last executing test programs: 49.702496764s ago: executing program 1 (id=361): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000500)="f70200000076f6888e5897176005a36b0861db7ac98a10544af379f96ae853e11d4a5f1bbc4d346fc1b15043d6c001f749df6a0e57", 0x35}], 0x1}}], 0x1, 0xc8040) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200008c1) splice(r1, 0x0, r0, 0x0, 0x401, 0x6) 47.077282558s ago: executing program 2 (id=378): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000002240)="2d12376647d788ad2cdbd0e68c140c7f72d35ae5869c470a1f53ea73c32220190e02cb0b770bb154d1d5d1b343cb1feadca1752e4397955e1a151721f1b28b9e32b7966f9ddd7ad3822c5ff3dc03786c1c86c2a6f7c271710c573396ca95e95a524201b0bf0539042ae14072693f9734306f7a21f92421e8e0ea335d07d1f2839c4c195930cd35c65dfc527de84f2cab4f0c78474734d7c5cba0c70ee0fd10ad5ed3f4b70308c29000e8cd98d57c90c7d9298ee4a2c41b141614627880ace9cfde45a0", 0xc3, 0x4004085, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x3) 46.5263261s ago: executing program 1 (id=384): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x120d, &(0x7f0000003680)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1c0000005e007f089e", 0x9}, {0x0}], 0x2}, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x3, 0x4) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 45.440413473s ago: executing program 1 (id=391): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @mss={0x2, 0x7}, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x8) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8224, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffd, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000001c0)={0xfff, {{0x2, 0x4e24, @multicast2}}}, 0x88) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) dup(0xffffffffffffffff) (async) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) 45.14885496s ago: executing program 1 (id=395): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x21b, &(0x7f0000000780)="$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") r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) readlink(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000f000000ff70021500000000d29500800000001700"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0x2}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioprio_set$pid(0x2, 0x0, 0x2004) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8c) fchdir(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x1c9a00) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000018, 0x0, 0x0, 0x0, 0x1a, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b1c551265406c7f306003d8a0f4bd004ab3fde500", [0x9, 0x800000000000007b]}}) 44.722631615s ago: executing program 1 (id=397): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept(r0, 0x0, 0x0) (fail_nth: 2) 44.534235466s ago: executing program 1 (id=399): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r2, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1}, 0x40) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x8}, 0x880, 0x34, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="70010000100033060000000000000000e0000001000000000000000000000000ac1414aa000000000000000000000000ffff400000007fff0000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414fd000000000000000000000000000004d432000000fe80000000000000000000000000000b23030000000000000000000100000000000000000000000003000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a0000000100000000000000480002"], 0x170}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r5, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x800) write$rfkill(0xffffffffffffffff, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r6, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="12000000000000002900000036"], 0x250}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000000)={'security\x00', 0x0, [0xc00, 0x7558, 0x3ff, 0x101, 0x401]}, &(0x7f0000000080)=0x54) syz_genetlink_get_family_id$ethtool(&(0x7f0000003ec0), 0xffffffffffffffff) 44.519232647s ago: executing program 32 (id=399): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r2, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1}, 0x40) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x8}, 0x880, 0x34, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="70010000100033060000000000000000e0000001000000000000000000000000ac1414aa000000000000000000000000ffff400000007fff0000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414fd000000000000000000000000000004d432000000fe80000000000000000000000000000b23030000000000000000000100000000000000000000000003000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a0000000100000000000000480002"], 0x170}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r5, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x800) write$rfkill(0xffffffffffffffff, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r6, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="12000000000000002900000036"], 0x250}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000000)={'security\x00', 0x0, [0xc00, 0x7558, 0x3ff, 0x101, 0x401]}, &(0x7f0000000080)=0x54) syz_genetlink_get_family_id$ethtool(&(0x7f0000003ec0), 0xffffffffffffffff) 43.911378573s ago: executing program 2 (id=402): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x5}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r1, 0x80002) 43.551499914s ago: executing program 2 (id=404): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, r3, 0x25, 0x3, @void}, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)=@gettaction={0x224, 0x32, 0x425, 0x70bd2b, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xeeb}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x19e4}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x400}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x11bb}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_gd=@TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa3f}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x407d}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x224}, 0x1, 0x0, 0x0, 0x80d1}, 0x4008800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001d00000000001400", @ANYRES16=r4], 0x38}}, 0x0) 43.166212086s ago: executing program 2 (id=407): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x21b, &(0x7f0000000780)="$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") r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) readlink(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000f000000ff70021500000000d29500800000001700"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0x2}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioprio_set$pid(0x2, 0x0, 0x2004) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8c) fchdir(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x1c9a00) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000018, 0x0, 0x0, 0x0, 0x1a, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "91be8b1c551265406c7f306003d8a0f4bd004ab3fde500", [0x9, 0x800000000000007b]}}) 42.732161162s ago: executing program 2 (id=409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) 42.41428945s ago: executing program 2 (id=410): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6, {0x73a}}, './file0\x00'}) openat$cgroup_ro(r7, &(0x7f0000000180)='memory.events.local\x00', 0x0, 0x0) sendmsg$nl_xfrm(r6, 0x0, 0x4004) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) io_pgetevents(r3, 0x8001, 0x1, &(0x7f0000000240)=[{}], &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) pwrite64(r1, 0x0, 0x0, 0x9000) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367140051f60a64c9f4d4778037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000040) 42.41317401s ago: executing program 33 (id=410): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6, {0x73a}}, './file0\x00'}) openat$cgroup_ro(r7, &(0x7f0000000180)='memory.events.local\x00', 0x0, 0x0) sendmsg$nl_xfrm(r6, 0x0, 0x4004) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) io_pgetevents(r3, 0x8001, 0x1, &(0x7f0000000240)=[{}], &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) pwrite64(r1, 0x0, 0x0, 0x9000) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367140051f60a64c9f4d4778037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000040) 6.910199806s ago: executing program 3 (id=627): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002600), 0x0, 0xc8040) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200008c1) splice(r1, 0x0, r0, 0x0, 0x401, 0x6) 4.669531037s ago: executing program 4 (id=635): perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x6, 0xa, 0x40, 0x7, 0x0, 0x2, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x4986, 0xfc, 0x4, 0x9, 0x81, 0x7, 0x5, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1004000, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r0, 0x0) 4.049118174s ago: executing program 4 (id=636): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001540)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v', 0x1}], 0x1}}], 0x3, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000500)={r2, 0x3ff}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={r2, @in6={{0xa, 0x4e20, 0x5, @private1, 0x9}}, 0xf}, 0x90) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @private0, 0x9}, 0x1c, &(0x7f00000004c0)}}], 0x1, 0x20000000) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000010040)={0x0, 0x7ff}, &(0x7f0000010080)=0x8) 4.010463356s ago: executing program 0 (id=637): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FITRIM(r0, 0x40e8662e, 0x0) 3.987157827s ago: executing program 5 (id=638): preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000140)=""/74, 0x4a}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000380)=""/87, 0x57}, {&(0x7f0000000740)=""/239, 0xef}, {&(0x7f0000000480)=""/121, 0x79}, {&(0x7f0000000300)=""/12, 0xc}, {&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/37, 0x25}, {&(0x7f0000000640)=""/61, 0x3d}], 0xa, 0x1, 0x0) 3.698338444s ago: executing program 5 (id=640): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x82}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 3.697824384s ago: executing program 3 (id=641): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40e8662e, 0x0) 3.348605935s ago: executing program 4 (id=643): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000580)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x4, @local, 0x54}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000600)="d315cd2932e56555ecca73619fb622a45fed61b21bcac81f70ddfd8bb2aca538521ad39ef60d4fab35619d711f3e2271626a71a023d9b034b33beed76b39145ca8a357e91b54acc8453507c1258237166c9e3a8571f2ff06eb6c1d7b5ee28dfc6f55de7766eb868ef398c048cb66c1e678bf66323fff6aa378b631022d609a7739ebe38ec51d56534d84c11e94f459ea87cfb8a32e847bd170380b1f81302a460ef786d327630918d1d64eb878e4055f80f15cf1a1ba22bfe8bb9631d11c9e", 0xbf}, {&(0x7f00000006c0)="d2d57fe4656e9933767286ceda6af54dfa2d04cf9a7963c474e2f4fc04a056f2cc7deb1a1a464430102e4a0947036a86ff704327b2fc413030ad6cfd", 0x3c}, {&(0x7f0000000700)="c9a7fcba22178a4e0e92589c4baf71e9e295", 0x12}, {&(0x7f0000000740)="206db569c6b560fa8687964ef929a8981597b31a2b02712e6ac2f8f908ab45d8d393799f0575b7febc30c4e808dfa60b47d1c5767b9deec4839d03473ea444c21b3b98c6a6c166b7bf817400019e71ba2ac1226fac872f2df4ae2362597a6653a31a70e889dcc481c8109f2a534868ed15ff844330ac98cd151c970c10339f43bce6e8f3b4728cbad18d7656c96285079865089de8f5ea1c8d327a28d8c917f1d666ce38919c6fca93c2ddaaf05e9b8924bb443aefee93473c5f24bd13a9fdaa0e0cf2399082e9180d5d348624b637286e244caef7db67c310f9f186fc33f30d4c74830efeb8c1e262be", 0xea}, {&(0x7f0000000840)="90e1c0243cb6d97e14b238effb82a6c0326b1daf7c353c753c2f1d", 0x1b}, {&(0x7f0000000d80)="1fa4ffd7a92a9ff27e639e477a004d72ab245b0f6178cbf202d8e0357ff5ca43f4294673e10d5063153351e3cecc03a5f9e26a61f6f6843654b3a7ecee8457b3d171718aa91707050c274677885b1e6fd6b31c6939da9b9e20fb5e34d46646c8f7014f87b5ffd87b0d5aa81be7f32a7b11cb77221922c93b731b9ce6ad29bdc0eff52b884c0b021befb4d9f5c3d03e2bb1db3b54850d84d1251847d77819fc87589f3fb49d80caff8e805d02", 0xac}], 0x6, &(0x7f0000001740)=[{0xb0, 0x0, 0x3, "71753d1c4e2ebe764b084cd9c653fe5c91b35824764302952cec2a523ab3f9df5c58ce780b910a1ff1775a2396fc261d4ad1c6769cc741e3b01fafbc4a03800cf74d0a4f31509f6a37547b3f17d18c48afacaefc0a098806e5a74ca8ce71228d636660579a4b1a563f3f2810762aa8bdfb023122e97c825f5043646d6d25dd4f8194c29f4e4048decd4cf69d8c78814492c9ac4ff39b606e3948d18d"}, {0x108, 0x115, 0x9, "6d68005bb57ed18db5ca226c8c9e975f40d1a347275b497878808212a7d718b81383f071826aebe73fb61009606a4a2d05ff933aeea387a3c8c2b11b91b445453f2c4f4df57f4630f47eac4774cc263c5fe1d3059257b8f0b2886a45deca415136d68c451d7306b1e0a122d5e9644b56825b3beb1c8339e64f4525e4de48d179ebf64eb05ad318017c454db99598c38447ca4171146d63f456dc6d3641308a1f8da07d4b466ebec447e63c9e966db0c3284afd78ea25dd7e823f2e98141767bc8d095d84d03d966e3b5a42c81baa450bdd3c721c1dc39e2bcbfabbf3044c3b451d6cd3462e92619428ffa875d73e3cca84"}, {0x80, 0x117, 0xc6, "03330c8ddd48a936854a094cd46a0901414b829d92c40fbd2d4ac48f8eab58ec8269db536a18162935abad8dabd266e073dbbdb2f5ed516778ee213bf35dfcf7e5c1feff76701de406ab8caff00829a3ecd3b41cf349b987cf1ae551f0dce01cdb13ef3461305bbb923034fd0d"}, {0x110, 0x12f, 0x2, "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"}, {0x50, 0x10b, 0xff, "5272d0194a277cf735059e72cd41270bd9b17567bfca4e18871fb0cfedf5c6297b1427237b994d68d3dc01f157ebf52cb0ec9c4dc785e9eaed1b183ba94472e2"}, {0x100, 0x103, 0x7fffffff, "18ac655707603f4805ced2b557bf42edad91988af768b76c50cc983814c369e61da91102c4a975767b3836c56ac8b3884466bc8ce2186f8c0773e6401ed2e548773ad1bd1d79b7bc10c507e390c718284cb29722115e5754b1c74e08b27547af9a2875c735e1c0fdd891b54082b4b6e110b4ff26f2fe05189d9bae2ceac6225fe3f3d635890a4eb6be9f3d89f0c4b054cb64e1d88f7a3a51120420f0c27a798a72367bd3e12c0c2b811ded5e5bcc4aebe88f8dbed9edd18e62b2985487e6ff4b39023cfe2ea4da49086b62705432fc8434cb409e7bf7957b124b7a3e20b1c39da3a111b972349bf73e61ea3d45b4f8"}, {0x98, 0x107, 0x80000001, "f61b7348ea3066a7732f9f0f2d8c9949e60f65dc001124f1dddecb9867cd5ba4d6d47266f174a9bc5fbc9b9d1fc43af32dc539f5187c6887f80bbab80aaddebb0dfeda30a6c450ca275cbe6ae29737ad6b43a99f3b2c720645e1e2459f3f80f7e24735a330d5e05b507fa9962271a48e59dcffce6c79d2abad273efa04dec18e47b1da"}, {0xc8, 0x112, 0x8, "b7f77de27bc48c99085612d702203d963b63016c8d00a9a65ee318bc5fa6959364c075cd1cc6cf9622fdf841761c667215c7e4ae10f0a1b9cca2ae46965f29d8138ef4e89fa98d289de10de591a96ec20689564bb3a5ca54d82e1312a247c0904f2ea4ebb56ad8777be4bf2e08716cf4540e125e9bae33ac175908f7feb6c2ae3927b10316f3d18d7439a7f9e6ffb9595408907eebaed8aa41382fcb8f543258311b732cf6854253e73bd33773e4be19b812a3c7"}, {0xb8, 0x84, 0x0, "08808f96c8a8291616d9ea3733bad74a0dc207820809c53098b7e792ca0ea6212a4b6d11354fa1892350c16d6b52b83616e6ee0adca21c46e6eb168bd470569db4763c1586f8106463b363cd89fce6bf9c4f279e389cb5600c03d4d9142f50b9dd4e5b43469234a628f658f606291ab6fb475bb3c9274363766abf98c52e23361a3f04cb086762c6d1b26eccc9a0449c77c673c2bbdeafc108711b741797f0e05f2d624312470f64"}], 0x6b0}, 0x40000) fsopen(&(0x7f00000000c0)='cgroup\x00', 0x0) unshare(0x22020600) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4b800, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000640), 0x2) 3.290558288s ago: executing program 0 (id=644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000040)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) 3.25392384s ago: executing program 5 (id=645): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x81, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x5, 0x9, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x9, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffbf, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0xffffffff, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7ffc, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132c, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x6, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 3.08040221s ago: executing program 3 (id=646): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket(0x2, 0x80805, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100040, 0x4, &(0x7f0000006680)) r2 = epoll_create(0x4) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000280)={0x30000010}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) r5 = syz_io_uring_setup(0x1bcc, &(0x7f0000000140)={0x0, 0x6005, 0x0, 0x1, 0x1cc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r8, &(0x7f0000000200)=""/236, 0xec) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r9 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r9, 0x29, 0x1f, 0x0, 0x19) truncate(0x0, 0x9) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r10, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@private0, @private=0xa010100, 0x19, 0x18}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r11, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000004040)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f0000001ac0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') getsockopt$bt_hci(r1, 0x84, 0x2, 0x0, &(0x7f0000000180)) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90524fc60", 0x14}, {&(0x7f0000000300)="25c0875b44a76cb4f7495029dc85aa840831257d6364c3543086cbfc472698e35ca63d3a307accf7804724dd88f4dfec9015932d3221b1a167fd8d7f238d28decccb3013d0c2078bc83525ab80a66798931f3fcc1c3f49a7c75b224ba3eac27f9317185ad120e907f973ea99309ded51fec99bd79fe55cc5e7f92c71", 0x7c}], 0x2, 0x0, 0x0, 0x4000}, 0x20000040) 2.91442103s ago: executing program 4 (id=647): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000002240)="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", 0x100, 0x4004085, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x3) 2.91353262s ago: executing program 0 (id=648): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000480)='.