last executing test programs: 3.402752735s ago: executing program 4 (id=681): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x4, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f00000004c0), 0x6}, 0x10ecc8, 0x1224, 0x401, 0x0, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) rmdir(&(0x7f00000003c0)='./file0\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x200, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@loopback, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x8, 0x8, 0x7, 0x2, {{0x8, 0x4, 0x0, 0x37, 0x20, 0x67, 0x0, 0x9, 0x4, 0x0, @loopback, @empty, {[@lsrr={0x83, 0x3, 0xb4}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000740)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00'}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x38}}, 0x20000100) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, &(0x7f0000000840)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wg1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f00000018c0)=@newtaction={0x868, 0x30, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{0x74, 0x1, [@m_ctinfo={0x70, 0x4, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7fffffff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfe57}]}, {0x2a, 0x6, "f2d1b9527035424ef1affa5c6db6ed61ffa4d65d7626e62f14c384574a6deedd94e773e621aa"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x49c, 0x1, [@m_csum={0xe0, 0x1e, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf, 0xfffffffb, 0x20000000, 0x8, 0x6}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x800, 0x0, 0x3e8ce3e63c909c43, 0x8, 0x6}, 0x39}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x1, 0xfff, 0x2}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfff, 0xffff85fd, 0x20000000, 0x0, 0x6}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0xffffffffffffffff, 0x7fff, 0xc}, 0x28}}]}, {0x26, 0x6, "152141abbff7b1cb1a440246b3cb6cd66a7b740d4f7198addeb1527414cf74ee32b6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0x7c, 0x20, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "33cee2293903cc4d416c91f06b135ed9"}, @TCA_CT_ACTION={0x6, 0x3, 0x3d}, @TCA_CT_ACTION={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x1e, 0x6, "0d202ce9a60b7e0cad0fbb42208ffcd5b203e4da1d9dbfb6348e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0xbc, 0xd, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xb, 0xcd, 0x20000000, 0x2, 0x3c}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000, 0x7, 0x3, 0x400, 0x9}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xb, 0x1, 0xffffff80, 0xb}, 0x2}}]}, {0x2d, 0x6, "fc6c12f66ec14595e7fceed2dfe976dc2b1420127de293e285d4fe5877333c1ed6361e19e3a25afe93"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x4c, 0x6, 0x0, 0x0, {{0xb}, {0x20, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xa3f}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x44, 0xa, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7f}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0xe8, 0x20, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6, 0x4, 0x95e5, 0xcfb}, @multicast1, @dev={0xac, 0x14, 0x14, 0x44}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x80000001, 0x0, 0x39c1610f, 0x1000}, @multicast1, @loopback, 0xff000000}}]}, {0x70, 0x6, "286ca823d36ac9941b39f891f59477803e3bb538328352f6272ff927340cdcd38a587449c03b2ab1a6528b7f3c21356e6eaa407718ca061a7655c7ce0d47fd609a5cf2ebc50c1008fe5b280e9f23b3252fba1ff325f24a903e8a060f6a019fe638d96d1f3c3061227bed8845"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x108, 0x1c, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x7f}, @TCA_MPLS_PROTO={0x6, 0x4, 0x7}, @TCA_MPLS_TTL={0x5, 0x7, 0xa7}]}, {0xc3, 0x6, "3653299823eb399fbb3e1ff1035a648f129615ec17e7370e4058596e45df176df3ea96f1fc7ea3c8a5975828c2cc75ee9f363a0e47e2af0d93eef7f6cd687ad3d10fa1e00a7ec4676c6ea6749288764b9a9370e13b3f3625a53b735a27bef585543e98a32804da326f9d1652063fd611f00bd7809e4cca7eed10c17331393ea9363fe4b0f01768315319696320c87ce34936fb777a03d5ff1709c1e54d9d58d1e8f83abf5075647366301ce569c043cc920c53b1da54f3d0291f5001054793"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x340, 0x1, [@m_vlan={0x124, 0x1e, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0xf0, 0x6, "b8eec67702cca7305418f045604d2955d2838d4a66ede907ddeb17828c715315ac4fdbab4c099c60c729be47f2509e9a8470ccaeff258f0f4a5d0295a444494c34d67dc0e56dba2e9fb77b35d8a9d0267dd84c96f5100021e86998038d9d518372ce1e7b5641a15cc72bd2fd57a4cbabb17662d9db95c56757afd3fa27a3465fab970ecca53cb469ddae48fbed70da80184abdcf5ace98b6c7de087d8b19c493033a28a8ad1a3c577681dd7689cad32a841446ffd17f5b98da27c4aa95d3ca367e0e22c03378a0ed6fd97be6fccbefb0773e50f56b239b4bc8e9f917b5c18bc78f5a6972125a04607e99ba53"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0xf4, 0x1c, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7, 0x0, 0x0, 0x9}, @private=0xa010100, @local, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x9, 0x4, 0x80000001, 0xff}, @rand_addr=0x64010100, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x3, 0x8, 0x8, 0x4}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfff, 0x4, 0x4, 0x2, 0x4}, @broadcast, @remote, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffb, 0x4, 0x3, 0x1, 0xffff8000}, @multicast2, @rand_addr=0x64010101, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x124, 0x9, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x7, 0x5, 0xc6f, 0xe}}, @TCA_GACT_PARMS={0x18, 0x2, {0x62, 0xe, 0x20000000, 0xa48, 0xfffff001}}]}, {0xc5, 0x6, "ff3a77bab248f96fd019ee0cab52f8d461104e7e8e5ab6590a24f0d85554daa12b2b2875fd5811a2daad58b553f09e767fa57092e45aebd9bf80d11df0f64d7794ba3bb6bc6ad81f91900d8f22dcf3ac12d16245492666f9711e18f1b2eca15ac2e80b08ed65a4c78ae521a9462cb8604ac1526348dccb3b55aea0de4150d0922986868aa3555c3e2c5c9aa48a315d240fd0c149127dde7bf99087c6b68151627e8517cadc24ea3c86359941e0ae2e4970600512234730d035285966c94ad59152"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x4}]}, 0x868}, 0x1, 0x0, 0x0, 0x80}, 0xc024) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84010000190001002abd7000fbdbdf251d01090050000f801400bf00fe8000000000000000000000000000bb0800"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) io_uring_setup(0x224a, &(0x7f00000002c0)={0x0, 0x1670, 0x40, 0x2, 0x3d3}) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x1}], 0x1}, 0xfc) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x2, 0x4e28, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000200)="c6", 0x1}], 0x1}, 0x4000080) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f00000004c0)={0x1f, @none}, 0x14) listen(r5, 0xc) listen(r4, 0x0) 3.328035336s ago: executing program 1 (id=684): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x20040014) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) prlimit64(0x0, 0x7, &(0x7f0000002640)={0x3, 0xa5b1}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x400, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in6=@private2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0xb}, {0xfffffffffffffffe, 0x0, 0x0, 0x1000000000}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 3.300643947s ago: executing program 1 (id=685): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x534a, 0x0, 0x0, 0x8, 0x4, 0x10001, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x48a200, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420dfefca) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r0, &(0x7f0000001580)={0xfc, {"a2e3ad1bed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f3b356c030890e0879b0af8c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb62913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab002f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (fail_nth: 1) 3.002792414s ago: executing program 1 (id=688): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa01"], 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x6, 0x4002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x10000, 0x3, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x3, 0xfff, 0x8001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000080)={0x1, 0x22}, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) kexec_load(0x2, 0x8, &(0x7f0000000140)=[{0x0, 0xb, 0x8000000000, 0x80000000}], 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000360000/0x2000)=nil], 0x0, 0xfffffffffffffffe, 0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_batadv\x00', 0x10) socket$nl_route(0x10, 0x3, 0x0) 2.945045945s ago: executing program 0 (id=689): r0 = socket$unix(0x1, 0x1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540100001a0001000000000800000000ac1414bb00000000000000000000000000000000000000000000000000000001000200004e200050000020", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa"], 0x154}}, 0x6c89a) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x2}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x1086a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_emit_ethernet(0x5a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaa6727c0d22d6e7a74b56a31aaaaaaaaaaaaaaaaaa0008004e00004c00000000000690780a2110000000000000000701ffffffffffffaa7eac1414aa000080010710090000308d2bb7"], 0x0) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) socket$xdp(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10002}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000008c0), 0x75, r5}, 0x38) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r5}, 0xc) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe}, 0x1c) setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f0000000000)={0x0, 0xfffffffb}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000500)={'vxcan0\x00', 0x0}) sendmmsg$sock(r8, &(0x7f00000004c0)=[{{&(0x7f0000000680)=@can={0x1d, r9}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18, 0x1, 0x3d, 0x1000000000003}}], 0x18}}], 0x1, 0x8840) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000240)=0x80, 0x4) 2.308127929s ago: executing program 4 (id=690): r0 = socket$pppoe(0x18, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0xf0ffffff7f0000, 0x0, 0x0) 2.249897421s ago: executing program 3 (id=691): request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) 2.190624962s ago: executing program 4 (id=692): syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x67, 0x0, 0x2, 0x6, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0x4, 0x5, 0x0, 0xf}, @lsrr={0x83, 0x7, 0x63, [@private=0xa010101]}, @timestamp_prespec={0x44, 0x4, 0xf5, 0x3, 0x7}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000c80)=0x6, 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x3e, 0x1, 0x7fffa, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000300)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x2c) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{}]}, 0x3, 0x5fe, &(0x7f0000000d40)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4040, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000500)={0x5, 0x2000027, 0x20000000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "164508", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xc0000, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="000000000e2c0000300012800b000100697036746e6c0000200002801400030020010000000000000000000000000002050009000400000008000400bf01000d"], 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="70010000", @ANYRES16=0x0, @ANYBLOB="10002bbd7000fbdbdf2510000000300007800c00040002000000000000000c00030000000000000000800c000300070000000000000008000200100000004400098008000200050000000800020001000000080001000500000008000200090000000800020007000000080001000600000008000100d606000008000100060000007400058007000100696200004c00028008000200ff7f000008000200a8000000080001001d0000000800010017000000080001000b000000080003000300000008000200000000000800030002000000080001000400000008000100756470001400028008000200010000000800020093000000180007800c000300020000000000000008000100040000002400098008000200f9fffffb0800020021070000080002000200000008000200000000001400098008000200ffffffff080002000900000024000380080001000300000008000100ffffff7f08000300010000000800020005000000bce6d45b696af1d2bbbf13afe8d962564abbdecaab581da6888845c52f12b9e6167f91c29e4b9e6e9fcd86a93ae8bb11788a6405ffbd57e4f68457b14605ce2a1e5bc3b583c7f2a0fe28a51ad6ca28750c810477e4a651b465804a"], 0x170}, 0x1, 0x0, 0x0, 0x8049}, 0x20008040) 2.177653952s ago: executing program 3 (id=693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x19c, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xb7}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2006}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x800}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x8641}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0xc}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x80}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x3}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2008040) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x2, 0xc, 0x2, 0x0, 0x2, 0x1, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000002c0)}, 0x21, 0x5, 0xf, 0x7, 0x6, 0xff, 0x2, 0x0, 0x27, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000380)=0x1000000, 0x4) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (rerun: 64) sendmsg$can_raw(r3, &(0x7f0000000500)={&(0x7f0000000400), 0x10, &(0x7f00000004c0)={&(0x7f0000000440)=@canfd={{0x0, 0x0, 0x0, 0x1}, 0x15, 0x2, 0x0, 0x0, "5dc47a5ed7970bcc1b621edd40b161c2d3de87d9e43205f2cfb08c905bd1005ed271df6315e03a78da6e09e4b3fe0a92c065fbc18f8f216dcf47063bb64ebe70"}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4000815) (async) sendmsg$nl_route(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@delnexthop={0x20, 0x69, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x811}, 0x20000000) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000700)={{&(0x7f0000000640)=""/123, 0x7b}, &(0x7f00000006c0), 0x1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0x6, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x10}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x1, 0x3, 0x3, 0x2, 0xc, 0x18, 0x8}, @call={0x85, 0x0, 0x0, 0x7f}]}, &(0x7f0000000780)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x1b, r3, 0x8, &(0x7f00000007c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0xc, 0x4, 0x400}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000840)=[r3, r3, r3], &(0x7f0000000880)=[{0x0, 0x3, 0x4, 0x4}, {0x0, 0x3, 0x7}, {0x3, 0x4, 0x7, 0x2}, {0x1, 0x3, 0x8, 0x6}, {0x2, 0x4, 0x8, 0x3}, {0x3, 0x2, 0x5, 0x1}], 0x10, 0x80000000}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@cgroup=r3, 0x10, 0x1, 0x8, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0], &(0x7f0000000a80)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)={@fallback, r4, 0x5, 0x201c, r3, @value=r3, @void, @void, @void, r6}, 0x20) (async, rerun: 32) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)=@orangefs={0x14, 0x1, {"e30582812aecfb2bb09d7ba82df54754", 0xbd}}, &(0x7f0000000bc0), 0x1400) (async, rerun: 32) r7 = open$dir(&(0x7f0000000c40)='./file0\x00', 0x200, 0x4) move_mount(r3, &(0x7f0000000c00)='./file0\x00', r7, &(0x7f0000000c80)='./file0\x00', 0x2) open(&(0x7f0000000cc0)='./file0\x00', 0x0, 0x1e7) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000f80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x114, r8, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xc9, 0xac, "18b715629cfd4a24fb5e14b3c25343bb7168beebcfa67aeaffcdfad56601376eb611eb3bc5fb4d79d51d86ccc8a94a0409c68d01ce6312bb7cd1944756b0dc2e1e4c60310246a380c0ed2318fe9d8916b34957857b64b3a037c928885bbc8c1de864330b4115e743ef0d260f5ac4d80c3edc8ea5e683419f5b703be67798024cadcb9b5a495eac582b645e3ed082b0aa44db62bb5c766910db63453114fc78bdca14615270ab2381322cf65ae48a00507f5bbd3ed3a01602ca80c477c88c8b6410ef578063"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r10}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x18, 0x1}, {0x9, 0x1}, {0x60, 0x1}, {0x24}, {0x6}, {0x14, 0x1}, {0x60}, {0x24, 0x1}, {0x6c}, {0x60, 0x1}, {0x2}, {0xe024e0ab4c26a8f0}, {0x1}, {0x36}, {0x36}, {0x16, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000fc0), &(0x7f0000001000)=0x30) (async, rerun: 64) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000001040)={'wg2\x00', {0x2, 0x0, @dev}}) (rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r11, &(0x7f0000001340)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f00000010c0)={0x208, r8, 0x32f6f89900f85c08, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xb0c, 0x43}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c0, 0x3, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x86, 0x1, "dfb6abdcb5f6125ba9aa7c4dc6b449598e8e13b6a291381f7bdec8b57455f7fbf2709fe1ab66c3e3a867fc0382e88e6d9638dfc73b73a094517804759963f1fd4538f3f97612b66116d3598d86618d1001d8782d7170e899192d81ac20c64fa01abfb3edf4ea875a165ce021a4710052ff28c14fc57530a58236374929cd83eb5385"}}, {0xdc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xd5, 0x1, "679c7adbc48dee605281024ee0bb936030f267183a883edf5796ed70392abbf585bb33adab7724dd7b2d3819ce8b08ddbe84c355271cae329721c8cb4c6151faaedd3d6abb8c727763f78cb7c6b6ce3a2fbee485819d877cb38ab677b516cac037f74f808ccf3f3d08b8aeddfba22370841df9c3c5af49b950458eb05b428d2456af27d05dafee77f692e04d6a6b5f2f598fba440b46998ca145b63e429da54f3de0fe8f062d3b92f5b624a26179566c7ec2cd2909fdbc40230d7c05a43c3f704c30bfcaf75eb4961984b03cc0b28d2779"}}, {0x54, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x50, 0x1, "d8d664c6d057b2a8bda40d7da8285f406fd403867364deaf440d63cbc52bc53947da6ce4fc822165098cef15a3b18dee935d2ed887a07778dbe76ce60a83a31ccfbb4a602110a6bfa55ec0ef"}}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4008010}, 0x80) (async) semget(0x1, 0x3, 0x40) (async) socket$packet(0x11, 0x0, 0x300) (async, rerun: 32) ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f0000001380)={0x3, 0x0, @status={[0xfffffffffffffff9, 0x0, 0x80000001, 0x100000001, 0xf, 0x40]}, [0x6, 0x8, 0x3, 0x0, 0x5, 0x0, 0x34, 0x5, 0x0, 0x7, 0x1, 0x73, 0xd, 0xfffffffffffffff3, 0x975b, 0x4, 0x101, 0x7, 0x5, 0x2, 0x2, 0x800, 0x0, 0xf, 0x20, 0x800, 0x2, 0x81, 0x6, 0x8, 0x32, 0x628b, 0x1, 0x7, 0x1a71, 0x3, 0x3, 0x6, 0x1, 0xf, 0x3, 0x9, 0x9, 0x2, 0x4, 0x2f0440000000000, 0x3, 0x0, 0x9, 0x4, 0x2, 0x4, 0x1ff, 0xfffffffffffffffe, 0x81, 0x2, 0x10001, 0x4, 0xb, 0x9, 0x6ff2f3d6, 0x8, 0x8000000000000000, 0xb]}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r11, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x5c, r8, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 1.82378916s ago: executing program 0 (id=694): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6000, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d03e8000000e4031680a40001800c0007"], 0x40c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) 1.769703851s ago: executing program 2 (id=695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fffd000000000040000000005f0600000000000095"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) 1.674978453s ago: executing program 0 (id=696): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRESHEX, @ANYRES32], 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x1000, @remote, 0xd}, 0x1c) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x24048001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$loop(0x0, 0x9, 0x0) socket$inet6(0xa, 0x4, 0x66c7c64e) ioctl$BLKCRYPTOGENERATEKEY(r1, 0xc030128a, 0x0) r2 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff4, &(0x7f00000014c0)=""/4084, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x3f) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x4, 0x401, 0x44, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x80, 0x40, 0x0, 0xffffffff}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000001000000a380000001a0a05000000000000000000020001000c00"], 0x60}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x1294, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40804) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x0, &(0x7f00000000c0)}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) 1.672522123s ago: executing program 2 (id=697): socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x2, 0x9, "62007d820000dec52311002240f7ffff6f1a06"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000100)="17", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) 1.637703304s ago: executing program 1 (id=698): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000000a14010027bd0000fedbdf2508000100010000000800150000000000"], 0x20}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x400c800) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000008000100090808004149004001040800", 0x58}], 0x1) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r6, 0x10c, 0x6, &(0x7f0000000080), &(0x7f0000000040)=0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x0, 'macvtap0\x00', {0x1}, 0x1}) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xbb8}}, 0x20008010) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="11042abd7000fddbff251400000008000300", @ANYRES32, @ANYBLOB="08001c"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40004) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000dc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000e80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r10 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) 1.608985545s ago: executing program 4 (id=699): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xffffbdfb, {0x0, 0x0, 0x0, r2, {0xfff3}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1.567096545s ago: executing program 3 (id=700): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x2, 0x2b0, 0xffffffff, 0x0, 0x1d0, 0x100, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3}}}, {{@ip={@local, @empty, 0x0, 0x0, 'wlan1\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xfffd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {0x0, [0x0, 0x0, 0x7, 0x0, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "ca0300cb54a6f53d9bcc7790fe75e5dfab93e913be79e494d8af7b27c459"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (fail_nth: 6) 1.522579237s ago: executing program 2 (id=701): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @loopback, 0x1, 0x8, 0x3, 0x66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r2, 0x0, 0xb, 0x0, 0x3, 0x29, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x0, 0x7800, 0x0, 0x9}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r4, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40848}, 0x4004810) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x8, 0x8, 0x0, @vifc_lcl_ifindex=r4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073114b00000000008510000002000000850000005400000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x6}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040001}, 0x400c890) socket$nl_rdma(0x10, 0x3, 0x14) 1.266362692s ago: executing program 2 (id=702): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_clone(0x22008500, 0x0, 0x64, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x0) dup(r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r5, r5) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'bridge_slave_0\x00', @local}) write$tun(r3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be031029ff060000000000000000000000000008aaff020000000000000000000000000001"], 0xfdef) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x1}, 0x10) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r7, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x8048010, r6, 0x2f7b3000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x14000084}, 0x4000800) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x1c, 0x0, 0x61c, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8085}, 0xc800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x1000000, &(0x7f0000000400)={[{@dioread_nolock}, {@init_itable}, {@data_err_ignore}, {@sb={'sb', 0x3d, 0xffffffff8218cf17}}]}, 0x1, 0x48c, &(0x7f0000000ec0)="$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") 1.249670763s ago: executing program 3 (id=703): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100e404, &(0x7f0000000a00)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\\-\x00', 0xa0001, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x8a}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000000540)) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xa9cc4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000200)={0x0, 0x1, 0xfff, 0xfffffffb, 0x200, 0x4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xd488, 0x9}, 0x1c32, 0x4, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r7) keyctl$read(0xb, r7, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) syz_open_procfs(0x0, 0x0) 1.179966964s ago: executing program 4 (id=704): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0xf2, &(0x7f0000000240)={0x77359400}, 0x0, 0xf2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x400, 0x8e) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x1}, {0xb, 0xd}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) getpid() setns(0xffffffffffffffff, 0x10000000) r5 = accept$phonet_pipe(r1, &(0x7f00000001c0), &(0x7f00000002c0)=0x10) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) 979.032459ms ago: executing program 2 (id=705): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRESOCT=0x0], 0x70}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fsync(0xffffffffffffffff) perf_event_open(&(0x7f0000000680)={0x6, 0x80, 0x65, 0x0, 0xa, 0x0, 0x0, 0x0, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x287, 0x2}, 0x831e, 0x9, 0x11000, 0x4, 0x9484, 0x281, 0x6, 0x0, 0x0, 0x0, 0x4}, r0, 0xb, 0xffffffffffffffff, 0xb) sched_getaffinity(r0, 0x8, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000004640)=[{{&(0x7f0000003e80)=@can, 0x80, 0x0}}, {{&(0x7f0000004400)=@can, 0x80, 0x0}}], 0x2, 0x20000000) creat(&(0x7f00000000c0)='./file0\x00', 0x86) 930.02451ms ago: executing program 2 (id=706): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) fstatfs(r0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)) write$vga_arbiter(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='unlock io'], 0xe) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x150, 0x111, 0x4b4, 0x150, 0x700, 0x248, 0x278, 0x278, 0x248, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [0x0, 0x0, 0x0, 0xff], [], 'vlan0\x00', 'macvtap0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24, 0x4e22, 0x0, 0x0, 0x0, 0x4e22], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x5}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private1, [0xffffffff], [0xffffff00], 'geneve1\x00', 'veth1_to_hsr\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r4 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000004e) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000380)={0x2, 0x8000}, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000300)={0x3, 0x1}, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) sendmmsg$inet_sctp(r1, &(0x7f0000002240)=[{&(0x7f0000001000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000340)="13", 0x1}], 0x1, &(0x7f0000002180)=ANY=[@ANYRESOCT=r6, @ANYRES32=0x0, @ANYBLOB="1800000000000000840000000500000020000000f8760000"], 0x38, 0x40010}], 0x1, 0x240000c0) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000100)=0xfffffffffffffc27) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) flock(r8, 0x5) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x82) flock(r9, 0x1) flock(r9, 0x2) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') preadv(r10, &(0x7f00000001c0)=[{&(0x7f00000039c0)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x20000000000001e4, &(0x7f0000000040)=ANY=[@ANYBLOB="d4000000200000007910000000000000db000000400000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) getsockopt$sock_timeval(r10, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) 702.319355ms ago: executing program 0 (id=707): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xfffffffc, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}, @TCA_NETEM_DELAY_DIST={0x6, 0x2, "ce2b"}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000640)=ANY=[], 0x200002e6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) listen(r3, 0x2) fcntl$setpipe(r3, 0x407, 0x1) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1a7e42, 0x85) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1d31, &(0x7f0000000040)={0x0, 0xc8a3, 0xc001, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x63a, 0x7721, 0x16, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r5, &(0x7f0000003040)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0, 0x400020) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb40000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000df3c56dcc506cc610000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000400d3"], 0xfc}}, 0x0) 607.203187ms ago: executing program 1 (id=708): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0xc010) 422.401471ms ago: executing program 1 (id=709): syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x67, 0x0, 0x2, 0x6, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0x4, 0x5, 0x0, 0xf}, @lsrr={0x83, 0x7, 0x63, [@private=0xa010101]}, @timestamp_prespec={0x44, 0x4, 0xf5, 0x3, 0x7}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000c80)=0x6, 0x12) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x3e, 0x1, 0x7fffa, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000300)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x2c) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{}]}, 0x3, 0x5fe, &(0x7f0000000d40)="$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") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4040, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000500)={0x5, 0x2000027, 0x20000000}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "164508", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xc0000, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="000000000e2c0000300012800b000100697036746e6c0000200002801400030020010000000000000000000000000002050009000400000008000400bf01000d"], 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="70010000", @ANYRES16=0x0, @ANYBLOB="10002bbd7000fbdbdf2510000000300007800c00040002000000000000000c00030000000000000000800c000300070000000000000008000200100000004400098008000200050000000800020001000000080001000500000008000200090000000800020007000000080001000600000008000100d606000008000100060000007400058007000100696200004c00028008000200ff7f000008000200a8000000080001001d0000000800010017000000080001000b000000080003000300000008000200000000000800030002000000080001000400000008000100756470001400028008000200010000000800020093000000180007800c000300020000000000000008000100040000002400098008000200f9fffffb0800020021070000080002000200000008000200000000001400098008000200ffffffff080002000900000024000380080001000300000008000100ffffff7f08000300010000000800020005000000bce6d45b696af1d2bbbf13afe8d962564abbdecaab581da6888845c52f12b9e6167f91c29e4b9e6e9fcd86a93ae8bb11788a6405ffbd57e4f68457b14605ce2a1e5bc3b583c7f2a0fe28a51ad6ca28750c810477e4a651b465804a"], 0x170}, 0x1, 0x0, 0x0, 0x8049}, 0x20008040) 232.154935ms ago: executing program 3 (id=710): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) get_mempolicy(0x0, 0x0, 0x8, &(0x7f00005e8000/0x2000)=nil, 0x3) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) inotify_init1(0x180000) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0x4}]}, 0x18, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x20, 0xe, 0x4, 0xfffff00c}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) perf_event_open(&(0x7f0000002600)={0x5, 0x80, 0xf, 0x1, 0xd, 0x8, 0x0, 0xe15, 0x10480, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x41, 0x5, 0xfffffffe, 0x7, 0x8, 0x7, 0xe0d, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000200), 0x8000000000000000, 0x800) ioctl$USBDEVFS_GET_SPEED(r6, 0x551f) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, 0x0) r8 = syz_open_dev$rtc(&(0x7f0000000180), 0x1, 0xe1c4fc672a2ffa64) ioctl$RTC_WIE_OFF(r8, 0x7010) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'dummy0\x00'}) 106.042408ms ago: executing program 0 (id=711): socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x2, 0x9, "62007d820000dec52311002240f7ffff6f1a06"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000100)="17", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) 105.126998ms ago: executing program 4 (id=712): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000000, &(0x7f0000000600), 0x4, 0x521, &(0x7f0000000640)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f0000000200)}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x524, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x101, 0x3, 0xfffffffa, 0x9}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x80) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r6, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, 0x0, &(0x7f0000000140)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r9 = dup3(r1, r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r9, &(0x7f0000000300)={0x200f}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x45a, &(0x7f00000008c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x109200, 0x4) connect$vsock_stream(r10, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) mmap(&(0x7f000080e000/0x3000)=nil, 0x3000, 0x4, 0x40010, 0xffffffffffffffff, 0x0) ioctl$EVIOCGNAME(r9, 0x80404506, &(0x7f0000000340)=""/156) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 805.72µs ago: executing program 3 (id=713): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)={0x0, 0xfffffffc, 0x100, 0x8000, 0x0, "7a58beca3900ff0100000000000000000200"}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) setsockopt$sock_attach_bpf(r0, 0x84, 0x83, &(0x7f0000000000), 0x8) 0s ago: executing program 0 (id=714): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xffffbdfb, {0x0, 0x0, 0x0, r3, {0xfff3}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) kernel console output (not intermixed with test programs): 20 [ 58.710952][ T3842] do_syscall_64+0x136/0x3c0 [ 58.711059][ T3842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.711081][ T3842] RIP: 0033:0x7f00ff28de59 [ 58.711127][ T3842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.711148][ T3842] RSP: 002b:00007f00fdce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 58.711171][ T3842] RAX: ffffffffffffffda RBX: 00007f00ff515fa0 RCX: 00007f00ff28de59 [ 58.711186][ T3842] RDX: 0000000000000000 RSI: d931d3864d39dcdb RDI: 0000200000000000 [ 58.711203][ T3842] RBP: 00007f00fdce7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.711223][ T3842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.711237][ T3842] R13: 00007f00ff516038 R14: 00007f00ff515fa0 R15: 00007ffefdd63798 [ 58.711333][ T3842] [ 58.937390][ T28] audit: type=1400 audit(1783021691.830:319): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 59.056440][ T28] audit: type=1400 audit(1783021691.977:320): avc: denied { module_request } for pid=3853 comm="syz.4.100" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 59.078797][ T28] audit: type=1400 audit(1783021691.987:321): avc: denied { setopt } for pid=3847 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 59.116315][ T28] audit: type=1400 audit(1783021691.997:322): avc: denied { write } for pid=3847 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 59.156721][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.223702][ T3861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.101'. [ 59.290905][ T3861] netlink: 11 bytes leftover after parsing attributes in process `syz.3.101'. [ 59.339427][ T3859] loop0: detected capacity change from 0 to 128 [ 59.386105][ T3859] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.440263][ T3859] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.490409][ T28] audit: type=1400 audit(1783021692.400:323): avc: denied { ioctl } for pid=3872 comm="syz.2.106" path="socket:[5805]" dev="sockfs" ino=5805 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.640737][ T3889] FAULT_INJECTION: forcing a failure. [ 59.640737][ T3889] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.662592][ T3889] CPU: 1 UID: 0 PID: 3889 Comm: syz.0.112 Not tainted syzkaller #0 PREEMPT(lazy) [ 59.662702][ T3889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 59.662718][ T3889] Call Trace: [ 59.662725][ T3889] [ 59.662735][ T3889] __dump_stack+0x1d/0x30 [ 59.662765][ T3889] dump_stack_lvl+0x95/0xd0 [ 59.662868][ T3889] dump_stack+0x15/0x1b [ 59.662886][ T3889] should_fail_ex+0x25e/0x270 [ 59.662916][ T3889] should_fail+0xb/0x20 [ 59.662946][ T3889] should_fail_usercopy+0x1a/0x20 [ 59.663047][ T3889] _copy_to_user+0x20/0xa0 [ 59.663065][ T3889] simple_read_from_buffer+0xb5/0x130 [ 59.663137][ T3889] proc_fail_nth_read+0x10e/0x150 [ 59.663164][ T3889] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 59.663185][ T3889] vfs_read+0x18e/0x7c0 [ 59.663216][ T3889] ? __pfx___rcu_read_unlock+0x10/0x10 [ 59.663277][ T3889] ? __rcu_read_unlock+0x4e/0x70 [ 59.663344][ T3889] ? __fget_files+0x184/0x1c0 [ 59.663375][ T3889] ? mutex_lock+0x57/0x90 [ 59.663405][ T3889] ksys_read+0xdc/0x1a0 [ 59.663490][ T3889] __x64_sys_read+0x40/0x50 [ 59.663532][ T3889] x64_sys_call+0x2886/0x3020 [ 59.663558][ T3889] do_syscall_64+0x136/0x3c0 [ 59.663662][ T3889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.663683][ T3889] RIP: 0033:0x7f00ff24e68e [ 59.663700][ T3889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 59.663722][ T3889] RSP: 002b:00007f00fdce6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.663747][ T3889] RAX: ffffffffffffffda RBX: 00007f00fdce76c0 RCX: 00007f00ff24e68e [ 59.663817][ T3889] RDX: 000000000000000f RSI: 00007f00fdce70a0 RDI: 0000000000000004 [ 59.663831][ T3889] RBP: 00007f00fdce7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.663844][ T3889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.663858][ T3889] R13: 00007f00ff516038 R14: 00007f00ff515fa0 R15: 00007ffefdd63798 [ 59.663878][ T3889] [ 59.889357][ T3871] netlink: 68 bytes leftover after parsing attributes in process `syz.1.99'. [ 59.902382][ T3891] syzkaller0: entered promiscuous mode [ 59.911306][ T28] audit: type=1400 audit(1783021692.784:324): avc: denied { read write } for pid=3892 comm="syz.2.114" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 59.935868][ T3891] syzkaller0: entered allmulticast mode [ 59.942008][ T3871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.99'. [ 59.960289][ T3898] loop0: detected capacity change from 0 to 128 [ 59.995701][ T3898] syz.0.116: attempt to access beyond end of device [ 59.995701][ T3898] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 60.027240][ T3898] syz.0.116: attempt to access beyond end of device [ 60.027240][ T3898] loop0: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 60.046738][ T3898] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 60.060696][ T3898] syz.0.116: attempt to access beyond end of device [ 60.060696][ T3898] loop0: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 60.091317][ T3898] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 60.118649][ T3898] syz.0.116: attempt to access beyond end of device [ 60.118649][ T3898] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 60.157050][ T3898] syz.0.116: attempt to access beyond end of device [ 60.157050][ T3898] loop0: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 60.189231][ T3898] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 60.198383][ T3898] syz.0.116: attempt to access beyond end of device [ 60.198383][ T3898] loop0: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 60.212662][ T3898] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 60.231908][ T3898] syz.0.116: attempt to access beyond end of device [ 60.231908][ T3898] loop0: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 60.240171][ T3908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.120'. [ 60.273431][ T3898] syz.0.116: attempt to access beyond end of device [ 60.273431][ T3898] loop0: rw=2049, sector=206, nr_sectors = 2 limit=128 [ 60.293084][ T3898] Buffer I/O error on dev loop0, logical block 103, lost async page write [ 60.312521][ T3898] syz.0.116: attempt to access beyond end of device [ 60.312521][ T3898] loop0: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 60.363227][ T3898] Buffer I/O error on dev loop0, logical block 104, lost async page write [ 60.375477][ T3919] random: crng reseeded on system resumption [ 60.377931][ T3917] loop3: detected capacity change from 0 to 164 [ 60.381692][ T3898] syz.0.116: attempt to access beyond end of device [ 60.381692][ T3898] loop0: rw=2049, sector=210, nr_sectors = 6 limit=128 [ 60.389938][ T3898] Buffer I/O error on dev loop0, logical block 107, lost async page write [ 60.390025][ T3898] Buffer I/O error on dev loop0, logical block 108, lost async page write [ 60.390892][ T3898] Buffer I/O error on dev loop0, logical block 119, lost async page write [ 60.390918][ T3898] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 60.458982][ T3917] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 60.488436][ T3917] netlink: 24 bytes leftover after parsing attributes in process `syz.3.123'. [ 60.583046][ T3933] loop1: detected capacity change from 0 to 512 [ 60.596505][ T3933] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.699291][ T3937] loop3: detected capacity change from 0 to 164 [ 60.710366][ T3937] rock: directory entry would overflow storage [ 60.729198][ T3937] rock: sig=0x5252, size=5, remaining=3 [ 60.741489][ T3937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16488 sclass=netlink_route_socket pid=3937 comm=syz.3.130 [ 60.757955][ T3937] Set syz1 is full, maxelem 14 reached [ 60.906524][ T3947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.134'. [ 61.148454][ T3949] loop0: detected capacity change from 0 to 512 [ 61.263465][ T3949] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.131: corrupted inode contents [ 61.277115][ T3949] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 61.287587][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 61.303553][ C1] EXT4-fs (loop0): initial error at time 1783021694: ext4_do_update_inode:5742: inode 16 [ 61.313610][ C1] EXT4-fs (loop0): last error at time 1783021694: ext4_do_update_inode:5742: inode 16 [ 61.334397][ T3949] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #16: comm syz.0.131: mark_inode_dirty error [ 61.346916][ T3949] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 61.385791][ T3949] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.131: corrupted inode contents [ 61.408502][ T3949] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 61.531606][ T3949] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.131: mark_inode_dirty error [ 61.566890][ T3949] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.131: corrupted inode contents [ 61.581574][ T3949] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 61.591547][ T3949] loop0: lost filesystem error report for type 5 error -117 [ 61.594598][ T3949] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #16: comm syz.0.131: corrupted inode contents [ 61.617465][ T3949] EXT4-fs error (device loop0): ext4_truncate:4691: inode #16: comm syz.0.131: mark_inode_dirty error [ 61.632036][ T3949] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 61.650351][ T3949] loop0: lost filesystem error report for type 5 error -117 [ 61.658050][ T3949] EXT4-fs (loop0): 1 truncate cleaned up [ 61.690874][ T3949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.706155][ T3949] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.827474][ T253] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:5: Failed to release dquot type 1 [ 62.126113][ T3949] syz.0.131 (3949) used greatest stack depth: 9088 bytes left [ 62.158293][ T3967] xt_hashlimit: size too large, truncated to 1048576 [ 62.875499][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.218109][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 63.218127][ T28] audit: type=1400 audit(1783021696.075:343): avc: denied { connect } for pid=3979 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.331591][ T28] audit: type=1400 audit(1783021696.105:344): avc: denied { listen } for pid=3995 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.374095][ T3998] loop2: detected capacity change from 0 to 1024 [ 63.415451][ T3998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.448409][ T28] audit: type=1400 audit(1783021696.105:345): avc: denied { read } for pid=3979 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.563047][ T28] audit: type=1400 audit(1783021696.411:346): avc: denied { write } for pid=3997 comm="syz.2.148" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.630488][ T4002] loop4: detected capacity change from 0 to 512 [ 63.654364][ T4002] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.683974][ T4002] EXT4-fs: Ignoring removed i_version option [ 63.706384][ T4002] EXT4-fs (loop4): 1 orphan inode deleted [ 63.723503][ T4002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.814096][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.843270][ T4002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.149'. [ 63.896758][ T4006] loop0: detected capacity change from 0 to 512 [ 63.934990][ T4006] EXT4-fs: Ignoring removed bh option [ 63.993004][ T4006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.017331][ T4006] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.039223][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.168892][ T28] audit: type=1400 audit(1783021697.013:347): avc: denied { create } for pid=4013 comm="syz.2.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 64.194996][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.098374][ T4028] loop4: detected capacity change from 0 to 512 [ 65.138235][ T4028] EXT4-fs: Ignoring removed bh option [ 65.174700][ T4028] EXT4-fs (loop4): 1 truncate cleaned up [ 65.186011][ T4037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4037 comm=syz.2.158 [ 65.207008][ T4028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.374129][ T4028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.431068][ T4046] sctp: [Deprecated]: syz.2.162 (pid 4046) Use of int in max_burst socket option deprecated. [ 65.431068][ T4046] Use struct sctp_assoc_value instead [ 65.775434][ T4063] loop2: detected capacity change from 0 to 512 [ 65.793217][ T4063] EXT4-fs: Ignoring removed oldalloc option [ 65.841826][ T28] audit: type=1400 audit(1783021698.615:348): avc: denied { mounton } for pid=4062 comm="syz.2.167" path="/43/bus" dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.909850][ T4063] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.979550][ T4063] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.167: invalid indirect mapped block 83886080 (level 1) [ 66.046996][ T4069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.169'. [ 66.096432][ T4063] fserror_report: 4 callbacks suppressed [ 66.096519][ T4063] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 66.135456][ T4063] EXT4-fs (loop2): Remounting filesystem read-only [ 66.145983][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 66.146005][ C0] EXT4-fs (loop2): initial error at time 1783021698: ext4_free_branches:1023: inode 16 [ 66.146042][ C0] EXT4-fs (loop2): last error at time 1783021698: ext4_free_branches:1023: inode 16 [ 66.379994][ T4075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.171'. [ 66.390767][ T28] audit: type=1400 audit(1783021699.198:349): avc: denied { write } for pid=4074 comm="syz.4.171" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.425833][ T4063] EXT4-fs (loop2): 1 orphan inode deleted [ 66.433541][ T4075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.171'. [ 66.447164][ T4063] EXT4-fs (loop2): 1 truncate cleaned up [ 66.458395][ T4063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.503204][ T4063] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.549616][ T28] audit: type=1400 audit(1783021699.366:350): avc: denied { setopt } for pid=4078 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.717237][ T4079] team0 (unregistering): Failed to send options change via netlink (err -105) [ 66.726616][ T4079] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 66.755721][ T4079] team0 (unregistering): Port device team_slave_0 removed [ 66.826023][ T4079] team0 (unregistering): Failed to send options change via netlink (err -105) [ 66.852192][ T4079] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 66.912986][ T4079] team0 (unregistering): Port device team_slave_1 removed [ 67.112309][ T28] audit: type=1400 audit(1783021699.901:351): avc: denied { setopt } for pid=4089 comm="syz.4.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.132658][ T4091] tmpfs: Unknown parameter 'mpl' [ 67.235497][ T28] audit: type=1400 audit(1783021700.049:352): avc: denied { bind } for pid=4093 comm="syz.3.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.344977][ T4098] usb usb8: usbfs: process 4098 (syz.0.180) did not claim interface 0 before use [ 67.632191][ T4099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'. [ 67.795091][ T4118] 9p: Bad value for 'rfdno' [ 67.896597][ T4118] netlink: 'syz.4.186': attribute type 12 has an invalid length. [ 68.082235][ T4128] loop3: detected capacity change from 0 to 1024 [ 68.109609][ T4128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.177585][ T4127] loop0: detected capacity change from 0 to 164 [ 68.215721][ T4127] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 68.288593][ T4136] loop2: detected capacity change from 0 to 1024 [ 68.297228][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 68.297245][ T28] audit: type=1400 audit(1783021701.099:371): avc: denied { write } for pid=4125 comm="syz.3.190" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.392677][ T4142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 68.408100][ T4142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 68.430390][ T4136] loop2: detected capacity change from 0 to 256 [ 68.516629][ T4145] loop2: detected capacity change from 0 to 256 [ 68.572138][ T28] audit: type=1400 audit(1783021701.366:372): avc: denied { write } for pid=4140 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.615694][ T4146] netlink: 32 bytes leftover after parsing attributes in process `syz.1.196'. [ 68.873953][ T28] audit: type=1400 audit(1783021701.426:373): avc: denied { mount } for pid=4140 comm="syz.1.196" name="/" dev="configfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 70.591589][ T28] audit: type=1400 audit(1783021703.309:374): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.683594][ T4149] Cannot find set identified by id 0 to match [ 70.980003][ T28] audit: type=1400 audit(1783021703.756:375): avc: denied { setopt } for pid=4151 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.020074][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.165616][ T4163] FAULT_INJECTION: forcing a failure. [ 71.165616][ T4163] name failslab, interval 1, probability 0, space 0, times 0 [ 71.216478][ T4163] CPU: 0 UID: 0 PID: 4163 Comm: syz.0.203 Not tainted syzkaller #0 PREEMPT(lazy) [ 71.216512][ T4163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 71.216550][ T4163] Call Trace: [ 71.216558][ T4163] [ 71.216567][ T4163] __dump_stack+0x1d/0x30 [ 71.216598][ T4163] dump_stack_lvl+0x95/0xd0 [ 71.216625][ T4163] dump_stack+0x15/0x1b [ 71.216677][ T4163] should_fail_ex+0x25e/0x270 [ 71.216716][ T4163] should_failslab+0x8c/0xb0 [ 71.216795][ T4163] __kmalloc_noprof+0xd4/0x4a0 [ 71.216825][ T4163] ? sel_write_validatetrans+0x1df/0x370 [ 71.216899][ T4163] ? sel_write_validatetrans+0x1df/0x370 [ 71.217014][ T4163] sel_write_validatetrans+0x1df/0x370 [ 71.217067][ T4163] ? __pfx_sel_write_validatetrans+0x10/0x10 [ 71.217103][ T4163] vfs_write+0x252/0x990 [ 71.217127][ T4163] ? __fget_files+0x184/0x1c0 [ 71.217159][ T4163] ? mutex_lock+0x57/0x90 [ 71.217233][ T4163] ksys_write+0xdc/0x1a0 [ 71.217322][ T4163] __x64_sys_write+0x40/0x50 [ 71.217348][ T4163] x64_sys_call+0x27e1/0x3020 [ 71.217459][ T4163] do_syscall_64+0x136/0x3c0 [ 71.217524][ T4163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.217551][ T4163] RIP: 0033:0x7f00ff28de59 [ 71.217571][ T4163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.217593][ T4163] RSP: 002b:00007f00fdce7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.217619][ T4163] RAX: ffffffffffffffda RBX: 00007f00ff515fa0 RCX: 00007f00ff28de59 [ 71.217692][ T4163] RDX: 000000000000005e RSI: 0000200000000140 RDI: 0000000000000003 [ 71.217710][ T4163] RBP: 00007f00fdce7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.217727][ T4163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.217742][ T4163] R13: 00007f00ff516038 R14: 00007f00ff515fa0 R15: 00007ffefdd63798 [ 71.217768][ T4163] [ 71.221862][ T28] audit: type=1400 audit(1783021703.994:376): avc: denied { write } for pid=4168 comm="syz.3.200" path="socket:[7337]" dev="sockfs" ino=7337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.494597][ T28] audit: type=1400 audit(1783021704.232:377): avc: denied { map } for pid=4176 comm="syz.0.206" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=7341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.495597][ T4164] loop1: detected capacity change from 0 to 512 [ 71.561189][ T3981] syz.3.142 (3981) used greatest stack depth: 8784 bytes left [ 71.582279][ T28] audit: type=1400 audit(1783021704.232:378): avc: denied { read } for pid=4176 comm="syz.0.206" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=7341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.620456][ T4169] loop3: detected capacity change from 0 to 764 [ 71.686764][ T4188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.696482][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.706956][ T3377] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 71.717047][ T4173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=4173 comm=syz.3.200 [ 71.734389][ T28] audit: type=1400 audit(1783021704.311:379): avc: denied { mmap_zero } for pid=4176 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 71.736305][ T4164] ------------[ cut here ]------------ [ 71.756533][ T4188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.761251][ T4164] EA inode 11 i_nlink=0 [ 71.771251][ T4164] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.1.204/4164 [ 71.786874][ T4185] mmap: syz.4.209 (4185) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 71.789869][ T4164] Modules linked in: [ 71.807072][ T4164] CPU: 0 UID: 0 PID: 4164 Comm: syz.1.204 Not tainted syzkaller #0 PREEMPT(lazy) [ 71.817299][ T4164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 71.828796][ T4164] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 71.836191][ T4164] Code: 16 d2 96 ff 49 8d 7e 40 4c 8d 2d eb 8c 5a 05 e8 26 af b5 ff 49 8b 6e 40 4c 89 e7 e8 5a aa b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 21 1a d9 03 90 90 90 90 90 90 90 [ 71.855699][ T28] audit: type=1400 audit(1783021704.311:380): avc: denied { bind } for pid=4176 comm="syz.0.206" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.859064][ T4164] RSP: 0018:ffffc9000175f7f8 EFLAGS: 00010246 [ 71.887730][ T4164] RAX: ffff8881042e72b0 RBX: ffff8881005e45a8 RCX: ffffffff81c2a526 [ 71.898129][ T4164] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d3200 [ 71.908458][ T4164] RBP: 000000000000000b R08: 00018881005e455b R09: 0000000000000000 [ 71.917859][ T4164] R10: ffffc9000175f728 R11: 0001c9000175f728 R12: ffff8881005e4558 [ 71.927964][ T4164] R13: ffffffff871d3200 R14: ffff8881005e4510 R15: 0000000000000001 [ 71.937668][ T4164] FS: 00007fde39eb76c0(0000) GS:ffff8882ae8d1000(0000) knlGS:0000000000000000 [ 71.948258][ T4164] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.956412][ T4164] CR2: 00007fe0b9251e9c CR3: 000000011bd1c000 CR4: 00000000003506f0 [ 71.965884][ T4164] Call Trace: [ 71.969700][ T4164] [ 71.974860][ T4164] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 71.983705][ T4164] ext4_xattr_delete_inode+0x6b5/0x790 [ 71.991515][ T4164] ext4_evict_inode+0xb18/0xdf0 [ 71.999423][ T4164] ? __pfx_ext4_evict_inode+0x10/0x10 [ 72.008010][ T4164] evict+0x2a5/0x510 [ 72.014923][ T4164] iput+0x430/0x5a0 [ 72.020030][ T4164] ext4_process_orphan+0x1a4/0x1c0 [ 72.026530][ T4164] ext4_orphan_cleanup+0x6a6/0xa10 [ 72.033663][ T4164] ? ext4_register_li_request+0x403/0x440 [ 72.040584][ T4164] ext4_fill_super+0x33ab/0x3760 [ 72.048193][ T4164] ? __pfx_ext4_fill_super+0x10/0x10 [ 72.056365][ T4164] ? __pfx_ext4_fill_super+0x10/0x10 [ 72.064073][ T4164] get_tree_bdev_flags+0x291/0x300 [ 72.071842][ T4164] ? __pfx_ext4_fill_super+0x10/0x10 [ 72.079409][ T4164] get_tree_bdev+0x1f/0x30 [ 72.085565][ T4164] ext4_get_tree+0x1c/0x30 [ 72.090691][ T4164] vfs_get_tree+0x57/0x1d0 [ 72.095913][ T4164] do_new_mount+0x288/0x8d0 [ 72.101940][ T4164] path_mount+0x4ad/0xb90 [ 72.108387][ T4164] __se_sys_mount+0x28c/0x2e0 [ 72.114956][ T4164] ? __se_sys_mkdirat+0xa2/0xf0 [ 72.121860][ T4164] ? kmem_cache_free+0xca/0x380 [ 72.128952][ T4164] __x64_sys_mount+0x67/0x80 [ 72.135049][ T4164] x64_sys_call+0x2d61/0x3020 [ 72.141135][ T4164] do_syscall_64+0x136/0x3c0 [ 72.148642][ T4164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.156783][ T4164] RIP: 0033:0x7fde3b45f0ca [ 72.162096][ T4164] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.166477][ T4177] loop0: detected capacity change from 0 to 4096 [ 72.185171][ T4164] RSP: 002b:00007fde39eb6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.202207][ T4164] RAX: ffffffffffffffda RBX: 00007fde39eb6ee0 RCX: 00007fde3b45f0ca [ 72.211799][ T4164] RDX: 0000200000000180 RSI: 00002000000003c0 RDI: 00007fde39eb6ea0 [ 72.221110][ T4164] RBP: 0000200000000180 R08: 00007fde39eb6ee0 R09: 0000000000800700 [ 72.230610][ T4177] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 72.242557][ T4164] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000003c0 [ 72.251853][ T4164] R13: 00007fde39eb6ea0 R14: 0000000000000470 R15: 000000000000002c [ 72.261048][ T4164] [ 72.265791][ T4164] ---[ end trace 0000000000000000 ]--- [ 72.274790][ T4164] EXT4-fs (loop1): 1 orphan inode deleted [ 72.290501][ T4164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.338328][ T4193] loop4: detected capacity change from 0 to 256 [ 72.365472][ T4193] program syz.4.211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.561323][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.650263][ T4202] loop1: detected capacity change from 0 to 512 [ 72.683620][ T4202] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.710853][ T4202] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 72.737255][ T4202] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 72.747073][ T4202] System zones: 1-12 [ 72.751569][ T4202] EXT4-fs (loop1): orphan cleanup on readonly fs [ 72.760263][ T4202] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.212: Block bitmap for bg 0 marked uninitialized [ 72.779022][ T4202] loop1: lost filesystem error report for type 5 error -117 [ 72.779294][ T4202] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.212: Block bitmap for bg 0 marked uninitialized [ 72.800326][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 72.800347][ C0] EXT4-fs (loop1): initial error at time 1783021705: ext4_read_block_bitmap_nowait:517 [ 72.800373][ C0] EXT4-fs (loop1): last error at time 1783021705: ext4_read_block_bitmap_nowait:517 [ 72.835890][ T4202] loop1: lost filesystem error report for type 5 error -117 [ 72.836364][ T4202] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.212: Block bitmap for bg 0 marked uninitialized [ 72.921372][ T4202] loop1: lost filesystem error report for type 5 error -117 [ 72.921649][ T4202] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.212: Block bitmap for bg 0 marked uninitialized [ 72.968358][ T4202] loop1: lost filesystem error report for type 5 error -117 [ 72.968557][ T4202] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.212: Block bitmap for bg 0 marked uninitialized [ 73.025669][ T4202] loop1: lost filesystem error report for type 5 error -117 [ 73.027312][ T4202] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.212: Block bitmap for bg 0 marked uninitialized [ 73.086835][ T4202] loop1: lost filesystem error report for type 5 error -117 [ 73.088653][ T4202] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 73.140852][ T4202] EXT4-fs (loop1): 1 truncate cleaned up [ 73.147954][ T4202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.222387][ T4204] netlink: 'syz.4.214': attribute type 49 has an invalid length. [ 73.565064][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.639240][ T4183] Set syz1 is full, maxelem 65536 reached [ 73.658197][ T4231] 9p: Bad value for 'rfdno' [ 74.108616][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 74.108684][ T28] audit: type=1400 audit(1783021706.476:387): avc: denied { name_bind } for pid=4228 comm="syz.1.221" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 74.211130][ T4231] netlink: 'syz.0.224': attribute type 12 has an invalid length. [ 74.234113][ T4234] loop3: detected capacity change from 0 to 512 [ 74.255554][ T4234] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 74.279008][ T4234] EXT4-fs (loop3): 1 truncate cleaned up [ 74.285364][ T4234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.299862][ T28] audit: type=1400 audit(1783021707.052:388): avc: denied { write } for pid=4226 comm="syz.3.222" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.317842][ T4233] xt_CT: You must specify a L4 protocol and not use inversions on it [ 74.323155][ T4234] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.222: invalid indirect mapped block 4294901760 (level 0) [ 74.344832][ T28] audit: type=1400 audit(1783021707.052:389): avc: denied { remove_name } for pid=4226 comm="syz.3.222" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.346878][ T4234] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 74.370857][ T4234] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.222: invalid indirect mapped block 2185560079 (level 0) [ 74.394512][ T4234] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 74.394872][ T4234] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #13: comm syz.3.222: corrupted inode contents [ 74.395371][ T28] audit: type=1400 audit(1783021707.052:390): avc: denied { unlink } for pid=4226 comm="syz.3.222" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.411370][ T4234] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 74.438791][ T28] audit: type=1400 audit(1783021707.141:391): avc: denied { write } for pid=4226 comm="syz.3.222" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.483725][ T28] audit: type=1400 audit(1783021707.141:392): avc: denied { add_name } for pid=4226 comm="syz.3.222" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.505908][ T28] audit: type=1400 audit(1783021707.141:393): avc: denied { write open } for pid=4226 comm="syz.3.222" path="/39/file0/file0/file0" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.556935][ T4246] FAULT_INJECTION: forcing a failure. [ 74.556935][ T4246] name failslab, interval 1, probability 0, space 0, times 0 [ 74.558143][ T4234] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #13: comm syz.3.222: mark_inode_dirty error [ 74.574099][ T4246] CPU: 1 UID: 0 PID: 4246 Comm: syz.4.226 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 74.574214][ T4246] Tainted: [W]=WARN [ 74.574235][ T4246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 74.574292][ T4246] Call Trace: [ 74.574329][ T4246] [ 74.574378][ T4246] __dump_stack+0x1d/0x30 [ 74.574462][ T4246] dump_stack_lvl+0x95/0xd0 [ 74.574533][ T4246] dump_stack+0x15/0x1b [ 74.574659][ T4246] should_fail_ex+0x25e/0x270 [ 74.574752][ T4246] should_failslab+0x8c/0xb0 [ 74.574825][ T4246] __kvmalloc_node_noprof+0x15b/0x590 [ 74.574930][ T4246] ? xt_alloc_table_info+0x40/0x80 [ 74.575037][ T4246] ? xt_alloc_table_info+0x40/0x80 [ 74.575118][ T4246] xt_alloc_table_info+0x40/0x80 [ 74.575183][ T4246] do_ip6t_set_ctl+0x647/0x990 [ 74.575274][ T4246] ? ktime_expiry_to_cycles+0x1f1/0x210 [ 74.575358][ T4246] ? __rcu_read_unlock+0x4e/0x70 [ 74.575424][ T4246] nf_setsockopt+0x199/0x1b0 [ 74.575477][ T4246] ipv6_setsockopt+0x11a/0x130 [ 74.575529][ T4246] tcp_setsockopt+0x98/0xb0 [ 74.575615][ T4246] sock_common_setsockopt+0x69/0x80 [ 74.575721][ T4246] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 74.575802][ T4246] __sys_setsockopt+0x184/0x200 [ 74.576080][ T4246] __x64_sys_setsockopt+0x64/0x80 [ 74.576200][ T4246] x64_sys_call+0x2327/0x3020 [ 74.576279][ T4246] do_syscall_64+0x136/0x3c0 [ 74.576459][ T4246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.576582][ T4246] RIP: 0033:0x7fa19d26de59 [ 74.576640][ T4246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.576724][ T4246] RSP: 002b:00007fa19bcc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 74.576862][ T4246] RAX: ffffffffffffffda RBX: 00007fa19d4f5fa0 RCX: 00007fa19d26de59 [ 74.576933][ T4246] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 74.576975][ T4246] RBP: 00007fa19bcc7090 R08: 0000000000000380 R09: 0000000000000000 [ 74.577019][ T4246] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.577062][ T4246] R13: 00007fa19d4f6038 R14: 00007fa19d4f5fa0 R15: 00007ffef3f6d278 [ 74.577151][ T4246] [ 74.582451][ T28] audit: type=1326 audit(1783021707.300:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.0.225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00ff28de59 code=0x0 [ 74.593880][ T4234] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 74.829767][ T4234] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.222: invalid indirect mapped block 65535 (level 2) [ 74.857092][ T4234] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 74.858771][ T4234] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #13: comm syz.3.222: corrupted inode contents [ 74.880383][ T4234] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 74.885062][ T4234] EXT4-fs error (device loop3): ext4_truncate:4691: inode #13: comm syz.3.222: mark_inode_dirty error [ 74.908025][ T4234] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 74.911378][ T4254] loop1: detected capacity change from 0 to 2048 [ 74.914879][ T4234] EXT4-fs error (device loop3): ext4_evict_inode:278: comm syz.3.222: couldn't truncate inode 13 (err -117) [ 74.975130][ T4254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.989181][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.999671][ T4254] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.025942][ T28] audit: type=1400 audit(1783021707.778:395): avc: denied { write } for pid=4253 comm="syz.1.229" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.231806][ T4269] 9p: Bad value for 'rfdno' [ 75.349384][ T4276] netlink: 'syz.3.235': attribute type 12 has an invalid length. [ 75.494005][ T12] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 75.522455][ T12] EXT4-fs (loop1): Remounting filesystem read-only [ 75.533298][ T330] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 75.560233][ T4281] loop0: detected capacity change from 0 to 1024 [ 75.587592][ T4281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.625415][ T28] audit: type=1400 audit(1783021708.364:396): avc: denied { read } for pid=4278 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.627202][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.758307][ T4288] loop3: detected capacity change from 0 to 256 [ 75.765681][ T4288] msdos: Bad value for 'uid' [ 75.775065][ T4288] msdos: Bad value for 'uid' [ 75.777818][ T4285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 75.782959][ T4260] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.820229][ T4288] xt_NFQUEUE: number of total queues is 0 [ 75.910564][ T4293] netlink: 56 bytes leftover after parsing attributes in process `syz.3.242'. [ 75.932436][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.342774][ T4328] loop4: detected capacity change from 0 to 128 [ 76.364665][ T4328] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.406063][ T4328] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.417766][ T4328] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.250: bg 0: bad block bitmap checksum [ 76.621734][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.802140][ T4376] loop1: detected capacity change from 0 to 1024 [ 76.827811][ T4376] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 77.370180][ T4465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 77.389173][ T4465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.277'. [ 77.423672][ T4465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 77.462508][ T4465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.277'. [ 77.541738][ T3384] IPVS: starting estimator thread 0... [ 77.564029][ T4474] loop4: detected capacity change from 0 to 512 [ 77.583685][ T4474] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 77.603651][ T4474] EXT4-fs (loop4): orphan cleanup on readonly fs [ 77.617015][ T4474] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.280: bg 0: block 16: invalid block bitmap [ 77.637816][ T4477] IPVS: using max 1728 ests per chain, 86400 per kthread [ 77.645556][ T4474] loop4: lost filesystem error report for type 5 error -117 [ 77.646959][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 77.651036][ T4474] EXT4-fs (loop4): Remounting filesystem read-only [ 77.654333][ C0] EXT4-fs (loop4): initial error at time 1783021710: ext4_validate_block_bitmap:432 [ 77.676882][ C0] EXT4-fs (loop4): last error at time 1783021710: ext4_validate_block_bitmap:432 [ 77.689564][ T4474] EXT4-fs (loop4): 1 truncate cleaned up [ 77.696724][ T4474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 77.722737][ T4484] IPv6: addrconf: prefix option has invalid lifetime [ 77.785577][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.967783][ T4491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.286'. [ 78.157921][ T4511] loop0: detected capacity change from 0 to 764 [ 78.511398][ T4524] loop0: detected capacity change from 0 to 512 [ 78.562678][ T4526] 9p: Bad value for 'rfdno' [ 78.596863][ T4509] loop2: detected capacity change from 0 to 32768 [ 78.635846][ T4532] loop4: detected capacity change from 0 to 128 [ 78.655661][ T4509] loop2: p1 p3 < > [ 78.790971][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 78.807528][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 78.962525][ T4550] loop0: detected capacity change from 0 to 1024 [ 79.001769][ T4550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.434889][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.548626][ T4565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 79.582011][ T4573] loop4: detected capacity change from 0 to 512 [ 79.603586][ T4573] EXT4-fs (loop4): unable to read superblock [ 79.791232][ T4565] 9p: Bad value for 'timeout' [ 79.793765][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 79.793887][ T28] audit: type=1400 audit(1783021712.512:420): avc: denied { create } for pid=4572 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.897084][ T4574] futex_wake_op: syz.3.309 tries to shift op by -1; fix this program [ 80.015173][ T4584] loop4: detected capacity change from 0 to 512 [ 80.046313][ T4584] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 80.060567][ T4586] 9p: Bad value for 'rfdno' [ 80.060892][ T28] audit: type=1400 audit(1783021712.781:421): avc: denied { mounton } for pid=4585 comm="syz.0.318" path="/70/file0" dev="tmpfs" ino=399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.122312][ T4584] EXT4-fs (loop4): 1 truncate cleaned up [ 80.156760][ T4584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.667766][ T4602] loop0: detected capacity change from 0 to 1764 [ 80.697855][ T28] audit: type=1400 audit(1783021713.418:422): avc: denied { setopt } for pid=4601 comm="syz.0.