last executing test programs: 2m3.576963263s ago: executing program 2 (id=316): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x182}}, './file0\x00'}) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0xffffffffffffffff) (async) mlockall(0x1) (async) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @random="8543909f502f", @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x6}, @timestamp={0x44, 0x4, 0x5}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}}}}}}, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000100)={0x1, {{0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa4c}}}, 0x88) 2m3.312150282s ago: executing program 2 (id=318): prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200000ffd000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x80, 0x9, 0x2, 0xe4, 0x7f, 0x0, 0x2, 0x2, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x41ab, 0xd801b15980a19afb, @perf_bp={&(0x7f00000000c0), 0xa}, 0x10008, 0x2, 0x7, 0x1, 0xed, 0x10, 0xa6f, 0x0, 0x5, 0x0, 0x7}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x10) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x80, 0xf, 0x1, 0x7, 0x0, 0x3ff, 0x400, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x11060, 0x7, 0x1, 0x4, 0x3, 0x5, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xf, r1, 0xa) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f00000033c0)=ANY=[@ANYBLOB="98000000", @ANYRES16, @ANYBLOB="11a029bd7000ffdbdf25170000003000308005000200f5000000140004002e1fa1eb30a32593255f90f963a126fb05000200dd00000005000200030000004800308005000200000000002800018008000100000000001c00038006000300fe0200000006000100030000001400040000bbfb8608180ce4d3c9a4d3f77c6a6b0c000600010000000100"/146], 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) socket$nl_route(0x10, 0x3, 0x0) 2m3.231924445s ago: executing program 2 (id=319): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x4a1e, &(0x7f0000000280)=ANY=[], 0x2, 0x32e, &(0x7f0000000a40)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000800)=ANY=[@ANYRESOCT=r1, @ANYRESDEC, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES8=r1], 0xb, 0x0, &(0x7f0000000000)) renameat2(r1, &(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000540)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x200043, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d8472538566642c7166646e6f3d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0xc0}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x57e, &(0x7f0000000c80)="$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") r7 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc4) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000000)={0x0, 0x4, 0x8, 0x6, 0xca5813aa, 0x1}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, 0x0, 0x200408d1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 2m2.925825255s ago: executing program 2 (id=325): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) getsockname(r1, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x80) sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000140)=@deltfilter={0x34, 0x2d, 0x1, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff1, 0xb}, {0x5, 0x7}, {0x0, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x200048e5) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030031000b05d25a806c8c6f94f90224fc600e0007000a000200053582c137153e370e0c0180040010000400", 0x33fe0}], 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, 0xd, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r11 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x38, r10, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x67f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000001}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xcc, r10, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffce}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc7f2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x4050) bind$tipc(r8, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x2}}, 0x10) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r6) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x14, r12, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x20000000) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r12, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x42}, 0x8010) chroot(&(0x7f0000000100)='./file0\x00') 2m2.16633001s ago: executing program 2 (id=329): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x40c020, &(0x7f0000000700)={[{@nouid32}, {@data_err_abort}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}], [{@fsname={'fsname', 0x3d, '/dev/sg#\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rXFkdAPD/vclk0zZrZlWkLri7uCvtop1JNu42irQVRF8V1Pq+xmQSQiaZkJnUJhRN8QMIIir4AXwj+AEE6UcQoaDvRUURbfWl9srM3GgeZpIhmWTq5PeDkznnPpz/OZfMnftwuDeAC+utiLgTESMR8W5ETObT0zzFTjs1l3v+7NF8MyWRZff+lkSST9utq1kejYgr+WrjEfH1r0R8Kzkct761vTJXrVY28nK5sbperm9t31henVuqLFXWZmamP5i9Ofv+7FSWO1U/ixFx60t/+tH3f/blW7/6zLd/f/8v17/TbNYXPtZud0TMnypAF+26C61tsau5jTbOItiANPtTGBl0KwAA6MVYRHw4Ij7ZOv6fjJHW0RwAAAAwTLLbE/GvJCIDAAAAhlYaERORpKV8vO9EpGmp1B7D+9G4nFZr9canF2ubawvNeRHFKKSLy9XKVD5WuBiFpFmezsfY7pbfO1CeiYjXIuKHk5da5dJ8rbow6IsfAAAAcEFceXP/+f8/J9NWHgAAABgyxa4FAAAAYFg45QcAAIDh5/wfAAAAhtpX795tpmz3Pd4LD7Y2V2oPbixU6iul1c350nxtY720VKsttZ7Zt3pcfdVabf2zsbb5sNyo1Bvl+tb2/dXa5lrj/vK+V2ADAAAA5+i1N5/8LomInc9faqXInwMIsM8fB90AoJ9GBt0AYGBGB90AYGAKxy5hDwHDLjlm/uHBO+1rhfHrs2kPAADQf9c+fvj+/1g+7/hrA8D/M2N9AODicXcPLq7CSUcAXu13S4BB+VD745Vu87s+vKOH+//tawxZdqKGAQAAfTPRSklayo/TJyJNS6WIV1uvBSgki8vVylR+fvDbycIrzfJ0a83k2DHDAAAAAAAAAAAAAAAAAAAAAAAAAEBbliWRAQAAAEMtIv1z0nqaf8S1yXcm9l8dOPDWr5/e+/HDuUZjYzpiLPn7ZHPSWEQ0fpJPfy/zSgAAAAB4CbTP0/PP6UG3BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBh8/zZo/nddJ5x//rFiCh2ij8a463P8ShExOV/JDG6Z70kIkb6EH/ncURc7RQ/iRdZlhXzVnSKf+mM4xdbm6Zz/DQirvQhPlxkT5r7nzudvn9pvNX67Pz9G83TaXXf/6X/3f+NdNn/vHqg3M3rT39R7hr/ccTro533P7vxk3b8fSGahbd77OM3v7G93XHGnio7xd8bq9xYXS/Xt7ZvLK/OLVWWKmszM9MfzN6cfX92qry4XK3kfzuG+cEnfvniqP5f7hK/uL//h7b/Oz31Pot/P3347CPtQqFT/Otvd/79vdolfpr/9n0qzzfnX9vN77Tze73x89+8cVT/F7r0f/yY/l/vqf/xuXe/9r0/dJxzaGsAAOehvrW9MletVjaOyIz3sMw5Z26/HM3oYyZejmYMKpN9t/3/eLp6Trn6oUx2mtVHow/NGDv0PR2Jk1aYROw06+rxHxIAABgy/zvoP+oOEgAAAAAAAAAAAAAAAAAAAHCWTvhYsvGI6HnhgzF3BtNVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAj/ScAAP//RUfRfg==") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="63460ba0002c060000000000000000000000000000000d4d00000000000000000000000000240000000a00006e2200004e24000000000000000200000001000000040000000100"/84], 0x54) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) r6 = add_key(&(0x7f0000000100)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) request_key(&(0x7f0000002800)='dns_resolver\x00', &(0x7f0000002840)={'syz', 0x1}, &(0x7f0000000000)='\x00', r6) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e00, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) sendmsg$sock(r0, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r8 = getpgrp(0x0) syz_pidfd_open(r8, 0x0) 2m1.620088989s ago: executing program 2 (id=331): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000800000000000006040000000800000001000004f7ffffff0400000001000000000000000030615f5f5f2a2e5f"], 0x0, 0x46, 0x0, 0x9, 0x6}, 0x28) r0 = socket$kcm(0x2b, 0x4, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) r1 = socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000100000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0xb2, 0x3ff, 0x6, 0x5, 0xfa6, 0x6]}, &(0x7f0000000080)=0x78) 2m1.607786119s ago: executing program 32 (id=331): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000800000000000006040000000800000001000004f7ffffff0400000001000000000000000030615f5f5f2a2e5f"], 0x0, 0x46, 0x0, 0x9, 0x6}, 0x28) r0 = socket$kcm(0x2b, 0x4, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) r1 = socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000100000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0xb2, 0x3ff, 0x6, 0x5, 0xfa6, 0x6]}, &(0x7f0000000080)=0x78) 4.493370789s ago: executing program 3 (id=1390): syz_mount_image$ext4(&(0x7f0000000780)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x78f, &(0x7f00000007c0)="$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") 4.431333502s ago: executing program 3 (id=1391): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf51c}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x3}]}, {0x0, [0x5f]}}, 0x0, 0x2b, 0x0, 0x5}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2, 0x3}]}, {0x0, [0x5f]}}, 0x0, 0x2b, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r5) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$chown(0x4, r6, 0xee01, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) (async) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48) open(0x0, 0x0, 0x112) (async) r7 = open(0x0, 0x0, 0x112) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=""/121, 0x79}, &(0x7f0000000500)=0x40) read$eventfd(r7, &(0x7f00000000c0), 0x8) 3.418788196s ago: executing program 3 (id=1416): syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./file2\x00', 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRESDEC], 0x1, 0x25c, &(0x7f0000000a00)="$eJzs2k9rXFUYB+D3xkpiSjoR/9GC9KAL6+bSZOVCJEFaEAOKNkIVpLfmRodcZ0LuEBgRGze6ceFHcC0u3QlSceMmGz+BC3fZZNmFeKWdaZuECBlinNI+z2Ze5p3f3HM4h8NZ3J1Xv/10bbXOV4teTGRZTCzEVtzKYjYm4q6tePmlq789/+7V999cXFq69E5KlxevzM2nlM6c//mDz3944Wbv9Hs/nvlpMrZnP9zZ/fLP7We3z+78feWTdp3adep0e6lI17vdXnG9KtNKu17LU3q7Kou6TO1OXW7s669W3fX1fio6KzPT6xtlXaei009rZT/1uqm30U/Fx0W7k/I8TzPTwXEsf3+raWK3efxaZHe/m/kjWpE9mbKnFrJnrmXPbWVnd5umNd6BckLurX/TNE98F6dvWv9Hyp5DfSqi+npzeXN58DnoL65GO6oo42K04q+4vU2GBvXlN5YuXUx3zMZX1Y1h/sbm8mP783PRitnD83ODfNqfn4zpvfn5aMXTh+fnD81PxYUX9+TzaMXvH0U3qliJ29n7+S/mUnr9raUD+XN3fgcA8LDJ0z2H3t/y/N/6g/wI98MD96tTce7UeOdORN3/bK2oqnJDMUpxftTU1DEfOhnjnvLxi8FmuzDceSfxiCaLeBBmeqTi119ee+UBGMawWDh4FIz5YOJ/cX/Rj5qYOtkBAQAAAAAAAAAAcCT/3VuE3wz/cV8rG+XNMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NH0TwAAAP//vwHHww==") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r0, 0x0, 0x0, 0x0, 0x400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchdir(0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.140689555s ago: executing program 0 (id=1421): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0x0, 0x40a, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000007100010000000000000000009bff123b78dd6ef249e097a420abdc9485edc37f962aff8f542a4e0300000000000000d172a4", @ANYBLOB="0c000180080001000300010020"], 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x800000000f612}, 0x9092, 0x7, 0x43b1bd76, 0x0, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x80108907, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000340)='bfs\x00', 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='fd', 0x0, r7) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x2) fchdir(r9) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@abort}]}, 0x5, 0x4fa, &(0x7f00000005c0)="$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") setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r10 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r10, 0xffffffffffffffff, 0x0) 3.072174157s ago: executing program 0 (id=1422): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(r1, 0x402, 0x80000023) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x40000008) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x21) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000140)={{r3}, "bca8d7a00dfcdfd9657172727922c0d4fb0ad74ceea1466867883b459a4aa556ba7b4b68b50de0c6a561656877ab68c0b2a81221c9bb803afa59e8727d4dbf7f0dd0f4c95a84508556757ca109b40c5f545e97a37835b71aaab18338e0712de3a30e6c2da98a9102d81dcc02c8b3355442eb35bb5e3a1f448cc4bc8140840b5b51b0b3f3802b53fb47f36c83263ed00598063836ab1eab3dd69b663fe1c8039700fc31464faee9e23d3d86dcbdb83b7da0f8e7193cb5dc3d8c969f1860c987884f529a3a441454c87f6d11073885f72cdbb0ea19c9264cbed92a46b52a0f3ad68dfbda28d732a97c5bb34d9484f6318f39a9d88cb96536e5ac34a5a28039edcaeaf408364ec57ab1a99337da4a17dd97b859e11735f3fb027cf0c15a54368e31a32fcfa96dd3d4ec1b864060a7b741c31f9006f28aac45f605129401a976324d93fa10620f0192c41d5b2c98324488ee639d2d9b69a9b3a9374d5bd2dfda4507a31f59644111929994218c69131d3a55e23f766a0e74a0ea8db98bcc218c2bb555a3bc021e8dd60bce54c6c5eb278f491486f1a43e119d8dfa019e80ca1b3f2093b12bf74cba5e2803a91f6dcc8a56cbc1397f79b726026659ccf60c441843ce289a427a12c7b15a328874db034ace444a06ca17f4547fc6838433313acdcd1ced3eb5f4d56daa3e4698ad0feafcb408c9c68d4b564031840a6c21eea00e5c1a874dbe5db437189a3d645282bb858db90c4d9e067c7a529d0ce39c2c8245d180d7f4c686f16c3d31c7eff3c178e2c8e6339de45639b6a67c93192fbabadff580cb0bb219215e369a536a0c7f6ca189c57f005a583e4a446944c115df8fa0d744963a3d3a974983181aa9bfd5f5a0ae40127b6c48058779f921d06727b4b973f4d12da82b78ef3b464bf22103788a4ddd5e67c486be9fc7d164b6c74312aba79c1a08504c298e97f40376a3a834d77b937f2a54a32c04d408da87e200dffa6ef9d92e6728034929da8426cebfbf796d86ba5d55a0b4310b3e1fef0ab5600ea51ff4fdf94a434850c7b9f00859700ad366232675611380ab81d9add88fd8ed94b505fb0ddcfa40236ec19149dfa7dc8cfd136f66fb139074a531dd7db24c420edd0ba787e21bd042d10a1debd4b17971ad31c10e90ac3e2b175c0ea51dd1b2b956e20ec6bc89e332012fe1adb3b0ec6e2f29a3976b7e5844e3cff80d8cb9596c73b98837a91db8fceefc7c9c60f66d37909e7851732e934b0009dc04140c84d25270e124d91bd974948061300edef57c9385d82032d7bde64059e0f3ca79abd8e0d76ec9d4875064e52c914ff9889b990a3a48a3baf5dd38cf415e49828279de1fb3d98e96b4bf9d692a66f0f61d194f50385099759da433b7930ff3f04beb2fc22a7760732d8a3dd992e5b4f6ddef58b9a6e6a2385ce1d64ac85770d275af2b66184f1dc11b71a8ae2bf91aa4192eb956ef8474c503fda67d3bb89d8df7eaaab49755e979c2c5eba72ea6b880fd1a8658e3d5bf7c379b96c6553e4f26a27f965fece6b5e3fd577c71b0091d8f1a86bb831c6f5a1dfdba683d6e51cf4ec10c06f67ce8014ba397f38248217bc812461279c1578eb3236f5509d198a81ea5c8ed0f8464ff43df6cc513effc9e7df7d46a05f054385e90c25507adaf1cebeed475489e37f141910e5739aa655f606c027057e032c6071eccb9a8a74270df9a60e0304478823b0379f6537901343f2331baf19a1f21931e2eb9bf39918da4af910e217ee07b1165d8ea7faab4136b7b98c88d29effd1e13f55ba2905929c7a1848c73c2f633cbc7f4d5d9c16bffa5a9f042aa906df24ac6f07a83360df9f99f8727938456ad780e2dd72ba30a775d0665706512ecf59eaace030a96385b198fa23a7b56dd2002c4876250b65d97bf3175e6b9856148c964a8d8561e8898f57dae3bc07e2a4c555d202929ceb730762a4d091a65e3e414dc183d245fc5d4c70a20231e20483aaa8466416026bd6d5a9817751ed093f5ac810a842121941a6f30b02a4d14b710c141c3c385e85b62ccd75d039feb35a3709ad5f12732b7f118bad97629df17dbe3c01bbab62543a2674cd2f07ea896ebb1ce4f79ff2f7d1540c3f5832ad2bff93d6d92c239216aa06c9a2c2493f99e1353ce4b19435f9e7f8c175378a0fbf2c3856e77da8833e053b1623a8ec6bb65b128a9ffc316380aee821f8810f5831f03a70a6359a4e926041713eed85fe31dcc4b1c41e46b3a96fac34835279adc72602328e7a796ef4a2e3808e85ce062f8157de39bd22ba727300d6e5cdbfe08a323643a0d57044f382db22337042b45f3f04f52049d64e26c442861d502a16f4f5ca6d9c7bf6bca1846d1e1917907f4dfc472461a2c969e76e40fd92f7661058676f303fe7c342b3f2434f5eb3347bd6ed40d7ba90132d6b8a924d9de538088ed8146078d573949ad80035fcc5337816ecbfe5316248c4ecd62472f3ae275e3a7dacb1d946269fccdfb0c152efa747e0a1d8affc29970e93d558e400f74c2cbebe0a4612684c4a8befeec8f87aa59d2c2fae252282081caa4bfee11426ad33e3ea1b4a29f523c186d4911b3d97aaa15a5b321d5c322933677cbb4a8211056405f2f322307c08e204e02755c11c35189da917318848a38f01911d0bc945b1fd795c4dd71b9749397a7ccdafeb1076c6cfbeee954b5908d114932cc3a4bca8981f26bfe7d2a2f416e5ac94b8dd23a148d64ed0774ddd255a42631d5741c0dcfe414e289f9a96ae3f436351585c0e9fcc34e4fda9bdc549abdc434a2e331acb27209c4322ea5d3cfe9062fd372e2f8b9636c025d5e44b2b6ff1d748a2483eb7380bc194f6494764b4abb27fb5ea559b308d8535bd6a2b683fe163c2bbd3f7b0f2b8fcc5f4dc34882cb4c092ceb44af60f86e5c7a79534db77c99d7b8c606b18a70aea6bafd0cde45c56c0b0cc102c013692aef70031c9e82ba2dae0d0636034c690fe220b398fd43fdd6e365e1cdb50af553b2fe7d3d4a1f2ca0da19c9d5b2bf434d6000eaf20dbe1844ca740a4b5b168488be6ddd34cfac9e852aec630ea78b8c70a2f84cad5979b4166046bb12aaada74e3d884061966ad7681e1281b46c1787ed8816ef1c73c2a0d25e39bdd1fc6fc8fa91c624cbd4120a2544a47261bff2a0e6b28ae8f3e0a3d3ea7658d9e75cf1a562591736cb09b63c2e2e91a874836708c012db251eb07dcf45ef561c9e8adf53442e5f6a912b15c12ecb012ad5075f397ecb575a52d6e1c2224b3217f186387eff9c48094ef51e3b7470e20b3fc5374e79b56407d18d9664fc9d3685193d33f83badf9d022992d1228b43b47a377a3ba44f50d0466859b4fb53ac33b01ab81578799e2e34d08e78052652475569080f6d5f714240201f3de2a8c6aa1742e84813e2fb2280a74d762d832dcb6751e9a54253d610c2f71e71ae797ddc5ddb8bd303f9178bc6f4190f07fcb0868cb69ea0cd680619001efb6b8dade7a234405f6f11861a09a795463dbb2a31bce18f0d4058cd7037f985f6cbad7ff425579ce2bed8ecf063f7881f2ec06b7b1a3a370dee31160d642660c7711067abc63e38911ccf5c787b8f77454a3001b6472296e6ff436cd2808d5741f4cf74350c113d2caad89596734aeed94a5f7c42e63c3a3f8424232caeddd1ede256b48e3c503f828a350d714a9b9888db4d987c1b9708dbeef128b128e476de3e83a2313e1a1567f7c0ea0ccafbae983b28ce1f802b610d61123e7e6a52bd0d4338a7f506924b788ef524f716872b97d8cb5e3537053fe9f3328f92dbf064f39446ee5f3de778888c44395417dabb12b15c8f59e14c82a22cc135f4510b9b33e67d4e5acd61dd65e3ebfd4fe9eda211c5693f4a84fd503494452184b93a8376da7a626ae672a2f755cc3f9b4374f45fdf1e4c36251fc055a9b90861cb499f235094d4c72c34e51172d219aa037d8d0e4e02f18fb70d0fa10ff540cb6a42cba1427023ad8356f99366986fcf1f4dde77e44909bb5b2800672b16014415a1452c17f1c509e16bfb4485a9b5a6896f6935a0d54fcf158496a01e9b62cfc32593657d2a430a4604350e0021d71f5a3b95d2f11b43c4ee8e80090fe4765fa1f869caca6fdbef8e989ef8fd6ad6bf0359b4a0b49a46d8a902e5c0502a5b65643f6091e7a2aeb686cae86f7dbe022ca4f58336262f8a92c97561b43cdba519aa7024601e1508b309fbf4a81aa65f6439319a13491ccf85a02669ecc3335d4f900a0cdff47e3fd951c7e5a858873044155077f9945da82dd2386c4839b9a2405e4a9375fe588c2883f09b936992d09428bf52ae3b5d455b53e2d395eeead822aa1278e89bfbfa93c4076c7eb2960f4a730f98f95c7ca1d08f126439ec241897c8a5349a25544d3f02f80acf300806654badb073fc836cdf442869d9759bb729ccea36da46187105fd4e15a37f7b03ee5f4a6adda58ed08a3cdceb34417cf457aca18d9a9265505fd62bab3ae1958ae99a80c1a42a46a2c21bb8c8131d1087859ce54796f779187328d8857ff55d9b95f10cb83bef701eba4d9f96c750966f2b011bd3c1c9d850b8bcdedd597516d8700559186f88dc2488de7b0965ba5914c9b6e63edd4be111c627fb9ee8d1e83a63c6cba1d5ab52a366ee81b1d8ead81a0c347a541c4072ace6154ac0f89c731dba2b096d44d27da26d651692c864af97319fc3f3491b79b802bd2158b771ec3ab2105c244e51cb367f91144c00b3e41ab884f6766373bee788433209ba062bbf6c1cbd0503b8719a624ed34da4784869d1aedac11108c15a99143939ecab9f45caa749f874ed37982812fcef25a8b0367e211aebbd5dc92c63d1267041dca14c13957b2971e39c10ab77e682c640e2e9a09aeface995ef50942e170d4dccd2b710f4f61af87c47383df7cf88a40b681d5ecb94723566227a54be829da6e937b5b966a6eec4dd1d9d4f473ce7dd3dfb767a687f13e2cf54bba3116d73f6c0911828136b86f37782b9cac90dbbef033d5daea3376d89884a093a21c6f12f86ecf4bf01c7b08a3bcb15765b770efdc4418cb82a4f698b59db30ac6969cebd6eb403c06339d73c65db0f5829271e1bfadf2bdacc1d3c28bc91a4984776cc9487e42820190ce01ac11becb9c0bf7a3363a87c1db6a033036c449a1e62ea76a74758dc929101790c7e5e1cae8be7df28c783b1efdd10328470d7db5c3f8f7ba1bba80aa98dba14483a0f99bb8645606c65f54904c8ca154ec620cb239372a5c2ce5758254e5b63996d02cea4bc97f082e983fc83fb2bd06100ed4d357c1d73081f1f466ca9367217b446aca731a9b6df13ed8f525ae431813a2d6d736ae277d972c8e510fb3a133e296226d76be98081175826a50d5b028e6c9005e2a35e7db14caec34eab5b635d09a70456c9c89e41c5e61805dad5898a529c83c24538d074149cb1920132aef2578e641f2772cf7916837dcab6a217232d77912753c80ff0042542f2966df2d77b5ff88329f94fa77ca1f06caa7d19209d6df1f20481a816b67152972723e505810eb20f2505a2db46ee8a7c66844a84862650d9dfd4af41050245d23c016e944fb7576c707b802f85c6509f90042d87f71187eced8fff7688255155c1cdddcdc060930a06e1272e0b382907001f6c7c5ac79bd2dde684ac122f4e93cde3a0bda8991560325b331bb8559d678794e3cfd0d0aa8dddb1eb9380500124dd7456252d5ad8d569fdb8b8bc6c697ff0a813b91d8a0654ee69375d53de691bab28437ec"}) close_range(r0, 