\x00', 0x68800, 0x101) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {r4}}, './file1\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES8=r5, @ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = fsopen(&(0x7f0000000040)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x3, &(0x7f0000000000)='source', &(0x7f0000000080)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91e[\xea\x11\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x115b, &(0x7f0000000080)={0x0, 0xa1a1, 0x400, 0x1, 0xfa, 0x0, r7}, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r11, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) fdatasync(r10) fcntl$lock(r8, 0x7, 0x0) 2.56844005s ago: executing program 5 (id=649): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x120d, &(0x7f0000003680)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1c0000005e007f089e", 0x9}, {&(0x7f0000000140)="373e17aefc020107020010010000000a", 0x10}], 0x2}, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x3, 0x4) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 2.330168174s ago: executing program 4 (id=650): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000a40)="1791613d45501cb6a8d8eaeb96ee68b2d8daad34b8c528b97ead9f051e427e309b71", 0x22}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.22314974s ago: executing program 6 (id=651): preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000140)=""/74, 0x4a}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000380)=""/87, 0x57}, {&(0x7f0000000740)=""/239, 0xef}, {&(0x7f0000000480)=""/121, 0x79}, {&(0x7f0000000300)=""/12, 0xc}, {&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/37, 0x25}, {&(0x7f0000000640)=""/61, 0x3d}], 0xa, 0x1, 0x0) 1.598369527s ago: executing program 6 (id=652): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f", 0x85}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000800)="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", 0x1e7}, {&(0x7f0000000a40)="1791613d45501cb6a8d8eaeb96ee68b2d8daad34b8c528b97ead9f051e427e309b714d3d12d8d401ee42a681834000", 0x2f}], 0x2}}], 0x2, 0x2090) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.504559552s ago: executing program 4 (id=653): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb06"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_create(0xb, 0x0, &(0x7f0000000300)=0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) personality(0x5000002) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) timer_settime(r4, 0x1, &(0x7f0000000600)={{}, {0x0, 0x3938700}}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r3, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="28478ea201c70c84c5ee8bce118cbe4fadb332b72d378c270c839e397e393a6db4f56a9544e533be934305054e0cf47881459d3f61c710af7382aece201baf7a9f65087db388efa50236942c22511bdd2a616851fb241136fdabd34f79d90a2dfa03263073"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="180000008b0000000000002a0b00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000018500000086000000bf09000000000000550901000000000095000000000000001d0afffff0ffffff4500f4ff01000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x46}, 0x94) 1.436888056s ago: executing program 3 (id=654): syz_io_uring_complete(0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000100)=""/123, 0x7b}], 0x2, 0x2, 0xd) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000640)="f87c1acaea2a0e32950aa184f393d345d1aa92a04d4a5fee5f1c9ca5d964d1bb552b0b913879bbb3a0c42f1f42d3632ca655b96e7f7efb3d0ca832718243d8f7962ced9780c9c938ccbd48166ea51a513a683f73cbd1cd0dc207d2e3edb24f56b0f1074dbbab4770c02bb90af75155e7b81401a673ef79f025436a40d9e4c6889e219dbfa525b9124a9ac49dcb5be3b1dfa079432266441b9eb02edb703f58a6e226797fcd1872ac6c101b6eb266d124a930eeeeed1bcb0d84aa6d905cefe1ce6ab643ec1face3b836f828c252a6016726a82de180ac9bbf14dba96280c085a5f39ec96d29f72300f410cb452b0d077df1c90912c4e85f47fe", 0xf9) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x17, 0x2000021f, &(0x7f0000000400)=ANY=[@ANYBLOB="18050000000000000000000003000000b70a0000000000007b8af834bbb08f8be1ff00000000b70800000c0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e24, @remote}}}, 0x90) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04465ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fffffff96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r5) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000a80)=ANY=[@ANYBLOB="1808000020000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200001c000000b7030000000000008500000005000000bca900000000000035090100180000009500000000000000b702000004000000632af8ff00000000b50900001a000000c3aaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffa40900000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000006f5fd26cbf3231cd939784608f0ff760063ee3fce6e53adfd510ffac838817ed90000bf98000000000000560800000000000085000000070000e6dfcbda448be28095139300b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r10 = socket$caif_seqpacket(0x25, 0x5, 0x3) setsockopt$CAIFSO_REQ_PARAM(r10, 0x116, 0x80, 0xffffffffffffffff, 0xe6368f3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYRESOCT=r3], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000540003805000f87f080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001006c617374"], 0x104}}, 0x0) 1.224147219s ago: executing program 6 (id=655): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x82}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 1.124089445s ago: executing program 5 (id=656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x2}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = timerfd_create(0x1, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd06, 0x2000040}, 0x101929, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) timerfd_gettime(r1, &(0x7f0000000280)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff3, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x44044) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000707000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000, 0x0, 0x1}], 0x1, 0x100000c01, 0x38, 0x0, 0x2}) 1.106100966s ago: executing program 0 (id=657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) rt_sigpending(0x0, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x0, 0x400, 0x70bd2b, 0x3c, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}}, 0x5) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000140)={0x6, 0x800, 0x3, 0x4, 0x40, 0xffffffffffffffff, 0x0, 0x8}, &(0x7f00000003c0)={0x4, 0x7, 0x8, 0xca, 0x9, 0x5, 0x6, 0x2}, &(0x7f0000000400)={0x6, 0x200, 0x1, 0x67d, 0x9, 0x954, 0x10001, 0xfffffffffffff680}, &(0x7f0000000480)={r2, r3+60000000}, &(0x7f0000000500)={&(0x7f00000004c0)={[0x1]}, 0x8}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="100015"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x3c, 0x0, 0x6, 0xfffffffa}, 0x28) 770.506465ms ago: executing program 6 (id=658): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) 664.227152ms ago: executing program 0 (id=659): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000)=0xa6, 0x86}], 0x1, 0x0, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x300, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 388.090938ms ago: executing program 6 (id=660): syz_io_uring_setup(0x4ac9, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x72d103, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfffffffd}, @ETHTOOL_A_RINGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xc}]}, 0x100}}, 0x4000000) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x18, r3, 0x1, 0x81}, 0x14) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 378.165598ms ago: executing program 5 (id=661): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FITRIM(r0, 0x40e8662e, 0x0) 281.935264ms ago: executing program 3 (id=662): preadv(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000140)=""/74, 0x4a}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000380)=""/87, 0x57}, {&(0x7f0000000740)=""/239, 0xef}, {&(0x7f0000000480)=""/121, 0x79}, {&(0x7f0000000300)=""/12, 0xc}, {&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/37, 0x25}, {&(0x7f0000000640)=""/61, 0x3d}], 0xa, 0x1, 0x0) 226.484627ms ago: executing program 0 (id=663): r0 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x6, 0x1, 0x4, 0x3, 0x0, 0x3, 0x100, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x283, 0x1, @perf_config_ext={0x8, 0x7bd0be51}, 0x408, 0x7, 0x2, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x3, 0x80, 0x3, 0xa3, 0x7, 0x1, 0x0, 0x7b0, 0x12, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x7, 0x10}, 0x100000, 0x8, 0x6, 0x2, 0x0, 0x8, 0x7, 0x0, 0x872, 0x0, 0x2}) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x40010, r1, 0x9) ioctl$USBDEVFS_SUBMITURB(r1, 0x4004550c, 0x0) 118.464844ms ago: executing program 6 (id=664): socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x50, &(0x7f0000001740)=0x100, 0x4) connect$netlink(r1, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc) write$binfmt_script(r0, 0x0, 0x6f4000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) setsockopt(r2, 0x4, 0x7c0, &(0x7f0000000400)="1dbfe112abdc74da9bea64f944acdb6779d47c0c4a1b80862596499f7f3b75d5c550a5bc8622da3bbb1812ce6db308d8b5d7737395f4649920d448444c1f6400fa506c1c241cecf461f765e63d2987dd75011735490f08a285057b861c5c3428a94ab5e1906cc1695b40a203165f034e7304e48bdd1c63d866dbd580fae996a8bac87790abeec8a501542e8ea6cf354ec54e6004c334f8ee21e936100426ac37e95dbf761d923d1a690b41346fdf72e7e578c091c7bff22ead5fe09be6486b56c8", 0xc1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioperm(0x5, 0x8, 0x8000000000005) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x4000, 0x1, 0x1fd}, &(0x7f0000000000), &(0x7f0000000300)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10010, r3, 0xed526000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9e15f810a91ad7f66f64000000", @ANYRES16=r6, @ANYBLOB="00042bbd7000fddbdf250200000008000200020000000c00018005000200080000000800030005000000050005000c0000000800020001000000040006800800040008000000080004000100000008000300050000000800020002000000"], 0x64}, 0x1, 0x0, 0x0, 0x8114}, 0x40000d0) r7 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) 0s ago: executing program 3 (id=665): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x6c982, 0x0) unshare(0x24000200) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0x0, 0xfe, 0xfffffff9, 0x0}) unshare(0x20000400) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x2a, 0x2040000, 0x0) syz_open_procfs$namespace(0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x98, 0x0, 0x0, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) io_uring_setup(0x6c37, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x15, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x662, 0x0, 0x0, &(0x7f0000000500)) read$msr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x8000300, 0x290, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_unix(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="7472b59172f7def744fe37511cd4616e733d756e69782c00"]) syz_open_dev$rtc(&(0x7f0000000040), 0x4, 0x10002) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, 0x0, 0x0, 0x0) close$binfmt(r7) kernel console output (not intermixed with test programs): devsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.343870][ T188] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.345009][ T3766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'. [ 45.435608][ T3769] netlink: 'syz.2.91': attribute type 28 has an invalid length. [ 45.443350][ T3769] netlink: 'syz.2.91': attribute type 3 has an invalid length. [ 45.451099][ T3769] netlink: 132 bytes leftover after parsing attributes in process `syz.2.91'. [ 45.470415][ T3771] netlink: 96 bytes leftover after parsing attributes in process `syz.0.92'. [ 45.479431][ T3771] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 45.489841][ T3771] FAULT_INJECTION: forcing a failure. [ 45.489841][ T3771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.502984][ T3771] CPU: 1 UID: 0 PID: 3771 Comm: syz.0.92 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.503064][ T3771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.503082][ T3771] Call Trace: [ 45.503092][ T3771] [ 45.503102][ T3771] __dump_stack+0x1d/0x30 [ 45.503135][ T3771] dump_stack_lvl+0x95/0xd0 [ 45.503206][ T3771] dump_stack+0x15/0x1b [ 45.503274][ T3771] should_fail_ex+0x263/0x280 [ 45.503304][ T3771] should_fail+0xb/0x20 [ 45.503328][ T3771] should_fail_usercopy+0x1a/0x20 [ 45.503414][ T3771] _copy_from_user+0x1c/0xb0 [ 45.503450][ T3771] kstrtouint_from_user+0x69/0xf0 [ 45.503478][ T3771] ? 0xffffffff81000000 [ 45.503497][ T3771] ? selinux_file_permission+0x1e1/0x320 [ 45.503653][ T3771] proc_fail_nth_write+0x50/0x160 [ 45.503691][ T3771] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 45.503758][ T3771] vfs_write+0x269/0x9f0 [ 45.503839][ T3771] ? __rcu_read_unlock+0x4e/0x70 [ 45.503866][ T3771] ? __fget_files+0x184/0x1c0 [ 45.503895][ T3771] ? mutex_lock+0x57/0x90 [ 45.503922][ T3771] ksys_write+0xdc/0x1a0 [ 45.503947][ T3771] __x64_sys_write+0x40/0x50 [ 45.503970][ T3771] x64_sys_call+0x2847/0x3000 [ 45.504029][ T3771] do_syscall_64+0xc0/0x2a0 [ 45.504148][ T3771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.504177][ T3771] RIP: 0033:0x7f8a9d67b58e [ 45.504216][ T3771] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 45.504237][ T3771] RSP: 002b:00007f8a9c116fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 45.504278][ T3771] RAX: ffffffffffffffda RBX: 00007f8a9c1176c0 RCX: 00007f8a9d67b58e [ 45.504297][ T3771] RDX: 0000000000000001 RSI: 00007f8a9c1170a0 RDI: 0000000000000004 [ 45.504314][ T3771] RBP: 00007f8a9c117090 R08: 0000000000000000 R09: 0000000000000000 [ 45.504331][ T3771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.504348][ T3771] R13: 00007f8a9d936038 R14: 00007f8a9d935fa0 R15: 00007ffdc5005f08 [ 45.504371][ T3771] [ 45.813693][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.455332][ T3792] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.545651][ T3796] netlink: 'syz.3.101': attribute type 2 has an invalid length. [ 46.660441][ T3796] loop3: detected capacity change from 0 to 128 [ 46.965252][ T3811] loop0: detected capacity change from 0 to 128 [ 48.785891][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 48.815827][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 48.815846][ T29] audit: type=1400 audit(1768984028.623:570): avc: denied { setopt } for pid=3838 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.818065][ T29] audit: type=1400 audit(1768984028.623:571): avc: denied { setopt } for pid=3838 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.822023][ T29] audit: type=1400 audit(1768984028.623:572): avc: denied { create } for pid=3840 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.827828][ T29] audit: type=1400 audit(1768984028.633:573): avc: denied { create } for pid=3840 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.836205][ T29] audit: type=1400 audit(1768984028.643:574): avc: denied { write } for pid=3840 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.838679][ T29] audit: type=1400 audit(1768984028.643:575): avc: denied { write } for pid=3840 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.842104][ T29] audit: type=1400 audit(1768984028.643:576): avc: denied { create } for pid=3840 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.857437][ T29] audit: type=1400 audit(1768984028.663:577): avc: denied { write } for pid=3840 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.860861][ T29] audit: type=1400 audit(1768984028.663:578): avc: denied { shutdown } for pid=3840 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.862039][ T29] audit: type=1400 audit(1768984028.663:579): avc: denied { setopt } for pid=3840 comm="syz.0.