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.734197][ T28] audit: type=1400 audit(1783021713.448:423): avc: denied { ioctl } for pid=4601 comm="syz.0.321" path="socket:[8088]" dev="sockfs" ino=8088 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 80.944131][ T4600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 81.057630][ T4606] loop0: p3 p4 < > [ 81.061900][ T4606] loop0: p3 size 201326592 extends beyond EOD, truncated [ 81.258495][ T4600] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 81.267383][ T4600] EXT4-fs (loop1): 1 truncate cleaned up [ 81.273733][ T4600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.297547][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.381334][ T28] audit: type=1400 audit(1783021715.092:424): avc: denied { name_connect } for pid=4615 comm="syz.4.325" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 82.445546][ T4619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 82.800026][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.911221][ T4633] set_capacity_and_notify: 3 callbacks suppressed [ 82.911242][ T4633] loop2: detected capacity change from 0 to 1024 [ 83.042881][ T4633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.172615][ T28] audit: type=1400 audit(1783021715.889:425): avc: denied { write } for pid=4632 comm="syz.2.332" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.237421][ T4640] loop1: detected capacity change from 0 to 164 [ 83.258661][ T4636] usb usb5: usbfs: process 4636 (syz.0.333) did not claim interface 0 before use [ 83.330287][ T4649] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 83.346007][ T28] audit: type=1400 audit(1783021716.058:426): avc: denied { listen } for pid=4644 comm="syz.3.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.384577][ T28] audit: type=1400 audit(1783021716.058:427): avc: denied { create } for pid=4643 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.429775][ T28] audit: type=1400 audit(1783021716.058:428): avc: denied { setopt } for pid=4643 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.456878][ T4651] loop3: detected capacity change from 0 to 1024 [ 83.482502][ T28] audit: type=1400 audit(1783021716.078:429): avc: denied { write } for pid=4643 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.525681][ T4651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.539656][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.549870][ T4658] program syz.0.338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.575451][ T4651] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.611820][ T4651] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.337: bg 0: block 112: padding at end of block bitmap is not set [ 83.639133][ T4651] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 83.652374][ T4651] EXT4-fs (loop3): This should not happen!! Data will be lost [ 83.652374][ T4651] [ 83.662286][ T4651] EXT4-fs (loop3): Total free blocks count 0 [ 83.668761][ T4651] EXT4-fs (loop3): Free/Dirty block details [ 83.674821][ T4651] EXT4-fs (loop3): free_blocks=0 [ 83.679944][ T4651] EXT4-fs (loop3): dirty_blocks=16 [ 83.685234][ T4651] EXT4-fs (loop3): Block reservation details [ 83.691670][ T4651] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 83.774072][ T3296] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 83.788335][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.021898][ T4677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 84.124589][ T4684] 9p: Bad value for 'rfdno' [ 84.256451][ T4687] usb usb5: usbfs: process 4687 (syz.0.349) did not claim interface 0 before use [ 84.274010][ T4691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.350'. [ 84.291477][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.291510][ T4691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.350'. [ 84.301073][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.328006][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.337805][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.566747][ T4689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.578765][ T4689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.766680][ T4703] loop3: detected capacity change from 0 to 512 [ 84.806724][ T4703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.809321][ T4701] loop2: detected capacity change from 0 to 164 [ 84.829370][ T4703] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.842974][ T4699] loop0: detected capacity change from 0 to 164 [ 84.856013][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 84.856029][ T28] audit: type=1400 audit(1783021973.569:434): avc: denied { write } for pid=4702 comm="syz.3.354" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.857745][ T4703] EXT4-fs (loop3): shut down requested (2) [ 84.874559][ T28] audit: type=1400 audit(1783021973.569:435): avc: denied { read } for pid=2964 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 84.926595][ T4701] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 84.960876][ T4699] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 85.013129][ T28] audit: type=1400 audit(1783021973.569:436): avc: denied { search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.044710][ T28] audit: type=1400 audit(1783021973.569:437): avc: denied { write search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.069185][ T28] audit: type=1400 audit(1783021973.569:438): avc: denied { add_name } for pid=2964 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.078028][ T4701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.353'. [ 85.092237][ T28] audit: type=1400 audit(1783021973.569:439): avc: denied { create } for pid=2964 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.133325][ T4699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.352'. [ 85.163677][ T28] audit: type=1400 audit(1783021973.569:440): avc: denied { append open } for pid=2964 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.188246][ T28] audit: type=1400 audit(1783021973.569:441): avc: denied { getattr } for pid=2964 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.251606][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.278851][ T4713] netlink: 'syz.2.356': attribute type 4 has an invalid length. [ 85.292939][ T28] audit: type=1400 audit(1783021973.999:442): avc: denied { setopt } for pid=4711 comm="syz.0.357" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.351679][ T28] audit: type=1400 audit(1783021974.039:443): avc: denied { connect } for pid=4717 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.387771][ T4716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 85.416155][ T4722] netlink: 'syz.1.358': attribute type 11 has an invalid length. [ 85.740410][ T4739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'. [ 86.146636][ T4743] loop0: detected capacity change from 0 to 1024 [ 86.238063][ T4743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.425916][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.947236][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 89.947252][ T28] audit: type=1400 audit(1783021978.369:449): avc: denied { setattr } for pid=4769 comm="syz.3.373" name="SCTPv6" dev="sockfs" ino=9117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.300096][ T3377] IPVS: starting estimator thread 0... [ 91.308637][ T4780] IPVS: lc: FWM 3 0x00000003 - no destination available [ 91.342951][ T28] audit: type=1326 audit(1783021980.049:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.3.376" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fabfde59 code=0x7ffc0000 [ 91.394549][ T4780] loop3: detected capacity change from 0 to 1024 [ 91.409237][ T4765] loop2: detected capacity change from 0 to 1024 [ 91.431086][ T4765] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.440250][ T4781] IPVS: using max 2352 ests per chain, 117600 per kthread [ 91.456037][ T4780] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.376: bad orphan inode 131072 [ 91.504109][ T28] audit: type=1326 audit(1783021980.049:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.3.376" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fabfde59 code=0x7ffc0000 [ 91.565758][ T28] audit: type=1326 audit(1783021980.049:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.3.376" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fabfde59 code=0x7ffc0000 [ 91.579975][ T4780] loop3: lost filesystem error report for type 5 error -117 [ 91.591515][ T28] audit: type=1326 audit(1783021980.079:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.3.376" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f19fabfde59 code=0x7ffc0000 [ 91.624718][ T28] audit: type=1326 audit(1783021980.079:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.3.376" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fabfde59 code=0x7ffc0000 [ 91.653657][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 91.660759][ C0] EXT4-fs (loop3): initial error at time 1783021980: ext4_orphan_get:1425 [ 91.669524][ C0] EXT4-fs (loop3): last error at time 1783021980: ext4_orphan_get:1425 [ 91.681413][ T4780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.700139][ T28] audit: type=1326 audit(1783021980.079:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.3.376" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fabfde59 code=0x7ffc0000 [ 91.728742][ T28] audit: type=1326 audit(1783021980.079:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.3.376" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fabfde59 code=0x7ffc0000 [ 91.812433][ T28] audit: type=1326 audit(1783021980.079:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.3.376" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f19fabfde59 code=0x7ffc0000 [ 91.847157][ T28] audit: type=1326 audit(1783021980.079:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4779 comm="syz.3.376" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19fabfde59 code=0x7ffc0000 [ 91.923167][ T4786] loop0: detected capacity change from 0 to 512 [ 91.931679][ T4786] EXT4-fs: Ignoring removed bh option [ 91.937411][ T4786] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.962100][ T4786] EXT4-fs (loop0): bad geometry: first data block 0 is beyond end of filesystem (0) [ 91.980128][ T4786] netlink: 320 bytes leftover after parsing attributes in process `syz.0.377'. [ 91.993453][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.009171][ T4788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 92.024041][ T4765] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.074174][ T4786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 92.196707][ T4802] loop0: detected capacity change from 0 to 512 [ 92.205487][ T4802] EXT4-fs: inline encryption not supported [ 92.207294][ T4802] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.207360][ T4802] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 92.207612][ T4802] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 92.207637][ T4802] EXT4-fs (loop0): group descriptors corrupted! [ 92.296251][ T4803] usb usb5: usbfs: process 4803 (syz.3.381) did not claim interface 0 before use [ 92.372548][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.389500][ T4806] loop3: detected capacity change from 0 to 128 [ 92.592647][ T4811] loop3: detected capacity change from 0 to 128 [ 93.414069][ T4819] loop4: detected capacity change from 0 to 1024 [ 93.422115][ T4808] loop2: detected capacity change from 0 to 512 [ 93.444532][ T4819] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 93.470971][ T4808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 93.518862][ T4819] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 93.560245][ T4808] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.585718][ T4819] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 93.620273][ T4819] EXT4-fs (loop4): orphan cleanup on readonly fs [ 93.660266][ T4819] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.386: Freeing blocks not in datazone - block = 0, count = 4096 [ 93.817828][ T4819] loop4: lost filesystem error report for type 5 error -117 [ 93.818336][ T4819] EXT4-fs (loop4): 1 orphan inode deleted [ 93.825876][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 93.825903][ C1] EXT4-fs (loop4): initial error at time 1783021982: ext4_free_blocks:6718 [ 93.825986][ C1] EXT4-fs (loop4): last error at time 1783021982: ext4_free_blocks:6718 [ 94.306002][ T4811] loop3: detected capacity change from 0 to 512 [ 94.400075][ T4819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.622001][ T4811] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.667104][ T4811] EXT4-fs (loop3): 1 truncate cleaned up [ 94.683179][ T4811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.080442][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 95.080457][ T28] audit: type=1400 audit(1783021983.789:537): avc: denied { connect } for pid=4842 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.139224][ T4843] FAULT_INJECTION: forcing a failure. [ 95.139224][ T4843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.174885][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.196077][ T4843] CPU: 1 UID: 0 PID: 4843 Comm: syz.0.389 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 95.196132][ T4843] Tainted: [W]=WARN [ 95.196139][ T4843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 95.196152][ T4843] Call Trace: [ 95.196161][ T4843] [ 95.196169][ T4843] __dump_stack+0x1d/0x30 [ 95.196195][ T4843] dump_stack_lvl+0x95/0xd0 [ 95.196221][ T4843] dump_stack+0x15/0x1b [ 95.196249][ T4843] should_fail_ex+0x25e/0x270 [ 95.196293][ T4843] should_fail+0xb/0x20 [ 95.196370][ T4843] should_fail_usercopy+0x1a/0x20 [ 95.196398][ T4843] _copy_from_user+0x1c/0xb0 [ 95.196416][ T4843] move_addr_to_kernel+0x7e/0x120 [ 95.196528][ T4843] io_bind_prep+0x112/0x1d0 [ 95.196621][ T4843] io_submit_sqes+0x737/0x1180 [ 95.196656][ T4843] __se_sys_io_uring_enter+0x25c/0xf90 [ 95.196724][ T4843] ? mutex_unlock+0x4e/0x90 [ 95.196782][ T4843] ? fput+0x8f/0xc0 [ 95.196877][ T4843] __x64_sys_io_uring_enter+0x78/0x90 [ 95.196905][ T4843] x64_sys_call+0x1e16/0x3020 [ 95.196931][ T4843] do_syscall_64+0x136/0x3c0 [ 95.196971][ T4843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.197071][ T4843] RIP: 0033:0x7f00ff28de59 [ 95.197099][ T4843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.197121][ T4843] RSP: 002b:00007f00fdce7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 95.197149][ T4843] RAX: ffffffffffffffda RBX: 00007f00ff515fa0 RCX: 00007f00ff28de59 [ 95.197194][ T4843] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 95.197206][ T4843] RBP: 00007f00fdce7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.197218][ T4843] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 95.197230][ T4843] R13: 00007f00ff516038 R14: 00007f00ff515fa0 R15: 00007ffefdd63798 [ 95.197249][ T4843] [ 95.394862][ T28] audit: type=1400 audit(1783021983.819:538): avc: denied { create } for pid=4842 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 95.491175][ T28] audit: type=1400 audit(1783021983.839:539): avc: denied { write } for pid=4842 comm="syz.0.