [ 763.274128][T26850] EXT4-fs: Ignoring removed oldalloc option [ 763.321923][T26850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.359449][ T30] audit: type=1400 audit(1794140726.032:10003): avc: denied { write } for pid=26849 comm="syz.2.5208" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 763.393697][ T30] audit: type=1400 audit(1794140726.102:10004): avc: denied { map } for pid=26849 comm="syz.2.5208" path="/106/file1/rdma.current" dev="loop2" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 763.537247][T24274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.763056][T26878] loop9: detected capacity change from 0 to 512 [ 763.781452][T26878] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 763.781473][T26878] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 763.782830][T26878] EXT4-fs (loop9): 1 truncate cleaned up [ 763.783211][T26878] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.839463][ T30] audit: type=1400 audit(1794140726.492:10005): avc: denied { write } for pid=26877 comm="syz.9.5216" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 763.886655][T21423] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.404692][ T30] audit: type=1400 audit(1794140727.112:10006): avc: denied { write } for pid=26907 comm="syz.7.5227" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 764.622800][T26932] FAULT_INJECTION: forcing a failure. [ 764.622800][T26932] name failslab, interval 1, probability 0, space 0, times 0 [ 764.622840][T26932] CPU: 1 UID: 0 PID: 26932 Comm: syz.2.5234 Not tainted syzkaller #0 PREEMPT(lazy) [ 764.622905][T26932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 764.622924][T26932] Call Trace: [ 764.622934][T26932] [ 764.622945][T26932] __dump_stack+0x1d/0x30 [ 764.622980][T26932] dump_stack_lvl+0x95/0xd0 [ 764.623013][T26932] dump_stack+0x15/0x1b [ 764.623153][T26932] should_fail_ex+0x259/0x270 [ 764.623195][T26932] ? alloc_vmap_area+0x1a2/0xde0 [ 764.623248][T26932] should_failslab+0x8c/0xb0 [ 764.623294][T26932] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 764.623374][T26932] ? _raw_spin_unlock+0x9/0x30 [ 764.623497][T26932] ? alloc_vmap_area+0x1a2/0xde0 [ 764.623542][T26932] alloc_vmap_area+0x1a2/0xde0 [ 764.623685][T26932] ? should_fail_ex+0xdb/0x270 [ 764.623725][T26932] ? should_failslab+0x8c/0xb0 [ 764.623807][T26932] ? __get_vm_area_node+0x125/0x1f0 [ 764.623853][T26932] __get_vm_area_node+0x199/0x1f0 [ 764.623899][T26932] __vmalloc_node_range_noprof+0x2aa/0x10e0 [ 764.623950][T26932] ? write_ldt+0x342/0x470 [ 764.624000][T26932] ? __account_obj_stock+0x27f/0x2d0 [ 764.624046][T26932] ? __memcg_slab_post_alloc_hook+0x35e/0x8c0 [ 764.624094][T26932] ? write_ldt+0x342/0x470 [ 764.624122][T26932] __vmalloc_noprof+0xa4/0xf0 [ 764.624158][T26932] ? write_ldt+0x342/0x470 [ 764.624196][T26932] write_ldt+0x342/0x470 [ 764.624222][T26932] __se_sys_modify_ldt+0x6c/0x260 [ 764.624249][T26932] x64_sys_call+0x26b/0x2550 [ 764.624354][T26932] do_syscall_64+0x112/0x360 [ 764.624378][T26932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.624403][T26932] RIP: 0033:0x7f6cdf46fb19 [ 764.624447][T26932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.624468][T26932] RSP: 002b:00007f6cddebf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 764.624490][T26932] RAX: ffffffffffffffda RBX: 00007f6cdf6f5fa0 RCX: 00007f6cdf46fb19 [ 764.624506][T26932] RDX: 0000000000000010 RSI: 0000200000001800 RDI: 0000000000000001 [ 764.624529][T26932] RBP: 00007f6cdf507b70 R08: 0000000000000000 R09: 0000000000000000 [ 764.624571][T26932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.624584][T26932] R13: 00007f6cdf6f6038 R14: 00007f6cdf6f5fa0 R15: 00007ffdf9c30368 [ 764.624606][T26932] [ 764.624632][T26932] syz.2.5234: vmalloc error: size 65536, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 764.624785][T26932] CPU: 1 UID: 0 PID: 26932 Comm: syz.2.5234 Not tainted syzkaller #0 PREEMPT(lazy) [ 764.624890][T26932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 764.624904][T26932] Call Trace: [ 764.624910][T26932] [ 764.624918][T26932] __dump_stack+0x1d/0x30 [ 764.625040][T26932] dump_stack_lvl+0x95/0xd0 [ 764.625069][T26932] dump_stack+0x15/0x1b [ 764.625091][T26932] warn_alloc+0x146/0x1c0 [ 764.625141][T26932] __vmalloc_node_range_noprof+0x2d2/0x10e0 [ 764.625194][T26932] ? __account_obj_stock+0x27f/0x2d0 [ 764.625234][T26932] ? __memcg_slab_post_alloc_hook+0x35e/0x8c0 [ 764.625291][T26932] ? write_ldt+0x342/0x470 [ 764.625322][T26932] __vmalloc_noprof+0xa4/0xf0 [ 764.625400][T26932] ? write_ldt+0x342/0x470 [ 764.625432][T26932] write_ldt+0x342/0x470 [ 764.625475][T26932] __se_sys_modify_ldt+0x6c/0x260 [ 764.625500][T26932] x64_sys_call+0x26b/0x2550 [ 764.625529][T26932] do_syscall_64+0x112/0x360 [ 764.625559][T26932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.625598][T26932] RIP: 0033:0x7f6cdf46fb19 [ 764.625632][T26932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.625665][T26932] RSP: 002b:00007f6cddebf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 764.625689][T26932] RAX: ffffffffffffffda RBX: 00007f6cdf6f5fa0 RCX: 00007f6cdf46fb19 [ 764.625704][T26932] RDX: 0000000000000010 RSI: 0000200000001800 RDI: 0000000000000001 [ 764.625745][T26932] RBP: 00007f6cdf507b70 R08: 0000000000000000 R09: 0000000000000000 [ 764.625760][T26932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.625773][T26932] R13: 00007f6cdf6f6038 R14: 00007f6cdf6f5fa0 R15: 00007ffdf9c30368 [ 764.625831][T26932] [ 764.625864][T26932] Mem-Info: [ 764.625872][T26932] active_anon:7156 inactive_anon:0 isolated_anon:0 [ 764.625872][T26932] active_file:0 inactive_file:24762 isolated_file:0 [ 764.625872][T26932] unevictable:0 dirty:246 writeback:0 [ 764.625872][T26932] slab_reclaimable:3080 slab_unreclaimable:24176 [ 764.625872][T26932] mapped:29688 shmem:513 pagetables:1597 [ 764.625872][T26932] sec_pagetables:0 bounce:0 [ 764.625872][T26932] kernel_misc_reclaimable:0 [ 764.625872][T26932] free:1863172 free_pcp:10125 free_cma:0 [ 764.626021][T26932] Node 0 active_anon:28624kB inactive_anon:0kB active_file:0kB inactive_file:99048kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118752kB dirty:984kB writeback:0kB shmem:2052kB kernel_stack:4640kB pagetables:6388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 764.626091][T26932] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 764.626226][T26932] lowmem_reserve[]: 0 2877 7856 7856 [ 764.626255][T26932] Node 0 DMA32 free:2942928kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946452kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 764.626442][T26932] lowmem_reserve[]: 0 0 4978 4978 [ 764.626477][T26932] Node 0 Normal free:4494400kB boost:0kB min:7192kB low:12288kB high:17384kB reserved_highatomic:0kB free_highatomic:0kB active_anon:28624kB inactive_anon:0kB active_file:0kB inactive_file:99048kB unevictable:0kB writepending:984kB zspages:0kB present:5242880kB managed:5098212kB mlocked:0kB bounce:0kB free_pcp:36908kB local_pcp:25644kB free_cma:0kB [ 764.626633][T26932] lowmem_reserve[]: 0 0 0 0 [ 764.626674][T26932] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 764.626877][T26932] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 1*64kB (M) 2*128kB (M) 4*256kB (M) 3*512kB (M) 1*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2942928kB [ 764.627193][T26932] Node 0 Normal: 554*4kB (UME) 464*8kB (UME) 615*16kB (UME) 268*32kB (UME) 298*64kB (UME) 198*128kB (UME) 104*256kB (UME) 46*512kB (UME) 17*1024kB (UM) 6*2048kB (UM) 1061*4096kB (UM) = 4494488kB [ 764.627482][T26932] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 764.627505][T26932] 25268 total pagecache pages [ 764.627525][T26932] 0 pages in swap cache [ 764.627535][T26932] Free swap = 124996kB [ 764.627545][T26932] Total swap = 124996kB [ 764.627554][T26932] 2097051 pages RAM [ 764.627637][T26932] 0 pages HighMem/MovableOnly [ 764.627646][T26932] 82045 pages reserved [ 764.689969][T26937] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5236'. [ 766.182792][T26968] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5247'. [ 767.408279][T26986] loop9: detected capacity change from 0 to 1024 [ 767.409553][T26986] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 767.419684][T26986] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 767.420292][T26986] EXT4-fs (loop9): orphan cleanup on readonly fs [ 767.422048][T26986] EXT4-fs error (device loop9): __ext4_get_inode_loc:5733: comm syz.9.5252: Invalid inode table block 0 in block_group 0 [ 767.422169][T26986] loop9: lost filesystem error report for type 5 error -117 [ 767.422475][T26986] EXT4-fs error (device loop9) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 767.422536][T26986] loop9: lost filesystem error report for type 5 error -117 [ 767.422682][T26986] EXT4-fs error (device loop9): ext4_quota_write:7509: inode #3: comm syz.9.5252: mark_inode_dirty error [ 767.422769][T26986] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 767.423036][T26986] Quota error (device loop9): write_blk: dquota write failed [ 767.423091][T26986] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 767.423185][T26986] EXT4-fs error (device loop9): ext4_acquire_dquot:7120: comm syz.9.5252: Failed to acquire dquot type 0 [ 767.423258][T26986] loop9: lost filesystem error report for type 5 error -117 [ 767.423491][T26986] EXT4-fs error (device loop9): __ext4_get_inode_loc:5733: comm syz.9.5252: Invalid inode table block 0 in block_group 0 [ 767.423577][T26986] loop9: lost filesystem error report for type 5 error -117 [ 767.423812][T26986] EXT4-fs error (device loop9) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 767.423867][T26986] loop9: lost filesystem error report for type 5 error -117 [ 767.424100][T26986] EXT4-fs error (device loop9): ext4_ext_truncate:4565: inode #15: comm syz.9.5252: mark_inode_dirty error [ 767.424175][T26986] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 767.424430][T26986] EXT4-fs error (device loop9): __ext4_get_inode_loc:5733: comm syz.9.5252: Invalid inode table block 0 in block_group 0 [ 767.424546][T26986] loop9: lost filesystem error report for type 5 error -117 [ 767.424734][T26986] EXT4-fs error (device