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.689969][ T3857] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3857 comm=syz.4.123 [ 50.286770][ T3870] bridge_slave_0: left allmulticast mode [ 50.292540][ T3870] bridge_slave_0: left promiscuous mode [ 50.298387][ T3870] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.385884][ T3875] loop2: detected capacity change from 0 to 128 [ 50.461587][ T3870] bridge_slave_1: left allmulticast mode [ 50.461608][ T3870] bridge_slave_1: left promiscuous mode [ 50.461754][ T3870] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.483182][ T3870] bond0: (slave bond_slave_0): Releasing backup interface [ 50.489439][ T3870] bond0: (slave bond_slave_1): Releasing backup interface [ 50.498065][ T3870] team0: Port device team_slave_0 removed [ 50.517556][ T3870] team0: Port device team_slave_1 removed [ 50.517675][ T3870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.518120][ T3870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.519802][ T3870] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 50.880421][ T3885] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3885 comm=syz.4.132 [ 51.256266][ T3890] loop2: detected capacity change from 0 to 512 [ 51.277696][ T3890] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 51.289382][ T3890] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 51.299648][ T3890] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.135: Corrupt directory, running e2fsck is recommended [ 51.325131][ T3890] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 51.336632][ T3890] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.135: corrupted in-inode xattr: e_name out of bounds [ 51.453843][ T3890] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.135: couldn't read orphan inode 15 (err -117) [ 51.504913][ T3890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.589285][ T3890] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 51.600863][ T3890] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 51.611094][ T3890] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.135: Corrupt directory, running e2fsck is recommended [ 51.765993][ T3890] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.135: path /20/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 51.862365][ T3890] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 8: comm syz.2.135: path /20/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 51.908475][ T3892] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 52.035265][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.205717][ T3908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 52.346545][ T3909] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3909 comm=syz.4.142 [ 52.476655][ T3916] netlink: 'syz.0.144': attribute type 1 has an invalid length. [ 52.695277][ T3919] loop1: detected capacity change from 0 to 512 [ 52.732492][ T3919] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.797979][ T3924] netlink: 'syz.2.148': attribute type 1 has an invalid length. [ 52.805744][ T3924] netlink: 5 bytes leftover after parsing attributes in process `syz.2.148'. [ 52.841788][ T3919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 52.874956][ T3919] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.985087][ T3919] syz.1.145 (3919): attempted to duplicate a private mapping with mremap. This is not supported. [ 53.206980][ T3929] loop0: detected capacity change from 0 to 8192 [ 53.222015][ T3931] loop2: detected capacity change from 0 to 4096 [ 53.240051][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 53.269531][ T3931] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 53.754703][ T3939] loop1: detected capacity change from 0 to 1024 [ 53.763334][ T3939] EXT4-fs: inline encryption not supported [ 53.893985][ T3939] EXT4-fs: Ignoring removed nobh option [ 53.899670][ T3939] EXT4-fs: Ignoring removed bh option [ 53.916570][ T29] kauditd_printk_skb: 464 callbacks suppressed [ 53.916586][ T29] audit: type=1400 audit(1768984033.723:1042): avc: denied { unmount } for pid=3328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 54.005339][ T3939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.032475][ T29] audit: type=1400 audit(1768984033.793:1043): avc: denied { read write } for pid=3328 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.056760][ T29] audit: type=1400 audit(1768984033.793:1044): avc: denied { read write open } for pid=3328 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.081936][ T29] audit: type=1400 audit(1768984033.803:1045): avc: denied { ioctl } for pid=3328 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.109584][ T29] audit: type=1400 audit(1768984033.913:1046): avc: denied { mount } for pid=3937 comm="syz.1.152" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 54.202283][ T29] audit: type=1400 audit(1768984033.963:1047): avc: denied { read write } for pid=3937 comm="syz.1.152" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.226320][ T29] audit: type=1400 audit(1768984033.963:1048): avc: denied { read write open } for pid=3937 comm="syz.1.152" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.251162][ T29] audit: type=1400 audit(1768984033.963:1049): avc: denied { add_name } for pid=3937 comm="syz.1.152" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.271875][ T29] audit: type=1400 audit(1768984033.963:1050): avc: denied { create } for pid=3937 comm="syz.1.152" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.292082][ T29] audit: type=1400 audit(1768984033.963:1051): avc: denied { read write } for pid=3937 comm="syz.1.152" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.504944][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.675773][ T3956] tap0: tun_chr_ioctl cmd 1074025672 [ 54.681136][ T3956] tap0: ignored: set checksum enabled [ 55.409489][ T3981] netlink: 'syz.4.167': attribute type 1 has an invalid length. [ 55.479122][ T3978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 55.601970][ T3983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 55.654023][ T3983] loop3: detected capacity change from 0 to 128 [ 55.986851][ T3984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 56.105670][ T3984] syz.3.169: attempt to access beyond end of device [ 56.105670][ T3984] loop3: rw=2049, sector=145, nr_sectors = 128 limit=128 [ 56.209271][ T3983] syz.3.169: attempt to access beyond end of device [ 56.209271][ T3983] loop3: rw=524288, sector=145, nr_sectors = 128 limit=128 [ 56.260610][ T4001] bridge_slave_0: left allmulticast mode [ 56.266373][ T4001] bridge_slave_0: left promiscuous mode [ 56.272164][ T4001] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.285347][ T4001] bridge_slave_1: left allmulticast mode [ 56.291330][ T4001] bridge_slave_1: left promiscuous mode [ 56.297125][ T4001] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.309282][ T4001] bond0: (slave bond_slave_0): Releasing backup interface [ 56.320720][ T4001] bond0: (slave bond_slave_1): Releasing backup interface [ 56.337552][ T3983] syz.3.169: attempt to access beyond end of device [ 56.337552][ T3983] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 56.379920][ T3983] syz.3.169: attempt to access beyond end of device [ 56.379920][ T3983] loop3: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 56.404746][ T4001] team0: Port device team_slave_0 removed [ 56.418071][ T4004] loop0: detected capacity change from 0 to 164 [ 56.439117][ T4001] team0: Port device team_slave_1 removed [ 56.445743][ T4004] Unable to read rock-ridge attributes [ 56.507002][ T4001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.526814][ T4004] Unable to read rock-ridge attributes [ 56.567695][ T4001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.606851][ T4001] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 56.651904][ T4009] macvlan1: entered promiscuous mode [ 56.696787][ T4009] dummy0: entered promiscuous mode [ 56.725994][ T4009] hsr1: Slave A (macvlan1) is not up; please bring it up to get a fully working HSR network [ 56.736245][ T4009] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 56.792919][ T4009] hsr1: entered promiscuous mode [ 56.798118][ T4009] hsr1: entered allmulticast mode [ 56.803261][ T4009] macvlan1: entered allmulticast mode [ 56.908152][ T4009] dummy0: entered allmulticast mode [ 57.535635][ T4025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 57.544612][ T4025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 57.623619][ T4027] loop1: detected capacity change from 0 to 512 [ 57.677131][ T4027] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 57.885762][ T4032] loop4: detected capacity change from 0 to 512 [ 57.957693][ T4034] loop0: detected capacity change from 0 to 1024 [ 58.046299][ T4034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.144731][ T4034] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.185: Allocating blocks 385-513 which overlap fs metadata [ 58.188348][ T4046] sctp: [Deprecated]: syz.3.191 (pid 4046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 58.188348][ T4046] Use struct sctp_sack_info instead [ 58.274936][ T4033] EXT4-fs (loop0): pa ffff888107e9f700: logic 16, phys. 129, len 24 [ 58.283005][ T4033] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 58.449712][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.667401][ T4056] loop2: detected capacity change from 0 to 128 [ 58.696862][ T4056] FAT-fs (loop2): bogus number of reserved sectors [ 58.703516][ T4056] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 58.712979][ T4056] FAT-fs (loop2): Can't find a valid FAT filesystem [ 58.809736][ T4066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.824365][ T4066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.876731][ T4067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'. [ 58.919254][ T4067] xt_socket: unknown flags 0x4c [ 58.934035][ T29] kauditd_printk_skb: 580 callbacks suppressed [ 58.940302][ T29] audit: type=1400 audit(1768984038.733:1632): avc: denied { create } for pid=4063 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.011144][ T4067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'. [ 59.040090][ T29] audit: type=1400 audit(1768984038.763:1633): avc: denied { create } for pid=4063 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.060638][ T29] audit: type=1400 audit(1768984038.773:1634): avc: denied { read } for pid=4064 comm="syz.4.196" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 59.081862][ T29] audit: type=1400 audit(1768984038.773:1635): avc: denied { read open } for pid=4064 comm="syz.4.196" path="net:[4026532393]" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 59.105690][ T29] audit: type=1400 audit(1768984038.773:1636): avc: denied { create } for pid=4064 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.126092][ T29] audit: type=1400 audit(1768984038.783:1637): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.150374][ T29] audit: type=1400 audit(1768984038.783:1638): avc: denied { read write open } for pid=3324 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.175571][ T29] audit: type=1400 audit(1768984038.783:1639): avc: denied { ioctl } for pid=3324 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.201276][ T29] audit: type=1400 audit(1768984038.793:1640): avc: denied { create } for pid=4063 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.220846][ T29] audit: type=1400 audit(1768984038.793:1641): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.436798][ T4074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.197'. [ 59.548163][ T4074] loop3: detected capacity change from 0 to 1024 [ 59.600599][ T4074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.760856][ T4074] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 59.864689][ T4074] EXT4-fs (loop3): Remounting filesystem read-only [ 59.871785][ T4087] EXT4-fs (loop3): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 18; err -30 [ 60.130662][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.646153][ T4110] bridge_slave_0: left allmulticast mode [ 60.651916][ T4110] bridge_slave_0: left promiscuous mode [ 60.657734][ T4110] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.761166][ T4113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 60.843108][ T4110] bridge_slave_1: left allmulticast mode [ 60.848994][ T4110] bridge_slave_1: left promiscuous mode [ 60.854708][ T4110] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.964298][ T4110] bond0: (slave bond_slave_0): Releasing backup interface [ 60.997749][ T4110] bond0: (slave bond_slave_1): Releasing backup interface [ 61.036944][ T4110] team0: Port device team_slave_0 removed [ 61.053358][ T4119] loop3: detected capacity change from 0 to 128 [ 61.060127][ T4110] team0: Port device team_slave_1 removed [ 61.080679][ T4110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.094701][ T4116] loop1: detected capacity change from 0 to 8192 [ 61.150259][ T4110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.249190][ T4110] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 61.769165][ T4128] capability: warning: `syz.0.216' uses deprecated v2 capabilities in a way that may be insecure [ 62.566625][ T4143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 62.700886][ T4150] macvlan1: entered promiscuous mode [ 62.722551][ T4150] macvlan1: left promiscuous mode [ 62.729141][ T4153] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4153 comm=syz.0.224 [ 62.746670][ T4151] FAULT_INJECTION: forcing a failure. [ 62.746670][ T4151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.759897][ T4151] CPU: 0 UID: 0 PID: 4151 Comm: syz.1.225 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.759928][ T4151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.760177][ T4151] Call Trace: [ 62.760191][ T4151] [ 62.760202][ T4151] __dump_stack+0x1d/0x30 [ 62.760305][ T4151] dump_stack_lvl+0x95/0xd0 [ 62.760333][ T4151] dump_stack+0x15/0x1b [ 62.760357][ T4151] should_fail_ex+0x263/0x280 [ 62.760378][ T4151] ? __pfx_ucma_notify+0x10/0x10 [ 62.760424][ T4151] should_fail+0xb/0x20 [ 62.760482][ T4151] should_fail_usercopy+0x1a/0x20 [ 62.760538][ T4151] _copy_from_user+0x1c/0xb0 [ 62.760571][ T4151] ucma_notify+0x49/0x180 [ 62.760614][ T4151] ucma_write+0x1c9/0x260 [ 62.760665][ T4151] vfs_writev+0x42b/0x900 [ 62.760737][ T4151] ? __pfx_ucma_write+0x10/0x10 [ 62.760776][ T4151] do_writev+0xe9/0x210 [ 62.760807][ T4151] __x64_sys_writev+0x45/0x50 [ 62.760829][ T4151] x64_sys_call+0x1ba5/0x3000 [ 62.760871][ T4151] do_syscall_64+0xc0/0x2a0 [ 62.760901][ T4151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.760922][ T4151] RIP: 0033:0x7fea93aaacb9 [ 62.760939][ T4151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.760985][ T4151] RSP: 002b:00007fea92507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 62.761012][ T4151] RAX: ffffffffffffffda RBX: 00007fea93d25fa0 RCX: 00007fea93aaacb9 [ 62.761030][ T4151] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f [ 62.761047][ T4151] RBP: 00007fea92507090 R08: 0000000000000000 R09: 0000000000000000 [ 62.761064][ T4151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.761118][ T4151] R13: 00007fea93d26038 R14: 00007fea93d25fa0 R15: 00007fff55aceea8 [ 62.761142][ T4151] [ 62.948209][ T4152] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 63.418294][ T4161] loop3: detected capacity change from 0 to 8192 [ 63.985622][ T29] kauditd_printk_skb: 991 callbacks suppressed [ 63.985641][ T29] audit: type=1400 audit(1768984043.793:2633): avc: denied { name_bind } for pid=4175 comm="syz.0.234" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 64.013570][ T29] audit: type=1400 audit(1768984043.793:2634): avc: denied { node_bind } for pid=4175 comm="syz.0.234" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 64.113950][ T29] audit: type=1400 audit(1768984043.913:2635): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 64.149578][ T29] audit: type=1400 audit(1768984043.953:2636): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.197709][ T29] audit: type=1400 audit(1768984043.953:2637): avc: denied { read write open } for pid=3320 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.223048][ T29] audit: type=1400 audit(1768984043.953:2638): avc: denied { ioctl } for pid=3320 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.285223][ T29] audit: type=1400 audit(1768984044.093:2639): avc: denied { allowed } for pid=4178 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 64.325513][ T29] audit: type=1400 audit(1768984044.113:2640): avc: denied { create } for pid=4178 comm="syz.3.235" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 64.346878][ T29] audit: type=1400 audit(1768984044.113:2641): avc: denied { map } for pid=4178 comm="syz.3.235" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 64.371610][ T29] audit: type=1400 audit(1768984044.113:2642): avc: denied { read write } for pid=4178 comm="syz.3.235" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 65.111052][ T4197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4197 comm=syz.3.243 [ 65.119951][ T4200] capability: warning: `syz.1.245' uses 32-bit capabilities (legacy support in use) [ 65.166101][ T4200] loop1: detected capacity change from 0 to 2048 [ 65.205157][ T4200] loop1: p3 p4 < > [ 65.209176][ T4200] loop1: p3 size 861184 extends beyond EOD, truncated [ 65.240932][ T4201] loop3: detected capacity change from 0 to 512 [ 65.304185][ T4201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.363850][ T4201] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.505643][ T4197] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #18: comm syz.3.243: corrupted inode contents [ 65.565772][ T4197] EXT4-fs (loop3): Remounting filesystem read-only [ 65.572383][ T4197] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 65.656834][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 65.676615][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 65.755863][ T4212] bond1: Removing last ns target with arp_interval on [ 66.164407][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.388716][ T4227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.416752][ T4227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.978666][ T4244] loop4: detected capacity change from 0 to 512 [ 66.985199][ T4244] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 67.016964][ T4244] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 67.017137][ T4244] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.261: bad orphan inode 4 [ 67.017259][ T4244] EXT4-fs (loop4): 1 orphan inode deleted [ 67.017642][ T4244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.023568][ T4246] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 67.132857][ T4249] loop0: detected capacity change from 0 to 512 [ 67.133533][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.173272][ T4249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.174155][ T4249] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.225107][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.605137][ T4256] loop4: detected capacity change from 0 to 8192 [ 68.005187][ T4271] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 68.813938][ T4283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.846244][ T4286] loop3: detected capacity change from 0 to 512 [ 68.875815][ T4283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.902790][ T4287] loop1: detected capacity change from 0 to 512 [ 68.909692][ T4286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.942588][ T4286] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.965298][ T4287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 69.001913][ T29] kauditd_printk_skb: 530 callbacks suppressed [ 69.001935][ T29] audit: type=1400 audit(1768984048.793:3173): avc: denied { create } for pid=4282 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.038384][ T4287] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.058462][ T4291] team0: Port device bridge1 added [ 69.107357][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.135091][ T29] audit: type=1400 audit(1768984048.843:3174): avc: denied { create } for pid=4282 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.155741][ T29] audit: type=1400 audit(1768984048.843:3175): avc: denied { write } for pid=4282 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.176535][ T29] audit: type=1400 audit(1768984048.843:3176): avc: denied { read } for pid=4282 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.196869][ T29] audit: type=1400 audit(1768984048.843:3177): avc: denied { read } for pid=4282 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.217230][ T29] audit: type=1400 audit(1768984048.843:3178): avc: denied { mount } for pid=4284 comm="syz.1.275" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.238906][ T29] audit: type=1400 audit(1768984048.883:3179): avc: denied { write } for pid=4282 comm="syz.0.274" path="socket:[7436]" dev="sockfs" ino=7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.263041][ T29] audit: type=1400 audit(1768984048.883:3180): avc: denied { write } for pid=4282 comm="syz.0.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.283396][ T29] audit: type=1400 audit(1768984048.913:3181): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.303112][ T29] audit: type=1400 audit(1768984048.913:3182): avc: denied { read write } for pid=4284 comm="syz.1.275" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.345216][ T4287] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.275: path /67/file0: bad entry in directory: directory entry overrun - offset=60, inode=113, rec_len=2048, size=2048 fake=0 [ 69.422144][ T4287] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.275: path /67/file0: bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 69.521326][ T4287] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.275: path /67/file0: bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 69.543396][ T4301] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4301 comm=syz.4.279 [ 69.592379][ T4298] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #2: block 18: comm syz.1.275: lblock 23 mapped to illegal pblock 18 (length 1) [ 69.689469][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 69.729606][ T4303] vlan2: entered promiscuous mode [ 69.734764][ T4303] bond0: entered promiscuous mode [ 69.739846][ T4303] bond_slave_0: entered promiscuous mode [ 69.745681][ T4303] bond_slave_1: entered promiscuous mode [ 69.908252][ T4305] loop0: detected capacity change from 0 to 2048 [ 69.976925][ T4305] ext4: Unknown parameter 'euid' [ 70.182287][ T4311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 70.365473][ T4313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.283'. [ 70.431432][ T4310] loop2: detected capacity change from 0 to 8192 [ 70.477026][ T4313] usb usb8: usbfs: process 4313 (syz.3.283) did not claim interface 0 before use [ 70.626467][ T4317] loop1: detected capacity change from 0 to 164 [ 70.682540][ T4317] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 70.999996][ T4320] netlink: 44 bytes leftover after parsing attributes in process `syz.4.285'. [ 71.317387][ T4329] bridge_slave_0: left allmulticast mode [ 71.323120][ T4329] bridge_slave_0: left promiscuous mode [ 71.329094][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.467331][ T4331] loop4: detected capacity change from 0 to 1024 [ 71.478961][ T4329] bridge_slave_1: left allmulticast mode [ 71.484801][ T4329] bridge_slave_1: left promiscuous mode [ 71.490593][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.619018][ T4331] EXT4-fs: Ignoring removed orlov option [ 71.685729][ T4329] bond0: (slave bond_slave_0): Releasing backup interface [ 71.703588][ T4329] bond_slave_0: left promiscuous mode [ 71.711148][ T4331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.724100][ T4329] bond0: (slave bond_slave_1): Releasing backup interface [ 71.731963][ T4329] bond_slave_1: left promiscuous mode [ 71.794731][ T4329] team0: Port device team_slave_0 removed [ 71.823728][ T4329] team0: Port device team_slave_1 removed [ 71.845430][ T4331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.904843][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.928353][ T4345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.945307][ T4344] loop1: detected capacity change from 0 to 512 [ 71.945665][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.992772][ T4345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.994167][ T4344] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.024692][ T4329] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 72.078859][ T4344] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 72.109606][ T4344] System zones: 1-2, 4-12, 8-8 [ 72.145516][ T4344] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.290: iget: bad i_size value: 38620345925642 [ 72.226411][ T4344] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.290: couldn't read orphan inode 15 (err -117) [ 72.264874][ T4344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.328838][ T4349] FAULT_INJECTION: forcing a failure. [ 72.328838][ T4349] name failslab, interval 1, probability 0, space 0, times 0 [ 72.341654][ T4349] CPU: 0 UID: 0 PID: 4349 Comm: syz.4.292 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.341682][ T4349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.341695][ T4349] Call Trace: [ 72.341702][ T4349] [ 72.341710][ T4349] __dump_stack+0x1d/0x30 [ 72.341736][ T4349] dump_stack_lvl+0x95/0xd0 [ 72.341811][ T4349] dump_stack+0x15/0x1b [ 72.341871][ T4349] should_fail_ex+0x263/0x280 [ 72.341960][ T4349] should_failslab+0x8c/0xb0 [ 72.341981][ T4349] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 72.342052][ T4349] ? __alloc_skb+0x2f0/0x4b0 [ 72.342078][ T4349] __alloc_skb+0x2f0/0x4b0 [ 72.342102][ T4349] ? __alloc_skb+0x219/0x4b0 [ 72.342134][ T4349] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 72.342172][ T4349] ? ib_device_get_by_netdev+0x219/0x260 [ 72.342200][ T4349] ? __rcu_read_unlock+0x4e/0x70 [ 72.342227][ T4349] rtmsg_ifinfo+0x6d/0x110 [ 72.342332][ T4349] netif_state_change+0x1d9/0x250 [ 72.342430][ T4349] do_setlink+0x276d/0x2940 [ 72.342466][ T4349] ? synchronize_rcu_expedited+0x6ba/0x770 [ 72.342585][ T4349] ? __pfx_autoremove_wake_function+0x10/0x10 [ 72.342621][ T4349] ? synchronize_net+0x54/0x70 [ 72.342715][ T4349] ? geneve_changelink+0x397/0x3f0 [ 72.342749][ T4349] ? netdev_name_node_lookup+0xa4/0xd0 [ 72.342775][ T4349] rtnl_newlink+0xea4/0x1370 [ 72.342882][ T4349] ? __rcu_read_unlock+0x4e/0x70 [ 72.342906][ T4349] ? avc_has_perm_noaudit+0xab/0x130 [ 72.343011][ T4349] ? cred_has_capability+0x224/0x290 [ 72.343052][ T4349] ? selinux_capable+0x31/0x40 [ 72.343080][ T4349] ? security_capable+0x7b/0x90 [ 72.343119][ T4349] ? ns_capable+0x7c/0xb0 [ 72.343173][ T4349] ? __pfx_rtnl_newlink+0x10/0x10 [ 72.343202][ T4349] rtnetlink_rcv_msg+0x64b/0x720 [ 72.343269][ T4349] netlink_rcv_skb+0x123/0x220 [ 72.343300][ T4349] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 72.343335][ T4349] rtnetlink_rcv+0x1c/0x30 [ 72.343435][ T4349] netlink_unicast+0x5c0/0x690 [ 72.343465][ T4349] netlink_sendmsg+0x5c8/0x6f0 [ 72.343498][ T4349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.343526][ T4349] __sock_sendmsg+0x145/0x170 [ 72.343619][ T4349] ____sys_sendmsg+0x31e/0x4a0 [ 72.343652][ T4349] ___sys_sendmsg+0x195/0x1e0 [ 72.343687][ T4349] __x64_sys_sendmsg+0xd4/0x160 [ 72.343713][ T4349] x64_sys_call+0x17ba/0x3000 [ 72.343818][ T4349] do_syscall_64+0xc0/0x2a0 [ 72.343955][ T4349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.343983][ T4349] RIP: 0033:0x7f39fb02acb9 [ 72.344003][ T4349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.344086][ T4349] RSP: 002b:00007f39f9a87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.344168][ T4349] RAX: ffffffffffffffda RBX: 00007f39fb2a5fa0 RCX: 00007f39fb02acb9 [ 72.344238][ T4349] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 72.344251][ T4349] RBP: 00007f39f9a87090 R08: 0000000000000000 R09: 0000000000000000 [ 72.344263][ T4349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.344275][ T4349] R13: 00007f39fb2a6038 R14: 00007f39fb2a5fa0 R15: 00007fff9b193ed8 [ 72.344297][ T4349] [ 72.809405][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.981911][ T4356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 73.223479][ T4367] vlan2: entered promiscuous mode [ 73.228628][ T4367] bond0: entered promiscuous mode [ 73.414134][ T4374] loop3: detected capacity change from 0 to 128 [ 74.096593][ T29] kauditd_printk_skb: 470 callbacks suppressed [ 74.096688][ T29] audit: type=1400 audit(1768984053.903:3653): avc: denied { mount } for pid=4384 comm="syz.4.304" name="/" dev="ramfs" ino=7600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 74.186261][ T4387] loop1: detected capacity change from 0 to 512 [ 74.254282][ T29] audit: type=1400 audit(1768984053.973:3654): avc: denied { read write } for pid=4383 comm="syz.1.303" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.278322][ T29] audit: type=1400 audit(1768984053.973:3655): avc: denied { read write open } for pid=4383 comm="syz.1.303" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.303251][ T29] audit: type=1400 audit(1768984053.993:3656): avc: denied { ioctl } for pid=4383 comm="syz.1.303" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.328617][ T29] audit: type=1400 audit(1768984054.033:3657): avc: denied { read write } for pid=3328 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.352985][ T29] audit: type=1400 audit(1768984054.033:3658): avc: denied { read write open } for pid=3328 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.378142][ T29] audit: type=1400 audit(1768984054.033:3659): avc: denied { ioctl } for pid=3328 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.403739][ T29] audit: type=1400 audit(1768984054.053:3660): avc: denied { mounton } for pid=4383 comm="syz.1.303" path="/72/file1" dev="tmpfs" ino=396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.436478][ T4387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.469771][ T4393] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 74.493080][ T29] audit: type=1400 audit(1768984054.293:3661): avc: denied { prog_load } for pid=4384 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 74.512113][ T29] audit: type=1400 audit(1768984054.293:3662): avc: denied { bpf } for pid=4384 comm="syz.4.304" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 74.534579][ T4387] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.588407][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.931044][ T4404] syz.2.306 uses obsolete (PF_INET,SOCK_PACKET) [ 75.345985][ T4395] Set syz1 is full, maxelem 65536 reached [ 75.492057][ T4408] loop2: detected capacity change from 0 to 1764 [ 75.647627][ T4413] loop3: detected capacity change from 0 to 512 [ 75.789657][ T4413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.825877][ T4413] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.047707][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.243845][ T4429] loop1: detected capacity change from 0 to 512 [ 76.315797][ T4429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.333769][ T4434] loop4: detected capacity change from 0 to 128 [ 76.363982][ T4429] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.394180][ T4434] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.455019][ T4434] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.544113][ T4434] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.559046][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.655706][ T4434] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 819789505 (only 1 groups) [ 76.728672][ T4444] vlan2: entered allmulticast mode [ 76.733971][ T4444] bond0: entered allmulticast mode [ 76.879720][ T3326] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.983347][ T4445] netlink: 14 bytes leftover after parsing attributes in process `syz.3.321'. [ 77.058238][ T4445] bond0 (unregistering): Released all slaves [ 77.535447][ T4464] loop4: detected capacity change from 0 to 128 [ 78.247758][ T4478] loop0: detected capacity change from 0 to 128 [ 78.353355][ T4478] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.376199][ T4478] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.450892][ T4478] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 78.596858][ T3328] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.646607][ T4489] loop3: detected capacity change from 0 to 512 [ 78.676602][ T4489] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.735034][ T4489] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 78.773518][ T4494] loop1: detected capacity change from 0 to 512 [ 78.779835][ T4489] System zones: 1-2, 4-12, 8-8 [ 78.784759][ T4494] EXT4-fs: Ignoring removed i_version option [ 78.790825][ T4494] EXT4-fs: Ignoring removed bh option [ 78.814583][ T4489] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.338: iget: bad i_size value: 38620345925642 [ 78.844772][ T4497] netlink: 76 bytes leftover after parsing attributes in process `syz.0.339'. [ 78.861973][ T4494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.879102][ T4489] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.338: couldn't read orphan inode 15 (err -117) [ 78.891709][ T4489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.914660][ T4494] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.006614][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.034761][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.146064][ T29] kauditd_printk_skb: 496 callbacks suppressed [ 79.146083][ T29] audit: type=1400 audit(1768984058.953:4159): avc: denied { create } for pid=4499 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.236478][ T4500] netlink: 'syz.2.340': attribute type 1 has an invalid length. [ 79.244217][ T4500] netlink: 5 bytes leftover after parsing attributes in process `syz.2.340'. [ 79.255113][ T29] audit: type=1400 audit(1768984058.973:4160): avc: denied { write } for pid=4499 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.275659][ T29] audit: type=1400 audit(1768984058.983:4161): avc: denied { create } for pid=4499 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.296221][ T29] audit: type=1400 audit(1768984058.993:4162): avc: denied { prog_load } for pid=4499 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 79.315240][ T29] audit: type=1400 audit(1768984058.993:4163): avc: denied { bpf } for pid=4499 comm="syz.2.340" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 79.335729][ T29] audit: type=1400 audit(1768984058.993:4164): avc: denied { create } for pid=4499 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.356150][ T29] audit: type=1400 audit(1768984058.993:4165): avc: denied { create } for pid=4499 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.376553][ T29] audit: type=1400 audit(1768984058.993:4166): avc: denied { write } for pid=4499 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.397248][ T29] audit: type=1400 audit(1768984058.993:4167): avc: denied { read } for pid=4499 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.417494][ T29] audit: type=1400 audit(1768984059.003:4168): avc: denied { read } for pid=4499 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.032722][ T4513] loop1: detected capacity change from 0 to 512 [ 80.122506][ T4513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 80.225990][ T4513] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.345: Unimplemented hash flags: 0x0001 [ 80.237585][ T4513] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.345: Corrupt directory, running e2fsck is recommended [ 80.254167][ T4500] Set syz1 is full, maxelem 65536 reached [ 80.390001][ T4513] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.345: Unimplemented hash flags: 0x0001 [ 80.401572][ T4513] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.345: Corrupt directory, running e2fsck is recommended [ 80.484756][ T4524] loop4: detected capacity change from 0 to 128 [ 80.526859][ T4525] loop3: detected capacity change from 0 to 128 [ 80.585609][ T4525] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.605114][ T4525] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.650203][ T4525] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 80.713302][ T4513] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.345: Unimplemented hash flags: 0x0001 [ 80.724930][ T4513] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.345: Corrupt directory, running e2fsck is recommended [ 80.819422][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.961294][ T4528] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.345: Unimplemented hash flags: 0x0001 [ 80.972820][ T4528] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.345: Corrupt directory, running e2fsck is recommended [ 81.111011][ T4513] bridge1: entered promiscuous mode [ 81.116342][ T4513] bridge1: entered allmulticast mode [ 81.142647][ T4528] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.345: path /80/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 81.354720][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.070454][ T4554] loop1: detected capacity change from 0 to 512 [ 82.120392][ T4554] EXT4-fs error (device loop1): __ext4_fill_super:5553: inode #2: comm syz.1.357: casefold flag without casefold feature [ 82.187048][ T4554] EXT4-fs (loop1): get root inode failed [ 82.192837][ T4554] EXT4-fs (loop1): mount failed [ 82.326975][ T4558] loop3: detected capacity change from 0 to 1024 [ 82.483505][ T4558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.520121][ T4558] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.358: missing EA_INODE flag [ 82.536488][ T4558] EXT4-fs (loop3): Remounting filesystem read-only [ 82.657816][ T4570] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 82.794598][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.484669][ T4576] loop3: detected capacity change from 0 to 8192 [ 83.607564][ T4582] syzkaller0: entered promiscuous mode [ 83.613094][ T4582] syzkaller0: entered allmulticast mode [ 84.175355][ T29] kauditd_printk_skb: 572 callbacks suppressed [ 84.175374][ T29] audit: type=1400 audit(1768984063.973:4741): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.206253][ T29] audit: type=1400 audit(1768984063.973:4742): avc: denied { read write open } for pid=3324 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.231361][ T29] audit: type=1400 audit(1768984063.973:4743): avc: denied { ioctl } for pid=3324 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.404074][ T29] audit: type=1400 audit(1768984064.063:4744): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 84.424093][ T29] audit: type=1400 audit(1768984064.073:4745): avc: denied { read write } for pid=3328 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.448435][ T29] audit: type=1400 audit(1768984064.073:4746): avc: denied { read write open } for pid=3328 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.473624][ T29] audit: type=1400 audit(1768984064.073:4747): avc: denied { ioctl } for pid=3328 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.499305][ T29] audit: type=1400 audit(1768984064.183:4748): avc: denied { create } for pid=4595 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.519769][ T29] audit: type=1400 audit(1768984064.183:4749): avc: denied { write } for pid=4595 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.539834][ T29] audit: type=1400 audit(1768984064.193:4750): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.592866][ T4598] usb usb1: usbfs: process 4598 (syz.2.372) did not claim interface 0 before use [ 84.655365][ T4600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.373'. [ 84.683611][ T4600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.373'. [ 84.995525][ T4609] loop3: detected capacity change from 0 to 1024 [ 85.081652][ T4609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.215083][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.587239][ T4624] netlink: 96 bytes leftover after parsing attributes in process `syz.3.381'. [ 85.742005][ T4629] netlink: 'syz.0.383': attribute type 6 has an invalid length. [ 85.777638][ T4629] netlink: 'syz.0.383': attribute type 6 has an invalid length. [ 85.811609][ T4629] ref_ctr increment failed for inode: 0x16c offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810d083cc0 [ 85.873310][ T4632] loop1: detected capacity change from 0 to 8192 [ 85.881878][ T4628] uprobe: syz.0.383:4628 failed to unregister, leaking uprobe [ 86.390351][ T4642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 87.005530][ T4653] loop0: detected capacity change from 0 to 512 [ 87.023127][ T4653] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.076886][ T4653] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 87.101213][ T4653] System zones: 1-2, 4-12, 8-8 [ 87.145974][ T4653] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.392: iget: bad i_size value: 38620345925642 [ 87.185146][ T4653] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.392: couldn't read orphan inode 15 (err -117) [ 87.197805][ T4660] loop1: detected capacity change from 0 to 128 [ 87.259481][ T4653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.363335][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.730066][ T4670] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 88.137799][ T4671] chnl_net:caif_netlink_parms(): no params data found [ 88.231587][ T4671] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.238750][ T4671] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.268782][ T4671] bridge_slave_0: entered allmulticast mode [ 88.286990][ T4671] bridge_slave_0: entered promiscuous mode [ 88.308587][ T4671] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.315826][ T4671] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.336147][ T4671] bridge_slave_1: entered allmulticast mode [ 88.342877][ T4671] bridge_slave_1: entered promiscuous mode [ 88.396101][ T4691] uprobe: syz.2.402:4691 failed to unregister, leaking uprobe [ 88.407704][ T4671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.422991][ T4671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.474220][ T4671] team0: Port device team_slave_0 added [ 88.483479][ T4671] team0: Port device team_slave_1 added [ 88.547446][ T4671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.554645][ T4671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.581125][ T4671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.622851][ T4671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.629923][ T4671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.655994][ T4671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.725803][ T4697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 88.771133][ T4697] netlink: 'syz.2.404': attribute type 29 has an invalid length. [ 88.816176][ T4671] hsr_slave_0: entered promiscuous mode [ 88.835334][ T4671] hsr_slave_1: entered promiscuous mode [ 88.846042][ T4671] debugfs: 'hsr0' already exists in 'hsr' [ 88.851827][ T4671] Cannot create hsr debugfs directory [ 89.038528][ T4706] loop2: detected capacity change from 0 to 128 [ 89.165656][ T4671] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.172629][ T4709] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4709 comm=syz.4.408 [ 89.188903][ T4671] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.210062][ T4671] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.229459][ T4671] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.249737][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 89.249756][ T29] audit: type=1400 audit(1768984069.053:5159): avc: denied { create } for pid=4671 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.276699][ T29] audit: type=1400 audit(1768984069.053:5160): avc: denied { write } for pid=4671 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.364225][ T29] audit: type=1400 audit(1768984069.053:5161): avc: denied { read } for pid=4671 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.384867][ T29] audit: type=1400 audit(1768984069.053:5162): avc: denied { read } for pid=4671 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.405397][ T29] audit: type=1400 audit(1768984069.053:5163): avc: denied { write } for pid=4671 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.425999][ T29] audit: type=1400 audit(1768984069.063:5164): avc: denied { read } for pid=4671 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.446534][ T29] audit: type=1400 audit(1768984069.063:5165): avc: denied { write } for pid=4671 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.467257][ T29] audit: type=1400 audit(1768984069.103:5166): avc: denied { open } for pid=4704 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 89.486506][ T29] audit: type=1400 audit(1768984069.103:5167): avc: denied { perfmon } for pid=4704 comm="syz.2.407" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.507554][ T29] audit: type=1400 audit(1768984069.103:5168): avc: denied { kernel } for pid=4704 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 89.716894][ T4671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.868016][ T4671] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.925698][ T2442] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.932943][ T2442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.978788][ T188] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.985917][ T188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.131279][ T147] bond0 (unregistering): Released all slaves [ 90.204482][ T147] hsr_slave_0: left promiscuous mode [ 90.224354][ T147] hsr_slave_1: left promiscuous mode [ 90.734185][ T4671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.354130][ T4755] Cannot find del_set index 0 as target [ 91.507092][ T4671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.535340][ T4719] chnl_net:caif_netlink_parms(): no params data found [ 91.732402][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.739576][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.769033][ T4719] bridge_slave_0: entered allmulticast mode [ 91.783044][ T4719] bridge_slave_0: entered promiscuous mode [ 91.800983][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.808240][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.830714][ T4719] bridge_slave_1: entered allmulticast mode [ 91.846541][ T4719] bridge_slave_1: entered promiscuous mode [ 91.896872][ T4773] loop3: detected capacity change from 0 to 2048 [ 91.909413][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.943024][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.967910][ T3314] Alternate GPT is invalid, using primary GPT. [ 91.974276][ T3314] loop3: p1 p2 p3 [ 91.978038][ T3314] loop3: partition table partially beyond EOD, truncated [ 92.053936][ T4719] team0: Port device team_slave_0 added [ 92.080430][ T4719] team0: Port device team_slave_1 