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.806856][ T4847] xt_hashlimit: size too large, truncated to 1048576 [ 95.819177][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.144276][ T4850] loop1: detected capacity change from 0 to 164 [ 96.218477][ T4850] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 96.336193][ T28] audit: type=1400 audit(1783021985.049:540): avc: denied { mount } for pid=4862 comm="syz.1.397" name="/" dev="ramfs" ino=9709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 96.441731][ T28] audit: type=1400 audit(1783021985.149:541): avc: denied { write } for pid=4857 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 96.983427][ T28] audit: type=1400 audit(1783021985.649:542): avc: denied { execute } for pid=4862 comm="syz.1.397" path="/memory.swap.current" dev="ramfs" ino=9710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 97.078245][ T4871] sg_write: data in/out 432480/136 bytes for SCSI command 0x0-- guessing data in; [ 97.078245][ T4871] program syz.0.399 not setting count and/or reply_len properly [ 97.113785][ T4872] sg_write: data in/out 327771/122 bytes for SCSI command 0x0-- guessing data in; [ 97.113785][ T4872] program syz.1.398 not setting count and/or reply_len properly [ 97.234855][ T4877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.401'. [ 97.273817][ T4877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.401'. [ 97.355027][ T4886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.367966][ T4886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.393492][ T4877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.401'. [ 97.566619][ T4889] FAULT_INJECTION: forcing a failure. [ 97.566619][ T4889] name failslab, interval 1, probability 0, space 0, times 0 [ 97.579471][ T4889] CPU: 0 UID: 0 PID: 4889 Comm: syz.4.405 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 97.579566][ T4889] Tainted: [W]=WARN [ 97.579573][ T4889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 97.579589][ T4889] Call Trace: [ 97.579667][ T4889] [ 97.579677][ T4889] __dump_stack+0x1d/0x30 [ 97.579707][ T4889] dump_stack_lvl+0x95/0xd0 [ 97.579808][ T4889] dump_stack+0x15/0x1b [ 97.579829][ T4889] should_fail_ex+0x25e/0x270 [ 97.579871][ T4889] should_failslab+0x8c/0xb0 [ 97.579900][ T4889] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 97.579997][ T4889] ? __alloc_skb+0x2db/0x6f0 [ 97.580027][ T4889] ? __alloc_skb+0x2db/0x6f0 [ 97.580058][ T4889] __alloc_skb+0x2db/0x6f0 [ 97.580123][ T4889] ? __alloc_skb+0x205/0x6f0 [ 97.580188][ T4889] netlink_alloc_large_skb+0xbf/0xf0 [ 97.580220][ T4889] netlink_sendmsg+0x40c/0x6f0 [ 97.580265][ T4889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.580292][ T4889] ____sys_sendmsg+0x532/0x580 [ 97.580395][ T4889] ___sys_sendmsg+0x195/0x1e0 [ 97.580441][ T4889] __x64_sys_sendmsg+0xd4/0x160 [ 97.580482][ T4889] x64_sys_call+0x194c/0x3020 [ 97.580525][ T4889] do_syscall_64+0x136/0x3c0 [ 97.580566][ T4889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.580593][ T4889] RIP: 0033:0x7fa19d26de59 [ 97.580614][ T4889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.580638][ T4889] RSP: 002b:00007fa19bcc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.580691][ T4889] RAX: ffffffffffffffda RBX: 00007fa19d4f5fa0 RCX: 00007fa19d26de59 [ 97.580705][ T4889] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000008 [ 97.580717][ T4889] RBP: 00007fa19bcc7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.580732][ T4889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.580747][ T4889] R13: 00007fa19d4f6038 R14: 00007fa19d4f5fa0 R15: 00007ffef3f6d278 [ 97.580801][ T4889] [ 97.839082][ T28] audit: type=1400 audit(1783021986.289:543): avc: denied { write } for pid=4888 comm="syz.4.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 97.866669][ T4877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.401'. [ 97.942240][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 97.969396][ T4876] sg_write: data in/out 808464396/136 bytes for SCSI command 0x0-- guessing data in; [ 97.969396][ T4876] program syz.3.401 not setting count and/or reply_len properly [ 97.989640][ T4895] 9p: Bad value for 'wfdno' [ 98.174466][ T4901] netlink: 84 bytes leftover after parsing attributes in process `syz.2.408'. [ 98.224366][ T4903] loop2: detected capacity change from 0 to 1024 [ 98.235938][ T4903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.317005][ T28] audit: type=1400 audit(1783021987.029:544): avc: denied { write } for pid=4902 comm="syz.2.409" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.457494][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.660139][ T4911] usb usb5: usbfs: process 4911 (syz.3.412) did not claim interface 0 before use [ 98.797186][ T4914] FAULT_INJECTION: forcing a failure. [ 98.797186][ T4914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.824899][ T3377] hid-generic 0008:0005:00FF.0002: item fetching failed at offset 0/144 [ 98.835699][ T3377] hid-generic 0008:0005:00FF.0002: probe with driver hid-generic failed with error -22 [ 98.855288][ T4914] CPU: 1 UID: 0 PID: 4914 Comm: syz.3.413 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 98.855373][ T4914] Tainted: [W]=WARN [ 98.855380][ T4914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 98.855392][ T4914] Call Trace: [ 98.855399][ T4914] [ 98.855406][ T4914] __dump_stack+0x1d/0x30 [ 98.855431][ T4914] dump_stack_lvl+0x95/0xd0 [ 98.855457][ T4914] dump_stack+0x15/0x1b [ 98.855481][ T4914] should_fail_ex+0x25e/0x270 [ 98.855517][ T4914] should_fail+0xb/0x20 [ 98.855602][ T4914] should_fail_usercopy+0x1a/0x20 [ 98.855635][ T4914] _copy_to_user+0x20/0xa0 [ 98.855657][ T4914] simple_read_from_buffer+0xb5/0x130 [ 98.855766][ T4914] proc_fail_nth_read+0x10e/0x150 [ 98.855792][ T4914] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 98.855811][ T4914] vfs_read+0x18e/0x7c0 [ 98.855895][ T4914] ? mutex_lock+0x57/0x90 [ 98.855996][ T4914] ? mutex_lock+0x60/0x90 [ 98.856019][ T4914] ksys_read+0xdc/0x1a0 [ 98.856037][ T4914] __x64_sys_read+0x40/0x50 [ 98.856054][ T4914] x64_sys_call+0x2886/0x3020 [ 98.856082][ T4914] do_syscall_64+0x136/0x3c0 [ 98.856168][ T4914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.856195][ T4914] RIP: 0033:0x7f19fabbe68e [ 98.856212][ T4914] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 98.856230][ T4914] RSP: 002b:00007f19f9656fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.856274][ T4914] RAX: ffffffffffffffda RBX: 00007f19f96576c0 RCX: 00007f19fabbe68e [ 98.856291][ T4914] RDX: 000000000000000f RSI: 00007f19f96570a0 RDI: 0000000000000006 [ 98.856304][ T4914] RBP: 00007f19f9657090 R08: 0000000000000000 R09: 0000000000000000 [ 98.856315][ T4914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.856331][ T4914] R13: 00007f19fae86038 R14: 00007f19fae85fa0 R15: 00007ffe18868618 [ 98.856357][ T4914] [ 99.107990][ T4920] loop3: detected capacity change from 0 to 512 [ 99.158329][ T4920] EXT4-fs (loop3): 1 truncate cleaned up [ 99.166175][ T28] audit: type=1400 audit(1783021987.869:545): avc: denied { map } for pid=4923 comm="syz.2.418" path="socket:[9835]" dev="sockfs" ino=9835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 99.191425][ T4920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.260794][ T28] audit: type=1400 audit(1783021987.869:546): avc: denied { read } for pid=4923 comm="syz.2.418" path="socket:[9835]" dev="sockfs" ino=9835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 99.293268][ T4920] process 'syz.3.416' launched './file1' with NULL argv: empty string added [ 99.329086][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.407069][ T4930] 9p: Bad value for 'wfdno' [ 100.046433][ T4936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 100.089536][ T4936] hsr_slave_0: left promiscuous mode [ 100.127652][ T4936] hsr_slave_1: left promiscuous mode [ 100.161189][ T4942] 9p: Bad value for 'rfdno' [ 100.674481][ T4974] loop1: detected capacity change from 0 to 1024 [ 100.689131][ T4974] EXT4-fs: Ignoring removed oldalloc option [ 100.695317][ T4949] loop0: detected capacity change from 0 to 1024 [ 100.727145][ T4975] loop3: detected capacity change from 0 to 2048 [ 100.728454][ T4949] ext4: Unknown parameter 'noacl' [ 100.800642][ T4974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.828091][ T4975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 100.847295][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 100.847311][ T28] audit: type=1400 audit(1783021989.559:551): avc: denied { write } for pid=4973 comm="syz.1.436" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.876979][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.991915][ T28] audit: type=1400 audit(1783021989.699:552): avc: denied { write } for pid=4971 comm="syz.3.435" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.016534][ T28] audit: type=1400 audit(1783021989.699:553): avc: denied { write } for pid=4982 comm="syz.0.438" path="socket:[10443]" dev="sockfs" ino=10443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 101.082191][ T28] audit: type=1400 audit(1783021989.789:554): avc: denied { setattr } for pid=4971 comm="syz.3.435" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.083868][ T4975] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 101.160746][ T28] audit: type=1400 audit(1783021989.859:555): avc: denied { mount } for pid=4971 comm="syz.3.435" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 101.421107][ T4998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.425851][ T4997] 9p: Bad value for 'rfdno' [ 101.432771][ T4998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.666895][ T5000] loop4: detected capacity change from 0 to 764 [ 101.784002][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 102.046063][ T5004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.444'. [ 102.362556][ T5010] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 102.375682][ T28] audit: type=1400 audit(1783021991.069:556): avc: denied { firmware_load } for pid=5009 comm="syz.2.447" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 102.407848][ T5010] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 102.486980][ T5019] capability: warning: `syz.0.450' uses deprecated v2 capabilities in a way that may be insecure [ 102.490079][ T11] IPVS: starting estimator thread 0... [ 102.532327][ T5021] netlink: 40 bytes leftover after parsing attributes in process `syz.2.452'. [ 102.572986][ T28] audit: type=1400 audit(1783021991.279:557): avc: denied { read } for pid=5023 comm="syz.1.451" path="socket:[10506]" dev="sockfs" ino=10506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.602834][ T5027] 9p: Bad value for 'rfdno' [ 102.687469][ T5033] loop3: detected capacity change from 0 to 512 [ 102.715709][ T5033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 102.717625][ T5022] IPVS: using max 2352 ests per chain, 117600 per kthread [ 102.736626][ T5033] ext4 filesystem being mounted at /90/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.775795][ T5039] usb usb5: usbfs: process 5039 (syz.0.457) did not claim interface 0 before use [ 102.981607][ T5041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 103.449642][ T5049] netlink: 20 bytes leftover after parsing attributes in process `syz.1.461'. [ 103.485294][ T28] audit: type=1400 audit(1783021992.199:558): avc: denied { accept } for pid=5048 comm="syz.1.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 103.572262][ T5047] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 103.654882][ T5057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.463'. [ 103.724290][ T5059] netlink: 'syz.1.463': attribute type 1 has an invalid length. [ 103.776391][ T5059] bond1: entered promiscuous mode [ 103.805242][ T5059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.914811][ T5069] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5069 comm=syz.2.465 [ 103.941104][ T5057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.264278][ T5078] 9p: Bad value for 'rfdno' [ 104.358614][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 104.572208][ T5085] loop4: detected capacity change from 0 to 512 [ 104.629600][ T5085] ext4: Unknown parameter 'smackfsroot' [ 104.665540][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 104.697334][ T28] audit: type=1400 audit(1783021993.409:559): avc: denied { map } for pid=5088 comm="syz.0.474" path="socket:[11307]" dev="sockfs" ino=11307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 104.747258][ T5093] FAULT_INJECTION: forcing a failure. [ 104.747258][ T5093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.760867][ T5093] CPU: 1 UID: 0 PID: 5093 Comm: syz.3.473 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 104.760936][ T5093] Tainted: [W]=WARN [ 104.760945][ T5093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.761054][ T5093] Call Trace: [ 104.761063][ T5093] [ 104.761073][ T5093] __dump_stack+0x1d/0x30 [ 104.761101][ T5093] dump_stack_lvl+0x95/0xd0 [ 104.761197][ T5093] dump_stack+0x15/0x1b [ 104.761221][ T5093] should_fail_ex+0x25e/0x270 [ 104.761255][ T5093] should_fail+0xb/0x20 [ 104.761350][ T5093] should_fail_usercopy+0x1a/0x20 [ 104.761445][ T5093] _copy_to_user+0x20/0xa0 [ 104.761464][ T5093] simple_read_from_buffer+0xb5/0x130 [ 104.761496][ T5093] proc_fail_nth_read+0x10e/0x150 [ 104.761523][ T5093] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.761547][ T5093] vfs_read+0x18e/0x7c0 [ 104.761583][ T5093] ? __rcu_read_unlock+0x4e/0x70 [ 104.761615][ T5093] ? __fget_files+0x184/0x1c0 [ 104.761668][ T5093] ? mutex_lock+0x57/0x90 [ 104.761700][ T5093] ksys_read+0xdc/0x1a0 [ 104.761723][ T5093] __x64_sys_read+0x40/0x50 [ 104.761794][ T5093] x64_sys_call+0x2886/0x3020 [ 104.761818][ T5093] do_syscall_64+0x136/0x3c0 [ 104.761853][ T5093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.761881][ T5093] RIP: 0033:0x7f19fabbe68e [ 104.761921][ T5093] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 104.761945][ T5093] RSP: 002b:00007f19f9656fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.761971][ T5093] RAX: ffffffffffffffda RBX: 00007f19f96576c0 RCX: 00007f19fabbe68e [ 104.761987][ T5093] RDX: 000000000000000f RSI: 00007f19f96570a0 RDI: 0000000000000007 [ 104.762061][ T5093] RBP: 00007f19f9657090 R08: 0000000000000000 R09: 0000000000000000 [ 104.762079][ T5093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.762096][ T5093] R13: 00007f19fae86038 R14: 00007f19fae85fa0 R15: 00007ffe18868618 [ 104.762183][ T5093] [ 104.888823][ T5100] loop0: detected capacity change from 0 to 1024 [ 104.969599][ T5091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5091 comm=syz.4.472 [ 105.004124][ T5100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.073297][ T5102] netlink: 72 bytes leftover after parsing attributes in process `syz.3.476'. [ 105.095615][ T28] audit: type=1400 audit(1783021993.809:560): avc: denied { write } for pid=5098 comm="syz.0.475" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.136555][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.150424][ T5111] FAULT_INJECTION: forcing a failure. [ 105.150424][ T5111] name failslab, interval 1, probability 0, space 0, times 0 [ 105.163091][ T5111] CPU: 0 UID: 0 PID: 5111 Comm: syz.1.479 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 105.163174][ T5111] Tainted: [W]=WARN [ 105.163183][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 105.163228][ T5111] Call Trace: [ 105.163311][ T5111] [ 105.163321][ T5111] __dump_stack+0x1d/0x30 [ 105.163347][ T5111] dump_stack_lvl+0x95/0xd0 [ 105.163367][ T5111] dump_stack+0x15/0x1b [ 105.163394][ T5111] should_fail_ex+0x25e/0x270 [ 105.163421][ T5111] should_failslab+0x8c/0xb0 [ 105.163443][ T5111] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 105.163475][ T5111] ? __alloc_skb+0x2db/0x6f0 [ 105.163553][ T5111] ? __alloc_skb+0x2db/0x6f0 [ 105.163576][ T5111] __alloc_skb+0x2db/0x6f0 [ 105.163600][ T5111] ? __alloc_skb+0x205/0x6f0 [ 105.163632][ T5111] alloc_skb_with_frags+0x7e/0x3d0 [ 105.163715][ T5111] ? avc_has_perm_noaudit+0xa3/0x120 [ 105.163745][ T5111] sock_alloc_send_pskb+0x44d/0x500 [ 105.163781][ T5111] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 105.163828][ T5111] hci_sock_sendmsg+0x129/0x910 [ 105.163874][ T5111] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 105.163905][ T5111] sock_write_iter+0x2c5/0x2f0 [ 105.163943][ T5111] aio_write+0x2fe/0x430 [ 105.163975][ T5111] io_submit_one+0xba3/0x1350 [ 105.164045][ T5111] __se_sys_io_submit+0xfb/0x280 [ 105.164084][ T5111] __x64_sys_io_submit+0x43/0x50 [ 105.164122][ T5111] x64_sys_call+0x19d5/0x3020 [ 105.164152][ T5111] do_syscall_64+0x136/0x3c0 [ 105.164224][ T5111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.164248][ T5111] RIP: 0033:0x7fde3b45de59 [ 105.164268][ T5111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.164286][ T5111] RSP: 002b:00007fde39eb7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 105.164363][ T5111] RAX: ffffffffffffffda RBX: 00007fde3b6e5fa0 RCX: 00007fde3b45de59 [ 105.164387][ T5111] RDX: 0000200000001240 RSI: 0000000000000001 RDI: 00007fde39e86000 [ 105.164400][ T5111] RBP: 00007fde39eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.164412][ T5111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.164424][ T5111] R13: 00007fde3b6e6038 R14: 00007fde3b6e5fa0 R15: 00007ffd236b2088 [ 105.164449][ T5111] [ 105.543383][ T5129] loop4: detected capacity change from 0 to 512 [ 105.558541][ T5115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'. [ 105.694509][ T5140] loop0: detected capacity change from 0 to 8192 [ 105.712041][ T5140] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.122516][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 106.122530][ T28] audit: type=1400 audit(1783021994.829:563): avc: denied { create } for pid=5149 comm="syz.1.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 106.150402][ T5152] sg_write: data in/out 17907676/62 bytes for SCSI command 0x0-- guessing data in; [ 106.150402][ T5152] program syz.1.494 not setting count and/or reply_len properly [ 106.169603][ T5150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'. [ 106.179137][ T5150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'. [ 106.188693][ T5150] netlink: 17 bytes leftover after parsing attributes in process `syz.1.494'. [ 106.225930][ T28] audit: type=1400 audit(1783021994.939:564): avc: denied { getopt } for pid=5153 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.251105][ T28] audit: type=1326 audit(1783021994.959:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5153 comm="syz.1.495" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde3b45de59 code=0x0 [ 106.367069][ T28] audit: type=1400 audit(1783021995.079:566): avc: denied { sqpoll } for pid=5157 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 106.398295][ T5158] loop3: detected capacity change from 0 to 164 [ 106.539253][ T5171] sctp: [Deprecated]: syz.0.502 (pid 5171) Use of int in max_burst socket option deprecated. [ 106.539253][ T5171] Use struct sctp_assoc_value instead [ 106.558516][ T5173] loop2: detected capacity change from 0 to 256 [ 106.569240][ T28] audit: type=1400 audit(1783021995.279:567): avc: denied { setopt } for pid=5170 comm="syz.0.