last executing test programs: 6.718823173s ago: executing program 3 (id=2514): getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'veth0_to_bridge\x00'}}, 0x1e) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/131, 0x83}, {0x0}], 0x2}, 0xffffff34}], 0x1, 0x62, 0x0) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) socket(0x2, 0x80805, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000050) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x1, &(0x7f0000000c80)={[{@grpjquota_path={'grpjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@jqfmt_vfsv0}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") timer_create(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f000001fc00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1814011, 0x0, 0x40, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) mount(&(0x7f0000000140)=@sr0, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000880)='xfs\x00', 0x800800, &(0x7f00000008c0)='6\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "fdffffffffffffff"}, 0x28) sendmsg$inet(r3, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8e0bdeb9"], 0x10}, 0x40) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x600, 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f0000000240)={0x3, 0x10100001dfffe3, 0x0, 0x6}) 6.583836125s ago: executing program 4 (id=2516): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000004c0)=@in6={0x21, 0x0, 0xa, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) 6.496106596s ago: executing program 4 (id=2518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026c170000400000027000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2048050}, 0x880) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x8015, 0x0, 'ovf\x00', 0x1, 0x8, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0xb, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0xffffa7a5, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, 0x0, 0x0) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) 6.166365069s ago: executing program 3 (id=2522): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x141a82, 0x0) sendfile(r4, r4, 0x0, 0x3) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x3, 0x8, 0x2, 0x0, 0x2, 0x5, 0xc}, &(0x7f00000002c0)=0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r6], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48010000060a0b04000000000000000002000000300004802c000180090001007866726d000000001c0002800800024000000000080001400000001105000300000000000900010073797a30000000000900020073797a3200000000ec0007"], 0x170}, 0x1, 0x0, 0x0, 0x8800}, 0xfc851d372f3ac962) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) 6.055246741s ago: executing program 3 (id=2525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$inet6(0xa, 0x5, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0xad, 0xd, 0x2, 0xb7, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xc, 0x100, 0xdd}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x1], &(0x7f0000000700)=[{0x4, 0x4, 0x9, 0x3}, {0x1, 0x5, 0xe, 0x4}], 0x10, 0x128}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(0xffffffffffffffff, 0xfffefffa) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x102020, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 5.902607413s ago: executing program 3 (id=2527): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[{0x10, 0x29, 0x37}], 0x10}}], 0x1, 0x4000000) 4.775358605s ago: executing program 3 (id=2528): socket$nl_route(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000001040), 0x80, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x6c0ec0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="12000000000000002900000036"], 0x250}, 0x0) 4.703698986s ago: executing program 4 (id=2529): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d004892e822a6abc02ad2602a5ad6f7007ea60864160af365935cfaea3f49d8df1931a0e64ffc4c78029ee517d34460bc06000000938037e70e457ae2bb24ef66", 0x55}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) dup(0xffffffffffffffff) syz_io_uring_complete(0x0, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0xd9, &(0x7f00000005c0)=""/217, 0x41000, 0x10, '\x00', 0x0, 0x25, r0, 0x8, 0xfffffffffffffffe, 0x0, 0x10, &(0x7f0000000240)={0x3, 0xa, 0x89b, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x10, 0x6d}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d004892e822a6abc02ad2602a5ad6f7007ea60864160af365935cfaea3f49d8df1931a0e64ffc4c78029ee517d34460bc06000000938037e70e457ae2bb24ef66", 0x55}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) dup(0xffffffffffffffff) (async) syz_io_uring_complete(0x0, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0xd9, &(0x7f00000005c0)=""/217, 0x41000, 0x10, '\x00', 0x0, 0x25, r0, 0x8, 0xfffffffffffffffe, 0x0, 0x10, &(0x7f0000000240)={0x3, 0xa, 0x89b, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x10, 0x6d}, 0x94) (async) 4.635286287s ago: executing program 4 (id=2530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05a500000004000000ff0f0000072e2cd0e9873d0fe888c21d94974ddc9ff31ba363f41dd531369f4b6dc0f23d708e1b2daaffc473b5e878494fd3ff7188d49910f2825c294f302278428bcff6fc23b7315bd0347cee19c7ffc40fc26aa564d42854356510320f3c48b41e768f76b87276384b21cb81e4"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0xb, 0x9, 0x81, 0x4, 0x0, 0x4, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000700), 0x2}, 0x2800, 0xe, 0xfffffd97, 0x3, 0xf0a, 0x4, 0x77c3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x7, r1, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e6f3d9f74c9854a2d8b0fbdc5b43f03a41b0bdd3f719f2fd4f4005086f708d90a006203f40d691d4858fe3908c373681317ec441dfaf95adc1c8d7f675485e781b0957f32d00ea1a8db44b2bd9cfc8d5ec4352515f4225a30cf8cb4eaab962ee2eb3ef021793823de860b21ca37f003128c11244dd179ba", @ANYRESHEX=r3, @ANYBLOB=',\x00']) r4 = dup3(r2, r3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5, 0xffffffffffffffff, 0x2000000}, 0xc) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000340)={{0xa, 0x4e20, 0x8000, @empty, 0x6}, {0xa, 0x4e22, 0xf, @mcast2, 0x1}, 0x0, {[0xd08b, 0x9, 0x4, 0x6, 0x6008948e, 0x6, 0x5, 0x4]}}, 0x5c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x5, &(0x7f0000000600)={0x0, 0x6, 0x4, @thr={&(0x7f0000000500)="ab805540f0c371d11c3f213d0b92d9148561a5c2c2a1aa54150541b00e0e2d0b7492f9c2e259ab6258a47a1c302023a9a630aac55e29f97c392fc55fe0ee9cc7cc62542eb51809368463275b4ca2dc297aeba8246a15eda49d3b7e83248196fa9345892cf08623b7c0b94d6221b8345aa12835be9f907587003cc8c1ec6b5c2da01b37a312990f432fb3dbea4ada34941e876f42a67f57f302b27a7f2c", &(0x7f00000005c0)="92406fc089f7aafe654001408d9a03f384e3164740ec2ab92c18817a6516badf3d6dab62563c14f1719625516a94fe5904b7da6a9e62d1c7aa2a2fd7a310d1"}}, &(0x7f0000000640)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000229bd7000ffdbdf251b0000000800228004000080070021006161000006002100610000000700210070f847e71b9101f01a6fb8cf888dec626200000500920006002100610000000400cc000800010004000000080001002800000000000000e60286c5e349b47e"], 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000041) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r4) bind$inet6(r10, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r10, &(0x7f0000001440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/19, 0x13}, 0xc}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r10, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000940)=r3) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) 4.525824238s ago: executing program 4 (id=2534): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0x9}, 0x106200, 0x10004, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) (fail_nth: 6) 3.849538386s ago: executing program 4 (id=2536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026c170000400000027000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2048050}, 0x880) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x8015, 0x0, 'ovf\x00', 0x1, 0x8, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0xb, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0xffffa7a5, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, 0x0, 0x0) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) 3.688057068s ago: executing program 3 (id=2539): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026c170000400000027000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2048050}, 0x880) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x8015, 0x0, 'ovf\x00', 0x1, 0x8, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0xb, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0xffffa7a5, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, 0x0, 0x0) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) 3.571812009s ago: executing program 0 (id=2541): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r0, &(0x7f0000000000)='\\-\x00', 0x80000, &(0x7f0000000040)={@_ha_fsid={[0x2, 0x1597]}, {0x5, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="080029bd7000fddbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0a000600080211000000000005008a00040000000a0006000802110000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x4080) keyctl$invalidate(0x15, r7) keyctl$read(0xb, r7, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6b09074f00302901fc020000000000000000000000000004ffc5"], 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r4, 0x40786e88, &(0x7f0000000400)={{&(0x7f00000000c0)=[{0x0, 0x2, 0x81b, {0x3, 0xffffffffffffff63}, 0xc, 0x5a2, 0x4c10c0d5}, {0x2, 0x4, 0xfffffffffffffff9, {0x1, 0x7}, 0x1, 0xa3d5, 0x8}, {0x4, 0x61, 0x63be7e4f, {0x1, 0x3}, 0x1091, 0x5846, 0x4}, {0x40, 0x10001, 0x2, {0xab4e, 0xfffffffffffffff7}, 0x1, 0x3, 0x5}, {0x80000001, 0x0, 0x3df6e32f, {0x4, 0x1}, 0x4, 0x6, 0x1f}, {0x1000, 0x6, 0x307, {0x4, 0x7}, 0x5, 0x80000001, 0x3}, {0xc, 0x1ff, 0x7, {0x4, 0x1}, 0x6, 0xe2, 0x7}, {0x173, 0x7fff, 0x1, {0x6, 0x3}, 0x3, 0xffffffffffffffff, 0x7}], 0x8, 0x40, 0x5, 0x1}, {&(0x7f00000002c0)=[{0xe1, 0xfffffffffffffffc}, {0xe0c5, 0xfffffffffffffff0}, {0x6, 0xfffffffffffffffc}], 0x3, 0x10, 0xfffe, 0x1}, {&(0x7f0000000300)=[0x7, 0x8, 0x9, 0x0, 0x8, 0x6, 0xfff], 0x7, 0x8, 0x8, 0x8113}, {0x0, 0x0, 0x28, 0x7, 0xbe73}, {&(0x7f0000000980)=[0x8], 0x1, 0x8, 0x6, 0x4}}) semctl$IPC_RMID(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.661911169s ago: executing program 0 (id=2545): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x180, 0x0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x15, 0x0, 0xff, 0x3}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a", 0x1f}], 0x1) read(r0, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) socketpair$unix(0x1, 0x2, 0x0, 0x0) getgroups(0x4, &(0x7f0000000000)=[0xee00, 0xee01, 0xee00, 0xffffffffffffffff]) setresgid(0xee00, 0xee01, r4) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) socket$kcm(0x2, 0x5, 0x106) r5 = socket$netlink(0x10, 0x3, 0x9) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000140)=""/85, 0x55}], 0x1, 0xe, 0xc0000000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000001c0)) 2.270650734s ago: executing program 2 (id=2546): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x1, 0x70bd2c, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157970503, 0x20c0}, [@IFLA_LINKMODE={0x5, 0x11, 0x4}, @IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xe6, 0x926, 0x6, 0x300}}]}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000010) 2.158125465s ago: executing program 0 (id=2547): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="05000000000000007111b100000000008510000002000000850000000000000095000000000000009500a50500000000d0f1e26684f1e8aeea09a4587ba9e719eca5697c6bd018d19e83f37272bbce26998db81887da"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/53, 0x35}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setregid(0xffffffffffffffff, 0xee00) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x57c8, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000805a, 0x3}) socket$inet_sctp(0x2, 0x1, 0x84) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x100000, 0x0, 0x8000, 0x7, 0x2, 0x8, 0x4, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a02, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x3c8, 0x2f8, 0x2f8, 0x0, 0x3c8, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [0x0, 0xffffffff], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c8}}, {{@ipv6={@private0, @remote, [0xff000000], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r2 = socket$can_raw(0x1d, 0x3, 0x1) futex(0xfffffffffffffffd, 0x80000000000b, 0x1000004, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x2, 0x7, 0x0, 0x3b604f5b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.006292957s ago: executing program 2 (id=2548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x404e24}, 0x2a) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x8, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, 0x0, 0x0) read(r4, &(0x7f0000000140)=""/105, 0x69) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4054) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 1.829872079s ago: executing program 1 (id=2549): socket$nl_route(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000001040), 0x80, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x6c0ec0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="12000000000000002900000036"], 0x250}, 0x0) 1.208420056s ago: executing program 0 (id=2550): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)={0x10, 0x1413, 0x1, 0x70bd2d}, 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) preadv(r3, &(0x7f00000032c0)=[{&(0x7f0000002f00)=""/154, 0x9a}], 0x1, 0x7, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}, 0xab09}], 0x1, 0x100, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f0000000100), 0xa}, 0x4090, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a834"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d18d"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmmsg(r6, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x60, 0x1403, 0x1, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x42044045}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_pidfd_open(0x0, 0x0) fsetxattr$trusted_overlay_nlink(r7, &(0x7f00000018c0), 0x0, 0x0, 0x0) 916.429499ms ago: executing program 2 (id=2551): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtclass={0x24, 0x28, 0x2, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0xa, 0xffe0}, {0xa, 0x5}}}, 0x24}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f00000000c0)=@udp6=r1, 0x1}, 0x20) recvfrom(r1, &(0x7f00000004c0)=""/182, 0xb6, 0x0, 0x0, 0x0) shutdown(r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_matches\x00') pread64(r2, &(0x7f0000000080)=""/102355, 0x1bbc, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001e00)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000e00)="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", 0x1000, r2}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0x3}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)={0x490102, 0x104, 0x13}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000005580)={0x0, 0x0, &(0x7f0000005540)={&(0x7f0000004e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4020080}, 0x4c000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x470, 0x98, 0x340, 0x0, 0x288, 0x1f0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xff, 'macvlan0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x2, 0x2, 0x71}, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0x0, 0xffffffff, 0xb06f5130e5eca774], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], @ipv4=@loopback, [0xff000000, 0xffffff00, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0x7f800000, 0xffffffff, 0xffffffff], 0x1, 0x5, 0x3a, 0x4e20, 0x4e22, 0x4e23, 0x4e20, 0x400}, 0xc0, 0x100}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x4, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0xffffff00, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x11, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x10a, &(0x7f0000000640)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x28, 0x4, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local, {[@timestamp_prespec={0x44, 0x34, 0xf8, 0x3, 0xc, [{@remote, 0x9}, {@multicast2, 0x77d8d49a}, {@empty, 0x3}, {@multicast2, 0x401}, {@local, 0x9}, {@multicast1, 0x5}]}, @timestamp={0x44, 0x1c, 0xc4, 0x0, 0x6, [0x81, 