added [ 92.160817][ T4783] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.176263][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.183262][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.209282][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.242285][ T4773] Alternate GPT is invalid, using primary GPT. [ 92.248632][ T4773] loop3: p1 p2 p3 [ 92.252450][ T4773] loop3: partition table partially beyond EOD, truncated [ 92.317465][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.324507][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.350648][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.576699][ T4801] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4801 comm=syz.4.422 [ 92.654763][ T4719] hsr_slave_0: entered promiscuous mode [ 92.661083][ T4719] hsr_slave_1: entered promiscuous mode [ 92.688296][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 92.694204][ T4719] Cannot create hsr debugfs directory [ 92.743200][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 92.756061][ T4060] udevd[4060]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 92.770764][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 93.010903][ T4060] udevd[4060]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 93.023219][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 93.039163][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 93.072619][ T4671] veth0_vlan: entered promiscuous mode [ 93.204208][ T4671] veth1_vlan: entered promiscuous mode [ 93.414695][ T4719] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 93.459205][ T4719] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 93.566628][ T4719] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 93.588994][ T4719] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 93.610447][ T4671] veth0_macvtap: entered promiscuous mode [ 93.667378][ T4671] veth1_macvtap: entered promiscuous mode [ 93.764960][ T4671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.820275][ T4671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.861885][ T2547] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.900393][ T2547] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.921453][ T2547] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.964516][ T2547] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.224104][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.255806][ T29] kauditd_printk_skb: 967 callbacks suppressed [ 94.255823][ T29] audit: type=1400 audit(1768984074.063:6136): avc: denied { create } for pid=4835 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 94.353740][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.402429][ T29] audit: type=1400 audit(1768984074.113:6137): avc: denied { create } for pid=4835 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.422612][ T29] audit: type=1400 audit(1768984074.113:6138): avc: denied { prog_load } for pid=4835 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 94.441620][ T29] audit: type=1400 audit(1768984074.113:6139): avc: denied { bpf } for pid=4835 comm="syz.4.426" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.462280][ T29] audit: type=1400 audit(1768984074.123:6140): avc: denied { create } for pid=4835 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.482727][ T29] audit: type=1400 audit(1768984074.133:6141): avc: denied { setopt } for pid=4835 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.502936][ T29] audit: type=1400 audit(1768984074.133:6142): avc: denied { create } for pid=4835 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.508629][ T2403] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.523694][ T29] audit: type=1400 audit(1768984074.133:6143): avc: denied { map } for pid=4835 comm="syz.4.426" path="socket:[10482]" dev="sockfs" ino=10482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.530623][ T2403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.562187][ T29] audit: type=1400 audit(1768984074.133:6144): avc: denied { read } for pid=4835 comm="syz.4.426" path="socket:[10482]" dev="sockfs" ino=10482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.586580][ T29] audit: type=1400 audit(1768984074.143:6145): avc: denied { create } for pid=4835 comm="syz.4.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.640047][ T2403] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.647255][ T2403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.159613][ T4848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.400'. [ 95.380619][ T4836] syz.4.426 (4836) used greatest stack depth: 6056 bytes left [ 95.619066][ T4861] loop3: detected capacity change from 0 to 512 [ 95.662645][ T4861] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.684671][ T4860] program syz.0.430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.722358][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.769327][ T4861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 95.878326][ T4861] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.022139][ T4879] loop0: detected capacity change from 0 to 128 [ 96.119380][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 96.314764][ T4885] loop5: detected capacity change from 0 to 512 [ 96.380614][ T4885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 96.420433][ T4885] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.532606][ T4671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 96.657212][ T4896] netlink: 32 bytes leftover after parsing attributes in process `syz.3.434'. [ 97.139215][ T4910] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 97.606408][ T4719] veth0_vlan: entered promiscuous mode [ 97.666914][ T4719] veth1_vlan: entered promiscuous mode [ 97.794853][ T4719] veth0_macvtap: entered promiscuous mode [ 97.826888][ T4719] veth1_macvtap: entered promiscuous mode [ 97.885587][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.900251][ T4935] loop0: detected capacity change from 0 to 512 [ 97.915991][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.930984][ T4935] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.953409][ T1605] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.979552][ T1605] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.995079][ T4935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 98.019088][ T1605] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.049895][ T4935] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.060567][ T1605] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.305188][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 98.539484][ T4951] netlink: 84 bytes leftover after parsing attributes in process `syz.6.411'. [ 98.770712][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.451'. [ 99.341474][ T29] kauditd_printk_skb: 754 callbacks suppressed [ 99.341566][ T29] audit: type=1400 audit(1768984079.143:6900): avc: denied { read write } for pid=3328 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.372458][ T29] audit: type=1400 audit(1768984079.143:6901): avc: denied { read write open } for pid=3328 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.397883][ T29] audit: type=1400 audit(1768984079.143:6902): avc: denied { ioctl } for pid=3328 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.469975][ T29] audit: type=1400 audit(1768984079.273:6903): avc: denied { prog_load } for pid=4963 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 99.489404][ T29] audit: type=1400 audit(1768984079.273:6904): avc: denied { bpf } for pid=4963 comm="syz.0.453" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.510093][ T29] audit: type=1400 audit(1768984079.283:6905): avc: denied { perfmon } for pid=4963 comm="syz.0.453" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.530911][ T29] audit: type=1400 audit(1768984079.283:6906): avc: denied { perfmon } for pid=4963 comm="syz.0.453" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.551925][ T29] audit: type=1400 audit(1768984079.283:6907): avc: denied { perfmon } for pid=4963 comm="syz.0.453" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.551961][ T29] audit: type=1400 audit(1768984079.283:6908): avc: denied { perfmon } for pid=4963 comm="syz.0.453" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.552046][ T29] audit: type=1400 audit(1768984079.283:6909): avc: denied { bpf } for pid=4963 comm="syz.0.453" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.815063][ T4969] loop6: detected capacity change from 0 to 512 [ 99.874498][ T4969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 99.945501][ T4969] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.967323][ T4976] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 100.066461][ T4719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 100.819200][ T4994] loop6: detected capacity change from 0 to 128 [ 100.887848][ T4994] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.935819][ T4994] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.037099][ T4994] EXT4-fs warning (device loop6): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 101.175541][ T4719] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.379574][ T5007] loop0: detected capacity change from 0 to 512 [ 101.455747][ T5007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 101.515933][ T5007] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.596672][ T5016] loop6: detected capacity change from 0 to 8192 [ 101.681818][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 101.696362][ T5018] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 102.072266][ T5025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.115346][ T5025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.163114][ T5052] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5052 comm=syz.3.481 [ 103.887215][ T5061] loop6: detected capacity change from 0 to 512 [ 103.917798][ T5061] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.978669][ T5061] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 104.014608][ T5061] System zones: 1-2, 4-12, 8-8 [ 104.036278][ T5061] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.487: iget: bad i_size value: 38620345925642 [ 104.049238][ T5061] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.487: couldn't read orphan inode 15 (err -117) [ 104.089999][ T5061] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.169460][ T5066] loop5: detected capacity change from 0 to 8192 [ 104.285602][ T4719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.350797][ T29] kauditd_printk_skb: 1135 callbacks suppressed [ 104.350816][ T29] audit: type=1400 audit(1768984084.153:8045): avc: denied { write } for pid=5045 comm="syz.0.482" laddr=224.0.0.2 faddr=172.20.20.170 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.481754][ T29] audit: type=1400 audit(1768984084.183:8046): avc: denied { write } for pid=5045 comm="syz.0.482" laddr=224.0.0.2 faddr=172.20.20.170 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.505583][ T29] audit: type=1400 audit(1768984084.193:8047): avc: denied { write } for pid=5045 comm="syz.0.482" laddr=224.0.0.2 faddr=172.20.20.170 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.529289][ T29] audit: type=1400 audit(1768984084.193:8048): avc: denied { write } for pid=5045 comm="syz.0.482" laddr=224.0.0.2 faddr=172.20.20.170 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.552983][ T29] audit: type=1400 audit(1768984084.193:8049): avc: denied { write } for pid=5045 comm="syz.0.482" laddr=224.0.0.2 faddr=172.20.20.170 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.576809][ T29] audit: type=1400 audit(1768984084.203:8050): avc: denied { write } for pid=5045 comm="syz.0.482" laddr=224.0.0.2 faddr=172.20.20.170 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.601143][ T29] audit: type=1400 audit(1768984084.203:8051): avc: denied { write } for pid=5045 comm="syz.0.482" laddr=224.0.0.2 faddr=172.20.20.170 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.624938][ T29] audit: type=1400 audit(1768984084.203:8052): avc: denied { write } for pid=5045 comm="syz.0.482" laddr=224.0.0.2 faddr=172.20.20.170 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.648556][ T29] audit: type=1400 audit(1768984084.203:8053): avc: denied { read write } for pid=4719 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.672894][ T29] audit: type=1400 audit(1768984084.203:8054): avc: denied { read write open } for pid=4719 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.811574][ T5072] Cannot find del_set index 0 as target [ 105.001125][ T5075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.492'. [ 105.125896][ T5076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5076 comm=syz.6.494 [ 105.195941][ T5079] loop0: detected capacity change from 0 to 512 [ 105.238012][ T5079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 105.298171][ T5079] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.464181][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 105.710022][ T5093] syzkaller0: entered promiscuous mode [ 105.716082][ T5093] syzkaller0: entered allmulticast mode [ 105.986228][ T5104] netlink: 60 bytes leftover after parsing attributes in process `syz.6.500'. [ 106.058439][ T5104] netlink: 60 bytes leftover after parsing attributes in process `syz.6.500'. [ 106.366840][ T5116] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 107.000590][ T5130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 107.403495][ T5137] loop0: detected capacity change from 0 to 8192 [ 107.526790][ T5144] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5144 comm=syz.3.513 [ 108.010513][ T5154] loop6: detected capacity change from 0 to 512 [ 108.083728][ T5154] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 108.180047][ T5154] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 108.227670][ T5154] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.516: bad orphan inode 4 [ 108.254801][ T5154] EXT4-fs (loop6): 1 orphan inode deleted [ 108.261129][ T5154] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.375870][ T4719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.919544][ T5167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 109.370797][ T29] kauditd_printk_skb: 921 callbacks suppressed [ 109.370817][ T29] audit: type=1400 audit(1768984089.173:8976): avc: denied { name_bind } for pid=5179 comm="syz.0.524" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 109.399346][ T29] audit: type=1400 audit(1768984089.173:8977): avc: denied { node_bind } for pid=5179 comm="syz.0.524" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 109.480649][ T5186] loop5: detected capacity change from 0 to 128 [ 109.626382][ T29] audit: type=1400 audit(1768984089.183:8978): avc: denied { search } for pid=5160 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.648751][ T29] audit: type=1400 audit(1768984089.183:8979): avc: denied { search } for pid=5160 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.671718][ T29] audit: type=1400 audit(1768984089.183:8980): avc: denied { search } for pid=5160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.695536][ T29] audit: type=1400 audit(1768984089.183:8981): avc: denied { search } for pid=5160 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.718173][ T29] audit: type=1400 audit(1768984089.183:8982): avc: denied { search } for pid=5160 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.741427][ T29] audit: type=1400 audit(1768984089.183:8983): avc: denied { search } for pid=5160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.764886][ T29] audit: type=1400 audit(1768984089.183:8984): avc: denied { getattr } for pid=5160 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.790507][ T29] audit: type=1400 audit(1768984089.203:8985): avc: denied { search } for pid=5160 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.931958][ T5197] netlink: 'syz.3.527': attribute type 1 has an invalid length. [ 111.004924][ T5228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 111.186527][ T5233] loop6: detected capacity change from 0 to 512 [ 111.294671][ T5233] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.335704][ T5233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 111.452954][ T5233] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.636918][ T5245] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5245 comm=syz.3.539 [ 111.693743][ T4719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 111.799459][ T5248] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.337634][ T5264] loop0: detected capacity change from 0 to 512 [ 112.414878][ T5264] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 112.426738][ T5264] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 112.436977][ T5264] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.544: Corrupt directory, running e2fsck is recommended [ 112.671299][ T5274] loop5: detected capacity change from 0 to 128 [ 112.680824][ T5264] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 112.736260][ T5264] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.544: corrupted in-inode xattr: invalid ea_ino [ 112.810977][ T5264] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.544: couldn't read orphan inode 15 (err -117) [ 112.852645][ T5264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.927631][ T5264] netlink: 'syz.0.544': attribute type 2 has an invalid length. [ 113.084489][ T5157] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 113.099732][ T5264] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 113.111303][ T5264] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 113.121492][ T5264] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.544: Corrupt directory, running e2fsck is recommended [ 113.189294][ T5280] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.544: path /98/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 113.224161][ T5264] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.544: path /98/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 113.347038][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.448712][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.6.549'. [ 113.825413][ T5291] syzkaller0: entered promiscuous mode [ 113.830961][ T5291] syzkaller0: entered allmulticast mode [ 114.100450][ T5298] netlink: 'syz.0.554': attribute type 39 has an invalid length. [ 114.133006][ T5301] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5301 comm=syz.5.552 [ 114.362095][ T5306] loop0: detected capacity change from 0 to 128 [ 114.396068][ T5306] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.461575][ T29] kauditd_printk_skb: 965 callbacks suppressed [ 114.461600][ T29] audit: type=1400 audit(1768984094.263:9951): avc: denied { mount } for pid=5304 comm="syz.0.556" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 114.494106][ T5306] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.606832][ T29] audit: type=1400 audit(1768984094.363:9952): avc: denied { read write } for pid=5304 comm="syz.0.556" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.630867][ T29] audit: type=1400 audit(1768984094.363:9953): avc: denied { read write open } for pid=5304 comm="syz.0.556" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.677345][ T3328] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.737037][ T29] audit: type=1400 audit(1768984094.413:9954): avc: denied { create } for pid=5309 comm="syz.6.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 114.756653][ T29] audit: type=1400 audit(1768984094.463:9955): avc: denied { execmem } for pid=5309 comm="syz.6.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 114.776057][ T29] audit: type=1400 audit(1768984094.473:9956): avc: denied { unmount } for pid=3328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 114.795845][ T29] audit: type=1400 audit(1768984094.523:9957): avc: denied { read write } for pid=3328 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.820524][ T29] audit: type=1400 audit(1768984094.523:9958): avc: denied { read write open } for pid=3328 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.845699][ T29] audit: type=1400 audit(1768984094.523:9959): avc: denied { ioctl } for pid=3328 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.943151][ T29] audit: type=1400 audit(1768984094.623:9960): avc: denied { read write } for pid=5309 comm="syz.6.557" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 115.037816][ T5313] loop0: detected capacity change from 0 to 128 [ 115.400351][ T5322] netlink: 48 bytes leftover after parsing attributes in process `syz.4.559'. [ 116.001588][ T5337] FAULT_INJECTION: forcing a failure. [ 116.001588][ T5337] name failslab, interval 1, probability 0, space 0, times 0 [ 116.014343][ T5337] CPU: 1 UID: 0 PID: 5337 Comm: syz.5.563 Not tainted syzkaller #0 PREEMPT(voluntary) [ 116.014396][ T5337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.014413][ T5337] Call Trace: [ 116.014424][ T5337] [ 116.014434][ T5337] __dump_stack+0x1d/0x30 [ 116.014461][ T5337] dump_stack_lvl+0x95/0xd0 [ 116.014485][ T5337] dump_stack+0x15/0x1b [ 116.014505][ T5337] should_fail_ex+0x263/0x280 [ 116.014532][ T5337] should_failslab+0x8c/0xb0 [ 116.014560][ T5337] kmem_cache_alloc_noprof+0x68/0x490 [ 116.014666][ T5337] ? alloc_empty_file+0x76/0x200 [ 116.014701][ T5337] alloc_empty_file+0x76/0x200 [ 116.014814][ T5337] alloc_file_pseudo+0xf6/0x190 [ 116.014908][ T5337] __shmem_file_setup+0x1dd/0x210 [ 116.014936][ T5337] shmem_file_setup+0x3b/0x50 [ 116.014966][ T5337] __se_sys_memfd_create+0x2f6/0x6c0 [ 116.015052][ T5337] __x64_sys_memfd_create+0x31/0x40 [ 116.015084][ T5337] x64_sys_call+0x28cb/0x3000 [ 116.015117][ T5337] do_syscall_64+0xc0/0x2a0 [ 116.015171][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.015201][ T5337] RIP: 0033:0x7f37141facb9 [ 116.015227][ T5337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.015284][ T5337] RSP: 002b:00007f3712c56e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 116.015306][ T5337] RAX: ffffffffffffffda RBX: 00000000000005fc RCX: 00007f37141facb9 [ 116.015321][ T5337] RDX: 00007f3712c56ee0 RSI: 0000000000000000 RDI: 00007f371426730b [ 116.015335][ T5337] RBP: 0000200000000c00 R08: 00000000ffffffff R09: 0000000000000000 [ 116.015347][ T5337] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000040 [ 116.015360][ T5337] R13: 00007f3712c56ee0 R14: 00007f3712c56ea0 R15: 0000200000000080 [ 116.015417][ T5337] [ 116.275681][ T5338] loop3: detected capacity change from 0 to 512 [ 116.435312][ T5338] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.564: bg 0: block 248: padding at end of block bitmap is not set [ 116.521226][ T5338] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.564: Failed to acquire dquot type 1 [ 116.568961][ T5338] EXT4-fs (loop3): 1 truncate cleaned up [ 116.575873][ T5338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.588323][ T5342] syzkaller0: entered promiscuous mode [ 116.588358][ T5342] syzkaller0: entered allmulticast mode [ 116.662263][ T5338] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.706495][ T5338] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.822150][ T5338] loop3: detected capacity change from 0 to 512 [ 116.865996][ T5351] loop6: detected capacity change from 0 to 128 [ 116.886787][ T5351] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.902020][ T5338] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.917597][ T5352] netlink: 'syz.0.567': attribute type 32 has an invalid length. [ 116.946252][ T5351] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.985953][ T5338] EXT4-fs (loop3): orphan cleanup on readonly fs [ 117.034636][ T5338] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.564: Allocating blocks 41-42 which overlap fs metadata [ 117.068216][ T4719] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.134368][ T5338] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.564: Failed to acquire dquot type 1 [ 117.174779][ T5338] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 117.204231][ T5338] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.564: corrupted inode contents [ 117.220964][ T5338] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.564: mark_inode_dirty error [ 117.235425][ T5338] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.564: corrupted inode contents [ 117.325130][ T5338] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.564: mark_inode_dirty error [ 117.374163][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 117.377031][ T5338] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.564: corrupted inode contents [ 117.428629][ T5338] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 117.450028][ T5338] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.564: corrupted inode contents [ 117.489902][ T5338] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.564: mark_inode_dirty error [ 117.526099][ T5338] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 117.539173][ T5338] EXT4-fs (loop3): 1 truncate cleaned up [ 117.548239][ T5338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.614968][ T5338] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.708879][ T5369] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5369 comm=syz.6.571 [ 118.408804][ T5391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.422104][ T5391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.461248][ T5393] loop0: detected capacity change from 0 to 128 [ 118.499005][ T5393] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.539663][ T5393] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.939742][ T5398] loop3: detected capacity change from 0 to 512 [ 118.963083][ T5398] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.998965][ T5398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 119.029723][ T5398] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.081411][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 119.175598][ T5403] loop6: detected capacity change from 0 to 128 [ 119.276138][ T5406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 119.305628][ T3328] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.559511][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 119.559535][ T29] audit: type=1400 audit(1768984099.363:10356): avc: denied { read write } for pid=5407 comm="syz.0.582" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.562235][ T5408] loop0: detected capacity change from 0 to 128 [ 119.595156][ T29] audit: type=1400 audit(1768984099.363:10357): avc: denied { read write open } for pid=5407 comm="syz.0.582" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.621220][ T29] audit: type=1400 audit(1768984099.363:10358): avc: denied { ioctl } for pid=5407 comm="syz.0.582" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.769753][ T5408] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.804114][ T29] audit: type=1400 audit(1768984099.423:10359): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.828487][ T29] audit: type=1400 audit(1768984099.423:10360): avc: denied { read write open } for pid=3320 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.853696][ T29] audit: type=1400 audit(1768984099.423:10361): avc: denied { ioctl } for pid=3320 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.859831][ T5408] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 119.879433][ T29] audit: type=1400 audit(1768984099.493:10362): avc: denied { bpf } for pid=5409 comm="syz.5.583" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 119.879462][ T29] audit: type=1400 audit(1768984099.493:10363): avc: denied { create } for pid=5409 comm="syz.5.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.879485][ T29] audit: type=1400 audit(1768984099.503:10364): avc: denied { read } for pid=5409 comm="syz.5.583" dev="nsfs" ino=4026533054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.951138][ T29] audit: type=1400 audit(1768984099.503:10365): avc: denied { read open } for pid=5409 comm="syz.5.583" path="net:[4026533054]" dev="nsfs" ino=4026533054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 120.124778][ T3328] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.459767][ T5426] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 120.512054][ T5427] loop0: detected capacity change from 0 to 512 [ 120.584312][ T5427] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.639884][ T5427] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 120.694981][ T5427] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.816486][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 121.077789][ T5447] FAULT_INJECTION: forcing a failure. [ 121.077789][ T5447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.091089][ T5447] CPU: 0 UID: 0 PID: 5447 Comm: syz.0.593 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.091121][ T5447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.091139][ T5447] Call Trace: [ 121.091147][ T5447] [ 121.091155][ T5447] __dump_stack+0x1d/0x30 [ 121.091194][ T5447] dump_stack_lvl+0x95/0xd0 [ 121.091231][ T5447] dump_stack+0x15/0x1b [ 121.091252][ T5447] should_fail_ex+0x263/0x280 [ 121.091351][ T5447] ? __pfx_ucma_migrate_id+0x10/0x10 [ 121.091390][ T5447] should_fail+0xb/0x20 [ 121.091413][ T5447] should_fail_usercopy+0x1a/0x20 [ 121.091508][ T5447] _copy_from_user+0x1c/0xb0 [ 121.091543][ T5447] ucma_migrate_id+0x81/0x600 [ 121.091572][ T5447] ? kstrtouint+0x76/0xc0 [ 121.091604][ T5447] ? kstrtouint_from_user+0xa8/0xf0 [ 121.091625][ T5447] ? should_fail_ex+0xd9/0x280 [ 121.091721][ T5447] ? __pfx_ucma_migrate_id+0x10/0x10 [ 121.091828][ T5447] ucma_write+0x1c9/0x260 [ 121.091853][ T5447] ? __pfx_ucma_write+0x10/0x10 [ 121.091927][ T5447] vfs_write+0x269/0x9f0 [ 121.092022][ T5447] ? __rcu_read_unlock+0x4e/0x70 [ 121.092048][ T5447] ? __fget_files+0x184/0x1c0 [ 121.092076][ T5447] ksys_write+0xdc/0x1a0 [ 121.092095][ T5447] __x64_sys_write+0x40/0x50 [ 121.092118][ T5447] x64_sys_call+0x2847/0x3000 [ 121.092240][ T5447] do_syscall_64+0xc0/0x2a0 [ 121.092278][ T5447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.092307][ T5447] RIP: 0033:0x7f8a9d6bacb9 [ 121.092357][ T5447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.092387][ T5447] RSP: 002b:00007f8a9c117028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.092415][ T5447] RAX: ffffffffffffffda RBX: 00007f8a9d935fa0 RCX: 00007f8a9d6bacb9 [ 121.092434][ T5447] RDX: 0000000000000018 RSI: 0000200000000900 RDI: 0000000000000003 [ 121.092451][ T5447] RBP: 00007f8a9c117090 R08: 0000000000000000 R09: 0000000000000000 [ 121.092468][ T5447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.092484][ T5447] R13: 00007f8a9d936038 R14: 00007f8a9d935fa0 R15: 00007ffdc5005f08 [ 121.092510][ T5447] [ 121.448612][ T5452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.475741][ T5452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.833840][ T5463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.598'. [ 121.889638][ T5465] veth2: entered allmulticast mode [ 123.103126][ T5493] loop3: detected capacity change from 0 to 1024 [ 123.168615][ T5493] EXT4-fs: Ignoring removed bh option [ 123.184528][ T5493] EXT4-fs: inline encryption not supported [ 123.217915][ T5493] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.306406][ T5493] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 123.334880][ T5493] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.612: lblock 2 mapped to illegal pblock 2 (length 1) [ 123.396376][ T5493] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.612: lblock 0 mapped to illegal pblock 48 (length 1) [ 123.411318][ T5493] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.612: Failed to acquire dquot type 0 [ 123.442613][ T5493] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 123.453866][ T5496] netlink: 40 bytes leftover after parsing attributes in process `syz.5.611'. [ 123.505114][ T5496] netlink: 40 bytes leftover after parsing attributes in process `syz.5.611'. [ 123.517359][ T5493] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.612: mark_inode_dirty error [ 123.566621][ T5493] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 123.607827][ T5493] EXT4-fs (loop3): 1 orphan inode deleted [ 123.615523][ T5493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.628165][ T188] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 123.684740][ T188] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 123.734851][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.735042][ T3320] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 123.735182][ T3320] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 123.735248][ T3320] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 124.121286][ T5509] dvmrp0: entered allmulticast mode [ 124.247316][ T5509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.616'. [ 124.565179][ T29] kauditd_printk_skb: 722 callbacks suppressed [ 124.565195][ T29] audit: type=1400 audit(1768984104.373:11083): avc: denied { write } for pid=5525 comm="syz.5.