loop9) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 767.424789][T26986] loop9: lost filesystem error report for type 5 error -117 [ 767.424956][T26986] EXT4-fs error (device loop9) in ext4_orphan_del:304: Corrupt filesystem [ 767.425053][T26986] loop9: lost filesystem error report for type 5 error -117 [ 767.425251][T26986] EXT4-fs error (device loop9): __ext4_get_inode_loc:5733: comm syz.9.5252: Invalid inode table block 0 in block_group 0 [ 767.425336][T26986] loop9: lost filesystem error report for type 5 error -117 [ 767.425552][T26986] EXT4-fs error (device loop9) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 767.425608][T26986] loop9: lost filesystem error report for type 5 error -117 [ 767.425781][T26986] EXT4-fs error (device loop9): ext4_truncate:5538: inode #15: comm syz.9.5252: mark_inode_dirty error [ 767.425944][T26986] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 767.427657][T26986] EXT4-fs error (device loop9) in ext4_process_orphan:346: Corrupt filesystem [ 767.428138][T26986] EXT4-fs (loop9): 1 truncate cleaned up [ 767.429090][T26986] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 767.523671][T26986] EXT4-fs error (device loop9): ext4_readdir:280: inode #2: block 16: comm syz.9.5252: path /204/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 767.620931][T21423] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.316650][T27035] loop9: detected capacity change from 0 to 1024 [ 768.317449][T27035] EXT4-fs: Ignoring removed mblk_io_submit option [ 768.317774][T27035] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 768.318044][T27035] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 768.356034][T27035] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #11: comm syz.9.5260: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 768.356096][T27035] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 768.356980][T27035] EXT4-fs error (device loop9): ext4_orphan_get:1409: comm syz.9.5260: couldn't read orphan inode 11 (err -117) [ 768.358544][T27035] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.393139][T27035] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:487: comm syz.9.5260: Invalid block bitmap block 0 in block_group 0 [ 768.394680][T27035] Quota error (device loop9): write_blk: dquota write failed [ 768.394797][T27035] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 768.394930][T27035] EXT4-fs error (device loop9): ext4_acquire_dquot:7120: comm syz.9.5260: Failed to acquire dquot type 0 [ 768.400336][ T30] audit: type=1400 audit(1794140731.102:10007): avc: denied { write } for pid=27033 comm="syz.9.5260" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 768.496928][T21423] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.497216][T25671] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-8 [ 768.497333][T25671] EXT4-fs error (device loop9): ext4_release_dquot:7156: comm kworker/u8:11: Failed to release dquot type 0 [ 768.571239][T27058] rxe_eth0 speed is unknown, defaulting to 1000 [ 768.626919][T27075] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5269'. [ 768.626953][T27075] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5269'. [ 768.911868][T27130] loop9: detected capacity change from 0 to 1024 [ 768.930995][T27130] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 768.932876][ T30] audit: type=1400 audit(1794140731.642:10008): avc: denied { write } for pid=27129 comm="syz.9.5281" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 768.933914][ T30] audit: type=1400 audit(1794140731.642:10009): avc: denied { map } for pid=27129 comm="syz.9.5281" path="/213/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 768.985721][T27138] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 768.986662][T27138] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 768.986746][T27138] EXT4-fs (loop9): This should not happen!! Data will be lost [ 768.986746][T27138] [ 768.986804][T27138] EXT4-fs (loop9): Total free blocks count 0 [ 768.986897][T27138] EXT4-fs (loop9): Free/Dirty block details [ 768.986931][T27138] EXT4-fs (loop9): free_blocks=20480 [ 768.986976][T27138] EXT4-fs (loop9): dirty_blocks=32 [ 768.987017][T27138] EXT4-fs (loop9): Block reservation details [ 768.987060][T27138] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 769.074117][T26518] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 769.260186][ T30] audit: type=1400 audit(1794140731.972:10010): avc: denied { ioctl } for pid=27167 comm="syz.0.5294" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x80083314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 769.340008][T27172] loop9: detected capacity change from 0 to 8192 [ 769.347234][T27172] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 769.347969][ T30] audit: type=1400 audit(1794140732.052:10011): avc: denied { mount } for pid=27171 comm="syz.9.5296" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 769.835032][T25845] syz_tun (unregistering): left allmulticast mode [ 769.882532][T27195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.882624][T27195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.214700][T26518] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.268446][T26518] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.376826][T26518] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.416870][T27217] ip_tables: iptables: counters copy to user failed while replacing table [ 770.431408][T26518] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.616097][T26518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.617065][T26518] bond0 (unregistering): Released all slaves [ 770.652634][T27210] rxe_eth0 speed is unknown, defaulting to 1000 [ 770.739249][T26518] hsr_slave_0: left promiscuous mode [ 770.751099][T26518] hsr_slave_1: left promiscuous mode [ 770.756192][T26518] veth1_macvtap: left promiscuous mode [ 770.756228][T26518] veth0_macvtap: left promiscuous mode [ 770.756288][T26518] veth1_vlan: left promiscuous mode [ 770.756448][T26518] veth0_vlan: left promiscuous mode [ 770.848979][T26518] team0 (unregistering): Port device team_slave_1 removed [ 770.860409][T26518] team0 (unregistering): Port device team_slave_0 removed [ 770.894442][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 771.045317][T27210] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.045365][T27210] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.045552][T27210] bridge_slave_0: entered allmulticast mode [ 771.046064][T27210] bridge_slave_0: entered promiscuous mode [ 771.076775][T27210] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.076823][T27210] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.077050][T27210] bridge_slave_1: entered allmulticast mode [ 771.077674][T27210] bridge_slave_1: entered promiscuous mode [ 771.101738][T26518] IPVS: stop unused estimator thread 0... [ 771.141097][T27210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.142336][T27210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.148904][T27412] loop5: detected capacity change from 0 to 128 [ 771.154791][T27412] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 771.154947][T27412] FAT-fs (loop5): data area starts beyond volume (36 > 6) [ 771.155000][T27412] FAT-fs (loop5): Can't find a valid FAT filesystem [ 771.221087][T27210] team0: Port device team_slave_0 added [ 771.228409][T27210] team0: Port device team_slave_1 added [ 771.266109][T27210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.266129][T27210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.266165][T27210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.266811][T27210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.266828][T27210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.266869][T27210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.429818][T27470] loop5: detected capacity change from 0 to 512 [ 771.433832][T27470] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 771.433866][T27470] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 771.433902][T27470] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 771.696726][T27453] loop7: detected capacity change from 0 to 8192 [ 771.778253][T27210] hsr_slave_0: entered promiscuous mode [ 771.788947][T27210] hsr_slave_1: entered promiscuous mode [ 771.795152][T27210] debugfs: 'hsr0' already exists in 'hsr' [ 771.795381][T27210] Cannot create hsr debugfs directory [ 771.798867][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 771.988375][T27512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.988821][T27512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.356768][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 772.409077][T27210] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.500746][T27210] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.563289][T27210] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.592078][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 772.592094][ T30] audit: type=1400 audit(1794140735.302:10021): avc: denied { write } for pid=27609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 772.642251][ T30] audit: type=1400 audit(1794140735.352:10022): avc: denied { write } for pid=27630 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 772.680791][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 772.703411][T27210] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.767738][T27210] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 772.771330][T27210] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 772.773105][T27210] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 772.787373][T27210] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 772.792591][T27210] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 772.808975][T27210] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 772.811183][T27210] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 772.818788][T27210] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 772.879219][T27210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.891542][T27210] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.896160][T26518] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.896200][T26518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.923164][T27666] loop2: detected capacity change from 0 to 512 [ 772.924241][T26512] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.924320][T26512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.928286][T27666] EXT4-fs: inline encryption not supported [ 772.932918][T27666] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 772.932990][T27666] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 772.955363][T27666] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1159: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 772.957102][T27666] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.5333: bg 0: block 248: padding at end of block bitmap is not set [ 772.957294][T27666] fserror_report: 3 callbacks suppressed [ 772.957335][T27666] loop2: lost filesystem error report for type 5 error -117 [ 772.958172][T27666] Quota error (device loop2): write_blk: dquota write failed [ 772.958227][T27666] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 772.958310][T27666] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.5333: Failed to acquire dquot type 1 [ 772.958376][T27666] loop2: lost filesystem error report for type 5 error -28 [ 772.959433][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 772.959495][ C1] EXT4-fs (loop2): last error at time 1794140735: ext4_acquire_dquot:7120 [ 772.965656][T27666] EXT4-fs (loop2): 1 truncate cleaned up [ 772.967022][T27666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 773.000098][ T30] audit: type=1400 audit(1794140735.692:10023): avc: denied { write } for pid=27665 comm="syz.2.5333" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 773.000201][ T30] audit: type=1400 audit(1794140735.692:10024): avc: denied { setattr } for pid=27665 comm="syz.2.5333" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 773.023946][T24274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 773.031184][T26516] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 773.031278][T26516] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:19: Failed to release dquot type 1 [ 773.031450][T26516] loop2: lost filesystem error report for type 5 error -117 [ 773.148955][ T30] audit: type=1326 audit(1794140735.852:10025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27673 comm="syz.2.5334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdf46fb19 code=0x7ffc0000 [ 773.160474][ T30] audit: type=1326 audit(1794140735.852:10026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27673 comm="syz.2.5334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdf46fb19 code=0x7ffc0000 [ 773.160519][ T30] audit: type=1326 audit(1794140735.862:10027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27673 comm="syz.2.5334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cdf46fb19 code=0x7ffc0000 [ 773.353739][T27210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.468206][T27712] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5340'. [ 773.557071][T27722] loop7: detected capacity change from 0 to 256 [ 773.580184][T27724] loop5: detected capacity change from 0 to 2048 [ 773.587617][T27722] FAT-fs (loop7): data area starts beyond volume (274 > 64) [ 773.587734][T27722] FAT-fs (loop7): Can't find a valid FAT filesystem [ 773.617480][T27724] loop5: p1 < > p4 [ 773.701748][T27724] loop5: p4 size 722688 extends beyond EOD, truncated [ 774.453155][T27210] veth0_vlan: entered promiscuous mode [ 774.457886][T27210] veth1_vlan: entered promiscuous mode [ 774.506216][T27210] veth0_macvtap: entered promiscuous mode [ 774.519241][T27210] veth1_macvtap: entered promiscuous mode [ 774.546756][T27210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.565846][T27210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.599615][T26504] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.600933][T26518] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.600968][T26518] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.601042][T26518] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.941674][T27796] ip_tables: iptables: counters copy to user failed while replacing table [ 774.943433][T27796] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 775.428958][T27814] loop2: detected capacity change from 0 to 128 [ 775.442217][T27814] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 775.442287][T27814] FAT-fs (loop2): data area starts beyond volume (36 > 11) [ 775.442303][T27814] FAT-fs (loop2): Can't find a valid FAT filesystem [ 775.651856][T27827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.651947][T27827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.802017][T27832] bridge0: port 3(vlan2) entered blocking state [ 775.802067][T27832] bridge0: port 3(vlan2) entered disabled state [ 775.802188][T27832] vlan2: entered allmulticast mode [ 775.802876][T27832] vlan2: entered promiscuous mode [ 776.277891][T27864] loop7: detected capacity change from 0 to 4096 [ 776.278600][T27864] EXT4-fs: Ignoring removed orlov option [ 776.296332][T27864] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.329627][T19581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.401541][T27883] loop7: detected capacity change from 0 to 256 [ 776.814783][T27925] loop7: detected capacity change from 0 to 1024 [ 776.816308][T27925] EXT4-fs: Ignoring removed oldalloc option [ 776.816428][T27925] EXT4-fs: Ignoring removed orlov option [ 776.872648][T27925] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 777.064716][T19581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.184516][T27946] loop5: detected capacity change from 0 to 512 [ 777.508140][T27989] loop5: detected capacity change from 0 to 512 [ 777.564924][T27989] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 777.922678][T28007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.924051][T28007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.185664][T28013] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5409'. [ 778.272138][T26516] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 778.365641][T28039] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 778.366414][T28039] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 778.402502][T28041] ip_tables: iptables: counters copy to user failed while replacing table [ 778.404091][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 778.404108][ T30] audit: type=1326 audit(1794140741.112:10041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28040 comm="syz.4.5418" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1f96bfb19 code=0x0 [ 778.468819][T28044] loop5: detected capacity change from 0 to 1024 [ 778.660616][T28044] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 778.670825][T28044] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #3: block 2: comm syz.5.5419: lblock 2 mapped to illegal pblock 2 (length 1) [ 778.671285][T28044] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 778.672158][T28044] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 778.672228][T28044] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #3: block 48: comm syz.5.5419: lblock 0 mapped to illegal pblock 48 (length 1) [ 778.672273][T28044] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 778.672549][T28044] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 778.672617][T28044] EXT4-fs error (device loop5): ext4_acquire_dquot:7120: comm syz.5.5419: Failed to acquire dquot type 0 [ 778.672728][T28044] loop5: lost filesystem error report for type 5 error -117 [ 778.673457][T28044] EXT4-fs error (device loop5) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 778.673476][T28044] loop5: lost filesystem error report for type 5 error -117 [ 778.674969][T28044] EXT4-fs error (device loop5): ext4_evict_inode:336: inode #11: comm syz.5.5419: mark_inode_dirty error [ 778.675077][T28044] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 778.675780][T28044] EXT4-fs warning (device loop5): ext4_evict_inode:339: couldn't mark inode dirty (err -117) [ 778.675917][T28044] EXT4-fs (loop5): 1 orphan inode deleted [ 778.680692][T28044] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.851939][T28044] EXT4-fs: Ignoring removed bh option [ 778.853301][T28044] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 779.287514][T28066] loop4: detected capacity change from 0 to 512 [ 779.315152][T28066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.315288][T28066] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 779.360191][ T30] audit: type=1400 audit(1794140742.062:10042): avc: denied { write } for pid=28065 comm="syz.4.5425" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 779.360998][ T30] audit: type=1400 audit(1794140742.072:10043): avc: denied { write } for pid=28065 comm="syz.4.5425" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 779.427124][T26519] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 779.427394][T26519] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 779.427413][T26519] EXT4-fs error (device loop5): ext4_release_dquot:7156: comm kworker/u8:21: Failed to release dquot type 0 [ 779.462418][T28044] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #3: block 48: comm syz.5.5419: lblock 0 mapped to illegal pblock 48 (length 1) [ 779.463199][T28044] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117 [ 779.484398][T27210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.525224][T22630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.573794][T28085] rxe_eth0 speed is unknown, defaulting to 1000 [ 779.693392][T28089] loop5: detected capacity change from 0 to 1024 [ 779.710101][T28089] EXT4-fs: Ignoring removed oldalloc option [ 779.710165][T28089] EXT4-fs: Ignoring removed orlov option [ 779.735077][T28089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.735245][T28089] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 779.816758][T28089] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5428'. [ 781.489501][T28135] loop4: detected capacity change from 0 to 512 [ 781.490024][T28135] EXT4-fs: test_dummy_encryption option not supported [ 