0x1600000, 0x73f, 0x7f, 0x7, 0xe7]}, @timestamp_addr={0x44, 0x3c, 0x91, 0x1, 0x7, [{@empty, 0x3}, {@multicast1, 0x8}, {@loopback, 0x7ff}, {@remote, 0x80000001}, {@multicast1, 0x7fff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x11}, 0xa}]}]}}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@loopback, @rand_addr=0x64010101, @loopback, @multicast2]}]}}}}}}}, 0x0) socket$inet6(0xa, 0x2, 0x3a) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 893.226139ms ago: executing program 0 (id=2552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x9, 0x2, 0xf}, {0xfff7, 0x0, 0x1}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x80, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x38}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xf3}]}, 0x80}}, 0x8800) r1 = socket$inet6(0xa, 0x80002, 0x0) close(r1) listen(0xffffffffffffffff, 0x3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) fsopen(0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setgid(0xffffffffffffffff) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xa00) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000080)={{}, {0xe}, 0x8d80, 0x3}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x8, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x300000000000000, 0x0, 0x44004}, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r5, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000001c0)=@rnullb, r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) 850.00743ms ago: executing program 1 (id=2553): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x2c, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1b101}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, 0x0, 0xfebc) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x1) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r4 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) ptrace(0x4206, r4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x6}}, 0x20) wait4(r4, 0x0, 0x8, &(0x7f0000000380)) 710.405121ms ago: executing program 2 (id=2554): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xe382) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20028, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x100000, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f0000000340)={@dev={0xac, 0x14, 0x14, 0x35}, @loopback, 0xffffffffffffffff, "82da4ea5877cb4dbd69e88433965437724f6380747c0ddc203d19e64258b7bc4", 0xfffffff5, 0xfffff75d, 0x4, 0x7fffffff}, 0x3c) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) io_setup(0x6, 0x0) mq_notify(r7, &(0x7f0000000180)={0x0, 0x3e, 0x0, @thr={0x0, 0x0}}) ptrace$setopts(0x4200, r0, 0x3, 0x100002) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r8, 0x0, 0x8000, 0x8fff9) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x20) fallocate(r9, 0x8, 0x4000, 0x10000) 533.400983ms ago: executing program 1 (id=2555): semop(0x0, 0x0, 0x0) r0 = semget(0x2, 0x2, 0xb10) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000100)=""/156) mount$tmpfs(0x0, 0x0, 0x0, 0x22c6c3b, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0xa, 0x4e25, 0x0, @private1, 0x40}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000cc0)="18", 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x61}, 0x1c, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet_udp(0x2, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x1c3040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(0x0, 0x104) open$dir(0x0, 0xc402, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) select(0x406f205456671cf9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5000000}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xdb1f}, 0x8000, 0x9, 0x6, 0x3, 0xfff, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x600000000400000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$inet(0x2, 0x1, 0x0) socket(0x8000000010, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000001800)=[{{&(0x7f0000001400)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80, 0x0, 0x22}}], 0x1, 0x20084081) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r6, 0x2219, 0x751d, 0x3b, 0x0, 0x0) 509.859984ms ago: executing program 2 (id=2556): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x101, 0x8, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmdt(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x804810, &(0x7f0000000b80)={[{@init_itable}, {@usrjquota}, {@nobh}, {@resuid}]}, 0x26, 0x756, &(0x7f00000002c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000006800010101000000fcffff7f00000000000000000c000200010000000400000008000100"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 412.140395ms ago: executing program 0 (id=2557): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x401, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x1736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b70300000008000085000000a0000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) madvise(&(0x7f000010c000/0x4000)=nil, 0x4000, 0x0) mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x2000, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f00001a3000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/7, 0x7, 0x1, &(0x7f0000000140)=""/75, 0x4b}, &(0x7f0000000200)=0x40) r6 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r6, 0xffffffffffffffff, 0x1, 0x1, 0x9, 0xa) ioctl$USBDEVFS_GET_CAPABILITIES(r6, 0x8004551a, &(0x7f0000000240)) 311.458196ms ago: executing program 1 (id=2558): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0xc8, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000), 0xfdef) 268.679667ms ago: executing program 1 (id=2559): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x2c, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1b101}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, 0x0, 0xfebc) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x1) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r4 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) ptrace(0x4206, r4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r6, 0x0, 0x2, 0x4000}}, 0x20) wait4(r4, 0x0, 0x8, &(0x7f0000000380)) 60.913289ms ago: executing program 2 (id=2560): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$uid(0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet(0x2, 0x2, 0x1) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000140)=ANY=[], 0x3, 0x805, &(0x7f0000001580)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1fd) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002e40)=@bpf_tracing={0x1a, 0x20, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff}, [@call={0x85, 0x0, 0x0, 0x5b}, @call={0x85, 0x0, 0x0, 0x9b}, @call={0x85, 0x0, 0x0, 0x2e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4d6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000001dc0)=""/4096, 0x41100, 0x11, '\x00', 0x0, 0x17, r6, 0x8, &(0x7f0000002dc0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2bb18, r3, 0x0, &(0x7f0000002e00)=[r6, r6, r6, r6, r6, r6, r6], 0x0, 0x10, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) unshare(0x44040200) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 0s ago: executing program 1 (id=2561): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x404e24}, 0x2a) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x8, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, 0x0, 0x0) read(r4, &(0x7f0000000140)=""/105, 0x69) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4054) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) kernel console output (not intermixed with test programs): ntext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 403.893359][T10281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2070'. [ 403.909450][T10281] syz0: rxe_newlink: already configured on xfrm0 [ 403.911811][T10293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2072'. [ 404.057149][T10296] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 404.678890][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.700517][T10298] loop2: detected capacity change from 0 to 128 [ 404.712111][T10298] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 404.739540][T10298] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.752384][T10298] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2074'. [ 404.776441][ T28] audit: type=1400 audit(1778263373.616:1960): avc: denied { write } for pid=10297 comm="syz.2.2074" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 404.953955][T10302] loop0: detected capacity change from 0 to 1024 [ 405.287674][T10302] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 405.301093][T10302] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 405.313001][T10302] EXT4-fs error (device loop0): ext4_get_journal_inode:5896: comm syz.0.2075: inode #1: comm syz.0.2075: iget: illegal inode # [ 405.326932][T10302] loop0: lost filesystem error report for type 5 error -117 [ 405.330161][T10302] EXT4-fs (loop0): no journal found [ 405.338077][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 405.338171][ C0] EXT4-fs (loop0): initial error at time 1778263374: ext4_get_journal_inode:5896 [ 405.338516][ C0] EXT4-fs (loop0): last error at time 1778263374: ext4_get_journal_inode:5896 [ 405.371378][T10302] EXT4-fs (loop0): can't get journal size [ 405.393615][T10302] EXT4-fs (loop0): failed to initialize system zone (-22) [ 405.402025][T10302] EXT4-fs (loop0): mount failed [ 405.420617][T10313] hub 8-0:1.0: USB hub found [ 405.425299][T10313] hub 8-0:1.0: 8 ports detected [ 405.439670][T10313] netlink: 'syz.3.2076': attribute type 36 has an invalid length. [ 405.452053][T10313] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 405.461921][T10313] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 405.479572][T10313] netlink: 'syz.3.2076': attribute type 10 has an invalid length. [ 405.488151][T10313] team0: Device ipvlan0 failed to register rx_handler [ 405.558553][T10302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2075'. [ 405.915924][T10320] loop4: detected capacity change from 0 to 1024 [ 405.927847][ T3302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 405.937831][T10320] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 405.944028][T10321] loop0: detected capacity change from 0 to 1024 [ 405.947885][T10320] System zones: 0-1, 3-36 [ 405.973834][T10321] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 405.983608][T10324] loop3: detected capacity change from 0 to 128 [ 405.983628][T10320] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2078: bad orphan inode 134217728 [ 405.983648][T10320] loop4: lost filesystem error report for type 5 error -117 [ 406.008539][T10321] System zones: 0-1, 3-36 [ 406.027857][T10321] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.2079: bad orphan inode 134217728 [ 406.028686][T10320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.049543][T10330] loop2: detected capacity change from 0 to 128 [ 406.062185][T10321] loop0: lost filesystem error report for type 5 error -117 [ 406.066234][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 406.068280][T10324] bio_check_eod: 76 callbacks suppressed [ 406.068318][T10324] syz.3.2081: attempt to access beyond end of device [ 406.068318][T10324] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 406.073563][ C0] EXT4-fs (loop0): initial error at time 1778263374: ext4_orphan_get:1423 [ 406.107506][ C0] EXT4-fs (loop0): last error at time 1778263374: ext4_orphan_get:1423 [ 406.113348][T10321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.129117][T10324] syz.3.2081: attempt to access beyond end of device [ 406.129117][T10324] loop3: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 406.145378][ T28] audit: type=1400 audit(1778263374.956:1961): avc: denied { write } for pid=10316 comm="syz.4.2078" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 406.166451][T10324] syz.3.2081: attempt to access beyond end of device [ 406.166451][T10324] loop3: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 406.190920][T10330] syz.2.2080: attempt to access beyond end of device [ 406.190920][T10330] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 406.214233][T10319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2079'. [ 406.226151][T10330] syz.2.2080: attempt to access beyond end of device [ 406.226151][T10330] loop2: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 406.242482][T10319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2079'. [ 406.253978][T10324] buffer_io_error: 46 callbacks suppressed [ 406.253992][T10324] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 406.270294][T10330] syz.2.2080: attempt to access beyond end of device [ 406.270294][T10330] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 406.295289][T10330] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 406.295778][ T28] audit: type=1400 audit(1778263375.136:1962): avc: denied { write } for pid=10317 comm="syz.0.2079" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 406.508910][T10338] syzkaller0: entered promiscuous mode [ 406.514629][T10338] syzkaller0: entered allmulticast mode [ 406.593672][T10343] loop3: detected capacity change from 0 to 512 [ 406.629148][T10343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.652520][ T28] audit: type=1400 audit(1778263375.496:1963): avc: denied { write } for pid=10335 comm="syz.3.2084" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 406.782377][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.920815][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.957185][T10355] loop4: detected capacity change from 0 to 1024 [ 407.164164][T10355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.192660][T10356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.206402][T10356] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.252257][ T28] audit: type=1400 audit(1778263376.066:1964): avc: denied { write } for pid=10349 comm="syz.0.2088" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 407.401367][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.458485][ T28] audit: type=1400 audit(1778263376.206:1965): avc: denied { write } for pid=10354 comm="syz.4.2089" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 407.898488][T10365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.097752][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.107393][ T28] audit: type=1400 audit(1778263376.936:1966): avc: denied { write } for pid=10364 comm="syz.2.2093" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.568252][T10372] set_capacity_and_notify: 2 callbacks suppressed [ 408.568267][T10372] loop3: detected capacity change from 0 to 512 [ 408.645567][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.659213][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.690604][T10372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.703986][T10372] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.760814][ T28] audit: type=1400 audit(1778263377.566:1967): avc: denied { write } for pid=10369 comm="syz.3.2091" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 409.450720][T10378] loop0: detected capacity change from 0 to 512 [ 409.478022][T10378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.509201][ T28] audit: type=1400 audit(1778263378.356:1968): avc: denied { write } for pid=10377 comm="syz.0.2096" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 410.138558][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.189797][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.251605][T10394] loop3: detected capacity change from 0 to 1024 [ 410.267991][T10394] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 410.281032][T10394] System zones: 0-1, 3-36 [ 410.286472][T10394] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2098: bad orphan inode 134217728 [ 410.301629][T10394] loop3: lost filesystem error report for type 5 error -117 [ 410.303562][T10394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.432754][T10404] loop0: detected capacity change from 0 to 128 [ 410.480908][T10391] __nla_validate_parse: 1 callbacks suppressed [ 410.481055][T10391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2098'. [ 410.591566][T10391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2098'. [ 410.644400][ T28] audit: type=1400 audit(1778263379.486:1969): avc: denied { write } for pid=10390 comm="syz.3.2098" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 411.067804][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.174488][T10419] loop2: detected capacity change from 0 to 128 [ 411.367506][T10423] loop3: detected capacity change from 0 to 1024 [ 411.384030][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2107'. [ 411.443528][T10421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2107'. [ 411.485162][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2107'. [ 411.498419][T10421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2107'. [ 411.504058][T10423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.532358][ T28] audit: type=1400 audit(1778263380.376:1970): avc: denied { write } for pid=10422 comm="syz.3.2106" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 411.937011][T10430] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2108'. [ 411.986752][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2109'. [ 412.007573][T10439] netlink: 'syz.1.2110': attribute type 36 has an invalid length. [ 412.023664][T10439] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 412.033722][T10439] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 412.051828][T10439] netlink: 'syz.1.2110': attribute type 10 has an invalid length. [ 412.062281][T10439] team0: Device ipvlan0 failed to register rx_handler [ 412.179116][T10442] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 412.387001][T10429] loop0: detected capacity change from 0 to 512 [ 412.427499][T10429] EXT4-fs: Ignoring removed nomblk_io_submit option [ 412.542913][T10429] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 412.563514][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2108'. [ 412.789563][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.499774][T10464] netlink: 'syz.1.2117': attribute type 36 has an invalid length. [ 413.511080][T10464] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 413.521011][T10464] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 413.535042][T10464] netlink: 'syz.1.2117': attribute type 10 has an invalid length. [ 413.544609][T10464] team0: Device ipvlan0 failed to register rx_handler [ 413.556959][T10465] netlink: 'syz.2.2116': attribute type 10 has an invalid length. [ 413.566304][T10465] team0: Device ipvlan0 failed to register rx_handler [ 413.750029][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2119'. [ 414.054335][T10471] loop4: detected capacity change from 0 to 512 [ 414.079561][T10471] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 414.094669][T10471] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 414.114063][T10471] EXT4-fs (loop4): mount failed [ 414.207044][T10481] loop0: detected capacity change from 0 to 1024 [ 414.223619][T10483] loop3: detected capacity change from 0 to 1024 [ 414.297287][T10481] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 414.305728][T10483] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 414.314509][T10481] System zones: 0-1, 3-36 [ 414.324663][T10483] System zones: 0-1, 3-36 [ 414.330075][T10481] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.2123: bad orphan inode 134217728 [ 414.347101][T10481] loop0: lost filesystem error report for type 5 error -117 [ 414.355436][T10481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.372763][T10483] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2124: bad orphan inode 134217728 [ 414.391048][ T28] audit: type=1400 audit(1778263383.236:1971): avc: denied { write } for pid=10480 comm="syz.0.2123" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.392217][T10483] loop3: lost filesystem error report for type 5 error -117 [ 414.422992][T10483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.544022][T10490] loop4: detected capacity change from 0 to 512 [ 414.670242][T10490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.684888][T10490] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.746373][ T28] audit: type=1400 audit(1778263383.546:1972): avc: denied { write } for pid=10484 comm="syz.4.2125" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.005841][ T28] audit: type=1400 audit(1778263383.726:1973): avc: denied { write } for pid=10482 comm="syz.3.2124" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.233353][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.097842][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.144762][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.228199][ T28] audit: type=1326 audit(1778263385.076:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.2135" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ffcecdd9 code=0x7ffc0000 [ 416.260000][T10515] __nla_validate_parse: 5 callbacks suppressed [ 416.260018][T10515] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2134'. [ 416.277287][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'. [ 416.280454][T10516] loop2: detected capacity change from 0 to 1024 [ 416.288928][T10515] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2134'. [ 416.292820][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2132'. [ 416.312920][T10516] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 416.317615][T10515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=10515 comm=syz.0.2134 [ 416.331495][ T28] audit: type=1326 audit(1778263385.106:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.2135" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ffcecdd9 code=0x7ffc0000 [ 416.361715][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'. [ 416.370984][ T28] audit: type=1326 audit(1778263385.106:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.2135" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ffcecdd9 code=0x7ffc0000 [ 416.396892][T10512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2132'. [ 416.426147][ T28] audit: type=1326 audit(1778263385.106:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.2135" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ffcecdd9 code=0x7ffc0000 [ 416.452294][ T28] audit: type=1326 audit(1778263385.106:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.2135" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f14ffcecdd9 code=0x7ffc0000 [ 416.485699][ T28] audit: type=1326 audit(1778263385.106:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10514 comm="syz.2.2135" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ffcecdd9 code=0x7ffc0000 [ 416.555765][T10528] loop2: detected capacity change from 0 to 512 [ 416.572538][T10528] EXT4-fs (loop2): inodes count not valid: 8192 vs 32 [ 416.580409][T10518] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2130'. [ 416.628327][T10518] loop4: detected capacity change from 0 to 512 [ 416.740142][T10518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 416.758603][T10536] hub 8-0:1.0: USB hub found [ 416.763316][T10536] hub 8-0:1.0: 8 ports detected [ 416.780836][T10536] netlink: 'syz.0.2140': attribute type 36 has an invalid length. [ 416.795433][T10536] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 416.805411][T10536] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 416.823703][T10536] netlink: 'syz.0.2140': attribute type 10 has an invalid length. [ 416.833643][T10536] team0: Device ipvlan0 failed to register rx_handler [ 417.023900][T10532] loop3: detected capacity change from 0 to 1024 [ 417.169447][T10518] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 417.188834][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2130'. [ 417.201450][T10532] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 417.211371][T10532] System zones: 0-1, 3-36 [ 417.216839][T10532] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2139: bad orphan inode 134217728 [ 417.236197][T10532] loop3: lost filesystem error report for type 5 error -117 [ 417.256426][T10532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.283172][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2139'. [ 417.292977][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2139'. [ 417.732843][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.050629][T10561] hub 8-0:1.0: USB hub found [ 418.055534][T10561] hub 8-0:1.0: 8 ports detected [ 418.073818][T10559] netlink: 'syz.2.2145': attribute type 10 has an invalid length. [ 418.083576][T10559] team0: Device ipvlan0 failed to register rx_handler [ 418.128132][T10558] loop3: detected capacity change from 0 to 128 [ 418.488683][T10565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.497836][T10565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.543772][T10570] FAULT_INJECTION: forcing a failure. [ 418.543772][T10570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.557091][T10570] CPU: 0 UID: 0 PID: 10570 Comm: syz.3.2148 Tainted: G W syzkaller #0 PREEMPT(full) [ 418.557193][T10570] Tainted: [W]=WARN [ 418.557200][T10570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 418.557241][T10570] Call Trace: [ 418.557250][T10570] [ 418.557258][T10570] __dump_stack+0x1d/0x30 [ 418.557284][T10570] dump_stack_lvl+0x95/0xd0 [ 418.557307][T10570] dump_stack+0x15/0x1b [ 418.557327][T10570] should_fail_ex+0x263/0x280 [ 418.557360][T10570] should_fail+0xb/0x20 [ 418.557386][T10570] should_fail_usercopy+0x1a/0x20 [ 418.557466][T10570] _copy_from_user+0x1c/0xb0 [ 418.557498][T10570] copy_from_sockptr+0x5e/0x90 [ 418.557532][T10570] packet_setsockopt+0x941/0xfd0 [ 418.557628][T10570] ? __pfx_packet_setsockopt+0x10/0x10 [ 418.557674][T10570] __sys_setsockopt+0x184/0x200 [ 418.557697][T10570] __x64_sys_setsockopt+0x64/0x80 [ 418.557763][T10570] x64_sys_call+0x2327/0x3020 [ 418.557788][T10570] do_syscall_64+0x12c/0x3b0 [ 418.557817][T10570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.557881][T10570] RIP: 0033:0x7f5a391ccdd9 [ 418.557902][T10570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.557922][T10570] RSP: 002b:00007f5a37c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 418.557942][T10570] RAX: ffffffffffffffda RBX: 00007f5a39445fa0 RCX: 00007f5a391ccdd9 [ 418.557956][T10570] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000004 [ 418.557968][T10570] RBP: 00007f5a37c27090 R08: 0000000000000008 R09: 0000000000000000 [ 418.558084][T10570] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.558097][T10570] R13: 00007f5a39446038 R14: 00007f5a39445fa0 R15: 00007ffeba4e1b28 [ 418.558116][T10570] [ 418.877602][T10577] loop3: detected capacity change from 0 to 2048 [ 418.898953][T10577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.911588][T10577] FAULT_INJECTION: forcing a failure. [ 418.911588][T10577] name failslab, interval 1, probability 0, space 0, times 0 [ 418.924336][T10577] CPU: 0 UID: 0 PID: 10577 Comm: syz.3.2151 Tainted: G W syzkaller #0 PREEMPT(full) [ 418.924438][T10577] Tainted: [W]=WARN [ 418.924451][T10577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 418.924465][T10577] Call Trace: [ 418.924472][T10577] [ 418.924480][T10577] __dump_stack+0x1d/0x30 [ 418.924561][T10577] dump_stack_lvl+0x95/0xd0 [ 418.924717][T10577] dump_stack+0x15/0x1b [ 418.924740][T10577] should_fail_ex+0x263/0x280 [ 418.924773][T10577] should_failslab+0x8c/0xb0 [ 418.924882][T10577] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 418.924993][T10577] ? sidtab_sid2str_get+0xa0/0x130 [ 418.925022][T10577] kmemdup_noprof+0x2b/0x70 [ 418.925115][T10577] sidtab_sid2str_get+0xa0/0x130 [ 418.925137][T10577] security_sid_to_context_core+0x1eb/0x2e0 [ 418.925162][T10577] security_sid_to_context+0x27/0x40 [ 418.925209][T10577] avc_audit_post_callback+0x9d/0x510 [ 418.925274][T10577] ? audit_log_lsm_data+0x7e7/0xbb0 [ 418.925295][T10577] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 418.925397][T10577] common_lsm_audit+0x1ba/0x230 [ 418.925490][T10577] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 418.925553][T10577] slow_avc_audit+0x14c/0x190 [ 418.925581][T10577] audit_inode_permission+0x119/0x160 [ 418.925654][T10577] selinux_inode_permission+0x670/0x760 [ 418.925683][T10577] security_inode_permission+0x69/0xa0 [ 418.925722][T10577] inode_permission+0x288/0x3b0 [ 418.925806][T10577] may_create_dentry+0x199/0x1f0 [ 418.925838][T10577] vfs_mkdir+0x5e/0x3e0 [ 418.925870][T10577] filename_mkdirat+0x138/0x300 [ 418.925923][T10577] __se_sys_mkdir+0x31/0xf0 [ 418.926011][T10577] __x64_sys_mkdir+0x31/0x40 [ 418.926046][T10577] x64_sys_call+0x2eab/0x3020 [ 418.926069][T10577] do_syscall_64+0x12c/0x3b0 [ 418.926115][T10577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.926137][T10577] RIP: 0033:0x7f5a391ccdd9 [ 418.926155][T10577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.926210][T10577] RSP: 002b:00007f5a37c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 418.926228][T10577] RAX: ffffffffffffffda RBX: 00007f5a39445fa0 RCX: 00007f5a391ccdd9 [ 418.926240][T10577] RDX: 0000000000000000 RSI: 00000000000003a2 RDI: 0000200000000000 [ 418.926251][T10577] RBP: 00007f5a37c27090 R08: 0000000000000000 R09: 0000000000000000 [ 418.926315][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.926330][T10577] R13: 00007f5a39446038 R14: 00007f5a39445fa0 R15: 00007ffeba4e1b28 [ 418.926351][T10577] [ 419.185012][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 419.185034][ T28] audit: type=1400 audit(1778263387.756:2024): avc: denied { write } for pid=10576 comm="syz.3.2151" name="file0" dev="loop3" ino=12 ssid=137 tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 419.243489][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.279132][T10584] hub 8-0:1.0: USB hub found [ 419.283879][T10584] hub 8-0:1.0: 8 ports detected [ 419.301263][T10584] netlink: 'syz.2.2152': attribute type 36 has an invalid length. [ 419.316005][T10584] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 419.326056][T10584] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 419.344709][T10584] netlink: 'syz.2.2152': attribute type 10 has an invalid length. [ 419.354920][T10584] team0: Device ipvlan0 failed to register rx_handler [ 419.785827][ T28] audit: type=1400 audit(1778263388.626:2025): avc: denied { getopt } for pid=10593 comm="syz.3.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 419.999217][T10601] loop3: detected capacity change from 0 to 128 [ 420.581502][T10612] xfrm0 speed is unknown, defaulting to 1000 [ 420.593911][T10615] loop0: detected capacity change from 0 to 1024 [ 420.623358][ T28] audit: type=1400 audit(1778263389.466:2026): avc: denied { mounton } for pid=10609 comm="syz.0.2161" path="/file1" dev="ramfs" ino=29050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 420.623366][T10615] EXT4-fs: Ignoring removed orlov option [ 420.624131][T10615] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 420.689071][T10615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.701961][T10615] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.839007][T10614] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 420.932974][T10632] loop4: detected capacity change from 0 to 128 [ 421.002034][T10616] loop2: detected capacity change from 0 to 512 [ 421.044566][T10634] hub 8-0:1.0: USB hub found [ 421.049644][T10634] hub 8-0:1.0: 8 ports detected [ 421.061257][T10634] netlink: 'syz.0.2166': attribute type 36 has an invalid length. [ 421.076610][T10634] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 421.086511][T10634] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 421.099804][T10634] netlink: 'syz.0.2166': attribute type 10 has an invalid length. [ 421.110019][T10634] team0: Device ipvlan0 failed to register rx_handler [ 421.181149][T10616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.194893][T10632] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 421.232093][T10616] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.243473][T10632] ext4 filesystem being mounted at /424/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.392747][T10632] __nla_validate_parse: 11 callbacks suppressed [ 421.392760][T10632] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2167'. [ 421.414350][T10612] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 421.455863][ T28] audit: type=1400 audit(1778263390.296:2027): avc: denied { relabelto } for pid=10611 comm="syz.2.2162" name="bus" dev="tmpfs" ino=2258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 421.603994][ T28] audit: type=1400 audit(1778263390.296:2028): avc: denied { associate } for pid=10611 comm="syz.2.2162" name="bus" dev="tmpfs" ino=2258 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 421.728048][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.772430][T10634] syz.0.2166 (10634) used greatest stack depth: 8824 bytes left [ 421.815998][ T28] audit: type=1400 audit(1778263390.656:2029): avc: denied { getopt } for pid=10650 comm="syz.0.