0xffffffffffffffff, 0x0) 3.071847938s ago: executing program 0 (id=1423): unshare(0x42000000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x88d0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) 2.963531251s ago: executing program 3 (id=1424): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000018002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f61141c00000000004603f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2.933050242s ago: executing program 3 (id=1425): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000002000000000000000fe8000000000000000000000000000bb000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044"], 0xfc}}, 0x0) 2.856160905s ago: executing program 3 (id=1426): r0 = socket$kcm(0xa, 0x7, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000004c0)=ANY=[], 0x0) socket(0x10, 0x3, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x2, 0xf) socket$pppl2tp(0x18, 0x1, 0x1) r2 = inotify_init1(0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x7}, 0x0) r4 = fcntl$dupfd(r3, 0x406, r2) setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000), 0x4) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x711000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r5, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0xfd2a, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) setsockopt$sock_attach_bpf(r0, 0x29, 0x11, 0x0, 0x40000) 2.40788685s ago: executing program 0 (id=1440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000014000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c00028008000140000000020800024000000016050003000000000020000180070001006374000014000280080002400000000d080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r0) 2.38893051s ago: executing program 0 (id=1441): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_clone3(&(0x7f0000000540)={0x100a10800, 0x0, &(0x7f0000000180), 0x0, {0x20}, &(0x7f0000000300)=""/88, 0x58, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) flock(0xffffffffffffffff, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000000101010d000000000000000002000003eca620c489b90f4ca2db2b04000180"], 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x48000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000240)=ANY=[], 0x18) write$binfmt_elf64(r3, 0x0, 0xfffffdcf) pipe2(&(0x7f0000000000), 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 1.708228293s ago: executing program 1 (id=1456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000060900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014540000000c0a010300480000000000000a0000060900020073797a31000000000900010073797a310000000028000380240000800400018004000b800c000440000000000000000f0c000540000000000040"], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000050) 1.707616563s ago: executing program 1 (id=1458): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000009500000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 1.671741655s ago: executing program 1 (id=1460): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x3, 0x0, 0x0, 0x8, 0x20044, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000100), 0x6}, 0x0, 0x0, 0x800800, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa6cdd8100000086dd60f7d8ff00753c0020010000000000000000000000000080ff0200000000000000000000000000010004c910", @ANYRES32=r4, @ANYRES64], 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f0000000540)=[{&(0x7f0000000680)=""/9, 0x9}], 0x1, 0x20033, 0x51b) r6 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="1b", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1e000100000000568e87b8cbb7f72f35fae478da860d9e50fcbbec8b81201f7545da2a03753591a5236cfa08586f7ec3998bf664402fce8737bb7670eafb19a64ca94897f68929679625a43fe0562219fd74622dfec99b00a18300cd92632c597fe88467"], 0x18, 0x4855}, 0x24000052) 1.265433248s ago: executing program 5 (id=1468): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000200)='./file1\x00', 0x12e) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2200850, &(0x7f00000002c0)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpquota}, {@nogrpid}, {@jqfmt_vfsv1}, {@norecovery}]}, 0x5, 0x59d, &(0x7f00000009c0)="$eJzs3d9rU1ccAPDvTVOtPzYVROYehuDDHM7Utps/YKB7HJtM2N5daGORpkaaVGwnTB/my16GDMaYMPYH7H2Psn9gf4WwCTKkbAwZdNz0pj+T1Npoovl84Oo5997mnG/OPTfn3HtDAuhbR9J/chGHI+LbJGLfqm35yDYeWdpv4fHN8XRJYnHxs7+SSLJ1jf2T7P89WeaNiPjt64jjuaX1g6teuzo3P1Usl0szWX64Nn1tuDo3f+LKdHGyNFm6Ojo2dub9odGzp091LNZ3Lv7zw6f3Pxr65ujC9788PHA3ifOxN9u2Oo5tuLU6c6T4X5YajPPrdhzpQGG9JOl2BXgmA1k/T/vm4dgXA1mvB159X0XEItCnEv0f+lRjHNCY23doHvzSePTh0gRoY/z5pWsjMVSfG+1eSNbMjNL57v4OlJ+W8euf9+6mS7S/DrFrkzzAlty6HREn8/mN578kO/89u5P1i8ftrS+j3z5/oJvup+Ofd5uNf3LL459oMv7Z06TvPovN+3/u4Zpsh280pOO/D5qOf5dPXclAlnutPuYbTC5fKZdORsTrEXEsBnem+Xb3c84sPFhstW31+C9d0vIbY8GsHg/zO+uX6ZdNFGvF7UW94tHtiDebjn+T5fZPmrR/+n5cbPvKKw11qHTvrVZ7bR7/87X4c8TbTdt/pf5Jy/uTY6NnT58arh8Pw42jYqO/7xz6vVX53Y4/bf/d7ePfn6y+X1vdehk/DT0ptdr2lMf/GunxvyP5vJ7eka27UazVZkYidiSfbFw/uvK3jXxj/zT+Y0fbn/+aHf/p5OuLp4z/zsE7LXfthfaf2FL7bz3x4OMvf2xV/tO1/3v11LFszbrz35N1lzLqWlSnEdU2jmYAAAAAAADoXbmI2BtJrrCczuUKhaXnOw7G7ly5Uq0dv1yZvToR9e/K7o/BXONO9776Ldil5yFGsudhG89HjK7Lj0XEgYj4bmBXPV8Yr5Qnuh08AAAAAAAAAAAAAAAAAAAA9Ig9Lb7/n/pjoNu1A567+g8b7Ox2LYBu2PQn/zvxS09AT9q0/wOvLP0f+pf+D/1L/4f+pf9D/9L/oX817/+e/oF+4PMfAAAAAAAAAAAAAAAAAAAAAAAAAAAAOurihQvpsrjw+OZ4mp+4Pjc7Vbl+YqJUnSpMz44Xxisz1wqTlcpkuVQYr0xv9nrlSuXayGjM3hiulaq14erc/KXpyuzV2qUr08XJ0qXS4AuJCgAAAAAAAAAAAAAAAAAAAF4u1bn5qWK5XJp5wYl8dKHQdomh7A1psulc9EQNn1/iXOvYmyTG1q7Jb9zn34johbgktpHo4kkJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANb5PwAA//9qATWh") 1.241815049s ago: executing program 4 (id=1470): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}, 0x1, 0x2500, 0x0, 0x20000044}, 0x40) 1.172063061s ago: executing program 4 (id=1471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x488, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x45c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xfffffffffffffe0e, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x1, 0x7, 0xd988, 0x3, 0x3, 0xa08b, 0x1, 0x3ff, 0x7, 0x5, 0x9, 0x4, 0x3, 0x92c, 0x7, 0xffffffb2, 0xeaac, 0x2, 0xe13, 0x7, 0x10000, 0xded, 0x8, 0x10000000, 0x1, 0x10001, 0xc6d, 0x80000001, 0x8, 0x7, 0x7, 0x7, 0x5, 0x7, 0x800, 0x9, 0x100, 0x8, 0x9, 0x8, 0x3, 0x5, 0x6, 0x200009, 0x3, 0xd, 0x9, 0x5, 0x13f6, 0x2, 0x53, 0x17, 0x4, 0x1, 0x6, 0x4, 0x8, 0x800, 0x86e1, 0x4, 0xfffffff9, 0x5, 0x1, 0x3, 0x5, 0x5, 0x80000000, 0xf3, 0xd, 0x8, 0xfffffff9, 0x800, 0x2726a3ed, 0x6, 0x4, 0x2, 0x6, 0x8, 0x2, 0x7ff, 0x100, 0x1ff, 0x7, 0x3, 0x4, 0x8, 0x5, 0x8000002, 0x5, 0x0, 0x4, 0x3, 0x16, 0xff, 0x1, 0xc, 0x9, 0xb, 0x5, 0x8000, 0x8, 0x6, 0xa, 0xfa, 0x3, 0x0, 0x10, 0x1ff, 0x3, 0x4, 0x60000000, 0x6, 0x2, 0x4000000d, 0x3, 0x2, 0x401, 0xa955, 0x5000, 0x1, 0xe6, 0x2, 0x9, 0x1000, 0x1, 0x5, 0xe, 0xb, 0x6, 0x4, 0x80000001, 0x3, 0x99b, 0x9c4, 0x7f, 0x3, 0x70, 0xff800, 0x1, 0x7, 0x5, 0xff, 0x7, 0x6, 0xfff, 0x800, 0xa3, 0x10000, 0xff, 0x80000000, 0xc, 0x7, 0x8, 0xff, 0x0, 0x0, 0x8, 0x6, 0xffff, 0x3, 0x7f, 0x9, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x4, 0x7, 0xfffffc00, 0x0, 0x40, 0x400, 0x64c, 0x8, 0x7, 0x0, 0x6, 0xfffffffe, 0x6, 0x5, 0x7ff, 0xc7, 0x7, 0xf30, 0x800, 0x0, 0xee3, 0x5, 0x4, 0x8, 0x8, 0x1000, 0x8, 0x7, 0xa37f, 0x8, 0x9, 0x3, 0x1, 0xff, 0x5, 0x10000, 0xb, 0xcf9, 0x8, 0xfc, 0x40, 0x3, 0x1731, 0x3b, 0xff, 0x6, 0x6ad880, 0x266d, 0x7, 0x6, 0x2, 0x400, 0x7d75, 0x52, 0xd3, 0x8, 0x2, 0x4, 0xfffffff8, 0x200, 0x6, 0x6, 0x8, 0xe, 0xe459, 0x7ff, 0xc7, 0xa8, 0x40, 0x0, 0x9, 0x3feb, 0x800, 0x100, 0x100, 0x8, 0xfffffb98, 0xfffffffb, 0x4, 0x20001, 0x3, 0x8, 0x1, 0x15b9, 0x7, 0x100, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x488}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={r10, 0x4, 0x8}, 0x8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1.130706763s ago: executing program 4 (id=1472): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000800000000000006040000000800000001000004f7ffffff0400000001000000000000000030615f5f5f2a2e5f"], 0x0, 0x46, 0x0, 0x9, 0x6}, 0x28) r0 = socket$kcm(0x2b, 0x4, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) r1 = socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000480100000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0xb2, 0x3ff, 0x6, 0x5, 0xfa6, 0x6]}, &(0x7f0000000080)=0x78) 1.032788796s ago: executing program 5 (id=1473): r0 = socket$kcm(0x10, 0x2, 0x0) (async) pipe2$watch_queue(0x0, 0x80) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x40, 0x7, 0x97be, 0x7e04, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @local}}}}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000008000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a24000180080001400000000608000140000000ff0800014000000002"], 0x140}}, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file0\x00', 0x180202a, &(0x7f0000000640)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYRES64=r1, @ANYRES32, @ANYRES16=r2], 0x1, 0x2c6, &(0x7f0000000240)="$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") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0xd) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) (async) write(r4, &(0x7f0000000300)="898400000000", 0x6) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe76, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4881}, 0x0) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') read$msr(r8, &(0x7f0000000340)=""/238, 0xee) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYRES64=r5, @ANYRESDEC=r3, @ANYRESHEX=r4], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0) (async) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) epoll_ctl$EPOLL_CTL_DEL(r9, 0x2, r0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 976.268578ms ago: executing program 4 (id=1474): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c00000010003904006100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 975.651708ms ago: executing program 1 (id=1475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044800}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8894}, 0x20040040) syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x8000}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0xfffffffffffffeff}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000003c0)='hybla', 0x5) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 969.521868ms ago: executing program 5 (id=1476): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040010000fa00000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 941.950139ms ago: executing program 4 (id=1477): r0 = gettid() read(0xffffffffffffffff, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x31, @tick=0xc, 0x0, {0xfd, 0x2}, 0x0, 0x0, 0x4}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000080)={{0x1, 0x8}, 'port1\x00', 0x10, 0xa0000, 0xfb4, 0x0, 0x7, 0x0, 0x7, 0x0, 0x5, 0x7f}) 868.037171ms ago: executing program 4 (id=1478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000900)=[{{&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f0000000240)=[{&(0x7f0000000400)=""/138, 0x8a}, {&(0x7f0000000340)=""/125, 0x7d}, {&(0x7f00000004c0)=""/96, 0x60}], 0x3}, 0x2}, {{&(0x7f0000000540)=@hci, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/145, 0x91}, {&(0x7f0000000740)=""/202, 0xca}, {&(0x7f0000000840)=""/172, 0xac}], 0x3, &(0x7f00000006c0)}, 0x8}], 0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) setresuid(0xee00, 0x0, 0x0) poll(0x0, 0x0, 0x3ff) ioprio_set$uid(0x3, 0xee00, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount(&(0x7f00000006c0), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000002900000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r7 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) 839.772582ms ago: executing program 5 (id=1479): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 711.203586ms ago: executing program 5 (id=1480): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r2, r1, 0x25, 0x8, @void}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x1, 0x70bd6c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40180, 0x5bb0}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x220040c1}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002ac0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000200)=""/211, 0xd3}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000000140)=""/47, 0x2f}, {&(0x7f0000000300)=""/189, 0xbd}], 0x4, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000000440), 0x6e, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/225, 0xe1}], 0x1, &(0x7f0000000600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}, {{0x0, 0x500, &(0x7f0000000bc0)=[{&(0x7f0000000680)=""/221, 0xdd}, {&(0x7f0000000780)=""/162, 0xa2}, {&(0x7f0000000840)=""/157, 0x9d}, {&(0x7f0000000900)=""/81, 0x51}, {&(0x7f0000000980)=""/238, 0xee}, {&(0x7f0000000b80)}], 0x6, &(0x7f0000000c40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000000d00)=@abs, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000d80)=""/135, 0x87}, {&(0x7f0000000e40)=""/79, 0x4f}, {&(0x7f0000000ec0)=""/97, 0x61}, {&(0x7f0000000f40)=""/220, 0xdc}, {&(0x7f0000001040)=""/60, 0x3c}, {&(0x7f0000001080)=""/247, 0xf7}, {&(0x7f0000001180)=""/6, 0x6}, {0x0}, {&(0x7f0000001280)=""/79, 0x4f}], 0x9, &(0x7f00000013c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f00000014c0), 0x6e, &(0x7f0000001680)=[{&(0x7f0000001540)=""/169, 0xa9}, {&(0x7f0000001600)=""/106, 0x6a}], 0x2, &(0x7f00000016c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001880)=[{0xfffffffffffffffe}], 0x1, &(0x7f00000018c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000001980)=""/4096, 0x1000}], 0x1, &(0x7f0000002a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}], 0x7, 0x42, 0x0) 673.828228ms ago: executing program 5 (id=1481): r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1) semtimedop(r0, &(0x7f0000000080)=[{0x3, 0x8, 0x2c00}, {0x3, 0x1, 0x1800}], 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="8000000040cc0300140012800b00010067656e65766500000400028008000a00", @ANYRES32, @ANYBLOB="2620c492cc9b54142e62691e2c5562cab715bb6750fdbf219851be01570108290c0a122f00243ed8b6a513e7e1e8decd779754908a98b8808a8675fa9ddb761c35c0fe6a8b286fe8cc23271906bceb009d3d0aac87ad98e312049e3d9af8c79cd855e12a06d8f121730387ad298a92b5a8b2bfecba4c7bc1f3c5f5c5a35237ed8fa8f3f53659eba1304bdd0aedc50dacd89b26dfe629ec06314407c46cc4d8191ea7711761d43477f283c1f3132eee89be39727cc1ba7b1e1961f3d38fe4c124a938c3ef4121786e1d29e385efcc3d65150864a59d6b10484a3f927856"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 510.711944ms ago: executing program 1 (id=1482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a30000000001f0004000000000014000780"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x24004090) 452.074595ms ago: executing program 1 (id=1483): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000080)=ANY=[@ANYBLOB='nruinodes=1,size=%,\x00']) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xffffffffffff, 0x5, 0xfffffffffffffffa}, {0x2, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0x0, 0x2, 0x7c, 0xfffffffe}}, 0xe8) io_setup(0xa, &(0x7f0000000140)) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa082de2580045000028006400000400e000000211009078e0000002000000010000000008"], 0x0) rename(&(0x7f0000000540)='.\x00', &(0x7f0000000580)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x388, 0x218, 0x218, 0x0, 0x2e8, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@uncond, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'macvlan1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x5}}}}, {{@ip={@multicast2, @private, 0xffffffff, 0xffffff00, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x1ff, 0x6, [0x32, 0x7, 0x19, 0x27, 0x2b, 0x41, 0x23, 0x12, 0x2a, 0x12, 0x9, 0xd, 0x34, 0xb, 0x3c, 0x29], 0x0, 0x40, 0x9}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'veth1_virt_wifi\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/23, 0xfffffffffffffc70}, 0xee37}], 0x1, 0x1122, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB="a75c3619de4f94674ea777a60797141cd7b2516407c0d9a726ab5ac3d805657ad304a59c11964c0cc01a91a40d5f05c546"], 0x3c}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r0, 0x1, 0x0) fchdir(r8) umount2(&(0x7f0000000040)='.