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.637103][ T29] audit: type=1400 audit(1768984104.373:11084): avc: denied { write } for pid=5525 comm="syz.5.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.656540][ T29] audit: type=1400 audit(1768984104.373:11085): avc: denied { bind } for pid=5527 comm="syz.0.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.675910][ T29] audit: type=1400 audit(1768984104.383:11086): avc: denied { write } for pid=5525 comm="syz.5.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.695420][ T29] audit: type=1400 audit(1768984104.393:11087): avc: denied { write } for pid=5525 comm="syz.5.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.715219][ T29] audit: type=1400 audit(1768984104.393:11088): avc: denied { write } for pid=5525 comm="syz.5.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.734947][ T29] audit: type=1400 audit(1768984104.403:11089): avc: denied { write } for pid=5525 comm="syz.5.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.754612][ T29] audit: type=1400 audit(1768984104.403:11090): avc: denied { write } for pid=5525 comm="syz.5.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.774087][ T29] audit: type=1400 audit(1768984104.403:11091): avc: denied { write } for pid=5525 comm="syz.5.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.793450][ T29] audit: type=1400 audit(1768984104.403:11092): avc: denied { write } for pid=5525 comm="syz.5.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.132206][ T5539] netlink: 36 bytes leftover after parsing attributes in process `syz.4.625'. [ 125.141187][ T5539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.625'. [ 126.811736][ T5554] netlink: 12 bytes leftover after parsing attributes in process `syz.6.631'. [ 127.207026][ T5559] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5559 comm=syz.5.632 [ 127.389471][ T5562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.634'. [ 127.538117][ T5556] syz.5.632 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 127.549094][ T5556] CPU: 1 UID: 0 PID: 5556 Comm: syz.5.632 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.549129][ T5556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.549147][ T5556] Call Trace: [ 127.549155][ T5556] [ 127.549163][ T5556] __dump_stack+0x1d/0x30 [ 127.549275][ T5556] dump_stack_lvl+0x95/0xd0 [ 127.549377][ T5556] dump_stack+0x15/0x1b [ 127.549403][ T5556] dump_header+0x80/0x240 [ 127.549503][ T5556] oom_kill_process+0x295/0x350 [ 127.549585][ T5556] out_of_memory+0x97d/0xb80 [ 127.549613][ T5556] try_charge_memcg+0x62e/0xa10 [ 127.549716][ T5556] charge_memcg+0x51/0xc0 [ 127.549750][ T5556] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 127.549790][ T5556] __read_swap_cache_async+0x17b/0x2d0 [ 127.549880][ T5556] swap_cluster_readahead+0x262/0x3c0 [ 127.549915][ T5556] swapin_readahead+0xde/0x840 [ 127.549951][ T5556] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 127.550001][ T5556] ? lruvec_stat_mod_folio+0xd2/0x110 [ 127.550023][ T5556] ? __rcu_read_unlock+0x4e/0x70 [ 127.550043][ T5556] ? swap_cache_get_folio+0x26f/0x280 [ 127.550103][ T5556] do_swap_page+0x2f4/0x2140 [ 127.550142][ T5556] ? css_rstat_updated+0xbb/0x280 [ 127.550186][ T5556] ? __pfx_default_wake_function+0x10/0x10 [ 127.550344][ T5556] handle_mm_fault+0xb40/0x3030 [ 127.550385][ T5556] ? vma_start_read+0x1c7/0x2c0 [ 127.550413][ T5556] do_user_addr_fault+0x62f/0x1050 [ 127.550440][ T5556] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 127.550537][ T5556] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 127.550560][ T5556] ? irqentry_exit+0x3c/0x510 [ 127.550589][ T5556] exc_page_fault+0x62/0xa0 [ 127.550615][ T5556] asm_exc_page_fault+0x26/0x30 [ 127.550658][ T5556] RIP: 0033:0x7f37140c874c [ 127.550678][ T5556] Code: ca 30 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 127.550701][ T5556] RSP: 002b:00007ffe62f68740 EFLAGS: 00010202 [ 127.550723][ T5556] RAX: 0000000000000000 RBX: 00007f3714477080 RCX: 000055555bff2808 [ 127.550740][ T5556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.550755][ T5556] RBP: 00007f3714477da0 R08: 0000000000000000 R09: 0000000000000000 [ 127.550843][ T5556] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001f385 [ 127.550861][ T5556] R13: 00007f371447609c R14: 000000000001f113 R15: 00007f3714476090 [ 127.550883][ T5556] [ 127.550892][ T5556] memory: usage 307200kB, limit 307200kB, failcnt 779 [ 127.793260][ T5556] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 127.801287][ T5556] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 127.808761][ T5556] Memory cgroup stats for /syz5: [ 127.814323][ T5556] cache 0 [ 127.822309][ T5556] rss 0 [ 127.825155][ T5556] shmem 0 [ 127.828111][ T5556] mapped_file 0 [ 127.831585][ T5556] dirty 0 [ 127.834571][ T5556] writeback 20480 [ 127.838237][ T5556] workingset_refault_anon 245 [ 127.842927][ T5556] workingset_refault_file 0 [ 127.847491][ T5556] swap 188416 [ 127.850789][ T5556] swapcached 24576 [ 127.854567][ T5556] pgpgin 13658 [ 127.857951][ T5556] pgpgout 13652 [ 127.861472][ T5556] pgfault 12955 [ 127.864995][ T5556] pgmajfault 149 [ 127.868622][ T5556] inactive_anon 24576 [ 127.872623][ T5556] active_anon 0 [ 127.876130][ T5556] inactive_file 0 [ 127.879774][ T5556] active_file 0 [ 127.883248][ T5556] unevictable 0 [ 127.886757][ T5556] hierarchical_memory_limit 314572800 [ 127.892145][ T5556] hierarchical_memsw_limit 9223372036854771712 [ 127.898349][ T5556] total_cache 0 [ 127.901907][ T5556] total_rss 0 [ 127.905256][ T5556] total_shmem 0 [ 127.908725][ T5556] total_mapped_file 0 [ 127.912724][ T5556] total_dirty 0 [ 127.916225][ T5556] total_writeback 20480 [ 127.920480][ T5556] total_workingset_refault_anon 245 [ 127.925736][ T5556] total_workingset_refault_file 0 [ 127.930778][ T5556] total_swap 188416 [ 127.934633][ T5556] total_swapcached 24576 [ 127.938905][ T5556] total_pgpgin 13658 [ 127.942817][ T5556] total_pgpgout 13652 [ 127.946841][ T5556] total_pgfault 12955 [ 127.950843][ T5556] total_pgmajfault 149 [ 127.954950][ T5556] total_inactive_anon 24576 [ 127.959542][ T5556] total_active_anon 0 [ 127.963576][ T5556] total_inactive_file 0 [ 127.968182][ T5556] total_active_file 0 [ 127.972188][ T5556] total_unevictable 0 [ 127.976220][ T5556] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.632,pid=5556,uid=0 [ 127.990900][ T5556] Memory cgroup out of memory: Killed process 5556 (syz.5.632) total-vm:161716kB, anon-rss:1200kB, file-rss:22288kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 128.255528][ T5568] loop0: detected capacity change from 0 to 512 [ 128.348339][ T5568] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.407045][ T5568] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 128.444859][ T5568] System zones: 1-2, 4-12, 8-8 [ 128.490841][ T5568] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.637: iget: bad i_size value: 38620345925642 [ 128.564826][ T5568] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.637: couldn't read orphan inode 15 (err -117) [ 128.617636][ T5568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.728424][ T5579] loop3: detected capacity change from 0 to 512 [ 128.735435][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.767084][ T5579] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.804830][ T5579] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 128.812828][ T5579] System zones: 1-2, 4-12, 8-8 [ 128.886604][ T5579] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.641: iget: bad i_size value: 38620345925642 [ 128.900060][ T5579] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.641: couldn't read orphan inode 15 (err -117) [ 128.912902][ T5579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.972896][ T5587] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 129.034569][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.175923][ T5584] loop6: detected capacity change from 0 to 4096 [ 129.209364][ T5584] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.222113][ T5589] syzkaller0: entered promiscuous mode [ 129.227818][ T5589] syzkaller0: entered allmulticast mode [ 129.309039][ T5584] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.642'. [ 129.597764][ T29] kauditd_printk_skb: 1668 callbacks suppressed [ 129.597782][ T29] audit: type=1400 audit(1768984109.403:12614): avc: denied { create } for pid=5592 comm="syz.3.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.745781][ T29] audit: type=1400 audit(1768984109.433:12615): avc: denied { setopt } for pid=5592 comm="syz.3.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 129.765706][ T29] audit: type=1400 audit(1768984109.493:12616): avc: denied { name_bind } for pid=5600 comm="syz.4.647" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 129.787564][ T29] audit: type=1400 audit(1768984109.503:12617): avc: denied { node_bind } for pid=5600 comm="syz.4.647" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 129.843192][ T5595] loop3: detected capacity change from 0 to 512 [ 129.851635][ T5604] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 129.873615][ T4719] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.942183][ T5595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.004647][ T29] audit: type=1400 audit(1768984109.643:12618): avc: denied { read write } for pid=5592 comm="syz.3.646" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.028865][ T29] audit: type=1400 audit(1768984109.643:12619): avc: denied { read write open } for pid=5592 comm="syz.3.646" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.053857][ T29] audit: type=1400 audit(1768984109.643:12620): avc: denied { ioctl } for pid=5592 comm="syz.3.646" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.079363][ T29] audit: type=1400 audit(1768984109.643:12621): avc: denied { unmount } for pid=4719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 130.099155][ T29] audit: type=1400 audit(1768984109.653:12622): avc: denied { mounton } for pid=5592 comm="syz.3.646" path="/116/file2" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 130.111629][ T5595] ext4 filesystem being mounted at /116/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.121789][ T29] audit: type=1400 audit(1768984109.703:12623): avc: denied { prog_load } for pid=5594 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 130.206278][ T5607] loop5: detected capacity change from 0 to 8192 [ 130.408438][ T5595] EXT4-fs (loop3): shut down requested (1) [ 130.445284][ T5601] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 130.494696][ T5601] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 130.528540][ T5601] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 130.648674][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.100587][ T5618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.654'. [ 131.215828][ T5618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 131.224805][ T5618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 131.251343][ T5628] netlink: 'syz.0.657': attribute type 29 has an invalid length. [ 131.284502][ T5618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 131.294913][ T5628] netlink: 'syz.0.657': attribute type 29 has an invalid length. [ 131.329056][ T5628] netlink: 500 bytes leftover after parsing attributes in process `syz.0.657'. [ 131.440111][ T5618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 131.449011][ T5618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 131.521698][ T5618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.654'. [ 131.606206][ T5634] usb usb7: usbfs: process 5634 (syz.6.658) did not claim interface 0 before use [ 131.865275][ T5641] loop5: detected capacity change from 0 to 512 [ 131.935010][ T5641] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.001405][ T5641] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 132.044153][ T5641] System zones: 1-2, 4-12, 8-8 [ 132.084541][ T5641] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.661: iget: bad i_size value: 38620345925642 [ 132.164413][ T5641] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.661: couldn't read orphan inode 15 (err -117) [ 132.211606][ T5641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.288151][ T5650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5650 comm=syz.6.664 [ 132.384937][ T5650] ================================================================== [ 132.393099][ T5650] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 132.400433][ T5650] [ 132.402798][ T5650] read-write to 0xffffc90001907cc0 of 8 bytes by task 5647 on cpu 0: [ 132.410909][ T5650] shmem_writeout+0x2f1/0x920 [ 132.415805][ T5650] shrink_folio_list+0x1e75/0x2710 [ 132.420954][ T5650] evict_folios+0x2a4e/0x35b0 [ 132.425674][ T5650] try_to_shrink_lruvec+0x5f6/0x960 [ 132.430904][ T5650] shrink_lruvec+0x24e/0x1bc0 [ 132.435792][ T5650] shrink_node+0x68e/0x2000 [ 132.440330][ T5650] do_try_to_free_pages+0x404/0xcc0 [ 132.445560][ T5650] try_to_free_mem_cgroup_pages+0x222/0x470 [ 132.451496][ T5650] try_charge_memcg+0x37e/0xa10 [ 132.456388][ T5650] obj_cgroup_charge_pages+0xa6/0x150 [ 132.461796][ T5650] __memcg_kmem_charge_page+0x9e/0x170 [ 132.467287][ T5650] __alloc_frozen_pages_noprof+0x18a/0x350 [ 132.473125][ T5650] alloc_pages_mpol+0xb3/0x260 [ 132.477930][ T5650] alloc_pages_noprof+0x8f/0x130 [ 132.482905][ T5650] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 132.488842][ T5650] __kvmalloc_node_noprof+0x471/0x680 [ 132.494246][ T5650] ip_set_alloc+0x24/0x30 [ 132.498613][ T5650] hash_netiface_create+0x282/0x740 [ 132.503847][ T5650] ip_set_create+0x3cf/0x970 [ 132.508471][ T5650] nfnetlink_rcv_msg+0x509/0x5d0 [ 132.513445][ T5650] netlink_rcv_skb+0x123/0x220 [ 132.518246][ T5650] nfnetlink_rcv+0x167/0x1720 [ 132.522957][ T5650] netlink_unicast+0x5c0/0x690 [ 132.527759][ T5650] netlink_sendmsg+0x5c8/0x6f0 [ 132.532556][ T5650] __sock_sendmsg+0x145/0x170 [ 132.537276][ T5650] ____sys_sendmsg+0x31e/0x4a0 [ 132.542071][ T5650] ___sys_sendmsg+0x195/0x1e0 [ 132.546787][ T5650] __x64_sys_sendmsg+0xd4/0x160 [ 132.551680][ T5650] x64_sys_call+0x17ba/0x3000 [ 132.556387][ T5650] do_syscall_64+0xc0/0x2a0 [ 132.560929][ T5650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.566848][ T5650] [ 132.569193][ T5650] read to 0xffffc90001907cc0 of 8 bytes by task 5650 on cpu 1: [ 132.576752][ T5650] shmem_fallocate+0x5c0/0x920 [ 132.581557][ T5650] vfs_fallocate+0x3b6/0x400 [ 132.586174][ T5650] file_ioctl+0x4e3/0x5c0 [ 132.590557][ T5650] do_vfs_ioctl+0x7c9/0xe70 [ 132.595095][ T5650] __se_sys_ioctl+0x82/0x140 [ 132.599721][ T5650] __x64_sys_ioctl+0x43/0x50 [ 132.604350][ T5650] x64_sys_call+0x14b0/0x3000 [ 132.609060][ T5650] do_syscall_64+0xc0/0x2a0 [ 132.613594][ T5650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.619512][ T5650] [ 132.621855][ T5650] value changed: 0x0000000000000028 -> 0x0000000000000032 [ 132.628981][ T5650] [ 132.631322][ T5650] Reported by Kernel Concurrency Sanitizer on: [ 132.637488][ T5650] CPU: 1 UID: 0 PID: 5650 Comm: syz.6.664 Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.647149][ T5650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.657225][ T5650] ================================================================== [ 132.670575][ T4671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.