781.755999][T28151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.756191][T28151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.785291][T28159] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 781.927273][T22630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 783.029618][ T30] audit: type=1400 audit(1794140745.732:10044): avc: denied { execute } for pid=28185 comm="syz.7.5441" dev="tmpfs" ino=2936 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 783.143630][ T30] audit: type=1400 audit(1794140745.852:10045): avc: denied { remount } for pid=28191 comm="syz.0.5444" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 783.146380][T28192] SELinux: Context : is not valid (left unmapped). [ 783.176997][ T30] audit: type=1400 audit(1794140745.852:10046): avc: denied { relabelto } for pid=28191 comm="syz.0.5444" name="rdma.current" dev="tmpfs" ino=2804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 784.063757][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 784.063779][ T30] audit: type=1400 audit(1794140746.772:10049): avc: denied { write } for pid=28175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 784.196532][T28231] loop5: detected capacity change from 0 to 512 [ 784.199512][T28230] loop2: detected capacity change from 0 to 512 [ 784.204314][T28230] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 784.204345][T28230] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 784.214742][ T30] audit: type=1400 audit(1794140746.902:10050): avc: denied { write } for pid=28225 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 784.272398][T28230] EXT4-fs (loop2): 1 truncate cleaned up [ 784.272801][T28230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.305868][T28231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.305964][T28231] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.323054][ T30] audit: type=1400 audit(1794140747.012:10051): avc: denied { write } for pid=28226 comm="syz.2.5453" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 784.361019][ T30] audit: type=1400 audit(1794140747.072:10052): avc: denied { write } for pid=28226 comm="syz.2.5453" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 784.361054][ T30] audit: type=1400 audit(1794140747.072:10053): avc: denied { write } for pid=28226 comm="syz.2.5453" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 784.361100][ T30] audit: type=1400 audit(1794140747.072:10054): avc: denied { rename } for pid=28226 comm="syz.2.5453" name="file0" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 784.365627][T28230] EXT4-fs error (device loop2): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.2.5453: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 784.388767][ T30] audit: type=1400 audit(1794140747.072:10055): avc: denied { write } for pid=28226 comm="syz.2.5453" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 784.388816][ T30] audit: type=1400 audit(1794140747.072:10056): avc: denied { write } for pid=28226 comm="syz.2.5453" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 784.388847][ T30] audit: type=1400 audit(1794140747.072:10057): avc: denied { rename } for pid=28226 comm="syz.2.5453" name="file0" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 784.388881][ T30] audit: type=1400 audit(1794140747.072:10058): avc: denied { unlink } for pid=28226 comm="syz.2.5453" name=2E02 dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 784.411065][T28230] EXT4-fs error (device loop2) in ext4_delete_entry:2746: Corrupt filesystem [ 784.433817][T28230] EXT4-fs warning (device loop2): ext4_rename_delete:3742: inode #2: comm syz.2.5453: Deleting old file: nlink 4, error=-117 [ 784.511744][T22630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.618042][T24274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.658666][T28251] loop5: detected capacity change from 0 to 2048 [ 784.672477][T28251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.789047][T28269] loop7: detected capacity change from 0 to 512 [ 784.833363][T22630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.851069][T28269] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.851161][T28269] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 784.969592][T19581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.974952][T28273] loop2: detected capacity change from 0 to 4096 [ 784.982139][T28273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.993218][T28273] process 'syz.2.5462' launched './file0' with NULL argv: empty string added [ 785.012852][T24274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.223927][T28297] loop5: detected capacity change from 0 to 512 [ 785.230576][ T1047] kernel read not supported for file /ppp (pid: 1047 comm: kworker/1:2) [ 785.286258][T28297] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.5460: iget: bad i_size value: 38620345925642 [ 785.286343][T28297] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 785.286460][T28297] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.5460: couldn't read orphan inode 15 (err -117) [ 785.286487][T28297] loop5: lost filesystem error report for type 5 error -117 [ 785.287124][T28297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.348932][T28297] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.5460: bg 0: block 5: invalid block bitmap [ 785.349265][T28297] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 319 with max blocks 1 with error 28 [ 785.349292][T28297] EXT4-fs (loop5): This should not happen!! Data will be lost [ 785.349292][T28297] [ 785.349308][T28297] EXT4-fs (loop5): Total free blocks count 0 [ 785.375525][T28297] EXT4-fs (loop5): Free/Dirty block details [ 785.375542][T28297] EXT4-fs (loop5): free_blocks=0 [ 785.375561][T28297] EXT4-fs (loop5): dirty_blocks=1 [ 785.375578][T28297] EXT4-fs (loop5): Block reservation details [ 785.375593][T28297] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 785.456178][T22630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.496982][T28316] loop5: detected capacity change from 0 to 512 [ 785.523521][T28316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.523611][T28316] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 785.736833][T28324] netlink: 'syz.7.5468': attribute type 39 has an invalid length. [ 785.754476][T28326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.754584][T28326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.072586][T22630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.110312][T28332] syzkaller0: entered promiscuous mode [ 786.110334][T28332] syzkaller0: entered allmulticast mode [ 786.114059][T28332] tipc: Enabled bearer , priority 0 [ 786.114519][T28331] tipc: Resetting bearer [ 786.116532][T28331] tipc: Disabling bearer [ 786.167773][T28338] loop2: detected capacity change from 0 to 512 [ 786.191372][T28338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.191516][T28338] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 786.303902][T28346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5473'. [ 786.303994][T28346] netlink: 'syz.4.5473': attribute type 7 has an invalid length. [ 786.304013][T28346] netlink: 'syz.4.5473': attribute type 8 has an invalid length. [ 786.304030][T28346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5473'. [ 786.350900][T24274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.380147][T28348] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 786.435418][T28361] x_tables: duplicate underflow at hook 3 [ 786.460901][T28362] syz_tun: entered promiscuous mode [ 786.461166][T28362] batadv_slave_0: entered promiscuous mode [ 786.461524][T28360] batadv_slave_0: left promiscuous mode [ 786.461608][T28360] syz_tun: left promiscuous mode [ 786.514875][T28367] loop7: detected capacity change from 0 to 512 [ 786.515921][T28367] EXT4-fs: Ignoring removed oldalloc option [ 786.515948][T28367] EXT4-fs: Ignoring removed oldalloc option [ 786.516089][T28367] EXT4-fs: test_dummy_encryption option not supported [ 786.670508][T28387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5486'. [ 786.670551][T28387] netlink: 'syz.0.5486': attribute type 7 has an invalid length. [ 786.670593][T28387] netlink: 'syz.0.5486': attribute type 8 has an invalid length. [ 786.670645][T28387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5486'. [ 787.101213][T28396] loop4: detected capacity change from 0 to 512 [ 787.108791][T28396] EXT4-fs: Ignoring removed bh option [ 787.110295][T28396] EXT4-fs: test_dummy_encryption option not supported [ 787.214125][T28389] device-mapper: table: 252:5: crypt: unknown target type [ 787.214202][T28389] device-mapper: ioctl: error adding target to table [ 787.479980][T28416] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 787.528387][T28432] netlink: 'syz.4.5490': attribute type 39 has an invalid length. [ 787.679976][T28445] FAT-fs (loop7): bogus number of FAT sectors [ 787.680081][T28445] FAT-fs (loop7): Can't find a valid FAT filesystem [ 787.795305][T28458] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5499'. [ 787.795344][T28458] netlink: 'syz.7.5499': attribute type 7 has an invalid length. [ 787.795387][T28458] netlink: 'syz.7.5499': attribute type 8 has an invalid length. [ 787.795470][T28458] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5499'. [ 787.890339][T28467] device-mapper: ioctl: populate_table: next target spec (offset 28) overlaps 'struct dm_ioctl' [ 787.896987][T28470] netlink: 45 bytes leftover after parsing attributes in process `syz.0.5502'. [ 788.020638][T28475] FAT-fs (loop7): codepage cp949 not found [ 788.176753][T28497] cgroup: Unknown subsys name 'cpuset' [ 788.345848][T28505] EXT4-fs: test_dummy_encryption option not supported [ 788.582407][T28534] EXT4-fs: inline encryption not supported [ 788.582442][T28534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 788.611329][T28534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 788.611511][T28534] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.699530][T28549] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.5520: bg 0: block 112: padding at end of block bitmap is not set [ 788.699744][T28549] EXT4-fs (loop2): Remounting filesystem read-only [ 788.754703][T24274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 