\x00', 0x2) 0s ago: executing program 0 (id=1484): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r1, 0x8800000) (async) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) sendfile(r0, r1, 0x0, 0x100000005) (async) sendfile(r0, r1, 0x0, 0x100000005) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f0000000c00)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e394456", @ANYRES8, @ANYRES32], 0xff, 0x2b1, &(0x7f0000000100)="$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") (async) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32], 0xff, 0x2b1, &(0x7f0000000100)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x86a1, 0x8, 0x3, 0x375}) (async) r3 = io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x86a1, 0x8, 0x3, 0x375}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xfffffffc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000080)=0x9, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r1, 0x2219, 0x28b1, 0x16, 0x0, 0x0) (async) io_uring_enter(r1, 0x2219, 0x28b1, 0x16, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) kernel console output (not intermixed with test programs): t tclass=sctp_socket permissive=1 [ 137.217399][ T28] audit: type=1400 audit(1774751663.268:953): avc: denied { setopt } for pid=5960 comm="syz.5.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.293585][ T5936] EXT4-fs error (device loop3): ext4_quota_enable:7188: comm syz.3.616: Bad quota inum: 16, type: 1 [ 137.349784][ T5936] loop3: lost filesystem error report for type 5 error -117 [ 137.445842][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.454563][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 137.454603][ C1] EXT4-fs (loop3): initial error at time 1774751663: ext4_quota_enable:7188 [ 137.454628][ C1] EXT4-fs (loop3): last error at time 1774751663: ext4_quota_enable:7188 [ 137.491444][ T5936] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=16). Please run e2fsck to fix. [ 137.552647][ T5936] EXT4-fs (loop3): mount failed [ 137.646518][ T5981] batadv0: entered promiscuous mode [ 137.654013][ T5981] vlan3: entered promiscuous mode [ 137.885833][ T5989] vlan2: entered allmulticast mode [ 137.947853][ T5989] bridge_slave_0: entered allmulticast mode [ 138.096521][ T5995] SET target dimension over the limit! [ 138.299355][ T28] audit: type=1400 audit(1774751664.378:954): avc: denied { setopt } for pid=5991 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.396116][ T5936] syz.3.616 (5936) used greatest stack depth: 9288 bytes left [ 138.760899][ T6025] netlink: 32 bytes leftover after parsing attributes in process `syz.1.644'. [ 138.886064][ T6019] loop4: detected capacity change from 0 to 8192 [ 138.923860][ T6019] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.949496][ T6018] IPVS: length: 1952540278 != 328507869144 [ 138.988656][ T6025] loop1: detected capacity change from 0 to 2048 [ 139.039573][ T4722] loop1: p3 p4 < > [ 139.046887][ T4722] loop1: p3 start 263168 is beyond EOD, truncated [ 139.063159][ T6035] loop4: detected capacity change from 0 to 1024 [ 139.076518][ T6025] loop1: p3 p4 < > [ 139.081207][ T6025] loop1: p3 start 263168 is beyond EOD, truncated [ 139.180908][ T6037] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 139.295219][ T6041] mmap: syz.4.652 (6041): VmData 29335552 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 139.361988][ T6050] loop4: detected capacity change from 0 to 764 [ 139.439448][ T6052] netlink: 15 bytes leftover after parsing attributes in process `syz.1.656'. [ 139.473183][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.657'. [ 139.572416][ T6056] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 139.596619][ T6058] loop1: detected capacity change from 0 to 1024 [ 139.757292][ T6064] lo speed is unknown, defaulting to 1000 [ 139.851715][ T6062] loop4: detected capacity change from 0 to 512 [ 139.952817][ T6082] loop4: detected capacity change from 0 to 512 [ 140.059648][ T6082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.083517][ T6082] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.097022][ T6085] loop0: detected capacity change from 0 to 128 [ 140.120531][ T6085] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.136634][ T6087] loop5: detected capacity change from 0 to 256 [ 140.220375][ T6085] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.238589][ T6087] FAT-fs (loop5): Directory bread(block 64) failed [ 140.245887][ T6087] FAT-fs (loop5): Directory bread(block 65) failed [ 140.252799][ T6087] FAT-fs (loop5): Directory bread(block 66) failed [ 140.259995][ T6087] FAT-fs (loop5): Directory bread(block 67) failed [ 140.267107][ T6087] FAT-fs (loop5): Directory bread(block 68) failed [ 140.274777][ T6087] FAT-fs (loop5): Directory bread(block 69) failed [ 140.282047][ T6087] FAT-fs (loop5): Directory bread(block 70) failed [ 140.289278][ T6087] FAT-fs (loop5): Directory bread(block 71) failed [ 140.296763][ T6087] FAT-fs (loop5): Directory bread(block 72) failed [ 140.304360][ T6087] FAT-fs (loop5): Directory bread(block 73) failed [ 140.319912][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.5.667'. [ 140.335688][ T6074] loop1: detected capacity change from 0 to 512 [ 140.372826][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.420044][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 140.420071][ T28] audit: type=1400 audit(1774751666.488:964): avc: denied { ioctl } for pid=6081 comm="syz.4.668" path="socket:[13479]" dev="sockfs" ino=13479 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.640957][ T28] audit: type=1400 audit(1774751666.718:965): avc: denied { create } for pid=6091 comm="syz.3.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.693696][ T6092] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.895708][ T6074] EXT4-fs error (device loop1): ext4_quota_enable:7188: comm syz.1.659: Bad quota inum: 16, type: 1 [ 140.919227][ T6092] EXT4-fs (loop3): 1 truncate cleaned up [ 140.972039][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.984324][ T6100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=6100 comm=syz.0.670 [ 141.008362][ T28] audit: type=1400 audit(1774751667.058:966): avc: denied { setopt } for pid=6096 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.038994][ T6092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.060902][ T6074] loop1: lost filesystem error report for type 5 error -117 [ 141.062076][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 141.068382][ T6074] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=16). Please run e2fsck to fix. [ 141.079988][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 141.080080][ C1] EXT4-fs (loop1): initial error at time 1774751667: ext4_quota_enable:7188 [ 141.080342][ C1] EXT4-fs (loop1): last error at time 1774751667: ext4_quota_enable:7188 [ 141.148199][ T28] audit: type=1400 audit(1774751667.058:967): avc: denied { ioctl } for pid=6096 comm="syz.0.670" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=12644 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.176965][ T28] audit: type=1400 audit(1774751667.058:968): avc: denied { getopt } for pid=6096 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.251549][ T6110] ext4: Unknown parameter 'uid<18446744073709551615' [ 141.256559][ T6074] EXT4-fs (loop1): mount failed [ 141.305021][ T28] audit: type=1400 audit(1774751667.058:969): avc: denied { write } for pid=6096 comm="syz.0.670" path="socket:[13501]" dev="sockfs" ino=13501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.395341][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.538492][ T6115] IPVS: length: 1152 != 8 [ 141.544535][ T6115] netlink: 16 bytes leftover after parsing attributes in process `syz.5.675'. [ 141.559503][ T6115] gre1: entered promiscuous mode [ 141.729090][ T28] audit: type=1400 audit(1774751667.488:970): avc: denied { mount } for pid=6108 comm="syz.0.674" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 142.737452][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 142.774344][ T6136] macvtap1: entered promiscuous mode [ 142.801158][ T6136] macvtap1: entered allmulticast mode [ 142.845580][ T6139] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 142.912623][ T6134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.679'. [ 142.934324][ T6139] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.680: bg 0: block 104: invalid block bitmap [ 142.992875][ T6139] loop4: lost filesystem error report for type 5 error -117 [ 142.993068][ T6139] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 143.001514][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 143.001535][ C0] EXT4-fs (loop4): initial error at time 1774751669: ext4_validate_block_bitmap:432 [ 143.001561][ C0] EXT4-fs (loop4): last error at time 1774751669: ext4_validate_block_bitmap:432 [ 143.153958][ T6139] loop4: lost filesystem error report for type 5 error -117 [ 143.154410][ T6139] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.680: invalid indirect mapped block 1 (level 1) [ 143.176050][ T6139] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 143.177061][ T6139] EXT4-fs (loop4): 1 truncate cleaned up [ 143.202865][ T6139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.385457][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.590162][ T28] audit: type=1400 audit(1774751669.558:971): avc: denied { create } for pid=6161 comm="syz.0.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 143.612080][ T28] audit: type=1400 audit(1774751669.568:972): avc: denied { setopt } for pid=6161 comm="syz.0.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 143.633884][ T28] audit: type=1400 audit(1774751669.608:973): avc: denied { ioctl } for pid=6161 comm="syz.0.688" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 143.873154][ T6172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.921134][ T6175] set_capacity_and_notify: 7 callbacks suppressed [ 143.921258][ T6175] loop5: detected capacity change from 0 to 512 [ 143.999483][ T6175] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 144.028281][ T6175] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 144.041606][ T6175] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 144.050436][ T6175] System zones: 0-2, 18-18, 34-35 [ 144.060813][ T6175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 144.082261][ T6182] loop0: detected capacity change from 0 to 1024 [ 144.137920][ T6182] loop0: detected capacity change from 0 to 512 [ 144.178517][ T4665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.188748][ T6182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.230896][ T6182] ext4 filesystem being mounted at /139/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.252771][ T6186] loop5: detected capacity change from 0 to 512 [ 144.272828][ T6186] EXT4-fs (loop5): Invalid default hash set in the superblock [ 144.326296][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.395778][ T6188] loop5: detected capacity change from 0 to 2048 [ 144.403655][ T6188] EXT4-fs: quotafile must be on filesystem root [ 144.429331][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.504345][ T6195] loop5: detected capacity change from 0 to 1024 [ 144.538458][ T6195] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.563486][ T6195] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.760697][ T6214] netlink: 40 bytes leftover after parsing attributes in process `syz.3.703'. [ 144.800108][ T6214] netlink: 40 bytes leftover after parsing attributes in process `syz.3.703'. [ 144.888763][ T6214] netlink: 40 bytes leftover after parsing attributes in process `syz.3.703'. [ 145.246877][ T6233] loop0: detected capacity change from 0 to 512 [ 145.256620][ T6226] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1545 sclass=netlink_xfrm_socket pid=6226 comm=syz.3.705 [ 145.317920][ T6233] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.707: corrupted in-inode xattr: invalid ea_ino [ 145.370983][ T6233] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 145.371147][ T6233] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.707: couldn't read orphan inode 15 (err -117) [ 145.382197][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 145.382237][ C0] EXT4-fs (loop0): initial error at time 1774751671: ext4_iget_extra_inode:5025: inode 15 [ 145.382271][ C0] EXT4-fs (loop0): last error at time 1774751671: ext4_iget_extra_inode:5025: inode 15 [ 145.489861][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 145.489878][ T28] audit: type=1400 audit(1774751671.558:982): avc: denied { mount } for pid=6249 comm="syz.4.714" name="/" dev="configfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 145.496460][ T6233] loop0: lost filesystem error report for type 5 error -117 [ 145.700204][ T28] audit: type=1326 audit(1774751671.778:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e883c819 code=0x7ffc0000 [ 145.736137][ T6233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.841175][ T6257] netlink: 'syz.3.713': attribute type 12 has an invalid length. [ 146.027108][ T6263] loop1: detected capacity change from 0 to 1024 [ 146.071403][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.126273][ T28] audit: type=1326 audit(1774751671.778:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6247 comm="syz.3.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e883c819 code=0x7ffc0000 [ 146.219118][ T6267] macvtap1: entered promiscuous mode [ 146.225571][ T6267] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 146.349247][ T6275] loop0: detected capacity change from 0 to 128 [ 146.389127][ T6275] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.410553][ T6278] lo speed is unknown, defaulting to 1000 [ 146.430108][ T6275] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.516183][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.604536][ T6286] netlink: 'syz.3.725': attribute type 1 has an invalid length. [ 146.637298][ T6282] loop4: detected capacity change from 0 to 4096 [ 146.681623][ T6282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.773518][ T6293] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.727: bg 0: block 424: padding at end of block bitmap is not set [ 146.799509][ T6293] loop0: lost filesystem error report for type 5 error -117 [ 146.808105][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 146.822871][ C1] EXT4-fs (loop0): initial error at time 1774751672: ext4_validate_block_bitmap:441 [ 146.832908][ C1] EXT4-fs (loop0): last error at time 1774751672: ext4_validate_block_bitmap:441 [ 146.912678][ T6297] xt_recent: Unsupported userspace flags (000000de) [ 146.942026][ T6293] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 146.978428][ T6293] loop0: lost filesystem error report for type 5 error -117 [ 146.978582][ T6293] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.727: invalid indirect mapped block 4294967295 (level 0) [ 147.021136][ T6293] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 147.021276][ T6293] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.727: invalid indirect mapped block 4294967295 (level 1) [ 147.068141][ T6293] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 147.068675][ T6293] EXT4-fs (loop0): 1 orphan inode deleted [ 147.101269][ T6293] EXT4-fs (loop0): 1 truncate cleaned up [ 147.130669][ T6293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.151865][ T6276] EXT4-fs error (device loop1): ext4_quota_enable:7188: comm syz.1.717: Bad quota inum: 16, type: 1 [ 147.169483][ T6276] loop1: lost filesystem error report for type 5 error -117 [ 147.173786][ T6276] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=16). Please run e2fsck to fix. [ 147.184446][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 147.185096][ C0] EXT4-fs (loop1): initial error at time 1774751673: ext4_quota_enable:7188 [ 147.185276][ C0] EXT4-fs (loop1): last error at time 1774751673: ext4_quota_enable:7188 [ 147.208915][ T6301] 9p: Bad value for 'rfdno' [ 147.212307][ T28] audit: type=1400 audit(1774751673.278:985): avc: denied { listen } for pid=6292 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.244422][ T6296] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 147.259731][ T6276] EXT4-fs (loop1): mount failed [ 147.274700][ T28] audit: type=1400 audit(1774751673.278:986): avc: denied { mounton } for pid=6292 comm="syz.0.727" path="/149/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.401235][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.435144][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.626455][ T6305] batadv0: entered promiscuous mode [ 147.638410][ T6305] vlan2: entered promiscuous mode [ 147.795778][ T6308] netlink: 'syz.4.731': attribute type 13 has an invalid length. [ 147.828449][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 147.984204][ T6315] SET target dimension over the limit! [ 148.114573][ T6317] vlan2: entered allmulticast mode [ 148.143685][ T6319] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.160452][ T6317] bridge_slave_0: entered allmulticast mode [ 148.187451][ T6319] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.368557][ T6324] 8021q: VLANs not supported on tunl0 [ 148.416216][ T6324] netlink: 72 bytes leftover after parsing attributes in process `syz.4.735'. [ 148.805627][ T6330] EXT4-fs error (device loop0): __ext4_fill_super:5563: inode #2: comm syz.0.737: unexpected EA_INODE flag [ 148.822413][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.735'. [ 148.897291][ T6324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.735'. [ 148.923535][ T6330] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 148.923920][ T6330] EXT4-fs (loop0): get root inode failed [ 148.934104][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 148.934127][ C0] EXT4-fs (loop0): initial error at time 1774751674: __ext4_fill_super:5563: inode 2 [ 148.934153][ C0] EXT4-fs (loop0): last error at time 1774751674: __ext4_fill_super:5563: inode 2 [ 149.298743][ T6335] lo speed is unknown, defaulting to 1000 [ 149.310327][ T6330] EXT4-fs (loop0): mount failed [ 149.411928][ T6336] lo speed is unknown, defaulting to 1000 [ 149.490805][ T6338] set_capacity_and_notify: 4 callbacks suppressed [ 149.490824][ T6338] loop4: detected capacity change from 0 to 512 [ 150.127568][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.137835][ T6330] netlink: 60 bytes leftover after parsing attributes in process `syz.0.737'. [ 150.185917][ T6330] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 150.222271][ T28] audit: type=1326 audit(1774751676.298:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6342 comm="syz.3.739" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27e883c819 code=0x0 [ 150.248134][ T6330] bridge2: entered promiscuous mode [ 150.254381][ T6330] bridge2: entered allmulticast mode [ 150.289070][ T6341] netlink: 32 bytes leftover after parsing attributes in process `syz.4.740'. [ 150.304438][ T4665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.373465][ T6341] loop4: detected capacity change from 0 to 2048 [ 150.488969][ T4722] loop4: p3 p4 < > [ 150.494330][ T6347] loop5: detected capacity change from 0 to 1024 [ 150.501506][ T4722] loop4: p3 start 263168 is beyond EOD, truncated [ 150.510298][ T6341] loop4: p3 p4 < > [ 150.514545][ T6341] loop4: p3 start 263168 is beyond EOD, truncated [ 150.528715][ T6347] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 150.725370][ T28] audit: type=1400 audit(1774751676.798:988): avc: denied { mounton } for pid=6348 comm="syz.0.742" path="/153/file0" dev="tmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.763160][ T6357] loop4: detected capacity change from 0 to 764 [ 151.216219][ T28] audit: type=1400 audit(1774751677.288:989): avc: denied { create } for pid=6367 comm="syz.5.