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 422.036186][T10653] loop0: detected capacity change from 0 to 1024 [ 422.049684][ T28] audit: type=1400 audit(1778263390.886:2030): avc: denied { getopt } for pid=10654 comm="syz.3.2174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 422.074464][T10653] EXT4-fs: Ignoring removed orlov option [ 422.086821][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2175'. [ 422.109130][T10653] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 422.139065][ T28] audit: type=1400 audit(1778263390.986:2031): avc: denied { write } for pid=10656 comm="syz.2.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 422.163421][ T28] audit: type=1400 audit(1778263390.986:2032): avc: denied { read } for pid=10656 comm="syz.2.2175" path="socket:[28219]" dev="sockfs" ino=28219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 422.176766][T10653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.243994][T10653] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.501694][T10672] loop0: detected capacity change from 0 to 128 [ 422.526362][T10672] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 422.553805][T10672] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.596977][T10672] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2178'. [ 422.616709][ T28] audit: type=1400 audit(1778263391.466:2033): avc: denied { write } for pid=10671 comm="syz.0.2178" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 422.643998][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 422.785592][T10683] loop3: detected capacity change from 0 to 1024 [ 422.821389][T10691] loop4: detected capacity change from 0 to 512 [ 422.828199][T10683] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 422.838385][T10683] System zones: 0-1, 3-36 [ 422.850604][T10691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.865877][T10683] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2183: bad orphan inode 134217728 [ 422.886466][T10683] loop3: lost filesystem error report for type 5 error -117 [ 422.893251][T10683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.930353][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2183'. [ 422.940488][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2183'. [ 423.044499][T10700] loop2: detected capacity change from 0 to 512 [ 423.064617][T10700] EXT4-fs: Ignoring removed oldalloc option [ 423.086341][T10700] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 423.109879][T10700] EXT4-fs (loop2): 1 truncate cleaned up [ 423.125023][T10700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.562638][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.621335][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.686333][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2188'. [ 423.716794][T10708] loop3: detected capacity change from 0 to 1024 [ 423.734019][T10708] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 423.734134][T10708] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 423.734690][T10708] jbd2_journal_init_inode: Cannot locate journal superblock [ 423.734701][T10708] EXT4-fs (loop3): Could not load journal inode [ 423.786975][T10711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.822168][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2189'. [ 423.854971][T10713] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2189'. [ 423.855133][T10713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2189'. [ 424.095459][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.214971][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 424.293134][T10729] __quota_error: 5 callbacks suppressed [ 424.293150][T10729] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 424.319149][T10731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 424.322856][T10729] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 424.349931][T10731] ext4 filesystem being mounted at /421/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.371754][T10729] EXT4-fs (loop2): mount failed [ 424.427224][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 424.512510][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.620233][T10746] hub 8-0:1.0: USB hub found [ 424.625233][T10746] hub 8-0:1.0: 8 ports detected [ 424.641766][T10746] netlink: 'syz.2.2199': attribute type 36 has an invalid length. [ 424.657197][T10746] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 424.667081][T10746] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 424.686048][T10746] netlink: 'syz.2.2199': attribute type 10 has an invalid length. [ 424.696521][T10746] team0: Device ipvlan0 failed to register rx_handler [ 424.953431][T10740] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 425.018624][T10740] System zones: 0-1, 3-36 [ 425.093935][T10740] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2198: bad orphan inode 134217728 [ 425.116352][T10740] loop3: lost filesystem error report for type 5 error -117 [ 425.132382][T10740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.194150][T10740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2198'. [ 425.253980][ T28] audit: type=1400 audit(1778263394.096:2039): avc: denied { write } for pid=10738 comm="syz.3.2198" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 425.422034][T10746] syz.2.2199 (10746) used greatest stack depth: 8696 bytes left [ 425.447556][T10760] set_capacity_and_notify: 4 callbacks suppressed [ 425.447568][T10760] loop2: detected capacity change from 0 to 1024 [ 425.477234][T10760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.555884][T10766] netlink: 'syz.0.2204': attribute type 3 has an invalid length. [ 425.573332][ T28] audit: type=1400 audit(1778263394.406:2040): avc: denied { write } for pid=10759 comm="syz.2.2202" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 425.602818][T10768] loop4: detected capacity change from 0 to 128 [ 425.614746][T10768] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 425.627591][T10768] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.638573][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.364143][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.418423][ T28] audit: type=1400 audit(1778263395.266:2041): avc: denied { watch } for pid=10782 comm="syz.2.2210" path="/426" dev="tmpfs" ino=2308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 426.443879][T10781] __nla_validate_parse: 3 callbacks suppressed [ 426.443896][T10781] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2207'. [ 426.484800][ T28] audit: type=1400 audit(1778263395.286:2042): avc: denied { watch_reads } for pid=10782 comm="syz.2.2210" path="/426" dev="tmpfs" ino=2308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 426.507669][T10780] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2209'. [ 426.521648][T10786] netlink: 'syz.3.2211': attribute type 21 has an invalid length. [ 426.530732][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2207'. [ 426.539700][T10786] netlink: 'syz.3.2211': attribute type 20 has an invalid length. [ 426.547834][T10780] loop0: detected capacity change from 0 to 1024 [ 426.585421][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 426.613909][T10780] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 426.710430][T10796] loop4: detected capacity change from 0 to 128 [ 426.746835][T10800] loop0: detected capacity change from 0 to 128 [ 426.758296][T10800] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 426.760684][T10796] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 426.786823][T10800] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.819581][T10796] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.836387][ T28] audit: type=1400 audit(1778263395.676:2043): avc: denied { write } for pid=10799 comm="syz.0.2217" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 426.862776][T10798] loop3: detected capacity change from 0 to 1024 [ 426.947923][ T28] audit: type=1400 audit(1778263395.676:2044): avc: denied { write } for pid=10795 comm="syz.4.2215" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 426.982375][T10805] loop2: detected capacity change from 0 to 512 [ 426.996200][T10798] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 427.044644][T10798] System zones: 0-1, 3-36 [ 427.885517][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 427.903021][T10805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.929605][ T28] audit: type=1400 audit(1778263396.766:2045): avc: denied { write } for pid=10803 comm="syz.2.2218" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 427.958186][T10798] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2216: bad orphan inode 134217728 [ 427.974290][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.980520][T10798] loop3: lost filesystem error report for type 5 error -117 [ 427.988017][T10798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.031929][T10798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2216'. [ 428.046526][T10798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2216'. [ 428.078987][ T28] audit: type=1400 audit(1778263396.926:2046): avc: denied { write } for pid=10797 comm="syz.3.2216" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 428.114883][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'. [ 428.127169][T10819] loop4: detected capacity change from 0 to 512 [ 428.133690][T10816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2220'. [ 428.149019][ T28] audit: type=1400 audit(1778263396.996:2047): avc: denied { write } for pid=3299 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 428.150813][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'. [ 428.186313][T10816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2220'. [ 428.195927][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 428.218364][T10819] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 428.236940][T10819] EXT4-fs (loop4): mount failed [ 428.244433][T10825] loop0: detected capacity change from 0 to 128 [ 428.257721][T10825] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 428.276893][T10825] ext4 filesystem being mounted at /427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.315139][T10825] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2222'. [ 429.371865][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 429.371878][ T28] audit: type=1400 audit(1778263398.206:2049): avc: denied { getopt } for pid=10829 comm="syz.4.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 429.479353][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.508398][ T28] audit: type=1400 audit(1778263398.216:2050): avc: denied { listen } for pid=10829 comm="syz.4.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 429.528436][ T28] audit: type=1400 audit(1778263398.296:2051): avc: denied { setopt } for pid=10829 comm="syz.4.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 429.636384][ T28] audit: type=1400 audit(1778263398.296:2052): avc: denied { mount } for pid=10829 comm="syz.4.2225" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 429.705772][ T28] audit: type=1400 audit(1778263398.336:2053): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 429.743013][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 429.766867][T10846] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 429.774436][T10846] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 429.850740][T10844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.896618][T10844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.931244][T10844] bond0 (unregistering): Released all slaves [ 430.140183][ T28] audit: type=1400 audit(1778263398.986:2054): avc: denied { getopt } for pid=10859 comm="syz.4.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 430.325992][T10865] loop4: detected capacity change from 0 to 1024 [ 430.425396][T10865] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 430.444854][T10865] System zones: 0-1, 3-36 [ 430.463676][T10865] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2237: bad orphan inode 134217728 [ 430.488875][T10865] loop4: lost filesystem error report for type 5 error -117 [ 430.496162][T10865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.541873][T10868] loop0: detected capacity change from 0 to 128 [ 430.570070][T10868] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 430.592263][T10868] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.741867][ T28] audit: type=1400 audit(1778263399.586:2055): avc: denied { write } for pid=10864 comm="syz.4.2237" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 430.763718][ T28] audit: type=1326 audit(1778263399.586:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.3.2240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a391ccdd9 code=0x7ffc0000 [ 431.739657][ T28] audit: type=1326 audit(1778263399.586:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.3.2240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a391ccdd9 code=0x7ffc0000 [ 431.766380][ T28] audit: type=1326 audit(1778263399.586:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10875 comm="syz.3.2240" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a391ccdd9 code=0x7ffc0000 [ 432.908466][T10877] __nla_validate_parse: 9 callbacks suppressed [ 432.908492][T10877] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2240'. [ 432.931024][T10877] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2240'. [ 432.956672][T10877] batadv_slave_0: entered promiscuous mode [ 432.966957][T10877] ieee802154 phy0 wpan0: encryption failed: -22 [ 432.985178][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.045627][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 433.085287][T10897] loop2: detected capacity change from 0 to 256 [ 433.199543][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2246'. [ 433.223060][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2246'. [ 433.232230][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2246'. [ 433.241257][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2246'. [ 433.337337][T10913] loop0: detected capacity change from 0 to 1024 [ 433.432036][T10910] loop4: detected capacity change from 0 to 1024 [ 433.498622][T10905] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2248'. [ 433.528515][T10913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.601741][T10910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.621279][T10915] loop3: detected capacity change from 0 to 169 [ 433.764689][T10910] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.828587][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.846420][T10923] loop3: detected capacity change from 0 to 256 [ 433.874579][T10923] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 433.980858][T10928] loop0: detected capacity change from 0 to 128 [ 433.993188][T10928] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 434.010908][T10928] ext4 filesystem being mounted at /432/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.033048][T10923] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264) [ 434.041100][T10923] FAT-fs (loop3): Filesystem has been set read-only [ 434.047898][T10923] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 434.055863][T10923] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 434.066326][T10923] netlink: 'syz.3.2251': attribute type 11 has an invalid length. [ 434.102534][T10934] loop2: detected capacity change from 0 to 512 [ 434.109230][T10934] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 434.177249][T10940] loop2: detected capacity change from 0 to 1024 [ 434.197492][T10940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.211396][T10940] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 434.229013][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.286546][T10941] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 434.294753][T10941] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 434.305526][T10941] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 434.530511][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2260'. [ 434.539824][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2260'. [ 434.550138][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2260'. [ 434.611520][T10954] loop3: detected capacity change from 0 to 128 [ 434.653233][T10954] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 434.697338][T10954] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.738176][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 434.738190][ T28] audit: type=1400 audit(1778263403.586:2197): avc: denied { write } for pid=10953 comm="syz.3.2261" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 434.905322][T10962] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 434.927486][T10962] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 434.974060][T10957] netlink: 'syz.1.2262': attribute type 1 has an invalid length. [ 435.062915][T10962] EXT4-fs (loop4): mount failed [ 435.159969][T10973] hub 8-0:1.0: USB hub found [ 435.164900][T10973] hub 8-0:1.0: 8 ports detected [ 435.193532][T10973] netlink: 'syz.0.2265': attribute type 36 has an invalid length. [ 435.249339][T10974] netlink: 'syz.0.2265': attribute type 10 has an invalid length. [ 435.392753][ T28] audit: type=1400 audit(1778263404.226:2198): avc: denied { create } for pid=10956 comm="syz.1.