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 106.693410][ T5180] loop3: detected capacity change from 0 to 128 [ 106.704073][ T5180] vfat: Unknown parameter 'vodir' [ 106.726534][ T28] audit: type=1400 audit(1783021995.439:568): avc: denied { lock } for pid=5179 comm="syz.3.505" path="socket:[10847]" dev="sockfs" ino=10847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 106.760206][ T5182] bond1: option miimon: invalid value (18446744073709551609) [ 106.772179][ T5182] bond1: option miimon: allowed values 0 - 2147483647 [ 106.785473][ T5182] bond1 (unregistering): Released all slaves [ 106.825912][ T5185] xt_NFQUEUE: number of total queues is 0 [ 107.586119][ T28] audit: type=1400 audit(1783021996.299:569): avc: denied { read } for pid=5216 comm="syz.4.518" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.642577][ T28] audit: type=1400 audit(1783021996.299:570): avc: denied { open } for pid=5216 comm="syz.4.518" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 107.711099][ T5225] __nla_validate_parse: 3 callbacks suppressed [ 107.711155][ T5225] netlink: 84 bytes leftover after parsing attributes in process `syz.4.521'. [ 107.711783][ T5215] loop0: detected capacity change from 0 to 1024 [ 107.744816][ T5215] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 107.758426][ T5228] loop3: detected capacity change from 0 to 256 [ 107.786464][ T5226] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 107.786464][ T5226] program syz.2.522 not setting count and/or reply_len properly [ 107.933539][ T5215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.948080][ T5233] Illegal XDP return value 4291448832 on prog (id 124) dev syz_tun, expect packet loss! [ 107.961986][ T28] audit: type=1400 audit(1783021996.669:571): avc: denied { write } for pid=5214 comm="syz.0.515" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.004330][ T28] audit: type=1400 audit(1783021996.719:572): avc: denied { ioctl } for pid=5214 comm="syz.0.515" path="/124/file1/ext4" dev="loop0" ino=18 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 108.088190][ T5243] xt_NFQUEUE: number of total queues is 0 [ 108.208079][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.631468][ T5261] loop2: detected capacity change from 0 to 512 [ 108.660030][ T5261] autofs4:pid:5261:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1984.8192), cmd(0xc0189371) [ 108.674283][ T5261] autofs4:pid:5261:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189371) [ 108.761528][ T5267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.901287][ T5266] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 108.901287][ T5266] program syz.0.535 not setting count and/or reply_len properly [ 108.945119][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.966253][ T5276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'. [ 108.982718][ T5276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'. [ 108.993033][ T5276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'. [ 109.002043][ T5276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'. [ 109.026486][ T5278] netlink: 'syz.3.539': attribute type 22 has an invalid length. [ 109.035116][ T5278] netlink: 76 bytes leftover after parsing attributes in process `syz.3.539'. [ 109.082042][ T5284] netlink: 32 bytes leftover after parsing attributes in process `syz.3.541'. [ 109.745505][ T5294] netlink: 'syz.4.545': attribute type 1 has an invalid length. [ 109.758921][ T5294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.773059][ T5294] xt_l2tp: v2 tid > 0xffff: 1114116 [ 109.795965][ T5294] set_capacity_and_notify: 1 callbacks suppressed [ 109.795988][ T5294] loop4: detected capacity change from 0 to 512 [ 109.834133][ T5294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.860058][ T5294] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.948679][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.037471][ T5316] netlink: 32 bytes leftover after parsing attributes in process `syz.3.552'. [ 110.273809][ T5320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 110.367577][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 110.409827][ T5327] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.420525][ T5327] IPv6: NLM_F_CREATE should be set when creating new route [ 110.484773][ T5331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.494368][ T5331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.716242][ T5335] loop0: detected capacity change from 0 to 2048 [ 110.735682][ T5335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.776155][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.867419][ T5343] loop2: detected capacity change from 0 to 512 [ 110.877065][ T5343] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.908398][ T5343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.927741][ T5343] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.203517][ T5361] sg_write: data in/out 425984/136 bytes for SCSI command 0x0-- guessing data in; [ 112.203517][ T5361] program syz.4.566 not setting count and/or reply_len properly [ 112.258330][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.278248][ T5365] loop0: detected capacity change from 0 to 256 [ 112.417485][ T5367] FAULT_INJECTION: forcing a failure. [ 112.417485][ T5367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.431188][ T5367] CPU: 0 UID: 0 PID: 5367 Comm: syz.3.567 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 112.431390][ T5367] Tainted: [W]=WARN [ 112.431398][ T5367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 112.431414][ T5367] Call Trace: [ 112.431422][ T5367] [ 112.431440][ T5367] __dump_stack+0x1d/0x30 [ 112.431469][ T5367] dump_stack_lvl+0x95/0xd0 [ 112.431496][ T5367] dump_stack+0x15/0x1b [ 112.431520][ T5367] should_fail_ex+0x25e/0x270 [ 112.431581][ T5367] should_fail+0xb/0x20 [ 112.431611][ T5367] should_fail_usercopy+0x1a/0x20 [ 112.431715][ T5367] _copy_from_user+0x1c/0xb0 [ 112.431820][ T5367] do_ip_vs_set_ctl+0x1cd/0xab0 [ 112.431878][ T5367] nf_setsockopt+0x199/0x1b0 [ 112.431961][ T5367] ip_setsockopt+0x102/0x110 [ 112.432049][ T5367] sctp_setsockopt+0x126/0xea0 [ 112.432088][ T5367] sock_common_setsockopt+0x69/0x80 [ 112.432109][ T5367] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 112.432191][ T5367] __sys_setsockopt+0x184/0x200 [ 112.432233][ T5367] __x64_sys_setsockopt+0x64/0x80 [ 112.432277][ T5367] x64_sys_call+0x2327/0x3020 [ 112.432343][ T5367] do_syscall_64+0x136/0x3c0 [ 112.432375][ T5367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.432400][ T5367] RIP: 0033:0x7f19fabfde59 [ 112.432458][ T5367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.432482][ T5367] RSP: 002b:00007f19f9615028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.432507][ T5367] RAX: ffffffffffffffda RBX: 00007f19fae86180 RCX: 00007f19fabfde59 [ 112.432523][ T5367] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000007 [ 112.432571][ T5367] RBP: 00007f19f9615090 R08: 000000000000002c R09: 0000000000000000 [ 112.432588][ T5367] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 112.432601][ T5367] R13: 00007f19fae86218 R14: 00007f19fae86180 R15: 00007ffe18868618 [ 112.432740][ T5367] [ 113.303233][ T5367] loop3: detected capacity change from 0 to 512 [ 113.735615][ T5371] __nla_validate_parse: 2 callbacks suppressed [ 113.735635][ T5371] netlink: 52 bytes leftover after parsing attributes in process `syz.2.568'. [ 114.307147][ T5367] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.3.567: corrupted xattr block 95: invalid header [ 114.321057][ T5367] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 114.321310][ T5367] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 114.344254][ T5367] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.567: bg 0: block 7: invalid block bitmap [ 114.356824][ T5367] loop3: lost filesystem error report for type 5 error -117 [ 114.395453][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 114.410569][ C0] EXT4-fs (loop3): initial error at time 1783022003: ext4_expand_extra_isize_ea:2810: inode 11 [ 114.421004][ C0] EXT4-fs (loop3): last error at time 1783022003: ext4_validate_block_bitmap:432 [ 114.725651][ T5367] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 114.735628][ T5367] loop3: lost filesystem error report for type 5 error -117 [ 114.743880][ T5369] Cannot find set identified by id 0 to match [ 114.794297][ T5367] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #11: comm syz.3.567: corrupted xattr block 95: invalid header [ 114.809039][ T5367] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 114.811659][ T5367] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 114.832742][ T5367] EXT4-fs (loop3): 1 orphan inode deleted [ 114.843991][ T5367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.033991][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.044048][ T5384] loop4: detected capacity change from 0 to 512 [ 115.066199][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 115.139440][ T5391] loop0: detected capacity change from 0 to 1024 [ 115.197162][ T5391] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 115.226672][ T5384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 115.239673][ T5384] ext4 filesystem being mounted at /103/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.260843][ T5380] __quota_error: 11 callbacks suppressed [ 115.260924][ T5380] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 115.277251][ T5380] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 115.281316][ T28] audit: type=1400 audit(1783022003.969:584): avc: denied { setattr } for pid=5379 comm="syz.4.571" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.287389][ T5380] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.571: Failed to acquire dquot type 0 [ 115.310249][ T5391] EXT4-fs (loop0): mount failed [ 115.354467][ T28] audit: type=1400 audit(1783022004.029:585): avc: denied { write } for pid=5390 comm="syz.0.575" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 115.879078][ T5403] loop2: detected capacity change from 0 to 128 [ 116.266956][ T5407] loop2: detected capacity change from 0 to 512 [ 116.341928][ T5407] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.2.579: corrupted xattr block 95: invalid header [ 116.358230][ T5407] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.363657][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 116.379415][ C1] EXT4-fs (loop2): initial error at time 1783022005: ext4_expand_extra_isize_ea:2810: inode 11 [ 116.389953][ C1] EXT4-fs (loop2): last error at time 1783022005: ext4_expand_extra_isize_ea:2810: inode 11 [ 116.411074][ T5407] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.579: bg 0: block 7: invalid block bitmap [ 116.424405][ T5407] loop2: lost filesystem error report for type 5 error -117 [ 116.490742][ T5407] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 116.509337][ T5407] loop2: lost filesystem error report for type 5 error -117 [ 116.511994][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 116.532264][ T5407] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #11: comm syz.2.579: corrupted xattr block 95: invalid header [ 116.548402][ T5407] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 116.551618][ T5407] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 116.571456][ T5407] EXT4-fs (loop2): 1 orphan inode deleted [ 116.584498][ T5407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.670449][ T5416] loop0: detected capacity change from 0 to 512 [ 116.697619][ T5416] EXT4-fs: journaled quota format not specified [ 116.716396][ T28] audit: type=1400 audit(1783022005.419:586): avc: denied { connect } for pid=5408 comm="syz.3.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 116.814904][ T5420] loop1: detected capacity change from 0 to 256 [ 117.396493][ T28] audit: type=1400 audit(1783022006.109:587): avc: denied { write } for pid=5423 comm="syz.4.582" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.806982][ T5422] Cannot find set identified by id 0 to match [ 117.891847][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.997359][ T28] audit: type=1400 audit(1783022006.709:588): avc: denied { ioctl } for pid=5428 comm="syz.3.586" path="socket:[11945]" dev="sockfs" ino=11945 ioctlcmd=0x5462 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 118.151817][ T5433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'. [ 118.299058][ T5447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 118.408503][ T28] audit: type=1400 audit(1783022007.119:589): avc: denied { create } for pid=5451 comm="syz.0.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 119.424936][ T5468] loop1: detected capacity change from 0 to 256 [ 120.352462][ T5470] Cannot find set identified by id 0 to match [ 120.378154][ T5461] loop2: detected capacity change from 0 to 164 [ 120.601307][ T5461] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 120.651691][ T5479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.601'. [ 120.778575][ T28] audit: type=1400 audit(1783022009.489:590): avc: denied { connect } for pid=5482 comm="syz.2.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 122.360451][ T5507] loop3: detected capacity change from 0 to 128 [ 123.285630][ T28] audit: type=1400 audit(1783022011.999:591): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 123.331104][ T5518] netlink: 'syz.2.612': attribute type 21 has an invalid length. [ 123.379434][ T5507] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.393241][ T5520] loop0: detected capacity change from 0 to 512 [ 123.410696][ T5518] netlink: 132 bytes leftover after parsing attributes in process `syz.2.612'. [ 123.428361][ T5520] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 123.464133][ T5507] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.499470][ T28] audit: type=1400 audit(1783022012.209:592): avc: denied { write } for pid=5506 comm="syz.3.610" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.565181][ T5520] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5520 comm=syz.0.614 [ 123.628843][ T3296] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.652619][ T5537] usb usb5: usbfs: process 5537 (syz.4.623) did not claim interface 0 before use [ 123.813151][ T28] audit: type=1400 audit(1783022012.519:593): avc: denied { setopt } for pid=5552 comm="syz.4.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.840407][ T5547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'. [ 123.846718][ T5550] program syz.3.627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.862466][ T5548] loop1: detected capacity change from 0 to 512 [ 123.871544][ T5548] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.889941][ T28] audit: type=1400 audit(1783022012.549:594): avc: denied { read } for pid=3021 comm="dhcpcd" name="n25" dev="tmpfs" ino=4719 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.912078][ T28] audit: type=1400 audit(1783022012.549:595): avc: denied { open } for pid=3021 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=4719 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.936186][ T28] audit: type=1400 audit(1783022012.549:596): avc: denied { getattr } for pid=3021 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=4719 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.941537][ T5555] loop4: detected capacity change from 0 to 128 [ 123.973270][ T5548] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 124.427520][ T5548] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 124.562190][ T5548] EXT4-fs (loop1): orphan cleanup on readonly fs [ 124.657551][ T5548] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.625: Invalid block bitmap block 0 in block_group 0 [ 124.685533][ T5571] veth1_virt_wifi: entered promiscuous mode [ 124.709964][ T5571] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 124.732084][ T5548] loop1: lost filesystem error report for type 5 error -117 [ 124.737213][ T5548] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.625: Invalid block bitmap block 0 in block_group 0 [ 124.745050][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 124.745150][ C1] EXT4-fs (loop1): last error at time 1783022013: ext4_read_block_bitmap_nowait:483 [ 124.799568][ T5573] loop4: detected capacity change from 0 to 512 [ 124.858800][ T5573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.898396][ T5573] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.918157][ T5548] loop1: lost filesystem error report for type 5 error -117 [ 124.919443][ T5548] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.625: Invalid block bitmap block 0 in block_group 0 [ 125.015554][ T5548] loop1: lost filesystem error report for type 5 error -117 [ 125.102323][ T28] audit: type=1400 audit(1783022013.749:597): avc: denied { write } for pid=5572 comm="syz.4.634" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.164609][ T5548] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.625: Invalid block bitmap block 0 in block_group 0 [ 125.185413][ T5548] loop1: lost filesystem error report for type 5 error -117 [ 125.186643][ T5548] Quota error (device loop1): write_blk: dquota write failed [ 125.228533][ T28] audit: type=1400 audit(1783022013.849:598): avc: denied { write } for pid=5572 comm="syz.4.634" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.266048][ T5548] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.625: Failed to acquire dquot type 1 [ 125.305428][ T5548] loop1: lost filesystem error report for type 5 error -28 [ 125.311665][ T5548] EXT4-fs (loop1): 1 orphan inode deleted [ 125.462867][ T5590] usb usb5: usbfs: process 5590 (syz.0.638) did not claim interface 0 before use [ 125.673697][ T4411] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:13: Failed to release dquot type 1 [ 125.685492][ T4411] loop1: lost filesystem error report for type 5 error -117 [ 125.700363][ T5548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.810254][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.082882][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.166264][ T5598] loop2: detected capacity change from 0 to 512 [ 126.253016][ T5598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.293559][ T5598] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.305963][ T5600] loop1: detected capacity change from 0 to 256 [ 126.318829][ T5606] loop3: detected capacity change from 0 to 128 [ 126.479989][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.496319][ T5606] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.508699][ T5606] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.547129][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 126.547147][ T28] audit: type=1400 audit(1783022015.249:599): avc: denied { write } for pid=5605 comm="syz.3.644" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.575971][ T5612] loop2: detected capacity change from 0 to 128 [ 126.635693][ T3296] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.658945][ T5615] Cannot find set identified by id 0 to match [ 126.781404][ T5616] Cannot find add_set index 0 as target [ 126.933068][ T28] audit: type=1400 audit(1783022015.639:600): avc: denied { relabelfrom } for pid=5617 comm="syz.2.