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 151.259757][ T6366] audit: audit_backlog=65 > audit_backlog_limit=64 [ 151.274201][ T28] audit: type=1326 audit(1774751677.318:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a2ec819 code=0x7ffc0000 [ 151.274905][ T6366] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 151.318117][ T6372] netlink: 68 bytes leftover after parsing attributes in process `syz.3.750'. [ 151.359711][ T28] audit: type=1326 audit(1774751677.318:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a2ec819 code=0x7ffc0000 [ 151.362334][ T6366] audit: backlog limit exceeded [ 151.387848][ T28] audit: type=1326 audit(1774751677.318:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a2ec819 code=0x7ffc0000 [ 151.394998][ T6374] loop3: detected capacity change from 0 to 128 [ 151.417372][ T28] audit: type=1326 audit(1774751677.318:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a2ec819 code=0x7ffc0000 [ 151.471289][ T6374] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.484382][ T6374] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.501084][ T28] audit: type=1326 audit(1774751677.318:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6367 comm="syz.5.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83a2ec819 code=0x7ffc0000 [ 151.533195][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.588245][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.752'. [ 151.608202][ T6379] bridge_slave_0: left allmulticast mode [ 151.614851][ T6379] bridge_slave_0: left promiscuous mode [ 151.641558][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.674375][ T6388] loop1: detected capacity change from 0 to 1024 [ 151.682282][ T6388] ext4: Unknown parameter 'measure' [ 151.786833][ T6388] wireguard0: entered promiscuous mode [ 151.794013][ T6388] wireguard0: entered allmulticast mode [ 151.812515][ T6392] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 151.898211][ T6398] vlan3: entered promiscuous mode [ 151.924635][ T6399] netlink: 'syz.3.759': attribute type 5 has an invalid length. [ 152.030857][ T6415] loop0: detected capacity change from 0 to 512 [ 152.062327][ T6415] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 152.080246][ T6415] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 152.098829][ T6415] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 152.109461][ T6415] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 152.118503][ T6415] System zones: 0-2, 18-18, 34-35 [ 152.129201][ T6415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.539803][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.216277][ T6438] loop5: detected capacity change from 0 to 512 [ 153.255340][ T6438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 153.367042][ T6445] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.772: Unimplemented hash flags: 0x0001 [ 153.414519][ T6445] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.772: Corrupt directory, running e2fsck is recommended [ 153.448247][ T6445] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 3: comm syz.5.772: path /69/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 153.552794][ T4665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.843524][ T6449] netlink: 28 bytes leftover after parsing attributes in process `syz.5.774'. [ 153.857612][ T6449] netlink: 108 bytes leftover after parsing attributes in process `syz.5.774'. [ 153.877960][ T6456] FAULT_INJECTION: forcing a failure. [ 153.877960][ T6456] name failslab, interval 1, probability 0, space 0, times 0 [ 153.891688][ T6449] netlink: 28 bytes leftover after parsing attributes in process `syz.5.774'. [ 153.908114][ T6456] CPU: 0 UID: 0 PID: 6456 Comm: syz.3.777 Tainted: G W syzkaller #0 PREEMPT(full) [ 153.908193][ T6456] Tainted: [W]=WARN [ 153.908202][ T6456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 153.908217][ T6456] Call Trace: [ 153.908224][ T6456] [ 153.908233][ T6456] __dump_stack+0x1d/0x30 [ 153.908263][ T6456] dump_stack_lvl+0x95/0xd0 [ 153.908314][ T6456] dump_stack+0x15/0x1b [ 153.908338][ T6456] should_fail_ex+0x263/0x280 [ 153.908368][ T6456] should_failslab+0x8c/0xb0 [ 153.908440][ T6456] __kvmalloc_node_noprof+0x155/0x650 [ 153.908469][ T6456] ? page_pool_create_percpu+0x223/0x640 [ 153.908504][ T6456] page_pool_create_percpu+0x223/0x640 [ 153.908534][ T6456] page_pool_create+0x1a/0x30 [ 153.908631][ T6456] bpf_test_run_xdp_live+0x1a8/0x1360 [ 153.908668][ T6456] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 153.908695][ T6456] ? __pfx_autoremove_wake_function+0x10/0x10 [ 153.908851][ T6456] ? mutex_unlock+0x4e/0x90 [ 153.908868][ T6456] ? 0xffffffffa02054c0 [ 153.908929][ T6456] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 153.908959][ T6456] ? 0xffffffffa02054c0 [ 153.908973][ T6456] ? 0xffffffffa0203508 [ 153.908986][ T6456] ? 0xffffffffa0203558 [ 153.909006][ T6456] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 153.909107][ T6456] bpf_prog_test_run_xdp+0x57b/0xa10 [ 153.909196][ T6456] ? __rcu_read_unlock+0x4e/0x70 [ 153.909218][ T6456] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 153.909303][ T6456] bpf_prog_test_run+0x204/0x340 [ 153.909387][ T6456] __sys_bpf+0x52e/0x7e0 [ 153.909447][ T6456] __x64_sys_bpf+0x41/0x50 [ 153.909464][ T6456] x64_sys_call+0x10cb/0x3020 [ 153.909488][ T6456] do_syscall_64+0x12c/0x370 [ 153.909511][ T6456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.909636][ T6456] RIP: 0033:0x7f27e883c819 [ 153.909651][ T6456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.909722][ T6456] RSP: 002b:00007f27e728f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.909743][ T6456] RAX: ffffffffffffffda RBX: 00007f27e8ab5fa0 RCX: 00007f27e883c819 [ 153.909756][ T6456] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 153.909768][ T6456] RBP: 00007f27e728f090 R08: 0000000000000000 R09: 0000000000000000 [ 153.909780][ T6456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.909791][ T6456] R13: 00007f27e8ab6038 R14: 00007f27e8ab5fa0 R15: 00007fffbe5517d8 [ 153.909820][ T6456] [ 153.909830][ T6456] page_pool_create_percpu() gave up with errno -12 [ 153.967169][ T6458] loop1: detected capacity change from 0 to 256 [ 154.262726][ T6458] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.274528][ T6463] loop5: detected capacity change from 0 to 1024 [ 154.281776][ T6463] EXT4-fs: Ignoring removed i_version option [ 154.296245][ T6463] EXT4-fs: Ignoring removed bh option [ 154.322937][ T6467] bond3: entered promiscuous mode [ 154.380145][ T6463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.428851][ T4665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.529781][ T6479] loop3: detected capacity change from 0 to 1024 [ 154.536687][ T6479] EXT4-fs: dax option not supported [ 154.684882][ T6487] loop5: detected capacity change from 0 to 512 [ 154.702148][ T6487] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.790: corrupted in-inode xattr: invalid ea_ino [ 154.729837][ T6487] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 154.733003][ T6485] loop3: detected capacity change from 0 to 512 [ 154.735975][ T6487] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.790: couldn't read orphan inode 15 (err -117) [ 154.742678][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 154.742720][ C1] EXT4-fs (loop5): initial error at time 1774751936: ext4_iget_extra_inode:5025: inode 15 [ 154.742755][ C1] EXT4-fs (loop5): last error at time 1774751936: ext4_iget_extra_inode:5025: inode 15 [ 154.828763][ T6487] loop5: lost filesystem error report for type 5 error -117 [ 154.845997][ T6485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.868483][ T6485] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.883104][ T6487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.975340][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.136761][ T4665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.204485][ T6500] loop4: detected capacity change from 0 to 256 [ 155.243774][ T6500] loop4: detected capacity change from 0 to 2048 [ 155.298441][ T6499] loop3: detected capacity change from 0 to 1024 [ 155.309405][ T6499] EXT4-fs: Ignoring removed i_version option [ 155.343602][ T6500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.396695][ T6499] EXT4-fs: Ignoring removed bh option [ 155.485478][ T6499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.509026][ T6511] loop1: detected capacity change from 0 to 512 [ 155.516721][ T6511] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.540969][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.579661][ T6511] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 155.580359][ T6511] EXT4-fs: failed to create workqueue [ 155.597539][ T6511] EXT4-fs (loop1): mount failed [ 155.758384][ T6520] lo speed is unknown, defaulting to 1000 [ 155.947608][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.965259][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'. [ 156.004813][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'. [ 156.068698][ T6524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.800'. [ 156.078856][ T6524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.800'. [ 156.124708][ T6524] erspan0: entered promiscuous mode [ 156.194124][ T6524] gretap0: entered promiscuous mode [ 156.302040][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 156.302104][ T28] audit: type=1400 audit(1774751938.371:1073): avc: denied { ioctl } for pid=6536 comm="syz.1.805" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 156.337645][ T28] audit: type=1400 audit(1774751938.411:1074): avc: denied { getopt } for pid=6536 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 156.368806][ T6537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.805'. [ 156.463482][ T6552] loop4: detected capacity change from 0 to 1024 [ 156.537146][ T6552] EXT4-fs: Ignoring removed i_version option [ 156.543874][ T6552] EXT4-fs: Ignoring removed bh option [ 156.575463][ T6557] loop1: detected capacity change from 0 to 256 [ 156.608384][ T6557] FAT-fs (loop1): Directory bread(block 64) failed [ 156.617732][ T6557] FAT-fs (loop1): Directory bread(block 65) failed [ 156.623687][ T6552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.643247][ T6557] FAT-fs (loop1): Directory bread(block 66) failed [ 156.652993][ T6557] FAT-fs (loop1): Directory bread(block 67) failed [ 156.660991][ T6557] FAT-fs (loop1): Directory bread(block 68) failed [ 156.668165][ T6557] FAT-fs (loop1): Directory bread(block 69) failed [ 156.675068][ T6557] FAT-fs (loop1): Directory bread(block 70) failed [ 156.684104][ T6557] FAT-fs (loop1): Directory bread(block 71) failed [ 156.685199][ T23] IPVS: starting estimator thread 0... [ 156.691168][ T6557] FAT-fs (loop1): Directory bread(block 72) failed [ 156.703633][ T6557] FAT-fs (loop1): Directory bread(block 73) failed [ 156.749951][ T6557] netlink: 'syz.1.811': attribute type 10 has an invalid length. [ 156.783364][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.796401][ T6574] netlink: 72 bytes leftover after parsing attributes in process `syz.5.815'. [ 156.806428][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.815'. [ 156.817076][ T6557] syz.1.811: attempt to access beyond end of device [ 156.817076][ T6557] loop1: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 156.831151][ T6568] IPVS: using max 2640 ests per chain, 132000 per kthread [ 156.939842][ T6582] loop5: detected capacity change from 0 to 2048 [ 156.948324][ T6582] EXT4-fs: Mount option(s) incompatible with ext3 [ 157.497760][ T28] audit: type=1400 audit(1774751939.561:1075): avc: denied { read } for pid=6583 comm="syz.4.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 157.560133][ T6594] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.573409][ T6594] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.586895][ T6600] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.597539][ T6600] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 157.607434][ T6600] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 157.615933][ T6600] System zones: 0-2, 18-18, 34-34 [ 157.622198][ T6600] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.824: bad orphan inode 15 [ 157.632572][ T6600] loop5: lost filesystem error report for type 5 error -117 [ 157.633568][ T6600] ext4_test_bit(bit=14, block=18) = 1 [ 157.641891][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 157.641916][ C0] EXT4-fs (loop5): initial error at time 1774751939: ext4_orphan_get:1417 [ 157.641945][ C0] EXT4-fs (loop5): last error at time 1774751939: ext4_orphan_get:1417 [ 157.676470][ T6600] is_bad_inode(inode)=0 [ 157.688181][ T6600] NEXT_ORPHAN(inode)=2264924160 [ 157.693425][ T6600] max_ino=32 [ 157.696732][ T6600] i_nlink=0 [ 157.720050][ T6600] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.824: corrupted inode contents [ 157.735322][ T6600] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.738580][ T6600] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.824: mark_inode_dirty error [ 157.760452][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.760752][ T6600] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.773326][ T6600] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.824: corrupted inode contents [ 157.814094][ T6600] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.814311][ T6600] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.824: mark_inode_dirty error [ 157.837698][ T6600] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.837905][ T6600] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.824: mark inode dirty (error -117) [ 157.885766][ T6600] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.885986][ T6600] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 157.913026][ T6600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.986634][ T6611] EXT4-fs: Ignoring removed i_version option [ 158.008864][ T6611] EXT4-fs: Ignoring removed bh option [ 158.056726][ T6611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.415642][ T6621] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.824: bg 0: block 80: padding at end of block bitmap is not set [ 158.447124][ T6621] ext4: Unknown parameter '184467440737095516150xffffffffffffffff0xffffffffffffffff5q+-aRw ǔ&hӉ84' [ 158.915186][ T28] audit: type=1400 audit(1774751940.511:1076): avc: denied { remount } for pid=6599 comm="syz.5.824" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 158.937971][ T6624] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 158.998233][ T6624] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.830: Invalid block bitmap block 0 in block_group 0 [ 159.013340][ T6624] loop4: lost filesystem error report for type 5 error -117 [ 159.017270][ T6624] Quota error (device loop4): write_blk: dquota write failed [ 159.025302][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 159.025463][ C1] EXT4-fs (loop4): initial error at time 2000000000: ext4_read_block_bitmap_nowait:483 [ 159.025675][ C1] EXT4-fs (loop4): last error at time 2000000000: ext4_read_block_bitmap_nowait:483 [ 159.061576][ T6621] syz.5.824 (6621) used greatest stack depth: 8904 bytes left [ 159.070625][ T6624] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 159.084614][ T6624] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.830: Failed to acquire dquot type 0 [ 159.098103][ T6624] loop4: lost filesystem error report for type 5 error -117 [ 159.102309][ T6624] EXT4-fs error (device loop4): ext4_free_blocks:6724: comm syz.4.830: Freeing blocks not in datazone - block = 0, count = 4096 [ 159.126815][ T6624] loop4: lost filesystem error report for type 5 error -117 [ 159.182801][ T6624] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.830: Invalid inode bitmap blk 0 in block_group 0 [ 159.205437][ T6624] loop4: lost filesystem error report for type 5 error -117 [ 159.239330][ T6624] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 159.272863][ T6624] loop4: lost filesystem error report for type 5 error -117 [ 159.275196][ T6624] EXT4-fs (loop4): 1 orphan inode deleted [ 159.303065][ T6624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.351873][ T6627] kthread_run failed with err -4 [ 159.483981][ T6624] syz.4.830 (6624) used greatest stack depth: 7624 bytes left [ 159.497715][ T6631] iso9660: Unknown parameter 'ma]H [ 161.152926][ T3308] loop3: p3 start 263168 is beyond EOD, truncated [ 161.577643][ T1878] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 161.617461][ T6642] loop3: p3 p4 < > [ 161.668762][ T6642] loop3: p3 start 263168 is beyond EOD, truncated [ 161.677301][ T1878] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:9: Failed to release dquot type 0 [ 161.692558][ T1878] loop4: lost filesystem error report for type 5 error -117 [ 161.694320][ T4665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.741758][ T6646] loop0: detected capacity change from 0 to 764 [ 161.789503][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 161.798512][ T1033] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 161.815827][ T6650] loop4: detected capacity change from 0 to 4096 [ 161.851856][ T6650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.860912][ T6652] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 161.883834][ T3419] lo speed is unknown, defaulting to 1000 [ 161.953580][ T6651] loop3: detected capacity change from 0 to 8192 [ 162.080685][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.110338][ T3308] loop3: p1 < > p2 p4 < p5 > [ 162.115170][ T3308] loop3: partition table partially beyond EOD, truncated [ 162.136074][ T6661] loop5: detected capacity change from 0 to 1024 [ 162.143881][ T28] audit: type=1400 audit(2000000003.660:1077): avc: denied { sqpoll } for pid=6648 comm="syz.3.