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 435.910028][T10970] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 435.991161][T10957] bond7: entered promiscuous mode [ 436.001094][T10957] 8021q: adding VLAN 0 to HW filter on device bond7 [ 436.043046][T10973] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 436.053025][T10973] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 436.065621][T10974] team0: Device ipvlan0 failed to register rx_handler [ 436.129500][T10982] hub 8-0:1.0: USB hub found [ 436.134381][T10982] hub 8-0:1.0: 8 ports detected [ 436.152189][T10982] netlink: 'syz.4.2267': attribute type 10 has an invalid length. [ 436.177076][T10982] team0: Device ipvlan0 failed to register rx_handler [ 436.334864][ T28] audit: type=1400 audit(1778263405.176:2199): avc: denied { bind } for pid=10983 comm="syz.0.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 436.404659][T10985] set_capacity_and_notify: 1 callbacks suppressed [ 436.404771][T10985] loop0: detected capacity change from 0 to 164 [ 436.614640][T10996] 9p: Bad value for 'rfdno' [ 436.647328][T10998] netlink: 'syz.0.2274': attribute type 8 has an invalid length. [ 436.665843][T11001] loop2: detected capacity change from 0 to 128 [ 436.694006][T11001] ext4 filesystem being mounted at /440/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.694501][T11003] loop0: detected capacity change from 0 to 1024 [ 436.711286][T11003] ext4: Unknown parameter 'fsmagic' [ 436.718506][ T28] audit: type=1400 audit(1778263405.566:2200): avc: denied { write } for pid=11000 comm="syz.2.2275" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 437.064381][T11020] hub 8-0:1.0: USB hub found [ 437.069330][T11020] hub 8-0:1.0: 8 ports detected [ 437.240709][T11013] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 437.843901][T11024] loop0: detected capacity change from 0 to 512 [ 437.912284][ T28] audit: type=1400 audit(1778263406.756:2201): avc: denied { write } for pid=11022 comm="syz.0.2282" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 437.985282][ T28] audit: type=1400 audit(1778263406.786:2202): avc: denied { unlink } for pid=11022 comm="syz.0.2282" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 438.038954][ T28] audit: type=1326 audit(1778263406.886:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11035 comm="syz.1.2288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714178cdd9 code=0x7ffc0000 [ 438.065162][T11036] FAULT_INJECTION: forcing a failure. [ 438.065162][T11036] name failslab, interval 1, probability 0, space 0, times 0 [ 438.078057][T11036] CPU: 1 UID: 0 PID: 11036 Comm: syz.1.2288 Tainted: G W syzkaller #0 PREEMPT(full) [ 438.078122][T11036] Tainted: [W]=WARN [ 438.078132][T11036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 438.078149][T11036] Call Trace: [ 438.078157][T11036] [ 438.078167][T11036] __dump_stack+0x1d/0x30 [ 438.078200][T11036] dump_stack_lvl+0x95/0xd0 [ 438.078282][T11036] dump_stack+0x15/0x1b [ 438.078308][T11036] should_fail_ex+0x263/0x280 [ 438.078398][T11036] should_failslab+0x8c/0xb0 [ 438.078441][T11036] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 438.078619][T11036] ? sidtab_sid2str_get+0xa0/0x130 [ 438.078669][T11036] kmemdup_noprof+0x2b/0x70 [ 438.078732][T11036] sidtab_sid2str_get+0xa0/0x130 [ 438.078761][T11036] security_sid_to_context_core+0x1eb/0x2e0 [ 438.078791][T11036] security_sid_to_context+0x27/0x40 [ 438.078892][T11036] selinux_lsmprop_to_secctx+0x67/0xf0 [ 438.078962][T11036] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 438.079000][T11036] audit_log_subj_ctx+0xa4/0x3e0 [ 438.079030][T11036] ? skb_put+0xa9/0xf0 [ 438.079054][T11036] audit_log_task_context+0x48/0x70 [ 438.079107][T11036] audit_log_task+0xf3/0x250 [ 438.079187][T11036] audit_seccomp+0x60/0x100 [ 438.079210][T11036] ? __seccomp_filter+0x8db/0x1350 [ 438.079246][T11036] __seccomp_filter+0x8ec/0x1350 [ 438.079288][T11036] ? __rcu_read_unlock+0x4e/0x70 [ 438.079313][T11036] ? __fget_files+0x184/0x1c0 [ 438.079370][T11036] ? mutex_lock+0x57/0x90 [ 438.079393][T11036] ? xfd_validate_state+0x45/0xf0 [ 438.079434][T11036] __secure_computing+0x81/0x150 [ 438.079490][T11036] do_syscall_64+0xce/0x3b0 [ 438.079559][T11036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.079589][T11036] RIP: 0033:0x7f714174d60e [ 438.079623][T11036] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 438.079648][T11036] RSP: 002b:00007f71401e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 438.079682][T11036] RAX: ffffffffffffffda RBX: 00007f71401e76c0 RCX: 00007f714174d60e [ 438.079703][T11036] RDX: 000000000000000f RSI: 00007f71401e70a0 RDI: 0000000000000003 [ 438.079720][T11036] RBP: 00007f71401e7090 R08: 0000000000000000 R09: 0000000000000000 [ 438.079738][T11036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.079755][T11036] R13: 00007f7141a06038 R14: 00007f7141a05fa0 R15: 00007ffe69a443a8 [ 438.079823][T11036] [ 438.079846][T11036] audit: error in audit_log_subj_ctx [ 438.103861][ T28] audit: type=1326 audit(1778263406.886:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11035 comm="syz.1.2288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f714178cdd9 code=0x7ffc0000 [ 438.356991][T11050] loop4: detected capacity change from 0 to 512 [ 438.418174][T11050] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 438.445325][T11054] __nla_validate_parse: 4 callbacks suppressed [ 438.445404][T11054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2294'. [ 438.477568][T11050] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 438.483416][T11054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2294'. [ 438.506222][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 438.512688][ C0] EXT4-fs (loop4): initial error at time 1778263407: mb_free_blocks:2049: inode 11: block 64 [ 438.522935][ C0] EXT4-fs (loop4): last error at time 1778263407: mb_free_blocks:2049: inode 11: block 64 [ 438.532974][T11050] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.2293: corrupted inode contents [ 438.544969][T11050] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 438.546287][T11050] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #11: comm syz.4.2293: mark_inode_dirty error [ 438.574135][T11050] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 438.574954][T11050] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2293: invalid indirect mapped block 1 (level 1) [ 438.597573][T11050] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 438.598391][T11050] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.2293: corrupted inode contents [ 438.619597][T11050] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 438.620776][T11050] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 438.639245][T11050] loop4: lost filesystem error report for type 5 error -117 [ 438.641340][T11050] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.2293: corrupted inode contents [ 438.669521][T11050] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 438.670639][T11063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2296'. [ 438.692801][T11050] EXT4-fs error (device loop4): ext4_truncate:4690: inode #11: comm syz.4.2293: mark_inode_dirty error [ 438.706298][T11050] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 438.707950][T11050] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 438.729897][T11050] loop4: lost filesystem error report for type 5 error -117 [ 438.730101][T11050] EXT4-fs (loop4): 1 truncate cleaned up [ 438.800039][T11064] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2292'. [ 438.813011][T11070] loop4: detected capacity change from 0 to 128 [ 438.856315][T11070] ext4 filesystem being mounted at /455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.021963][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 439.224374][T11082] loop2: detected capacity change from 0 to 1024 [ 439.298371][T11082] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.427793][T11086] loop0: detected capacity change from 0 to 1024 [ 439.444183][T11082] serio: Serial port ptm0 [ 439.467743][T11086] EXT4-fs: Ignoring removed nobh option [ 439.496786][T11088] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2300: bg 0: block 112: padding at end of block bitmap is not set [ 439.517847][T11086] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 439.517847][T11086] [ 439.610859][T11098] loop0: detected capacity change from 0 to 128 [ 439.624933][T11098] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.871789][T11105] loop2: detected capacity change from 0 to 1024 [ 439.948805][T11105] EXT4-fs: Ignoring removed bh option [ 440.133519][T11117] netlink: 'syz.1.2309': attribute type 36 has an invalid length. [ 440.151207][T11117] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 440.161214][T11117] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 440.183590][T11117] netlink: 'syz.1.2309': attribute type 10 has an invalid length. [ 440.194728][T11117] team0: Device ipvlan0 failed to register rx_handler [ 440.502403][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2310'. [ 440.565943][ T3299] EXT4-fs unmount: 14 callbacks suppressed [ 440.565955][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 440.616049][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 440.616070][ T28] audit: type=1400 audit(1778263409.456:2221): avc: denied { write } for pid=11104 comm="syz.2.2307" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 440.789821][T11125] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11125 comm=syz.4.2313 [ 440.828724][ T28] audit: type=1400 audit(1778263409.576:2222): avc: denied { bind } for pid=11124 comm="syz.4.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 441.023952][T11140] FAULT_INJECTION: forcing a failure. [ 441.023952][T11140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.037111][T11140] CPU: 1 UID: 0 PID: 11140 Comm: syz.4.2315 Tainted: G W syzkaller #0 PREEMPT(full) [ 441.037149][T11140] Tainted: [W]=WARN [ 441.037164][T11140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 441.037179][T11140] Call Trace: [ 441.037186][T11140] [ 441.037194][T11140] __dump_stack+0x1d/0x30 [ 441.037228][T11140] dump_stack_lvl+0x95/0xd0 [ 441.037246][T11140] dump_stack+0x15/0x1b [ 441.037262][T11140] should_fail_ex+0x263/0x280 [ 441.037339][T11140] should_fail+0xb/0x20 [ 441.037411][T11140] should_fail_usercopy+0x1a/0x20 [ 441.037532][T11140] _copy_to_user+0x20/0xa0 [ 441.037558][T11140] simple_read_from_buffer+0xb5/0x130 [ 441.037589][T11140] proc_fail_nth_read+0x10e/0x150 [ 441.037638][T11140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 441.037671][T11140] vfs_read+0x1ab/0x7f0 [ 441.037693][T11140] ? __rcu_read_unlock+0x4e/0x70 [ 441.037766][T11140] ? __fget_files+0x184/0x1c0 [ 441.037782][T11140] ? mutex_lock+0x57/0x90 [ 441.037800][T11140] ksys_read+0xdc/0x1a0 [ 441.037822][T11140] __x64_sys_read+0x40/0x50 [ 441.037851][T11140] x64_sys_call+0x2886/0x3020 [ 441.037871][T11140] do_syscall_64+0x12c/0x3b0 [ 441.037893][T11140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.037911][T11140] RIP: 0033:0x7f810c05d60e [ 441.037924][T11140] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 441.037974][T11140] RSP: 002b:00007f810aaf6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 441.038136][T11140] RAX: ffffffffffffffda RBX: 00007f810aaf76c0 RCX: 00007f810c05d60e [ 441.038148][T11140] RDX: 000000000000000f RSI: 00007f810aaf70a0 RDI: 0000000000000005 [ 441.038158][T11140] RBP: 00007f810aaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 441.038168][T11140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.038178][T11140] R13: 00007f810c316038 R14: 00007f810c315fa0 R15: 00007ffcb1671cc8 [ 441.038239][T11140] [ 441.267974][T11142] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.303068][ T28] audit: type=1400 audit(1778263410.146:2223): avc: denied { write } for pid=11133 comm="syz.0.2311" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 441.329140][T11146] hugetlbfs: syz.4.2317 (11146): Using mlock ulimits for SHM_HUGETLB is obsolete [ 441.360442][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.408062][T11151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 441.420438][T11151] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.511123][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 441.569533][T11158] set_capacity_and_notify: 2 callbacks suppressed [ 441.569546][T11158] loop2: detected capacity change from 0 to 256 [ 441.704580][T11158] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 441.875302][T11165] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 441.890834][T11165] FAT-fs (loop2): Filesystem has been set read-only [ 441.912662][T11165] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 441.920935][T11165] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 441.930986][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.004402][ T28] audit: type=1400 audit(1778263410.846:2224): avc: denied { create } for pid=11170 comm="syz.1.2324" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 442.029338][ T28] audit: type=1400 audit(1778263410.876:2225): avc: denied { unlink } for pid=3303 comm="syz-executor" name="file0" dev="tmpfs" ino=2827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 442.057564][T11167] xfrm0 speed is unknown, defaulting to 1000 [ 442.370291][T11193] loop0: detected capacity change from 0 to 512 [ 442.403368][T11193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.493242][T11200] loop2: detected capacity change from 0 to 512 [ 442.525830][ T28] audit: type=1400 audit(1778263411.366:2226): avc: denied { write } for pid=11187 comm="syz.0.2330" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 442.557892][T11201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2325'. [ 442.598490][T11200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.611968][T11200] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.705917][ T28] audit: type=1400 audit(1778263411.476:2227): avc: denied { write } for pid=11184 comm="syz.2.2329" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 442.788542][ T28] audit: type=1400 audit(1778263411.476:2228): avc: denied { read write } for pid=11184 comm="syz.2.2329" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 442.880801][ T28] audit: type=1400 audit(1778263411.476:2229): avc: denied { open } for pid=11184 comm="syz.2.2329" path="/451/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 442.965248][ T28] audit: type=1400 audit(1778263411.496:2230): avc: denied { append } for pid=11184 comm="syz.2.2329" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 443.283124][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.295157][T11208] netlink: 'syz.4.2333': attribute type 1 has an invalid length. [ 443.372926][T11208] 