788.787899][T28558] netlink: 'syz.5.5522': attribute type 39 has an invalid length. [ 788.922470][T28579] FAT-fs (loop4): codepage cp949 not found [ 789.328456][T28590] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.5535: bg 0: block 5: invalid block bitmap [ 789.329862][T28590] loop4: lost filesystem error report for type 5 error -117 [ 789.331053][T28590] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 789.331086][T28590] loop4: lost filesystem error report for type 5 error -117 [ 789.331886][T28590] EXT4-fs error (device loop4): ext4_free_branches:1040: inode #11: comm syz.4.5535: invalid indirect mapped block 3 (level 2) [ 789.331936][T28590] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 789.333560][T28590] EXT4-fs (loop4): 1 orphan inode deleted [ 789.334213][T28590] EXT4-fs (loop4): 1 truncate cleaned up [ 789.341079][T28590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.671912][T27210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.824906][T28618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.825017][T28618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.880640][T28623] set_capacity_and_notify: 6 callbacks suppressed [ 789.880663][T28623] loop7: detected capacity change from 0 to 256 [ 789.944004][T28623] FAT-fs (loop7): IO charset cp1255 not found [ 789.982575][T28634] netlink: 'syz.5.5548': attribute type 39 has an invalid length. [ 789.997572][T28630] loop4: detected capacity change from 0 to 2048 [ 790.026812][T28630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.026898][T28630] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 790.056724][T28642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.056885][T28642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.106383][T27210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.148371][T28651] loop4: detected capacity change from 0 to 256 [ 790.233046][T28651] FAT-fs (loop4): IO charset cp775 not found [ 790.317706][T28662] xt_hashlimit: size too large, truncated to 1048576 [ 790.593487][T28683] loop7: detected capacity change from 0 to 512 [ 790.608763][T28683] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 790.608918][T28683] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 790.637510][T28683] EXT4-fs error (device loop7): ext4_do_update_inode:6707: inode #2: comm syz.7.5558: corrupted inode contents [ 790.637695][T28683] EXT4-fs (loop7): Remounting filesystem read-only [ 790.637861][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 790.637875][ T30] audit: type=1400 audit(1794140753.342:10079): avc: denied { write } for pid=28682 comm="syz.7.5558" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 790.692016][ T30] audit: type=1400 audit(1794140753.402:10080): avc: denied { write } for pid=28682 comm="syz.7.5558" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 790.755539][ T30] audit: type=1400 audit(1794140753.462:10081): avc: denied { write } for pid=28682 comm="syz.7.5558" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 790.757330][ T30] audit: type=1400 audit(1794140753.462:10082): avc: denied { write } for pid=28682 comm="syz.7.5558" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 790.832118][T19581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.898205][T28690] SELinux: failed to load policy [ 790.898983][ T30] audit: type=1400 audit(1794140753.602:10083): avc: denied { load_policy } for pid=28689 comm="syz.5.5559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 791.019736][T28693] process 28694 (syz.7.5560) no longer affine to cpu1 [ 791.035690][T28696] smpboot: CPU 1 is now offline [ 791.061452][T28696] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 791.085063][T28703] loop7: detected capacity change from 0 to 2048 [ 791.126147][T28703] loop7: p1 < > p4 [ 791.127032][T28703] loop7: p4 size 722688 extends beyond EOD, truncated [ 791.241463][T28725] loop5: detected capacity change from 0 to 128 [ 791.251372][T28725] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 791.252782][T28725] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 791.313643][T22630] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 791.438491][ T30] audit: type=1400 audit(1794140754.142:10084): avc: denied { getopt } for pid=28740 comm="syz.0.5570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 791.481737][T28743] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5571'. [ 791.511674][T28719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.511905][T28719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.846354][ T30] audit: type=1400 audit(1794140754.552:10085): avc: denied { associate } for pid=28750 comm="syz.0.5574" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 792.136606][ T30] audit: type=1400 audit(1794140754.842:10086): avc: denied { map } for pid=28768 comm="syz.4.5576" path="socket:[90190]" dev="sockfs" ino=90190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 792.165270][ T30] audit: type=1400 audit(1794140754.872:10087): avc: denied { accept } for pid=28768 comm="syz.4.5576" path="socket:[90190]" dev="sockfs" ino=90190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 792.283547][T28773] loop7: detected capacity change from 0 to 128 [ 792.331169][T28773] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 792.336782][T28773] ext4 filesystem being mounted at /304/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 792.502106][T19581] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 792.792977][T28796] netlink: 'syz.7.5581': attribute type 39 has an invalid length. [ 793.497068][T28797] loop4: detected capacity change from 0 to 512 [ 793.507336][T28797] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 793.684678][T26503] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 793.696334][T28801] usb usb6: usbfs: process 28801 (syz.7.5584) did not claim interface 0 before use [ 793.830815][T28821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.831000][T28821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 793.879960][T28829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 793.880075][T28829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.786638][T28846] loop4: detected capacity change from 0 to 2048 [ 794.825305][T28846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.842256][T28846] EXT4-fs (loop4): shut down requested (2) [ 794.844225][T28846] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 794.844255][T28846] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 794.984823][T27210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.283449][T28866] loop5: detected capacity change from 0 to 1024 [ 796.301801][T28866] EXT4-fs (loop5): invalid inodes per group: 1 [ 796.362097][T28878] loop5: detected capacity change from 0 to 512 [ 796.377791][T28878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.377969][T28878] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 796.404816][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 796.404838][ T30] audit: type=1400 audit(1794140759.112:10099): avc: denied { write } for pid=28877 comm="syz.5.5606" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 796.448750][T28879] ip_tables: iptables: counters copy to user failed while replacing table [ 796.448796][T22630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.574366][T28905] loop5: detected capacity change from 0 to 256 [ 796.589901][T28903] loop7: detected capacity change from 0 to 512 [ 796.615428][T28903] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.615517][T28903] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 796.625080][T28905] FAT-fs (loop5): codepage cp861 not found [ 796.661789][T28915] loop4: detected capacity change from 0 to 512 [ 796.675095][T28915] EXT4-fs: Ignoring removed bh option [ 796.682417][T28915] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 796.682444][T28915] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 796.682467][T28915] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5610: Corrupt directory, running e2fsck is recommended [ 796.683324][T28915] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 796.687932][T28915] EXT4-fs error (device loop4): ext4_iget_extra_inode:6027: inode #15: comm syz.4.5610: corrupted in-inode xattr: e_name out of bounds [ 796.687974][T28915] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 796.688194][T28915] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.5610: couldn't read orphan inode 15 (err -117) [ 796.688232][T28915] loop4: lost filesystem error report for type 5 error -117 [ 796.688810][T28915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.714803][T28915] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 796.714895][T28915] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 796.714929][T28915] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5610: Corrupt directory, running e2fsck is recommended [ 796.716057][T28915] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 796.716081][T28915] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 796.716103][T28915] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5610: Corrupt directory, running e2fsck is recommended [ 796.717112][T28915] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 796.717138][T28915] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 796.717184][T28915] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5610: Corrupt directory, running e2fsck is recommended [ 796.718293][T28915] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 796.718434][T28915] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 3: comm syz.4.5610: path /51/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 796.718675][T28915] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 8: comm syz.4.5610: path /51/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 796.739873][ T30] audit: type=1400 audit(1794140759.422:10100): avc: denied { write } for pid=28912 comm="syz.4.5610" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 797.121631][T27210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.329444][ T30] audit: type=1400 audit(1794140759.992:10101): avc: denied { create } for pid=28930 