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 162.146733][ T3308] loop3: p1 start 134217728 is beyond EOD, [ 162.164892][ T6661] ext4: Unknown parameter 'measure' [ 162.225827][ T3308] truncated [ 162.252524][ T3308] loop3: p2 size 591360 extends beyond EOD, truncated [ 162.309131][ T3308] loop3: p5 size 591360 extends beyond EOD, truncated [ 162.338657][ T6669] xt_recent: Unsupported userspace flags (000000de) [ 162.360909][ T6651] loop3: p1 < > p2 p4 < p5 > [ 162.362721][ T28] audit: type=1400 audit(2000000003.880:1078): avc: denied { setopt } for pid=6671 comm="syz.5.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.377642][ T6651] loop3: partition table partially beyond EOD, truncated [ 162.451865][ T3427] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 162.462481][ T6651] loop3: p1 start 134217728 is beyond EOD, truncated [ 162.493684][ T6651] loop3: p2 size 591360 extends beyond EOD, truncated [ 162.539996][ T6651] loop3: p5 size 591360 extends beyond EOD, truncated [ 162.828169][ T3005] loop3: p1 < > p2 p4 < p5 > [ 162.838589][ T3005] loop3: partition table partially beyond EOD, truncated [ 162.860676][ T3005] loop3: p1 start 134217728 is beyond EOD, truncated [ 162.884399][ T3005] loop3: p2 size 591360 extends beyond EOD, truncated [ 162.909167][ T3005] loop3: p5 size 591360 extends beyond EOD, truncated [ 162.938423][ T6682] FAULT_INJECTION: forcing a failure. [ 162.938423][ T6682] name failslab, interval 1, probability 0, space 0, times 0 [ 162.997082][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 163.009211][ T4722] udevd[4722]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 163.020860][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 163.042770][ T6682] CPU: 0 UID: 0 PID: 6682 Comm: syz.3.847 Tainted: G W syzkaller #0 PREEMPT(full) [ 163.042806][ T6682] Tainted: [W]=WARN [ 163.042813][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 163.042824][ T6682] Call Trace: [ 163.042831][ T6682] [ 163.042838][ T6682] __dump_stack+0x1d/0x30 [ 163.042925][ T6682] dump_stack_lvl+0x95/0xd0 [ 163.042962][ T6682] dump_stack+0x15/0x1b [ 163.042989][ T6682] should_fail_ex+0x263/0x280 [ 163.043020][ T6682] ? __xdp_reg_mem_model+0x173/0x3e0 [ 163.043126][ T6682] should_failslab+0x8c/0xb0 [ 163.043152][ T6682] __kmalloc_cache_noprof+0x5f/0x410 [ 163.043241][ T6682] __xdp_reg_mem_model+0x173/0x3e0 [ 163.043271][ T6682] xdp_reg_mem_model+0x22/0x40 [ 163.043299][ T6682] bpf_test_run_xdp_live+0x1ec/0x1360 [ 163.043383][ T6682] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 163.043415][ T6682] ? __pfx_autoremove_wake_function+0x10/0x10 [ 163.043518][ T6682] ? mutex_unlock+0x4e/0x90 [ 163.043541][ T6682] ? 0xffffffffa02054c0 [ 163.043559][ T6682] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 163.043595][ T6682] ? 0xffffffffa02054c0 [ 163.043617][ T6682] ? 0xffffffffa0203508 [ 163.043633][ T6682] ? 0xffffffffa0203548 [ 163.043655][ T6682] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 163.043709][ T6682] bpf_prog_test_run_xdp+0x57b/0xa10 [ 163.043828][ T6682] ? __rcu_read_unlock+0x4e/0x70 [ 163.043868][ T6682] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 163.043901][ T6682] bpf_prog_test_run+0x204/0x340 [ 163.043937][ T6682] __sys_bpf+0x52e/0x7e0 [ 163.044045][ T6682] __x64_sys_bpf+0x41/0x50 [ 163.044118][ T6682] x64_sys_call+0x10cb/0x3020 [ 163.044151][ T6682] do_syscall_64+0x12c/0x370 [ 163.044181][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.044207][ T6682] RIP: 0033:0x7f27e883c819 [ 163.044224][ T6682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.044317][ T6682] RSP: 002b:00007f27e728f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 163.044343][ T6682] RAX: ffffffffffffffda RBX: 00007f27e8ab5fa0 RCX: 00007f27e883c819 [ 163.044360][ T6682] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 163.044375][ T6682] RBP: 00007f27e728f090 R08: 0000000000000000 R09: 0000000000000000 [ 163.044390][ T6682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.044402][ T6682] R13: 00007f27e8ab6038 R14: 00007f27e8ab5fa0 R15: 00007fffbe5517d8 [ 163.044500][ T6682] [ 163.306964][ T6684] loop0: detected capacity change from 0 to 2048 [ 163.318442][ T6684] FAT-fs (loop0): FAT read failed (blocknr 1056) [ 163.426609][ T6687] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 163.460291][ T6693] Cannot find del_set index 29 as target [ 163.492515][ T6692] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 163.506663][ T6696] loop1: detected capacity change from 0 to 512 [ 163.534797][ T6696] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.854: corrupted in-inode xattr: invalid ea_ino [ 163.582486][ T6696] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.584465][ T6696] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.854: couldn't read orphan inode 15 (err -117) [ 163.594699][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 163.594721][ C1] EXT4-fs (loop1): initial error at time 2000000005: ext4_iget_extra_inode:5025: inode 15 [ 163.594747][ C1] EXT4-fs (loop1): last error at time 2000000005: ext4_iget_extra_inode:5025: inode 15 [ 163.672099][ T6713] netlink: 40 bytes leftover after parsing attributes in process `syz.5.858'. [ 163.700816][ T6701] loop3: detected capacity change from 0 to 8192 [ 163.708211][ T6696] loop1: lost filesystem error report for type 5 error -117 [ 163.712680][ T6696] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.732796][ T6713] netlink: 40 bytes leftover after parsing attributes in process `syz.5.858'. [ 163.744524][ T6716] EXT4-fs: Ignoring removed nobh option [ 163.794166][ T6716] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 163.811321][ T6716] EXT4-fs (loop0): 1 truncate cleaned up [ 163.819153][ T6701] loop3: p1 < > p2 p4 < p5 > [ 163.824701][ T6716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.841833][ T6701] loop3: partition table partially beyond EOD, truncated [ 163.851015][ T6713] netlink: 40 bytes leftover after parsing attributes in process `syz.5.858'. [ 163.863276][ T6701] loop3: p1 start 134217728 is beyond EOD, truncated [ 163.872018][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.881582][ T6701] loop3: p2 size 591360 extends beyond EOD, truncated [ 163.940610][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.860'. [ 163.966495][ T6701] loop3: p5 size 591360 extends beyond EOD, truncated [ 163.986863][ T6722] EXT4-fs: Ignoring removed i_version option [ 164.071661][ T6722] EXT4-fs: Ignoring removed bh option [ 164.149983][ T6722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.237027][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 164.282767][ T4665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.292895][ T6736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.355025][ T6739] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.369800][ T6736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.413328][ T6739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.426578][ T6739] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.461735][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.523326][ T6748] xt_recent: Unsupported userspace flags (000000de) [ 164.544109][ T28] audit: type=1326 audit(2000000006.060:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e883c819 code=0x7ffc0000 [ 164.571326][ T28] audit: type=1326 audit(2000000006.060:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e883c819 code=0x7ffc0000 [ 164.597287][ T28] audit: type=1326 audit(2000000006.060:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f27e883c819 code=0x7ffc0000 [ 164.640351][ T28] audit: type=1326 audit(2000000006.060:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e883c819 code=0x7ffc0000 [ 164.708112][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.871'. [ 164.709345][ T28] audit: type=1326 audit(2000000006.060:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e883c819 code=0x7ffc0000 [ 164.744660][ T28] audit: type=1326 audit(2000000006.060:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f27e883c819 code=0x7ffc0000 [ 164.746601][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.871'. [ 164.772253][ T28] audit: type=1326 audit(2000000006.060:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6747 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27e883c819 code=0x7ffc0000 [ 164.891554][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.874'. [ 165.059040][ T6765] set_capacity_and_notify: 3 callbacks suppressed [ 165.059060][ T6765] loop3: detected capacity change from 0 to 256 [ 165.108570][ T6765] loop3: detected capacity change from 0 to 2048 [ 165.299541][ T6765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.470305][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.691656][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.827937][ T6789] loop5: detected capacity change from 0 to 512 [ 165.841641][ T6789] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 165.888440][ T6789] EXT4-fs (loop5): mount failed [ 166.199651][ T6805] ip6erspan0: entered allmulticast mode [ 166.257294][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.891'. [ 166.309856][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.891'. [ 166.344354][ T6824] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 166.470260][ T6843] xt_recent: Unsupported userspace flags (000000de) [ 166.517223][ T6844] loop5: detected capacity change from 0 to 4096 [ 166.533916][ T6844] EXT4-fs: Ignoring removed bh option [ 166.553229][ T6844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.631413][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 166.631433][ T28] audit: type=1400 audit(2000000008.150:1096): avc: denied { ioctl } for pid=6835 comm="syz.5.894" path="/104/file3/blkio.bfq.group_wait_time" dev="loop5" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 167.061083][ T6849] loop0: detected capacity change from 0 to 512 [ 167.087345][ T6849] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.111200][ T6849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.127619][ T6849] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.341734][ T3419] IPVS: starting estimator thread 0... [ 167.351804][ T4665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.364759][ T6855] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 167.383007][ T6857] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 167.428244][ T6856] IPVS: using max 2496 ests per chain, 124800 per kthread [ 167.563003][ T5233] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 167.574959][ T3427] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 167.604562][ T6865] loop1: detected capacity change from 0 to 512 [ 167.616067][ T3308] udevd[3308]: incorrect ext4 checksum on /dev/loop1 [ 167.625797][ T6865] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 167.641110][ T3308] udevd[3308]: incorrect ext4 checksum on /dev/loop1 [ 167.715139][ T6865] lo speed is unknown, defaulting to 1000 [ 167.817288][ T28] audit: type=1326 audit(2000000009.330:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5209f5c819 code=0x7ffc0000 [ 167.884465][ T28] audit: type=1326 audit(2000000009.330:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5209f5c819 code=0x7ffc0000 [ 167.921996][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.947160][ T28] audit: type=1326 audit(2000000009.370:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f5209f5c819 code=0x7ffc0000 [ 167.985098][ T6885] vlan3: entered promiscuous mode [ 168.008123][ T28] audit: type=1326 audit(2000000009.370:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5209f5c819 code=0x7ffc0000 [ 168.022339][ T6888] loop0: detected capacity change from 0 to 512 [ 168.058666][ T28] audit: type=1326 audit(2000000009.370:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5209f5c819 code=0x7ffc0000 [ 168.110155][ T28] audit: type=1326 audit(2000000009.370:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5209f5c819 code=0x7ffc0000 [ 168.148048][ T6888] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 168.163352][ T6888] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 168.164142][ T28] audit: type=1326 audit(2000000009.370:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5209f5c819 code=0x7ffc0000 [ 168.186543][ T6888] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 168.197424][ T28] audit: type=1326 audit(2000000009.370:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5209f5c819 code=0x7ffc0000 [ 168.230560][ T28] audit: type=1326 audit(2000000009.370:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5209f5c819 code=0x7ffc0000 [ 168.256377][ T6888] System zones: 0-2, 18-18, 34-34 [ 168.268162][ T6888] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.909: bad orphan inode 15 [ 168.281166][ T6888] loop0: lost filesystem error report for type 5 error -117 [ 168.282742][ T6888] ext4_test_bit(bit=14, block=18) = 1 [ 168.291079][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 168.291100][ C0] EXT4-fs (loop0): initial error at time 2000000009: ext4_orphan_get:1417 [ 168.291135][ C0] EXT4-fs (loop0): last error at time 2000000009: ext4_orphan_get:1417 [ 168.325149][ T6888] is_bad_inode(inode)=0 [ 168.329920][ T6888] NEXT_ORPHAN(inode)=2264924160 [ 168.335881][ T6888] max_ino=32 [ 168.339212][ T6888] i_nlink=0 [ 168.342563][ T6888] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.909: corrupted inode contents [ 168.356609][ T6888] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 168.356769][ T6888] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #15: comm syz.0.909: mark_inode_dirty error [ 168.380910][ T6888] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 168.381157][ T6888] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.909: corrupted inode contents [ 168.404993][ T6888] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 168.405232][ T6888] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.909: mark_inode_dirty error [ 168.429197][ T6888] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 168.429409][ T6888] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.909: mark inode dirty (error -117) [ 168.455794][ T6888] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 168.455985][ T6888] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 168.569419][ T6888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.735854][ T6896] loop1: detected capacity change from 0 to 1024 [ 168.778779][ T6896] EXT4-fs: Ignoring removed i_version option [ 168.785355][ T6896] EXT4-fs: Ignoring removed bh option [ 168.960614][ T6900] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.909: bg 0: block 80: padding at end of block bitmap is not set [ 168.981292][ T6902] tipc: Enabling of bearer rejected, failed to enable media [ 169.001231][ T6900] ext4: Unknown parameter '184467440737095516150xffffffffffffffff0xffffffffffffffff5q+-aRw ǔ&hӉ84' [ 169.063462][ T6896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.316834][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.343164][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.357583][ T6911] vlan2: entered promiscuous mode [ 169.413172][ T6913] lo speed is unknown, defaulting to 1000 [ 169.599144][ T6923] netlink: 'syz.1.918': attribute type 3 has an invalid length. [ 169.650171][ T6925] loop5: detected capacity change from 0 to 256 [ 169.695570][ T6925] loop5: detected capacity change from 0 to 2048 [ 169.827907][ T6925] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.964416][ T6920] lo speed is unknown, defaulting to 1000 [ 169.985956][ T6937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.011309][ T6937] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.059723][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.113377][ T6939] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 170.201282][ T6949] set_capacity_and_notify: 2 callbacks suppressed [ 170.201302][ T6949] loop0: detected capacity change from 0 to 1024 [ 170.215636][ T6949] EXT4-fs: Ignoring removed i_version option [ 170.255254][ T6949] EXT4-fs: Ignoring removed bh option [ 170.325103][ T6963] xt_recent: Unsupported userspace flags (000000de) [ 170.368893][ T6949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.382925][ T4665] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.487587][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.759780][ T6996] loop0: detected capacity change from 0 to 1024 [ 170.866880][ T6997] loop5: detected capacity change from 0 to 1024 [ 170.895718][ T7000] loop1: detected capacity change from 0 to 512 [ 170.957244][ T7000] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.932: corrupted in-inode xattr: invalid ea_ino [ 170.973214][ T6997] ext4: Bad value for 'stripe' [ 170.993613][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.933'. [ 171.138768][ T7000] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 171.139269][ T7000] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.932: couldn't read orphan inode 15 (err -117) [ 171.148599][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 171.148633][ C0] EXT4-fs (loop1): initial error at time 2000000002: ext4_iget_extra_inode:5025: inode 15 [ 171.148661][ C0] EXT4-fs (loop1): last error at time 2000000002: ext4_iget_extra_inode:5025: inode 15 [ 171.205823][ T7000] loop1: lost filesystem error report for type 5 error -117 [ 171.245684][ T7000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.700215][ T7016] loop0: detected capacity change from 0 to 512 [ 172.342565][ T7019] loop3: detected capacity change from 0 to 512 [ 172.399972][ T7018] loop4: detected capacity change from 0 to 256 [ 172.933478][ T5231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 172.994026][ T7018] FAT-fs (loop4): Directory bread(block 64) failed [ 173.001316][ T7018] FAT-fs (loop4): Directory bread(block 65) failed [ 173.009105][ T7018] FAT-fs (loop4): Directory bread(block 66) failed [ 173.016349][ T7018] FAT-fs (loop4): Directory bread(block 67) failed [ 173.023105][ T7018] FAT-fs (loop4): Directory bread(block 68) failed [ 173.029975][ T7018] FAT-fs (loop4): Directory bread(block 69) failed [ 173.036617][ T7018] FAT-fs (loop4): Directory bread(block 70) failed [ 173.043987][ T7018] FAT-fs (loop4): Directory bread(block 71) failed [ 173.051087][ T7018] FAT-fs (loop4): Directory bread(block 72) failed [ 173.057969][ T7018] FAT-fs (loop4): Directory bread(block 73) failed [ 173.280246][ T7016] EXT4-fs error (device loop0): ext4_quota_enable:7188: comm syz.0.930: Bad quota inum: 16, type: 1 [ 173.303649][ T7016] loop0: lost filesystem error report for type 5 error -117 [ 173.305296][ T7016] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=16). Please run e2fsck to fix. [ 173.313996][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 173.314066][ C0] EXT4-fs (loop0): initial error at time 2000000004: ext4_quota_enable:7188 [ 173.314286][ C0] EXT4-fs (loop0): last error at time 2000000004: ext4_quota_enable:7188 [ 173.380138][ T7016] EXT4-fs (loop0): mount failed [ 173.426212][ T7019] tipc: Started in network mode [ 173.432249][ T7019] tipc: Node identity ac1414aa, cluster identity 4711 [ 173.440086][ T7019] tipc: Enabling of bearer rejected, failed to enable media [ 174.418765][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.497394][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.941'. [ 174.687544][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.938'. [ 174.871799][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 174.871835][ T28] audit: type=1400 audit(2000000005.790:1140): avc: denied { getopt } for pid=7037 comm="syz.1.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 175.050646][ T7061] loop3: detected capacity change from 0 to 1024 [ 175.235630][ T7066] loop0: detected capacity change from 0 to 512 [ 175.552388][ T7072] loop3: detected capacity change from 0 to 512 [ 175.644362][ T7072] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.948: bg 0: block 64: padding at end of block bitmap is not set [ 175.677899][ T7072] loop3: lost filesystem error report for type 5 error -117 [ 175.681530][ T7072] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 175.689780][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 175.689963][ C0] EXT4-fs (loop3): initial error at time 2000000006: ext4_validate_block_bitmap:441 [ 175.690200][ C0] EXT4-fs (loop3): last error at time 2000000006: ext4_validate_block_bitmap:441 [ 175.753963][ T7072] loop3: lost filesystem error report for type 5 error -117 [ 175.762286][ T7072] EXT4-fs (loop3): 1 orphan inode deleted [ 175.793233][ T7072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.823939][ T7072] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.931755][ T5230] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 176.225135][ T5230] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:13: Failed to release dquot type 1 [ 176.261721][ T7078] loop0: detected capacity change from 0 to 1024 [ 176.970184][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.237210][ T7086] loop0: detected capacity change from 0 to 512 [ 177.339239][ T7086] EXT4-fs error (device loop0): ext4_quota_enable:7188: comm syz.0.950: Bad quota inum: 16, type: 1 [ 177.352025][ T7086] loop0: lost filesystem error report for type 5 error -117 [ 177.353629][ T7086] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=16). Please run e2fsck to fix. [ 177.362936][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 177.363009][ C1] EXT4-fs (loop0): initial error at time 2000000008: ext4_quota_enable:7188 [ 177.363477][ C1] EXT4-fs (loop0): last error at time 2000000008: ext4_quota_enable:7188 [ 177.410494][ T7086] EXT4-fs (loop0): mount failed [ 177.439269][ T7096] sctp: [Deprecated]: syz.3.952 (pid 7096) Use of int in max_burst socket option deprecated. [ 177.439269][ T7096] Use struct sctp_assoc_value instead [ 177.477413][ T7096] openvswitch: netlink: EtherType 0 is less than min 600 [ 177.501890][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'. [ 177.523164][ T7096] netlink: 204 bytes leftover after parsing attributes in process `syz.3.952'. [ 177.543429][ T7096] netlink: 84 bytes leftover after parsing attributes in process `syz.3.952'. [ 177.643752][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.955'. [ 178.439742][ T69] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 178.689467][ T28] audit: type=1400 audit(2000000009.610:1141): avc: denied { accept } for pid=7119 comm="syz.0.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.786695][ T28] audit: type=1400 audit(2000000009.700:1142): avc: denied { ioctl } for pid=7129 comm="syz.0.965" path="socket:[15329]" dev="sockfs" ino=15329 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 178.937692][ T7137] SET target dimension over the limit! [ 179.225835][ T7143] loop0: detected capacity change from 0 to 1024 [ 179.290057][ T7143] ext4: Unknown parameter 'nouser_xattr' [ 179.408936][ T28] audit: type=1400 audit(2000000010.320:1143): avc: denied { bind } for pid=7146 comm="syz.4.971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 179.452281][ T7147] netlink: 'syz.4.971': attribute type 25 has an invalid length. [ 179.461468][ T7147] netlink: 'syz.4.971': attribute type 3 has an invalid length. [ 179.461488][ T7147] netlink: 132 bytes leftover after parsing attributes in process `syz.4.971'. [ 179.762508][ T7168] loop4: detected capacity change from 0 to 256 [ 179.814322][ T7168] loop4: detected capacity change from 0 to 2048 [ 179.954264][ T7171] vlan3: entered promiscuous mode [ 180.022824][ T7174] loop3: detected capacity change from 0 to 2048 [ 180.038723][ T7174] EXT4-fs: Mount option(s) incompatible with ext3 [ 180.045978][ T7168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.064410][ T7162] loop0: detected capacity change from 0 to 32768 [ 180.106970][ T7182] netlink: 'syz.5.980': attribute type 1 has an invalid length. [ 180.107873][ T28] audit: type=1400 audit(2000000011.020:1144): avc: denied { connect } for pid=7160 comm="syz.0.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.137091][ T28] audit: type=1400 audit(2000000011.040:1145): avc: denied { read } for pid=7160 comm="syz.0.975" path="socket:[16156]" dev="sockfs" ino=16156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 180.140623][ T3310] loop0: p1 p3 < > [ 180.169684][ T7183] netlink: 36 bytes leftover after parsing attributes in process `syz.5.980'. [ 180.186488][ T7162] loop0: p1 p3 < > [ 180.198825][ T7186] netlink: 68 bytes leftover after parsing attributes in process `syz.3.981'. [ 180.208520][ T7182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.216448][ T7169] lo speed is unknown, defaulting to 1000 [ 180.281166][ T7188] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 180.306292][ T7192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.982'. [ 180.516935][ T4722] udevd[4722]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 180.535591][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 180.555734][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.557339][ T7219] vlan3: entered allmulticast mode [ 181.574382][ T7219] bridge_slave_0: entered allmulticast mode [ 181.696374][ T7217] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.710394][ T7226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7226 comm=syz.1.993 [ 181.751024][ T28] audit: type=1400 audit(2000000012.670:1146): avc: denied { bind } for pid=7222 comm="syz.3.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 181.883632][ T7238] netlink: 'syz.1.998': attribute type 6 has an invalid length. [ 181.895016][ T7236] lo speed is unknown, defaulting to 1000 [ 181.905028][ T7238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.998'. [ 182.000016][ T7251] loop1: detected capacity change from 0 to 1024 [ 182.413541][ T7260] loop1: detected capacity change from 0 to 512 [ 183.039751][ T1878] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 183.062480][ T7260] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 183.076497][ T7260] EXT4-fs (loop1): group descriptors corrupted! [ 184.509225][ T28] audit: type=1400 audit(2000000015.420:1147): avc: denied { connect } for pid=7272 comm="syz.5.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.542474][ T7271] FAULT_INJECTION: forcing a failure. [ 184.542474][ T7271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.568107][ T7271] CPU: 0 UID: 0 PID: 7271 Comm: syz.3.1006 Tainted: G W syzkaller #0 PREEMPT(full) [ 184.568147][ T7271] Tainted: [W]=WARN [ 184.568156][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.568169][ T7271] Call Trace: [ 184.568177][ T7271] [ 184.568186][ T7271] __dump_stack+0x1d/0x30 [ 184.568218][ T7271] dump_stack_lvl+0x95/0xd0 [ 184.568253][ T7271] dump_stack+0x15/0x1b [ 184.568325][ T7271] should_fail_ex+0x263/0x280 [ 184.568410][ T7271] should_fail+0xb/0x20 [ 184.568437][ T7271] should_fail_usercopy+0x1a/0x20 [ 184.568466][ T7271] _copy_to_user+0x20/0xa0 [ 184.568510][ T7271] bpf_test_finish+0x1a2/0x510 [ 184.568597][ T7271] bpf_prog_test_run_xdp+0x663/0xa10 [ 184.568663][ T7271] ? __rcu_read_unlock+0x4e/0x70 [ 184.568836][ T7271] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 184.568872][ T7271] bpf_prog_test_run+0x204/0x340 [ 184.568965][ T7271] __sys_bpf+0x52e/0x7e0 [ 184.569026][ T7271] __x64_sys_bpf+0x41/0x50 [ 184.569047][ T7271] x64_sys_call+0x10cb/0x3020 [ 184.569112][ T7271] do_syscall_64+0x12c/0x370 [ 184.569144][ T7271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.569222][ T7271] RIP: 0033:0x7f27e883c819 [ 184.569242][ T7271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.569264][ T7271] RSP: 002b:00007f27e728f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.569288][ T7271] RAX: ffffffffffffffda RBX: 00007f27e8ab5fa0 RCX: 00007f27e883c819 [ 184.569304][ T7271] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 184.569383][ T7271] RBP: 00007f27e728f090 R08: 0000000000000000 R09: 0000000000000000 [ 184.569399][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.569414][ T7271] R13: 00007f27e8ab6038 R14: 00007f27e8ab5fa0 R15: 00007fffbe5517d8 [ 184.569491][ T7271] [ 184.845829][ T7279] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 184.991984][ T7283] ipvlan0: entered promiscuous mode [ 185.288428][ T7293] lo speed is unknown, defaulting to 1000 [ 185.309608][ T7296] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1015'. [ 185.338184][ T7296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1015'. [ 185.368873][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1017'. [ 185.401540][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1017'. [ 185.696645][ T7313] loop0: detected capacity change from 0 to 1024 [ 185.721277][ T7313] ext4: Unknown parameter 'nouser_xattr' [ 186.144073][ T7328] loop4: detected capacity change from 0 to 512 [ 186.156897][ T7326] loop0: detected capacity change from 0 to 1024 [ 186.197284][ T7326] ext4: Unknown parameter 'measure' [ 186.220731][ T7328] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.1028: corrupted in-inode xattr: invalid ea_ino [ 186.299011][ T7328] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 186.299228][ T7328] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1028: couldn't read orphan inode 15 (err -117) [ 186.309976][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 186.309999][ C0] EXT4-fs (loop4): initial error at time 2000000017: ext4_iget_extra_inode:5025: inode 15 [ 186.310032][ C0] EXT4-fs (loop4): last error at time 2000000017: ext4_iget_extra_inode:5025: inode 15 [ 186.339191][ T7293] loop3: detected capacity change from 0 to 2048 [ 186.419044][ T7328] loop4: lost filesystem error report for type 5 error -117 [ 186.429720][ T7328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.669542][ T7293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.811520][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.861710][ T7293] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.124576][ T7338] loop4: detected capacity change from 0 to 512 [ 187.184030][ T7338] EXT4-fs: Ignoring removed oldalloc option [ 187.248223][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.286983][ T7338] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1030: invalid block [ 187.341335][ T7338] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 187.342995][ T7338] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1030: invalid indirect mapped block 4294967295 (level 1) [ 187.353436][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 187.353458][ C0] EXT4-fs (loop4): initial error at time 2000000018: ext4_get_branch:178: inode 11: block 4294967295 [ 187.353501][ C0] EXT4-fs (loop4): last error at time 2000000018: ext4_get_branch:178: inode 11: block 4294967295 [ 187.422135][ T7342] 8021q: VLANs not supported on vxcan1 [ 187.524910][ T7347] loop3: detected capacity change from 0 to 512 [ 187.557090][ T7347] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1033: invalid indirect mapped block 256 (level 2) [ 187.630566][ T7347] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 187.630922][ T7347] EXT4-fs (loop3): 2 truncates cleaned up [ 187.640380][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 187.640398][ C0] EXT4-fs (loop3): initial error at time 2000000018: ext4_free_branches:1023: inode 11 [ 187.640436][ C0] EXT4-fs (loop3): last error at time 2000000018: ext4_free_branches:1023: inode 11 [ 187.687034][ T7338] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 187.694126][ T7338] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1030: invalid indirect mapped block 4294967295 (level 1) [ 187.742313][ T7357] FAULT_INJECTION: forcing a failure. [ 187.742313][ T7357] name failslab, interval 1, probability 0, space 0, times 0 [ 187.775738][ T7357] CPU: 0 UID: 0 PID: 7357 Comm: syz.1.1036 Tainted: G W syzkaller #0 PREEMPT(full) [ 187.775835][ T7357] Tainted: [W]=WARN [ 187.775842][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.775853][ T7357] Call Trace: [ 187.775860][ T7357] [ 187.775868][ T7357] __dump_stack+0x1d/0x30 [ 187.775894][ T7357] dump_stack_lvl+0x95/0xd0 [ 187.775948][ T7357] dump_stack+0x15/0x1b [ 187.775969][ T7357] should_fail_ex+0x263/0x280 [ 187.775996][ T7357] should_failslab+0x8c/0xb0 [ 187.776030][ T7357] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 187.776059][ T7357] ? __alloc_skb+0x2d6/0x690 [ 187.776132][ T7357] __alloc_skb+0x2d6/0x690 [ 187.776170][ T7357] ? should_fail_ex+0x30/0x280 [ 187.776199][ T7357] ? __alloc_skb+0x200/0x690 [ 187.776225][ T7357] qrtr_port_remove+0x71/0x200 [ 187.776246][ T7357] qrtr_release+0x16a/0x200 [ 187.776280][ T7357] sock_close+0x6b/0x150 [ 187.776303][ T7357] ? __pfx_sock_close+0x10/0x10 [ 187.776329][ T7357] __fput+0x29b/0x650 [ 187.776358][ T7357] ____fput+0x1c/0x30 [ 187.776390][ T7357] task_work_run+0x130/0x1a0 [ 187.776433][ T7357] exit_to_user_mode_loop+0x1f4/0x6f0 [ 187.776457][ T7357] do_syscall_64+0x249/0x370 [ 187.776562][ T7357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.776585][ T7357] RIP: 0033:0x7f78c72ac819 [ 187.776601][ T7357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.776621][ T7357] RSP: 002b:00007f78c5cff028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 187.776653][ T7357] RAX: 0000000000000000 RBX: 00007f78c7525fa0 RCX: 00007f78c72ac819 [ 187.776666][ T7357] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 187.776691][ T7357] RBP: 00007f78c5cff090 R08: 0000000000000000 R09: 0000000000000000 [ 187.776704][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.776716][ T7357] R13: 00007f78c7526038 R14: 00007f78c7525fa0 R15: 00007ffeacc5b848 [ 187.776737][ T7357] [ 187.994302][ T7338] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 187.994839][ T7347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.024139][ T7347] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1033'. [ 188.075391][ T7338] EXT4-fs (loop4): 2 truncates cleaned up [ 188.082782][ T7338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.089634][ T28] audit: type=1400 audit(2000000018.950:1148): avc: denied { getopt } for pid=7346 comm="syz.3.