8021q: adding VLAN 0 to HW filter on device bond3 [ 443.914865][T11210] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2335'. [ 444.002830][T11220] loop3: detected capacity change from 0 to 512 [ 444.009442][T11220] EXT4-fs: Ignoring removed nomblk_io_submit option [ 444.102507][T11220] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 444.143027][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2335'. [ 444.204998][T11212] bond3: entered allmulticast mode [ 444.211413][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.246303][T11215] bond3: (slave ip6gretap1): making interface the new active one [ 444.272325][T11215] ip6gretap1: entered allmulticast mode [ 444.278550][T11215] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 444.367506][T11230] loop4: detected capacity change from 0 to 256 [ 444.374970][T11230] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 444.452307][T11230] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779264) [ 444.460862][T11230] FAT-fs (loop4): Filesystem has been set read-only [ 444.482668][T11230] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 444.526464][T11232] loop2: detected capacity change from 0 to 512 [ 444.579866][T11230] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 444.631406][T11232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.645138][T11232] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.585256][T11242] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2339'. [ 445.606920][T11242] loop4: detected capacity change from 0 to 512 [ 445.613502][T11242] EXT4-fs: Ignoring removed nomblk_io_submit option [ 445.721851][T11247] loop0: detected capacity change from 0 to 2048 [ 445.748337][T11247] EXT4-fs (loop0): Invalid log cluster size: 31 [ 445.905014][T11248] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2340'. [ 445.955911][T11248] loop3: detected capacity change from 0 to 512 [ 445.980209][T11248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 446.063423][T11248] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 446.085409][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.098708][T11242] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 446.126988][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2340'. [ 446.161746][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2339'. [ 446.230091][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 446.230105][ T28] audit: type=1400 audit(1778263415.076:2235): avc: denied { load_policy } for pid=11252 comm="syz.2.2343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 446.259530][T11256] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 446.269954][T11256] SELinux: failed to load policy [ 446.285775][T11253] FAULT_INJECTION: forcing a failure. [ 446.285775][T11253] name failslab, interval 1, probability 0, space 0, times 0 [ 446.298610][T11253] CPU: 1 UID: 0 PID: 11253 Comm: syz.2.2343 Tainted: G W syzkaller #0 PREEMPT(full) [ 446.298637][T11253] Tainted: [W]=WARN [ 446.298645][T11253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 446.298657][T11253] Call Trace: [ 446.298664][T11253] [ 446.298739][T11253] __dump_stack+0x1d/0x30 [ 446.298763][T11253] dump_stack_lvl+0x95/0xd0 [ 446.298807][T11253] dump_stack+0x15/0x1b [ 446.298829][T11253] should_fail_ex+0x263/0x280 [ 446.298861][T11253] should_failslab+0x8c/0xb0 [ 446.298898][T11253] __kmalloc_noprof+0xb8/0x4d0 [ 446.298935][T11253] ? security_task_alloc+0x4d/0x110 [ 446.298957][T11253] ? mutex_init_generic+0x3e/0x50 [ 446.298978][T11253] security_task_alloc+0x4d/0x110 [ 446.299030][T11253] copy_process+0xf67/0x2370 [ 446.299066][T11253] kernel_clone+0x1a5/0x5e0 [ 446.299092][T11253] ? vfs_write+0x86e/0x9f0 [ 446.299181][T11253] __x64_sys_clone+0x143/0x180 [ 446.299217][T11253] x64_sys_call+0x1222/0x3020 [ 446.299238][T11253] do_syscall_64+0x12c/0x3b0 [ 446.299279][T11253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.299301][T11253] RIP: 0033:0x7f14ffcecdd9 [ 446.299315][T11253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.299331][T11253] RSP: 002b:00007f14fe73efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 446.299348][T11253] RAX: ffffffffffffffda RBX: 00007f14fff65fa0 RCX: 00007f14ffcecdd9 [ 446.299380][T11253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000410c5000 [ 446.299463][T11253] RBP: 00007f14fe73f090 R08: 0000000000000000 R09: 0000000000000000 [ 446.299475][T11253] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 446.299486][T11253] R13: 00007f14fff66038 R14: 00007f14fff65fa0 R15: 00007ffd2693f768 [ 446.299507][T11253] [ 446.537092][ T28] audit: type=1400 audit(1778263415.386:2236): avc: denied { mount } for pid=11257 comm="syz.0.2344" name="/" dev="autofs" ino=30094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 446.571111][T11258] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 446.620791][T11265] netlink: 'syz.0.2347': attribute type 3 has an invalid length. [ 446.636388][T11265] netlink: 'syz.0.2347': attribute type 4 has an invalid length. [ 446.645713][T11265] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.2347'. [ 446.661942][T11265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2347'. [ 446.680206][T11265] xt_hashlimit: size too large, truncated to 1048576 [ 446.738412][T11270] @ÿ: renamed from bond_slave_0 [ 446.903673][T11272] loop4: detected capacity change from 0 to 1024 [ 446.924552][T11272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.958925][ T28] audit: type=1400 audit(1778263415.786:2237): avc: denied { write } for pid=11271 comm="syz.4.2349" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 446.993486][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.038740][T11279] loop3: detected capacity change from 0 to 128 [ 447.062342][T11276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2350'. [ 447.079804][T11279] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 447.093560][T11276] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 447.116414][T11279] ext4 filesystem being mounted at /442/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.145578][ T28] audit: type=1400 audit(1778263415.986:2238): avc: denied { write } for pid=11278 comm="syz.3.2352" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 447.333408][T11290] tipc: Started in network mode [ 447.338629][T11290] tipc: Node identity 4, cluster identity 4711 [ 447.344922][T11290] tipc: Node number set to 4 [ 447.486013][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2357'. [ 447.544820][T11296] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 447.607062][T11299] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:19999 [ 447.700286][T11303] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 447.855312][T11299] loop4: detected capacity change from 0 to 512 [ 447.952558][T11299] EXT4-fs: Ignoring removed oldalloc option [ 447.990300][T11299] ext3: Bad value for 'barrier' [ 448.042119][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 448.228902][ T28] audit: type=1400 audit(1778263417.076:2239): avc: denied { create } for pid=11314 comm="syz.3.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 448.256690][T11317] hub 8-0:1.0: USB hub found [ 448.261442][T11317] hub 8-0:1.0: 8 ports detected [ 448.272010][T11317] netlink: 'syz.0.2362': attribute type 36 has an invalid length. [ 448.282926][T11317] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 448.292845][T11317] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 448.305769][T11317] netlink: 'syz.0.2362': attribute type 10 has an invalid length. [ 448.314669][T11317] team0: Device ipvlan0 failed to register rx_handler [ 449.293894][T11334] __nla_validate_parse: 2 callbacks suppressed [ 449.293912][T11334] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2368'. [ 450.138534][ T3413] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 450.158337][ T3413] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 450.251388][T11349] loop3: detected capacity change from 0 to 1024 [ 450.278840][T11349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.313978][T11345] fido_id[11345]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 450.332988][ T28] audit: type=1400 audit(1778263419.156:2240): avc: denied { write } for pid=11346 comm="syz.3.2371" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 450.379128][T11353] syz_tun: entered allmulticast mode [ 450.393045][ T28] audit: type=1400 audit(1778263419.216:2241): avc: denied { open } for pid=11346 comm="syz.3.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 450.412705][ T28] audit: type=1400 audit(1778263419.216:2242): avc: denied { kernel } for pid=11346 comm="syz.3.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 450.488570][T11353] dvmrp8: entered allmulticast mode [ 450.521892][T11353] syz_tun: left allmulticast mode [ 451.047518][ T28] audit: type=1400 audit(1778263419.896:2243): avc: denied { write } for pid=11359 comm="syz.0.2374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 451.096397][T11361] loop0: detected capacity change from 0 to 512 [ 451.139143][T11361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.152930][T11361] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.168848][ T28] audit: type=1400 audit(1778263420.016:2244): avc: denied { write } for pid=11359 comm="syz.0.2374" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.220188][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.428210][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2376'. [ 451.448898][ T28] audit: type=1400 audit(1778263420.296:2245): avc: denied { tracepoint } for pid=11373 comm="syz.3.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 451.449274][T11374] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 451.750981][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.788088][T11384] loop2: detected capacity change from 0 to 1024 [ 451.823039][T11384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.836355][ T28] audit: type=1400 audit(1778263420.686:2246): avc: denied { write } for pid=11383 comm="syz.2.2381" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 451.907382][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.958468][T11390] netlink: 'syz.0.2380': attribute type 10 has an invalid length. [ 451.968893][T11390] team0: Device ipvlan0 failed to register rx_handler [ 452.651028][T11395] loop2: detected capacity change from 0 to 512 [ 452.704179][T11395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.718021][T11395] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.739093][ T28] audit: type=1400 audit(1778263421.576:2247): avc: denied { write } for pid=11393 comm="syz.2.2383" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.965945][T11415] veth3: entered allmulticast mode [ 453.181474][ T28] audit: type=1326 audit(1778263422.026:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.0.2391" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f426f5ccdd9 code=0x0 [ 453.317088][T11422] random: crng reseeded on system resumption [ 453.335315][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.345200][T11422] loop0: detected capacity change from 0 to 512 [ 453.471758][T11433] FAULT_INJECTION: forcing a failure. [ 453.471758][T11433] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 453.485146][T11433] CPU: 0 UID: 0 PID: 11433 Comm: syz.3.2395 Tainted: G W syzkaller #0 PREEMPT(full) [ 453.485179][T11433] Tainted: [W]=WARN [ 453.485186][T11433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 453.485199][T11433] Call Trace: [ 453.485205][T11433] [ 453.485211][T11433] __dump_stack+0x1d/0x30 [ 453.485295][T11433] dump_stack_lvl+0x95/0xd0 [ 453.485379][T11433] dump_stack+0x15/0x1b [ 453.485395][T11433] should_fail_ex+0x263/0x280 [ 453.485440][T11433] should_fail_alloc_page+0xf2/0x100 [ 453.485466][T11433] __alloc_frozen_pages_noprof+0x108/0x350 [ 453.485563][T11433] alloc_pages_mpol+0xb3/0x260 [ 453.485632][T11433] folio_alloc_mpol_noprof+0x39/0x80 [ 453.485651][T11433] shmem_get_folio_gfp+0x3da/0xd60 [ 453.485744][T11433] shmem_fault+0xf6/0x250 [ 453.485874][T11433] handle_mm_fault+0x1a24/0x2e70 [ 453.485896][T11433] ? __pfx_shmem_fault+0x10/0x10 [ 453.485918][T11433] __get_user_pages+0x1290/0x1f10 [ 453.485997][T11433] ? path_openat+0x1ab2/0x2050 [ 453.486024][T11433] faultin_page_range+0x107/0x4d0 [ 453.486050][T11433] madvise_do_behavior+0x19f/0xa10 [ 453.486094][T11433] ? 0xffffffff81000000 [ 453.486105][T11433] ? __rcu_read_unlock+0x4e/0x70 [ 453.486124][T11433] do_madvise+0x10e/0x190 [ 453.486155][T11433] __x64_sys_madvise+0x63/0x80 [ 453.486183][T11433] x64_sys_call+0x1eff/0x3020 [ 453.486324][T11433] do_syscall_64+0x12c/0x3b0 [ 453.486348][T11433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.486366][T11433] RIP: 0033:0x7f5a391ccdd9 [ 453.486378][T11433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.486392][T11433] RSP: 002b:00007f5a37c27028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 453.486472][T11433] RAX: ffffffffffffffda RBX: 00007f5a39445fa0 RCX: 00007f5a391ccdd9 [ 453.486483][T11433] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 453.486493][T11433] RBP: 00007f5a37c27090 R08: 0000000000000000 R09: 0000000000000000 [ 453.486503][T11433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 453.486535][T11433] R13: 00007f5a39446038 R14: 00007f5a39445fa0 R15: 00007ffeba4e1b28 [ 453.486551][T11433] [ 453.709015][T11434] loop2: detected capacity change from 0 to 512 [ 453.728481][T11434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.746053][ T28] audit: type=1400 audit(1778263422.586:2249): avc: denied { write } for pid=11425 comm="syz.2.2392" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 453.858900][T11440] loop3: detected capacity change from 0 to 128 [ 453.872958][T11440] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 453.899642][T11440] ext4 filesystem being mounted at /458/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.928503][ T28] audit: type=1400 audit(1778263422.776:2250): avc: denied { write } for pid=11439 comm="syz.3.2397" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 454.011282][T11443] loop4: detected capacity change from 0 to 128 [ 454.091783][ T28] audit: type=1326 audit(1778263422.936:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.0.2400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f5ccdd9 code=0x7ffc0000 [ 454.136521][ T28] audit: type=1326 audit(1778263422.946:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.0.2400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f5ccdd9 code=0x7ffc0000 [ 454.240956][ T28] audit: type=1326 audit(1778263422.946:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.0.2400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f5ccdd9 code=0x7ffc0000 [ 454.481100][ T28] audit: type=1326 audit(1778263422.946:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11448 comm="syz.0.2400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f426f5ccdd9 code=0x7ffc0000 [ 454.559765][T11455] loop0: detected capacity change from 0 to 512 [ 454.811748][T11455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.826030][T11455] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.853927][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 454.858106][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.033843][T11467] loop2: detected capacity change from 0 to 512 [ 455.119369][T11467] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 455.178832][T11467] EXT4-fs (loop2): mount failed [ 455.185454][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.254966][ T899] Bluetooth: hci0: Frame reassembly failed (-84) [ 455.333937][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2407'. [ 455.353793][T11476] xfrm0 speed is unknown, defaulting to 1000 [ 455.706882][T11494] loop0: detected capacity change from 0 to 512 [ 455.780014][T11503] netlink: 'syz.4.2415': attribute type 10 has an invalid length. [ 455.791342][T11503] team0: Device ipvlan0 failed to register rx_handler [ 455.857415][T11494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.871081][T11494] ext4 filesystem being mounted at /469/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.477371][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.930372][T11515] loop2: detected capacity change from 0 to 512 [ 457.063746][T11515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.076511][T11515] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.096169][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 457.125869][ T28] audit: type=1400 audit(1778263425.936:2292): avc: denied { write } for pid=11510 comm="syz.2.2418" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 457.376266][ T3938] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 458.118204][ T28] audit: type=1326 audit(1778263426.966:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11529 comm="syz.4.2423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810c09cdd9 code=0x7ffc0000 [ 458.155613][T11530] loop4: detected capacity change from 0 to 1024 [ 458.168034][T11532] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 458.179957][T11530] EXT4-fs: Ignoring removed orlov option [ 458.218495][T11530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.219171][ T28] audit: type=1326 audit(1778263426.966:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11529 comm="syz.4.2423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810c09cdd9 code=0x7ffc0000 [ 458.256718][ T28] audit: type=1326 audit(1778263426.996:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11529 comm="syz.4.2423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810c09cdd9 code=0x7ffc0000 [ 458.258431][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.283164][ T28] audit: type=1326 audit(1778263426.996:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11529 comm="syz.4.2423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f810c09cdd9 code=0x7ffc0000 [ 458.334704][ T28] audit: type=1326 audit(1778263426.996:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11529 comm="syz.4.2423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f810c09cb42 code=0x7ffc0000 [ 458.360244][ T28] audit: type=1326 audit(1778263426.996:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11529 comm="syz.4.2423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810c09cdd9 code=0x7ffc0000 [ 458.387290][ T28] audit: type=1326 audit(1778263426.996:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11529 comm="syz.4.2423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f810c05d60e code=0x7ffc0000 [ 458.413016][ T28] audit: type=1326 audit(1778263426.996:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11529 comm="syz.4.2423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f810c09cc07 code=0x7ffc0000 [ 458.440841][ T28] audit: type=1326 audit(1778263426.996:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11529 comm="syz.4.2423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f810c05d60e code=0x7ffc0000 [ 458.487253][T11544] loop2: detected capacity change from 0 to 256 [ 458.505453][T11544] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 458.509195][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.534108][T11546] loop0: detected capacity change from 0 to 128 [ 458.567775][T11546] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 458.609569][T11546] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.737998][T11544] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 458.766557][T11544] FAT-fs (loop2): Filesystem has been set read-only [ 458.775269][T11544] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 458.783583][T11544] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 458.885523][T11544] netlink: 'syz.2.2426': attribute type 11 has an invalid length. [ 458.987267][T11571] FAULT_INJECTION: forcing a failure. [ 458.987267][T11571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.053531][T11571] CPU: 1 UID: 0 PID: 11571 Comm: syz.3.2434 Tainted: G W syzkaller #0 PREEMPT(full) [ 459.053562][T11571] Tainted: [W]=WARN [ 459.053570][T11571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 459.053584][T11571] Call Trace: [ 459.053602][T11571] [ 459.053610][T11571] __dump_stack+0x1d/0x30 [ 459.053641][T11571] dump_stack_lvl+0x95/0xd0 [ 459.053660][T11571] dump_stack+0x15/0x1b [ 459.053682][T11571] should_fail_ex+0x263/0x280 [ 459.053716][T11571] should_fail+0xb/0x20 [ 459.053765][T11571] should_fail_usercopy+0x1a/0x20 [ 459.053839][T11571] _copy_from_user+0x1c/0xb0 [ 459.053876][T11571] copy_from_sockptr_offset+0x66/0xa0 [ 459.053942][T11571] do_tcp_getsockopt+0x97c/0x1b90 [ 459.053965][T11571] ? preempt_schedule_irq+0x2d/0x50 [ 459.054059][T11571] ? __rcu_read_unlock+0x4e/0x70 [ 459.054083][T11571] ? avc_has_perm_noaudit+0xab/0x130 [ 459.054118][T11571] ? avc_has_perm+0x101/0x190 [ 459.054198][T11571] tcp_getsockopt+0x6e/0xe0 [ 459.054224][T11571] sock_common_getsockopt+0x60/0x70 [ 459.054254][T11571] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 459.054326][T11571] do_sock_getsockopt+0x2f5/0x570 [ 459.054359][T11571] __x64_sys_getsockopt+0x11d/0x1a0 [ 459.054409][T11571] x64_sys_call+0x2dcf/0x3020 [ 459.054436][T11571] do_syscall_64+0x12c/0x3b0 [ 459.054521][T11571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.054541][T11571] RIP: 0033:0x7f5a391ccdd9 [ 459.054558][T11571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.054579][T11571] RSP: 002b:00007f5a37c27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 459.054656][T11571] RAX: ffffffffffffffda RBX: 00007f5a39445fa0 RCX: 00007f5a391ccdd9 [ 459.054673][T11571] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 459.054684][T11571] RBP: 00007f5a37c27090 R08: 0000200000000580 R09: 0000000000000000 [ 459.054696][T11571] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 459.054709][T11571] R13: 00007f5a39446038 R14: 00007f5a39445fa0 R15: 00007ffeba4e1b28 [ 459.054757][T11571] [ 459.312833][T11544] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 459.320919][T11544] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 459.329587][T11544] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 459.447399][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 459.478095][T11581] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2438'. [ 459.558804][T11586] loop3: detected capacity change from 0 to 512 [ 459.660134][T11586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.674072][T11586] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.815553][T11603] loop4: detected capacity change from 0 to 512 [ 459.867621][T11603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.889384][T11609] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2446'. [ 459.928335][T11609] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2446'. [ 460.361291][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.427409][T11620] loop0: detected capacity change from 0 to 128 [ 460.457253][T11620] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 460.493687][T11620] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.889153][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.217878][T11629] loop4: detected capacity change from 0 to 128 [ 461.225668][T11631] loop3: detected capacity change from 0 to 128 [ 461.316718][T11629] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 461.345716][T11632] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2452'. [ 461.366077][T11629] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.368364][T11631] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 461.398044][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 461.482138][T11631] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.458317][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 462.684558][T11655] loop0: detected capacity change from 0 to 128 [ 462.767139][ T28] kauditd_printk_skb: 104 callbacks suppressed [ 462.767162][ T28] audit: type=1400 audit(1778263431.616:2406): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 462.822328][ T28] audit: type=1400 audit(1778263431.656:2407): avc: denied { write } for pid=3298 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 462.883403][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 462.924483][T11661] hub 8-0:1.0: USB hub found [ 462.929427][T11661] hub 8-0:1.0: 8 ports detected [ 462.956182][T11661] netlink: 'syz.4.2458': attribute type 36 has an invalid length. [ 462.971921][T11661] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 462.981876][T11661] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 463.005544][T11661] netlink: 'syz.4.2458': attribute type 10 has an invalid length. [ 463.016667][T11661] team0: Device ipvlan0 failed to register rx_handler [ 463.746147][T11665] syzkaller0: entered promiscuous mode [ 463.779694][T11665] syzkaller0: entered allmulticast mode [ 463.846672][T11671] FAULT_INJECTION: forcing a failure. [ 463.846672][T11671] name failslab, interval 1, probability 0, space 0, times 0 [ 463.870015][T11675] loop3: detected capacity change from 0 to 128 [ 463.886260][T11671] CPU: 0 UID: 0 PID: 11671 Comm: syz.4.2461 Tainted: G W syzkaller #0 PREEMPT(full) [ 463.886294][T11671] Tainted: [W]=WARN [ 463.886302][T11671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 463.886336][T11671] Call Trace: [ 463.886342][T11671] [ 463.886348][T11671] __dump_stack+0x1d/0x30 [ 463.886374][T11671] dump_stack_lvl+0x95/0xd0 [ 463.886393][T11671] dump_stack+0x15/0x1b [ 463.886416][T11671] should_fail_ex+0x263/0x280 [ 463.886443][T11671] ? inet6_dump_fib+0x19d/0x6f0 [ 463.886473][T11671] should_failslab+0x8c/0xb0 [ 463.886524][T11671] __kmalloc_cache_noprof+0x5f/0x400 [ 463.886559][T11671] inet6_dump_fib+0x19d/0x6f0 [ 463.886640][T11671] ? __pfx_inet6_dump_fib+0x10/0x10 [ 463.886717][T11671] rtnl_dump_all+0x19c/0x230 [ 463.886745][T11671] ? __pfx_rtnl_dump_all+0x10/0x10 [ 463.886833][T11671] rtnl_dumpit+0x71/0x140 [ 463.886858][T11671] netlink_dump+0x455/0x870 [ 463.886915][T11671] __netlink_dump_start+0x43e/0x520 [ 463.886942][T11671] ? __pfx_rtnl_dump_all+0x10/0x10 [ 463.886968][T11671] rtnetlink_rcv_msg+0x59f/0x720 [ 463.886994][T11671] ? __pfx_rtnl_dump_all+0x10/0x10 [ 463.887077][T11671] ? __pfx_rtnl_dumpit+0x10/0x10 [ 463.887143][T11671] ? __pfx_rtnl_dump_all+0x10/0x10 [ 463.887191][T11671] netlink_rcv_skb+0x123/0x220 [ 463.887217][T11671] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 463.887248][T11671] rtnetlink_rcv+0x1c/0x30 [ 463.887272][T11671] netlink_unicast+0x5a8/0x680 [ 463.887315][T11671] netlink_sendmsg+0x5c8/0x6f0 [ 463.887344][T11671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.887404][T11671] sock_write_iter+0x2e8/0x320 [ 463.887433][T11671] ? __pfx_sock_write_iter+0x10/0x10 [ 463.887505][T11671] vfs_write+0x5a6/0x9f0 [ 463.887605][T11671] ksys_write+0xdc/0x1a0 [ 463.887643][T11671] __x64_sys_write+0x40/0x50 [ 463.887677][T11671] x64_sys_call+0x27e1/0x3020 [ 463.887723][T11671] do_syscall_64+0x12c/0x3b0 [ 463.887750][T11671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.887771][T11671] RIP: 0033:0x7f810c09cdd9 [ 463.887822][T11671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.887839][T11671] RSP: 002b:00007f810aaf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 463.887857][T11671] RAX: ffffffffffffffda RBX: 00007f810c315fa0 RCX: 00007f810c09cdd9 [ 463.887870][T11671] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 463.887948][T11671] RBP: 00007f810aaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 463.887959][T11671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.887970][T11671] R13: 00007f810c316038 R14: 00007f810c315fa0 R15: 00007ffcb1671cc8 [ 463.887988][T11671] [ 464.167303][T11675] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 464.187210][T11675] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.229933][ T28] audit: type=1400 audit(1778263433.076:2408): avc: denied { map } for pid=11680 comm="syz.4.2464" path="socket:[31860]" dev="sockfs" ino=31860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 464.295668][ T28] audit: type=1400 audit(1778263433.076:2409): avc: denied { accept } for pid=11680 comm="syz.4.2464" path="socket:[31860]" dev="sockfs" ino=31860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 464.320383][ T28] audit: type=1400 audit(1778263433.126:2410): avc: denied { write } for pid=11674 comm="syz.3.2463" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 464.367560][T11669] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2460'. [ 464.404867][T11669] loop2: detected capacity change from 0 to 512 [ 464.413663][T11687] loop0: detected capacity change from 0 to 128 [ 464.426944][T11669] EXT4-fs: Ignoring removed nomblk_io_submit option [ 464.458591][T11687] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 464.558711][T11669] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 464.589899][T11689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2467'. [ 464.621637][ T3399] kernel read not supported for file /mdstat (pid: 3399 comm: kworker/1:4) [ 464.928418][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 464.938302][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2460'. [ 464.947341][T11687] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.043786][ T28] audit: type=1400 audit(1778263433.846:2411): avc: denied { write } for pid=11685 comm="syz.0.2466" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 465.574202][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 465.616483][T11715] syzkaller0: entered promiscuous mode [ 465.622075][T11715] syzkaller0: entered allmulticast mode [ 465.829936][T11724] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2476'. [ 465.859337][T11724] netlink: zone id is out of range [ 465.879004][T11724] netlink: zone id is out of range [ 465.898137][T11724] netlink: zone id is out of range [ 465.919872][T11724] netlink: zone id is out of range [ 466.001034][T11736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2479'. [ 466.038811][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2479'. [ 466.101224][T11737] hub 8-0:1.0: USB hub found [ 466.106156][T11737] hub 8-0:1.0: 8 ports detected [ 466.121809][T11737] netlink: 'syz.3.2477': attribute type 10 has an invalid length. [ 466.962287][T11737] team0: Device ipvlan0 failed to register rx_handler [ 467.244056][ T28] audit: type=1400 audit(1778263435.986:2412): avc: denied { create } for pid=11745 comm="syz.3.2482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 467.687349][T11749] xfrm0 speed is unknown, defaulting to 1000 [ 467.707668][T11747] loop2: detected capacity change from 0 to 128 [ 468.050766][T11757] syzkaller0: entered promiscuous mode [ 468.075438][T11757] syzkaller0: entered allmulticast mode [ 468.186102][T11765] loop4: detected capacity change from 0 to 512 [ 468.241558][T11765] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 468.311493][T11765] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.2487: Allocating blocks 41-42 which overlap fs metadata [ 468.337777][T11765] loop4: lost filesystem error report for type 5 error -117 [ 468.341961][T11765] Quota error (device loop4): write_blk: dquota write failed [ 468.349307][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 468.349327][ C0] EXT4-fs (loop4): initial error at time 1778263437: ext4_mb_mark_diskspace_used:4222 [ 468.349382][ C0] EXT4-fs (loop4): last error at time 1778263437: ext4_mb_mark_diskspace_used:4222 [ 468.423936][T11768] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2483'. [ 468.431633][T11765] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 468.442319][T11765] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.2487: Allocating blocks 41-42 which overlap fs metadata [ 468.456263][T11765] loop4: lost filesystem error report for type 5 error -117 [ 468.456426][T11765] Quota error (device loop4): write_blk: dquota write failed [ 468.476284][T11765] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 468.487001][T11765] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.2487: Failed to acquire dquot type 1 [ 468.506647][T11765] loop4: lost filesystem error report for type 5 error -117 [ 468.506911][T11765] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 468.541944][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 468.551055][T11765] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.2487: corrupted inode contents [ 468.573596][T11755] loop0: detected capacity change from 0 to 512 [ 468.583315][T11765] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 468.583631][T11765] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #12: comm syz.4.2487: mark_inode_dirty error [ 468.604426][T11755] EXT4-fs: Ignoring removed nomblk_io_submit option [ 468.613361][T11765] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 468.614691][T11765] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.2487: corrupted inode contents [ 468.636136][T11765] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 468.637075][T11765] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.2487: mark_inode_dirty error [ 468.666524][T11765] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 468.666850][T11765] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.2487: corrupted inode contents [ 468.689405][T11782] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 468.716045][T11765] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 468.716406][T11765] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 468.734122][T11755] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 468.747767][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2483'. [ 468.762392][T11765] loop4: lost filesystem error report for type 5 error -117 [ 468.762528][T11765] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.2487: corrupted inode contents [ 468.784020][T11765] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 468.784623][T11765] EXT4-fs error (device loop4): ext4_truncate:4690: inode #12: comm syz.4.2487: mark_inode_dirty error [ 468.805185][T11765] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 468.806231][T11765] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 468.837266][T11790] loop3: detected capacity change from 0 to 512 [ 468.844004][T11765] loop4: lost filesystem error report for type 5 error -117 [ 468.844436][T11765] EXT4-fs (loop4): 1 truncate cleaned up [ 468.859010][T11765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.881866][T11790] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 468.906586][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.915622][T11790] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 468.935275][T11790] EXT4-fs (loop3): mount failed [ 468.989036][ T28] audit: type=1400 audit(1778263437.836:2413): avc: denied { listen } for pid=11798 comm="syz.1.