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 126.958378][ T28] audit: type=1400 audit(1783022015.639:601): avc: denied { relabelto } for pid=5617 comm="syz.2.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 127.067989][ T5620] usb usb5: usbfs: process 5620 (syz.2.649) did not claim interface 0 before use [ 127.139964][ T5622] loop3: detected capacity change from 0 to 512 [ 127.193781][ T5622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.221179][ T5622] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.367386][ T5622] EXT4-fs warning (device loop3): ext4_empty_dir:3104: inode #12: comm syz.3.647: directory missing '..' [ 127.403036][ T28] audit: type=1400 audit(1783022015.959:602): avc: denied { write } for pid=5621 comm="syz.3.647" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.424848][ T5625] loop1: detected capacity change from 0 to 2048 [ 127.433336][ T28] audit: type=1400 audit(1783022015.959:603): avc: denied { rmdir } for pid=5621 comm="syz.3.647" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.456812][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.552584][ T5625] Alternate GPT is invalid, using primary GPT. [ 127.576206][ T5625] loop1: p2 p3 p7 [ 127.599833][ T5649] loop0: detected capacity change from 0 to 128 [ 127.609242][ T5632] Invalid argument reading file caps for ./file0 [ 127.618263][ T28] audit: type=1400 audit(1783022016.319:604): avc: denied { execute } for pid=5624 comm="syz.1.651" name="file0" dev="tmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.645014][ T5649] FAT-fs (loop0): bogus logical sector size 0 [ 127.659558][ T5649] FAT-fs (loop0): Can't find a valid FAT filesystem [ 127.680373][ T5649] tipc: Enabling of bearer rejected, failed to enable media [ 127.699329][ T28] audit: type=1400 audit(1783022016.319:605): avc: denied { execute_no_trans } for pid=5624 comm="syz.1.651" path="/122/file0" dev="tmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.774476][ T5655] program syz.4.660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.829972][ T28] audit: type=1400 audit(1783022016.539:606): avc: denied { create } for pid=5657 comm="syz.0.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 127.874811][ T5658] loop0: detected capacity change from 0 to 512 [ 127.883440][ T28] audit: type=1400 audit(1783022016.569:607): avc: denied { connect } for pid=5659 comm="syz.1.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.909680][ T5658] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.661: corrupted in-inode xattr: invalid ea_ino [ 127.924698][ T5658] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 127.924916][ T5658] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.661: couldn't read orphan inode 15 (err -117) [ 127.934148][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 127.934172][ C1] EXT4-fs (loop0): initial error at time 1783022016: ext4_iget_extra_inode:5180: inode 15 [ 127.934212][ C1] EXT4-fs (loop0): last error at time 1783022016: ext4_iget_extra_inode:5180: inode 15 [ 127.972556][ T5658] loop0: lost filesystem error report for type 5 error -117 [ 127.973596][ T5658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.999275][ T5658] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 8: comm syz.0.661: lblock 0 mapped to illegal pblock 8 (length 1) [ 128.013938][ T5658] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.661: error -EUCLEAN reading directory block [ 128.030787][ T5658] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5658 comm=syz.0.661 [ 128.140286][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.233509][ T5681] loop3: detected capacity change from 0 to 256 [ 128.319347][ T5685] FAULT_INJECTION: forcing a failure. [ 128.319347][ T5685] name failslab, interval 1, probability 0, space 0, times 0 [ 128.332025][ T5685] CPU: 0 UID: 0 PID: 5685 Comm: syz.4.673 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 128.332062][ T5685] Tainted: [W]=WARN [ 128.332071][ T5685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.332169][ T5685] Call Trace: [ 128.332177][ T5685] [ 128.332185][ T5685] __dump_stack+0x1d/0x30 [ 128.332216][ T5685] dump_stack_lvl+0x95/0xd0 [ 128.332236][ T5685] dump_stack+0x15/0x1b [ 128.332254][ T5685] should_fail_ex+0x25e/0x270 [ 128.332304][ T5685] should_failslab+0x8c/0xb0 [ 128.332362][ T5685] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 128.332385][ T5685] ? skb_clone+0x151/0x1f0 [ 128.332420][ T5685] ? skb_clone+0x151/0x1f0 [ 128.332509][ T5685] skb_clone+0x151/0x1f0 [ 128.332544][ T5685] __netlink_deliver_tap+0x2be/0x510 [ 128.332631][ T5685] netlink_unicast+0x654/0x680 [ 128.332674][ T5685] netlink_sendmsg+0x5be/0x6f0 [ 128.332709][ T5685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.332737][ T5685] ____sys_sendmsg+0x532/0x580 [ 128.332777][ T5685] ___sys_sendmsg+0x195/0x1e0 [ 128.332848][ T5685] __x64_sys_sendmsg+0xd4/0x160 [ 128.332888][ T5685] x64_sys_call+0x194c/0x3020 [ 128.332937][ T5685] do_syscall_64+0x136/0x3c0 [ 128.333012][ T5685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.333037][ T5685] RIP: 0033:0x7fa19d26de59 [ 128.333064][ T5685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.333087][ T5685] RSP: 002b:00007fa19bcc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.333204][ T5685] RAX: ffffffffffffffda RBX: 00007fa19d4f5fa0 RCX: 00007fa19d26de59 [ 128.333217][ T5685] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 128.333229][ T5685] RBP: 00007fa19bcc7090 R08: 0000000000000000 R09: 0000000000000000 [ 128.333253][ T5685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.333266][ T5685] R13: 00007fa19d4f6038 R14: 00007fa19d4f5fa0 R15: 00007ffef3f6d278 [ 128.333301][ T5685] [ 128.333328][ T5685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.673'. [ 128.664375][ T5690] loop4: detected capacity change from 0 to 1024 [ 128.679184][ T5690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.804114][ T5697] xt_NFQUEUE: number of total queues is 0 [ 128.852248][ T28] audit: type=1400 audit(1783022017.559:608): avc: denied { write } for pid=5689 comm="syz.4.675" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.328051][ T5706] EXT4-fs: Ignoring removed bh option [ 129.350724][ T5706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.386427][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.403557][ T5706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.497773][ T5721] FAULT_INJECTION: forcing a failure. [ 129.497773][ T5721] name failslab, interval 1, probability 0, space 0, times 0 [ 129.510871][ T5721] CPU: 1 UID: 0 PID: 5721 Comm: syz.1.685 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 129.510932][ T5721] Tainted: [W]=WARN [ 129.510942][ T5721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 129.510958][ T5721] Call Trace: [ 129.511064][ T5721] [ 129.511073][ T5721] __dump_stack+0x1d/0x30 [ 129.511098][ T5721] dump_stack_lvl+0x95/0xd0 [ 129.511139][ T5721] dump_stack+0x15/0x1b [ 129.511173][ T5721] should_fail_ex+0x25e/0x270 [ 129.511207][ T5721] should_failslab+0x8c/0xb0 [ 129.511231][ T5721] __kvmalloc_node_noprof+0x15b/0x590 [ 129.511263][ T5721] ? file_tty_write+0x1ae/0x690 [ 129.511324][ T5721] ? file_tty_write+0x1ae/0x690 [ 129.511362][ T5721] ? mutex_trylock+0x81/0xc0 [ 129.511392][ T5721] file_tty_write+0x1ae/0x690 [ 129.511478][ T5721] ? vfs_write+0x563/0x990 [ 129.511496][ T5721] ? __pfx_tty_write+0x10/0x10 [ 129.511523][ T5721] tty_write+0x25/0x30 [ 129.511576][ T5721] vfs_write+0x57d/0x990 [ 129.511640][ T5721] ksys_write+0xdc/0x1a0 [ 129.511663][ T5721] __x64_sys_write+0x40/0x50 [ 129.511681][ T5721] x64_sys_call+0x27e1/0x3020 [ 129.511705][ T5721] do_syscall_64+0x136/0x3c0 [ 129.511743][ T5721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.511772][ T5721] RIP: 0033:0x7fde3b45de59 [ 129.511794][ T5721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.511817][ T5721] RSP: 002b:00007fde39eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 129.511904][ T5721] RAX: ffffffffffffffda RBX: 00007fde3b6e5fa0 RCX: 00007fde3b45de59 [ 129.511924][ T5721] RDX: 0000000000001006 RSI: 0000200000001580 RDI: 0000000000000005 [ 129.511941][ T5721] RBP: 00007fde39eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 129.511958][ T5721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.511988][ T5721] R13: 00007fde3b6e6038 R14: 00007fde3b6e5fa0 R15: 00007ffd236b2088 [ 129.512068][ T5721] [ 130.700680][ T5753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.971310][ T5762] netlink: 148 bytes leftover after parsing attributes in process `syz.0.694'. [ 131.075819][ T5745] kexec: Could not allocate control_code_buffer [ 131.174300][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.219249][ T5779] FAULT_INJECTION: forcing a failure. [ 131.219249][ T5779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.247226][ T5780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.696'. [ 131.259479][ T5779] CPU: 1 UID: 0 PID: 5779 Comm: syz.3.700 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 131.259517][ T5779] Tainted: [W]=WARN [ 131.259528][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 131.259543][ T5779] Call Trace: [ 131.259551][ T5779] [ 131.259575][ T5779] __dump_stack+0x1d/0x30 [ 131.259599][ T5779] dump_stack_lvl+0x95/0xd0 [ 131.259671][ T5779] dump_stack+0x15/0x1b [ 131.259697][ T5779] should_fail_ex+0x25e/0x270 [ 131.259734][ T5779] should_fail+0xb/0x20 [ 131.259774][ T5779] should_fail_usercopy+0x1a/0x20 [ 131.259811][ T5779] _copy_from_user+0x1c/0xb0 [ 131.259841][ T5779] kstrtouint_from_user+0x69/0xf0 [ 131.259920][ T5779] ? 0xffffffff81000000 [ 131.259934][ T5779] ? avc_policy_seqno+0x15/0x30 [ 131.259963][ T5779] proc_fail_nth_write+0x50/0x160 [ 131.260016][ T5779] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 131.260071][ T5779] vfs_write+0x252/0x990 [ 131.260094][ T5779] ? __fget_files+0x184/0x1c0 [ 131.260222][ T5779] ? mutex_lock+0x57/0x90 [ 131.260252][ T5779] ksys_write+0xdc/0x1a0 [ 131.260277][ T5779] __x64_sys_write+0x40/0x50 [ 131.260333][ T5779] x64_sys_call+0x27e1/0x3020 [ 131.260359][ T5779] do_syscall_64+0x136/0x3c0 [ 131.260410][ T5779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.260432][ T5779] RIP: 0033:0x7f19fabbe68e [ 131.260447][ T5779] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 131.260465][ T5779] RSP: 002b:00007f19f9656fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.260519][ T5779] RAX: ffffffffffffffda RBX: 00007f19f96576c0 RCX: 00007f19fabbe68e [ 131.260537][ T5779] RDX: 0000000000000001 RSI: 00007f19f96570a0 RDI: 0000000000000005 [ 131.260554][ T5779] RBP: 00007f19f9657090 R08: 0000000000000000 R09: 0000000000000000 [ 131.260572][ T5779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.260587][ T5779] R13: 00007f19fae86038 R14: 00007f19fae85fa0 R15: 00007ffe18868618 [ 131.260675][ T5779] [ 131.531079][ T5790] set_capacity_and_notify: 2 callbacks suppressed [ 131.531150][ T5790] loop3: detected capacity change from 0 to 256 [ 131.624229][ T5786] netlink: 1772 bytes leftover after parsing attributes in process `syz.1.698'. [ 131.861020][ T5801] loop4: detected capacity change from 0 to 128 [ 131.874804][ T5801] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 131.887520][ T5805] loop2: detected capacity change from 0 to 512 [ 131.997678][ T5809] xt_NFQUEUE: number of total queues is 0 [ 132.055308][ T5801] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.118758][ T5805] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 132.173747][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 132.173773][ T28] audit: type=1400 audit(1783022020.879:616): avc: denied { read append } for pid=5810 comm="syz.0.707" name="file0" dev="tmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 132.309280][ T5805] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1024: comm syz.2.706: invalid block [ 132.431263][ T28] audit: type=1400 audit(1783022020.959:617): avc: denied { write } for pid=5799 comm="syz.4.704" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.500855][ T5805] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 132.501009][ T5805] EXT4-fs (loop2): Remounting filesystem read-only [ 132.510297][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 132.510319][ C0] EXT4-fs (loop2): initial error at time 1783022021: ext4_get_branch:178: inode 13: block 1024 [ 132.510354][ C0] EXT4-fs (loop2): last error at time 1783022021: ext4_get_branch:178: inode 13: block 1024 [ 132.595651][ T5816] loop1: detected capacity change from 0 to 1024 [ 132.605165][ T5805] EXT4-fs (loop2): 1 truncate cleaned up [ 132.633447][ T5805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.648503][ T3303] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.660493][ T5816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.709567][ T5827] loop4: detected capacity change from 0 to 512 [ 132.753856][ T3289] ================================================================== [ 132.758829][ T5827] EXT4-fs (loop4): 1 orphan inode deleted [ 132.762017][ T3289] BUG: KCSAN: data-race in _copy_to_iter / _copy_to_iter [ 132.774889][ T3289] [ 132.777264][ T3289] write to 0xffff888140589000 of 4096 bytes by task 4409 on cpu 1: [ 132.785192][ T3289] _copy_to_iter+0x605/0xea0 [ 132.789837][ T3289] copy_page_to_iter+0x174/0x210 [ 132.794832][ T3289] shmem_file_read_iter+0x29c/0x4b0 [ 132.800184][ T3289] lo_rw_aio+0x6a9/0x760 [ 132.803730][ T5827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.804500][ T3289] loop_process_work+0x567/0xac0 [ 132.821894][ T3289] loop_workfn+0x31/0x40 [ 132.826185][ T3289] process_scheduled_works+0x4d4/0x9a0 [ 132.831817][ T3289] worker_thread+0x569/0x750 [ 132.836456][ T3289] kthread+0x221/0x270 [ 132.840573][ T3289] ret_from_fork+0x146/0x330 [ 132.845311][ T3289] ret_from_fork_asm+0x1a/0x30 [ 132.850144][ T3289] [ 132.852495][ T3289] read to 0xffff888140589000 of 512 bytes by task 3289 on cpu 0: [ 132.860839][ T3289] _copy_to_iter+0x130/0xea0 [ 132.865550][ T3289] copy_page_to_iter+0x174/0x210 [ 132.870523][ T3289] filemap_read+0x3ed/0xa20 [ 132.875153][ T3289] blkdev_read_iter+0x21e/0x2d0 [ 132.880050][ T3289] vfs_read+0x699/0x7c0 [ 132.884266][ T3289] ksys_read+0xdc/0x1a0 [ 132.888551][ T3289] __x64_sys_read+0x40/0x50 [ 132.893286][ T3289] x64_sys_call+0x2886/0x3020 [ 132.898002][ T3289] do_syscall_64+0x136/0x3c0 [ 132.902690][ T3289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.908656][ T3289] [ 132.911030][ T3289] Reported by Kernel Concurrency Sanitizer on: [ 132.917206][ T3289] CPU: 0 UID: 0 PID: 3289 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 132.927663][ T3289] Tainted: [W]=WARN [ 132.931488][ T3289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 132.941572][ T3289] ================================================================== [ 132.957478][ T28] audit: type=1400 audit(1783022021.469:618): avc: denied { write } for pid=5815 comm="syz.1.709" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.958603][ T5805] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 132.991169][ T4409] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 133.006358][ T4409] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:12: Failed to release dquot type 1 [ 133.019843][ T5827] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.036492][ T28] audit: type=1400 audit(1783022021.749:619): avc: denied { write } for pid=5804 comm="syz.2.706" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.063828][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.142795][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.268602][ T28] audit: type=1400 audit(1783022021.979:620): avc: denied { write } for pid=5826 comm="syz.4.712" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.292918][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.