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.098098][ T7360] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1033: bg 0: block 5: invalid block bitmap [ 188.150887][ T7360] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131587 with max blocks 1 with error 28 [ 188.165275][ T7360] EXT4-fs (loop3): This should not happen!! Data will be lost [ 188.165275][ T7360] [ 188.176108][ T7360] EXT4-fs (loop3): Total free blocks count 0 [ 188.183598][ T7360] EXT4-fs (loop3): Free/Dirty block details [ 188.190076][ T7360] EXT4-fs (loop3): free_blocks=0 [ 188.195171][ T7360] EXT4-fs (loop3): dirty_blocks=2 [ 188.202383][ T7360] EXT4-fs (loop3): Block reservation details [ 188.209641][ T7360] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 188.240483][ T3325] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.305948][ T7369] loop0: detected capacity change from 0 to 8192 [ 188.373383][ T7346] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 188.535598][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1043'. [ 188.562488][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1035'. [ 188.661573][ T28] audit: type=1400 audit(2000000019.570:1149): avc: denied { watch } for pid=7381 comm="syz.0.1044" path="/202/file0" dev="tmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 188.688638][ T5233] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.711931][ T7386] netlink: 'syz.0.1044': attribute type 4 has an invalid length. [ 188.776894][ T7387] xt_recent: Unsupported userspace flags (000000de) [ 189.209541][ T28] audit: type=1400 audit(2000000020.120:1150): avc: denied { write } for pid=7392 comm="syz.0.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 189.286434][ T7395] loop0: detected capacity change from 0 to 128 [ 189.339341][ T28] audit: type=1404 audit(2000000020.260:1151): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 189.427627][ T28] audit: type=1400 audit(2000000020.290:1152): avc: denied { create } for pid=7394 comm="syz.0.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 189.526099][ T28] audit: type=1400 audit(2000000020.290:1153): avc: denied { create } for pid=7394 comm="syz.0.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 189.589333][ T7391] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5123 sclass=netlink_audit_socket pid=7391 comm=syz.1.1048 [ 189.615337][ T7391] lo speed is unknown, defaulting to 1000 [ 189.625542][ T28] audit: type=1400 audit(2000000020.290:1154): avc: denied { execmem } for pid=7394 comm="syz.0.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 189.684723][ T28] audit: type=1400 audit(2000000020.290:1155): avc: denied { create } for pid=7394 comm="syz.0.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 189.706154][ T28] audit: type=1400 audit(2000000020.340:1156): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 189.732404][ T28] audit: type=1400 audit(2000000020.380:1157): avc: denied { read write } for pid=3325 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 189.970563][ T7422] lo speed is unknown, defaulting to 1000 [ 189.993382][ T7426] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 190.320638][ T7446] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1072'. [ 190.523675][ T7459] FAULT_INJECTION: forcing a failure. [ 190.523675][ T7459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.548207][ T7459] CPU: 1 UID: 0 PID: 7459 Comm: syz.0.1078 Tainted: G W syzkaller #0 PREEMPT(full) [ 190.548252][ T7459] Tainted: [W]=WARN [ 190.548260][ T7459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 190.548274][ T7459] Call Trace: [ 190.548283][ T7459] [ 190.548292][ T7459] __dump_stack+0x1d/0x30 [ 190.548359][ T7459] dump_stack_lvl+0x95/0xd0 [ 190.548384][ T7459] dump_stack+0x15/0x1b [ 190.548408][ T7459] should_fail_ex+0x263/0x280 [ 190.548440][ T7459] should_fail+0xb/0x20 [ 190.548516][ T7459] should_fail_usercopy+0x1a/0x20 [ 190.548546][ T7459] strncpy_from_user+0x27/0x250 [ 190.548566][ T7459] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 190.548592][ T7459] do_getname+0x59/0x1c0 [ 190.548685][ T7459] getname_flags+0x1d/0x30 [ 190.548711][ T7459] __se_sys_statx+0x5e/0x1b0 [ 190.548737][ T7459] ? vfs_write+0x86e/0x9f0 [ 190.548756][ T7459] ? __rcu_read_unlock+0x4e/0x70 [ 190.548780][ T7459] ? __fget_files+0x184/0x1c0 [ 190.548882][ T7459] ? mutex_lock+0x57/0x90 [ 190.548915][ T7459] ? mutex_unlock+0x4e/0x90 [ 190.548949][ T7459] ? fput+0x8f/0xc0 [ 190.548972][ T7459] ? ksys_write+0x194/0x1a0 [ 190.548990][ T7459] __x64_sys_statx+0x67/0x80 [ 190.549016][ T7459] x64_sys_call+0x1ab/0x3020 [ 190.549102][ T7459] do_syscall_64+0x12c/0x370 [ 190.549171][ T7459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.549203][ T7459] RIP: 0033:0x7f32830dc819 [ 190.549222][ T7459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.549241][ T7459] RSP: 002b:00007f3281b37028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 190.549262][ T7459] RAX: ffffffffffffffda RBX: 00007f3283355fa0 RCX: 00007f32830dc819 [ 190.549275][ T7459] RDX: 0000000000006000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 190.549289][ T7459] RBP: 00007f3281b37090 R08: 0000000000000000 R09: 0000000000000000 [ 190.549356][ T7459] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 190.549368][ T7459] R13: 00007f3283356038 R14: 00007f3283355fa0 R15: 00007ffe23cfc968 [ 190.549387][ T7459] [ 190.845990][ T7466] IPVS: length: 1152 != 8 [ 190.851385][ T7466] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1081'. [ 190.864086][ T7466] gre2: entered promiscuous mode [ 190.929507][ T7475] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1083'. [ 191.117059][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1098'. [ 191.166364][ T7506] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1098'. [ 191.227249][ T7513] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1101'. [ 191.832379][ T7544] lo speed is unknown, defaulting to 1000 [ 191.865511][ T7545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65534 sclass=netlink_route_socket pid=7545 comm=syz.5.1113 [ 192.011453][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 192.088474][ T7549] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.1114'. [ 192.180831][ T7551] netlink: 'syz.4.1115': attribute type 10 has an invalid length. [ 192.848979][ T7568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64016 sclass=netlink_route_socket pid=7568 comm=syz.4.1121 [ 192.932067][ T7572] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 193.088829][ T7581] FAULT_INJECTION: forcing a failure. [ 193.088829][ T7581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.095517][ T28] kauditd_printk_skb: 497 callbacks suppressed [ 193.095534][ T28] audit: type=1400 audit(2000000002.070:1655): avc: denied { execmem } for pid=7580 comm="syz.5.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 193.129335][ T7581] CPU: 0 UID: 0 PID: 7581 Comm: syz.4.1128 Tainted: G W syzkaller #0 PREEMPT(full) [ 193.129414][ T7581] Tainted: [W]=WARN [ 193.129421][ T7581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.129434][ T7581] Call Trace: [ 193.129466][ T7581] [ 193.129514][ T7581] __dump_stack+0x1d/0x30 [ 193.129542][ T7581] dump_stack_lvl+0x95/0xd0 [ 193.129567][ T7581] dump_stack+0x15/0x1b [ 193.129589][ T7581] should_fail_ex+0x263/0x280 [ 193.129686][ T7581] should_fail+0xb/0x20 [ 193.129712][ T7581] should_fail_usercopy+0x1a/0x20 [ 193.129740][ T7581] strncpy_from_user+0x27/0x250 [ 193.129761][ T7581] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 193.129812][ T7581] do_getname+0x59/0x1c0 [ 193.129838][ T7581] getname_flags+0x1d/0x30 [ 193.129876][ T7581] __se_sys_statx+0x5e/0x1b0 [ 193.129946][ T7581] ? vfs_write+0x86e/0x9f0 [ 193.129965][ T7581] ? __rcu_read_unlock+0x4e/0x70 [ 193.129989][ T7581] ? __fget_files+0x184/0x1c0 [ 193.130041][ T7581] ? mutex_lock+0x57/0x90 [ 193.130113][ T7581] ? mutex_unlock+0x4e/0x90 [ 193.130131][ T7581] ? fput+0x8f/0xc0 [ 193.130156][ T7581] ? ksys_write+0x194/0x1a0 [ 193.130177][ T7581] __x64_sys_statx+0x67/0x80 [ 193.130259][ T7581] x64_sys_call+0x1ab/0x3020 [ 193.130286][ T7581] do_syscall_64+0x12c/0x370 [ 193.130313][ T7581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.130380][ T7581] RIP: 0033:0x7f5209f5c819 [ 193.130433][ T7581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.130452][ T7581] RSP: 002b:00007f52089b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 193.130475][ T7581] RAX: ffffffffffffffda RBX: 00007f520a1d5fa0 RCX: 00007f5209f5c819 [ 193.130491][ T7581] RDX: 0000000000006000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 193.130522][ T7581] RBP: 00007f52089b7090 R08: 0000000000000000 R09: 0000000000000000 [ 193.130598][ T7581] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 193.130610][ T7581] R13: 00007f520a1d6038 R14: 00007f520a1d5fa0 R15: 00007ffd28545968 [ 193.130631][ T7581] [ 193.373767][ T28] audit: type=1400 audit(2000000002.160:1656): avc: denied { read write } for pid=3325 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 193.409238][ T28] audit: type=1400 audit(2000000002.220:1657): avc: denied { execmem } for pid=7580 comm="syz.5.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 193.453926][ T7594] 8021q: VLANs not supported on vcan0 [ 193.468615][ T28] audit: type=1400 audit(2000000002.260:1658): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 193.548113][ T28] audit: type=1400 audit(2000000002.270:1659): avc: denied { create } for pid=7586 comm="syz.0.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 193.597356][ T28] audit: type=1400 audit(2000000002.270:1660): avc: denied { create } for pid=7580 comm="syz.5.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 193.621622][ T7612] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 193.647842][ T3316] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.655078][ T3316] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 193.667742][ T3318] audit: audit_backlog=65 > audit_backlog_limit=64 [ 193.668092][ T28] audit: type=1400 audit(2000000002.270:1661): avc: denied { create } for pid=7580 comm="syz.5.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 193.687706][ T7617] FAULT_INJECTION: forcing a failure. [ 193.687706][ T7617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.727459][ T7617] CPU: 0 UID: 0 PID: 7617 Comm: syz.0.1143 Tainted: G W syzkaller #0 PREEMPT(full) [ 193.727496][ T7617] Tainted: [W]=WARN [ 193.727504][ T7617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.727517][ T7617] Call Trace: [ 193.727524][ T7617] [ 193.727554][ T7617] __dump_stack+0x1d/0x30 [ 193.727586][ T7617] dump_stack_lvl+0x95/0xd0 [ 193.727644][ T7617] dump_stack+0x15/0x1b [ 193.727665][ T7617] should_fail_ex+0x263/0x280 [ 193.727697][ T7617] should_fail+0xb/0x20 [ 193.727723][ T7617] should_fail_usercopy+0x1a/0x20 [ 193.727796][ T7617] _copy_from_user+0x1c/0xb0 [ 193.727921][ T7617] kstrtouint_from_user+0x69/0xf0 [ 193.727965][ T7617] proc_fail_nth_write+0x50/0x160 [ 193.728038][ T7617] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 193.728065][ T7617] vfs_write+0x269/0x9f0 [ 193.728084][ T7617] ? __rcu_read_unlock+0x4e/0x70 [ 193.728148][ T7617] ? __fget_files+0x184/0x1c0 [ 193.728175][ T7617] ? mutex_lock+0x57/0x90 [ 193.728212][ T7617] ksys_write+0xdc/0x1a0 [ 193.728235][ T7617] __x64_sys_write+0x40/0x50 [ 193.728256][ T7617] x64_sys_call+0x27e1/0x3020 [ 193.728354][ T7617] do_syscall_64+0x12c/0x370 [ 193.728384][ T7617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.728406][ T7617] RIP: 0033:0x7f328309d04e [ 193.728459][ T7617] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 193.728480][ T7617] RSP: 002b:00007f3281b36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.728552][ T7617] RAX: ffffffffffffffda RBX: 00007f3281b376c0 RCX: 00007f328309d04e [ 193.728566][ T7617] RDX: 0000000000000001 RSI: 00007f3281b370a0 RDI: 0000000000000003 [ 193.728579][ T7617] RBP: 00007f3281b37090 R08: 0000000000000000 R09: 0000000000000000 [ 193.728593][ T7617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.728607][ T7617] R13: 00007f3283356038 R14: 00007f3283355fa0 R15: 00007ffe23cfc968 [ 193.728678][ T7617] [ 194.063731][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'. [ 194.176391][ T7649] lo speed is unknown, defaulting to 1000 [ 194.284157][ T7662] bond3: entered promiscuous mode [ 194.293685][ T7662] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.310440][ T7665] FAULT_INJECTION: forcing a failure. [ 194.310440][ T7665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.337195][ T7665] CPU: 1 UID: 0 PID: 7665 Comm: syz.5.1165 Tainted: G W syzkaller #0 PREEMPT(full) [ 194.337292][ T7665] Tainted: [W]=WARN [ 194.337300][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.337314][ T7665] Call Trace: [ 194.337322][ T7665] [ 194.337332][ T7665] __dump_stack+0x1d/0x30 [ 194.337395][ T7665] dump_stack_lvl+0x95/0xd0 [ 194.337423][ T7665] dump_stack+0x15/0x1b [ 194.337448][ T7665] should_fail_ex+0x263/0x280 [ 194.337549][ T7665] should_fail+0xb/0x20 [ 194.337815][ T7665] should_fail_usercopy+0x1a/0x20 [ 194.337842][ T7665] _copy_from_user+0x1c/0xb0 [ 194.337955][ T7665] snd_seq_write+0x1d5/0x560 [ 194.337992][ T7665] vfs_writev+0x42b/0x900 [ 194.338021][ T7665] ? __pfx_snd_seq_write+0x10/0x10 [ 194.338053][ T7665] do_writev+0xe9/0x210 [ 194.338082][ T7665] __x64_sys_writev+0x45/0x50 [ 194.338191][ T7665] x64_sys_call+0x1c0c/0x3020 [ 194.338223][ T7665] do_syscall_64+0x12c/0x370 [ 194.338254][ T7665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.338353][ T7665] RIP: 0033:0x7fd83a2ec819 [ 194.338373][ T7665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.338443][ T7665] RSP: 002b:00007fd838d3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 194.338468][ T7665] RAX: ffffffffffffffda RBX: 00007fd83a565fa0 RCX: 00007fd83a2ec819 [ 194.338485][ T7665] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000003 [ 194.338539][ T7665] RBP: 00007fd838d3f090 R08: 0000000000000000 R09: 0000000000000000 [ 194.338554][ T7665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 194.338566][ T7665] R13: 00007fd83a566038 R14: 00007fd83a565fa0 R15: 00007ffc60df47c8 [ 194.338587][ T7665] [ 194.528630][ T1878] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 194.909475][ T7687] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 195.111650][ T7702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1180'. [ 195.637736][ T7748] __nla_validate_parse: 3 callbacks suppressed [ 195.637760][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 195.678301][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 195.722095][ T7754] lo speed is unknown, defaulting to 1000 [ 195.802607][ T7761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'. [ 195.812094][ T7761] bridge_slave_1: left allmulticast mode [ 195.818786][ T7761] bridge_slave_1: left promiscuous mode [ 195.824999][ T7761] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.834452][ T7759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=7759 comm=syz.3.1202 [ 195.849793][ T7761] bridge_slave_0: left allmulticast mode [ 195.860036][ T7761] bridge_slave_0: left promiscuous mode [ 195.866372][ T7761] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.894703][ T7766] FAULT_INJECTION: forcing a failure. [ 195.894703][ T7766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.913849][ T7766] CPU: 1 UID: 0 PID: 7766 Comm: syz.3.1204 Tainted: G W syzkaller #0 PREEMPT(full) [ 195.913875][ T7766] Tainted: [W]=WARN [ 195.913880][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.913888][ T7766] Call Trace: [ 195.913929][ T7766] [ 195.913935][ T7766] __dump_stack+0x1d/0x30 [ 195.913955][ T7766] dump_stack_lvl+0x95/0xd0 [ 195.914036][ T7766] dump_stack+0x15/0x1b [ 195.914050][ T7766] should_fail_ex+0x263/0x280 [ 195.914069][ T7766] should_fail+0xb/0x20 [ 195.914148][ T7766] should_fail_usercopy+0x1a/0x20 [ 195.914187][ T7766] _copy_to_user+0x20/0xa0 [ 195.914207][ T7766] simple_read_from_buffer+0xb5/0x130 [ 195.914268][ T7766] proc_fail_nth_read+0x10e/0x150 [ 195.914322][ T7766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 195.914341][ T7766] vfs_read+0x1ab/0x7f0 [ 195.914400][ T7766] ? __rcu_read_unlock+0x4e/0x70 [ 195.914415][ T7766] ? __fget_files+0x184/0x1c0 [ 195.914431][ T7766] ? mutex_lock+0x57/0x90 [ 195.914481][ T7766] ksys_read+0xdc/0x1a0 [ 195.914504][ T7766] __x64_sys_read+0x40/0x50 [ 195.914522][ T7766] x64_sys_call+0x2886/0x3020 [ 195.914546][ T7766] do_syscall_64+0x12c/0x370 [ 195.914600][ T7766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.914616][ T7766] RIP: 0033:0x7f27e87fd04e [ 195.914632][ T7766] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.914645][ T7766] RSP: 002b:00007f27e728efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 195.914734][ T7766] RAX: ffffffffffffffda RBX: 00007f27e728f6c0 RCX: 00007f27e87fd04e [ 195.914744][ T7766] RDX: 000000000000000f RSI: 00007f27e728f0a0 RDI: 0000000000000003 [ 195.914753][ T7766] RBP: 00007f27e728f090 R08: 0000000000000000 R09: 0000000000000000 [ 195.914761][ T7766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.914770][ T7766] R13: 00007f27e8ab6038 R14: 00007f27e8ab5fa0 R15: 00007fffbe5517d8 [ 195.914793][ T7766] [ 196.498390][ T7800] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1216'. [ 197.042596][ T7819] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1221'. [ 197.362964][ T7848] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 197.581942][ T7857] lo speed is unknown, defaulting to 1000 [ 198.099870][ T28] kauditd_printk_skb: 574 callbacks suppressed [ 198.099888][ T28] audit: type=1400 audit(2000000000.780:2206): avc: denied { read write } for pid=3325 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 198.183141][ T28] audit: type=1400 audit(2000000000.820:2207): avc: denied { prog_load } for pid=7868 comm="syz.4.