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 469.053930][T11803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2499'. [ 469.062770][T11797] loop4: detected capacity change from 0 to 512 [ 469.079137][T11797] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 469.103258][T11805] hub 8-0:1.0: USB hub found [ 469.108008][T11805] hub 8-0:1.0: 8 ports detected [ 469.116433][T11805] netlink: 'syz.3.2498': attribute type 36 has an invalid length. [ 469.210049][T11805] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 469.220108][T11805] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 469.236449][T11805] netlink: 'syz.3.2498': attribute type 10 has an invalid length. [ 469.244668][T11805] team0: Device ipvlan0 failed to register rx_handler [ 469.336834][ T28] audit: type=1400 audit(1778263438.176:2414): avc: denied { setopt } for pid=11806 comm="syz.1.2500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 469.373185][T11811] loop4: detected capacity change from 0 to 512 [ 469.412421][T11812] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20000 [ 469.431609][T11811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.444736][T11811] ext4 filesystem being mounted at /495/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 469.462359][T11811] EXT4-fs (loop4): shut down requested (1) [ 469.474059][ T28] audit: type=1400 audit(1778263438.316:2415): avc: denied { write } for pid=11810 comm="syz.4.2501" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.525708][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.560782][ T28] audit: type=1400 audit(1778263438.346:2416): avc: denied { read } for pid=2965 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 469.627270][ T28] audit: type=1400 audit(1778263438.346:2417): avc: denied { search } for pid=2965 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.178053][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2505'. [ 470.201325][T11825] ip6_vti0: Master is either lo or non-ether device [ 470.388996][T11829] hub 8-0:1.0: USB hub found [ 470.393834][T11829] hub 8-0:1.0: 8 ports detected [ 470.401044][T11829] netlink: 'syz.4.2502': attribute type 10 has an invalid length. [ 470.410158][T11829] team0: Device ipvlan0 failed to register rx_handler [ 470.749346][T11834] loop2: detected capacity change from 0 to 1024 [ 470.780123][T11834] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 470.796664][T11834] System zones: 0-1, 3-36 [ 470.827451][T11834] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2508: bad orphan inode 134217728 [ 470.852423][T11830] loop3: detected capacity change from 0 to 128 [ 470.901378][T11834] loop2: lost filesystem error report for type 5 error -117 [ 470.928022][T11834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.024078][T11834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2508'. [ 471.046798][T11834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2508'. [ 471.278058][T11854] hub 8-0:1.0: USB hub found [ 471.282915][T11854] hub 8-0:1.0: 8 ports detected [ 471.298107][T11854] netlink: 'syz.0.2511': attribute type 36 has an invalid length. [ 471.314158][T11854] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 471.324224][T11854] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 471.342976][T11854] netlink: 'syz.0.2511': attribute type 10 has an invalid length. [ 471.353002][T11854] team0: Device ipvlan0 failed to register rx_handler [ 471.808394][T11862] netlink: 'syz.3.2514': attribute type 2 has an invalid length. [ 471.817419][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.827334][T11862] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2514'. [ 471.922579][T11865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2515'. [ 471.955813][T11862] loop3: detected capacity change from 0 to 512 [ 471.967399][T11862] EXT4-fs: quotafile must be on filesystem root [ 472.031260][T11865] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 472.039617][T11862] loop3: detected capacity change from 0 to 128 [ 472.124165][T11862] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 472.165645][T11879] loop2: detected capacity change from 0 to 164 [ 472.191266][T11862] ext4 filesystem being mounted at /479/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.215469][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2520'. [ 472.229470][T11875] syz0: rxe_newlink: already configured on xfrm0 [ 472.291295][ T3298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 472.314277][T11883] loop2: detected capacity change from 0 to 256 [ 472.327431][T11883] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 472.405987][T11890] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 472.426252][T11890] FAT-fs (loop2): Filesystem has been set read-only [ 472.465145][T11890] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 472.488793][T11890] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 472.506466][T11890] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 472.558539][T11883] netlink: 'syz.2.2521': attribute type 11 has an invalid length. [ 473.732644][T11881] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 473.814544][T11900] hub 8-0:1.0: USB hub found [ 473.819258][T11900] hub 8-0:1.0: 8 ports detected [ 473.826909][T11900] netlink: 'syz.0.2526': attribute type 10 has an invalid length. [ 473.835794][T11900] team0: Device ipvlan0 failed to register rx_handler [ 473.851577][T11912] 9p: Bad value for 'wfdno' [ 473.952741][T11926] FAULT_INJECTION: forcing a failure. [ 473.952741][T11926] name failslab, interval 1, probability 0, space 0, times 0 [ 473.966349][T11926] CPU: 0 UID: 0 PID: 11926 Comm: syz.4.2534 Tainted: G W syzkaller #0 PREEMPT(full) [ 473.966393][T11926] Tainted: [W]=WARN [ 473.966401][T11926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 473.966415][T11926] Call Trace: [ 473.966422][T11926] [ 473.966430][T11926] __dump_stack+0x1d/0x30 [ 473.966458][T11926] dump_stack_lvl+0x95/0xd0 [ 473.966545][T11926] dump_stack+0x15/0x1b [ 473.966569][T11926] should_fail_ex+0x263/0x280 [ 473.966601][T11926] ? rtnl_newlink+0x5c/0x1400 [ 473.966627][T11926] should_failslab+0x8c/0xb0 [ 473.966735][T11926] __kmalloc_cache_noprof+0x5f/0x400 [ 473.966768][T11926] ? __pfx_rtnl_newlink+0x10/0x10 [ 473.966797][T11926] rtnl_newlink+0x5c/0x1400 [ 473.966833][T11926] ? __siphash_unaligned+0x197/0x2e0 [ 473.966900][T11926] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 473.966928][T11926] ? __rcu_read_unlock+0x4e/0x70 [ 473.966948][T11926] ? avc_has_perm_noaudit+0xab/0x130 [ 473.966985][T11926] ? cred_has_capability+0x224/0x2a0 [ 473.967097][T11926] ? selinux_capable+0x31/0x40 [ 473.967126][T11926] ? security_capable+0x7b/0x90 [ 473.967176][T11926] ? ns_capable+0x7c/0xb0 [ 473.967227][T11926] ? __pfx_rtnl_newlink+0x10/0x10 [ 473.967255][T11926] rtnetlink_rcv_msg+0x64b/0x720 [ 473.967302][T11926] netlink_rcv_skb+0x123/0x220 [ 473.967330][T11926] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 473.967433][T11926] rtnetlink_rcv+0x1c/0x30 [ 473.967464][T11926] netlink_unicast+0x5a8/0x680 [ 473.967497][T11926] netlink_sendmsg+0x5c8/0x6f0 [ 473.967532][T11926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.967589][T11926] ____sys_sendmsg+0x563/0x5b0 [ 473.967621][T11926] ___sys_sendmsg+0x195/0x1e0 [ 473.967664][T11926] __x64_sys_sendmsg+0xd4/0x160 [ 473.967716][T11926] x64_sys_call+0x194c/0x3020 [ 473.967778][T11926] do_syscall_64+0x12c/0x3b0 [ 473.967810][T11926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.967829][T11926] RIP: 0033:0x7f810c09cdd9 [ 473.967861][T11926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.967895][T11926] RSP: 002b:00007f810aaf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.967918][T11926] RAX: ffffffffffffffda RBX: 00007f810c315fa0 RCX: 00007f810c09cdd9 [ 473.967935][T11926] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 473.967951][T11926] RBP: 00007f810aaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 473.967962][T11926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.967972][T11926] R13: 00007f810c316038 R14: 00007f810c315fa0 R15: 00007ffcb1671cc8 [ 473.967993][T11926] [ 474.773566][T11928] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 474.853378][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2538'. [ 474.863648][T11936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2538'. [ 474.873165][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2538'. [ 474.882386][T11936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2538'. [ 474.942536][T11947] loop0: detected capacity change from 0 to 256 [ 476.350914][T11977] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 476.477130][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 476.477146][ T28] audit: type=1400 audit(1778263701.318:2435): avc: denied { create } for pid=11978 comm="syz.0.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 476.528473][T11979] loop0: detected capacity change from 0 to 512 [ 476.588998][T11979] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 476.766280][T11979] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 477.134349][ T28] audit: type=1400 audit(1778263701.978:2436): avc: denied { bind } for pid=11978 comm="syz.0.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 477.159071][ T28] audit: type=1400 audit(1778263701.998:2437): avc: denied { setopt } for pid=11978 comm="syz.0.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 477.428885][T11990] syz0: rxe_newlink: already configured on xfrm0 [ 477.646960][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2551'. [ 477.684551][T11993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2551'. [ 477.712188][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2551'. [ 477.738595][T11993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2551'. [ 477.819481][T12003] loop2: detected capacity change from 0 to 512 [ 477.871184][T12003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.884823][T12003] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 477.902565][ T28] audit: type=1400 audit(1778263702.748:2438): avc: denied { write } for pid=12002 comm="syz.2.2554" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 477.987688][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.006955][T12008] sctp: [Deprecated]: syz.1.2555 (pid 12008) Use of int in maxseg socket option. [ 478.006955][T12008] Use struct sctp_assoc_value instead [ 478.225914][T12010] loop2: detected capacity change from 0 to 2048 [ 478.260323][T12010] EXT4-fs: Ignoring removed nobh option [ 478.318717][T12010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.351762][T12010] ext4 filesystem being mounted at /496/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.431081][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.516269][ C1] ================================================================== [ 479.524417][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 479.531662][ C1] [ 479.534002][ C1] read-write to 0xffff88810b6a78d8 of 8 bytes by interrupt on cpu 0: [ 479.542080][ C1] wq_worker_tick+0x64/0x240 [ 479.546703][ C1] sched_tick+0xbc/0x1f0 [ 479.550960][ C1] update_process_times+0x15e/0x190 [ 479.556168][ C1] tick_nohz_handler+0x275/0x3d0 [ 479.561123][ C1] __hrtimer_run_queues+0x276/0x4f0 [ 479.566336][ C1] hrtimer_interrupt+0x261/0x850 [ 479.571296][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 479.577206][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 479.582858][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 479.588852][ C1] curve25519+0x241e/0x51d0 [ 479.593374][ C1] wg_noise_handshake_create_initiation+0x180/0x610 [ 479.599994][ C1] wg_packet_handshake_send_worker+0xb2/0x160 [ 479.606098][ C1] process_scheduled_works+0x4f0/0x9c0 [ 479.611582][ C1] worker_thread+0x58a/0x780 [ 479.616193][ C1] kthread+0x22a/0x280 [ 479.620277][ C1] ret_from_fork+0x146/0x330 [ 479.624904][ C1] ret_from_fork_asm+0x1a/0x30 [ 479.629702][ C1] [ 479.632042][ C1] read-write to 0xffff88810b6a78d8 of 8 bytes by interrupt on cpu 1: [ 479.640116][ C1] wq_worker_tick+0x64/0x240 [ 479.644739][ C1] sched_tick+0xbc/0x1f0 [ 479.648990][ C1] update_process_times+0x15e/0x190 [ 479.654196][ C1] tick_nohz_handler+0x275/0x3d0 [ 479.659157][ C1] __hrtimer_run_queues+0x276/0x4f0 [ 479.664370][ C1] hrtimer_interrupt+0x261/0x850 [ 479.669316][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 479.675229][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 479.680878][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 479.686886][ C1] __tsan_read2+0xbe/0x190 [ 479.691325][ C1] sel_netnode_sid+0xa4/0x250 [ 479.696020][ C1] selinux_ip_postroute+0xae7/0xba0 [ 479.701237][ C1] nf_hook_slow+0x78/0x180 [ 479.705676][ C1] ip6_output+0x23c/0x280 [ 479.710028][ C1] ip6_local_out+0x77/0xd0 [ 479.714471][ C1] udp_tunnel6_xmit_skb+0x412/0x730 [ 479.719691][ C1] send6+0x389/0x4c0 [ 479.723610][ C1] wg_socket_send_skb_to_peer+0xbd/0x130 [ 479.729271][ C1] wg_socket_send_buffer_to_peer+0xf1/0x120 [ 479.735183][ C1] wg_packet_handshake_send_worker+0x10d/0x160 [ 479.741367][ C1] process_scheduled_works+0x4f0/0x9c0 [ 479.746850][ C1] worker_thread+0x58a/0x780 [ 479.751471][ C1] kthread+0x22a/0x280 [ 479.755557][ C1] ret_from_fork+0x146/0x330 [ 479.760164][ C1] ret_from_fork_asm+0x1a/0x30 [ 479.764965][ C1] [ 479.767292][ C1] value changed: 0x0000000000002710 -> 0x0000000000004e20 [ 479.774403][ C1] [ 479.776738][ C1] Reported by Kernel Concurrency Sanitizer on: [ 479.782897][ C1] CPU: 1 UID: 0 PID: 6235 Comm: kworker/u8:27 Tainted: G W syzkaller #0 PREEMPT(full) [ 479.794019][ C1] Tainted: [W]=WARN [ 479.797824][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 479.807893][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 479.814851][ C1] ================================================================== [ 479.942029][T12027] loop2: detected capacity change from 0 to 764 [ 479.969549][T12027] Symlink component flag not implemented [ 479.975733][T12027] Symlink component flag not implemented [ 480.073750][T12027] xfrm0 speed is unknown, defaulting to 1000