comm="syz.0.5612" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 797.329518][ T30] audit: type=1400 audit(1794140759.992:10102): avc: denied { map } for pid=28930 comm="syz.0.5612" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=90382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 797.329645][ T30] audit: type=1400 audit(1794140759.992:10103): avc: denied { read write } for pid=28930 comm="syz.0.5612" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=90382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 797.581540][T19581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.625218][T28945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.625308][T28945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.680579][T28956] loop4: detected capacity change from 0 to 128 [ 797.738892][T28956] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 797.739202][T28956] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 798.225986][T28963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.227869][T28963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.804685][T28969] ip_tables: iptables: counters copy to user failed while replacing table [ 799.616981][T27210] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 799.820987][T28974] SELinux: policydb configuration both rejects and allows unknown classes and permissions [ 799.821008][T28974] SELinux: failed to load policy [ 800.059915][T28995] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5632'. [ 800.137731][T29001] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 800.528382][T29047] loop2: detected capacity change from 0 to 512 [ 800.542775][T29047] vfat: Unknown parameter 'ÿ18446744073709551615â¬w¥ Åuâ ·ðÙþ»O~Ï/0›™’¦IÑÝÓ"å#Ž¡žT–wbŠhÅö³ðß°+lØ�QBqfJì$¿/]‚ýƒºD–2¥ƒ€†¾æ§�ÆþæòGô$ºd‡µ§i_/^—ÂuÇåZ*?ž' [ 800.564599][ T30] audit: type=1400 audit(1794140763.162:10104): avc: denied { write } for pid=29039 comm="syz.2.5641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 800.919310][ T30] audit: type=1400 audit(1794140763.622:10105): avc: denied { bind } for pid=29053 comm="syz.2.5646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 801.400427][T29062] loop5: detected capacity change from 0 to 512 [ 801.408583][T29062] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 802.390721][T25671] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 803.112561][T29111] loop7: detected capacity change from 0 to 128 [ 803.136806][T29111] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 803.136924][T29111] FAT-fs (loop7): data area starts beyond volume (36 > 6) [ 803.136947][T29111] FAT-fs (loop7): Can't find a valid FAT filesystem [ 803.220736][T29121] loop2: detected capacity change from 0 to 4096 [ 803.222509][T29121] EXT4-fs: test_dummy_encryption option not supported [ 803.308204][T29121] tipc: Started in network mode [ 803.308231][T29121] tipc: Node identity ac14142f, cluster identity 4711 [ 803.308246][T29121] tipc: Enabling of bearer rejected, failed to enable media [ 803.314660][ T30] audit: type=1400 audit(1794140766.022:10106): avc: denied { getopt } for pid=29120 comm="syz.2.5665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 803.372709][T29132] loop7: detected capacity change from 0 to 512 [ 803.376158][T29132] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 803.661650][T29140] batadv_slave_0: entered promiscuous mode [ 803.680481][T29139] batadv_slave_0: left promiscuous mode [ 803.893327][T29144] loop4: detected capacity change from 0 to 512 [ 803.912321][T29144] EXT4-fs: inline encryption not supported [ 803.913034][T29144] EXT4-fs: test_dummy_encryption option not supported [ 803.964518][T29151] loop5: detected capacity change from 0 to 512 [ 803.974513][T29151] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.5674: corrupted in-inode xattr: invalid ea_ino [ 803.974569][T29151] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 803.974704][T29151] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.5674: couldn't read orphan inode 15 (err -117) [ 803.974738][T29151] loop5: lost filesystem error report for type 5 error -117 [ 803.975324][T29151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.032292][T29159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.032644][T29159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.057054][T22630] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.091884][T29169] loop5: detected capacity change from 0 to 512 [ 804.123652][T26518] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 804.138442][T29171] loop4: detected capacity change from 0 to 2048 [ 804.166168][T29171] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 804.166222][T29171] EXT4-fs warning (device loop4): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 804.166379][T29171] EXT4-fs (loop4): mount failed [ 804.244045][T29179] loop5: detected capacity change from 0 to 8192 [ 804.376112][T29201] loop5: detected capacity change from 0 to 4096 [ 804.378642][T29201] EXT4-fs: test_dummy_encryption option not supported [ 804.804930][ T30] audit: type=1400 audit(1794140767.512:10107): avc: denied { read } for pid=29215 comm="syz.5.5685" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 804.805045][ T30] audit: type=1400 audit(1794140767.512:10108): avc: denied { open } for pid=29215 comm="syz.5.5685" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 805.151186][T29218] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input1117 [ 805.545141][ T30] audit: type=1400 audit(1794140768.252:10109): avc: denied { bind } for pid=29244 comm="syz.4.5688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 805.545240][ T30] audit: type=1400 audit(1794140768.252:10110): avc: denied { name_bind } for pid=29244 comm="syz.4.5688" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 805.545279][ T30] audit: type=1400 audit(1794140768.252:10111): avc: denied { node_bind } for pid=29244 comm="syz.4.5688" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 806.696487][T29269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5697'. [ 806.801382][T29275] set_capacity_and_notify: 1 callbacks suppressed [ 806.801406][T29275] loop4: detected capacity change from 0 to 512 [ 807.356694][T29275] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.5699: inode has both inline data and extents flags [ 807.356816][T29275] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 807.357156][T29275] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.5699: couldn't read orphan inode 15 (err -117) [ 807.357217][T29275] loop4: lost filesystem error report for type 5 error -117 [ 807.372687][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 807.372720][ C1] EXT4-fs (loop4): initial error at time 1794140770: ext4_orphan_get:1404: inode 15 [ 807.372746][ C1] EXT4-fs (loop4): last error at time 1794140770: ext4_orphan_get:1409 [ 807.428400][T29275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.506203][ T30] audit: type=1400 audit(1794140770.212:10112): avc: denied { write } for pid=29273 comm="syz.4.5699" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 807.596304][T29275] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7952 vs 220 free clusters [ 807.643951][T26518] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.674067][T27210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.708289][T26518] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.746687][T29298] loop4: detected capacity change from 0 to 256 [ 807.817086][T29298] FAT-fs (loop4): codepage cp861 not found [ 807.836358][T26518] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.869179][T29313] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 807.869198][T29313] block device autoloading is deprecated and will be removed. [ 807.898155][ T30] audit: type=1400 audit(1794140770.602:10113): avc: denied { connect } for pid=29314 comm="syz.5.5709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 807.898186][T26518] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.905041][T29315] netlink: 'syz.7.5708': attribute type 1 has an invalid length. [ 807.905115][T29315] netlink: 'syz.7.5708': attribute type 2 has an invalid length. [ 808.073124][T29313] md: could not open device unknown-block(1,9). [ 808.073151][T29313] md: md_import_device returned -6 [ 808.162036][T29214] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 808.174068][T26518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.175337][T26518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.176300][T26518] bond0 (unregistering): Released all slaves [ 808.177407][T29321] tipc: Enabled bearer , priority 0 [ 808.187246][T29352] syzkaller0: entered promiscuous mode [ 808.187303][T29352] syzkaller0: entered allmulticast mode [ 808.211858][T29321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.212200][T29321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.269269][T29365] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5714'. [ 808.286278][T29321] tipc: Resetting bearer [ 808.305769][T29320] tipc: Resetting bearer [ 808.315833][T29320] tipc: Disabling bearer [ 808.676987][T29375] loop7: detected capacity change from 0 to 512 [ 808.722493][T29375] EXT4-fs (loop7): 1 truncate cleaned up [ 808.744829][T29375] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.796100][T26518] hsr_slave_0: left promiscuous mode [ 808.802203][T26518] hsr_slave_1: left promiscuous mode [ 808.814119][T26518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.814892][T26518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.824920][T26518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.824939][T26518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.134320][T26518] veth1_macvtap: left promiscuous mode [ 810.134361][T26518] veth0_macvtap: left promiscuous mode [ 810.134417][T26518] veth1_vlan: left promiscuous mode [ 810.134861][T26518] veth0_vlan: left promiscuous mode [ 810.278440][T19581] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.369694][ T30] audit: type=1400 audit(1794140773.052:10114): avc: denied { write } for pid=29378 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 810.369736][ T30] audit: type=1400 audit(1794140773.072:10115): avc: denied { write } for pid=29403 comm="syz.7.5722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 810.484717][ T30] audit: type=1400 audit(1794140773.182:10116): avc: denied { write } for pid=29408 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 810.927075][T29415] loop4: detected capacity change from 0 to 4096 [ 810.934146][T29415] EXT4-fs: test_dummy_encryption option not supported [ 811.360106][T26518] team0 (unregistering): Port device team_slave_1 removed [ 811.364721][T26518] team0 (unregistering): Port device team_slave_0 removed [ 811.455607][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 811.487392][T29307] rxe_eth0 speed is unknown, defaulting to 1000 [ 811.713932][T29488] SELinux: unknown common  [ 811.713953][T29488] SELinux: invalid class [ 811.714047][T29488] SELinux: failed to load policy [ 811.875176][T29307] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.875253][T29307] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.875379][T29307] bridge_slave_0: entered allmulticast mode [ 811.875904][T29307] bridge_slave_0: entered promiscuous mode [ 811.906629][T29307] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.906699][T29307] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.906954][T29307] bridge_slave_1: entered allmulticast mode [ 811.907537][T29307] bridge_slave_1: entered promiscuous mode [ 811.976557][T29307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 811.995650][T29307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.048542][T29307] team0: Port device team_slave_0 added [ 812.058033][T29307] team0: Port device team_slave_1 added [ 812.121916][T29307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.121931][T29307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.121963][T29307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.125186][T29307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.125204][T29307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.125250][T29307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.307544][T29307] hsr_slave_0: entered promiscuous mode [ 812.308082][T29307] hsr_slave_1: entered promiscuous mode [ 812.308332][T29307] debugfs: 'hsr0' already exists in 'hsr' [ 812.308344][T29307] Cannot create hsr debugfs directory [ 812.463893][ T30] audit: type=1400 audit(1794140775.172:10117): avc: denied { write } for pid=29649 comm="syz.7.5732" name="rdma_cm" dev="configfs" ino=2132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 812.514093][ T30] audit: type=1400 audit(1794140775.222:10118): avc: denied { write } for pid=29435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.636542][ T30] audit: type=1400 audit(1794140775.342:10119): avc: denied { write } for pid=29667 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.716532][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 812.728980][T29701] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 812.740701][ T30] audit: type=1400 audit(1794140775.452:10120): avc: denied { append } for pid=29692 comm="syz.5.5735" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 812.813444][T29307] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.847130][T29716] FAULT_INJECTION: forcing a failure. [ 812.847130][T29716] name failslab, interval 1, probability 0, space 0, times 0 [ 812.847231][T29716] CPU: 0 UID: 0 PID: 29716 Comm: syz.7.5736 Not tainted syzkaller #0 PREEMPT(lazy) [ 812.847268][T29716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 812.847298][T29716] Call Trace: [ 812.847366][T29716] [ 812.847376][T29716] __dump_stack+0x1d/0x30 [ 812.847406][T29716] dump_stack_lvl+0x95/0xd0 [ 812.847433][T29716] dump_stack+0x15/0x1b [ 812.847464][T29716] should_fail_ex+0x259/0x270 [ 812.847547][T29716] should_failslab+0x8c/0xb0 [ 812.847663][T29716] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 812.847700][T29716] ? alloc_inode+0x9a/0x170 [ 812.847773][T29716] ? alloc_inode+0x9a/0x170 [ 812.847808][T29716] alloc_inode+0x9a/0x170 [ 812.847843][T29716] new_inode+0x1d/0xe0 [ 812.847881][T29716] devpts_fill_super+0x1c9/0x2c0 [ 812.848000][T29716] ? __pfx_devpts_fill_super+0x10/0x10 [ 812.848059][T29716] get_tree_nodev+0x89/0x100 [ 812.848096][T29716] devpts_get_tree+0x1c/0x30 [ 812.848158][T29716] vfs_get_tree+0x57/0x1d0 [ 812.848273][T29716] do_new_mount+0x288/0x730 [ 812.848314][T29716] ? security_capable+0x7b/0x90 [ 812.848368][T29716] path_mount+0x4ad/0xba0 [ 812.848395][T29716] __se_sys_mount+0x28c/0x2e0 [ 812.848435][T29716] __x64_sys_mount+0x67/0x80 [ 812.848470][T29716] x64_sys_call+0xc3b/0x2550 [ 812.848560][T29716] do_syscall_64+0x112/0x360 [ 812.848588][T29716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.848651][T29716] RIP: 0033:0x7fa66193fb19 [ 812.848676][T29716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.848705][T29716] RSP: 002b:00007fa660397028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 812.848802][T29716] RAX: ffffffffffffffda RBX: 00007fa661bc5fa0 RCX: 00007fa66193fb19 [ 812.848820][T29716] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 812.848839][T29716] RBP: 00007fa6619d7b70 R08: 0000000000000000 R09: 0000000000000000 [ 812.848939][T29716] R10: 00000000022008d0 R11: 0000000000000246 R12: 0000000000000000 [ 812.848959][T29716] R13: 00007fa661bc6038 R14: 00007fa661bc5fa0 R15: 00007ffdcfb39528 [ 812.849012][T29716] [ 812.857535][T29716] devpts: Unable to alloc inode for ptmx node [ 812.927591][T29307] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.066777][T29307] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.183579][T29731] device-mapper: table: 252:7: multipath: unknown target type [ 813.183604][T29731] device-mapper: ioctl: error adding target to table [ 813.187946][T29307] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.332812][T29746] Set syz1 is full, maxelem 2 reached [ 813.358004][T29307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 813.367680][T29307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 813.373965][T29307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 813.384285][ T30] audit: type=1400 audit(1794140776.082:10121): avc: denied { write } for pid=29724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.408135][ T12] hid-generic 0000:0000:0000.0187: unknown main item tag 0x0 [ 813.411151][ T12] hid-generic 0000:0000:0000.0187: hidraw0: HID v0.00 Device [syz1] on syz0 [ 813.437091][T29307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 813.445566][T29307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 813.462485][T29307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 813.466092][T29307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 813.488909][T29307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 813.535337][T29771] fido_id[29771]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 813.552686][ T30] audit: type=1400 audit(1794140776.249:10122): avc: denied { write } for pid=29777 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.612625][T29307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.625372][T29307] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.636898][T26501] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.636960][T26501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.655089][T26508] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.655206][T26508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.716274][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 813.741253][T29800] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 813.916886][ T3944] hid-generic 0000:0000:0000.0188: unknown main item tag 0x0 [ 813.918007][ T3944] hid-generic 0000:0000:0000.0188: hidraw0: HID v0.00 Device [syz1] on syz0 [ 813.992903][T29307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.020551][T29834] fido_id[29834]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 814.067313][ T30] audit: type=1400 audit(1794140776.736:10123): avc: denied { write } for pid=29806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.188533][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 814.255539][T29860] loop2: detected capacity change from 0 to 4096 [ 814.255932][T29860] EXT4-fs: test_dummy_encryption option not supported [ 814.285293][T29307] veth0_vlan: entered promiscuous mode [ 814.303962][T29307] veth1_vlan: entered promiscuous mode [ 814.308540][T29873] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 814.347949][T29307] veth0_macvtap: entered promiscuous mode [ 814.351525][T29307] veth1_macvtap: entered promiscuous mode [ 814.373602][T29307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.395821][T29307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.429584][T26518] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.452160][T26518] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.452603][T26518] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.452644][T26518] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.603147][T29887] FAULT_INJECTION: forcing a failure. [ 814.603147][T29887] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 814.603240][T29887] CPU: 0 UID: 0 PID: 29887 Comm: syz.0.5705 Not tainted syzkaller #0 PREEMPT(lazy) [ 814.603275][T29887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 814.603294][T29887] Call Trace: [ 814.603303][T29887] [ 814.603314][T29887] __dump_stack+0x1d/0x30 [ 814.603352][T29887] dump_stack_lvl+0x95/0xd0 [ 814.603467][T29887] dump_stack+0x15/0x1b [ 814.603489][T29887] should_fail_ex+0x259/0x270 [ 814.603564][T29887] should_fail_alloc_page+0xf2/0x100 [ 814.603669][T29887] __alloc_frozen_pages_noprof+0x13b/0x3d0 [ 814.603704][T29887] alloc_pages_mpol+0xaf/0x1d0 [ 814.603740][T29887] vma_alloc_folio_noprof+0x1b3/0x300 [ 814.603801][T29887] handle_mm_fault+0x2576/0x3bd0 [ 814.603907][T29887] ? __rcu_read_unlock+0x4e/0x70 [ 814.604016][T29887] __get_user_pages+0xeaf/0x1930 [ 814.604057][T29887] __mm_populate+0x2a0/0x3c0 [ 814.604113][T29887] do_mlock+0x472/0x540 [ 814.604236][T29887] ? __se_sys_futex+0x2f6/0x370 [ 814.604260][T29887] ? xfd_validate_state+0x45/0xf0 [ 814.604290][T29887] ? restore_fpregs_from_fpstate+0x61/0x110 [ 814.604354][T29887] __x64_sys_mlock+0x4d/0x70 [ 814.604394][T29887] x64_sys_call+0x2232/0x2550 [ 814.604449][T29887] do_syscall_64+0x112/0x360 [ 814.604472][T29887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.604498][T29887] RIP: 0033:0x7f92e21bfb19 [ 814.604520][T29887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.604615][T29887] RSP: 002b:00007f92e0c0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 814.604639][T29887] RAX: ffffffffffffffda RBX: 00007f92e2445fa0 RCX: 00007f92e21bfb19 [ 814.604660][T29887] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 000020000009f000 [ 814.604730][T29887] RBP: 00007f92e2257b70 R08: 0000000000000000 R09: 0000000000000000 [ 814.604745][T29887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.604758][T29887] R13: 00007f92e2446038 R14: 00007f92e2445fa0 R15: 00007ffef6f75278 [ 814.604782][T29887] [ 815.202494][T29919] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 815.222370][T29917] batman_adv: batadv0: Adding interface: syz_tun [ 815.222391][T29917] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.222449][T29917] batman_adv: batadv0: Interface activated: syz_tun [ 815.374778][T29930] device-mapper: table: 252:8: raid: unknown target type [ 815.374800][T29930] device-mapper: ioctl: error adding target to table [ 815.408978][T29937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.410741][T29937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.434531][T29937] loop0: detected capacity change from 0 to 512 [ 815.460388][T29937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.460570][T29937] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 815.462632][T29936] syzkaller0: entered promiscuous mode [ 815.462659][T29936] syzkaller0: entered allmulticast mode [ 815.532276][T29956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5777'. [ 815.548803][T29956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5777'. [ 815.592288][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 815.592309][ T30] audit: type=1400 audit(1794140778.074:10125): avc: denied { read } for pid=29949 comm="syz.4.5775" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 815.706312][T29962] loop5: detected capacity change from 0 to 4096 [ 815.726643][T29962] EXT4-fs: test_dummy_encryption option not supported [ 815.822165][T29971] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 815.907549][T29964] Set syz1 is full, maxelem 6117 reached [ 816.997129][T29994] syzkaller0: entered promiscuous mode [ 816.997156][T29994] syzkaller0: entered allmulticast mode [ 817.170331][T30002] FAULT_INJECTION: forcing a failure. [ 817.170331][T30002] name failslab, interval 1, probability 0, space 0, times 0 [ 817.170363][T30002] CPU: 1 UID: 0 PID: 30002 Comm: syz.2.5790 Not tainted syzkaller #0 PREEMPT(lazy) [ 817.170445][T30002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 817.170464][T30002] Call Trace: [ 817.170474][T30002] [ 817.170485][T30002] __dump_stack+0x1d/0x30 [ 817.170512][T30002] dump_stack_lvl+0x95/0xd0 [ 817.170602][T30002] dump_stack+0x15/0x1b [ 817.170631][T30002] should_fail_ex+0x259/0x270 [ 817.170699][T30002] ? batadv_tvlv_handler_register+0xbd/0x2c0 [ 817.170764][T30002] should_failslab+0x8c/0xb0 [ 817.170814][T30002] ? __pfx_batadv_mcast_forw_tracker_tvlv_handler+0x10/0x10 [ 817.170841][T30002] __kmalloc_cache_noprof+0x5d/0x3e0 [ 817.170926][T30002] ? batadv_tvlv_handler_register+0xbd/0x2c0 [ 817.170963][T30002] ? __pfx_batadv_mcast_forw_tracker_tvlv_handler+0x10/0x10 [ 817.170998][T30002] batadv_tvlv_handler_register+0xbd/0x2c0 [ 817.171099][T30002] ? __pfx_batadv_mcast_forw_tracker_tvlv_handler+0x10/0x10 [ 817.171198][T30002] batadv_mcast_init+0x57/0x110 [ 817.171218][T30002] batadv_mesh_init+0x336/0x410 [ 817.171252][T30002] batadv_meshif_init_late+0x3e1/0x460 [ 817.171320][T30002] register_netdevice+0x234/0x13f0 [ 817.171350][T30002] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 817.171394][T30002] batadv_meshif_newlink+0x7d/0x90 [ 817.171513][T30002] rtnl_newlink_create+0x1e4/0x4a0 [ 817.171548][T30002] ? security_capable+0x7b/0x90 [ 817.171584][T30002] ? netlink_ns_capable+0x86/0xa0 [ 817.171654][T30002] rtnl_newlink+0x1255/0x1510 [ 817.171718][T30002] ? _raw_spin_unlock+0x9/0x30 [ 817.171749][T30002] ? finish_task_switch+0x121/0x340 [ 817.171845][T30002] ? __schedule+0x7a9/0xd40 [ 817.171915][T30002] ? __rcu_read_unlock+0x4e/0x70 [ 817.171952][T30002] ? preempt_schedule_irq+0x2c/0x50 [ 817.171986][T30002] ? irqentry_exit_to_kernel_mode_preempt+0x63/0x80 [ 817.172018][T30002] ? irqentry_exit+0x7d/0x610 [ 817.172062][T30002] ? _raw_spin_lock+0x53/0xa0 [ 817.172089][T30002] ? __list_del_entry_valid_or_report+0x65/0x130 [ 817.172118][T30002] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 817.172150][T30002] ? rcu_preempt_deferred_qs_irqrestore+0x3b6/0x5a0 [ 817.172264][T30002] ? __pfx_rtnl_newlink+0x10/0x10 [ 817.172298][T30002] ? rcu_read_unlock_special+0xa0/0x1f0 [ 817.172325][T30002] ? __pfx_rtnl_newlink+0x10/0x10 [ 817.172438][T30002] ? __pfx_rtnl_newlink+0x10/0x10 [ 817.172544][T30002] rtnetlink_rcv_msg+0x64b/0x720 [ 817.172583][T30002] ? preempt_schedule_irq+0x2c/0x50 [ 817.172651][T30002] ? irqentry_exit_to_kernel_mode_preempt+0x63/0x80 [ 817.172685][T30002] netlink_rcv_skb+0x11e/0x220 [ 817.172712][T30002] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 817.172773][T30002] rtnetlink_rcv+0x1c/0x30 [ 817.172811][T30002] netlink_unicast+0x665/0x740 [ 817.172860][T30002] netlink_sendmsg+0x5ef/0x740 [ 817.172892][T30002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.172915][T30002] ____sys_sendmsg+0x54a/0x590 [ 817.173015][T30002] ___sys_sendmsg+0x195/0x1e0 [ 817.173052][T30002] __x64_sys_sendmsg+0xd4/0x160 [ 817.173087][T30002] x64_sys_call+0x22ab/0x2550 [ 817.173193][T30002] do_syscall_64+0x112/0x360 [ 817.173214][T30002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.173237][T30002] RIP: 0033:0x7f6cdf46fb19 [ 817.173287][T30002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.173312][T30002] RSP: 002b:00007f6cddebf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 817.173409][T30002] RAX: ffffffffffffffda RBX: 00007f6cdf6f5fa0 RCX: 00007f6cdf46fb19 [ 817.173428][T30002] RDX: 0000000020000840 RSI: 0000200000000300 RDI: 0000000000000007 [ 817.173447][T30002] RBP: 00007f6cdf507b70 R08: 0000000000000000 R09: 0000000000000000 [ 817.173462][T30002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.173480][T30002] R13: 00007f6cdf6f6038 R14: 00007f6cdf6f5fa0 R15: 00007ffdf9c30368 [ 817.173507][T30002] [ 817.662584][T30002] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 818.048965][T30008] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 818.109624][T30028] loop2: detected capacity change from 0 to 4096 [ 818.110163][T30028] EXT4-fs: test_dummy_encryption option not supported [ 818.207531][T30034] loop7: detected capacity change from 0 to 512 [ 818.268091][T30034] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 818.978337][T30048] syzkaller0: entered promiscuous mode [ 818.978370][T30048] syzkaller0: entered allmulticast mode [ 819.005816][T26527] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 819.033520][ T2980] ================================================================== [ 819.033571][ T2980] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 819.033628][ T2980] [ 819.033635][ T2980] write to 0xffff888105bbb570 of 8 bytes by task 28714 on cpu 1: [ 819.033654][ T2980] dentry_unlink_inode+0x65/0x290 [ 819.033693][ T2980] d_delete+0x164/0x180 [ 819.033731][ T2980] d_delete_notify+0x32/0x100 [ 819.033750][ T2980] vfs_unlink+0x287/0x4a0 [ 819.033768][ T2980] filename_unlinkat+0x1db/0x400 [ 819.033790][ T2980] __se_sys_unlink+0x2b/0xe0 [ 819.033810][ T2980] __x64_sys_unlink+0x1f/0x30 [ 819.033835][ T2980] x64_sys_call+0x18ee/0x2550 [ 819.033870][ T2980] do_syscall_64+0x112/0x360 [ 819.033894][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.033924][ T2980] [ 819.033930][ T2980] read to 0xffff888105bbb570 of 8 bytes by task 2980 on cpu 0: [ 819.033950][ T2980] step_into_slowpath+0x12c/0x4c0 [ 819.033977][ T2980] path_lookupat+0x2eb/0x4c0 [ 819.034010][ T2980] filename_lookup+0x18f/0x390 [ 819.034042][ T2980] do_readlinkat+0x74/0x2f0 [ 819.034076][ T2980] __x64_sys_readlink+0x47/0x60 [ 819.034103][ T2980] x64_sys_call+0x1d41/0x2550 [ 819.034274][ T2980] do_syscall_64+0x112/0x360 [ 819.034300][ T2980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.034330][ T2980] [ 819.034343][ T2980] value changed: 0xffff88811b6bb170 -> 0x0000000000000000 [ 819.034376][ T2980] [ 819.034381][ T2980] Reported by Kernel Concurrency Sanitizer on: [ 819.034396][ T2980] CPU: 0 UID: 0 PID: 2980 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 819.034425][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 819.034441][ T2980] ================================================================== [ 819.070274][T30056] ip_tables: iptables: counters copy to user failed while replacing table [ 819.702106][T29307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.597236][ T30] audit: type=1400 audit(1794140787.526:10126): avc: denied { write } for pid=30063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 825.637650][ T30] audit: type=1400 audit(1794140787.563:10127): avc: denied { write } for pid=30074 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 825.738121][ T30] audit: type=1400 audit(1794140787.657:10128): avc: denied { write } for pid=30077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 825.775897][ T30] audit: type=1400 audit(1794140787.694:10129): avc: denied { write } for pid=30088 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 825.929295][ T30] audit: type=1400 audit(1794140787.835:10130): avc: denied { write } for pid=30091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 825.970960][ T30] audit: type=1400 audit(1794140787.881:10131): avc: denied { write } for pid=30102 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 826.513656][ T30] audit: type=1400 audit(1794140788.377:10132): avc: denied { write } for pid=30105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 826.548983][ T30] audit: type=1400 audit(1794140788.415:10133): avc: denied { write } for pid=30116 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1