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 198.236253][ T28] audit: type=1400 audit(2000000000.820:2208): avc: denied { prog_load } for pid=7868 comm="syz.4.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 198.277676][ T7874] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1241'. [ 198.282620][ T28] audit: type=1400 audit(2000000000.860:2209): avc: denied { read write } for pid=3325 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 198.490692][ T28] audit: type=1400 audit(2000000000.860:2210): avc: denied { create } for pid=7870 comm="syz.4.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 198.555578][ T28] audit: type=1400 audit(2000000000.860:2211): avc: denied { prog_load } for pid=7870 comm="syz.4.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 198.618168][ T28] audit: type=1400 audit(2000000000.860:2212): avc: denied { read } for pid=7870 comm="syz.4.1240" dev="nsfs" ino=4026532672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 198.661440][ T28] audit: type=1400 audit(2000000000.860:2213): avc: denied { create } for pid=7870 comm="syz.4.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 198.669012][ T7879] netlink: 'syz.3.1243': attribute type 39 has an invalid length. [ 198.708061][ T28] audit: type=1400 audit(2000000000.860:2214): avc: denied { map_create } for pid=7870 comm="syz.4.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 198.753286][ T28] audit: type=1400 audit(2000000000.860:2215): avc: denied { create } for pid=7870 comm="syz.4.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=0 [ 198.866620][ T7887] netlink: 'syz.5.1246': attribute type 21 has an invalid length. [ 198.954462][ T7893] netlink: 'syz.3.1249': attribute type 1 has an invalid length. [ 198.982550][ T7889] macsec1: left allmulticast mode [ 198.989134][ T7889] geneve1: left allmulticast mode [ 199.002658][ T7889] wireguard0: left allmulticast mode [ 199.010900][ T7889] ip6erspan0: left allmulticast mode [ 199.214891][ T7912] 8021q: VLANs not supported on vcan0 [ 199.290766][ T7917] bond_slave_0: entered promiscuous mode [ 199.297000][ T7917] bond_slave_1: entered promiscuous mode [ 199.348258][ T7917] vlan3: entered promiscuous mode [ 199.364294][ T7917] bond0: entered promiscuous mode [ 199.542104][ T7935] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 200.199997][ T5231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 200.574400][ T7969] netlink: 'syz.3.1278': attribute type 11 has an invalid length. [ 200.582860][ T7969] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1278'. [ 200.824962][ T7983] netlink: 'syz.3.1284': attribute type 10 has an invalid length. [ 200.834504][ T7983] hsr0: entered promiscuous mode [ 200.842157][ T7983] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 200.885199][ T7983] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 200.899813][ T7983] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 200.929809][ T7989] FAULT_INJECTION: forcing a failure. [ 200.929809][ T7989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.958787][ T7989] CPU: 0 UID: 0 PID: 7989 Comm: syz.3.1286 Tainted: G W syzkaller #0 PREEMPT(full) [ 200.958825][ T7989] Tainted: [W]=WARN [ 200.958833][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 200.958847][ T7989] Call Trace: [ 200.958860][ T7989] [ 200.958870][ T7989] __dump_stack+0x1d/0x30 [ 200.958902][ T7989] dump_stack_lvl+0x95/0xd0 [ 200.958980][ T7989] dump_stack+0x15/0x1b [ 200.959001][ T7989] should_fail_ex+0x263/0x280 [ 200.959030][ T7989] should_fail+0xb/0x20 [ 200.959055][ T7989] should_fail_usercopy+0x1a/0x20 [ 200.959096][ T7989] _copy_from_user+0x1c/0xb0 [ 200.959190][ T7989] snd_seq_write+0x1d5/0x560 [ 200.959216][ T7989] vfs_writev+0x42b/0x900 [ 200.959239][ T7989] ? __pfx_snd_seq_write+0x10/0x10 [ 200.959327][ T7989] do_writev+0xe9/0x210 [ 200.959355][ T7989] __x64_sys_writev+0x45/0x50 [ 200.959380][ T7989] x64_sys_call+0x1c0c/0x3020 [ 200.959406][ T7989] do_syscall_64+0x12c/0x370 [ 200.959458][ T7989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.959480][ T7989] RIP: 0033:0x7f27e883c819 [ 200.959496][ T7989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.959555][ T7989] RSP: 002b:00007f27e728f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 200.959580][ T7989] RAX: ffffffffffffffda RBX: 00007f27e8ab5fa0 RCX: 00007f27e883c819 [ 200.959597][ T7989] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000003 [ 200.959613][ T7989] RBP: 00007f27e728f090 R08: 0000000000000000 R09: 0000000000000000 [ 200.959625][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.959709][ T7989] R13: 00007f27e8ab6038 R14: 00007f27e8ab5fa0 R15: 00007fffbe5517d8 [ 200.959740][ T7989] [ 201.535233][ T8021] lo speed is unknown, defaulting to 1000 [ 201.590845][ T8026] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8026 comm=syz.0.1301 [ 201.876714][ T8039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1307'. [ 202.036981][ T8053] lo speed is unknown, defaulting to 1000 [ 202.336148][ T8068] FAULT_INJECTION: forcing a failure. [ 202.336148][ T8068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.347390][ T8065] netlink: 'syz.1.1316': attribute type 1 has an invalid length. [ 202.364128][ T8068] CPU: 1 UID: 0 PID: 8068 Comm: syz.3.1317 Tainted: G W syzkaller #0 PREEMPT(full) [ 202.364167][ T8068] Tainted: [W]=WARN [ 202.364175][ T8068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 202.364188][ T8068] Call Trace: [ 202.364197][ T8068] [ 202.364206][ T8068] __dump_stack+0x1d/0x30 [ 202.364237][ T8068] dump_stack_lvl+0x95/0xd0 [ 202.364265][ T8068] dump_stack+0x15/0x1b [ 202.364297][ T8068] should_fail_ex+0x263/0x280 [ 202.364588][ T8068] should_fail+0xb/0x20 [ 202.364724][ T8068] should_fail_usercopy+0x1a/0x20 [ 202.364755][ T8068] _copy_from_user+0x1c/0xb0 [ 202.364788][ T8068] kstrtouint_from_user+0x69/0xf0 [ 202.364874][ T8068] proc_fail_nth_write+0x50/0x160 [ 202.364908][ T8068] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 202.364940][ T8068] vfs_write+0x269/0x9f0 [ 202.364961][ T8068] ? __rcu_read_unlock+0x4e/0x70 [ 202.365003][ T8068] ? __fget_files+0x184/0x1c0 [ 202.365040][ T8068] ? mutex_lock+0x57/0x90 [ 202.365077][ T8068] ksys_write+0xdc/0x1a0 [ 202.365228][ T8068] __x64_sys_write+0x40/0x50 [ 202.365248][ T8068] x64_sys_call+0x27e1/0x3020 [ 202.365306][ T8068] do_syscall_64+0x12c/0x370 [ 202.365336][ T8068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.365393][ T8068] RIP: 0033:0x7f27e87fd04e [ 202.365412][ T8068] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 202.365505][ T8068] RSP: 002b:00007f27e728efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 202.365528][ T8068] RAX: ffffffffffffffda RBX: 00007f27e728f6c0 RCX: 00007f27e87fd04e [ 202.365544][ T8068] RDX: 0000000000000001 RSI: 00007f27e728f0a0 RDI: 0000000000000004 [ 202.365559][ T8068] RBP: 00007f27e728f090 R08: 0000000000000000 R09: 0000000000000000 [ 202.365573][ T8068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.365659][ T8068] R13: 00007f27e8ab6038 R14: 00007f27e8ab5fa0 R15: 00007fffbe5517d8 [ 202.365682][ T8068] [ 202.655509][ T8075] vlan3: entered allmulticast mode [ 202.706898][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 202.730732][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'. [ 202.760767][ T8077] netlink: 'syz.3.1318': attribute type 5 has an invalid length. [ 202.789472][ T8077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1318'. [ 202.815268][ T8084] lo speed is unknown, defaulting to 1000 [ 202.835597][ T8077] geneve2: entered promiscuous mode [ 202.847956][ T8077] geneve2: entered allmulticast mode [ 203.109281][ T28] kauditd_printk_skb: 782 callbacks suppressed [ 203.109298][ T28] audit: type=1400 audit(2000000003.360:2998): avc: denied { read write } for pid=8089 comm="syz.1.1324" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 203.169476][ T28] audit: type=1400 audit(2000000003.390:2999): avc: denied { mounton } for pid=8089 comm="syz.1.1324" path="/230/file0" dev="tmpfs" ino=1247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 203.193650][ T1923] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 203.215635][ T1923] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 203.236087][ T28] audit: type=1400 audit(2000000003.390:3000): avc: denied { execmem } for pid=8089 comm="syz.1.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 203.266441][ T1923] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 203.277665][ T1923] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 203.292992][ T28] audit: type=1400 audit(2000000003.400:3001): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 203.320230][ T28] audit: type=1400 audit(2000000003.540:3002): avc: denied { read write } for pid=4665 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 203.352530][ T28] audit: type=1400 audit(2000000003.540:3003): avc: denied { read } for pid=8095 comm="syz.1.1326" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 203.355111][ T8100] netlink: 'syz.5.1327': attribute type 1 has an invalid length. [ 203.375721][ T28] audit: type=1400 audit(2000000003.540:3004): avc: denied { name_bind } for pid=8095 comm="syz.1.1326" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 203.375754][ T28] audit: type=1400 audit(2000000003.600:3005): avc: denied { read write } for pid=8099 comm="syz.5.1327" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 203.502347][ T28] audit: type=1400 audit(2000000003.750:3006): avc: denied { name_bind } for pid=8099 comm="syz.5.1327" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 203.560000][ T28] audit: type=1400 audit(2000000003.750:3007): avc: denied { create } for pid=8099 comm="syz.5.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 203.872351][ T8107] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1329'. [ 204.037245][ T8111] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.1330'. [ 204.782010][ T8120] lo speed is unknown, defaulting to 1000 [ 204.916039][ T8123] lo speed is unknown, defaulting to 1000 [ 204.940972][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1335'. [ 205.135037][ T8141] lo speed is unknown, defaulting to 1000 [ 205.316356][ T8153] lo speed is unknown, defaulting to 1000 [ 205.767785][ T8164] geneve2: left allmulticast mode [ 205.832107][ T8183] 8021q: VLANs not supported on vcan0 [ 205.841637][ T8181] lo speed is unknown, defaulting to 1000 [ 205.968564][ T5231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.009513][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 206.033457][ T8212] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 206.049316][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1370'. [ 206.202674][ T8225] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 206.653973][ T8239] SET target dimension over the limit! [ 206.706533][ T8243] sctp: [Deprecated]: syz.0.1382 (pid 8243) Use of int in maxseg socket option. [ 206.706533][ T8243] Use struct sctp_assoc_value instead [ 207.199684][ T8259] netlink: 2759 bytes leftover after parsing attributes in process `syz.5.1388'. [ 207.221044][ T8259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8259 comm=syz.5.1388 [ 207.254967][ T8259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8259 comm=syz.5.1388 [ 207.312465][ T8273] netlink: 'syz.5.1392': attribute type 5 has an invalid length. [ 207.357846][ T8277] FAULT_INJECTION: forcing a failure. [ 207.357846][ T8277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.393919][ T8277] CPU: 1 UID: 0 PID: 8277 Comm: syz.5.1395 Tainted: G W syzkaller #0 PREEMPT(full) [ 207.393961][ T8277] Tainted: [W]=WARN [ 207.394040][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 207.394051][ T8277] Call Trace: [ 207.394057][ T8277] [ 207.394065][ T8277] __dump_stack+0x1d/0x30 [ 207.394097][ T8277] dump_stack_lvl+0x95/0xd0 [ 207.394161][ T8277] dump_stack+0x15/0x1b [ 207.394186][ T8277] should_fail_ex+0x263/0x280 [ 207.394315][ T8277] should_fail+0xb/0x20 [ 207.394342][ T8277] should_fail_usercopy+0x1a/0x20 [ 207.394372][ T8277] _copy_from_user+0x1c/0xb0 [ 207.394400][ T8277] snd_seq_write+0x1d5/0x560 [ 207.394565][ T8277] vfs_writev+0x42b/0x900 [ 207.394589][ T8277] ? __pfx_snd_seq_write+0x10/0x10 [ 207.394696][ T8277] do_writev+0xe9/0x210 [ 207.394721][ T8277] __x64_sys_writev+0x45/0x50 [ 207.394769][ T8277] x64_sys_call+0x1c0c/0x3020 [ 207.394795][ T8277] do_syscall_64+0x12c/0x370 [ 207.394844][ T8277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.394906][ T8277] RIP: 0033:0x7fd83a2ec819 [ 207.394927][ T8277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.394945][ T8277] RSP: 002b:00007fd838d3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 207.395000][ T8277] RAX: ffffffffffffffda RBX: 00007fd83a565fa0 RCX: 00007fd83a2ec819 [ 207.395017][ T8277] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000003 [ 207.395033][ T8277] RBP: 00007fd838d3f090 R08: 0000000000000000 R09: 0000000000000000 [ 207.395048][ T8277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.395143][ T8277] R13: 00007fd83a566038 R14: 00007fd83a565fa0 R15: 00007ffc60df47c8 [ 207.395164][ T8277] [ 207.932129][ T8304] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1406'. [ 207.969892][ T8304] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1406'. [ 207.992685][ T8304] netlink: 'syz.5.1406': attribute type 6 has an invalid length. [ 208.118638][ T28] kauditd_printk_skb: 440 callbacks suppressed [ 208.118733][ T28] audit: type=1400 audit(2000000008.370:3448): avc: denied { create } for pid=8312 comm="syz.5.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 208.179152][ T8319] ipt_REJECT: TCP_RESET invalid for non-tcp [ 208.185974][ T28] audit: type=1400 audit(2000000008.400:3449): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 208.213559][ T8323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1414'. [ 208.224570][ T8323] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1414'. [ 208.234035][ T28] audit: type=1400 audit(2000000008.410:3450): avc: denied { read write } for pid=3325 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 208.236222][ T8323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1414'. [ 208.286565][ T28] audit: type=1400 audit(2000000008.420:3451): avc: denied { read } for pid=8320 comm="syz.0.1413" dev="nsfs" ino=4026532509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 208.312138][ T28] audit: type=1400 audit(2000000008.420:3452): avc: denied { create } for pid=8320 comm="syz.0.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 208.387810][ T28] audit: type=1400 audit(2000000008.430:3453): avc: denied { read write } for pid=8320 comm="syz.0.1413" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 208.416910][ T28] audit: type=1400 audit(2000000008.430:3454): avc: denied { create } for pid=8321 comm="syz.4.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 208.440566][ T28] audit: type=1400 audit(2000000008.430:3455): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 208.467259][ T28] audit: type=1400 audit(2000000008.460:3456): avc: denied { module_request } for pid=8321 comm="syz.4.1414" kmod="arpt_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 208.496468][ T28] audit: type=1400 audit(2000000008.530:3457): avc: denied { create } for pid=8324 comm="syz.0.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 208.702064][ T8347] lo speed is unknown, defaulting to 1000 [ 208.939122][ T8358] lo speed is unknown, defaulting to 1000 [ 209.295987][ T8388] lo speed is unknown, defaulting to 1000 [ 209.413308][ T8399] Cannot find del_set index 29 as target [ 209.789689][ T8424] lo speed is unknown, defaulting to 1000 [ 210.274602][ T8452] lo speed is unknown, defaulting to 1000 [ 210.500578][ T8464] bond3: entered promiscuous mode [ 210.532962][ T8467] netlink: 1104 bytes leftover after parsing attributes in process `syz.4.1471'. [ 211.086559][ T8492] netlink: 'syz.4.1478': attribute type 4 has an invalid length. [ 211.304493][ T8499] veth0_virt_wifi: entered promiscuous mode [ 211.718443][ T1878] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.737633][ T8502] ================================================================== [ 211.745957][ T8502] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 211.755033][ T8502] [ 211.757376][ T8502] write to 0xffff8881054dd5e8 of 8 bytes by task 8501 on cpu 1: [ 211.765377][ T8502] shmem_file_splice_read+0x470/0x600 [ 211.770983][ T8502] splice_direct_to_actor+0x26e/0x670 [ 211.776647][ T8502] do_splice_direct+0x119/0x1a0 [ 211.781633][ T8502] do_sendfile+0x382/0x650 [ 211.786076][ T8502] __x64_sys_sendfile64+0x105/0x150 [ 211.791298][ T8502] x64_sys_call+0x2dc4/0x3020 [ 211.796091][ T8502] do_syscall_64+0x12c/0x370 [ 211.800855][ T8502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.806829][ T8502] [ 211.809146][ T8502] write to 0xffff8881054dd5e8 of 8 bytes by task 8502 on cpu 0: [ 211.817122][ T8502] shmem_file_splice_read+0x470/0x600 [ 211.822783][ T8502] splice_direct_to_actor+0x26e/0x670 [ 211.828337][ T8502] do_splice_direct+0x119/0x1a0 [ 211.833465][ T8502] do_sendfile+0x382/0x650 [ 211.838066][ T8502] __x64_sys_sendfile64+0x105/0x150 [ 211.843554][ T8502] x64_sys_call+0x2dc4/0x3020 [ 211.848685][ T8502] do_syscall_64+0x12c/0x370 [ 211.853889][ T8502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.860047][ T8502] [ 211.862386][ T8502] value changed: 0x0000000000156000 -> 0x0000000000160000 [ 211.869494][ T8502] [ 211.871814][ T8502] Reported by Kernel Concurrency Sanitizer on: [ 211.878300][ T8502] CPU: 0 UID: 0 PID: 8502 Comm: syz.0.1484 Tainted: G W syzkaller #0 PREEMPT(full) [ 211.889772][ T8502] Tainted: [W]=WARN [ 211.893665][ T8502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 211.904590][ T8502] ================================================================== [ 217.478857][ T2000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration